Function at 0x14001c450
Capabilities:
Check if file exists

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7d0
mov rax, qword [0x1400cb008]
xor rax, rsp
mov qword [rsp + 0x7c0], rax
mov r15, rdx
mov qword [rsp + 0xb0], rdx
mov rbx, rcx
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0xc8], rdx
xor r13d, r13d
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x34], r13d
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x5b0]
call sub.VCRUNTIME140.dll_memset
nop
mov qword [rsp + 0x3d0], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], r13
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
mov r12d, 2
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x450]
mov rcx, rbx
call fcn.14001ee60
nop
cmp qword [rsp + 0x460], r13
je 0x14001c591
lea r8, [rsp + 0x450]
cmp qword [rsp + 0x468], 8
cmovae r8, qword [rsp + 0x450]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov edx, 0x104
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.api_ms_win_core_path_l1_1_0.dll_PathCchRemoveFileSpec]
test eax, eax
jne 0x14001c591
lea rax, [rsp + 0x5b0]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001c570
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x3d0]
call fcn.1400059e0
nop
mov rdx, qword [rsp + 0x468]
cmp rdx, 8
jb 0x14001c5dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c5d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c5d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x460], r13
mov qword [rsp + 0x468], 7
mov word [rsp + 0x450], r13w
lea rdx, [rsp + 0x3d0]
cmp qword [rsp + 0x3e8], 8
cmovae rdx, qword [rsp + 0x3d0]
mov r8d, dword [rsp + 0x3e0]
lea rcx, [rsp + 0x60]
call fcn.140005ea0
nop
and r12d, 0xfffffffd
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
mov rdx, qword [rsp + 0x3e8]
cmp rdx, 8
jb 0x14001c67f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c67a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c67a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x3e0], r13
mov qword [rsp + 0x3e8], 7
mov word [rsp + 0x3d0], r13w
lea rdx, [rsp + 0x470]
mov rcx, rbx
call fcn.14001ee60
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001c6bb
mov rax, qword [rax]
mov r8d, ecx
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.140005ea0
nop
mov rdx, qword [rsp + 0x488]
cmp rdx, 8
jb 0x14001c71a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x470]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c715
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001c715
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x480], r13
mov qword [rsp + 0x488], 7
mov word [rsp + 0x470], r13w
mov rdi, r13
mov qword [rsp + 0x58], r13
mov rsi, r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r13
mov r14, qword [rsp + 0x60]
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
test eax, eax
jne 0x14001c7ee
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_get_caller_directory
mov rcx, rax
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [r15], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001c7a6
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c7ba
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001c7d4
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001c7e6
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, r15
jmp 0x14001e4de
lea rax, [rsp + 0x268]
mov qword [rsp + 0xb8], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x268], xmm0
mov rcx, qword [rbx + 0x118]
test rcx, rcx
je 0x14001c83a
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x118]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x110]
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rcx
lea rax, [rsp + 0x278]
mov qword [rsp + 0x258], rax
movdqu xmmword [rsp + 0x278], xmm0
mov rcx, qword [rbx + 0x108]
test rcx, rcx
je 0x14001c89a
lock inc dword [rcx + 8]
mov rcx, qword [rbx + 0x108]
mov r14, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x30]
mov dword [rsp + 0x48], r12d
