Function at 0x140018a10
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7d0
mov rax, qword [0x1400ab008]
xor rax, rsp
mov qword [rsp + 0x7c8], rax
mov qword [rsp + 0xb8], rdx
mov r13, rcx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0xb0], rdx
xor r15d, r15d
mov dword [rsp + 0x48], r15d
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x5b0]
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x410], r15
mov qword [rsp + 0x420], r15
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], r15w
mov dword [rsp + 0x48], 2
lea rdx, [rsp + 0x4b0]
mov rcx, r13
call fcn.14001b670
nop
cmp qword [rsp + 0x4c0], r15
je 0x140018b32
lea r8, [rsp + 0x4b0]
cmp qword [rsp + 0x4c8], 8
cmovae r8, qword [rsp + 0x4b0]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
test eax, eax
jne 0x140018b32
lea rax, [rsp + 0x5b0]
mov r12, 0xffffffffffffffff
mov r8, r12
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x140018b10
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x410]
call fcn.140006a60
jmp 0x140018b39
mov r12, 0xffffffffffffffff
mov rdx, qword [rsp + 0x4c8]
cmp rdx, 8
jb 0x140018b84
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x4b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018b7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018b7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x4c0], r15
mov qword [rsp + 0x4c8], 7
mov word [rsp + 0x4b0], r15w
lea rcx, [rsp + 0x410]
cmp qword [rsp + 0x428], 8
cmovae rcx, qword [rsp + 0x410]
mov qword [rsp + 0x78], r15
lea r8, [rsp + 0x78]
mov edx, dword [rsp + 0x420]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140005680
mov rsi, qword [rsp + 0x78]
mov qword [rsp + 0x378], rsi
mov dword [rsp + 0x48], r15d
mov rdx, qword [rsp + 0x428]
cmp rdx, 8
jb 0x140018c35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018c30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018c30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x420], r15
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], r15w
lea rdx, [rsp + 0x4d0]
mov rcx, r13
call fcn.14001b670
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x140018c71
mov rax, qword [rax]
mov qword [rsp + 0x80], r15
lea r8, [rsp + 0x80]
mov edx, ecx
mov rcx, rax
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140005680
mov r14, qword [rsp + 0x80]
mov qword [rsp + 0x350], r14
mov rdx, qword [rsp + 0x4e8]
cmp rdx, 8
jb 0x140018ced
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x4d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140018ce8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140018ce8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov word [rsp + 0x4d0], r15w
mov rbx, r15
mov qword [rsp + 0x60], rbx
mov rdi, r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0xe8], r15
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x140018d74
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov r12, qword [rsp + 0xb8]
mov qword [r12], r15
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140018d55
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r15
test r14, r14
je 0x140018d63
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test rsi, rsi
je 0x14001adcc
mov rcx, rsi
jmp 0x14001adc7
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x260], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x2a8], xmm0
mov rcx, qword [r13 + 0x118]
test rcx, rcx
je 0x140018db1
lock inc dword [rcx + 8]
mov rcx, qword [r13 + 0x118]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
mov rax, qword [r13 + 0x110]
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x2b0], rcx
lea rax, [rsp + 0x2b8]
mov qword [rsp + 0xc0], rax
movdqu xmmword [rsp + 0x2b8], xmm0
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x140018e02
lock inc dword [rcx + 8]
mov rcx, qword [r13 + 0x108]
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
mov rax, qword [r13 + 0x100]
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x2c0], rcx
xor edx, edx
mov rcx, qword [rsp + 0x80]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x330], r15
mov qword [rsp + 0x340], r15
mov qword [rsp + 0x348], 7
mov r8, r12
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140018e50
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.140006a60
nop
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x2b8]
lea r8, [rsp + 0x330]
lea rdx, [rsp + 0x250]
call fcn.14001ccb0
lea rcx, [rsp + 0x40]
cmp rcx, rax
