Function at 0x180033f20
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rax, qword [0x180072270]
xor rax, rsp
mov qword [rbp + 0x100], rax
movzx ebx, byte [rsp + 0x30]
lea r14d, [r8 + 0x10]
mov qword [rsp + 0x48], r9
xor r9d, r9d
mov qword [rbp - 8], rdx
mov edx, 0x6c
mov qword [rsp + 0x60], rcx
lea rcx, [0x180000000]
mov dword [rsp + 0x34], r8d
cmp r8d, r14d
jae 0x1800341c7
mov edi, dword [rsp + 0x38]
lea esi, [r8 - 0x5c]
movzx r15d, byte [rsp + 0x30]
lea r13d, [rdx - 0x3e]
mov r8d, 0x6976
mov r9d, 0x49
cmp esi, 0x2b
ja case.default.0x180033fc4
movzx eax, byte [rcx + rsi + 0x34db0]
mov ecx, dword [rcx + rax*4 + 0x34d6c]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov dword [rbp + 0x8c], 0x320033
jmp case.0x180033fc4.16
mov dword [rbp + 0x80], 0x730073
jmp case.0x180033fc4.16
mov word [rbp + 0x90], r13w
jmp case.0x180033fc4.16
mov edx, 0x6c
mov dword [rbp + 0x92], 0x6c0064
mov word [rbp + 0x96], dx
lea rcx, [0x180000000]
jmp 0x1800341b1
mov word [rbp + 0x30], r9w
mov dword [rbp + 0x31], 0x706e49
jmp case.0x180033fc4.16
xor r9d, r9d
mov byte [rbp + 0x40], 0x76
mov word [rbp + 0x98], r9w
lea rcx, [0x180000000]
lea edx, [r9 + 0x6c]
jmp 0x1800341b4
mov eax, 0x6f
mov dword [rbp + 0x3b], 0x3c6564
mov word [rbp + 0x38], ax
mov word [rbp + 0x39], r8w
jmp case.0x180033fc4.16
mov dword [rbp + 0x84], 0x65006c
mov dword [rbp + 0x88], 0x790061
jmp case.0x180033fc4.16
xor eax, eax
lea r9, [rbp - 0x58]
lea r8, [rsp + 0x70]
mov qword [rbp - 0x58], rax
mov edx, edi
lea rcx, [rbp + 0x30]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
lea rcx, [0x180000000]
mov edx, 0x6c
test eax, eax
je 0x1800341b1
xor r15b, r15b
jmp 0x1800341b1
lea rax, [rbp + 0x30]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x1800340b7
xor r9d, r9d
lea rcx, [0x180000000]
mov dword [rsp + 0x70], r9d
lea edx, [r9 + 0x6c]
jmp 0x1800341b4
mov eax, 0x75
mov word [rbp + 0x34], ax
mov dword [rbp + 0x35], 0x725074
jmp case.0x180033fc4.16
test r15b, r15b
je 0x18003413e
mov ebx, 0x29
cmp ebx, 0x29
je 0x18003410b
cmp ebx, 0x14a9
jne 0x180034130
mov rcx, qword [rsp + 0x50]
jmp 0x180034126
xor eax, eax
lea r8, [rsp + 0x50]
mov edx, edi
mov qword [rsp + 0x50], rax
lea rcx, [rbp + 0x30]
call sub.RPCRT4.dll_MesDecodeBufferHandleCreate
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x180034130
call sub.RPCRT4.dll_MesHandleFree
add ebx, 0x1480
cmp ebx, 0x2900
jbe 0x1800340f7
cmp qword [0x180072358], 0
je 0x180034156
cmp qword [0x180072350], 0
je 0x180034156
mov bl, 1
jmp case.0x180033fc4.16
xor bl, bl
jmp case.0x180033fc4.16
mov eax, dword [0x18008241c]
dec eax
mov dword [0x18008241c], eax
cmp eax, 9
jg case.0x180033fc4.16
mov r9d, 0x11b
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.18000c470
jmp case.0x180033fc4.16
mov edx, 0xa7
mov dword [rsp + 0x40], 0xa
lea rcx, [rsp + 0x40]
