Function at 0x140034e00
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x410
mov rax, qword [0x140104200]
xor rax, rsp
mov qword [rsp + 0x400], rax
mov rax, rdx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x120], rcx
xor r15d, r15d
mov dword [rsp + 0x30], r15d
mov byte [rcx + 0x20], r15b
mov r13d, 1
mov r14d, r13d
mov dword [rsp + 0x30], r13d
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.14001fad0
nop
mov qword [rsp + 0x60], r15
lea rbx, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
lea rsi, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::Current_void__const
lea rdi, [r15 - 1]
lea r12, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Key_void__const
mov rcx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x60]
cmp rcx, rax
je 0x140035e87
test rcx, rcx
je 0x140034fa2
test rax, rax
je 0x140034fa2
test rcx, rcx
jne 0x140034ec5
mov qword [rsp + 0xd8], r15
mov rax, r15
mov rsi, r15
mov rcx, r15
mov rdi, r15
mov rbx, r15
jmp 0x140034f02
mov qword [rsp + 0xc0], r15
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea r8, [rsp + 0xc0]
lea rdx, [0x1400dc670]
call qword [rax]
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rsi, rax
mov rcx, rax
mov rdi, rax
mov rbx, rax
cmp qword [rsp + 0x60], 0
jne 0x140034f1b
mov qword [rsp + 0xd0], r15
test rax, rax
sete dil
jmp 0x140034f72
mov qword [rsp + 0xc8], r15
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov r9, qword [rcx]
lea r8, [rsp + 0xc8]
lea rdx, [0x1400dc670]
mov rcx, rax
call r9
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xd0], rax
mov rcx, rdi
cmp rsi, rax
sete dil
test rax, rax
je 0x140034f72
lea rcx, [rsp + 0xd0]
call fcn.14001b300
mov rcx, rbx
test rcx, rcx
je 0x140034f84
lea rcx, [rsp + 0xd8]
call fcn.14001b300
test dil, dil
jne 0x140035e87
mov rdi, 0xffffffffffffffff
lea rbx, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
lea rsi, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::Current_void__const
mov qword [rsp + 0x50], r15
or r14d, 4
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x178], 0x17
mov dword [rsp + 0x17c], 9
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], rsi
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
call qword [rax + 0x30]
test eax, eax
js 0x140035ede
and r14d, 0xfffffffb
or r14d, 2
mov qword [rsp + 0x70], r15
or r14d, 8
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x190], 0x2f
mov dword [rsp + 0x194], 9
mov qword [rsp + 0x198], rbx
mov qword [rsp + 0x1a0], r12
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
call qword [rax + 0x30]
test eax, eax
js 0x140035eee
mov rax, qword [rsp + 0x70]
test rax, rax
setne cl
test rax, rax
je 0x140035061
test cl, cl
je 0x14003505c
mov rdx, qword [rax + 0x10]
jmp 0x140035068
mov rdx, r15
jmp 0x140035068
lea rdx, [0x1400d9e70]
xorps xmm0, xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], r15
mov qword [rsp + 0x368], r15
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140035090
lea rcx, [rsp + 0x350]
call fcn.1400086a0
nop
and r14d, 0xfffffff7
mov dword [rsp + 0x30], r14d
mov rbx, qword [rsp + 0x70]
test rbx, rbx
je 0x1400350e8
mov eax, edi
lock xadd dword [rbx + 0x18], eax
sub eax, 1
jne 0x1400351a6
call sub.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap
mov rcx, rax
mov r8, rbx
xor edx, edx
call sub.api_ms_win_core_heap_l1_1_0.dll_HeapFree
mov qword [rsp + 0x70], r15
mov r14d, dword [rsp + 0x30]
lea r8, [rsp + 0x350]
cmp qword [rsp + 0x368], 8
setae r12b
mov byte [rsp + 0x35], r12b
cmovae r8, qword [rsp + 0x350]