je 0x140018eba
mov rsi, qword [rax]
mov qword [rax], r15
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140018eb5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], rsi
mov rcx, qword [rsp + 0x250]
test rcx, rcx
je 0x140018ed4
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x250], r15
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, qword [rsp + 0x40]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400b01b0]
mov qword [rsp + 0x310], rax
mov byte [rsp + 0x318], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x140018f29
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rsp + 0x318], 1
mov r12, qword [0x1400b0190]
cmp qword [r12 + 8], 0
je 0x140018fa1
mov r14, qword [r12]
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], 0
jne 0x140018f74
nop
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x140018f68
mov rsi, qword [rsi + 0x10]
jmp 0x140018f6e
mov r14, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x140018f50
cmp byte [r14 + 0x19], 0
jne 0x140018f8d
lea r8, [r14 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x140018f91
mov r14, qword [r12]
mov rax, qword [0x1400b0190]
cmp r14, qword [rax]
jne 0x14001a9d5
lea rdx, [rsp + 0x3b0]
mov rcx, r13
call fcn.14001b770
nop
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x78]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0xc8]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xf8], xmm0
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xf8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001adfc
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0xf8]
call fcn.140016a40
mov rcx, qword [rsp + 0xf8]
add rcx, rsi
mov r9d, 2
lea r8, [0x140070774]
mov edx, r9d
call fcn.140016a40
mov qword [rsp + 0x268], r15
lea rdx, [rsp + 0x268]
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae07
mov qword [rsp + 0x100], r15
mov r14, qword [rsp + 0x268]
mov qword [rsp + 0x2f0], r14
mov dword [rsp + 0x48], 0x1c
mov r13, qword [rsp + 0x3c0]
lea r12, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae r12, qword [rsp + 0x3b0]
lea rdx, [rsp + 0xcc]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x88], rax
mov esi, dword [rsp + 0xcc]
lea ecx, [rsi + r13]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x108], xmm0
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x108]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001ae12
add rsi, rsi
mov r9, rsi
mov r8, qword [rsp + 0x88]
mov rdx, rsi
mov rcx, qword [rsp + 0x108]
call fcn.140016a40
lea rdx, [r13*2]
mov rcx, qword [rsp + 0x108]
add rcx, rsi
mov r9, rdx
mov r8, r12
call fcn.140016a40
mov qword [rsp + 0x270], r15
lea rdx, [rsp + 0x270]
mov rcx, qword [rsp + 0x110]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae1d
mov qword [rsp + 0x110], r15
mov rsi, qword [rsp + 0x270]
mov qword [rsp + 0x290], rsi
mov dword [rsp + 0x48], 0xfc
lea r8, [0x140070770]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x288]
call fcn.140016cd0
nop
mov r13, qword [rsp + 0x70]
lea r8, [r13 + 8]
mov rdx, rax
lea rcx, [rsp + 0x280]
call fcn.140016bf0
nop
lea r8, [r13 + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x278]
call fcn.140016bf0
lea rcx, [rsp + 0x60]
cmp rcx, rax
je 0x1400191c7
mov rbx, qword [rax]
mov qword [rax], r15
mov qword [rsp + 0x60], rbx
mov rcx, qword [rsp + 0x278]
test rcx, rcx
je 0x1400191e1
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x278], r15
mov rcx, qword [rsp + 0x280]
test rcx, rcx
je 0x1400191fb
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x280], r15
mov rcx, qword [rsp + 0x288]
test rcx, rcx
je 0x140019215
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x288], r15
test rsi, rsi
je 0x14001922a
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x290], r15
test r14, r14
je 0x14001923f
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x2f0], r15
lea rdx, [rsp + 0xd0]
mov rcx, qword [rsp + 0x78]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0xd0]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x118], xmm0
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x118]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001ae28
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0x118]
call fcn.140016a40
mov rcx, qword [rsp + 0x118]
add rcx, rsi
mov r9d, 2
lea r8, [0x140070774]
mov edx, r9d
call fcn.140016a40
mov qword [rsp + 0x158], r15
lea rdx, [rsp + 0x158]
mov rcx, qword [rsp + 0x120]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae33
mov qword [rsp + 0x120], r15
mov r14, qword [rsp + 0x158]
mov qword [rsp + 0x2c8], r14
mov dword [rsp + 0x48], 0x7fc
mov r13, qword [rsp + 0x3c0]
lea r12, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae r12, qword [rsp + 0x3b0]
lea rdx, [rsp + 0xd4]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x88], rax
mov esi, dword [rsp + 0xd4]
lea ecx, [rsi + r13]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x128], xmm0
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x128]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001ae3e
add rsi, rsi
mov r9, rsi
mov r8, qword [rsp + 0x88]
mov rdx, rsi
mov rcx, qword [rsp + 0x128]
call fcn.140016a40
lea rdx, [r13*2]
mov rcx, qword [rsp + 0x128]
add rcx, rsi
mov r9, rdx
mov r8, r12
call fcn.140016a40
mov qword [rsp + 0x160], r15
lea rdx, [rsp + 0x160]
mov rcx, qword [rsp + 0x130]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae49
mov qword [rsp + 0x130], r15
mov rsi, qword [rsp + 0x160]
mov qword [rsp + 0x178], rsi
lea r8, [0x140070770]
lea rdx, [rsp + 0x178]
lea rcx, [rsp + 0x170]
call fcn.140016cd0
nop
mov r8, qword [rsp + 0x70]
add r8, 8
mov rdx, rax
lea rcx, [rsp + 0x168]
call fcn.140016bf0
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x140019437
mov rdi, qword [rax]
mov qword [rax], r15
mov qword [rsp + 0x50], rdi
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140019451
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x168], r15
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001946b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r15
test rsi, rsi
je 0x140019480
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r15
test r14, r14
je 0x140019495
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x2c8], r15
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, 0xffffffffffffffff
mov r8, r14
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x1400194b0
mov qword [rsp + 0x470], r15
mov qword [rsp + 0x480], r15
mov qword [rsp + 0x488], 7
mov word [rsp + 0x470], r15w
mov rdx, rax
lea rcx, [rsp + 0x470]
call fcn.140006a60
mov r12d, 0xfffc
lea rcx, [rsp + 0x470]
call fcn.140010e70
test al, al
sete sil
mov rdx, qword [rsp + 0x488]
cmp rdx, 8
jb 0x140019554
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001954f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001954f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
movdqa xmm0, xmmword [0x140092810]
movdqu xmmword [rsp + 0x480], xmm0
mov word [rsp + 0x470], r15w
test sil, sil
je 0x140019982
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsi + 0x100]
test rcx, rcx
je 0x140019982
add rcx, 0xb8
cmp qword [rcx + 0x18], 8
jb 0x1400195c3
mov rcx, qword [rcx]
mov qword [rsp + 0x180], r15
mov rdx, r14
nop
inc rdx
cmp word [rcx + rdx*2], 0
jne 0x1400195d0
lea r8, [rsp + 0x180]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140005680
mov r13, qword [rsp + 0x180]
mov qword [rsp + 0x2d0], r13
mov r12, qword [rsi + 0x100]
lea rdx, [rsp + 0xd8]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r14, rax
mov esi, dword [rsp + 0xd8]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x138], xmm0
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x138]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001ae54
add rsi, rsi
mov r9, rsi
mov r8, r14
mov rdx, rsi
mov rcx, qword [rsp + 0x138]
call fcn.140016a40
mov rcx, qword [rsp + 0x138]
add rcx, rsi
mov r9d, 2
lea r8, [0x140070774]
mov edx, r9d
call fcn.140016a40
mov qword [rsp + 0x188], r15
lea rdx, [rsp + 0x188]
mov rcx, qword [rsp + 0x140]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae5f
mov qword [rsp + 0x140], r15
mov r14, qword [rsp + 0x188]
mov qword [rsp + 0x208], r14
mov dword [rsp + 0x48], 0x7fffc
lea r8, [r12 + 0x28]
lea rdx, [rsp + 0x208]
lea rcx, [rsp + 0x1a8]
call fcn.140016bf0
nop
lea r8, [0x140070770]
mov rdx, rax
lea rcx, [rsp + 0x1a0]
call fcn.140016cd0
nop
mov rsi, qword [rsp + 0x70]
lea r8, [rsi + 8]
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.140016bf0
nop
lea r8, [rsi + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.140016bf0
lea rcx, [rsp + 0x60]
cmp rcx, rax
je 0x140019754
mov rsi, qword [rax]
mov qword [rax], r15
test rbx, rbx
je 0x140019747
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rbx, rsi
mov qword [rsp + 0x60], rbx
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001976e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r15