call fcn.180012320
jmp case.0x180033fc4.16
mov r15b, 1
lea rcx, [0x180000000]
mov edx, 0x6c
xor r9d, r9d
inc esi
lea eax, [rsi + 0x5c]
cmp eax, r14d
jb 0x180033f96
mov r8d, dword [rsp + 0x34]
lea eax, [r8 - 0x10]
cmp r8d, eax
jbe 0x180034479
lea edi, [r8 - 0x4d]
mov esi, 0x10
jmp 0x1800341e7
lea rcx, [0x180000000]
cmp edi, 0xf
ja case.default.0x180034201
mov ecx, dword [rcx + rdi*4 + 0x34ddc]
lea rax, [0x180000000]
add rcx, rax
jmp rcx
mov r8d, 0xa
lea rdx, [rbp + 0xce]
lea ecx, [r8 - 8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__itow]
mov eax, dword [0x180064530]
mov dword [rbp + 0xd0], eax
mov eax, dword [0x180062d4c]
mov dword [rbp + 0xd4], eax
movzx eax, word [0x180062d50]
mov word [rbp + 0xd8], ax
jmp case.default.0x180034201
mov r8d, 5
lea rdx, [0x18006453e]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.default.0x180034201
mov r8d, 1
lea rdx, [0x18006457f]
lea rcx, [rbp + 0x52]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x180034201
mov word [rbp + 0xb6], dx
jmp case.default.0x180034201
movsd xmm0, qword [str.leay3]
mov eax, dword [0x180064598]
movsd qword [rbp + 0xc4], xmm0
mov dword [rbp + 0xcc], eax
jmp case.default.0x180034201
mov byte [rbp + 0x46], 0
jmp case.default.0x180034201
movsd xmm0, qword [0x1800645a8]
movzx eax, word [0x1800645b0]
movsd qword [rbp + 0xac], xmm0
mov word [rbp + 0xb4], ax
mov word [rbp + 0xb6], r9w
jmp case.default.0x180034201
mov eax, dword [0x180064530]
lea rdx, [0x180062d4c]
movups xmm0, xmmword [str.sleay32]
mov r8d, 3
lea rcx, [rbp + 0xf4]
movups xmmword [rbp + 0xe2], xmm0
mov dword [rbp + 0xf0], eax
movzx eax, word [0x180064534]
mov word [rbp + 0xf4], ax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp case.default.0x180034201
mov dword [rbp + 0xe0], 0x73
jmp case.default.0x180034201
mov byte [rbp + 0x58], 0
mov dword [rbp + 0xa0], 0x73
jmp case.default.0x180034201
mov r8d, 4
mov byte [rbp + 0x53], 0
lea rdx, [0x180064751]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x1800647b5]
lea rcx, [rbp + 0x57]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x180034201
mov eax, dword [0x1800647b8]
mov dword [rbp + 0xc0], eax
movzx eax, word [0x1800647bc]
mov word [rbp + 0xc4], ax
mov word [rbp + 0xb8], r9w
jmp case.default.0x180034201
movsd xmm0, qword [0x1800647c2]
movzx eax, word [0x1800647ca]
movsd qword [rbp + 0xa2], xmm0
mov word [rbp + 0xaa], ax
jmp case.default.0x180034201
mov r8d, 3
mov byte [rbp + 0x41], 0
lea rdx, [0x1800647df]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x1800647fd]
lea rcx, [rbp + 0x44]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
jmp case.default.0x180034201
mov r8d, 4
lea rdx, [0x180064849]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 2
lea rdx, [0x180064864]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
mov r8d, 1
lea rdx, [0x18006489f]
lea rcx, [rbp + 0x40]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncat]
jmp case.default.0x180034201
mov r8d, 1
mov word [rbp + 0x60], r9w
lea rdx, str.strictVTablePointers
lea rcx, [rbp + 0x60]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov edx, 0x6c
dec edi
lea r9d, [rdx - 0x6c]
sub rsi, 1
jne 0x1800341e0
mov r8d, dword [rsp + 0x34]
lea esi, [r8 + 0x12]
mov dword [rsp + 0x74], esi
cmp r8d, esi
jae case.0x1800344c4.109
mov r15d, dword [rsp + 0x38]
mov r12, qword [rsp + 0x50]
mov r13, qword [rbp - 0x20]
mov r14, qword [rbp - 0x18]
lea eax, [r8 - 0x5c]
movabs r9, 0x610065006c0073
cmp eax, 0x11
ja case.default.0x1800344c4
lea rdx, [0x180000000]
mov ecx, dword [rdx + rax*4 + 0x34e1c]
add rcx, rdx
jmp rcx
mov edi, 0x9e
nop dword [rax + rax]
mov eax, edi
sub eax, 0x9d
je 0x18003454c
sub eax, 1
je 0x180034524
sub eax, 3
je 0x18003455f
sub eax, 1
je 0x18003451e
cmp eax, 1
jne 0x18003453a
cmp dword [rbp + 0xa0], eax
jne 0x180034546
mov eax, dword [0x57]
inc eax
mov dword [0x57], eax
mov eax, dword [pe_dos_header]
inc eax
mov dword [0], eax
mov byte [0x1800a41d0], 1
jmp 0x18003453a
mov byte [rbp - 0x80], 0
jmp 0x18003453a
xor r8d, r8d
lea rcx, [rbp + 0xa0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp + 0x28], rax
dec edi
cmp edi, 0x99
ja 0x1800344d0
jmp 0x18003455f
mov byte [rbp - 0x80], 0
jmp 0x18003455f
mov rcx, qword [rbp + 0x28]
mov edx, 0x57
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x80], rax
mov rax, qword [rbp - 0x80]
lea rcx, [rbp + 0x40]
mov qword [rbp], rax
mov r15, 0xffffffffffffffff
inc r15
cmp byte [rcx + r15], 0
jne 0x180034572
jmp 0x180034d27
mov byte [rsp + 0x33], 1
mov edi, 0x9e
nop dword [rax + rax]
mov eax, edi
sub eax, 0x9d
je 0x18003462c
sub eax, 1
je 0x1800345ec
sub eax, 3
je 0x18003463f
sub eax, 1
je 0x1800345e6
cmp eax, 1
jne 0x180034602
cmp dword [rbp + 0x80], eax
jne 0x18003461a
mov eax, dword [0x2b]
inc eax
mov dword [0x2b], eax
mov eax, dword [pe_dos_header]
inc eax
mov dword [0], eax
mov byte [0x1800a41d0], 1
jmp 0x180034602
mov byte [rbp - 0x78], 0
jmp 0x180034602
xor r8d, r8d
lea rcx, [rbp + 0x80]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x10], rax
dec edi
cmp edi, 0x99
ja 0x180034590
mov r12, qword [rbp - 0x78]
mov qword [rsp + 0x50], r12
jmp 0x180034d27
mov byte [rbp - 0x78], 0
mov r12, qword [rbp - 0x78]
mov qword [rsp + 0x50], r12
jmp 0x180034d27
mov rcx, qword [rbp - 0x10]
mov edx, 0x2b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x78], rax
mov r12, qword [rbp - 0x78]
mov qword [rsp + 0x50], r12
jmp 0x180034d27
mov dword [rbp + 0x6e], 0x32
jmp case.default.0x1800344c4
xor eax, eax
mov word [rbp + 0x78], ax
jmp case.default.0x1800344c4
mov r8d, 1
lea rdx, [0x18006490e]
lea rcx, [rbp + 0x76]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x180034d27
mov dword [rbp + 0x6a], 0x330079
jmp case.default.0x1800344c4
lea r9, [rsp + 0x68]
mov edx, r15d
lea r8, [rsp + 0x5c]
lea rcx, [rbp + 0x40]
call sub.RPCRT4.dll_MesEncodeFixedBufferHandleCreate
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x60]
cmp qword [rax], 0
jne 0x180034798
mov esi, 0xd6
nop word [rax + rax]
cmp esi, 0xd6
je 0x180034778
cmp esi, 0x7286
je 0x180034756
cmp esi, 0xe436
je 0x180034700
cmp esi, 0x155e6
je 0x1800346f9
cmp esi, 0x1c796
je case.0x1800344c4.109
jmp 0x18003477d
xor bl, bl
jmp 0x18003477d
cmp byte [rsp + 0x30], 0
je 0x18003477d
mov edi, 0x55
xor r12d, r12d
nop
mov eax, edi
sub eax, 0x53
je 0x18003473a
sub eax, 1
je 0x180034727
cmp eax, 1
jne 0x180034748
mov qword [rbp - 0x50], r12
jmp 0x180034748
lea r8, [rbp - 0x50]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x48]
jmp 0x18003473e
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x180034748
call sub.RPCRT4.dll_MesHandleFree
dec edi
cmp edi, 0x52
ja 0x180034710
mov r12, qword [rsp + 0x50]
jmp 0x18003477d
xor eax, eax
lea r9, [rbp - 0x48]
xor r8d, r8d
mov qword [rbp - 0x48], rax
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
test eax, eax
je 0x18003477d
xor al, al
mov byte [rsp + 0x30], al
jmp 0x18003477d
mov byte [rsp + 0x30], 1
add esi, 0x71b0
cmp esi, 0x23870
jbe 0x1800346c0
mov esi, dword [rsp + 0x74]
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
call r13
mov rcx, qword [rsp + 0x48]
jmp 0x180034d24
mov rax, qword [rbp - 8]
mov edx, dword [rax]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [rbp]
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x33]
cmp dword [rsp + 0x78], ecx
cmove ecx, eax
mov byte [rsp + 0x33], cl
jmp 0x180034d27
mov edi, 0x9e
nop word [rax + rax]
mov eax, edi
sub eax, 0x9d
je 0x180034886
sub eax, 1
je 0x18003483c
sub eax, 3
je 0x180034899
sub eax, 1
je 0x180034836
cmp eax, 1
jne 0x180034852
cmp dword [rbp + 0xc0], eax
jne 0x18003486f
mov eax, dword [0x4b]
inc eax
mov dword [0x4b], eax
mov eax, dword [pe_dos_header]
inc eax
mov dword [0], eax
mov byte [0x1800a41d0], 1
jmp 0x180034852
mov byte [rbp - 0x70], 0
jmp 0x180034852
xor r8d, r8d
lea rcx, [rbp + 0xc0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp + 8], rax
dec edi
cmp edi, 0x99
ja 0x1800347e0
mov r13, qword [rbp - 0x70]
xor eax, eax
mov qword [rbp - 0x20], r13
mov dword [rsp + 0x5c], eax
jmp 0x180034d27
mov byte [rbp - 0x70], 0
xor eax, eax
mov r13, qword [rbp - 0x70]
mov qword [rbp - 0x20], r13
mov dword [rsp + 0x5c], eax
jmp 0x180034d27
mov rcx, qword [rbp + 8]
mov edx, 0x4b
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x70], rax
mov r13, qword [rbp - 0x70]
xor eax, eax
mov qword [rbp - 0x20], r13
mov dword [rsp + 0x5c], eax
jmp 0x180034d27
xor eax, eax
mov qword [rbp + 0x62], r9
mov word [rbp + 0x6a], ax
jmp case.default.0x1800344c4
mov rcx, qword [rsp + 0x48]
cmp qword [rcx], 0
jne case.default.0x1800344c4
mov edi, 0x117
nop
mov eax, edi
sub eax, 0x117
je 0x1800349b0
sub eax, 0x7e
je 0x180034987
sub eax, 0x7e
je 0x180034971
sub eax, 0x7e
je 0x180034902
cmp eax, 0x7e
je case.0x1800344c4.109
jmp 0x1800349bb
cmp byte [rsp + 0x31], 0
je 0x18003496d
mov ebx, 0xe6
nop
cmp ebx, 0xe6
je 0x180034959
cmp ebx, 0x1ab
je 0x180034938
cmp ebx, 0x270
jne 0x18003495f
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x18003495f
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18003495f
lea r8, [rbp - 0x40]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x38]
mov dword [rsp + 0x58], eax
test rcx, rcx
je 0x18003495f
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18003495f
xor eax, eax
mov qword [rbp - 0x40], rax
add ebx, 0xc5
cmp ebx, 0x335
jb 0x180034910
xor bl, bl
jmp 0x1800349bb
xor eax, eax
mov ecx, eax
movzx eax, byte [rsp + 0x31]
cmp dword [rsp + 0x58], ecx
cmove ecx, eax
mov byte [rsp + 0x31], cl
jmp 0x1800349bb
mov rdx, rcx
mov r8d, 0xbf
mov rcx, qword [rsp + 0x60]
call fcn.1800392a0
lea r9, [rbp - 0x38]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x58], eax
jmp 0x1800349bb
xor eax, eax
mov byte [rsp + 0x31], 1
mov qword [rbp - 0x38], rax
mov rcx, qword [rsp + 0x48]
add edi, 0x7e
cmp edi, 0x38d
jb 0x1800348d0
jmp 0x180034d27
xor eax, eax
mov word [rbp + 0x6e], ax
jmp case.default.0x1800344c4
mov rax, qword [rsp + 0x48]
xor ecx, ecx
mov qword [rax], rcx
jmp case.default.0x1800344c4
mov r8d, 3
lea rdx, [0x180064972]
lea rcx, [rbp + 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
xor eax, eax
mov word [rbp + 0x76], ax
jmp 0x180034d27
mov edi, 0x9e
mov eax, edi
sub eax, 0x9d
je 0x180034a91
sub eax, 1
je 0x180034a69
sub eax, 3
je 0x180034aa4
sub eax, 1
je 0x180034a63
cmp eax, 1
jne 0x180034a7f
cmp dword [rbp + 0xe0], eax
jne 0x180034a8b
mov eax, dword [0x6f]
inc eax
mov dword [0x6f], eax
mov eax, dword [pe_dos_header]
inc eax
mov dword [0], eax
mov byte [0x1800a41d0], 1
jmp 0x180034a7f
mov byte [rbp - 0x68], 0
jmp 0x180034a7f
xor r8d, r8d
lea rcx, [rbp + 0xe0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp + 0x10], rax
dec edi
cmp edi, 0x99
ja 0x180034a15
jmp 0x180034aa4
mov byte [rbp - 0x68], 0
jmp 0x180034aa4
mov rcx, qword [rbp + 0x10]
mov edx, 0x6f
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x68]
mov edi, 0x9e
mov qword [rbp - 0x18], rax
xor eax, eax
mov qword [rsp + 0x68], rax
nop dword [rax + rax]
mov eax, edi
sub eax, 0x9d
je 0x180034b48
sub eax, 1
je 0x180034b15
sub eax, 3
je 0x180034b5b
sub eax, 1
je 0x180034b0f
cmp eax, 1
jne 0x180034b28
cmp dword [rbp + 0x60], eax
jne 0x180034b3b
mov eax, dword [0xc]
inc eax
mov dword [0xc], eax
mov eax, dword [pe_dos_header]
inc eax
mov dword [0], eax
mov byte [0x1800a41d0], 1
jmp 0x180034b28
mov byte [rbp - 0x60], 0
jmp 0x180034b28
xor r8d, r8d
lea rcx, [rbp + 0x60]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp + 0x18], rax
dec edi
cmp edi, 0x99
ja 0x180034ac0
mov r14, qword [rbp - 0x60]
jmp 0x180034d27
mov byte [rbp - 0x60], 0
mov r14, qword [rbp - 0x60]
jmp 0x180034d27
mov rcx, qword [rbp + 0x18]
mov edx, 0xc
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp - 0x60], rax
mov r14, qword [rbp - 0x60]
jmp 0x180034d27
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call r12
cmp eax, 1
je 0x180034c81
mov edi, 0x108
nop dword [rax]
cmp edi, 0x108
je 0x180034c64
cmp edi, 0xa608
je 0x180034c4d
cmp edi, 0x14b08
je 0x180034c37
cmp edi, 0x1f008
je 0x180034bbd
cmp edi, 0x29508
je case.0x1800344c4.109
jmp 0x180034c6f
movzx eax, byte [rsp + 0x32]
xor edx, edx
cmp dword [rsp + 0x40], edx
mov ecx, edx
cmove ecx, eax
mov byte [rsp + 0x32], cl
cmp cl, dl
je 0x180034c33
mov ebx, 0xc
nop word [rax + rax]
cmp ebx, 0xc
je 0x180034c0b
cmp ebx, 0x2e8
jne 0x180034c20
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x180034bfb
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x180034c20
call sub.RPCRT4.dll_MesHandleFree
jmp 0x180034c20
mov qword [rbp - 0x30], rdx
lea r8, [rbp - 0x30]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov dword [rsp + 0x40], eax
add ebx, 0x2dc
mov edx, 0
cmp ebx, 0x5b8
jbe 0x180034be0
xor bl, bl
jmp 0x180034c6f
lea r9, [rbp - 0x28]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x40], eax
jmp 0x180034c6f
mov rdx, qword [rsp + 0x48]
mov r8d, 0xbf
mov rcx, qword [rsp + 0x60]
call fcn.1800392a0
jmp 0x180034c6f
xor eax, eax
mov byte [rsp + 0x32], 1
mov qword [rbp - 0x28], rax
add edi, 0xa500
cmp edi, 0x33900
jbe 0x180034b80
cmp byte [rsp + 0x33], 0
je 0x180034d12
mov rcx, qword [rsp + 0x68]
mov ebx, pe_nt_image_headers64
mov r13d, dword [rsp + 0x38]
mov r12d, dword [rsp + 0x7c]
cmp ebx, 0x110
je 0x180034ce4
cmp ebx, 0xb390
jne 0x180034cf1
lea rax, [rsp + 0x5c]
mov r8d, r13d
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x20]
mov edx, r12d
mov dword [rsp + 0x20], r15d
call sub.RPCRT4.dll_MesBufferHandleReset
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x180034cf1
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x68]
jmp 0x180034cf1
xor eax, eax
mov r13d, eax
mov qword [rbp + 0x20], rax
lea r12d, [rax + 1]
add ebx, 0xb280
cmp ebx, 0x16500
jbe 0x180034ca0
mov dword [rsp + 0x7c], r12d
mov r12, qword [rsp + 0x50]
mov dword [rsp + 0x38], r13d
mov r13, qword [rbp - 0x20]
mov bl, 1
jmp 0x180034d27
call qword [rbp - 0x18]
mov rcx, rax
call r14
mov rcx, qword [rsp + 0x60]
mov qword [rcx], rax
mov r8d, dword [rsp + 0x34]
inc r8d
mov dword [rsp + 0x34], r8d
cmp r8d, esi
jb 0x18003449c
movzx eax, bl
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.18005e580
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret