Function at 0x1400052b0
Capabilities:
Get file attributes
Set file attributes

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9b0]
sub rsp, 0xab0
mov rax, qword [0x1400a2320]
xor rax, rsp
mov qword [rbp + 0x9a0], rax
mov rbx, r8
mov rdi, rdx
mov r15, rcx
mov r13, qword [rbp + 0xa18]
lea rcx, [0x14007de10]
xor esi, esi
test r8, r8
jne 0x140005335
lea rax, str.FAILED:_pOneDriveFolderPath___NULL
mov qword [rsp + 0x30], rax
lea rax, str.pOneDriveFolderPath___NULL
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9d, [r8 + 0x6f]
lea r8, str.D:dbs_shodct0910_230337_1cmdzclientonedriveProductSyncEngineincludeSetupUtilities.cpp
xor edx, edx
lea rcx, str.092cf264_0c81_4456_b6df_8b8bd786f9ac
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_OneDriveAssertWorker_wchar_t_const____ptr64__enum_OneDriveAssertType__wchar_t_const____ptr64__unsigned_int__wchar_t_const____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64_]
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rsi
or r12, 0xffffffffffffffff
mov r8, r12
inc r8
cmp word [rbx + r8*2], si
jne 0x140005348
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.1400047b0
nop
mov qword [rbp - 0x48], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x38], xmm0
mov r8, r12
inc r8
cmp word [rbx + r8*2], si
jne 0x14000536e
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.1400047b0
nop
mov r14b, sil
mov byte [rsp + 0x50], sil
lea rdx, str.Personal
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcscmp
mov dword [rsp + 0x54], eax
mov qword [rsp + 0x68], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x18]
lea rcx, [rsp + 0x68]
call fcn.140010404
nop
cmp qword [r15 + 0x18], rsi
jne 0x140005411
lea rax, str.FAILED:__pAccountManager___nullptr
mov qword [rsp + 0x30], rax
lea rax, str._pAccountManager___nullptr
mov qword [rsp + 0x28], rax
lea rax, [0x14007de10]
mov qword [rsp + 0x20], rax
mov r9d, 0x7c
lea r8, str.D:dbs_shodct0910_230337_1cmdzclientonedriveProductSyncEngineincludeSetupUtilities.cpp
xor edx, edx
lea rcx, str.8c5a9f27_67af_4c39_9d52_b1c0ab1dcca4
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_OneDriveAssertWorker_wchar_t_const____ptr64__enum_OneDriveAssertType__wchar_t_const____ptr64__unsigned_int__wchar_t_const____ptr64__wchar_t_const____ptr64__wchar_t_const____ptr64_]
mov sil, byte [rbp + 0xa10]
xor eax, eax
test sil, sil
je 0x14000554c
cmp qword [r15 + 0x18], rax
je 0x14000554c
mov qword [rbp + 0x340], rax
movdqa xmm0, xmmword [0x1400889c0]
movdqu xmmword [rbp + 0x350], xmm0
mov word [rbp + 0x340], ax
cmp byte [r13 + 0x70], al
je 0x1400054b4
lea r8, str.OneDrive
lea rdx, [0x1400a8b90]
lea rcx, [rbp - 0x78]
call fcn.14000d03c
mov rbx, rax
lea rax, [rbp + 0x340]
cmp rax, rbx
je 0x1400054a9
lea rcx, [rbp + 0x340]
call fcn.1400048e8
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x340], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x350], xmm1
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
lea rcx, [rbp - 0x78]
call fcn.1400048e8
jmp 0x1400054c4
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x340]
call fcn.14000c434
mov rbx, qword [r15 + 0x18]
mov rax, qword [rbx]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x58], rax
mov rax, qword [r13]
mov qword [rsp + 0x60], rax
mov al, byte [r13 + 0x70]
mov byte [rsp + 0x51], al
xor eax, eax
mov qword [rbp - 0x78], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov r8, r12
inc r8
cmp word [rdi + r8*2], ax
jne 0x1400054f6
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.1400047b0
nop
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x20], rcx
mov r9b, byte [rsp + 0x51]
lea r8, [rbp + 0x340]
lea rdx, [rbp - 0x78]
mov rcx, rbx
mov rax, qword [rsp + 0x58]
call qword [case.0x140024ad2.8]
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x340]
call fcn.1400048e8
lea rcx, [rbp + 0x80]
call fcn.140033478
nop
lea r9, [rbp + 0x80]
mov r8, r13
mov rdx, rdi
mov rcx, r15
call fcn.140006e8c
xor edi, edi
cmp dword [rsp + 0x54], edi
je 0x1400055bf
cmp qword [rbp + 0xf0], rdi
je 0x1400055b7
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rcx, qword [rbp + 0xe0]
call fcn.1400107dc
test eax, eax
jne 0x1400055b7
mov r14b, dil