mov rax, qword [rbx + 0x100]
mov qword [rsp + 0x278], rax
mov qword [rsp + 0x280], rcx
lea rax, [rsp + 0x350]
mov qword [rsp + 0x248], rax
xor edx, edx
mov r15, qword [rsp + 0x88]
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x350]
call fcn.140005210
nop
lea rcx, [rsp + 0x268]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x278]
mov r8, rax
lea rdx, [rsp + 0x240]
call fcn.1400208d0
nop
lea rcx, [rsp + 0x38]
cmp rcx, rax
je 0x14001c933
mov rbx, qword [rax]
mov qword [rax], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001c92e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x38], rbx
mov rcx, qword [rsp + 0x240]
test rcx, rcx
je 0x14001c94d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x240], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, qword [rsp + 0x38]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.Security___cache___identifier___s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rax, [0x1400d0330]
mov qword [rsp + 0x2a0], rax
mov byte [rsp + 0x2a8], 0
mov rcx, rax
call qword [sym.imp.MSVCP140.dll__Mtx_lock]
test eax, eax
je 0x14001c9a2
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
int3
mov byte [rsp + 0x2a8], 1
cmp qword [0x1400d0388], 0
je 0x14001ca39
mov rax, qword [0x1400d0380]
mov qword [rsp + 0xe0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001ca05
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.140022540
test al, al
je 0x14001c9f1
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xe0]
jmp 0x14001c9ff
mov rax, rbx
mov qword [rsp + 0xe0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001c9d1
cmp byte [rax + 0x19], 0
jne 0x14001ca25
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.140022540
test al, al
mov rax, qword [rsp + 0xe0]
je 0x14001ca2c
mov rax, qword [0x1400d0380]
cmp rax, qword [0x1400d0380]
jne 0x14001df03
lea rdx, [rsp + 0x390]
mov rbx, qword [rsp + 0x108]
mov rcx, rbx
call fcn.14001ef70
nop
lea r8, [0x14008804c]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x180]
call fcn.14001a360
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x178]
call fcn.14001a240
nop
lea r8, [0x140087e98]
mov rdx, rax
lea rcx, [rsp + 0x170]
call fcn.14001a360
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14001a240
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x250]
call fcn.14001a240
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001cadc
mov rdi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x58], rdi
mov rcx, qword [rsp + 0x250]
test rcx, rcx
je 0x14001caf6
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x250], r13
mov rcx, qword [rsp + 0x260]
test rcx, rcx
je 0x14001cb10
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x260], r13
mov rcx, qword [rsp + 0x170]
test rcx, rcx
je 0x14001cb2a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x170], r13
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14001cb44
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x178], r13
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x14001cb5e
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x180], r13
lea r8, [0x14008804c]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1a0]
call fcn.14001a360
nop
lea r8, [rsp + 0x390]
mov rdx, rax
lea rcx, [rsp + 0x198]
call fcn.14001a240
nop
lea r8, [0x140087e98]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.14001a360
nop
lea r8, [rbx + 8]
mov rdx, rax
lea rcx, [rsp + 0x188]
call fcn.14001a240
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001cbd3
mov rsi, qword [rax]
mov qword [rax], r13
mov qword [rsp + 0x50], rsi
mov rcx, qword [rsp + 0x188]
test rcx, rcx
je 0x14001cbed
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x188], r13
mov rcx, qword [rsp + 0x190]
test rcx, rcx
je 0x14001cc07
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x190], r13
mov rcx, qword [rsp + 0x198]
test rcx, rcx
je 0x14001cc21
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x198], r13
