Function at 0x14001c370
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7d0
mov rax, qword [0x1400c9008]
xor rax, rsp
mov qword [rsp + 0x7c0], rax
mov r15, rdx
mov qword [rsp + 0xb0], rdx
mov rbx, rcx
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0xc8], rdx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x34], r13d
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x5b0]
call sub.VCRUNTIME140.dll_memset
nop
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
mov r12d, 2
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x450]
mov rcx, rbx
call fcn.14001ed80
nop
cmp qword [rsp + 0x460], r13
je 0x14001c4b1
lea r8, [rsp + 0x450]
cmp qword [rsp + 0x468], 8
cmovae r8, qword [rsp + 0x450]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
test eax, eax
jne 0x14001c4b1
lea rax, [rsp + 0x5b0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001c490
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x3d0]
call fcn.140005930
nop
mov rdx, qword [rsp + 0x468]
cmp rdx, 8
jb 0x14001c4fc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c4f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c4f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x460], r13
mov qword [rsp + 0x468], 7
mov word [rsp + 0x450], r13w
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rdx, qword [rsp + 0x3d0]
mov r8d, dword [rsp + 0x3e0]
lea rcx, [rsp + 0x60]
call fcn.140005df0
nop
and r12d, 0xfffffffd
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 8
jb 0x14001c59f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c59a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c59a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
lea rdx, [rsp + 0x470]
mov rcx, rbx
call fcn.14001ed80
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001c5db
mov rax, qword [rax]
mov r8d, ecx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140005df0
nop
mov rdx, qword [rsp + 0x488]
cmp rdx, 8
jb 0x14001c63a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c635
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c635
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x480], r13
mov qword [rsp + 0x488], 7
mov word [rsp + 0x470], r13w
mov rdi, r13
mov qword [rsp + 0x58], r13
mov rsi, r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov r14, qword [rsp + 0x60]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001c70e
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [r15], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001c6c6
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c6da
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001c6f4
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001c706
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, r15
jmp 0x14001e3fe
lea rax, [rsp + 0x268]
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x268], xmm0
mov rcx, qword [rbx + 0x118]
test rcx, rcx
je 0x14001c75a
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x118]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x110]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rcx
lea rax, [rsp + 0x278]
mov qword [rsp + 0x258], rax
movdqu xmmword [rsp + 0x278], xmm0
mov rcx, qword [rbx + 0x108]
test rcx, rcx
je 0x14001c7ba
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x108]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x100]
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rcx
lea rax, [rsp + 0x350]
mov qword [rsp + 0x248], rax
xor edx, edx
mov r15, qword [rsp + 0x88]
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.140005160
nop
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x278]
mov r8, rax
lea rdx, [rsp + 0x240]
call fcn.1400207f0
nop
lea rcx, [rsp + 0x38]
cmp rcx, rax
je 0x14001c853
mov rbx, qword [rax]
mov qword [rax], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c84e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x38], rbx
mov rcx, qword [rsp + 0x240]
test rcx, rcx
je 0x14001c86d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x240], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x38]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400ce310]
mov qword [rsp + 0x2a0], rax
mov byte [rsp + 0x2a8], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001c8c2
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rsp + 0x2a8], 1
cmp qword [0x1400ce368], 0
je 0x14001c959
mov rax, qword [0x1400ce360]
mov qword [rsp + 0xe0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001c925
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.140022460
test al, al
je 0x14001c911
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xe0]
jmp 0x14001c91f
mov rax, rbx
mov qword [rsp + 0xe0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001c8f1
cmp byte [rax + 0x19], 0
jne 0x14001c945
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.140022460
test al, al
mov rax, qword [rsp + 0xe0]
je 0x14001c94c
mov rax, qword [0x1400ce360]
cmp rax, qword [0x1400ce360]
jne 0x14001de23
lea rdx, [rsp + 0x390]
mov rbx, qword [rsp + 0x108]
mov rcx, rbx
call fcn.14001ee90
nop
lea r8, [0x140086ba8]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x180]
call fcn.14001a280
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.14001a160
nop
lea r8, [0x140086cd8]
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14001a280
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14001a160
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.14001a160
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001c9fc
mov rdi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x58], rdi
mov rcx, qword [rsp + 0x250]
test rcx, rcx
je 0x14001ca16
