Function at 0x14001b280
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x6c0
mov rax, qword [0x1400af008]
xor rax, rsp
mov qword [rsp + 0x6b8], rax
mov qword [rsp + 0x120], rdx
mov r13, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x80], rdx
xor r15d, r15d
mov dword [rsp + 0x48], r15d
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x4a0]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x2f8], r15
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], 7
mov word [rsp + 0x2f8], r15w
mov dword [rsp + 0x48], 2
lea rdx, [rsp + 0x338]
mov rcx, r13
call fcn.14001da30
nop
cmp qword [rsp + 0x348], r15
je 0x14001b3a2
lea r8, [rsp + 0x338]
cmp qword [rsp + 0x350], 8
cmovae r8, qword [rsp + 0x338]
mov edx, 0x104
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0x104
lea rcx, [rsp + 0x4a0]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
test eax, eax
jne 0x14001b3a2
lea rax, [rsp + 0x4a0]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14001b380
lea rdx, [rsp + 0x4a0]
lea rcx, [rsp + 0x2f8]
call fcn.140006420
jmp 0x14001b3a9
mov rsi, 0xffffffffffffffff
mov rdx, qword [rsp + 0x350]
cmp rdx, 8
jb 0x14001b3f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x338]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b3ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b3ef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x348], r15
mov qword [rsp + 0x350], 7
mov word [rsp + 0x338], r15w
lea rcx, [rsp + 0x2f8]
cmp qword [rsp + 0x310], 8
cmovae rcx, qword [rsp + 0x2f8]
mov qword [rsp + 0xa0], r15
lea r8, [rsp + 0xa0]
mov edx, dword [rsp + 0x308]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140006c90
mov r14, qword [rsp + 0xa0]
mov qword [rsp + 0x2f0], r14
mov rdx, qword [rsp + 0x310]
cmp rdx, 8
jb 0x14001b4a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b4a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b4a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], 7
mov word [rsp + 0x2f8], r15w
lea rdx, [rsp + 0x3d8]
mov rcx, r13
call fcn.14001da30
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001b4e5
mov rax, qword [rax]
mov qword [rsp + 0x98], r15
lea r8, [rsp + 0x98]
mov edx, ecx
mov rcx, rax
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140006c90
mov r12, qword [rsp + 0x98]
mov qword [rsp + 0x2e8], r12
mov rdx, qword [rsp + 0x3f0]
cmp rdx, 8
jb 0x14001b561
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b55c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b55c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov rbx, r15
mov qword [rsp + 0x78], rbx
mov rdi, r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x118], r15
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001b5de
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rsi, qword [rsp + 0x120]
mov qword [rsi], r15
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001b5bf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r15
test r12, r12
je 0x14001b5cd
mov rcx, r12
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test r14, r14
je 0x14001d185
mov rcx, r14
jmp 0x14001d180
lea rax, [rsp + 0x240]
mov qword [rsp + 0x90], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x240], xmm0
mov rcx, qword [r13 + 0x118]
test rcx, rcx
je 0x14001b61b
lock inc dword [rcx + 8]
mov rcx, qword [r13 + 0x118]
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x50]
mov rax, qword [r13 + 0x110]
mov qword [rsp + 0x240], rax
mov qword [rsp + 0x248], rcx
lea rax, [rsp + 0x250]
mov qword [rsp + 0x220], rax
movdqu xmmword [rsp + 0x250], xmm0
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x14001b66c
lock inc dword [rcx + 8]
mov rcx, qword [r13 + 0x108]
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x50]
mov rax, qword [r13 + 0x100]
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x258], rcx
xor edx, edx
mov r13, qword [rsp + 0x98]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x298], r15
mov qword [rsp + 0x2a8], r15
mov qword [rsp + 0x2b0], 7
mov r8, rsi
inc r8
cmp word [rax + r8*2], 0
jne 0x14001b6b4
mov rdx, rax
lea rcx, [rsp + 0x298]
call fcn.140006420
nop
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x250]
lea r8, [rsp + 0x298]
lea rdx, [rsp + 0x280]
call fcn.14001f1c0
lea rcx, [rsp + 0x40]
cmp rcx, rax
je 0x14001b71e
mov rsi, qword [rax]
mov qword [rax], r15
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001b719
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], rsi
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x14001b730
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, qword [rsp + 0x40]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
mov r12, qword [0x1400b41c0]
cmp qword [r12 + 8], 0
je 0x14001b7d1
mov r14, qword [r12]
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], 0
jne 0x14001b7a4
nop word [rax + rax]
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.140020480
test al, al
je 0x14001b798
mov rsi, qword [rsi + 0x10]
jmp 0x14001b79e
mov r14, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x14001b780
cmp byte [r14 + 0x19], 0
jne 0x14001b7bd
lea r8, [r14 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.140020480
test al, al
je 0x14001b7c1
mov r14, qword [r12]
mov rax, qword [0x1400b41c0]
cmp r14, qword [rax]
jne 0x14001ce13
lea rax, [0x1400b41e0]
mov qword [rsp + 0x288], rax
mov byte [rsp + 0x290], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001b7fe
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rsp + 0x290], 1
lea rdx, [rsp + 0x318]
mov rcx, qword [rsp + 0x70]
call fcn.14001db30
nop
lea rdx, [rsp + 0xf8]
mov r13, qword [rsp + 0xa0]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0xf8]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x168], xmm0
lea r8, [rsp + 0x170]
lea rdx, [rsp + 0x168]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d1b5
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0x168]
call fcn.140019220
mov rcx, qword [rsp + 0x168]
add rcx, rsi
mov r9d, 2
lea r8, [0x140073df4]
mov edx, r9d
call fcn.140019220
mov qword [rsp + 0x228], r15
lea rdx, [rsp + 0x228]
mov rcx, qword [rsp + 0x170]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d1bd
mov qword [rsp + 0x170], r15
mov r14, qword [rsp + 0x228]
mov qword [rsp + 0x2b8], r14
mov rsi, qword [rsp + 0x328]
mov qword [rsp + 0xf0], rsi
lea r12, [rsp + 0x318]
cmp qword [rsp + 0x330], 8
cmovae r12, qword [rsp + 0x318]
lea rdx, [rsp + 0xfc]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0xe8], rax
mov eax, dword [rsp + 0xfc]
mov qword [rsp + 0x88], rax
lea ecx, [rax + rsi]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x138]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d1c5
mov rsi, qword [rsp + 0x88]
add rsi, rsi
mov r9, rsi
mov r8, qword [rsp + 0xe8]
mov rdx, rsi
mov rcx, qword [rsp + 0x138]
call fcn.140019220
mov rax, qword [rsp + 0xf0]
lea rdx, [rax + rax]
mov rcx, qword [rsp + 0x138]
add rcx, rsi
mov r9, rdx
mov r8, r12
call fcn.140019220
mov qword [rsp + 0xf0], r15
lea rdx, [rsp + 0xf0]
mov rcx, qword [rsp + 0x140]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d1cd
mov qword [rsp + 0x140], r15
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0x278], rsi
lea r8, [0x140073b68]
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x198]
call fcn.1400194b0
nop
mov r12, qword [rsp + 0x70]
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.1400193d0
nop
lea r8, [r12 + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.1400193d0
lea rcx, [rsp + 0x78]
cmp rcx, rax
je 0x14001ba41
mov rbx, qword [rax]
mov qword [rax], r15
mov qword [rsp + 0x78], rbx
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001ba5b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r15
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001ba75
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r15
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001ba8f
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r15
test rsi, rsi
je 0x14001ba9d
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test r14, r14
je 0x14001baaa
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
lea rdx, [rsp + 0x100]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0x100]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x128], xmm0
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d1d5
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0x128]
call fcn.140019220
mov rcx, qword [rsp + 0x128]
add rcx, rsi
mov r9d, 2
lea r8, [0x140073df4]
mov edx, r9d
call fcn.140019220