mov rsi, qword [rsp + 0x360]
cmp rsi, 7
jne 0x140035b38
mov rdx, rsi
lea rax, str.general
mov rcx, rax
test rsi, rsi
je 0x14003514a
sub r8, rax
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140035b38
add rcx, 2
sub rdx, 1
jne 0x140035132
mov qword [rsp + 0x78], r15
or r14d, 0x10
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x1a8], 0x35
mov dword [rsp + 0x1ac], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov qword [rsp + 0x1b0], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Value_void__const
mov qword [rsp + 0x1b8], rax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x78]
call qword [rax + 0x38]
test eax, eax
js 0x140035efe
jmp 0x1400351b3
test eax, eax
js 0x140035f0e
jmp 0x1400350de
mov qword [rsp + 0xe0], r15
mov dword [rsp + 0x1c0], 0xbd
mov dword [rsp + 0x1c4], 9
lea rdi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0x1c8], rdi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonValue_struct_winrt::Windows::Data::Json::IJsonValue_::GetObjectW_void__const
mov qword [rsp + 0x1d0], rax
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0xe0]
call qword [rax + 0x60]
test eax, eax
js 0x140035f14
mov rbx, qword [rsp + 0xe0]
mov qword [rsp + 0x118], rbx
or r14d, 0x20
and r14d, 0xffffffef
mov dword [rsp + 0x30], r14d
cmp qword [rsp + 0x78], 0
je 0x140035239
lea rcx, [rsp + 0x78]
call fcn.14001b300
mov dword [rsp + 0x288], r13d
mov dword [rsp + 0x28c], 0xb
lea rax, str.action_name
mov qword [rsp + 0x298], rax
lea rax, [rsp + 0x288]
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x1d8], 0x57
mov dword [rsp + 0x1dc], 9
mov qword [rsp + 0x1e0], rdi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonObject_struct_winrt::Windows::Data::Json::IJsonObject_::GetNamedString_const_struct_winrt::param::hstring___const
mov qword [rsp + 0x1e8], rax
mov rax, qword [rbx]
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x288]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x140035f24
mov rdi, qword [rsp + 0x48]
mov qword [rsp + 0x2e8], rdi
or r14d, 0x40
mov dword [rsp + 0x30], r14d
test rdi, rdi
setne sil
test rdi, rdi
je 0x1400352e6
mov r8, qword [rdi + 0x10]
mov edx, dword [rdi + 4]
jmp 0x1400352f0
lea r8, [0x1400d9e70]
mov rdx, r15
cmp rdx, 0x11
jne 0x140035378
test rdx, rdx
je 0x140035324
lea rax, str.restart_elevation
sub r8, rax
mov rcx, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140035378
add rcx, 2
sub rdx, 1
jne 0x140035310
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140110150], eax
jg 0x140035f34
xor ecx, ecx
cmp byte [0x14011015c], cl
je 0x140035363
mov dword [0x14010fc90], 3
call qword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x140035a57
mov dword [0x14010fc90], 2
call qword [sym.imp.USER32.dll_PostQuitMessage]
jmp 0x140035a57
test sil, sil
je 0x140035386
mov r8, qword [rdi + 0x10]
mov edx, dword [rdi + 4]
jmp 0x140035390
lea r8, [0x1400d9e70]
mov rdx, r15
cmp rdx, 0x1a
jne 0x140035418
test rdx, rdx
je 0x1400353c4
lea rax, str.restart_maintain_elevation
sub r8, rax
mov rcx, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140035418
add rcx, 2
sub rdx, 1
jne 0x1400353b0
lea rcx, [rsp + 0xe8]
call fcn.1400336e0
call fcn.14001cc90
mov ecx, r13d
test al, al
mov dword [0x14010fc90], 2
jne 0x1400353f1
mov dword [0x14010fc90], 4
call qword [sym.imp.USER32.dll_PostQuitMessage]
cmp qword [rsp + 0xe8], 0
je 0x140035a57
lea rcx, [rsp + 0xe8]
call fcn.14001b300
jmp 0x140035a57
test sil, sil
je 0x140035426
mov r8, qword [rdi + 0x10]
mov edx, dword [rdi + 4]