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14001cc3b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a0], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x3f0]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14001cc60
mov qword [rsp + 0x3f0], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], r13
mov qword [rsp + 0x400], r13
mov qword [rsp + 0x408], 7
mov word [rsp + 0x3f0], r13w
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.1400059e0
or r12d, 8
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffff7
mov dword [rsp + 0x30], r12d
or r12d, 4
mov dword [rsp + 0x30], r12d
and r12d, 0xfffffffb
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x3f0]
call fcn.140011710
test al, al
sete bl
mov rdx, qword [rsp + 0x408]
cmp rdx, 8
jb 0x14001cd36
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cd31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001cd31
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
movdqa xmm0, xmmword [0x1400ab040]
movdqu xmmword [rsp + 0x400], xmm0
mov word [rsp + 0x3f0], r13w
test bl, bl
je 0x14001d007
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, [0x140088050]
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
mov r12, qword [rsp + 0x108]
mov rdx, qword [r12 + 0x100]
test rdx, rdx
je 0x14001d007
add rdx, 0xb8
cmp qword [rdx + 0x18], 8
jb 0x14001cda8
mov rdx, qword [rdx]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001cdb0
lea rcx, [rsp + 0xe8]
call fcn.140005ea0
nop
mov rbx, qword [r12 + 0x100]
lea r8, [0x14008804c]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1c8]
call fcn.14001a360
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.14001a240
nop
lea r8, [0x140087e98]
mov rdx, rax
lea rcx, [rsp + 0x1b8]
call fcn.14001a360
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.14001a240
nop
lea r8, [r12 + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1a8]
call fcn.14001a240
nop
lea rcx, [rsp + 0x58]
cmp rcx, rax
je 0x14001ce71
mov rbx, qword [rax]
mov qword [rax], r13
test rdi, rdi
je 0x14001ce69
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
mov rdi, rbx
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x1a8]
test rcx, rcx
je 0x14001ce8b
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1a8], r13
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14001cea5
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b0], r13
mov rcx, qword [rsp + 0x1b8]
test rcx, rcx
je 0x14001cebf
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1b8], r13
mov rcx, qword [rsp + 0x1c0]
test rcx, rcx
je 0x14001ced9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c0], r13
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001cef3
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1c8], r13
mov rbx, qword [r12 + 0x100]
lea r8, [0x14008804c]
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x1e8]
call fcn.14001a360
nop
lea r8, [rbx + 0x28]
mov rdx, rax
lea rcx, [rsp + 0x1e0]
call fcn.14001a240
nop
lea r8, [0x140087e98]
mov rdx, rax
lea rcx, [rsp + 0x1d8]
call fcn.14001a360
nop
lea r8, [r12 + 8]
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14001a240
nop
lea rcx, [rsp + 0x50]
cmp rcx, rax
je 0x14001cf85
mov rbx, qword [rax]
mov qword [rax], r13
test rsi, rsi
je 0x14001cf7d
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov rsi, rbx
mov qword [rsp + 0x50], rbx
mov rcx, qword [rsp + 0x1d0]
test rcx, rcx
je 0x14001cf9f
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d0], r13
mov rcx, qword [rsp + 0x1d8]
test rcx, rcx
je 0x14001cfb9
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1d8], r13
mov rcx, qword [rsp + 0x1e0]
test rcx, rcx
je 0x14001cfd3
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e0], r13
mov rcx, qword [rsp + 0x1e8]
test rcx, rcx
je 0x14001cfed
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x1e8], r13
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x14001d007
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xe8], r13
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov r12, rax
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r9, rbx
mov r8, rax
lea rdx, str.Security___Starting_HP_Manifest_validation___Manifest:__s__Catalog:__s
mov rcx, r12
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
lea rcx, [rsp + 0x90]
call fcn.14001a8a0
nop
lea r9, [rsp + 0x4d0]
lea r8, [rsp + 0x4d8]
mov edx, 0x2e
lea rcx, str.__xml_version_1.0__encoding_UTF_8____a_a__a_
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x128]
call fcn.140021e90
mov r12d, dword [rsp + 0x48]
or r12d, 0x40
mov dword [rsp + 0x30], r12d
and r12d, 0xffffffbf
mov dword [rsp + 0x30], r12d
or r12d, 0x20
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x128]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4d0]
call qword [rax + 0x30]
test eax, eax
js 0x14001e50b
and r12d, 0xffffffdf
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x128], 0
je 0x14001d0e1
lea rcx, [rsp + 0x128]
call fcn.1400130f0
lea rcx, [rsp + 0x70]
call fcn.14001a8a0
nop
lea rcx, [rsp + 0x68]
call fcn.14001a8a0
nop
mov qword [rsp + 0x1f0], r13
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1f0]
call qword [rax + 0x40]
test eax, eax
js 0x14001e516
mov rbx, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rbx
bts r12d, 0xb
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x4f0]
lea r8, [rsp + 0x4f8]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
lea r8, [rsp + 0x4f0]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x1f8]
call fcn.14001e5a0
nop
btr r12d, 0xb
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d18f
lea rcx, [rsp + 0x1f8]
call fcn.1400130f0
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x160]
call fcn.140017ce0
nop
mov qword [rsp + 0x80], r13
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea rcx, [rsp + 0x410]
mov qword [rsp + 0x258], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14001d1d3
mov qword [rsp + 0x410], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], r13
mov qword [rsp + 0x420], r13
mov qword [rsp + 0x428], 7
mov word [rsp + 0x410], r13w
mov rdx, rax
lea rcx, [rsp + 0x410]
call fcn.1400059e0
bts r12d, 0xf
mov dword [rsp + 0x30], r12d
btr r12d, 0xf
mov dword [rsp + 0x30], r12d
bts r12d, 0xe
mov dword [rsp + 0x30], r12d
btr r12d, 0xe
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x410]
call fcn.140011710
movzx ebx, al
mov rdx, qword [rsp + 0x428]
cmp rdx, 8
jb 0x14001d2a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d2a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d2a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
movdqa xmm0, xmmword [0x1400ab040]
movdqu xmmword [rsp + 0x420], xmm0
mov word [rsp + 0x410], r13w
test bl, bl
je 0x14001e281
mov qword [rsp + 0x530], rdi
lea rax, [rsp + 0x530]
mov qword [rsp + 0x288], rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0xf0]
call fcn.140013640
bts r12d, 0x10
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x2c0], rax
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xa8]
call fcn.1400171e0
bts r12d, 0x14
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2c8], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x2d0], rax
cmp qword [rsp + 0x80], 0
je 0x14001d366
lea rcx, [rsp + 0x80]
call fcn.1400130f0
mov qword [rsp + 0x2d8], r13
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x2e0], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x80], rax
btr r12d, 0x14
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xa8], 0
je 0x14001d3b8
lea rcx, [rsp + 0xa8]
call fcn.1400130f0
btr r12d, 0x10
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf0], 0
je 0x14001d3db
lea rcx, [rsp + 0xf0]
call fcn.1400130f0
nop
lea rax, [rsp + 0x80]
mov qword [rsp + 0x248], rax
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x130]
call fcn.14001aa80
bts r12d, 0x15
mov dword [rsp + 0x30], r12d
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0xf8]
call fcn.14001e600
bts r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x70], 0
je 0x14001d43b
lea rcx, [rsp + 0x70]
call fcn.1400130f0
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0x70], rax
btr r12d, 0x19
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0xf8], 0
je 0x14001d472
lea rcx, [rsp + 0xf8]
call fcn.1400130f0
btr r12d, 0x15
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x130], 0
je 0x14001d495
lea rcx, [rsp + 0x130]
call fcn.1400130f0
nop
mov qword [rsp + 0x200], r13
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x200]
call qword [rax + 0x40]
mov dword [rsp + 0x114], eax
test eax, eax
js 0x14001e521
mov rbx, qword [rsp + 0x200]
mov qword [rsp + 0x298], rbx
bts r12d, 0x1a
mov dword [rsp + 0x30], r12d
lea r9, [rsp + 0x510]
lea r8, [rsp + 0x518]
mov edx, 5
lea rcx, str.xmlns
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov qword [rsp + 0x208], r13
mov rax, qword [rbx]
lea r8, [rsp + 0x208]
mov rdx, qword [rsp + 0x510]
mov rcx, rbx
call qword [rax + 0x50]
mov dword [rsp + 0x110], eax
test eax, eax
js 0x14001e531
mov rbx, qword [rsp + 0x208]
mov qword [rsp + 0x290], rbx
bts r12d, 0x1b
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x78], 0
je 0x14001d557
lea rcx, [rsp + 0x78]
call fcn.1400130f0
mov qword [rsp + 0x290], r13
mov qword [rsp + 0x78], rbx
btr r12d, 0x1b
mov dword [rsp + 0x30], r12d
btr r12d, 0x1a
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x30], r12d
lea rcx, [rsp + 0x298]
call fcn.1400130f0
nop
cmp qword [rsp + 0x80], 0
je 0x14001d5a4
lea rcx, [rsp + 0x80]
call fcn.1400130f0
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001d5bd
call qword [rsp + 0x160]
mov rbx, qword [rsp + 0x108]
lea rdx, [rbx + 0x48]
lea rcx, [rsp + 0x550]
call fcn.140005250
nop
lea rdx, [rbx + 0x68]
lea rcx, [rsp + 0x570]
call fcn.140005250
nop
lea rdx, [rbx + 0x88]
lea rcx, [rsp + 0x590]
call fcn.140005250
nop
lea rbx, [rsp + 0x550]
nop word [rax + rax]
mov rdx, rbx
lea rcx, [rsp + 0x430]
call fcn.140005250
nop
xor edx, edx
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
lea r8, [rsp + 0x430]
mov rdx, rax
lea rcx, [rsp + 0x3b0]
call fcn.1400100c0
nop
lea rcx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rcx, qword [rsp + 0x3b0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, 1
je 0x14001d757
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d6b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d6b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d6b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d720
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d71b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d71b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
add rbx, 0x20
lea rax, [rsp + 0x5b0]
cmp rbx, rax
je 0x14001d8b9
jmp 0x14001d610
lea rdx, [rsp + 0x3b0]
cmp qword [rsp + 0x3c8], 8
cmovae rdx, qword [rsp + 0x3b0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x14001d780
mov r8, rax
lea rcx, [rsp + 0x210]
call fcn.140005ea0
nop
mov rdi, qword [rsp + 0x210]
mov qword [rsp + 0x210], r13
test rsi, rsi
je 0x14001d7bd
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x50], rdi
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.HP_Manifest_Catalogs_path.__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogInfo_wchar_t_const____ptr64____ptr64]
nop
mov rdx, qword [rsp + 0x3c8]
cmp rdx, 8
jb 0x14001d834
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d82f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d82f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x3c0], r13
mov qword [rsp + 0x3c8], 7
mov word [rsp + 0x3b0], r13w
mov rdx, qword [rsp + 0x448]
cmp rdx, 8
jb 0x14001d89c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d897
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001d897
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x440], r13
mov qword [rsp + 0x448], 7
mov word [rsp + 0x430], r13w
lea r9, [sym.AppHelperCap.exe_public:_void___cdecl_Hp::Bridge::Server::Uwp::UwpPackageModel::destructor_void____ptr64]
mov edx, 0x20
lea r8d, [rdx - 0x1d]
lea rcx, [rsp + 0x550]
call fcn.140063ac8
cmp qword [rsp + 0x78], 0
je 0x14001dcf0
mov qword [rsp + 0x218], r13
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx]
lea rdx, [rsp + 0x218]
call qword [rax + 0x40]
mov dword [rsp + 0x118], eax
test eax, eax
js 0x14001e541
mov rbx, qword [rsp + 0x218]
mov qword [rsp + 0x228], rbx
mov r12d, dword [rsp + 0x48]
bts r12d, 0x1d
mov dword [rsp + 0x30], r12d
lea r8, [rsp + 0x228]
lea rdx, str.xmlns_
lea rcx, [rsp + 0x220]
call fcn.14001a480
nop
lea r8, [0x14007a7c8]
mov rdx, rax
lea rcx, [rsp + 0x100]
call fcn.14001a360
nop
mov rcx, qword [rsp + 0x220]
test rcx, rcx
je 0x14001d97a
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x220], r13
btr r12d, 0x1d
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001d999
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x228], r13
mov qword [rsp + 0x230], r13
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x138]
call fcn.140021f90
mov eax, 1
mov dword [rsp + 0x34], eax
and eax, 0xfffffffe
mov dword [rsp + 0x34], eax
or r12d, 0x80000000
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x230]
call qword [rax + 0x30]
mov dword [rsp + 0x11c], eax
test eax, eax
js 0x14001e551
btr r12d, 0x1f
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x138], 0
je 0x14001da16
lea rcx, [rsp + 0x138]
call fcn.1400130f0
mov rbx, qword [rsp + 0x230]
mov qword [rsp + 0xb8], rbx
bts r12d, 0x1e
mov dword [rsp + 0x30], r12d
xor edx, edx
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x370]
call fcn.140005210
nop
btr r12d, 0x1e
mov dword [rsp + 0x30], r12d
test rbx, rbx
je 0x14001da6a
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xb8], r13
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringLen
mov ebx, eax
xor edx, edx
mov rcx, qword [rsp + 0x100]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov rdx, rax
lea rcx, [rsp + 0x490]
call fcn.140005210
nop
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 8
jb 0x14001daa7
mov rax, qword [rax]
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov qword [rsp + 0x20], rdx
mov r9, rax
mov rdx, qword [rsp + 0x380]
call fcn.14000cbe0
mov rdx, rax
cmp qword [rsp + 0x380], rax
jb 0x14001e561
lfence
mov r8, qword [rsp + 0x380]
mov rax, r8
sub rax, rdx
cmp rax, rbx
cmovb rbx, rax
lea rax, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rax, qword [rsp + 0x370]
lea rcx, [rax + rdx*2]
sub r8, rbx
mov qword [rsp + 0x380], r8
sub r8, rdx
lea r8, [r8*2 + 2]
lea rdx, [rcx + rbx*2]
call sub.VCRUNTIME140.dll_memmove
nop
mov rdx, qword [rsp + 0x4a8]
cmp rdx, 8
jb 0x14001db88
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x490]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001db83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001db83
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x4a0], r13
mov qword [rsp + 0x4a8], 7
mov word [rsp + 0x490], r13w
lea rcx, [rsp + 0x370]
cmp qword [rsp + 0x388], 8
cmovae rcx, qword [rsp + 0x370]
mov edx, dword [rsp + 0x380]
test edx, edx
jne 0x14001dbd4
mov qword [rsp + 0x4b0], r13
jmp 0x14001dbea
lea r9, [rsp + 0x4b0]
lea r8, [rsp + 0x4b8]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsCreateStringReference
nop
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x140]
call fcn.140021e90
mov edi, dword [rsp + 0x34]
or edi, 0x10
mov dword [rsp + 0x34], edi
and edi, 0xffffffef
mov dword [rsp + 0x34], edi
or edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x140]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x4b0]
call qword [rax + 0x30]
mov dword [rsp + 0x120], eax
test eax, eax
js 0x14001e567
and edi, 0xfffffff7
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x140], 0
je 0x14001dc5a
lea rcx, [rsp + 0x140]
call fcn.1400130f0
nop
mov rdx, qword [rsp + 0x388]
cmp rdx, 8