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x250], r13
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x14001ca30
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x260], r13
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001ca4a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r13
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14001ca64
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r13
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x14001ca7e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x180], r13
lea r8, [0x140086ba8]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1a0]
call fcn.14001a280
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.14001a160
nop
lea r8, [0x140086cd8]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.14001a280
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.14001a160
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001caf3
mov rsi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x50], rsi
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001cb0d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r13
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001cb27
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r13
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001cb41
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r13
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001cb5b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x3f0]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cb80
mov qword [rsp + 0x3f0], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], 7
mov word [rsp + 0x3f0], r13w
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.140005930
or r12d, 8
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffff7
mov dword [rsp + 0x30], r12d
or r12d, 4
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffffb
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x3f0]
call fcn.140011630
test al, al
sete bl
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x14001cc56
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cc51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cc51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
movdqa xmm0, xmmword [0x1400a9b00]
movdqu xmmword [rsp + 0x400], xmm0
mov word [rsp + 0x3f0], r13w
test bl, bl
je 0x14001cf27
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___1st_attempt_to_locate_manifest__s_failed._Trying_the_fallback
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov r12, qword [rsp + 0x108]
mov rdx, qword [r12 + 0x100]
test rdx, rdx
je 0x14001cf27
add rdx, 0xb8
cmp qword [rdx + 0x18], 8
jb 0x14001ccc8
mov rdx, qword [rdx]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001ccd0
lea rcx, [rsp + 0xe8]
call fcn.140005df0
nop
mov rbx, qword [r12 + 0x100]
lea r8, [0x140086ba8]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1c8]
call fcn.14001a280
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14001a160
nop
lea r8, [0x140086cd8]
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.14001a280
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14001a160
nop
lea r8, [r12 + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.14001a160
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001cd91
mov rbx, qword [rax]
mov qword [rax], r13
test rdi, rdi
je 0x14001cd89
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
mov rdi, rbx
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001cdab
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r13
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14001cdc5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b0], r13
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001cddf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r13
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001cdf9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r13
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001ce13
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r13
mov rbx, qword [r12 + 0x100]
lea r8, [0x140086ba8]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1e8]
call fcn.14001a280
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.14001a160
nop
lea r8, [0x140086cd8]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.14001a280
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14001a160
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001cea5
mov rbx, qword [rax]
mov qword [rax], r13
test rsi, rsi
je 0x14001ce9d
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov rsi, rbx
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001cebf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r13
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001ced9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r13
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x14001cef3
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e0], r13
mov rcx, qword [rsp + 0x1e8]
test rcx, rcx
je 0x14001cf0d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e8], r13
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x14001cf27
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xe8], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r12, rax
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rbx
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r12
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rcx, [rsp + 0x90]
call fcn.14001a7c0
nop
lea r9, [rsp + 0x4d0]
lea r8, [rsp + 0x4d8]
mov edx, 0x2e
lea rcx, str.__xml_version_1.0__encoding_UTF_8____a_a__a_
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x128]
call fcn.140021db0