mov byte [rsp + 0x50], dil
jmp 0x1400055bf
mov r14b, 1
mov byte [rsp + 0x50], r14b
test sil, sil
jne 0x1400055f5
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
xor r8d, r8d
lea rcx, [rbp - 0x78]
call fcn.14003ffe0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.14000c434
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
mov r8b, 1
lea rdx, str._userprofile_
call fcn.14003ee34
test al, al
je 0x1400056f8
lea rbx, [r13 + 0x50]
cmp qword [rbx + 0x18], 8
jb 0x14000562a
mov rbx, qword [rbx]
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rdx, qword [rsp + 0x68]
xor r8d, r8d
lea rcx, [rbp + 0x340]
call fcn.14003f050
nop
cmp qword [rax + 0x18], 8
jb 0x140005654
mov rax, qword [rax]
mov r9, rbx
lea r8, str._userprofile_
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140040698
nop
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c434
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x340]
call fcn.1400048e8
xor r8d, r8d
lea rdx, [0x14007dc30]
lea rcx, [rbp + 0x340]
call fcn.14003f050
nop
cmp qword [rax + 0x18], 8
jb 0x1400056b0
mov rax, qword [rax]
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rdx, qword [rsp + 0x68]
lea r9, [0x14007dc30]
mov r8, rax
lea rcx, [rbp - 0x78]
call fcn.140040698
nop
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14000c434
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x340]
call fcn.1400048e8
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x60]
call fcn.140012e60
lea rbx, [0x140080b80]
test al, al
jne 0x1400057cc
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x60]
call fcn.1400129c4
test eax, eax
je 0x140005ab9
mov rdx, qword [r13]
mov rcx, r15
call fcn.140006e24
test al, al
je 0x1400057cc
test sil, sil
je 0x1400057cc
xor edx, edx
mov r8d, 0x618
lea rcx, [rbp + 0x380]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [r15]
mov r9d, 0x30c
lea r8, [rbp + 0x380]
mov rdx, r13
mov rcx, r15
mov rax, qword [rax + 0x30]
call qword [case.0x140024ad2.8]
cmp eax, 1
jne 0x140005a63
lea rcx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x380]
call fcn.1400107dc
test eax, eax
je 0x1400057cc
mov rax, qword [r15]
lea rdx, [rbp + 0x380]
mov rcx, r15
mov rax, qword [rax + 0x38]
call qword [case.0x140024ad2.8]
movzx eax, r14b
inc eax
mov dword [rsp + 0x60], eax
mov r14, qword [r15 + 0x28]
mov rax, qword [r14]
mov rsi, qword [rax + 0x20]
mov rdi, qword [r13]
mov rbx, qword [r13 + 0x28]
and qword [rbp - 0x78], 0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov r8d, 0x26
lea rdx, str.D227B6E2_5C41_4EB2_BD76_51940CFD391F
lea rcx, [rbp - 0x78]
call fcn.1400047b0
nop
mov r9, rdi
mov r8, rbx
lea rdx, [rbp - 0x78]
mov rcx, r14
mov rax, rsi
call qword [case.0x140024ad2.8]
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
mov rcx, qword [r15 + 0x28]
mov rax, qword [rcx]
mov r9, qword [r13]
mov r8, qword [r13 + 0x28]
lea rdx, [rbp + 0x80]
mov rax, qword [rax + 0x50]
call qword [case.0x140024ad2.8]
mov rcx, qword [r15 + 0x28]
mov rax, qword [rcx]
lea rdx, [0x14007fdc0]
mov qword [rbp + 0x20], rdx
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x58], rdx
lea rdx, [r13 + 8]
lea r8, [rbp + 0x20]
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x20], rdx
mov r9, qword [r13]
mov r8, qword [r13 + 0x28]
lea rdx, [rbp + 0x80]
mov rax, qword [rax + 0x10]
call qword [case.0x140024ad2.8]
mov bl, al
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x1400058b4
mov rdx, qword [rcx]
mov rax, qword [rdx + 0x20]
lea rdx, [rbp + 0x20]
cmp rcx, rdx
setne dl
call qword [case.0x140024ad2.8]
lea rax, str.succeeded
mov qword [rbp - 0x70], rax
mov dword [rbp - 0x78], 7
mov byte [rbp - 0x68], bl
mov eax, 1
mov dword [rsp + 0x40], eax
lea edi, [rax + 1]
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x192a762e
lea rax, [0x140080b80]
mov qword [rsp + 0x20], rax
lea rsi, str.SetupUtilities::OneDriveUserSetup
mov r9, rsi
mov r8d, 0xf0
lea r14, [0x14007dd20]
mov rdx, r14
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_public:_void___cdecl_StructuredEvent::constructor_char_const____ptr64__int__char_const____ptr64__struct__GUID_const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int____ptr64]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingWriteStructuredEvent_struct_StructuredEvent_const____ptr64__struct_StructuredEventParameter__const___ptr64_]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingRotateIfNeeded_void_]
xor ebx, ebx
mov qword [rbp + 0x60], rbx
movdqa xmm0, xmmword [0x1400889c0]
movdqu xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x60], bx
cmp dword [rsp + 0x54], ebx
jne 0x1400059e8
mov rdx, qword [r13]
mov rcx, r15
call fcn.140006e24
mov r8b, al
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], bl
mov r9b, byte [rsp + 0x50]
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x340]
call fcn.14003b664
nop
mov rcx, qword [r15 + 0x28]
mov rax, qword [rcx]
lea r8, [rbp + 0x340]
lea rdx, [rbp - 0x78]
mov rax, qword [rax + 0x40]
call qword [case.0x140024ad2.8]
mov rbx, rax
lea rax, [rbp + 0x60]
cmp rax, rbx
je 0x1400059d0
lea rcx, [rbp + 0x60]
call fcn.1400048e8
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x70], xmm1
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
lea rcx, [rbp - 0x78]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x350]
call fcn.1400048e8
xor ebx, ebx
mov qword [rbp - 8], rbx
movdqa xmm0, xmmword [0x1400889c0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], bx
cmp byte [r13 + 0x70], bl
je 0x140005b88
lea r8, str.OneDrive
lea rdx, [0x1400a8b90]
lea rcx, [rbp - 0x78]
call fcn.14000d03c
mov rbx, rax
lea rax, [rbp - 8]
cmp rax, rbx
je 0x140005a53
lea rcx, [rbp - 8]
call fcn.1400048e8
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 8], xmm1
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 7
mov word [rbx], ax
lea rcx, [rbp - 0x78]
call fcn.1400048e8
xor ebx, ebx
jmp 0x140005b95
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0x95b
mov qword [rsp + 0x20], rbx
lea r9, str.SetupUtilities::OneDriveUserSetup
mov r8d, 0xcb
lea rdx, [0x14007dd20]
lea rcx, [rbp - 0x78]
call qword [sym.imp.LoggingPlatform.DLL_public:_void___cdecl_StructuredEvent::constructor_char_const____ptr64__int__char_const____ptr64__struct__GUID_const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int____ptr64]
xor edx, edx
lea rcx, [rbp - 0x78]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingWriteStructuredEvent_struct_StructuredEvent_const____ptr64__struct_StructuredEventParameter__const___ptr64_]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingRotateIfNeeded_void_]
jmp 0x1400057cc
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x340]
call qword [sym.imp.LoggingPlatform.DLL_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_StripPrivateInfoFromString_wchar_t_const____ptr64_]
nop
cmp qword [rax + 0x18], 8
jb 0x140005ae1
mov rax, qword [rax]
lea rcx, str.pSkyDriveFolderPath
mov qword [rbp - 0x70], rcx
mov dword [rbp - 0x78], 0xc
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140005b08
inc r12
cmp word [rax + r12*2], di
jne 0x140005afc
jmp 0x140005b0b
mov r12, rdi
mov qword [rbp - 0x60], r12
mov eax, 1
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], 2
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 0x95c
lea rax, [0x140080b80]
mov qword [rsp + 0x20], rax
lea r9, str.SetupUtilities::OneDriveUserSetup
mov r8d, 0xd2
lea rdx, [0x14007dd20]
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_public:_void___cdecl_StructuredEvent::constructor_char_const____ptr64__int__char_const____ptr64__struct__GUID_const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int____ptr64]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingWriteStructuredEvent_struct_StructuredEvent_const____ptr64__struct_StructuredEventParameter__const___ptr64_]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingRotateIfNeeded_void_]
nop
lea rcx, [rbp + 0x340]
call fcn.1400048e8
mov ecx, 0x69
call fcn.140013c6c
mov ebx, eax
jmp 0x140005e55
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 8]
call fcn.14000c434
mov rcx, qword [r15 + 0x28]
mov rax, qword [rcx]
lea rdx, [0x14007fdc0]
mov qword [rbp + 0x20], rdx
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x58], rdx
mov rdx, qword [r13]
mov r8, qword [r13 + 0x28]
lea r9, [rbp + 0x20]
mov qword [rsp + 0x40], r9
lea r9, [r13 + 8]
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], r8
mov edx, dword [rsp + 0x60]
mov dword [rsp + 0x20], edx
lea r9, [rbp + 0x60]
lea r8, [rbp - 8]
lea rdx, [rbp + 0x80]
mov rax, qword [rax + 8]
call qword [case.0x140024ad2.8]
nop
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x140005c15
mov rax, qword [rcx]
lea rdx, [rbp + 0x20]
cmp rcx, rdx
setne dl
mov rax, qword [rax + 0x20]
call qword [case.0x140024ad2.8]
mov rdx, qword [r13]
mov rcx, r15
call fcn.140006e24
test al, al
jne 0x140005c56
mov rcx, qword [r15 + 0x28]
mov rax, qword [rcx]
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x78]
mov rax, qword [rax + 0x48]
call qword [case.0x140024ad2.8]
nop
mov rdx, r13
mov rcx, r15
call fcn.14000a814
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
call qword [sym.imp.SHELL32.dll_SHFlushSFCache]
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xb08
lea rbx, [0x140080b80]
mov qword [rsp + 0x20], rbx
mov r9, rsi
mov r8d, 0x125
mov rdx, r14
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_public:_void___cdecl_StructuredEvent::constructor_char_const____ptr64__int__char_const____ptr64__struct__GUID_const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int____ptr64]
xor edx, edx
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingWriteStructuredEvent_struct_StructuredEvent_const____ptr64__struct_StructuredEventParameter__const___ptr64_]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingRotateIfNeeded_void_]
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ecx, eax
and ecx, 0x2001
cmp ecx, 1
je 0x140005dd0
btr eax, 0xd
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rcx, qword [rbp - 0x48]
or eax, 1
mov edx, eax
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xor r13d, r13d
test eax, eax
jne 0x140005dd3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 8
cmovae rdx, qword [rbp - 0x48]
lea rcx, [rbp - 0x78]
call qword [sym.imp.LoggingPlatform.DLL_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_StripPrivateInfoFromString_wchar_t_const____ptr64_]
nop
cmp qword [rax + 0x18], 8
jb 0x140005d21
mov rax, qword [rax]
lea rcx, str.path
mov qword [rbp + 0x348], rcx
mov dword [rbp + 0x340], 0xc
mov qword [rbp + 0x350], rax
xor ecx, ecx
test rax, rax
je 0x140005d53
inc r12
cmp word [rax + r12*2], cx
jne 0x140005d47
jmp 0x140005d56
mov r12, rcx
mov qword [rbp + 0x358], r12
lea rax, [0x14007daa8]
mov qword [rbp + 0x368], rax
mov dword [rbp + 0x360], 3
mov dword [rbp + 0x370], r13d
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0x966
mov qword [rsp + 0x20], rbx
mov r9, rsi
mov r8d, 0x133
mov rdx, r14
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_public:_void___cdecl_StructuredEvent::constructor_char_const____ptr64__int__char_const____ptr64__struct__GUID_const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int____ptr64]
lea rdx, [rbp + 0x340]
lea rcx, [rbp + 0x20]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingWriteStructuredEvent_struct_StructuredEvent_const____ptr64__struct_StructuredEventParameter__const___ptr64_]
call qword [sym.imp.LoggingPlatform.DLL_void___cdecl_LoggingRotateIfNeeded_void_]
nop
lea rcx, [rbp - 0x78]
call fcn.1400048e8
xor r13d, r13d
mov rax, qword [r15]
mov r8d, dword [rsp + 0x60]
lea rdx, [rbp - 0x48]
mov rcx, r15
mov rax, qword [rax + 0x50]
call qword [case.0x140024ad2.8]
mov rsi, qword [rbp + 0x148]
mov rbx, qword [rbp + 0x140]
cmp rbx, rsi
je 0x140005e35
add rbx, 0x20
cmp byte [rbx + 0x20], r13b
jne 0x140005e28
cmp byte [rbp + 0x100], r13b
je 0x140005e28
mov rax, qword [r15]
mov r8d, edi
mov rdx, rbx
mov rcx, r15
mov rax, qword [rax + 0x50]
call qword [case.0x140024ad2.8]
add rbx, 0x48
lea rax, [rbx - 0x20]
cmp rax, rsi
jne 0x140005e03
mov ecx, 0x66
call fcn.140013c6c
mov ebx, eax
lea rcx, [rbp - 8]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x60]
call fcn.1400048e8
nop
lea rcx, [rbp + 0x80]
call fcn.140005eac
nop
lea rcx, [rsp + 0x68]
call fcn.1400048e8
nop
lea rcx, [rbp - 0x48]
call fcn.1400048e8
nop
lea rcx, [rbp - 0x28]
call fcn.1400048e8
mov eax, ebx
mov rcx, qword [rbp + 0x9a0]
xor rcx, rsp
call fcn.140063300
mov rbx, qword [rsp + 0xb08]
add rsp, 0xab0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret