Function at 0x1700158c0
Capabilities:
Check for peb beingdebugged flag
Check os version

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x238
movaps xmmword [rsp + 0x220], xmm6
mov rdi, r9
mov qword [rsp + 0x68], r8
mov rsi, rdx
mov r15, rcx
mov dword [rsp + 0x110], 0
test byte [0x17008d130], 8
je 0x17001591a
mov qword [rsp + 0x20], r15
lea r8, str.parse_assembly_elem
lea r9, [0x17006d76f]
mov ecx, 3
call fcn.17000f350
lea rdx, [rsp + 0x1e0]
lea r8, [rsp + 0x110]
mov rcx, r15
call fcn.170019c40
test eax, eax
je 0x170015b4a
mov qword [rsp + 0x1a0], r15
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], rsi
xor r15d, r15d
lea r14, str.manifestVersion
lea rdi, [rsp + 0x110]
jmp 0x170015996
mov esi, r15d
mov rcx, qword [rsp + 0x1a0]
lea rdx, [rsp + 0x1e0]
mov r8, rdi
call fcn.170019c40
mov r15d, esi
test eax, eax
je 0x170015acb
mov r12, qword [rsp + 0x1e0]
mov r13d, dword [rsp + 0x1e8]
mov rcx, r12
mov rdx, r14
mov r8, r13
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170015a00
cmp r13d, 0xf
jne 0x170015a00
mov rbp, qword [rsp + 0x1f0]
mov ebx, dword [rsp + 0x1f8]
mov rcx, rbp
lea rdx, [0x17006d796]
mov r8, rbx
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170015a9b
mov esi, 1
cmp ebx, 3
je 0x170015973
jmp 0x170015a9b
cmp r13d, 5
jb 0x170015a1f
mov r8d, 5
mov rcx, r12
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170015a82
test byte [0x17008d130], 4
je 0x170015970
mov rcx, r12
mov edx, r13d
call fcn.170014e40
mov rbx, rax
mov rcx, qword [rsp + 0x1f0]
mov edx, dword [rsp + 0x1f8]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rbx
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_assembly_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170015970
cmp r13d, 5
je 0x170015970
cmp word [r12 + 0xa], 0x3a
je 0x170015970
jmp 0x170015a1f
test byte [0x17008d130], 1
je 0x170015ac8
mov rcx, rbp
mov edx, ebx
call fcn.170014e40
mov qword [rsp + 0x20], rax
lea r8, str.parse_assembly_elem
lea r9, str.wrong_version__s_n
xor ecx, ecx
call fcn.17000f350
mov esi, r15d
cmp dword [rsp + 0x110], 0
mov rbx, qword [rsp + 0x170]
mov r12, qword [rsp + 0x168]
mov r15, qword [rsp + 0x1a0]
jne 0x170015b4a
test esi, esi
je 0x170015b4a
lea rax, [r15 + 0x814]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x120]
mov rcx, r15
mov r8, r12
call fcn.170015320
test eax, eax
mov rdi, qword [rsp + 0x68]
je 0x170019b4a
lea rax, [rbx + 8]
mov qword [rsp + 0x1d8], rax
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
lea r13, [rsp + 0xd0]
xorps xmm6, xmm6
lea r14, [rsp + 0x78]
jmp 0x170015b9c
add r15, 0x814
mov dword [r15], 1
movaps xmm6, xmmword [rsp + 0x220]
add rsp, 0x238
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov dword [rbx + 0x58], 1
mov rcx, r15
mov rdx, rsi
mov r8, r12
call fcn.170015320
test eax, eax
je 0x170019b4a
cmp dword [rbx], 0
je 0x170015c70
mov rcx, rsi
lea rdx, str.noInheritable
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170015d40
mov dword [rsp + 0xa0], 0
mov rcx, r15
lea rdx, [rsp + 0xa0]
call fcn.17001b930
cmp dword [rsp + 0xa0], 0
jne 0x170015b86
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x170015b86
test byte [0x17008d130], 1
je 0x170015c5e
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_expect_end_elem
lea r9, str.unexpected_element__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170015b86
mov rcx, rsi
lea rdx, str.noInherit
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170015ba5
mov dword [rsp + 0xa0], 0
mov rcx, r15
lea rdx, [rsp + 0xa0]
call fcn.17001b930
cmp dword [rsp + 0xa0], 0
jne 0x170015b7f
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x170015b7f
test byte [0x17008d130], 1
je 0x170015b74
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_expect_end_elem
lea r9, str.unexpected_element__s_n
call fcn.17000f350
jmp 0x170015b74
mov rcx, rsi
lea rdx, str.description
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170015f51
mov dword [rsp + 0x78], 0
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x170015e31
mov esi, dword [rsp + 0xa8]
cmp esi, 5
jb 0x170015db8
mov rbp, qword [rsp + 0xa0]
mov r8d, 5
mov rcx, rbp
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170015e1b
test byte [0x17008d130], 4
je 0x170015d70
mov rcx, qword [rsp + 0xa0]
mov edx, esi
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xb0]
mov edx, dword [rsp + 0xb8]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_description_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170015d70
cmp esi, 5
je 0x170015d70
cmp word [rbp + 0xa], 0x3a
je 0x170015d70
jmp 0x170015db8
cmp dword [rsp + 0x78], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x170015b86
mov rax, qword [rsp + 0x60]
cmp dword [rax], 0
jne 0x170015b86
mov rcx, qword [r15]
mov rax, qword [r15 + 8]
mov rdx, rcx
cmp rcx, rax
jae 0x170015e7f
mov rdx, rcx
nop dword [rax + rax]
cmp word [rdx], 0x3c
je 0x170015e7f
add rdx, 2
cmp rdx, rax
jb 0x170015e70
cmp rdx, rax
je 0x170015c5e
mov qword [r15], rdx
test byte [0x17008d130], 8
je 0x170015ecb
sub rdx, rcx
shr rdx, 1
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 3
lea r8, str.parse_description_elem
lea r9, str.Got_description__s_n
call fcn.17000f350
jmp 0x170015ecb
mov rcx, r15
mov rdx, r13
call fcn.17001b890
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x170015b86
test byte [0x17008d130], 4
je 0x170015ec0
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_description_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
jmp 0x170015ec0
mov rcx, rsi
lea rdx, str.comInterfaceExternalProxyStub
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170015fbd
mov dword [rsp + 0x78], 0
mov edi, dword [rbx + 0x78]
mov rsi, qword [rbx + 0x70]
cmp edi, dword [rbx + 0x7c]
jne 0x170016b8f
test rsi, rsi
je 0x170016b53
add edi, edi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rdi, 0x58
mov edx, 8
mov r8, rsi
call sym.ntdll.dll_RtlReAllocateHeap
mov rsi, rax
test rsi, rsi
jne 0x170016b85
jmp 0x1700197c6
mov rcx, rsi
lea rdx, str.dependency
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170016ae4
mov dword [rsp + 0x114], 0
mov rcx, r15
lea rdx, [rsp + 0x200]
lea r8, [rsp + 0x114]
call fcn.170019c40
xor r12d, r12d
lea rbx, [rsp + 0x178]
jmp 0x17001602d
call fcn.17000f350
mov rcx, r15
lea rdx, [rsp + 0x200]
lea r8, [rsp + 0x114]
call fcn.170019c40
test eax, eax
je 0x170016161
mov rsi, qword [rsp + 0x200]
mov ebp, dword [rsp + 0x208]
mov rcx, rsi
lea rdx, str.optional
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700160d0
cmp ebp, 8
jne 0x1700160d0
mov rsi, qword [rsp + 0x210]
mov ebp, dword [rsp + 0x218]
mov rcx, rsi
lea rdx, [0x17006db2e]
mov r8, rbp
call sym.ntdll.dll__wcsnicmp
mov ecx, ebp
xor ecx, 3
xor r12d, r12d
or ecx, eax
sete r12b
test byte [0x17008d130], 8
je 0x170016015
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 3
lea r8, str.parse_dependency_elem
lea r9, str.optional_s_n
jmp 0x170016010
cmp ebp, 5
jb 0x1700160ee
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x17001614b
test byte [0x17008d130], 4
je 0x170016015
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x210]
mov edx, dword [rsp + 0x218]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_dependency_elem
lea r9, str.unknown_attr__s_n
jmp 0x170016010
cmp ebp, 5
je 0x170016015
cmp word [rsi + 0xa], 0x3a
je 0x170016015
jmp 0x1700160ee
cmp dword [rsp + 0x114], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x170019637
jmp 0x17001618b
mov rcx, r15
mov rdx, rbx
call fcn.17001b890
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x170019637
mov rcx, rbx
lea rdx, str.dependentAssembly