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x140019788
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r15
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x1400197a2
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r15
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x1400197bc
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r15
test r14, r14
je 0x1400197d1
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x208], r15
mov r14, qword [rsi + 0x100]
lea rdx, [rsp + 0xdc]
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r12, rax
mov esi, dword [rsp + 0xdc]
lea ecx, [rsi + 1]
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x148]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPreallocateStringBuffer
test eax, eax
js 0x14001ae6a
add rsi, rsi
mov r9, rsi
mov r8, r12
mov rdx, rsi
mov rcx, qword [rsp + 0x148]
call fcn.140016a40
mov rcx, qword [rsp + 0x148]
add rcx, rsi
mov r9d, 2
lea r8, [0x140070774]
mov edx, r9d
call fcn.140016a40
mov qword [rsp + 0x1b0], r15
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rsp + 0x150]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsPromoteStringBuffer
test eax, eax
js 0x14001ae75
mov qword [rsp + 0x150], r15
mov rsi, qword [rsp + 0x1b0]
mov qword [rsp + 0x1d0], rsi
mov r12d, 0x3ffffc
lea r8, [r14 + 0x28]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x1c8]
call fcn.140016bf0
nop
lea r8, [0x140070770]
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.140016cd0
nop
mov r8, qword [rsp + 0x70]
add r8, 8
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.140016bf0
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001990a
mov r14, qword [rax]
mov qword [rax], r15
test rdi, rdi
je 0x140019902
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rdi, r14
mov qword [rsp + 0x50], r14
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x140019924
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r15
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001993e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r15
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x140019958
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r15
test rsi, rsi
je 0x14001996d
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r15
test r13, r13
je 0x140019982
mov rcx, r13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x2d0], r15
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r13, rax
cmp rax, 0xffffffffffffffff
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x298], rax
jne 0x1400199d8
mov r13, r15
mov qword [rsp + 0x2a0], r15
jmp 0x1400199e0
mov qword [rsp + 0x2a0], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r14, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rsi
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r14
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
mov qword [rsp + 0x58], r15
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140019a30
mov qword [rsp + 0x490], r15
mov qword [rsp + 0x4a0], r15
mov qword [rsp + 0x4a8], 7
mov word [rsp + 0x490], r15w
mov rdx, rax
lea rcx, [rsp + 0x490]
call fcn.140006a60
or r12d, 0xc00000
mov dword [rsp + 0x48], r12d
lea rcx, [rsp + 0x490]
call fcn.140010e70
movzx esi, al
mov rdx, qword [rsp + 0x4a8]
cmp rdx, 8
jb 0x140019ad7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019ad2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140019ad2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
movdqa xmm0, xmmword [0x140092810]
movdqu xmmword [rsp + 0x4a0], xmm0
mov word [rsp + 0x490], r15w
test sil, sil
je 0x14001ac93
mov qword [rsp + 0x510], rbx
lea rax, [rsp + 0x510]
mov qword [rsp + 0x248], rax
lea rax, [0x1400afec8]
mov qword [rsp + 0x358], rax
lock inc qword [0x1400afec8]
mov rcx, qword [0x1400afec0]
test rcx, rcx
je 0x140019b7f
mov qword [rsp + 0x1d8], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x1d8]
mov rdx, qword [rsp + 0x510]
call qword [rax + 0x30]
test eax, eax
js 0x14001ae80
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0xa0], rax
lock dec qword [0x1400afec8]
mov ebx, dword [rsp + 0x48]
or ebx, 0xe000000
jmp 0x140019ba4
lock dec qword [0x1400afec8]
lea r8, [rsp + 0x248]
lea rdx, [rsp + 0xa0]
call fcn.140012760
mov ebx, dword [rsp + 0x48]
bts ebx, 0x19
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x1e0]
call fcn.140014bd0
or ebx, 0x11000000
mov dword [rsp + 0x48], ebx
cmp qword [rsp + 0x58], 0