mov qword [rsp + 0xe8], r15
lea rdx, [rsp + 0xe8]
mov rcx, qword [rsp + 0x130]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d1dd
mov qword [rsp + 0x130], r15
mov r14, qword [rsp + 0xe8]
mov qword [rsp + 0x2c0], r14
mov r13, qword [rsp + 0x328]
lea r12, [rsp + 0x318]
cmp qword [rsp + 0x330], 8
cmovae r12, qword [rsp + 0x318]
lea rdx, [rsp + 0x104]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x88], rax
mov esi, dword [rsp + 0x104]
lea ecx, [rsi + r13]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x158], xmm0
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x158]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d1e5
add rsi, rsi
mov r9, rsi
mov r8, qword [rsp + 0x88]
mov rdx, rsi
mov rcx, qword [rsp + 0x158]
call fcn.140019220
lea rdx, [r13*2]
mov rcx, qword [rsp + 0x158]
add rcx, rsi
mov r9, rdx
mov r8, r12
call fcn.140019220
mov qword [rsp + 0x88], r15
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x160]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d1ed
mov qword [rsp + 0x160], r15
mov rsi, qword [rsp + 0x88]
mov qword [rsp + 0x208], rsi
lea r8, [0x140073b68]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1a8]
call fcn.1400194b0
nop
mov r8, qword [rsp + 0x70]
add r8, 8
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.1400193d0
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001bc98
mov rdi, qword [rax]
mov qword [rax], r15
mov qword [rsp + 0x50], rdi
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001bcb2
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r15
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001bccc
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r15
test rsi, rsi
je 0x14001bcda
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test r14, r14
je 0x14001bce7
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001bd00
mov qword [rsp + 0x378], r15
mov qword [rsp + 0x388], r15
mov qword [rsp + 0x390], 7
mov word [rsp + 0x378], r15w
mov rdx, rax
lea rcx, [rsp + 0x378]
call fcn.140006420
mov eax, 0xfffc
mov dword [rsp + 0xc0], eax
lea rcx, [rsp + 0x378]
call fcn.140011750
test al, al
sete sil
mov rdx, qword [rsp + 0x390]
cmp rdx, 8
jb 0x14001bdaa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x378]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bda5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001bda5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
test sil, sil
je 0x14001c1bd
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsi + 0x100]
test rcx, rcx
je 0x14001c1bd
add rcx, 0xb8
cmp qword [rcx + 0x18], 8
jb 0x14001bdff
mov rcx, qword [rcx]
mov qword [rsp + 0x110], r15
mov rdx, r12
nop word [rax + rax]
inc rdx
cmp word [rcx + rdx*2], 0
jne 0x14001be10
lea r8, [rsp + 0x110]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140006c90
mov r13, qword [rsp + 0x110]
mov qword [rsp + 0x2c8], r13
mov rax, qword [rsi + 0x100]
add rax, 0x28
mov qword [rsp + 0xe0], rax
lea rdx, [rsp + 0x108]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0x108]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x148]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d1f5
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0x148]
call fcn.140019220
mov rcx, qword [rsp + 0x148]
add rcx, rsi
mov r9d, 2
lea r8, [0x140073df4]
mov edx, r9d
call fcn.140019220
mov qword [rsp + 0x1b0], r15
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x150]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d1fd
mov qword [rsp + 0x150], r15
mov r14, qword [rsp + 0x1b0]
mov qword [rsp + 0x270], r14
mov r8, qword [rsp + 0xe0]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x1c8]
call fcn.1400193d0
nop
lea r8, [0x140073b68]
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.1400194b0
nop
mov rsi, qword [rsp + 0x70]
lea r8, [rsi + 8]
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.1400193d0
nop
lea r8, [rsi + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.1400193d0
lea rcx, [rsp + 0x78]
cmp rcx, rax
je 0x14001bf9b
mov rsi, qword [rax]
mov qword [rax], r15
test rbx, rbx
je 0x14001bf8e
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rbx, rsi
mov qword [rsp + 0x78], rbx
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001bfb5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r15