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170016a70
mov dword [rsp + 0x118], 0
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xf0], xmm6
mov qword [rsp + 0x100], 0
mov dword [rsp + 0x100], r12d
mov rcx, r15
lea rdx, [rsp + 0x1b8]
lea r8, [rsp + 0x118]
call fcn.170019c40
test eax, eax
je 0x17001634e
xor ebx, ebx
jmp 0x170016268
mov rcx, qword [rsp + 0x1c8]
mov esi, dword [rsp + 0x1d0]
lea rdx, [0x17006dba6]
mov r8, rsi
call sym.ntdll.dll_wcsncmp
xor esi, 4
xor ebx, ebx
or esi, eax
sete bl
mov rcx, r15
lea rdx, [rsp + 0x1b8]
lea r8, [rsp + 0x118]
call fcn.170019c40
test eax, eax
je 0x170016330
mov rsi, qword [rsp + 0x1b8]
mov ebp, dword [rsp + 0x1c0]
mov rcx, rsi
lea rdx, str.allowDelayedBinding
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016292
cmp ebp, 0x13
je 0x170016220
cmp ebp, 5
jb 0x1700162b0
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x17001630e
test byte [0x17008d130], 4
je 0x170016248
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x1c8]
mov edx, dword [rsp + 0x1d0]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_dependent_assembly_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170016248
cmp ebp, 5
je 0x170016248
cmp word [rsi + 0xa], 0x3a
je 0x170016248
jmp 0x1700162b0
mov dword [rsp + 0x104], ebx
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
lea rbx, [rsp + 0x178]
cmp dword [rsp + 0x118], 0
jne 0x17001618b
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.170015320
test eax, eax
jne 0x1700163b3
jmp 0x17001618b
cmp dword [rsp + 0x11c], 0
je 0x170016980
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov rcx, r15
mov rdx, r14
mov r8, rbx
call fcn.170015320
test eax, eax
lea rsi, [rsp + 0x120]
je 0x17001618b
mov rcx, r14
lea rdx, str.assemblyIdentity
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170016460
mov rcx, r15
mov rdx, r13
mov r8, r14
call fcn.17001a4b0
mov rsi, qword [rsp + 0xd8]
test rsi, rsi
je 0x170016600
mov rcx, rsi
lea rdx, [0x17006dbce]
call sym.ntdll.dll_wcscmp
test eax, eax
jne 0x170016602
mov rdi, qword gs:[0x30]
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
xor edx, edx
mov r8, rsi
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0xc
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170016a0b
mov rcx, rax
lea rdx, str.amd64
call sym.ntdll.dll_wcscpy
mov rsi, rax
jmp 0x170016a0d
mov rcx, r14
lea rdx, str.bindingRedirect
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x17001685c
mov dword [rsp + 0x11c], 0
nop word cs:[rax + rax]
nop
mov rcx, r15
lea rdx, [rsp + 0x148]
lea r8, [rsp + 0x11c]
call fcn.170019c40
test eax, eax
je 0x170016380
mov rsi, qword [rsp + 0x148]
mov ebp, dword [rsp + 0x150]
mov rcx, rsi
lea rdx, str.oldVersion
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700164da
cmp ebp, 0xa
je 0x1700164f5
mov rcx, rsi
lea rdx, str.newVersion
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016560
cmp ebp, 0xa
jne 0x170016560
test byte [0x17008d130], 1
je 0x170016490
mov rcx, rsi
mov edx, 0xa
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x158]
mov edx, dword [rsp + 0x160]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_binding_redirect_elem
lea r9, str.Not_stored_yet__s_n
call fcn.17000f350
jmp 0x170016490
cmp ebp, 5
jb 0x17001657e
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x1700165e0
test byte [0x17008d130], 4
je 0x170016490
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x158]
mov edx, dword [rsp + 0x160]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_binding_redirect_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170016490
cmp ebp, 5
je 0x170016490
cmp word [rsi + 0xa], 0x3a
je 0x170016490
jmp 0x17001657e
xor esi, esi
test byte [0x17008d130], 8
je 0x170016689
mov rcx, qword [rsp + 0xd0]
mov edx, 0xffffffff
call fcn.170014e40
mov rbp, rax
movzx edx, word [rsp + 0xf8]
movzx r8d, word [rsp + 0xfa]
movzx r9d, word [rsp + 0xfc]
movzx eax, word [rsp + 0xfe]
mov dword [rsp + 0x20], eax
lea rcx, [0x17006dc22]
call fcn.170015080
mov rbx, rax
mov rcx, rsi
mov edx, 0xffffffff
call fcn.170014e40
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbp
mov ecx, 3
lea r8, str.parse_dependent_assembly_elem
lea r9, str.adding_name_s_version_s_arch_s_n
call fcn.17000f350
mov rax, qword [rdi]
cmp dword [rax + 0x30], 0
je 0x1700166c9
mov ebx, 8
xor ebp, ebp
nop dword [rax]
mov rdx, qword [rax + 0x28]
add rdx, rbx
mov rcx, r13
call fcn.17001ba30
test eax, eax
jne 0x170016718
add rbp, 1
mov rax, qword [rdi]
mov ecx, dword [rax + 0x30]
add rbx, 0x98
cmp rbp, rcx
jb 0x1700166a0
cmp dword [rdi + 0x10], 0
je 0x1700167c1
xor ebp, ebp
mov r15, rdi
xor edi, edi
nop word [rax + rax]
mov rdx, qword [r15 + 8]
add rdx, rbp
mov rcx, r13
call fcn.17001ba30
test eax, eax
jne 0x1700168cc
add rdi, 1
mov ebx, dword [r15 + 0x10]
add rbp, 0x38
cmp rdi, rbx
jb 0x1700166e0
mov rdi, r15
mov r15, qword [rsp + 0x1a0]
jmp 0x1700167c3
test byte [0x17008d130], 8
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rbx, [rsp + 0x178]
je 0x170016395
mov rcx, qword [rsp + 0xd0]
mov edx, 0xffffffff
call fcn.170014e40
mov rbx, rax
mov rcx, rsi
mov edx, 0xffffffff
call fcn.170014e40
movzx ecx, word [rsp + 0xf8]
movzx edx, word [rsp + 0xfa]
movzx ebp, word [rsp + 0xfc]
movzx edi, word [rsp + 0xfe]
mov dword [rsp + 0x48], edi
mov rdi, qword [rsp + 0x68]
mov dword [rsp + 0x40], ebp
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea rbx, [rsp + 0x178]
mov ecx, 3
lea r8, str.add_dependent_assembly_id
lea r9, str.reusing_existing_assembly_for__s_arch__s_version__u._u._u._u_n
call fcn.17000f350
jmp 0x170016395
xor ebx, ebx
mov rax, qword [rdi + 8]
cmp ebx, dword [rdi + 0x14]
lea rbp, str.urn:schemas_microsoft_com:asm.v1
jne 0x170016810
test rax, rax
je 0x170016a2c
add ebx, ebx
mov rcx, qword gs:[0x30]
mov rcx, qword [rcx + 0x60]
mov rcx, qword [rcx + 0x30]
imul r9, rbx, 0x38
xor edx, edx
mov r8, rax
call sym.ntdll.dll_RtlReAllocateHeap
test rax, rax
je 0x170016a58
mov qword [rdi + 8], rax
mov dword [rdi + 0x14], ebx
mov ebx, dword [rdi + 0x10]
lea ecx, [rbx + 1]
mov dword [rdi + 0x10], ecx
mov ecx, ebx
imul rcx, rcx, 0x38
mov rdx, qword [rsp + 0x100]
mov qword [rax + rcx + 0x30], rdx
movaps xmm0, xmmword [rsp + 0xd0]
movaps xmm1, xmmword [rsp + 0xe0]
movaps xmm2, xmmword [rsp + 0xf0]
movups xmmword [rax + rcx + 0x20], xmm2
movups xmmword [rax + rcx + 0x10], xmm1
movups xmmword [rax + rcx], xmm0
lea rbx, [rsp + 0x178]
jmp 0x170016395
test byte [0x17008d130], 4
je 0x1700168bc
mov rcx, qword [rsp + 0x78]
mov edx, dword [rsp + 0x80]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x90]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_dependent_assembly_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
mov rcx, r15
mov rdx, r14
call fcn.17001b890
jmp 0x170016395
test byte [0x17008d130], 8
mov rdi, r15
mov r15, qword [rsp + 0x1a0]
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rbx, [rsp + 0x178]
je 0x170016395
mov rcx, qword [rsp + 0xd0]
mov edx, 0xffffffff
call fcn.170014e40
mov rbx, rax
mov rcx, rsi
mov edx, 0xffffffff
call fcn.170014e40
movzx ecx, word [rsp + 0xf8]
movzx edx, word [rsp + 0xfa]
movzx ebp, word [rsp + 0xfc]
movzx edi, word [rsp + 0xfe]
mov dword [rsp + 0x48], edi
mov rdi, qword [rsp + 0x68]
mov dword [rsp + 0x40], ebp
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea rbx, [rsp + 0x178]
mov ecx, 3
lea r8, str.add_dependent_assembly_id
lea r9, str.reusing_existing_dependency_for__s_arch__s_version__u._u._u._u_n
call fcn.17000f350
jmp 0x170016395
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170015320
test eax, eax
je 0x17001638e
test byte [0x17008d130], 1
je 0x1700169fb
mov rcx, qword [rsp + 0xa0]
mov edx, dword [rsp + 0xa8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xb0]
mov edx, dword [rsp + 0xb8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_expect_end_elem
lea r9, str.unexpected_element__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x17001638e
xor esi, esi
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0xd8], rsi
test byte [0x17008d130], 8
jne 0x17001660b
jmp 0x170016689
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0xe0
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
mov ebx, 4
test rax, rax
jne 0x170016806
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x17001684f
test byte [0x17008d130], 4
je 0x170016180
mov rcx, qword [rsp + 0x178]
mov edx, dword [rsp + 0x180]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x188]
mov edx, dword [rsp + 0x190]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_dependency_elem
lea r9, str.unknown_element__s_n
call fcn.17000f350
jmp 0x170016180
mov rcx, rsi
lea rdx, [0x17006d85c]
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x17001704a
mov dword [rsp + 0x1b8], 0
mov esi, dword [rbx + 0x68]
mov r8, qword [rbx + 0x60]
cmp esi, dword [rbx + 0x6c]
jne 0x17001714d
test r8, r8
je 0x170017111
add esi, esi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
lea rax, [rsi*8]
lea r9, [rax + rax*4]
mov edx, 8
call sym.ntdll.dll_RtlReAllocateHeap
mov r8, rax
jmp 0x17001713a
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov rsi, rax
mov edi, 4
test rsi, rsi
je 0x1700197c6
mov qword [rbx + 0x70], rsi
mov dword [rbx + 0x7c], edi
mov edi, dword [rbx + 0x78]
lea eax, [rdi + 1]
mov dword [rbx + 0x78], eax
mov eax, edi
imul rdi, rax, 0x58
mov dword [rsi + rdi], 5
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x17001700f
lea r12, [rsi + rdi]
add r12, 0x18
jmp 0x170016c0d
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [r12 - 0x10], rsi
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x17001700f
mov rsi, qword [rsp + 0xa0]
mov ebp, dword [rsp + 0xa8]
mov rcx, rsi
lea rdx, [0x17006da54]
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016c80
cmp ebp, 3
jne 0x170016c80
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0xb8]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x170016bd0
mov qword [r12 - 0x10], 0
jmp 0x170016df0
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016d00
cmp ebp, 4
jne 0x170016d00
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0xb8]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170016de7
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [r12 + 8], rsi
jmp 0x170016bf2
mov rcx, rsi
lea rdx, str.baseInterface
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016d77
cmp ebp, 0xd
jne 0x170016d77
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0xb8]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170016e71
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [r12 - 8], rsi
or byte [r12 + 0x18], 2
jmp 0x170016bf2
mov rcx, rsi
lea rdx, str.numMethods
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016e00
cmp ebp, 0xa
jne 0x170016e00
mov edx, dword [rsp + 0xb8]
test rdx, rdx
je 0x170016f08
mov rcx, qword [rsp + 0xb0]
lea rbp, [rcx + rdx*2]
xor eax, eax
mov rbx, rcx
nop word cs:[rax + rax]
nop dword [rax]
movzx esi, word [rbx]
lea edi, [rsi - 0x30]
cmp di, 9
ja 0x170016f1a
lea eax, [rax + rax*4]
lea eax, [rsi + rax*2]
add eax, 0xffffffd0
add rbx, 2
cmp rbx, rbp
jb 0x170016dc0
jmp 0x170016f0a
mov qword [r12 + 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170016bf2
mov rcx, rsi
lea rdx, str.proxyStubClsid32
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016e90
cmp ebp, 0x10
jne 0x170016e90
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0xb8]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170016fdb
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [r12 + 0x10], rsi
jmp 0x170016bf2
mov qword [r12 - 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
or byte [r12 + 0x18], 2
jmp 0x170016bf2
mov rcx, rsi
lea rdx, str.tlbid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170016f5b
cmp ebp, 5
jne 0x170016f5b
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0xb8]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170016fe9
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [r12], rsi
jmp 0x170016bf2
xor eax, eax
mov dword [r12 + 0x1c], eax
or byte [r12 + 0x18], 1
jmp 0x170016bf2
test byte [0x17008d130], 2
je 0x170016f45
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 1
lea r8, str.parse_nummethods
lea r9, str.wrong_numeric_value__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
or byte [r12 + 0x18], 1
jmp 0x170016bf2
cmp ebp, 5
jb 0x170016f79
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170016ff6
test byte [0x17008d130], 4
je 0x170016bf2
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xb0]
mov edx, dword [rsp + 0xb8]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_com_interface_external_proxy_stub_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170016bf2
mov qword [r12 + 0x10], 0
jmp 0x170016df0
mov qword [r12], 0
jmp 0x170016df0
cmp ebp, 5
je 0x170016bf2
cmp word [rsi + 0xa], 0x3a
je 0x170016bf2
jmp 0x170016f79
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 0x10
cmp dword [rsp + 0x78], 0
mov rbx, qword [rsp + 0x170]
mov r12, qword [rsp + 0x168]
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x170015b86
jmp 0x170015be4
mov rcx, rsi
lea rdx, str.clrClass
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x1700170aa
mov dword [rsp + 0x78], 0
mov esi, dword [rbx + 0x78]
mov r8, qword [rbx + 0x70]
cmp esi, dword [rbx + 0x7c]
jne 0x170019187
test r8, r8
je 0x17001914b
add esi, esi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rsi, 0x58
mov edx, 8
call sym.ntdll.dll_RtlReAllocateHeap
mov r8, rax
jmp 0x170019174
mov rcx, rsi
lea rdx, str.clrSurrogate
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x17001911e
mov dword [rsp + 0x78], 0
mov edi, dword [rbx + 0x78]
mov rsi, qword [rbx + 0x70]
cmp edi, dword [rbx + 0x7c]
jne 0x17001978f
test rsi, rsi
je 0x170019757
add edi, edi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rdi, 0x58
mov edx, 8
mov r8, rsi
call sym.ntdll.dll_RtlReAllocateHeap
mov rsi, rax
jmp 0x170019780
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0xa0
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov r8, rax
mov esi, 4
test r8, r8
je 0x170017524
mov qword [rbx + 0x60], r8
mov dword [rbx + 0x6c], esi
mov esi, dword [rbx + 0x68]
lea eax, [rsi + 1]
mov dword [rbx + 0x68], eax
test r8, r8
je 0x170017524
mov eax, esi
lea r12, [rax + rax*4]
mov qword [rsp + 0x70], r8
lea rbx, [r8 + r12*8]
mov rcx, r15
lea rdx, [rsp + 0x178]
lea r8, [rsp + 0x1b8]
call fcn.170019c40
test eax, eax
je 0x1700174b5
mov rax, qword [rsp + 0x70]
lea rdi, [rax + r12*8]
add rdi, 0x10
jmp 0x1700171e0
mov rsi, rax
mov rdx, qword [rsp + 0x188]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 8], rsi
nop dword [rax]
mov rcx, r15
lea rdx, [rsp + 0x178]
lea r8, [rsp + 0x1b8]
call fcn.170019c40
test eax, eax
je 0x1700174b5
mov rsi, qword [rsp + 0x178]
mov ebp, dword [rsp + 0x180]
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017270
cmp ebp, 4
jne 0x170017270
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov esi, dword [rsp + 0x190]
lea r8d, [rsi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017340
mov rbp, rax
mov rdx, qword [rsp + 0x188]
lea r8, [rsi + rsi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rbp + rsi*2], 0
mov qword [rbx], rbp
test byte [0x17008d130], 8
je 0x1700171c0
jmp 0x17001735f
mov rcx, rsi
lea rdx, str.loadFrom
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700172c7
cmp ebp, 8
jne 0x1700172c7
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x190]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x17001719a
mov qword [rdi - 8], 0
jmp 0x17001748c
mov rcx, rsi
lea rdx, str.hash
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017390
cmp ebp, 4
jne 0x170017390
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x190]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017485
mov rsi, rax
mov rdx, qword [rsp + 0x188]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi], rsi
jmp 0x1700171c0
mov qword [rbx], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
test byte [0x17008d130], 8
je 0x1700171c0
mov rcx, qword [rsp + 0x188]
mov edx, esi
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 3
lea r8, str.parse_file_elem
lea r9, str.name_s_n
call fcn.17000f350
jmp 0x1700171c0
mov rcx, rsi
lea rdx, str.hashalg
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x17001740a
cmp ebp, 7
jne 0x17001740a
mov rsi, qword [rsp + 0x188]
mov ebp, dword [rsp + 0x190]
mov rcx, rsi
lea rdx, str.SHA1
mov r8, rbp
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x1700173d9
cmp ebp, 4
je 0x1700171c0
test byte [0x17008d130], 1
je 0x1700171c0
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_file_elem
lea r9, str.hashalg_should_be_SHA1__got__s_n
jmp 0x170017386
cmp ebp, 5
jb 0x170017428
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x17001749c
test byte [0x17008d130], 4
je 0x1700171c0
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x188]
mov edx, dword [rsp + 0x190]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_file_elem
lea r9, str.unknown_attr__s_n
jmp 0x170017386
mov qword [rdi], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x1700171c0
cmp ebp, 5
je 0x1700171c0
cmp word [rsi + 0xa], 0x3a
je 0x1700171c0
jmp 0x170017428
cmp qword [rbx], 0
lea rsi, [rsp + 0x120]
jne 0x1700174ce
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 2
cmp dword [rsp + 0x1b8], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rbx, [rsp + 0xa0]
jne 0x170019637
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x170019637
mov rax, qword [rsp + 0x70]
lea rax, [rax + r12*8]
add rax, 0x18
mov qword [rsp + 0xc8], rax
jmp 0x170017568
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
lea rsi, [rsp + 0x120]
jmp 0x170019637
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
lea rsi, [rsp + 0x120]
mov rcx, r15
mov rdx, r12
mov r8, rsi
call fcn.170015320
test eax, eax
mov rbx, r12
je 0x170019637
mov rcx, rbx
lea rdx, str.comClass
mov r8, rbp
call fcn.170015780
test eax, eax
mov r12, rbx
je 0x1700175d5
mov dword [rsp + 0x148], 0
mov rcx, qword [rsp + 0xc8]
mov esi, dword [rcx + 8]
mov r8, qword [rcx]
cmp esi, dword [rcx + 0xc]
jne 0x1700176d4
test r8, r8
je 0x170017691
add esi, esi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rsi, 0x58
mov edx, 8
call sym.ntdll.dll_RtlReAllocateHeap
mov r8, rax
jmp 0x1700176ba
mov rcx, r12
lea rdx, str.comInterfaceProxyStub
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170017642
mov dword [rsp + 0x148], 0
mov rcx, qword [rsp + 0xc8]
mov edi, dword [rcx + 8]
mov rsi, qword [rcx]
cmp edi, dword [rcx + 0xc]
jne 0x170017c98
test rsi, rsi
je 0x170017c55
add edi, edi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rdi, 0x58
mov edx, 8
mov r8, rsi
call sym.ntdll.dll_RtlReAllocateHeap
mov rsi, rax
jmp 0x170017c7e
mov rcx, r12
lea rdx, str.hash
lea r8, str.urn:schemas_microsoft_com:asm.v2
call fcn.170015780
test eax, eax
je 0x170017be4
test byte [0x17008d130], 4
je 0x170017681
mov ecx, 2
lea r8, str.parse_file_elem
lea r9, str.asmv2:hash__undocumented__not_supported_n
call fcn.17000f350
mov rcx, r15
mov rdx, r12
call fcn.17001b890
jmp 0x17001754f
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov r8, rax
mov esi, 4
test r8, r8
mov rcx, qword [rsp + 0xc8]
je 0x17001753c
mov qword [rcx], r8
mov dword [rcx + 0xc], esi
mov esi, dword [rcx + 8]
lea eax, [rsi + 1]
mov dword [rcx + 8], eax
mov eax, esi
imul rax, rax, 0x58
mov dword [r8 + rax], 4
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x108], rax
lea rbx, [r8 + rax]
add rbx, 0x18
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170017a9c
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x108]
lea rbp, [rax + rcx]
add rbp, 0x44
jmp 0x170017771
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rdi + rdi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rdi*2], 0
mov qword [rbp - 0x3c], rsi
mov rdi, qword [rsp + 0x68]
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170017a9c
mov r12, qword [rsp + 0x78]
mov esi, dword [rsp + 0x80]
mov rcx, r12
lea rdx, str.clsid
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700177e0
cmp esi, 5
jne 0x1700177e0
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov edi, dword [rsp + 0x90]
lea r8d, [rdi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x170017730
mov qword [rbp - 0x3c], 0
jmp 0x170017940
mov rcx, r12
lea rdx, str.progid
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017850
cmp esi, 6
jne 0x170017850
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov edi, dword [rsp + 0x90]
lea r8d, [rdi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700178f0
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rdi + rdi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rdi*2], 0
mov qword [rbx], rsi
jmp 0x170017751
mov rcx, r12
lea rdx, str.tlbid
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700178c0
cmp esi, 5
jne 0x1700178c0
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov edi, dword [rsp + 0x90]
lea r8d, [rdi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017929
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rdi + rdi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rdi*2], 0
mov qword [rbp - 0x34], rsi
jmp 0x170017751
mov rcx, r12
lea rdx, str.threadingModel
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700178f9
cmp esi, 0xe
jne 0x1700178f9
lea rcx, [rsp + 0x88]
call fcn.17001bbf0
mov dword [rbp - 0x14], eax
jmp 0x170017756
mov qword [rbx], 0
jmp 0x170017940
mov rcx, r12
lea rdx, str.miscStatus
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017950
cmp esi, 0xa
jne 0x170017950
lea rcx, [rsp + 0x88]
call fcn.17001bca0
mov dword [rbp - 0x10], eax
jmp 0x170017756
mov qword [rbp - 0x34], 0
nop word cs:[rax + rax]
nop dword [rax + rax]
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170017751
mov rcx, r12
lea rdx, str.miscStatusContent
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017980
cmp esi, 0x11
jne 0x170017980
lea rcx, [rsp + 0x88]
call fcn.17001bca0
mov dword [rbp - 0xc], eax
jmp 0x170017756
mov rcx, r12
lea rdx, str.miscStatusThumbnail
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700179b0
cmp esi, 0x13
jne 0x1700179b0
lea rcx, [rsp + 0x88]
call fcn.17001bca0
mov dword [rbp - 8], eax
jmp 0x170017756
mov rcx, r12
lea rdx, str.miscStatusIcon
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700179e0
cmp esi, 0xe
jne 0x1700179e0
lea rcx, [rsp + 0x88]
call fcn.17001bca0
mov dword [rbp - 4], eax
jmp 0x170017756
mov rcx, r12
lea rdx, str.miscStatusDocPrint
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017a10
cmp esi, 0x12
jne 0x170017a10
lea rcx, [rsp + 0x88]
call fcn.17001bca0
mov dword [rbp], eax
jmp 0x170017756
mov rcx, r12
lea rdx, str.description
mov r8, rsi
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017a2f
cmp esi, 0xb
je 0x170017756
cmp esi, 5
jb 0x170017a4d
mov r8d, 5
mov rcx, r12
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170017a84
test byte [0x17008d130], 4
je 0x170017756
mov rcx, r14
call fcn.170019eb0
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_com_class_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170017756
cmp esi, 5
je 0x170017756
cmp word [r12 + 0xa], 0x3a
je 0x170017756
jmp 0x170017a4d
mov rax, qword [rdi]
or dword [rax + 0x38], 8
cmp qword [rbx], 0
je 0x170017ab0
mov rax, qword [rdi]
or dword [rax + 0x38], 0x40
cmp dword [rsp + 0x148], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
lea r12, [rsp + 0xa0]
jne 0x17001754f
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x170017bb8
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x108]
lea rsi, [rax + rcx]
jmp 0x170017b21
mov rcx, r15
mov rdx, r13
call fcn.17001b890
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x170017bb8
mov rcx, r13
lea rdx, str.progid
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170017b50
mov rcx, r15
mov rdx, rsi
mov r8, r13
call fcn.17001be30
jmp 0x170017b0b
test byte [0x17008d130], 4
je 0x170017b00
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rbx, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rbx
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_com_class_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
jmp 0x170017b00
mov rax, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x108]
cmp dword [rax + rcx + 0x50], 0
lea rsi, [rsp + 0x120]
je 0x17001754f
mov rax, qword [rdi]
or dword [rax + 0x38], 0x40
jmp 0x17001754f
mov rcx, r12
lea rdx, str.typelib
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x1700182d0
mov dword [rsp + 0x148], 0
mov rcx, qword [rsp + 0xc8]
mov edi, dword [rcx + 8]
mov rsi, qword [rcx]
cmp edi, dword [rcx + 0xc]
jne 0x17001849e
test rsi, rsi
je 0x17001845b
add edi, edi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rdi, 0x58
mov edx, 8
mov r8, rsi
call sym.ntdll.dll_RtlReAllocateHeap
mov rsi, rax
jmp 0x170018484
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov rsi, rax
mov edi, 4
test rsi, rsi
mov rcx, qword [rsp + 0xc8]
je 0x170018d7b
mov qword [rcx], rsi
mov dword [rcx + 0xc], edi
mov edi, dword [rcx + 8]
lea eax, [rdi + 1]
mov dword [rcx + 8], eax
mov eax, edi
imul rbx, rax, 0x58
mov dword [rsi + rbx], 5
lea rax, [rsi + rbx]
add rax, 8
mov qword [rsp + 0x70], rax
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x17001818a
lea r12, [rsi + rbx]
add r12, 0x18
xor ebx, ebx
mov rdi, qword [rsp + 0x68]
nop word cs:[rax + rax]
nop dword [rax]
mov rsi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0x80]
mov rcx, rsi
lea rdx, [0x17006da54]
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017d80
cmp ebp, 3
jne 0x170017d80
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x90]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017e79
mov rsi, rax
mov rdx, qword [rsp + 0x88]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov rax, qword [rsp + 0x70]
mov qword [rax], rsi
jmp 0x170017f0b
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017e00
cmp ebp, 4
jne 0x170017e00
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x90]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017ef7
mov rsi, rax
mov rdx, qword [rsp + 0x88]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [r12 + 8], rsi
jmp 0x170017f0b
mov rcx, rsi
lea rdx, str.baseInterface
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017e87
cmp ebp, 0xd
jne 0x170017e87
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x90]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170017fa4
mov rsi, rax
mov rdx, qword [rsp + 0x88]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [r12 - 8], rsi
or byte [r12 + 0x18], 2
jmp 0x170017f0b
mov rax, qword [rsp + 0x70]
mov qword [rax], 0
jmp 0x170017f00
mov rcx, rsi
lea rdx, str.numMethods
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017f32
cmp ebp, 0xa
jne 0x170017f32
mov r8, rbx
mov edx, dword [rsp + 0x90]
test rdx, rdx
je 0x17001803e
mov rcx, qword [rsp + 0x88]
lea rbp, [rcx + rdx*2]
xor eax, eax
mov rsi, rcx
nop
movzx edi, word [rsi]
lea ebx, [rdi - 0x30]
cmp bx, 9
ja 0x17001805f
lea eax, [rax + rax*4]
lea eax, [rdi + rax*2]
add eax, 0xffffffd0
add rsi, 2
cmp rsi, rbp
jb 0x170017ed0
jmp 0x170018040
mov qword [r12 + 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
jne 0x170017cf0
jmp 0x170018191
mov rcx, rsi
lea rdx, str.tlbid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170017fc3
cmp ebp, 5
jne 0x170017fc3
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0x90]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170018152
mov rsi, rax
mov rdx, qword [rsp + 0x88]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [r12], rsi
jmp 0x170017f0b
mov qword [r12 - 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
or byte [r12 + 0x18], 2
jmp 0x170017f0b
mov rcx, rsi
lea rdx, str.proxyStubClsid32
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700180af
cmp ebp, 0x10
jne 0x1700180af
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov esi, dword [rsp + 0x90]
lea r8d, [rsi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
lea rbp, str.urn:schemas_microsoft_com:asm.v1
je 0x17001815f
mov rbx, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rsi + rsi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rbx + rsi*2], 0
jmp 0x170017f12
xor eax, eax
mov dword [r12 + 0x1c], eax
or byte [r12 + 0x18], 1
mov rdi, qword [rsp + 0x68]
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov rbx, r8
jmp 0x170017f12
test byte [0x17008d130], 2
mov rdi, qword [rsp + 0x68]
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov rbx, r8
je 0x170018099
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 1
lea r8, str.parse_nummethods
lea r9, str.wrong_numeric_value__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
or byte [r12 + 0x18], 1
jmp 0x170017f12
mov rcx, rsi
lea rdx, str.threadingModel
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700180ce
cmp ebp, 0xe
je 0x170017f0b
cmp ebp, 5
jb 0x1700180f0
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170018171
test byte [0x17008d130], 4
je 0x170017f0b
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x90]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_cominterface_proxy_stub_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170017f0b
mov qword [r12], 0
jmp 0x170017f00
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
xor ebx, ebx
jmp 0x170017f12
cmp ebp, 5
je 0x170017f0b
cmp word [rsi + 0xa], 0x3a
je 0x170017f0b
jmp 0x1700180f0
xor ebx, ebx
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 0x10
cmp dword [rsp + 0x148], 0
lea r12, [rsp + 0xa0]
jne 0x170018227
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x170018227
test byte [0x17008d130], 1
je 0x17001821c
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_expect_end_elem
lea r9, str.unexpected_element__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rsi, rbx
test rbx, rbx
jne 0x170018240
mov rax, qword [rsp + 0x70]
mov rsi, qword [rax]
test rsi, rsi
je 0x1700183c6
mov qword [rsp + 0x70], rbx
mov rdi, qword gs:[0x30]
mov rax, qword [rdi + 0x60]
mov rbx, qword [rax + 0x30]
mov rcx, rsi
call sym.ntdll.dll_wcslen
lea r8, [rax + rax]
add r8, 2
mov rcx, rbx
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700183b1
mov rcx, rax
mov rdx, rsi
call sym.ntdll.dll_wcscpy
test rax, rax
je 0x1700183b1
mov rsi, rax
mov rdx, qword [rsp + 0xc8]
mov ebx, dword [rdx + 8]
mov rax, qword [rdx]
cmp ebx, dword [rdx + 0xc]
jne 0x170018371
test rax, rax
je 0x17001833e
add ebx, ebx
mov rcx, qword [rdi + 0x60]
mov rcx, qword [rcx + 0x30]
imul r9, rbx, 0x58
mov edx, 8
mov r8, rax
call sym.ntdll.dll_RtlReAllocateHeap
jmp 0x17001835b
mov rcx, r12
lea rdx, str.windowClass
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x1700183e6
mov dword [rsp + 0x148], 0
mov rcx, qword [rsp + 0xc8]
mov esi, dword [rcx + 8]
mov r8, qword [rcx]
cmp esi, dword [rcx + 0xc]
jne 0x170018a93
test r8, r8
je 0x170018a50
add esi, esi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rsi, 0x58
mov edx, 8
call sym.ntdll.dll_RtlReAllocateHeap
mov r8, rax
jmp 0x170018a79
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov ebx, 4
test rax, rax
mov rdx, qword [rsp + 0xc8]
je 0x17001839f
mov qword [rdx], rax
mov dword [rdx + 0xc], ebx
mov ebx, dword [rdx + 8]
lea ecx, [rbx + 1]
mov dword [rdx + 8], ecx
mov ecx, ebx
imul rcx, rcx, 0x58
mov dword [rax + rcx], 4
mov qword [rax + rcx + 8], rsi
mov dword [rax + rcx + 0x30], 4
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 8
jmp 0x1700183c1
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
xor edx, edx
mov r8, rsi
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rdi, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
xor edx, edx
mov r8, rbx
call sym.ntdll.dll_RtlFreeHeap
jmp 0x170017547
mov rcx, r12
lea rdx, str.activatableClass
lea r8, str.urn:schemas_microsoft_com:winrt.v1
call fcn.170015780
test eax, eax
je 0x170018a1e
mov dword [rsp + 0x148], 0
mov rcx, qword [rsp + 0xc8]
mov edi, dword [rcx + 8]
mov rsi, qword [rcx]
cmp edi, dword [rcx + 0xc]
jne 0x170018d44
test rsi, rsi
je 0x170018d05
add edi, edi
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
imul r9, rdi, 0x58
mov edx, 8
mov r8, rsi
call sym.ntdll.dll_RtlReAllocateHeap
mov rsi, rax
jmp 0x170018d2e
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov rsi, rax
mov edi, 4
test rsi, rsi
mov rcx, qword [rsp + 0xc8]
je 0x170018d7b
mov qword [rcx], rsi
mov dword [rcx + 0xc], edi
mov edi, dword [rcx + 8]
lea eax, [rdi + 1]
mov dword [rcx + 8], eax
mov eax, edi
imul rdi, rax, 0x58
mov dword [rsi + rdi], 6
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018967
lea rax, [rsi + rdi]
add rax, 0x18
mov qword [rsp + 0x108], rax
lea rax, [rsi + rdi]
add rax, 8
mov qword [rsp + 0x1a8], rax
jmp 0x170018531
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rdi + rdi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rdi*2], 0
mov rax, qword [rsp + 0x1a8]
mov qword [rax], rsi
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018967
mov rsi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0x80]
mov rcx, rsi
lea rdx, str.tlbid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x17001859b
cmp ebp, 5
jne 0x17001859b
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov edi, dword [rsp + 0x90]
lea r8d, [rdi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x1700184ee
mov rax, qword [rsp + 0x1a8]
mov qword [rax], 0
jmp 0x1700188fd
mov rcx, rsi
lea rdx, str.version
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x17001866c
cmp ebp, 7
jne 0x17001866c
mov qword [rsp + 0xd0], 0
mov edx, dword [rsp + 0x90]
xor eax, eax
test rdx, rdx
je 0x170018840
mov rcx, qword [rsp + 0x88]
lea r8, [rcx + rdx*2]
mov rbx, rcx
jmp 0x17001861c
mov esi, eax
mov ebp, dword [rsp + rsi*4 + 0xd0]
lea ebp, [rbp + rbp*4]
lea ebp, [rdi + rbp*2]
add ebp, 0xffffffd0
mov dword [rsp + rsi*4 + 0xd0], ebp
cmp ebp, 0xffff
ja 0x17001863b
add rbx, 2
cmp rbx, r8
jae 0x170018844
movzx edi, word [rbx]
lea esi, [rdi - 0x30]
cmp si, 9
jbe 0x1700185ed
cmp di, 0x2e
jne 0x17001863b
add eax, 1
cmp eax, 1
mov eax, 1
jbe 0x17001860f
test byte [0x17008d130], 1
je 0x1700188fd
call fcn.170014e40
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_typelib_version
lea r9, str.wrong_typelib_version_value___s__n
call fcn.17000f350
jmp 0x1700188fd
mov rcx, rsi
lea rdx, str.helpdir
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700186e4
cmp ebp, 7
jne 0x1700186e4
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov edi, dword [rsp + 0x90]
lea r8d, [rdi + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700188ed
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rdi + rdi]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rdi*2], 0
mov rax, qword [rsp + 0x108]
mov qword [rax - 8], rsi
jmp 0x170018516
mov rcx, rsi
lea rdx, str.flags
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170018869
cmp ebp, 5
jne 0x170018869
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x1b0], rax
mov rax, qword [rsp + 0x108]
mov word [rax], 0
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x170018516
xor ebx, ebx
mov rbp, qword [rsp + 0x1b0]
jmp 0x17001876e
mov cx, 1
mov rax, qword [rsp + 0x108]
or word [rax], cx
add rdi, 2
add ebx, 1
mov rbp, rdi
cmp ebx, dword [rsp + 0x70]
lea r12, [rsp + 0xa0]
jae 0x170018516
cmp word [rbp], 0x2c
jne 0x17001877a
mov rdi, rbp
jmp 0x1700187bc
mov ecx, dword [rsp + 0x70]
cmp ecx, ebx
mov eax, ebx
cmova eax, ecx
lea ecx, [rax + 1]
mov edx, eax
sub edx, ebx
lea rdx, [rdx*2]
add rdx, rbp
mov rsi, rbp
nop word [rax + rax]
cmp eax, ebx
je 0x1700187b7
lea rdi, [rsi + 2]
add ebx, 1
cmp word [rsi + 2], 0x2c
mov rsi, rdi
jne 0x1700187a0
jmp 0x1700187bc
mov rdi, rdx
mov ebx, ecx
mov r12, rdi
sub r12, rbp
sar r12, 1
mov rcx, rbp
lea rdx, str.RESTRICTED
mov r8, r12
call sym.ntdll.dll__wcsnicmp
test eax, eax
je 0x170018743
mov rcx, rbp
lea rdx, str.CONTROL
mov r8, r12
call sym.ntdll.dll__wcsnicmp
test eax, eax
je 0x17001882e
mov rcx, rbp
lea rdx, str.HIDDEN
mov r8, r12
call sym.ntdll.dll__wcsnicmp
test eax, eax
je 0x170018837
mov rcx, rbp
lea rdx, str.HASDISKIMAGE
mov r8, r12
call sym.ntdll.dll__wcsnicmp
mov cx, 8
test eax, eax
je 0x170018747
jmp 0x170018926
mov cx, 2
jmp 0x170018747
mov cx, 4
jmp 0x170018747
xor ecx, ecx
jmp 0x170018854
movzx ecx, word [rsp + 0xd0]
movzx eax, word [rsp + 0xd4]
mov rdx, qword [rsp + 0x1a8]
mov word [rdx + 0x12], cx
mov word [rdx + 0x14], ax
jmp 0x170018516
cmp ebp, 5
jb 0x17001888b
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x17001890d
test byte [0x17008d130], 4
je 0x170018516
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x90]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_typelib_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170018516
mov rax, qword [rsp + 0x108]
mov qword [rax - 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170018516
cmp ebp, 5
je 0x170018516
cmp word [rsi + 0xa], 0x3a
je 0x170018516
jmp 0x17001888b
test byte [0x17008d130], 4
lea r12, [rsp + 0xa0]
je 0x1700188fd
mov rcx, qword [rsp + 0x1b0]
mov edx, dword [rsp + 0x70]
call fcn.170014e40
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_typelib_flags
lea r9, str.unknown_flags_value__s_n
call fcn.17000f350
jmp 0x1700188fd
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 4
cmp dword [rsp + 0x148], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x17001754f
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x17001754f
test byte [0x17008d130], 1
je 0x170018a0e
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
xor ecx, ecx
lea r8, str.parse_expect_end_elem
lea r9, str.unexpected_element__s_n
call fcn.17000f350
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x17001754f
test byte [0x17008d130], 4
je 0x170017681
mov rcx, r12
call fcn.170015880
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_file_elem
lea r9, str.unknown_elem__s_n
jmp 0x17001767c
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov r8, rax
mov esi, 4
test r8, r8
mov rcx, qword [rsp + 0xc8]
je 0x170018ce8
mov qword [rcx], r8
mov dword [rcx + 0xc], esi
mov esi, dword [rcx + 8]
lea eax, [rsi + 1]
mov dword [rcx + 8], eax
mov eax, esi
imul rdi, rax, 0x58
mov dword [r8 + rdi], 3
mov qword [rsp + 0x70], r8
mov dword [r8 + rdi + 0x10], 1
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018c2b
mov rax, qword [rsp + 0x70]
lea rbx, [rax + rdi]
add rbx, 0x10
jmp 0x170018b05
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018c2b
mov rsi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0x80]
mov rcx, rsi
lea rdx, str.versioned
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170018b66
cmp ebp, 9
jne 0x170018b66
mov rbp, qword [rsp + 0x88]
mov esi, dword [rsp + 0x90]
mov rcx, rbp
lea rdx, [0x17006e526]
mov r8, rsi
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x170018bea
cmp esi, 2
jne 0x170018bea
mov dword [rbx], 0
jmp 0x170018aea
cmp ebp, 5
jb 0x170018b88
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170018c12
test byte [0x17008d130], 4
je 0x170018aea
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x90]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_window_class_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170018aea
mov rcx, rbp
lea rdx, [0x17006db2e]
mov r8, rsi
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x170018adf
cmp esi, 3
je 0x170018aea
jmp 0x170018adf
cmp ebp, 5
je 0x170018aea
cmp word [rsi + 0xa], 0x3a
je 0x170018aea
jmp 0x170018b88
cmp dword [rsp + 0x148], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x170018cfb
mov rax, qword [rsp + 0x60]
cmp dword [rax], 0
jne 0x170018cfb
mov rbx, qword [r15]
mov rax, qword [r15 + 8]
mov rsi, rbx
cmp rbx, rax
jae 0x170018c77
mov rsi, rbx
cmp word [rsi], 0x3c
je 0x170018c77
add rsi, 2
cmp rsi, rax
jb 0x170018c68
cmp rsi, rax
je 0x170018ce8
mov qword [r15], rsi
sub rsi, rbx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
lea r8, [rsi + 2]
movabs rax, 0x1fffffffe
and r8, rax
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170019042
mov rbp, rax
movabs rax, 0x1fffffffe
and rsi, rax
mov rcx, rbp
mov rdx, rbx
mov r8, rsi
call sym.ntdll.dll_memcpy
mov word [rbp + rsi], 0
mov rax, qword [rsp + 0x70]
mov qword [rax + rdi + 8], rbp
jmp 0x17001905b
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
lea rsi, [rsp + 0x120]
mov rdi, qword [rsp + 0x68]
jmp 0x17001754f
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov rsi, rax
mov edi, 4
test rsi, rsi
mov rcx, qword [rsp + 0xc8]
je 0x170018d7b
mov qword [rcx], rsi
mov dword [rcx + 0xc], edi
mov edi, dword [rcx + 8]
lea eax, [rdi + 1]
mov dword [rcx + 8], eax
mov eax, edi
imul rdi, rax, 0x58
mov dword [rsi + rdi], 0xc
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018f83
add rdi, rsi
add rdi, 0x10
jmp 0x170018dcc
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rdi, qword [rsp + 0x68]
jmp 0x170017547
mov rsi, rax
mov rdx, qword [rsp + 0x88]
lea r8, [rbx + rbx]
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbx*2], 0
mov qword [rdi - 8], rsi
mov rcx, r15
mov rdx, r14
lea r8, [rsp + 0x148]
call fcn.170019c40
test eax, eax
je 0x170018f83
mov rsi, qword [rsp + 0x78]
mov ebp, dword [rsp + 0x80]
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170018e3a
cmp ebp, 4
jne 0x170018e3a
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebx, dword [rsp + 0x90]
lea r8d, [rbx + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x170018d90
mov qword [rdi - 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170018db1
mov rcx, rsi
lea rdx, str.threadingModel
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170018e92
cmp ebp, 0xe
jne 0x170018e92
mov rbp, qword [rsp + 0x88]
mov esi, dword [rsp + 0x90]
mov rcx, rbp
lea rdx, str.both
mov r8, rsi
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x170018f16
cmp esi, 4
jne 0x170018f16
mov dword [rdi], 0
jmp 0x170018db1
cmp ebp, 5
jb 0x170018eb4
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170018f6a
test byte [0x17008d130], 4
je 0x170018db1
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0x88]
mov edx, dword [rsp + 0x90]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_activatable_class_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170018db1
mov rcx, rbp
lea rdx, [0x17006e54e]
mov r8, rsi
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x170018f3c
cmp esi, 3
jne 0x170018f3c
mov dword [rdi], 1
jmp 0x170018db1
mov rcx, rbp
lea rdx, [0x17006e556]
mov r8, rsi
call sym.ntdll.dll__wcsnicmp
test eax, eax
jne 0x170018e2a
cmp esi, 3
jne 0x170018e2a
mov dword [rdi], 2
jmp 0x170018db1
cmp ebp, 5
je 0x170018db1
cmp word [rsi + 0xa], 0x3a
je 0x170018db1
jmp 0x170018eb4
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 0x80
cmp dword [rsp + 0x148], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x17001754f
jmp 0x170018fbc
mov rcx, r15
mov rdx, r13
call fcn.17001b890
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x17001754f
test byte [0x17008d130], 4
je 0x170018fb1
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_activatable_class_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
jmp 0x170018fb1
mov rax, qword [rsp + 0x70]
mov qword [rax + rdi + 8], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
or dword [rax + 0x38], 1
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
lea rbp, str.urn:schemas_microsoft_com:asm.v1
lea rsi, [rsp + 0x120]
jne 0x1700190ae
jmp 0x170018cfb
mov rcx, r15
mov rdx, r13
call fcn.17001b890
mov rcx, r15
mov rdx, r13
mov r8, r12
call fcn.170015320
test eax, eax
je 0x170018cfb
test byte [0x17008d130], 4
je 0x17001908d
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rsi
lea rsi, [rsp + 0x120]
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_window_class_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
jmp 0x17001908d
mov rcx, rsi
lea rdx, str.trustInfo
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170019661
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.170019ef0
jmp 0x170015b86
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov r8, rax
mov esi, 4
test r8, r8
je 0x17001964c
mov qword [rbx + 0x70], r8
mov dword [rbx + 0x7c], esi
mov esi, dword [rbx + 0x78]
lea eax, [rsi + 1]
mov dword [rbx + 0x78], eax
mov eax, esi
imul r12, rax, 0x58
mov dword [r8 + r12], 4
mov qword [rsp + 0x70], r8
lea rbx, [r8 + r12]
add rbx, 0x18
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x170019513
mov rax, qword [rsp + 0x70]
lea rdi, [rax + r12]
add rdi, 0x28
jmp 0x170019210
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 8], rsi
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x170019513
mov rsi, qword [rsp + 0xa0]
mov ebp, dword [rsp + 0xa8]
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170019276
cmp ebp, 4
jne 0x170019276
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x1700191d2
mov qword [rdi - 8], 0
jmp 0x17001948a
mov rcx, rsi
lea rdx, str.clsid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700192e8
cmp ebp, 5
jne 0x1700192e8
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700193cb
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 0x20], rsi
jmp 0x1700191f5
mov rcx, rsi
lea rdx, str.progid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170019359
cmp ebp, 6
jne 0x170019359
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170019408
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rbx], rsi
jmp 0x1700191f5
mov rcx, rsi
lea rdx, str.tlbid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700193d8
cmp ebp, 5
jne 0x1700193d8
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x170019482
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 0x18], rsi
jmp 0x1700191f5
mov qword [rdi - 0x20], 0
jmp 0x17001948a
mov rcx, rsi
lea rdx, str.threadingModel
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170019411
cmp ebp, 0xe
jne 0x170019411
lea rcx, [rsp + 0xb0]
call fcn.17001bbf0
mov dword [rdi + 8], eax
jmp 0x1700191f5
mov qword [rbx], 0
jmp 0x17001948a
mov rcx, rsi
lea rdx, str.runtimeVersion
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x17001949a
cmp ebp, 0xe
jne 0x17001949a
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700194f4
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi], rsi
jmp 0x1700191f5
mov qword [rdi - 0x18], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x1700191f5
cmp ebp, 5
jb 0x1700194b8
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x1700194fd
test byte [0x17008d130], 4
je 0x1700191f5
lea rcx, [rsp + 0xa0]
call fcn.170019eb0
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_clr_class_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x1700191f5
mov qword [rdi], 0
jmp 0x17001948a
cmp ebp, 5
je 0x1700191f5
cmp word [rsi + 0xa], 0x3a
je 0x1700191f5
jmp 0x1700194b8
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 8
cmp qword [rbx], 0
lea rsi, [rsp + 0x120]
je 0x170019534
mov rax, qword [rdi]
or dword [rax + 0x38], 0x40
cmp dword [rsp + 0x78], 0
lea rbp, str.urn:schemas_microsoft_com:asm.v1
jne 0x170019637
mov rcx, r15
mov rdx, r13
mov r8, rsi
call fcn.170015320
test eax, eax
je 0x17001961b
mov rax, qword [rsp + 0x70]
lea rsi, [rax + r12]
jmp 0x17001958d
mov rcx, r15
mov rdx, r13
call fcn.17001b890
mov rcx, r15
mov rdx, r13
lea r8, [rsp + 0x120]
call fcn.170015320
test eax, eax
je 0x17001961b
mov rcx, r13
lea rdx, str.progid
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x1700195b3
mov rcx, r15
mov rdx, rsi
mov r8, r13
call fcn.17001be30
jmp 0x170019572
test byte [0x17008d130], 4
je 0x170019567
mov rcx, qword [rsp + 0xd0]
mov edx, dword [rsp + 0xd8]
call fcn.170014e40
mov rbx, rax
mov rcx, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
call fcn.170014e40
lea rcx, str._s_ns__s
mov rdx, rbx
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_clr_class_elem
lea r9, str.unknown_elem__s_n
call fcn.17000f350
jmp 0x170019567
mov rax, qword [rsp + 0x70]
cmp dword [rax + r12 + 0x50], 0
lea rsi, [rsp + 0x120]
je 0x170019637
mov rax, qword [rdi]
or dword [rax + 0x38], 0x40
mov rbx, qword [rsp + 0x170]
mov r12, qword [rsp + 0x168]
jmp 0x170015b86
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rdi, qword [rsp + 0x68]
jmp 0x17001752f
mov rcx, rsi
lea rdx, str.assemblyIdentity
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170019a3e
mov rcx, r15
mov rdx, qword [rsp + 0x1d8]
mov r8, rsi
call fcn.17001a4b0
cmp dword [r15 + 0x814], 0
jne 0x170015b86
cmp qword [rsp + 0x2a0], 0
je 0x170015b86
mov eax, dword [rbx]
cmp eax, 2
je 0x170019a98
cmp eax, 1
jne 0x170015b86
mov rax, qword [rbx + 0x30]
mov rcx, qword [rsp + 0x2a0]
cmp rax, qword [rcx + 0x28]
je 0x170015b86
test byte [0x17008d130], 1
je 0x170015c5e
mov rax, qword [rsp + 0x2a0]
movzx r8d, word [rax + 0x28]
movzx r9d, word [rax + 0x2a]
movzx edx, word [rax + 0x2c]
movzx ebp, word [rax + 0x2e]
movzx ecx, word [rbx + 0x30]
movzx edi, word [rbx + 0x32]
movzx esi, word [rbx + 0x34]
movzx eax, word [rbx + 0x36]
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x50], esi
lea rsi, [rsp + 0x120]
mov dword [rsp + 0x48], edi
mov rdi, qword [rsp + 0x68]
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x38], ebp
lea rbp, str.urn:schemas_microsoft_com:asm.v1
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], r8d
xor ecx, ecx
lea r8, str.parse_assembly_elem
lea r9, str.wrong_version_for_assembly_manifest:__u._u._u._u____u._u._u._u_n
jmp 0x170015c59
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov r8d, 0x160
mov edx, 8
call sym.ntdll.dll_RtlAllocateHeap
mov rsi, rax
mov edi, 4
test rsi, rsi
je 0x1700197c6
mov qword [rbx + 0x70], rsi
mov dword [rbx + 0x7c], edi
mov edi, dword [rbx + 0x78]
lea eax, [rdi + 1]
mov dword [rbx + 0x78], eax
mov eax, edi
imul rdi, rax, 0x58
mov dword [rsi + rdi], 9
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x170019a28
add rdi, rsi
add rdi, 0x18
jmp 0x170019821
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
mov rdi, qword [rsp + 0x68]
lea rsi, [rsp + 0x120]
jmp 0x170015b86
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 0x10], rsi
mov rcx, r15
lea rdx, [rsp + 0xa0]
mov r8, r14
call fcn.170019c40
test eax, eax
je 0x170019a28
mov rsi, qword [rsp + 0xa0]
mov ebp, dword [rsp + 0xa8]
mov rcx, rsi
lea rdx, str.name
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x170019887
cmp ebp, 4
jne 0x170019887
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
jne 0x1700197e3
mov qword [rdi - 0x10], 0
jmp 0x1700199ff
mov rcx, rsi
lea rdx, str.clsid
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x1700198f9
cmp ebp, 5
jne 0x1700198f9
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700199ee
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi - 8], rsi
jmp 0x170019806
mov rcx, rsi
lea rdx, str.runtimeVersion
mov r8, rbp
call sym.ntdll.dll_wcsncmp
test eax, eax
jne 0x17001996a
cmp ebp, 0xe
jne 0x17001996a
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rcx, qword [rax + 0x30]
mov ebp, dword [rsp + 0xb8]
lea r8d, [rbp + 1]
add r8, r8
xor edx, edx
call sym.ntdll.dll_RtlAllocateHeap
test rax, rax
je 0x1700199f8
mov rsi, rax
mov rdx, qword [rsp + 0xb0]
mov r8, rbp
add r8, rbp
mov rcx, rax
call sym.ntdll.dll_memcpy
mov word [rsi + rbp*2], 0
mov qword [rdi], rsi
jmp 0x170019806
cmp ebp, 5
jb 0x17001998c
mov r8d, 5
mov rcx, rsi
lea rdx, str.xmlns
call sym.ntdll.dll_wcsncmp
test eax, eax
je 0x170019a0f
test byte [0x17008d130], 4
je 0x170019806
mov rcx, rsi
mov edx, ebp
call fcn.170014e40
mov rsi, rax
mov rcx, qword [rsp + 0xb0]
mov edx, dword [rsp + 0xb8]
call fcn.170014e40
lea rcx, str._s_s
mov rdx, rsi
mov r8, rax
call fcn.170015080
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_clr_surrogate_elem
lea r9, str.unknown_attr__s_n
call fcn.17000f350
jmp 0x170019806
mov qword [rdi - 8], 0
jmp 0x1700199ff
mov qword [rdi], 0
mov rax, qword [rsp + 0x60]
mov dword [rax], 1
jmp 0x170019806
cmp ebp, 5
je 0x170019806
cmp word [rsi + 0xa], 0x3a
je 0x170019806
jmp 0x17001998c
mov rdi, qword [rsp + 0x68]
mov rax, qword [rdi]
or dword [rax + 0x38], 0x20
cmp dword [rsp + 0x78], 0
jmp 0x170017030
mov rcx, rsi
lea rdx, str.compatibility
lea r8, str.urn:schemas_microsoft_com:compatibility.v1
call fcn.170015780
test eax, eax
je 0x170019a6b
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.17001a980
jmp 0x170015b86
mov rcx, rsi
lea rdx, str.application
mov r8, rbp
call fcn.170015780
test eax, eax
je 0x170019b0c
mov rcx, r15
mov rdx, rbx
mov r8, rsi
call fcn.17001b130
jmp 0x170015b86
movzx eax, word [rbx + 0x30]
mov rcx, qword [rsp + 0x2a0]
cmp ax, word [rcx + 0x28]
jne 0x170019aea
movzx eax, word [rbx + 0x32]
mov rcx, qword [rsp + 0x2a0]
cmp ax, word [rcx + 0x2a]
jne 0x170019aea
mov rax, qword [rsp + 0x2a0]
movzx eax, word [rax + 0x2c]
cmp word [rbx + 0x34], ax
jb 0x170019aea
jne 0x170015b86
movzx eax, word [rbx + 0x36]
mov rcx, qword [rsp + 0x2a0]
cmp ax, word [rcx + 0x2e]
jae 0x170015b86
test byte [0x17008d130], 1
je 0x170015c5e
xor ecx, ecx
lea r8, str.parse_assembly_elem
lea r9, str.wrong_version_for_shared_assembly_manifest_n
jmp 0x170015c59
test byte [0x17008d130], 4
je 0x170019b3a
mov rcx, rsi
call fcn.170015880
mov qword [rsp + 0x20], rax
mov ecx, 2
lea r8, str.parse_assembly_elem
lea r9, str.unknown_element__s_n
call fcn.17000f350
mov rcx, r15
mov rdx, rsi
call fcn.17001b890
jmp 0x170015b86
mov eax, dword [rbx]
add eax, 0xffffffff
cmp eax, 1
mov r15, qword [rsp + 0x60]
ja 0x170015b58
cmp dword [rbx + 0x58], 0
jne 0x170015b51
jmp 0x170015b58