je 0x140019bd5
lea rcx, [rsp + 0x58]
call fcn.140006b90
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e0], r15
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0xa0], 0
je 0x140019c03
lea rcx, [rsp + 0xa0]
call fcn.140006b90
nop
mov qword [rsp + 0x550], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x560], xmm0
mov r13, qword [rsp + 0x70]
lea rdi, [r13 + 0x48]
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140019c2e
mov rdi, qword [rdi]
movabs r14, 0x7ffffffffffffffe
cmp rsi, 8
jae 0x140019c57
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x550], xmm0
mov qword [rsp + 0x568], 7
jmp 0x140019c91
mov rbx, rsi
or rbx, 7
cmp rbx, r14
cmova rbx, r14
lea rdx, [rbx + 1]
call fcn.140006bb0
mov qword [rsp + 0x550], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x568], rbx
mov qword [rsp + 0x560], rsi
mov qword [rsp + 0x570], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x580], xmm0
lea rdi, [r13 + 0x68]
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140019cbf
mov rdi, qword [rdi]
cmp rsi, 8
jae 0x140019cde
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x570], xmm0
mov qword [rsp + 0x588], 7
jmp 0x140019d18
mov rbx, rsi
or rbx, 7
cmp rbx, r14
cmova rbx, r14
lea rdx, [rbx + 1]
call fcn.140006bb0
mov qword [rsp + 0x570], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x588], rbx
mov qword [rsp + 0x580], rsi
mov qword [rsp + 0x590], r15
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x5a0], xmm0
lea rdi, [r13 + 0x88]
mov rsi, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 8
jb 0x140019d49
mov rdi, qword [rdi]
cmp rsi, 8
jae 0x140019d68
movups xmm0, xmmword [rdi]
movaps xmmword [rsp + 0x590], xmm0
mov qword [rsp + 0x5a8], 7
jmp 0x140019da2
mov rbx, rsi
or rbx, 7
cmp rbx, r14
cmova rbx, r14
lea rdx, [rbx + 1]
call fcn.140006bb0
mov qword [rsp + 0x590], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x5a8], rbx
mov qword [rsp + 0x5a0], rsi
lea r12, [rsp + 0x550]
nop dword [rax]
nop word [rax + rax]
mov rsi, qword [r12 + 0x10]
mov rdi, r12
cmp qword [r12 + 0x18], 8
jb 0x140019dd4
mov rdi, qword [r12]
cmp rsi, 8
jae 0x140019df3
movups xmm0, xmmword [rdi]
movups xmmword [rsp + 0x430], xmm0
mov qword [rsp + 0x448], 7
jmp 0x140019e2d
mov rbx, rsi
or rbx, 7
cmp rbx, r14
cmova rbx, r14
lea rdx, [rbx + 1]
call fcn.140006bb0
mov qword [rsp + 0x430], rax
lea r8, [rsi*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x448], rbx
mov qword [rsp + 0x440], rsi
xor edx, edx
mov rcx, qword [rsp + 0x50]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r13, rax
mov rbx, 0xffffffffffffffff
nop dword [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140019e50
mov rax, r14
sub rax, rsi
cmp rax, rbx
jb 0x14001aee4
lfence
lea rax, [rsp + 0x430]
mov r14, qword [rsp + 0x430]
cmp qword [rsp + 0x448], 8
cmovae rax, r14
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x3f0], r15
mov qword [rsp + 0x400], r15
mov qword [rsp + 0x408], r15
lea rcx, [rbx + rsi]
mov qword [rsp + 0xf0], rcx
mov edi, 7
lea rax, [rsp + 0x3f0]
mov qword [rsp + 0x88], rax
cmp rcx, rdi
jbe 0x140019f14
mov rdi, rcx
or rdi, 7
movabs rax, 0x7ffffffffffffffe
cmp rdi, rax
jbe 0x140019eea
mov rdi, rax
jmp 0x140019ef7
cmp rdi, 0xa
mov eax, 0xa
cmovb rdi, rax
lea rdx, [rdi + 1]
call fcn.140006bb0
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x3f0], rax
lea rcx, [rbx + rsi]
mov qword [rsp + 0x400], rcx
mov qword [rsp + 0x408], rdi
add rbx, rbx
mov r8, rbx
mov rdx, r13
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdi, qword [rsp + 0x88]
lea rcx, [rbx + rdi]
lea r8, [rsi + rsi]
mov rdx, qword [rsp + 0xc0]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0xf0]
mov word [rdi + rax*2], r15w
or dword [rsp + 0x48], 0x20000000
lea rcx, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 8
cmovae rcx, qword [rsp + 0x3f0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x14001a04b
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x140019fd8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140019fd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a120
call fcn.140058b40
mov word [rsp + 0x3f0], r15w
mov rax, qword [rsp + 0x448]
cmp rax, 8
jb 0x14001a020
lea rdx, [rax*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14001a018
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001a044
mov rcx, r14
call fcn.140058b40
add r12, 0x20
lea rax, [rsp + 0x5b0]
cmp r12, rax
je 0x14001a19a