jb 0x14001dca5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dca0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001dca0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x380], r13
mov qword [rsp + 0x388], 7
mov word [rsp + 0x370], r13w
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001dcdc
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x100], r13
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x88]
mov r12d, dword [rsp + 0x30]
jmp 0x14001dd20
cmp qword [rsp + 0x68], 0
je 0x14001dd02
lea rcx, [rsp + 0x68]
call fcn.1400130f0
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14001dd17
mov rax, qword [rcx]
call qword [rax + 8]
mov edi, dword [rsp + 0x34]
mov r12d, dword [rsp + 0x48]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
mov rcx, qword [rsp + 0x108]
call fcn.14001e800
nop
mov qword [rsp + 0x238], r13
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x148]
call fcn.140021f90
bts edi, 9
mov dword [rsp + 0x34], edi
btr edi, 9
mov dword [rsp + 0x34], edi
bts edi, 8
mov dword [rsp + 0x34], edi
mov rcx, qword [rsp + 0x148]
mov rax, qword [rcx]
lea rdx, [rsp + 0x238]
call qword [rax + 0x30]
mov dword [rsp + 0x150], eax
test eax, eax
js 0x14001e577
btr edi, 8
mov dword [rsp + 0x34], edi
cmp qword [rsp + 0x148], 0
je 0x14001ddb4
lea rcx, [rsp + 0x148]
call fcn.1400130f0
mov rbx, qword [rsp + 0x238]
mov qword [rsp + 0xa0], rbx
bts edi, 7
mov dword [rsp + 0x34], edi
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x320]
call fcn.140021d00
mov rsi, qword [rax]
add rsi, 0x28
lea rax, [rsp + 0xa0]
cmp rsi, rax
je 0x14001de20
mov rax, rbx
mov qword [rsp + 0xb8], rbx
mov rbx, r13
mov qword [rsp + 0xa0], rbx
mov rcx, qword [rsi]
test rcx, rcx
je 0x14001de1d
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xb8]
mov qword [rsi], rax
btr edi, 7
mov dword [rsp + 0x34], edi
test rbx, rbx
je 0x14001de3d
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xa0], r13
cmp qword [rsp + 0x78], 0
je 0x14001de50
lea rcx, [rsp + 0x78]
call fcn.1400130f0
nop
cmp qword [rsp + 0x68], 0
je 0x14001de63
lea rcx, [rsp + 0x68]
call fcn.1400130f0
nop
cmp qword [rsp + 0x70], 0
je 0x14001de76
lea rcx, [rsp + 0x70]
call fcn.1400130f0
nop
cmp qword [rsp + 0x90], 0
je 0x14001de8f
lea rcx, [rsp + 0x90]
call fcn.1400130f0
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001deda
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ded5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ded5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x50]
jmp 0x14001df08
mov r12d, dword [rsp + 0x48]
cmp qword [0x1400d0388], 0
je 0x14001e021
mov rax, qword [0x1400d0380]
mov qword [rsp + 0xa0], rax
mov rbx, qword [rax + 8]
cmp byte [rbx + 0x19], 0
jne 0x14001df64
nop
lea rdx, [rbx + 0x20]
lea r8, [rsp + 0x38]
call fcn.140022540
test al, al
je 0x14001df50
mov rbx, qword [rbx + 0x10]
mov rax, qword [rsp + 0xa0]
jmp 0x14001df5e
mov rax, rbx
mov qword [rsp + 0xa0], rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x14001df30
cmp byte [rax + 0x19], 0
jne 0x14001e021
lea r8, [rax + 0x20]
lea rdx, [rsp + 0x38]
call fcn.140022540
test al, al
jne 0x14001e021
mov rcx, qword [rsp + 0xa0]
cmp rcx, qword [0x1400d0380]
je 0x14001e021
mov rax, qword [rcx + 0x28]
test rax, rax
setne byte [rsp + 0x98]
test rax, rax
je 0x14001e021
lea rax, [rsp + 0x40]
mov qword [rsp + 0x2f8], rax
mov qword [rsp + 0xd8], r13
lea rax, [rsp + 0x154]
mov qword [rsp + 0x300], rax
lea rdx, [rsp + 0xd8]
mov rcx, qword [rcx + 0x28]
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDuplicateString
mov dword [rsp + 0x158], eax
mov dword [rsp + 0x154], eax
mov dword [rsp + 0xe0], eax
test eax, eax
js 0x14001e587
mov rbx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001e01c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x40], rbx
mov rbx, qword [rsp + 0xb0]
lea rcx, [0x1400d0330]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001e060
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001e074
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001e086