jmp 0x140035430
lea r8, [0x1400d9e70]
mov rdx, r15
cmp rdx, 0x11
jne 0x140035525
test rdx, rdx
je 0x140035468
lea rax, str.check_for_updates
sub r8, rax
mov rcx, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140035525
add rcx, 2
sub rdx, 1
jne 0x140035450
xor eax, eax
lock cmpxchg byte [0x14010cf42], r13b
jne 0x14003551b
mov rcx, r13
call fcn.1400816b0
mov qword [rsp + 0x2c8], rax
mov r14d, dword [rsp + 0x30]
bts r14d, 0xc
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r15d
mov r9, rax
lea r8, [0x14003a3f0]
xor edx, edx
xor ecx, ecx
call fcn.140088258
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x140035fee
cmp dword [rsp + 0xb8], 0
je 0x140035fde
movaps xmm0, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0x2d0], xmm0
lea rcx, [rsp + 0x2d0]
call fcn.14007e3ac
test eax, eax
jne 0x140035fe6
xorps xmm0, xmm0
movaps xmmword [rsp + 0x340], xmm0
movdqa xmmword [rsp + 0xb0], xmm0
jmp 0x140035a52
mov r14d, dword [rsp + 0x30]
jmp 0x140035a52
test sil, sil
je 0x140035533
mov r8, qword [rdi + 0x10]
mov edx, dword [rdi + 4]
jmp 0x14003553d
lea r8, [0x1400d9e70]
mov rdx, r15
cmp rdx, 0x19
jne 0x140035a57
test rdx, rdx
je 0x140035578
lea rax, str.request_update_state_date
sub r8, rax
mov rcx, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140035a57
add rcx, 2
sub rdx, 1
jne 0x140035560
lea rax, [0x1401100a8]
mov qword [rsp + 0x2e0], rax
lock inc qword [0x1401100a8]
cmp qword [0x1401100a0], 0
je 0x1400355c1
lea rdx, [rsp + 0x58]
lea rcx, [0x1401100a0]
call fcn.140021600
or dword [rsp + 0x30], 0x600
lock dec qword [0x1401100a8]
mov r14d, dword [rsp + 0x30]
jmp 0x1400355f9
lock dec qword [0x1401100a8]
lea rax, [0x14001c270]
mov qword [rsp + 0x130], rax
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x58]
call fcn.14001c290
mov r14d, dword [rsp + 0x30]
bts r14d, 9
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x370]
call fcn.14007c5e0
nop
cmp byte [rsp + 0x3a0], 0
je 0x1400358e5
mov r8, qword [rsp + 0x398]
lea r9, [rsp + 0x3fa]
test r8, r8
jns 0x140035680
neg r8
nop dword [rax]
sub r9, 2
movabs rax, 0xcccccccccccccccd
mul r8
shr rdx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8, rdx
test rdx, rdx
jne 0x140035630
add r9, 0xfffffffffffffffe
mov eax, 0x2d
mov word [r9], ax
jmp 0x1400356b7
sub r9, 2
movabs rax, 0xcccccccccccccccd
mul r8
shr rdx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8, rdx
test rdx, rdx
jne 0x140035680
lea r8, [rsp + 0x3fa]
mov rdx, r9
lea rcx, [rsp + 0x158]
call fcn.14000eeb0
or r14d, 0x6000
mov dword [rsp + 0x30], r14d
lea rax, [rsp + 0x158]
mov qword [rsp + 0x128], rax
lea rcx, [rsp + 0x158]
cmp qword [rsp + 0x170], 8
cmovae rcx, qword [rsp + 0x158]
mov edx, dword [rsp + 0x168]
test edx, edx
jne 0x14003571a
mov qword [rsp + 0x138], r15
jmp 0x14003574c
cmp word [rcx + rdx*2], 0
jne 0x140036001
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], edx
mov qword [rsp + 0x150], rcx
lea rax, [rsp + 0x140]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x138]
mov qword [rsp + 0x110], rax
lea rax, [0x1401100e8]
mov qword [rsp + 0x2f0], rax
lock inc qword [0x1401100e8]
mov rcx, qword [0x1401100e0]
test rcx, rcx
je 0x140035804
mov qword [rsp + 0xf0], r15
mov dword [rsp + 0x1f0], reloc.SHLWAPI.dll_QISearch
mov dword [rsp + 0x1f4], 9
lea rdi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0x1f8], rdi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonValueStatics_struct_winrt::Windows::Data::Json::IJsonValueStatics_::CreateStringValue_const_struct_winrt::param::hstring___const