mov r12d, dword [rsp + 0x48]
or r12d, 0x40
mov dword [rsp + 0x30], r12d
and r12d, 0xffffffbf
mov dword [rsp + 0x30], r12d
or r12d, 0x20
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x128]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4d0]
call qword [rax + 0x30]
test eax, eax
js 0x14001e42b
and r12d, 0xffffffdf
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x128], 0
je 0x14001d001
lea rcx, [rsp + 0x128]
call fcn.140013010
lea rcx, [rsp + 0x70]
call fcn.14001a7c0
nop
lea rcx, [rsp + 0x68]
call fcn.14001a7c0
nop
mov qword [rsp + 0x1f0], r13
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f0]
call qword [rax + 0x40]
test eax, eax
js 0x14001e436
mov rbx, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rbx
bts r12d, 0xb
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x4f0]
lea r8, [rsp + 0x4f8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea r8, [rsp + 0x4f0]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1f8]
call fcn.14001e4c0
nop
btr r12d, 0xb
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d0af
lea rcx, [rsp + 0x1f8]
call fcn.140013010
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.140017c00
nop
mov qword [rsp + 0x80], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x410]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d0f3
mov qword [rsp + 0x410], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], r13w
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.140005930
bts r12d, 0xf
mov dword [rsp + 0x30], r12d
btr r12d, 0xf
mov dword [rsp + 0x30], r12d
bts r12d, 0xe
mov dword [rsp + 0x30], r12d
btr r12d, 0xe
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x410]
call fcn.140011630
movzx ebx, al
mov rdx, qword [rsp + 0x428]
cmp rdx, 8
jb 0x14001d1c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d1c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d1c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
movdqa xmm0, xmmword [0x1400a9b00]
movdqu xmmword [rsp + 0x420], xmm0
mov word [rsp + 0x410], r13w
test bl, bl
je 0x14001e1a1
mov qword [rsp + 0x530], rdi
lea rax, [rsp + 0x530]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xf0]
call fcn.140013560
bts r12d, 0x10
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xa8]
call fcn.140017100
bts r12d, 0x14
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2c8], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
cmp qword [rsp + 0x80], 0
je 0x14001d286
lea rcx, [rsp + 0x80]
call fcn.140013010
mov qword [rsp + 0x2d8], r13
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x80], rax
btr r12d, 0x14
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xa8], 0
je 0x14001d2d8
lea rcx, [rsp + 0xa8]
call fcn.140013010
btr r12d, 0x10
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf0], 0
je 0x14001d2fb
lea rcx, [rsp + 0xf0]
call fcn.140013010
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x248], rax
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x130]
call fcn.14001a9a0
bts r12d, 0x15
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xf8]
call fcn.14001e520
bts r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x70], 0
je 0x14001d35b
lea rcx, [rsp + 0x70]
call fcn.140013010
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x70], rax
btr r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf8], 0
je 0x14001d392
lea rcx, [rsp + 0xf8]
call fcn.140013010
btr r12d, 0x15
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x130], 0
je 0x14001d3b5
lea rcx, [rsp + 0x130]
call fcn.140013010
nop
mov qword [rsp + 0x200], r13
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x200]
call qword [rax + 0x40]
mov dword [rsp + 0x114], eax
test eax, eax
js 0x14001e441
mov rbx, qword [rsp + 0x200]
mov qword [rsp + 0x298], rbx
bts r12d, 0x1a
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x510]
lea r8, [rsp + 0x518]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov qword [rsp + 0x208], r13
mov rax, qword [rbx]
lea r8, [rsp + 0x208]
mov rdx, qword [rsp + 0x510]
mov rcx, rbx
call qword [rax + 0x50]
mov dword [rsp + 0x110], eax
test eax, eax
js 0x14001e451
mov rbx, qword [rsp + 0x208]
mov qword [rsp + 0x290], rbx
bts r12d, 0x1b
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x78], 0
je 0x14001d477
lea rcx, [rsp + 0x78]
call fcn.140013010
mov qword [rsp + 0x290], r13
mov qword [rsp + 0x78], rbx
btr r12d, 0x1b
mov dword [rsp + 0x30], r12d
btr r12d, 0x1a
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x298]
call fcn.140013010
nop
cmp qword [rsp + 0x80], 0
je 0x14001d4c4
lea rcx, [rsp + 0x80]
call fcn.140013010
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001d4dd
call qword [rsp + 0x160]
mov rbx, qword [rsp + 0x108]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x550]
call fcn.1400051a0
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x570]
call fcn.1400051a0
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x590]
call fcn.1400051a0
nop
lea rbx, [rsp + 0x550]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x430]
call fcn.1400051a0
nop
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea r8, [rsp + 0x430]
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.14000ffe0
nop
lea rcx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rcx, qword [rsp + 0x3b0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x14001d677
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d5d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d5d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d5d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d640
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d63b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d63b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