mov rcx, qword [rsp + 0x210]
test rcx, rcx
je 0x14001bfcf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x210], r15
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001bfe9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r15
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001c003
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r15
test r14, r14
je 0x14001c010
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov r14, qword [rsi + 0x100]
lea rdx, [rsp + 0x10c]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r13, rax
mov esi, dword [rsp + 0x10c]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x178], xmm0
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x178]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001d205
add rsi, rsi
mov r9, rsi
mov r8, r13
mov rdx, rsi
mov rcx, qword [rsp + 0x178]
call fcn.140019220
mov rcx, qword [rsp + 0x178]
add rcx, rsi
mov r9d, 2
lea r8, [0x140073df4]
mov edx, r9d
call fcn.140019220
mov qword [rsp + 0xe0], r15
lea rdx, [rsp + 0xe0]
mov rcx, qword [rsp + 0x180]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001d20d
mov qword [rsp + 0x180], r15
mov rsi, qword [rsp + 0xe0]
mov qword [rsp + 0x268], rsi
mov eax, 0x3ffffc
mov dword [rsp + 0xc0], eax
lea r8, [r14 + 0x28]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x1e0]
call fcn.1400193d0
nop
lea r8, [0x140073b68]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.1400194b0
nop
mov r8, qword [rsp + 0x70]
add r8, 8
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.1400193d0
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001c14f
mov r14, qword [rax]
mov qword [rax], r15
test rdi, rdi
je 0x14001c147
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rdi, r14
mov qword [rsp + 0x50], r14
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001c169
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r15
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001c183
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r15
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x14001c19d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e0], r15
test rsi, rsi
je 0x14001c1ab
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x14001c1bd
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x230], rax
jne 0x14001c213
mov r13, r15
mov qword [rsp + 0x238], r15
jmp 0x14001c21b
mov qword [rsp + 0x238], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r14, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rsi
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r14
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
mov qword [rsp + 0x58], r15
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, r12
inc r8
cmp word [rax + r8*2], 0
jne 0x14001c263
mov qword [rsp + 0x398], r15
mov qword [rsp + 0x3a8], r15
mov qword [rsp + 0x3b0], 7
mov word [rsp + 0x398], r15w
mov rdx, rax
lea rcx, [rsp + 0x398]
call fcn.140006420
mov eax, dword [rsp + 0xc0]
or eax, 0xc00000
mov dword [rsp + 0x48], eax
lea rcx, [rsp + 0x398]
call fcn.140011750
movzx esi, al
mov rdx, qword [rsp + 0x3b0]
cmp rdx, 8
jb 0x14001c30e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x398]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c309
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
test sil, sil
je 0x14001d02c
mov qword [rsp + 0x3f8], rbx
lea rax, [rsp + 0x3f8]
mov qword [rsp + 0xc0], rax
lea rax, [0x1400b3f18]
mov qword [rsp + 0x2d0], rax
lock inc qword [0x1400b3f18]
mov rcx, qword [0x1400b3f10]
test rcx, rcx
je 0x14001c39e
mov qword [rsp + 0x218], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x218]
mov rdx, qword [rsp + 0x3f8]
call qword [rax + 0x30]
test eax, eax
js 0x14001d215
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0xc8], rax
or dword [rsp + 0x48], 0xe000000
lock dec qword [0x1400b3f18]
mov esi, dword [rsp + 0x48]
jmp 0x14001c3c3
lock dec qword [0x1400b3f18]
lea r8, [rsp + 0xc0]
lea rdx, [rsp + 0xc8]
call fcn.140012ff0
mov esi, dword [rsp + 0x48]
bts esi, 0x19
bts esi, 0x18
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x1f8]
call fcn.140016f70
bts esi, 0x1c
cmp qword [rsp + 0x58], 0
je 0x14001c3f2
lea rcx, [rsp + 0x58]
call fcn.140012c00