mov qword [rsp + 0x200], rax
mov rax, qword [rcx]
lea r8, [rsp + 0xf0]
mov rdx, qword [rsp + 0x138]
call qword [rax + 0x50]
test eax, eax
js 0x140036007
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xa0], rax
or dword [rsp + 0x30], 0xe0000
lock dec qword [0x1401100e8]
mov r14d, dword [rsp + 0x30]
jmp 0x140035832
lock dec qword [0x1401100e8]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0xa0]
call fcn.14001c770
mov r14d, dword [rsp + 0x30]
bts r14d, 0x11
lea rdi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
or r14d, 0x18000
mov dword [rsp + 0x30], r14d
lea rcx, [rsp + 0x158]
call fcn.140008470
nop
mov dword [rsp + 0x2a8], r13d
mov dword [rsp + 0x2ac], 0xf
lea rax, str.updateStateDate
mov qword [rsp + 0x2b8], rax
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x2a0], rax
mov dword [rsp + 0x208], 0x46
mov dword [rsp + 0x20c], 9
mov qword [rsp + 0x210], rdi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonObject_struct_winrt::Windows::Data::Json::IJsonObject_::SetNamedValue_const_struct_winrt::param::hstring__const_struct_winrt::Windows::Data::Json::IJsonValue___const
mov qword [rsp + 0x218], rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
mov rbx, qword [rsp + 0xa0]
mov r8, rbx
lea rdx, [rsp + 0x2a8]
call qword [rax + 0x38]
test eax, eax
js 0x140036017
test rbx, rbx
je 0x1400358ec
lea rcx, [rsp + 0xa0]
call fcn.14001b300
jmp 0x1400358ec
lea rdi, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0xa8], r15
mov dword [rsp + 0x220], 0x9f
mov dword [rsp + 0x224], 9
mov qword [rsp + 0x228], rdi
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonValue_struct_winrt::Windows::Data::Json::IJsonObject_::Stringify_void__const
mov qword [rsp + 0x230], rax
mov rcx, qword [rsp + 0x58]
test rcx, rcx
jne 0x140035930
mov rcx, r15
jmp 0x140035954
mov qword [rsp + 0xf8], r15
mov rax, qword [rcx]
lea r8, [rsp + 0xf8]
lea rdx, [0x1400dc6f0]
call qword [rax]
mov rcx, qword [rsp + 0xf8]
mov qword [rsp + 0x100], rcx
mov rax, qword [rcx]
lea rdx, [rsp + 0xa8]
call qword [rax + 0x38]
test eax, eax
js 0x140036027
lea rcx, [rsp + 0x100]
call fcn.14001b300
mov rbx, qword [rsp + 0xa8]
mov qword [rsp + 0x2f8], rbx
bts r14d, 0xb
mov dword [rsp + 0x30], r14d
mov rdi, qword [rsp + 0x68]
cmp byte [rdi + 0x20], 0
je 0x1400359b0
mov rcx, rdi
call fcn.140008470
mov byte [rdi + 0x20], 0
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
test rbx, rbx
setne dil
test rbx, rbx
je 0x1400359d4
mov rdx, qword [rbx + 0x10]
mov r8d, dword [rbx + 4]
jmp 0x1400359de
lea rdx, [0x1400d9e70]
mov r8, r15
mov rcx, qword [rsp + 0x68]
call fcn.1400086a0
mov rax, qword [rsp + 0x68]
mov byte [rax + 0x20], 1
test dil, dil
je 0x140035a25
mov eax, 0xffffffff
lock xadd dword [rbx + 0x18], eax
sub eax, 1
jne 0x140035afa
call sub.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap
mov rcx, rax
mov r8, qword [rsp + 0xa8]
xor edx, edx
call sub.api_ms_win_core_heap_l1_1_0.dll_HeapFree
mov r14d, dword [rsp + 0x30]
lea rcx, [rsp + 0x3a8]
call fcn.140008470
lea rcx, [rsp + 0x378]
call fcn.140008470
nop
cmp qword [rsp + 0x58], 0
je 0x140035a52
lea rcx, [rsp + 0x58]
call fcn.14001b300
mov rdi, qword [rsp + 0x48]
test sil, sil
je 0x140035a88
mov eax, 0xffffffff
lock xadd dword [rdi + 0x18], eax
sub eax, 1
jne 0x140035b07
call sub.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap
mov rcx, rax
mov r8, qword [rsp + 0x48]
xor edx, edx
call sub.api_ms_win_core_heap_l1_1_0.dll_HeapFree
mov r14d, dword [rsp + 0x30]
lea rcx, [rsp + 0x118]
call fcn.14001b300