add rbx, 0x20
lea rax, [rsp + 0x5b0]
cmp rbx, rax
je 0x14001d7d9
jmp 0x14001d530
lea rdx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rdx, qword [rsp + 0x3b0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14001d6a0
mov r8, rax
lea rcx, [rsp + 0x210]
call fcn.140005df0
nop
mov rdi, qword [rsp + 0x210]
mov qword [rsp + 0x210], r13
test rsi, rsi
je 0x14001d6dd
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x50], rdi
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d754
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d74f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d74f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d7bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d7b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d7b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
lea r9, [sym.NetworkCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x550]
call fcn.140062968
cmp qword [rsp + 0x78], 0
je 0x14001dc10
mov qword [rsp + 0x218], r13
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x218]
call qword [rax + 0x40]
mov dword [rsp + 0x118], eax
test eax, eax
js 0x14001e461
mov rbx, qword [rsp + 0x218]
mov qword [rsp + 0x228], rbx
mov r12d, dword [rsp + 0x48]
bts r12d, 0x1d
mov dword [rsp + 0x30], r12d
lea r8, [rsp + 0x228]
lea rdx, str.xmlns_
lea rcx, [rsp + 0x220]
call fcn.14001a3a0
nop
lea r8, [0x140079508]
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14001a280
nop
mov rcx, qword [rsp + 0x220]
test rcx, rcx
je 0x14001d89a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x220], r13
btr r12d, 0x1d
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d8b9
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x228], r13
mov qword [rsp + 0x230], r13
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x138]
call fcn.140021eb0
mov eax, 1
mov dword [rsp + 0x34], eax
and eax, 0xfffffffe
mov dword [rsp + 0x34], eax
or r12d, 0x80000000
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x230]
call qword [rax + 0x30]
mov dword [rsp + 0x11c], eax
test eax, eax
js 0x14001e471
btr r12d, 0x1f
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x138], 0
je 0x14001d936
lea rcx, [rsp + 0x138]
call fcn.140013010
mov rbx, qword [rsp + 0x230]
mov qword [rsp + 0xb8], rbx
bts r12d, 0x1e
mov dword [rsp + 0x30], r12d
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x370]
call fcn.140005160
nop
btr r12d, 0x1e
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d98a
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb8], r13
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov ebx, eax
xor edx, edx
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x490]
call fcn.140005160
nop
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001d9c7
mov rax, qword [rax]
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov qword [rsp + 0x20], rdx
mov r9, rax
mov rdx, qword [rsp + 0x380]
call fcn.14000cb00
mov rdx, rax
cmp qword [rsp + 0x380], rax
jb 0x14001e481
lfence
mov r8, qword [rsp + 0x380]
mov rax, r8
sub rax, rdx
cmp rax, rbx
cmovb rbx, rax
lea rax, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rax, qword [rsp + 0x370]
lea rcx, [rax + rdx*2]
sub r8, rbx
mov qword [rsp + 0x380], r8
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call sub.VCRUNTIME140.dll_memmove
nop
mov rdx, qword [rsp + 0x4a8]
cmp rdx, 8
jb 0x14001daa8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001daa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001daa3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x4a0], r13
mov qword [rsp + 0x4a8], 7
mov word [rsp + 0x490], r13w
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov edx, dword [rsp + 0x380]
test edx, edx
jne 0x14001daf4
mov qword [rsp + 0x4b0], r13
jmp 0x14001db0a
lea r9, [rsp + 0x4b0]
lea r8, [rsp + 0x4b8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x140]
call fcn.140021db0
mov edi, dword [rsp + 0x34]
or edi, 0x10
mov dword [rsp + 0x34], edi
and edi, 0xffffffef
mov dword [rsp + 0x34], edi
or edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4b0]
call qword [rax + 0x30]
mov dword [rsp + 0x120], eax
test eax, eax
js 0x14001e487
and edi, 0xfffffff7
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x140], 0
je 0x14001db7a
lea rcx, [rsp + 0x140]
call fcn.140013010
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 8
jb 0x14001dbc5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dbc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dbc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x380], r13
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r13w
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001dbfc
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x100], r13
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x88]
mov r12d, dword [rsp + 0x30]
jmp 0x14001dc40
cmp qword [rsp + 0x68], 0
je 0x14001dc22
lea rcx, [rsp + 0x68]
call fcn.140013010
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14001dc37
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x48]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x108]
call fcn.14001e720
nop
mov qword [rsp + 0x238], r13
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x148]
call fcn.140021eb0
bts edi, 9
mov dword [rsp + 0x34], edi
btr edi, 9
mov dword [rsp + 0x34], edi
bts edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x148]
mov rax, qword [rcx]
lea rdx, [rsp + 0x238]
call qword [rax + 0x30]
mov dword [rsp + 0x150], eax
test eax, eax
js 0x14001e497
btr edi, 8
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x148], 0