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x1f8], r15
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0xc8], 0
je 0x14001c420
lea rcx, [rsp + 0xc8]
call fcn.140012c00
nop
mov rbx, qword [rsp + 0x70]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x440]
call fcn.140005c30
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x460]
call fcn.140005c30
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x480]
call fcn.140005c30
nop
lea rdi, [rsp + 0x440]
movabs r14, 0x7ffffffffffffffe
mov rbx, qword [rsp + 0x50]
nop word [rax + rax]
mov rdx, rdi
lea rcx, [rsp + 0x3b8]
call fcn.140005c30
nop
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rax
mov rcx, r12
inc rcx
cmp word [rax + rcx*2], 0
jne 0x14001c4a1
mov rax, r14
mov rdx, qword [rsp + 0x3c8]
sub rax, rdx
cmp rax, rcx
jb 0x14001d253
lea rax, [rsp + 0x3b8]
cmp qword [rsp + 0x3d0], 8
cmovae rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x358]
call fcn.14000cab0
bts esi, 0x1d
mov dword [rsp + 0x48], esi
lea rcx, [rsp + 0x358]
cmp qword [rsp + 0x370], 8
cmovae rcx, qword [rsp + 0x358]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x14001c5d7
mov rdx, qword [rsp + 0x370]
cmp rdx, 8
jb 0x14001c572
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c56c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c69e
call fcn.140059820
nop
mov rdx, qword [rsp + 0x3d0]
cmp rdx, 8
jb 0x14001c5b6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c5b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001c5d0
call fcn.140059820
add rdi, 0x20
lea rax, [rsp + 0x4a0]
cmp rdi, rax
je 0x14001c713
jmp 0x14001c480
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rsp + 0x358]
cmp qword [rsp + 0x370], 8
cmovae rcx, qword [rsp + 0x358]
mov qword [rsp + 0x1f0], r15
mov rdx, r12
nop dword [rax]
inc rdx
cmp word [rcx + rdx*2], 0
jne 0x14001c600
lea r8, [rsp + 0x1f0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140006c90
test rbx, rbx
je 0x14001c62b
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rbx, qword [rsp + 0x1f0]
mov qword [rsp + 0x50], rbx
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rdi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rdi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x370]
cmp rdx, 8
jb 0x14001c6aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x358]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c6a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c6a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x368], r15
mov qword [rsp + 0x370], 7
mov word [rsp + 0x358], r15w
mov rdx, qword [rsp + 0x3d0]
cmp rdx, 8
jb 0x14001c713
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c70d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c70d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
nop
lea r9, [sym.SysInfoCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x440]
call fcn.14005ae48
lea rax, [rsp + 0x58]
mov qword [rsp + 0x260], rax
lea rax, [0x1400b3f38]
mov qword [rsp + 0x2d8], rax
lock inc qword [0x1400b3f38]
mov rcx, qword [0x1400b3f30]
test rcx, rcx
je 0x14001c79d
mov qword [rsp + 0x1e8], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x1e8]
mov rdx, qword [rsp + 0x58]
call qword [rax + 0x40]
test eax, eax
js 0x14001d21d
mov rax, qword [rsp + 0x1e8]
mov qword [rsp + 0x80], rax
lock dec qword [0x1400b3f38]
jmp 0x14001c7bb
lock dec qword [0x1400b3f38]
lea r8, [rsp + 0x260]
lea rdx, [rsp + 0x80]
call fcn.140019bc0
nop
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xa8]
call fcn.14001d260
nop
cmp qword [rsp + 0x80], 0
je 0x14001c7e9
lea rcx, [rsp + 0x80]
call fcn.140012c00
lea rax, [0x1400b3f58]
mov qword [rsp + 0x2e0], rax
lock inc qword [0x1400b3f58]
cmp qword [0x1400b3f50], 0
je 0x14001c826
lea r8, [0x1400b3f50]
lea rdx, [rsp + 0x68]
call fcn.140019980
nop
lock dec qword [0x1400b3f58]
jmp 0x14001c84a
lock dec qword [0x1400b3f58]
lea rax, [0x140019a10]
mov qword [rsp + 0x60], rax
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
call fcn.140019a30
nop
mov qword [rsp + 0xd8], r15
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd8]
call qword [rax + 0x40]
test eax, eax
js 0x14001d225
mov rbx, qword [rsp + 0xd8]
mov qword [rsp + 0xd0], rbx
lea r9, [rsp + 0x418]