nop
lea rsi, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::Current_void__const
lea rbx, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov rdi, 0xffffffffffffffff
test r12b, r12b
je 0x140035e05
mov rax, qword [rsp + 0x368]
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035dff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036037
jmp 0x140035dff
test eax, eax
js 0x14003603d
jmp 0x140035a20
test eax, eax
js 0x140036043
jmp 0x140035a83
call fcn.140023980
mov rdi, rax
lea r8, [rsp + 0x350]
lea rdx, [rsp + 0x310]
mov rcx, rax
call fcn.140021d10
mov rbx, qword [rsp + 0x320]
cmp byte [rbx + 0x19], 0
jne 0x140035be0
lea rcx, [rbx + 0x20]
mov r10, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x140035b78
mov rcx, qword [rcx]
lea r9, [rsp + 0x350]
test r12b, r12b
cmovne r9, qword [rsp + 0x350]
mov qword [rsp + 0x300], r10
mov rax, rsi
cmp r10, rsi
cmovb rax, r10
test rax, rax
je 0x140035bba
sub r9, rcx
movzx edx, word [rcx + r9]
cmp dx, word [rcx]
jne 0x140035bc3
add rcx, 2
sub rax, 1
jne 0x140035ba6
cmp rsi, r10
jae 0x140035bd8
mov al, 1
jmp 0x140035bdc
mov eax, r13d
mov rcx, 0xffffffffffffffff
cmovb eax, ecx
test eax, eax
jns 0x140035bda
mov al, 1
jmp 0x140035bdc
jbe 0x140035be3
xor al, al
test al, al
je 0x140035be3
mov rbx, qword [rdi]
call fcn.140023980
cmp rbx, qword [rax]
je 0x140035a96
mov qword [rsp + 0x80], r15
bts r14d, 8
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x238], 0x35
mov dword [rsp + 0x23c], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Foundation.Collections.h
mov qword [rsp + 0x240], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Value_void__const
mov qword [rsp + 0x248], rax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
call qword [rax + 0x38]
test eax, eax
js 0x140036049
mov qword [rsp + 0x90], r15
mov dword [rsp + 0x250], 0x9f
mov dword [rsp + 0x254], 9
lea rax, str.C:_a_work1_s_src_runnerx64ReleaseGenerated_FileswinrtWindows.Data.Json.h
mov qword [rsp + 0x258], rax
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Data_Json_IJsonValue_struct_winrt::Windows::Data::Json::IJsonValue_::Stringify_void__const
mov qword [rsp + 0x260], rax
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
lea rdx, [rsp + 0x90]
call qword [rax + 0x38]
test eax, eax
js 0x140036059
mov rdi, qword [rsp + 0x90]
mov qword [rsp + 0x308], rdi
bts r14d, 7
btr r14d, 8
mov dword [rsp + 0x30], r14d
cmp qword [rsp + 0x80], 0
je 0x140035ce3
lea rcx, [rsp + 0x80]
call fcn.14001b300
call fcn.140023980
lea r8, [rsp + 0x350]
lea rdx, [rsp + 0x328]
mov rcx, rax
call fcn.140021d10
mov r11, qword [rsp + 0x338]
cmp byte [r11 + 0x19], 0
jne 0x14003606f
lea rax, [r11 + 0x20]
mov r10, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140035d25
mov rax, qword [rax]
lea r9, [rsp + 0x350]
test r12b, r12b
cmovne r9, qword [rsp + 0x350]
mov qword [rsp + 0x2c0], r10
mov rcx, rsi
cmp r10, rsi
cmovb rcx, r10
test rcx, rcx
je 0x140035d67
sub r9, rax
movzx edx, word [r9 + rax]
cmp dx, word [rax]
jne 0x140035d70
add rax, 2
sub rcx, 1
jne 0x140035d53
cmp rsi, r10
jae 0x140035d85
mov al, 1
jmp 0x140035d89
mov eax, r13d
mov rcx, 0xffffffffffffffff
cmovb eax, ecx
test eax, eax
jns 0x140035d87
mov al, 1
jmp 0x140035d89
jbe 0x140035d91
xor al, al
test al, al
jne 0x14003606f
mov rcx, qword [r11 + 0x48]
mov rax, qword [rcx]
test rdi, rdi
setne bl
test rdi, rdi
je 0x140035db2
test bl, bl
je 0x140035dad
mov rdx, qword [rdi + 0x10]
jmp 0x140035db9
mov rdx, r15
jmp 0x140035db9
lea rdx, [0x1400d9e70]
call qword [rax + 0x20]
nop
test bl, bl
je 0x140035a96
mov eax, 0xffffffff
lock xadd dword [rdi + 0x18], eax
sub eax, 1
jne 0x140035df5
call sub.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap
mov rcx, rax
mov r8, qword [rsp + 0x90]
xor edx, edx
call sub.api_ms_win_core_heap_l1_1_0.dll_HeapFree
mov r14d, dword [rsp + 0x30]
jmp 0x140035a96
test eax, eax
js 0x140036069
jmp 0x140035deb
call fcn.1400816f4
nop
cmp qword [rsp + 0x50], 0
je 0x140035e17
lea rcx, [rsp + 0x50]
call fcn.14001b300
mov byte [rsp + 0x34], 0
mov dword [rsp + 0x268], 0x23
mov dword [rsp + 0x26c], 9
mov qword [rsp + 0x270], rbx
lea rax, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IIterator_struct_winrt::Windows::Foundation::Collections::IIterator_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue____struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue___::MoveNext_void__const
mov qword [rsp + 0x278], rax
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
lea rdx, [rsp + 0x34]
call qword [rax + 0x40]
test eax, eax
js 0x14003607c
cmp byte [rsp + 0x34], 0
lea r12, str.auto___cdecl_winrt::impl::consume_Windows_Foundation_Collections_IKeyValuePair_struct_winrt::Windows::Foundation::Collections::IKeyValuePair_struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue__struct_winrt::hstring_struct_winrt::Windows::Data::Json::IJsonValue_::Key_void__const
jne 0x140034e82
lea rcx, [rsp + 0x38]
call fcn.14001b300
mov qword [rsp + 0x38], r15
jmp 0x140034e7b
cmp qword [rsp + 0x60], 0
je 0x140035e9a
lea rcx, [rsp + 0x60]
call fcn.14001b300
nop
cmp qword [rsp + 0x38], 0
je 0x140035eac
lea rcx, [rsp + 0x38]
call fcn.14001b300
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.140081690
lea r11, [rsp + 0x410]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rdx, [rsp + 0x178]
mov ecx, eax
call fcn.14001bf90
nop
lea rdx, [rsp + 0x190]
mov ecx, eax
call fcn.14001bf90
nop
lea rdx, [rsp + 0x1a8]
mov ecx, eax
call fcn.14001bf90
nop
call fcn.14008e104
nop
lea rdx, [rsp + 0x1c0]
mov ecx, eax
call fcn.14001bf90
nop
lea rdx, [rsp + 0x1d8]
mov ecx, eax
call fcn.14001bf90
nop
lea rcx, [0x140110150]
call fcn.140081b58
cmp dword [0x140110150], 0xffffffff
jne 0x140035344
mov qword [rsp + 0x98], r15
xor bl, bl
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x98]
mov edx, 8
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_OpenProcessToken]
test eax, eax
je 0x140035fb3
lea rax, [rsp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x88]
lea edx, [r9 + 0x10]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.api_ms_win_security_base_l1_1_0.dll_GetTokenInformation]
test eax, eax
je 0x140035fb3
cmp dword [rsp + 0x88], 0
setne bl
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x140035fc6
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov byte [0x14011015c], bl
lea rcx, [0x140110150]
call fcn.140081af8
nop
jmp 0x140035344
mov ecx, r13d
call fcn.14007dcb0
mov ecx, eax
call fcn.14007dc74
nop
mov dword [rsp + 0xb8], r15d
mov ecx, 6
call fcn.14007dcb0
nop
call fcn.14008e104
nop
lea rdx, [rsp + 0x1f0]
mov ecx, eax
call fcn.14001bf90
nop
lea rdx, [rsp + 0x208]
mov ecx, eax
call fcn.14001bf90
nop
lea rdx, [rsp + 0x220]
mov ecx, eax
call fcn.14001bf90
nop
call fcn.140088774
nop
call fcn.14008e104
nop
call fcn.14008e104
nop
lea rdx, [rsp + 0x238]
mov ecx, eax
call fcn.14001bf90
int3
lea rdx, [rsp + 0x250]
mov ecx, eax
call fcn.14001bf90
nop
call fcn.14008e104
nop
lea rcx, str.invalid_map_K__T__key
call fcn.14007dedc
nop
lea rdx, [rsp + 0x268]
mov ecx, eax
call fcn.14001bf90
int3