movabs r14, 0x7ffffffffffffffe
jmp 0x140019dc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [rsp + 0x3f0]
cmp qword [rsp + 0x408], 8
cmovae rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x1e8], r15
mov rsi, 0xffffffffffffffff
mov rdx, rsi
nop word [rax + rax]
inc rdx
cmp word [rcx + rdx*2], 0
jne 0x14001a080
lea r8, [rsp + 0x1e8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateString
mov ecx, eax
call fcn.140005680
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14001a0ad
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rbx, qword [rsp + 0x1e8]
mov qword [rsp + 0x50], rbx
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rdi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, [0x140070778]
mov rcx, rdi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x14001a12c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a127
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a127
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x400], r15
mov qword [rsp + 0x408], 7
mov word [rsp + 0x3f0], r15w
mov rax, qword [rsp + 0x448]
cmp rax, 8
jb 0x14001a18f
lea rdx, [rax*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14001a187
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a187
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.140058b40
mov word [rsp + 0x430], r15w
jmp 0x14001a1a1
mov rsi, 0xffffffffffffffff
lea r9, [sym.OmenCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x550]
call fcn.1400599a0
lea rax, [rsp + 0x58]
mov qword [rsp + 0xf0], rax
lea rax, [0x1400afee8]
mov qword [rsp + 0x360], rax
lock inc qword [0x1400afee8]
mov rcx, qword [0x1400afee0]
test rcx, rcx
je 0x14001a22b
mov qword [rsp + 0x1f0], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x1f0]
mov rdx, qword [rsp + 0x58]
call qword [rax + 0x40]
test eax, eax
js 0x14001ae8b
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0xa8], rax
lock dec qword [0x1400afee8]
jmp 0x14001a249
lock dec qword [0x1400afee8]
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0xa8]
call fcn.140017360
nop
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x98]
call fcn.14001aef0
nop
cmp qword [rsp + 0xa8], 0
je 0x14001a277
lea rcx, [rsp + 0xa8]
call fcn.140006b90
lea rax, [0x1400aff08]
mov qword [rsp + 0x368], rax
lock inc qword [0x1400aff08]
cmp qword [0x1400aff00], 0
je 0x14001a2b4
lea r8, [0x1400aff00]
lea rdx, [rsp + 0x68]
call fcn.140017120
nop
lock dec qword [0x1400aff08]
jmp 0x14001a2de
lock dec qword [0x1400aff08]
lea rax, [0x1400171b0]
mov qword [rsp + 0x2d8], rax
lea r8, [rsp + 0x2d8]
lea rdx, [rsp + 0x68]
call fcn.1400171d0
nop
mov qword [rsp + 0x1f8], r15
mov rcx, qword [rsp + 0x98]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f8]
call qword [rax + 0x40]
test eax, eax
js 0x14001ae96
mov rbx, qword [rsp + 0x1f8]
mov qword [rsp + 0x2e0], rbx
lea r9, [rsp + 0x530]
lea r8, [rsp + 0x538]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov qword [rsp + 0x90], r15
mov rax, qword [rbx]
lea r8, [rsp + 0x90]
mov rdx, qword [rsp + 0x530]
mov rcx, rbx
call qword [rax + 0x50]
test eax, eax
js 0x14001aea1
mov rdi, qword [rsp + 0x90]
mov qword [rsp + 0x260], rdi
lea rcx, [rsp + 0x2e0]
call fcn.140006b90
test rdi, rdi
je 0x14001a775
mov qword [rsp + 0x200], r15
mov rax, qword [rdi]
lea rdx, [rsp + 0x200]
mov rcx, rdi
call qword [rax + 0x40]
test eax, eax
js 0x14001aeac
mov rbx, qword [rsp + 0x200]
mov qword [rsp + 0x210], rbx
lea r8, [rsp + 0x210]
lea rdx, str.xmlns_
lea rcx, [rsp + 0x258]
call fcn.140016db0
nop
lea r8, [0x140065898]
mov rdx, rax
lea rcx, [rsp + 0xe0]
call fcn.140016cd0
nop
mov rcx, qword [rsp + 0x258]
test rcx, rcx
je 0x14001a404
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x258], r15
test rbx, rbx
je 0x14001a411
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x228], r15
mov rcx, qword [rsp + 0x98]
test rcx, rcx
jne 0x14001a42b
mov rcx, r15
jmp 0x14001a44f
mov qword [rsp + 0x218], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x218]
lea rdx, [0x140071aa8]
call qword [rax]
mov rcx, qword [rsp + 0x218]
mov qword [rsp + 0x220], rcx
mov rax, qword [rcx]
lea rdx, [rsp + 0x228]
call qword [rax + 0x30]
test eax, eax
js 0x14001aeb7
lea rcx, [rsp + 0x220]
call fcn.140006b90
mov rbx, qword [rsp + 0x228]
mov qword [rsp + 0x2e8], rbx
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x3d0], r15
mov qword [rsp + 0x3e0], r15
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r15w
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001a4c0
mov rdx, rax
lea rcx, [rsp + 0x3d0]
call fcn.140006a60
nop
test rbx, rbx
je 0x14001a4e9
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rcx, qword [rsp + 0xe0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov edi, eax
xor edx, edx
mov rcx, qword [rsp + 0xe0]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov qword [rsp + 0x450], r15
mov qword [rsp + 0x460], r15
mov qword [rsp + 0x468], 7
mov word [rsp + 0x450], r15w
nop dword [rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x14001a530
mov r8, rsi
mov rdx, rax
lea rcx, [rsp + 0x450]
call fcn.140006a60
nop
lea r9, [rsp + 0x450]
cmp qword [rsp + 0x468], 8
cmovae r9, qword [rsp + 0x450]
lea rcx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rcx, qword [rsp + 0x3d0]
mov rax, qword [rsp + 0x460]
mov qword [rsp + 0x20], rax
mov rdx, qword [rsp + 0x3e0]
call fcn.14000d4c0
mov rdx, rax
cmp qword [rsp + 0x3e0], rax
jb 0x14001aec2
lfence
mov r8, qword [rsp + 0x3e0]
mov rax, r8
sub rax, rdx
cmp rax, rdi
cmovb rdi, rax
lea rax, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rax, qword [rsp + 0x3d0]
lea rcx, [rax + rdx*2]
sub r8, rdi
mov qword [rsp + 0x3e0], r8
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdi*2]
call sub.VCRUNTIME140.dll_memmove
nop
mov rdx, qword [rsp + 0x468]
cmp rdx, 8
jb 0x14001a64e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a649
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
lea rcx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rcx, qword [rsp + 0x3d0]
mov edx, dword [rsp + 0x3e0]
test edx, edx
jne 0x14001a67d
mov qword [rsp + 0x4f0], r15
jmp 0x14001a692
lea r9, [rsp + 0x4f0]
lea r8, [rsp + 0x4f8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
mov rcx, qword [rsp + 0x68]
test rcx, rcx
jne 0x14001a6a1
mov rcx, r15
jmp 0x14001a6c5
mov qword [rsp + 0x230], r15
mov rax, qword [rcx]
lea r8, [rsp + 0x230]
lea rdx, [0x140071ab8]
call qword [rax]
mov rcx, qword [rsp + 0x230]
mov qword [rsp + 0x238], rcx
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4f0]
call qword [rax + 0x30]
test eax, eax
js 0x14001aec8
lea rcx, [rsp + 0x238]
call fcn.140006b90
nop
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 8
jb 0x14001a73c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a737
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x3e0], r15
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r15w
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x14001a76b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rdi, qword [rsp + 0x90]
jmp 0x14001a79f
cmp qword [rsp + 0x68], 0
je 0x14001a787
lea rcx, [rsp + 0x68]
call fcn.140006b90
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14001a79f
mov rax, qword [rcx]
call qword [rax + 8]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call fcn.14001b0a0
mov r14, qword [0x1400b0190]
mov rsi, qword [r14]
mov rbx, qword [rsi + 8]
mov qword [rsp + 0x2f8], rbx
mov dword [rsp + 0x300], r15d
cmp byte [rbx + 0x19], 0
jne 0x14001a81f
nop dword [rax]
mov qword [rsp + 0x2f8], rbx
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001a808
mov dword [rsp + 0x300], r15d
mov rbx, qword [rbx + 0x10]
jmp 0x14001a819
mov dword [rsp + 0x300], 1
mov rsi, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001a7e0
cmp byte [rsi + 0x19], 0
jne 0x14001a83b
lea r8, [rsi + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001a8f8
movabs rax, 0x555555555555555
cmp qword [r14 + 8], rax
je 0x14001aed3
mov rdi, qword [r14]
mov qword [rsp + 0x320], r14
mov qword [rsp + 0x328], r15
lfence
mov ecx, 0x30
call fcn.140058b74
mov rbx, rax
mov qword [rsp + 0x328], rax
mov qword [rsp + 0x240], r15
lea rdx, [rsp + 0x240]
mov rcx, qword [rsp + 0x40]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
test eax, eax
js 0x14001aed9
mov rax, qword [rsp + 0x240]
mov qword [rbx + 0x20], rax
mov rcx, qword [rsp + 0x68]
mov qword [rbx + 0x28], rcx
test rcx, rcx
je 0x14001a8bc
mov rax, qword [rcx]
call qword [rax + 8]
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], rdi
mov word [rbx + 0x18], 0
movups xmm0, xmmword [rsp + 0x2f8]
movaps xmmword [rsp + 0x380], xmm0
mov r8, rbx
lea rdx, [rsp + 0x380]
mov rcx, r14
call fcn.140006d30
mov rdi, qword [rsp + 0x90]
test rdi, rdi
je 0x14001a90b
lea rcx, [rsp + 0x260]
call fcn.140006b90
nop
cmp qword [rsp + 0x68], 0
je 0x14001a91e
lea rcx, [rsp + 0x68]
call fcn.140006b90
nop