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001e098
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001e0ad
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001e0bf
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
jmp 0x14001e4db
call qword [sym.imp.Logging.dll_public:_static_class_Hp::Bridge::Logging::TraceLogger____ptr64___cdecl_Hp::Bridge::Logging::LogManager::GetLogger_void_]
mov rbx, rax
xor edx, edx
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsGetStringRawBuffer
mov r8, rax
lea rdx, str.RpcSecurityHelper::GetClientPermissionManifest___failed_to_locate_manifest__s
mov rcx, rbx
call qword [sym.imp.Logging.dll_public:_void___cdecl_Hp::Bridge::Logging::TraceLogger::LogWarning_wchar_t_const____ptr64____ptr64]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x340]
call fcn.140021d00
mov rbx, qword [rax]
add rbx, 0x28
mov qword [rsp + 0xd8], rbx
xor r8d, r8d
lea rdx, [0x140078fc0]
lea rcx, [rsp + 0xd0]
call fcn.140005ea0
nop
lea rax, [rsp + 0xd0]
cmp rbx, rax
je 0x14001e332
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xb8], rax
mov rbx, r13
mov qword [rsp + 0xd0], rbx
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax]
test rcx, rcx
je 0x14001e325
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xb8]
mov qword [rax], rcx
jmp 0x14001e33a
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x14001e34f
mov rcx, rbx
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0xd0], r13
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], r13
mov rbx, qword [rsp + 0xb0]
mov qword [rbx], rax
or r12d, 1
mov dword [rsp + 0x30], r12d
cmp qword [rsp + 0x80], 0
je 0x14001e386
lea rcx, [rsp + 0x80]
call fcn.1400130f0
nop
mov rcx, qword [rsp + 0x168]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14001e3a0
call qword [rsp + 0x160]
nop
cmp qword [rsp + 0x78], 0
je 0x14001e3b3
lea rcx, [rsp + 0x78]
call fcn.1400130f0
nop
cmp qword [rsp + 0x68], 0
je 0x14001e3c6
lea rcx, [rsp + 0x68]
call fcn.1400130f0
nop
cmp qword [rsp + 0x70], 0
je 0x14001e3d9
lea rcx, [rsp + 0x70]
call fcn.1400130f0
nop
cmp qword [rsp + 0x90], 0
je 0x14001e3f2
lea rcx, [rsp + 0x90]
call fcn.1400130f0
nop
mov rdx, qword [rsp + 0x3a8]
cmp rdx, 8
jb 0x14001e43d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x390]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001e438
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001e438
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400624a0
mov qword [rsp + 0x3a0], r13
mov qword [rsp + 0x3a8], 7
mov word [rsp + 0x390], r13w
lea rcx, [0x1400d0330]
call qword [sym.imp.MSVCP140.dll__Mtx_unlock]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001e47c
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14001e490
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x38], r13
test rsi, rsi
je 0x14001e4a2
mov rcx, rsi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x50], r13
test rdi, rdi
je 0x14001e4b4
mov rcx, rdi
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x58], r13
test r15, r15
je 0x14001e4c9
mov rcx, r15
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x88], r13
test r14, r14
je 0x14001e4db
mov rcx, r14
call sub.api_ms_win_core_winrt_string_l1_1_0.dll_WindowsDeleteString
mov qword [rsp + 0x60], r13
mov rax, rbx
mov rcx, qword [rsp + 0x7c0]
xor rcx, rsp
call fcn.140062480
lea r11, [rsp + 0x7d0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lfence
mov ecx, eax
call fcn.1400061e0
nop
lfence
mov ecx, eax
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x114]
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x110]
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x118]
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x11c]
call fcn.1400061e0
nop
call fcn.1400092b0
nop
lfence
mov ecx, dword [rsp + 0x120]
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x150]
call fcn.1400061e0
nop
lfence
mov ecx, dword [rsp + 0x158]
call fcn.1400061e0
int3