je 0x14001dcd4
lea rcx, [rsp + 0x148]
call fcn.140013010
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0xa0], rbx
bts edi, 7
mov dword [rsp + 0x34], edi
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x320]
call fcn.140021c20
mov rsi, qword [rax]
add rsi, 0x28
lea rax, [rsp + 0xa0]
cmp rsi, rax
je 0x14001dd40
mov rax, rbx
mov qword [rsp + 0xb8], rbx
mov rbx, r13
mov qword [rsp + 0xa0], rbx
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001dd3d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xb8]
mov qword [rsi], rax
btr edi, 7
mov dword [rsp + 0x34], edi
test rbx, rbx
je 0x14001dd5d
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
cmp qword [rsp + 0x78], 0
je 0x14001dd70
lea rcx, [rsp + 0x78]
call fcn.140013010
nop
cmp qword [rsp + 0x68], 0
je 0x14001dd83
lea rcx, [rsp + 0x68]
call fcn.140013010
nop
cmp qword [rsp + 0x70], 0
je 0x14001dd96
lea rcx, [rsp + 0x70]
call fcn.140013010
nop
cmp qword [rsp + 0x90], 0
je 0x14001ddaf
lea rcx, [rsp + 0x90]
call fcn.140013010
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001ddfa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ddf5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ddf5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
jmp 0x14001de28
mov r12d, dword [rsp + 0x48]
cmp qword [0x1400ce368], 0
je 0x14001df41
mov rax, qword [0x1400ce360]
mov qword [rsp + 0xa0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001de84
nop
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.140022460
test al, al
je 0x14001de70
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xa0]
jmp 0x14001de7e
mov rax, rbx
mov qword [rsp + 0xa0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001de50
cmp byte [rax + 0x19], 0
jne 0x14001df41
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.140022460
test al, al
jne 0x14001df41
mov rcx, qword [rsp + 0xa0]
cmp rcx, qword [0x1400ce360]
je 0x14001df41
mov rax, qword [rcx + 0x28]
test rax, rax
setne byte [rsp + 0x98]
test rax, rax
je 0x14001df41
lea rax, [rsp + 0x40]
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0xd8], r13
lea rax, [rsp + 0x154]
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0xd8]
mov rcx, qword [rcx + 0x28]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
mov dword [rsp + 0x158], eax
mov dword [rsp + 0x154], eax
mov dword [rsp + 0xe0], eax
test eax, eax
js 0x14001e4a7
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001df3c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x40], rbx
mov rbx, qword [rsp + 0xb0]
lea rcx, [0x1400ce310]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001df80
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001df94
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001dfa6
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001dfb8
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001dfcd
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001dfdf
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
jmp 0x14001e3fb
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x340]
call fcn.140021c20
mov rbx, qword [rax]
add rbx, 0x28
mov qword [rsp + 0xd8], rbx
xor r8d, r8d
lea rdx, [0x140077e70]
lea rcx, [rsp + 0xd0]
call fcn.140005df0
nop
lea rax, [rsp + 0xd0]
cmp rbx, rax
je 0x14001e252
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb8], rax
mov rbx, r13
mov qword [rsp + 0xd0], rbx
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001e245
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
jmp 0x14001e25a
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x14001e26f
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xd0], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov rbx, qword [rsp + 0xb0]
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x80], 0
je 0x14001e2a6
lea rcx, [rsp + 0x80]
call fcn.140013010
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001e2c0
call qword [rsp + 0x160]
nop
cmp qword [rsp + 0x78], 0
je 0x14001e2d3
lea rcx, [rsp + 0x78]
call fcn.140013010
nop
cmp qword [rsp + 0x68], 0
je 0x14001e2e6
lea rcx, [rsp + 0x68]
call fcn.140013010
nop
cmp qword [rsp + 0x70], 0
je 0x14001e2f9
lea rcx, [rsp + 0x70]
call fcn.140013010
nop
cmp qword [rsp + 0x90], 0
je 0x14001e312
lea rcx, [rsp + 0x90]
call fcn.140013010
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001e35d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e358
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e358
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061ab0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
lea rcx, [0x1400ce310]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001e39c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001e3b0
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001e3c2
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001e3d4
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001e3e9
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001e3fb
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, rbx
mov rcx, qword [rsp + 0x7c0]
xor rcx, rsp
call fcn.140061a90
lea r11, [rsp + 0x7d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.140006130
nop
lfence
mov ecx, eax
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x114]
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x110]
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x118]
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x11c]
call fcn.140006130
nop
call fcn.1400091d0
nop
lfence
mov ecx, dword [rsp + 0x120]
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x150]
call fcn.140006130
nop
lfence
mov ecx, dword [rsp + 0x158]
call fcn.140006130
int3