lea r8, [rsp + 0x420]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov qword [rsp + 0x60], r15
mov rax, qword [rbx]
lea r8, [rsp + 0x60]
mov rdx, qword [rsp + 0x418]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x14001d22d
mov r14, qword [rsp + 0x60]
mov qword [rsp + 0xd8], r14
lea rcx, [rsp + 0xd0]
call fcn.140012c00
test r14, r14
je 0x14001cca5
mov qword [rsp + 0x60], r15
mov rax, qword [r14]
lea rdx, [rsp + 0x60]
mov rcx, r14
call qword [rax + 0x40]
test eax, eax
js 0x14001d235
mov rbx, qword [rsp + 0x60]
mov qword [rsp + 0xd0], rbx
lea r8, [rsp + 0xd0]
lea rdx, str.xmlns_
lea rcx, [rsp + 0xb8]
call fcn.140019590
nop
lea r8, [0x140068678]
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.1400194b0
nop
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x14001c95e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb8], r15
test rbx, rbx
je 0x14001c96b
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r15
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
jne 0x14001c982
mov rcx, r15
jmp 0x14001c9a6
mov qword [rsp + 0xb0], r15
mov rax, qword [rcx]
lea r8, [rsp + 0xb0]
lea rdx, [0x140075298]
call qword [rax]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rcx
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
call qword [rax + 0x30]
test eax, eax
js 0x14001d23d
lea rcx, [rsp + 0xb8]
call fcn.140012c00
mov rbx, qword [rsp + 0x60]
mov qword [rsp + 0xd0], rbx
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x2f8], r15
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], 7
mov word [rsp + 0x2f8], r15w
mov r8, r12
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001ca10
mov rdx, rax
lea rcx, [rsp + 0x2f8]
call fcn.140006420
nop
test rbx, rbx
je 0x14001ca39
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rbx, qword [rsp + 0x90]
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov r13d, eax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x338], r15
mov qword [rsp + 0x348], r15
mov qword [rsp + 0x350], 7
mov word [rsp + 0x338], r15w
nop dword [rax + rax]
inc r12
cmp word [rax + r12*2], 0
jne 0x14001ca80
mov r8, r12
mov rdx, rax
lea rcx, [rsp + 0x338]
call fcn.140006420
nop
lea r9, [rsp + 0x338]
mov rdi, qword [rsp + 0x338]
mov r12, qword [rsp + 0x350]
cmp r12, 8
cmovae r9, rdi
lea rcx, [rsp + 0x2f8]
cmp qword [rsp + 0x310], 8
cmovae rcx, qword [rsp + 0x2f8]
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x20], rax
mov rsi, qword [rsp + 0x308]
mov rdx, rsi
call fcn.14000c9a0
mov rdx, rax
cmp rsi, rax
jb 0x14001d245
mov rax, rsi
sub rax, rdx
cmp rax, r13
cmovb r13, rax
lea rax, [rsp + 0x2f8]
cmp qword [rsp + 0x310], 8
cmovae rax, qword [rsp + 0x2f8]
lea rcx, [rax + rdx*2]
sub rsi, r13
mov qword [rsp + 0x308], rsi
sub rsi, rdx
lea r8, [rsi*2 + 2]
lea rdx, [rcx + r13*2]
call sub.VCRUNTIME140.dll_memmove
nop
cmp r12, 8
jb 0x14001cb8b
lea rdx, [r12*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14001cb83
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cb83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140059820
lea rcx, [rsp + 0x2f8]
cmp qword [rsp + 0x310], 8
cmovae rcx, qword [rsp + 0x2f8]
mov edx, dword [rsp + 0x308]
test edx, edx
jne 0x14001cbba
mov qword [rsp + 0x3d8], r15
jmp 0x14001cbcf
lea r9, [rsp + 0x3d8]
lea r8, [rsp + 0x3e0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rsp + 0x68]
test rcx, rcx
jne 0x14001cbde
mov rcx, r15
jmp 0x14001cc02
mov qword [rsp + 0x200], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x200]
lea rdx, [0x140075278]
call qword [rax]
mov rcx, qword [rsp + 0x200]
mov qword [rsp + 0xb0], rcx
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x3d8]
call qword [rax + 0x30]
test eax, eax
js 0x14001d24b
lea rcx, [rsp + 0xb0]
call fcn.140012c00
nop
mov rdx, qword [rsp + 0x310]
cmp rdx, 8
jb 0x14001cc79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cc74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cc74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x308], r15
mov qword [rsp + 0x310], 7
mov word [rsp + 0x2f8], r15w
test rbx, rbx
je 0x14001cccf
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
jmp 0x14001cccf
cmp qword [rsp + 0x68], 0
je 0x14001ccb7
lea rcx, [rsp + 0x68]
call fcn.140012c00
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14001cccf
mov rax, qword [rcx]
call qword [rax + 8]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call fcn.14001d400
lea rdx, [rsp + 0x40]
call fcn.14001ff00
mov rbx, rax
lea rax, [rsp + 0x68]
cmp rbx, rax
je 0x14001cd21
cmp qword [rbx], 0
je 0x14001cd0d
mov rcx, rbx
call fcn.140012c00
mov rcx, qword [rsp + 0x68]
mov qword [rbx], rcx
test rcx, rcx
je 0x14001cd21
mov rax, qword [rcx]
call qword [rax + 8]
nop
test r14, r14
je 0x14001cd34
lea rcx, [rsp + 0xd8]
call fcn.140012c00
nop
cmp qword [rsp + 0x68], 0
je 0x14001cd47
lea rcx, [rsp + 0x68]
call fcn.140012c00
nop
cmp qword [rsp + 0xa8], 0
je 0x14001cd60
lea rcx, [rsp + 0xa8]
call fcn.140012c00
nop
cmp qword [rsp + 0x58], 0
je 0x14001cd73
lea rcx, [rsp + 0x58]
call fcn.140012c00
nop
mov rcx, qword [rsp + 0x238]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001cd8c
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x330]
cmp rdx, 8
jb 0x14001cdd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cdd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cdd2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x328], r15
mov qword [rsp + 0x330], 7
mov word [rsp + 0x318], r15w
lea rcx, [0x1400b41e0]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rbx, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x98]
mov r12, qword [0x1400b41c0]
cmp qword [r12 + 8], 0
je 0x14001ceba
mov r14, qword [r12]
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], 0
jne 0x14001ce64
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.140020480
test al, al
je 0x14001ce58
mov rsi, qword [rsi + 0x10]
jmp 0x14001ce5e
mov r14, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x14001ce40
cmp byte [r14 + 0x19], 0
jne 0x14001ce7d
lea r8, [r14 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.140020480
test al, al
je 0x14001ce81
mov r14, qword [r12]
mov rax, qword [0x1400b41c0]
cmp r14, qword [rax]
je 0x14001ceba
lea rdx, [rsp + 0x40]
call fcn.14001ff00
lea rcx, [rsp + 0x118]
cmp rcx, rax
je 0x14001ceba
mov rcx, qword [rax]
mov qword [rsp + 0x118], rcx
test rcx, rcx
je 0x14001ceba
mov rax, qword [rcx]
call qword [rax + 8]
mov rax, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x120]
mov qword [rsi], rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001cee1
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r15
test rdi, rdi
je 0x14001ceef
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test rbx, rbx
je 0x14001cefd
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test r13, r13
je 0x14001cf0b
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov r13, qword [rsp + 0xa0]
test r13, r13
je 0x14001d185
mov rcx, r13
jmp 0x14001d180
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov qword [rsp + 0x90], r15
lea rdx, [rsp + 0x40]
call fcn.14001ff00
mov rsi, rax
lea rax, [rsp + 0x90]
cmp rsi, rax
je 0x14001d085
cmp qword [rsi], 0
je 0x14001d082
mov rcx, rsi
call fcn.140012c00
mov qword [rsi], r15
mov rsi, qword [rsp + 0x120]
mov qword [rsi], r15
cmp qword [rsp + 0x58], 0
je 0x14001d0a3
lea rcx, [rsp + 0x58]
call fcn.140012c00
nop
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001d0b7
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x330]
cmp rdx, 8
jb 0x14001d102
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x318]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d0fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d0fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140059820
mov qword [rsp + 0x328], r15
mov qword [rsp + 0x330], 7
mov word [rsp + 0x318], r15w
lea rcx, [0x1400b41e0]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001d141
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r15
test rdi, rdi
je 0x14001d14f
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test rbx, rbx
je 0x14001d15d
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14001d170
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x14001d185
mov rcx, rax
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, rsi
mov rcx, qword [rsp + 0x6b8]
xor rcx, rsp
call fcn.140059800
lea r11, [rsp + 0x6c0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
mov ecx, eax
call fcn.140006ab0
nop
call fcn.140009750
nop
mov ecx, eax
call fcn.140006ab0
nop
call fcn.140006cb0
int3