cmp qword [rsp + 0x98], 0
je 0x14001a937
lea rcx, [rsp + 0x98]
call fcn.140006b90
nop
cmp qword [rsp + 0x58], 0
je 0x14001a94a
lea rcx, [rsp + 0x58]
call fcn.140006b90
nop
mov rcx, qword [rsp + 0x2a0]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001a963
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001a9ae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001a9a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001a9a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x3c0], r15
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r15w
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
mov r12, qword [0x1400b0190]
cmp qword [r12 + 8], 0
je 0x14001aaf2
mov r13, qword [r12]
mov rsi, qword [r13 + 8]
cmp byte [rsi + 0x19], 0
jne 0x14001aa24
nop word [rax + rax]
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001aa18
mov rsi, qword [rsi + 0x10]
jmp 0x14001aa1e
mov r13, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x14001aa00
cmp byte [r13 + 0x19], 0
jne 0x14001aa3d
lea r8, [r13 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001aa41
mov r13, qword [r12]
mov rax, qword [0x1400b0190]
mov r14, qword [rax]
cmp r13, r14
je 0x14001aaf2
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], 0
jne 0x14001aa84
nop
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001aa78
mov rsi, qword [rsi + 0x10]
jmp 0x14001aa7e
mov r14, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x14001aa60
cmp byte [r14 + 0x19], 0
jne 0x14001aac7
lea r8, [r14 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14001e3d0
test al, al
jne 0x14001aac7
lea rcx, [r14 + 0x28]
lea rax, [rsp + 0xe8]
cmp rax, rcx
je 0x14001aac5
mov rcx, qword [rcx]
mov qword [rsp + 0xe8], rcx
test rcx, rcx
je 0x14001aac5
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x14001aaf2
lea rcx, str.invalid_map_K__T__key
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
nop
xor r15d, r15d
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x50]
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb8], rax
mov r12, qword [0x1400b0190]
cmp qword [r12 + 8], 0
je 0x14001ab68
mov r14, qword [r12]
mov rsi, qword [r14 + 8]
cmp byte [rsi + 0x19], 0
jne 0x14001ab34
nop
lea rdx, [rsi + 0x20]
lea r8, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001ab28
mov rsi, qword [rsi + 0x10]
jmp 0x14001ab2e
mov r14, rsi
mov rsi, qword [rsi]
cmp byte [rsi + 0x19], 0
je 0x14001ab10
cmp byte [r14 + 0x19], 0
jne 0x14001ab4d
lea r8, [r14 + 0x20]
lea rdx, [rsp + 0x40]
call fcn.14001e3d0
test al, al
je 0x14001ab51
mov r14, qword [r12]
mov rax, qword [0x1400b0190]
cmp r14, qword [rax]
je 0x14001ab68
lea rdx, [rsp + 0x40]
call fcn.14001d990
nop
lea rcx, [0x1400b01b0]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rax, qword [rsp + 0xe8]
mov r12, qword [rsp + 0xb8]
mov qword [r12], rax
jmp 0x14001ad74
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rsi, rax
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rsi
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x3a0]
call fcn.14001e1a0
mov r12, qword [rsp + 0xb8]
mov qword [r12], r15
cmp qword [rsp + 0x58], 0
je 0x14001acea
lea rcx, [rsp + 0x58]
call fcn.140006b90
nop
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001acfe
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001ad49
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ad44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ad44
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140058b40
mov qword [rsp + 0x3c0], r15
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r15w
lea rcx, [0x1400b01b0]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001ad88
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r15
test rdi, rdi
je 0x14001ad96
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
test rbx, rbx
je 0x14001ada4
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rax, qword [rsp + 0x80]
test rax, rax
je 0x14001adba
mov rcx, rax
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
nop
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x14001adcc
mov rcx, rax
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, r12
mov rcx, qword [rsp + 0x7c8]
xor rcx, rsp
call fcn.140058b20
lea r11, [rsp + 0x7d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
call fcn.140009c80
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
call fcn.140005050
nop
lfence
mov ecx, eax
call fcn.1400054a0
nop
call fcn.140005070
int3