Function at 0x180022240
Capabilities:
Print debug messages

Disassembly:
push rbx
push rdi
sub rsp, 0x38
mov rax, qword [0x1800a6d10]
mov rdi, rcx
test rax, rax
je 0x180022668
cmp dword [rax], 0x1234abcd
jne 0x180022668
cmp dword [rax + 0x108], 0
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x30], r14
je 0x1800224ae
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
mov ecx, 0x1000a
lea r14d, [rax + 0x1e]
mov qword [rsp + 0x58], rbx
call fcn.180053ad4
mov ecx, 0x2000a
mov rbp, rax
call fcn.180053ad4
mov rsi, rax
test rbp, rbp
je 0x180022368
test rax, rax
je 0x180022368
lea r8, str.Pen_Testing_Mode_enabled__Adding_Injectable_apps...
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x180022350
lea rdx, [rbx - 2]
mov rcx, rsi
mov word [rsi + 0x1fffe], bx
call fcn.180053398
lea rcx, [rsp + 0x58]
mov r9, rsi
lea r8, [rax + 1]
mov rdx, rbp
mov qword [rsp + 0x20], 0xffffffffffffffff
call fcn.180054798
test eax, eax
je 0x180022326
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
mov r8d, r14d
mov rdx, rsi
call fcn.180053f50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea r9, str._AppendOrRemovePenTestingOnlyInjectableApps
lea rcx, str...ProtectionNA.cpp
mov edx, 0x3f5
mov r8d, 3
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rbp
call fcn.180001b40
jmp 0x180022381
lea rcx, str.Error__d_in_swprintf_s_n
mov edx, r14d
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x18002237b
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rbp, rbp
je 0x18002238e
mov rcx, rbp
call fcn.180053a94
test rsi, rsi
je 0x1800223a0
mov rcx, rsi
call fcn.180053a94
nop dword [rax + rax]
mov rdx, qword [str.svchost.exe]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x1800223ea
cmp word [rdi], bx
je 0x1800223d2
lea r8, [0x18008ea64]
or r9, 0xffffffffffffffff
mov edx, 0xfff
mov rcx, rdi
call fcn.180055ee4
mov r8, qword [str.svchost.exe]
or r9, 0xffffffffffffffff
mov edx, 0xfff
mov rcx, rdi
call fcn.180055ee4
mov rax, qword [0x1800a6d10]
cmp dword [rax + 0x4238], ebx
jle 0x180022498
mov rsi, rbx
mov rcx, qword [rax + 0x4240]
cmp dword [rsi + rcx + 0x410], 0x4000
jne 0x180022483
lea rdx, [rcx + 0x208]
movsxd rax, ebx
mov rcx, rdi
imul rbp, rax, 0x420
add rdx, rbp
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
jne 0x18002247c
cmp word [rdi], ax
je 0x180022453
lea r8, [0x18008ea64]
or r9, 0xffffffffffffffff
mov edx, 0xfff
mov rcx, rdi
call fcn.180055ee4
mov rax, qword [0x1800a6d10]
or r9, 0xffffffffffffffff
mov edx, 0xfff
mov r8, qword [rax + 0x4240]
mov rcx, rdi
add r8, 0x208
add r8, rbp
call fcn.180055ee4
mov rax, qword [0x1800a6d10]
inc ebx
add rsi, 0x420
cmp ebx, dword [rax + 0x4238]
jl 0x180022400
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x50]
mov r14, qword [rsp + 0x30]
add rsp, 0x38
pop rdi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
mov ecx, 0x1000a
lea r14d, [rax + 0x1e]
mov qword [rsp + 0x58], rbx
call fcn.180053ad4
mov ecx, 0x2000a
mov rbp, rax
call fcn.180053ad4
mov rsi, rax
test rbp, rbp
je 0x180022594
test rax, rax
je 0x180022594
lea r8, str.Pen_Testing_Mode_disabled__Removing_Injectable_apps...
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18002257c
lea rdx, [rbx - 2]
mov rcx, rsi
mov word [rsi + 0x1fffe], bx
call fcn.180053398
lea rcx, [rsp + 0x58]
mov r9, rsi
lea r8, [rax + 1]
mov rdx, rbp
mov qword [rsp + 0x20], 0xffffffffffffffff
call fcn.180054798
test eax, eax
je 0x180022552
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
mov r8d, r14d
mov rdx, rsi
call fcn.180053f50
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea r9, str._AppendOrRemovePenTestingOnlyInjectableApps
lea rcx, str...ProtectionNA.cpp
mov edx, 0x411
mov r8d, 3
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rbp
call fcn.180001b40
jmp 0x1800225ad
lea rcx, str.Error__d_in_swprintf_s_n
mov edx, r14d
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x1800225a7
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rbp, rbp
je 0x1800225ba
mov rcx, rbp
call fcn.180053a94
test rsi, rsi
je 0x1800225d0
mov rcx, rsi
call fcn.180053a94
nop word [rax + rax]
mov rdx, qword [str.svchost.exe]
mov rcx, rdi
call fcn.180022720
mov rax, qword [0x1800a6d10]
cmp dword [rax + 0x4238], ebx
jle 0x180022498
mov rsi, rbx
mov rcx, qword [rax + 0x4240]
cmp dword [rsi + rcx + 0x410], 0x4000
jne 0x180022652
lea rdx, [rcx + 0x208]
movsxd rax, ebx
mov rcx, rdi
imul rbp, rax, 0x420
add rdx, rbp
call qword [sym.imp.SHLWAPI.dll_StrStrIW]
test rax, rax
mov rax, qword [0x1800a6d10]
je 0x180022652
mov rdx, qword [rax + 0x4240]
mov rcx, rdi
add rdx, 0x208
add rdx, rbp
call fcn.180022720
mov rax, qword [0x1800a6d10]
inc ebx
add rsi, 0x420
cmp ebx, dword [rax + 0x4238]
jl 0x1800225f5
jmp 0x180022498
mov ecx, 0x1000a
call fcn.180053ad4
mov rbx, rax
test rax, rax
jne 0x18002269a
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
add rsp, 0x38
pop rdi
pop rbx
jmp qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea r8, [0x180088a64]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a70
test eax, eax
jle 0x1800226f2
lea r9, str._AppendOrRemovePenTestingOnlyInjectableApps
lea rcx, str...ProtectionNA.cpp
mov edx, 0x3f1
mov r8d, 1
mov dword [rsp + 0x28], 8
mov byte [rbx + 0xffff], 0
mov qword [rsp + 0x20], rbx
call fcn.180001b40
mov rcx, rbx
add rsp, 0x38
pop rdi
pop rbx
jmp fcn.180053a94
lea rcx, str.Error__d_in_swprintf_s_n
mov edx, 8
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, rbx
add rsp, 0x38
pop rdi
pop rbx
jmp fcn.180053a94