Function at 0x140180c1b
Capabilities:
Authenticate hmac

Disassembly:
push rax
pushf
mov eax, 0x3247a875
pushf
not eax
add eax, 0x9d4018e1
xor eax, 0x9bde26fe
rol eax, 0x59
popf
pushf
not eax
add eax, 0xcbc35d06
xor eax, 0x9fe11058
rol eax, 0x98
popf
cmp eax, 0x29
jne 0x140180c58
popf
pop rax
jmp 0x140182457
cmp eax, 0
jne 0x140180c67
popf
pop rax
jmp 0x140180f0a
cmp eax, 3
jne 0x140180c76
popf
pop rax
jmp 0x1401811bb
cmp eax, 1
jne 0x140180c85
popf
pop rax
jmp 0x140181080
cmp eax, 0xd
jne 0x140180c94
popf
pop rax
jmp 0x1401816d9
cmp eax, 0x1a
jne 0x140180ca3
popf
pop rax
jmp 0x140181c95
cmp eax, 0xe
jne 0x140180cb2
popf
pop rax
jmp 0x14018177d
cmp eax, 0xb
jne 0x140180cc1
popf
pop rax
jmp 0x1401815df
cmp eax, 0x19
jne 0x140180cd0
popf
pop rax
jmp 0x140181c30
cmp eax, 8
jne 0x140180cdf
popf
pop rax
jmp 0x140181445
cmp eax, 0x2a
jne 0x140180cee
popf
pop rax
jmp 0x140182505
cmp eax, 0x17
jne 0x140180cfd
popf
pop rax
jmp 0x140181b5a
cmp eax, 0x1c
jne 0x140180d0c
popf
pop rax
jmp 0x140181df3
cmp eax, 0x2e
jne 0x140180d1b
popf
pop rax
jmp 0x1401826c8
cmp eax, 0x18
jne 0x140180d2a
popf
pop rax
jmp 0x140181bd8
cmp eax, 0x2b
jne 0x140180d39
popf
pop rax
jmp 0x1401825b9
cmp eax, 0x1b
jne 0x140180d48
popf
pop rax
jmp 0x140181d65
cmp eax, 0x2d
jne 0x140180d57
popf
pop rax
jmp 0x14018263a
cmp eax, 0x23
jne 0x140180d66
popf
pop rax
jmp 0x140182132
cmp eax, 0x25
jne 0x140180d75
popf
pop rax
jmp 0x14018226b
cmp eax, 0xf
jne 0x140180d84
popf
pop rax
jmp 0x1401817c7
cmp eax, 0x13
jne 0x140180d93
popf
pop rax
jmp 0x14018196e
cmp eax, 0x15
jne 0x140180da2
popf
pop rax
jmp 0x140181a73
cmp eax, 0x24
jne 0x140180db1
popf
pop rax
jmp 0x1401821c0
cmp eax, 0x1e
jne 0x140180dc0
popf
pop rax
jmp 0x140181f33
cmp eax, 0xc
jne 0x140180dcf
popf
pop rax
jmp 0x140181628
cmp eax, 0x26
jne 0x140180dde
popf
pop rax
jmp 0x1401822d4
cmp eax, 0x27
jne 0x140180ded
popf
pop rax
jmp 0x14018231e
cmp eax, 0x1f
jne 0x140180dfc
popf
pop rax
jmp 0x140181f7c
cmp eax, 0x10
jne 0x140180e0b
popf
pop rax
jmp 0x14018185c
cmp eax, 0x2c
jne 0x140180e1a
popf
pop rax
jmp 0x140182602
cmp eax, 9
jne 0x140180e29
popf
pop rax
jmp 0x1401814b0
cmp eax, 4
jne 0x140180e38
popf
pop rax
jmp 0x140181272
cmp eax, 0x16
jne 0x140180e47
popf
pop rax
jmp 0x140181abc
cmp eax, 0x28
jne 0x140180e56
popf
pop rax
jmp 0x14018237a
cmp eax, 0xa
jne 0x140180e65
popf
pop rax
jmp 0x140181520
cmp eax, 0x22
jne 0x140180e74
popf
pop rax
jmp 0x1401820f6
cmp eax, 0x14
jne 0x140180e83
popf
pop rax
jmp 0x1401819de
cmp eax, 7
jne 0x140180e92
popf
pop rax
jmp 0x14018139b
cmp eax, 5
jne 0x140180ea1
popf
pop rax
jmp 0x1401812bc
cmp eax, 2
jne 0x140180eb0
popf
pop rax
jmp 0x1401810b6
cmp eax, 0x20
jne 0x140180ebf
popf
pop rax
jmp 0x140181fc7
cmp eax, 0x1d
jne 0x140180ece
popf
pop rax
jmp 0x140181e7b
cmp eax, 0x11
jne 0x140180edd
popf
pop rax
jmp 0x1401818a5
cmp eax, 6
jne 0x140180eec
popf
pop rax
jmp 0x140181352
cmp eax, 0x21
jne 0x140180efb
popf
pop rax
jmp 0x140182001
cmp eax, 0x12
jne 0x140180f0a
popf
pop rax
jmp 0x140181969
mov qword [rsp + 0x18], r8
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rdi, r8
mov r14, rdx
lea rax, [0x18fa122fa]
pushf
sub rax, 0x4f980272
popf
mov qword [rsp + 0x38], rax
xor r13d, r13d
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x20]
xor edx, edx
mov rcx, qword [rcx]
jmp 0x140180f4d
call qword [sym.imp.gdiplus.dll_GdipCreateBitmapFromHBITMAP]
mov dword [rsp + 0x48], eax
mov r12, qword [rsp + 0x20]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0xa8], r13
lea r8, [rsp + 0xa8]
mov edx, 0xda27aad
pushf
not edx
add edx, 0x897f72dd
xor edx, 0xf877c4a3
rol edx, 0x58
popf
pushf
not edx
add edx, 0xafdddec2
xor edx, 0x8bec3277
rol edx, 0x7b
popf
pushf
not edx
add edx, 0xe9e4d0e2
xor edx, 0xfdf5a5d3
rol edx, 0x34
popf
pushf
not edx
add edx, 0xdb732656
xor edx, 0x8b588fbd
rol edx, 0x3c
popf
xor ecx, ecx
jmp 0x140180fcd
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov rbx, qword [rdi + 0x10]
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14018103a
push rax
pushf
mov eax, 0xee4843ad
pushf
not eax
add eax, 0xdcbd6ff2
xor eax, 0xec1c8df1
rol eax, 0xcb
popf
pushf
not eax
add eax, 0xfa17d6c1
xor eax, 0x99612f3f
rol eax, 0xc2
popf
pushf
not eax
add eax, 0x9664d4be
xor eax, 0xbb93f65b
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xf6b7b64a
xor eax, 0xbe89371a
rol eax, 0xde
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x758d4db1
pushf
not eax
add eax, 0xa74d5b8b
xor eax, 0xff42764c
rol eax, 4
popf
pushf
not eax
add eax, 0xb0f8cf84
xor eax, 0xa3718e84
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xa445a33e
xor eax, 0x88e99e78
rol eax, 0xb1
popf
jmp 0x140180c49
mov rcx, qword [rdi]
push rax
pushf
mov eax, 0x4b68c7d5
pushf
not eax
add eax, 0xc88f83d5
xor eax, 0xdee4077a
rol eax, 0x61
popf
pushf
not eax
add eax, 0xfba4d9c9
xor eax, 0xb41f62bd
rol eax, 0xb8
popf
jmp 0x140180c49
mov rsi, rbx
mov r15d, 0xdf0b0b92
pushf
not r15d
add r15d, 0xd773388d
xor r15d, 0xa2e460d8
rol r15d, 0xee
popf
pushf
not r15d
add r15d, 0xbaa6171e
xor r15d, 0xc0035fc3
rol r15d, 0xbd
popf
pushf
not r15d
add r15d, 0xaef9de7e
xor r15d, 0x8206028a
rol r15d, 0xfe
popf
cmp rbx, r15
cmova rsi, r15
mov r8, rsi
lea rdx, [0x1a875cf9a]
pushf
sub rdx, 0x686cd8e6
popf
call fcn.140294943
test eax, eax
jne 0x140181188
push rax
pushf
mov eax, 0x259d5a20
pushf
not eax
add eax, 0xbbd469b6
xor eax, 0xe071a446
rol eax, 0x75
popf
pushf
not eax
add eax, 0xe74e93b8
xor eax, 0xc0c0960a
rol eax, 0xc4
popf
pushf
not eax
add eax, 0xb45ac792
xor eax, 0x8be6d806
rol eax, 0x3a
popf
pushf
not eax
add eax, 0xf7904475
xor eax, 0xc1aa3bf0
rol eax, 4
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xca8b09a5
pushf
not eax
add eax, 0x90215264
xor eax, 0xd911859b
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xfc4f9392
xor eax, 0xddbaff1f
rol eax, 0xb
popf
jmp 0x140180c49
cmp rbx, r15
jne 0x140181219
push rax
pushf
mov eax, 0x24b11df0
pushf
not eax
add eax, 0xbf86e85d
xor eax, 0xca4f23f3
rol eax, 0x62
popf
pushf
not eax
add eax, 0x900ec89a
xor eax, 0xaf3930ed
rol eax, 0x3c
popf
pushf
not eax
add eax, 0xff22ee98
xor eax, 0x9eb8f753
rol eax, 0xda
popf
pushf
not eax
add eax, 0x93bb285f
xor eax, 0xa5c2a176
rol eax, 0x53
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x1e474535
pushf
not eax
add eax, 0xdc67a830
xor eax, 0xe6e96746
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe6e9704b
xor eax, 0xe28ace1c
rol eax, 0xab
popf
pushf
not eax
add eax, 0xb9d9ad69
xor eax, 0xe08b1ea7
rol eax, 0x86
popf
pushf
not eax
add eax, 0xee1bf606
xor eax, 0xb412c6e1
rol eax, 0x8c
popf
jmp 0x140180c49
lea rcx, [0x1b7eeeef9]
pushf
sub rcx, 0x77e5f839
popf
jmp 0x140181c30
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14018131f
push rax
pushf
mov eax, 0xeb6f6b94
pushf
not eax
add eax, 0xbc64d6dd
xor eax, 0xc8b39b0c
rol eax, 0x22
popf
pushf
not eax
add eax, 0xeb75b776
xor eax, 0xa383c9b4
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x95782194
xor eax, 0xb949f2cf
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xe79ab3f1
xor eax, 0x904a67b9
rol eax, 0xa7
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xfaef28db
pushf
not eax
add eax, 0xf2a9c197
xor eax, 0xf84dca9c
rol eax, 0xa5
popf
pushf
not eax
add eax, 0xc8960c6a
xor eax, 0xc9abb788
rol eax, 0x54
popf
jmp 0x140180c49
mov rcx, qword [rdi]
push rax
pushf
mov eax, 0x3360a811
pushf
not eax
add eax, 0xecc55464
xor eax, 0xc8275a81
rol eax, 0xc
popf
pushf
not eax
add eax, 0x82163fe7
xor eax, 0x8ffd4ecf
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb6cb3b4f
xor eax, 0xf31190da
rol eax, 0x7e
popf
jmp 0x140180c49
mov r8, rsi
lea rdx, [0x1b840deff]
pushf
sub rdx, 0x7837e7ef
popf
call fcn.140294943
test eax, eax
jne 0x140181412
push rax
pushf
mov eax, 0x48c72dc0
pushf
not eax
add eax, 0xff9d27ba
xor eax, 0xddd335b7
rol eax, 0x48
popf
pushf
not eax
add eax, 0xffa6c027
xor eax, 0xde0a1981
rol eax, 0x56
popf
pushf
not eax
add eax, 0xed02aee9
xor eax, 0xa4f432b7
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xa4c6c9a3
xor eax, 0xb1d1a012
rol eax, 0x57
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x7697892c
pushf
not eax
add eax, 0xd033ddaa
xor eax, 0x9ae46f38
rol eax, 0x52
popf
pushf
not eax
add eax, 0x9e927c78
xor eax, 0xb17e6e97
rol eax, 0x11
popf
jmp 0x140180c49
cmp rbx, r15
jne 0x14018147d
push rax
pushf
mov eax, 0x1fec424f
pushf
not eax
add eax, 0xedf74ad4
xor eax, 0xf5a8d319
rol eax, 0xe3
popf
pushf
not eax
add eax, 0xd1dd1d7f
xor eax, 0xf4bac095
rol eax, 0x51
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x6a65ae4f
pushf
not eax
add eax, 0xe41ac388
xor eax, 0xbedb8a5e
rol eax, 0xea
popf
pushf
not eax
add eax, 0x901bcbc0
xor eax, 0xd5b630a2
rol eax, 0xee
popf
jmp 0x140180c49
lea rcx, [0x18ee63c6d]
pushf
sub rcx, 0x4edd454d
popf
jmp 0x140181c30
mov rcx, rdi
mov rsi, qword [rdi + 0x18]
cmp rsi, 0xf
jbe 0x140181586
push rax
pushf
mov eax, 0xf39743b1
pushf
not eax
add eax, 0xab6f3fbe
xor eax, 0xa895a6a8
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x8274ae0b
xor eax, 0xfe59ed26
rol eax, 0xf6
popf
pushf
not eax
add eax, 0x93a6a516
xor eax, 0x89420038
rol eax, 0xca
popf
pushf
not eax
add eax, 0x87a1bb27
xor eax, 0xf7a183ef
rol eax, 0xe3
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x257220c2
pushf
not eax
add eax, 0xe0a4208e
xor eax, 0xee83c1fd
rol eax, 0x18
popf
pushf
not eax
add eax, 0xeaa0f6c8
xor eax, 0xa6d442b7
rol eax, 0x75
popf
pushf
not eax
add eax, 0xbee1a7e1
xor eax, 0xa6e4af19
rol eax, 0x73
popf
pushf
not eax
add eax, 0xd17255fd
xor eax, 0xf867c61d
rol eax, 0x6c
popf
jmp 0x140180c49
mov rcx, qword [rdi]
push rax
pushf
mov eax, 0xb5cb3f33
pushf
not eax
add eax, 0x8cc3f1ca
xor eax, 0x938d6f52
rol eax, 0x9f
popf
pushf
not eax
add eax, 0xeae506c7
xor eax, 0xfb4274dc
rol eax, 0x16
popf
pushf
not eax
add eax, 0x98a77b4c
xor eax, 0xca82a133
rol eax, 0x6f
popf
jmp 0x140180c49
mov r8, rbx
cmp rbx, r15
cmova r8, r15
lea rdx, [0x190af7799]
pushf
sub rdx, 0x50a68029
popf
call fcn.140294943
test eax, eax
jne 0x140181693
push rax
pushf
mov eax, 0x2f8c0691
pushf
not eax
add eax, 0xa1b2417b
xor eax, 0x93c260b5
rol eax, 0xe8
popf
pushf
not eax
add eax, 0xbe9d0020
xor eax, 0xa75a4b56
rol eax, 0xab
popf
pushf
not eax
add eax, 0xd1935279
xor eax, 0xda500e90
rol eax, 0x64
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x77a0ed2c
pushf
not eax
add eax, 0xa3022397
xor eax, 0xeaf43ba2
rol eax, 0x4b
popf
pushf
not eax
add eax, 0x8e4fb42a
xor eax, 0xcaa86c48
rol eax, 0x24
popf
pushf
not eax
add eax, 0xe9720411
xor eax, 0xeae1debe
rol eax, 7
popf
jmp 0x140180c49
cmp rbx, r15
jne 0x140181737
push rax
pushf
mov eax, 0xa62572e
pushf
not eax
add eax, 0x8b824629
xor eax, 0x9f750a14
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x8324df9e
xor eax, 0x942c61ed
rol eax, 0xfc
popf
pushf
not eax
add eax, 0xdbd87a9c
xor eax, 0xa00c3a81
rol eax, 0x99
popf
pushf
not eax
add eax, 0xb8f7626e
xor eax, 0xde650960
rol eax, 0x8b
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x566bd81
pushf
not eax
add eax, 0x91e836c1
xor eax, 0x9bf41158
rol eax, 0x84
popf
pushf
not eax
add eax, 0x97278068
xor eax, 0x8a192b48
rol eax, 0x83
popf
pushf
not eax
add eax, 0x95edc366
xor eax, 0xe79f3371
rol eax, 0xd7
popf
jmp 0x140180c49
lea rcx, [0x1acac4dba]
pushf
sub rcx, 0x6ca3563a
popf
jmp 0x140181c30
mov rcx, rdi
cmp rsi, 0xf
jbe 0x140181816
push rax
pushf
mov eax, 0x59f57a0c
pushf
not eax
add eax, 0xf1653532
xor eax, 0xcf4bcd66
rol eax, 0x29
popf
pushf
not eax
add eax, 0xdc657d8a
xor eax, 0xb5cb03e0
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa09dc2e3
xor eax, 0xc21f1bbe
rol eax, 0xe9
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x6576b685
pushf
not eax
add eax, 0xa54aadfb
xor eax, 0xa6edb206
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x8ad660d4
xor eax, 0x8acdb439
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd8597e15
xor eax, 0x823a8c7d
rol eax, 0x4f
popf
jmp 0x140180c49
mov rcx, qword [rdi]
push rax
pushf
mov eax, 0x5b307f91
pushf
not eax
add eax, 0xef7e9223
xor eax, 0xad84213c
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xc3c3f0e4
xor eax, 0x8cffaf17
rol eax, 0x11
popf
pushf
not eax
add eax, 0x9c1badeb
xor eax, 0xf3c582e5
rol eax, 0xd7
popf
jmp 0x140180c49
mov r8, rbx
cmp rbx, r15
cmova r8, r15
lea rdx, [0x197d0abac]
pushf
sub rdx, 0x57c7b3dc
popf
call fcn.140294943
test eax, eax
jne 0x140181923
push rax
pushf
mov eax, 0x3f347bc
pushf
not eax
add eax, 0xc8f86a8f
xor eax, 0xd3e29f6c
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xb724b23a
xor eax, 0xd4bb1f69
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xc66dadd7
xor eax, 0x86bb1ec0
rol eax, 0x51
popf
pushf
not eax
add eax, 0xb2bab768
xor eax, 0xca5d20ba
rol eax, 0x72
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x6a8d5cb7
pushf
not eax
add eax, 0xb91df101
xor eax, 0xbb570984
rol eax, 0x84
popf
pushf
not eax
add eax, 0xbd1ca528
xor eax, 0xa2120953
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xf707a8e6
xor eax, 0xbd024763
rol eax, 0xeb
popf
jmp 0x140180c49
cmp rbx, r15
jne 0x1401819de
lea rcx, [0x1bd8a9839]
pushf
sub rcx, 0x7d81a059
popf
jmp 0x140181c30
mov rcx, rdi
cmp rsi, 0xf
jbe 0x140181a2d
push rax
pushf
mov eax, 0x289972b4
pushf
not eax
add eax, 0xfbe5b7f3
xor eax, 0xc487fc7e
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xcb9b1785
xor eax, 0xa9dd2027
rol eax, 0x5b
popf
pushf
not eax
add eax, 0xbb15c1c1
xor eax, 0xaca16009
rol eax, 0xee
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xcef87cc1
pushf
not eax
add eax, 0xf1588796
xor eax, 0xd00e4a75
rol eax, 0x35
popf
pushf
not eax
add eax, 0xbb34dd88
xor eax, 0x8815a3a6
rol eax, 0x9c
popf
pushf
not eax
add eax, 0xb53f9286
xor eax, 0xe2515fc6
rol eax, 0x63
popf
jmp 0x140180c49
mov rcx, qword [rdi]
push rax
pushf
mov eax, 0xf5593bdd
pushf
not eax
add eax, 0xac66e98c
xor eax, 0xeabe45cc
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xff486544
xor eax, 0xf3f98007
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x9236bfe9
xor eax, 0xa73bd65d
rol eax, 0x61
popf
jmp 0x140180c49
mov r8, rbx
cmp rbx, r15
cmova r8, r15
lea rdx, [0x19c55fcd0]
pushf
sub rdx, 0x5c4d04a0
popf
call fcn.140294943
test eax, eax
jne 0x140181b14
push rax
pushf
mov eax, 0x68835129
pushf
not eax
add eax, 0xf5c0e749
xor eax, 0xb7fc43e3
rol eax, 0x6b
popf
pushf
not eax
add eax, 0xf2b0be40
xor eax, 0xe4051c69
rol eax, 0x72
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xacb99952
pushf
not eax
add eax, 0x813c9de0
xor eax, 0xf25ae721
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xaf91a1ea
xor eax, 0xab8f07bc
rol eax, 8
popf
pushf
not eax
add eax, 0x8443c1c8
xor eax, 0x9e4ccee4
rol eax, 0x46
popf
jmp 0x140180c49
cmp rbx, r15
jne 0x140181b92
push rax
pushf
mov eax, 0x61a647ca
pushf
not eax
add eax, 0xce0f2101
xor eax, 0xb6994e79
rol eax, 0xf
popf
pushf
not eax
add eax, 0x8d2bdaee
xor eax, 0xc185ed75
rol eax, 0x32
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x56187e89
pushf
not eax
add eax, 0xa152cf73
xor eax, 0xa35c3717
rol eax, 0x93
popf
pushf
not eax
add eax, 0xbc01a3df
xor eax, 0xc3082416
rol eax, 0x8c
popf
pushf
not eax
add eax, 0x90841d15
xor eax, 0xcc384125
rol eax, 0xa4
popf
jmp 0x140180c49
lea rcx, [0x19a5b7064]
pushf
sub rcx, 0x5a527824
popf
push rax
pushf
mov eax, 0xdd87d4cb
pushf
not eax
add eax, 0xd1ebcbd2
xor eax, 0x8a02df86
rol eax, 2
popf
pushf
not eax
add eax, 0xf56e8d9e
xor eax, 0xb942db12
rol eax, 2
popf
pushf
not eax
add eax, 0xec7fb568
xor eax, 0xe792f32e
rol eax, 0xaa
popf
jmp 0x140180c49
lea rdx, [rsp + 0x28]
jmp 0x140181c36
call qword [sym.imp.ole32.dll_CLSIDFromString]
push rax
pushf
mov eax, 0x9936d18
pushf
not eax
add eax, 0x92fc858c
xor eax, 0xa57b51f2
rol eax, 0xf9
popf
pushf
not eax
add eax, 0xe3ab23c7
xor eax, 0xa18c5976
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xb9b66557
xor eax, 0xca678a72
rol eax, 0x1b
popf
pushf
not eax
add eax, 0xff45c3be
xor eax, 0xef99ed4c
rol eax, 0xbc
popf
jmp 0x140180c49
xor r9d, r9d
lea r8, [rsp + 0x28]
mov rdx, qword [rsp + 0xa8]
mov rcx, r12
jmp 0x140181ca9
call qword [sym.imp.gdiplus.dll_GdipSaveImageToStream]
test eax, eax
je 0x140181d0c
push rax
pushf
mov eax, 0x5da09c47
pushf
not eax
add eax, 0xb8cdbf1a
xor eax, 0xf0b131ed
rol eax, 0x2f
popf
pushf
not eax
add eax, 0x9f9f8aff
xor eax, 0xd22d1e21
rol eax, 0x82
popf
pushf
not eax
add eax, 0xb183e795
xor eax, 0xfb50b6d1
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xd71d4c5a
xor eax, 0xa9eb950c
rol eax, 0x59
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xbf349683
pushf
not eax
add eax, 0xbcc8bed1
xor eax, 0x8040ba36
rol eax, 0x91
popf
pushf
not eax
add eax, 0xfd20da98
xor eax, 0xaed11d8b
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe0c129f8
xor eax, 0xe213d1e8
rol eax, 0xff
popf
pushf
not eax
add eax, 0x85438247
xor eax, 0xe1026c85
rol eax, 0x73
popf
jmp 0x140180c49
mov rcx, r12
jmp 0x140181d69
call qword [sym.imp.gdiplus.dll_GdipDisposeImage]
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140181dad
push rax
pushf
mov eax, 0xcc1d03cc
pushf
not eax
add eax, 0xa0b12c6c
xor eax, 0xa387217f
rol eax, 0x66
popf
pushf
not eax
add eax, 0xb3af7c60
xor eax, 0xe9ed0442
rol eax, 0xa
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x12010fb4
pushf
not eax
add eax, 0x9ac53e86
xor eax, 0xe3c1e91f
rol eax, 0x34
popf
pushf
not eax
add eax, 0x9f58f63f
xor eax, 0xbfe318cd
rol eax, 0x81
popf
pushf
not eax
add eax, 0xbc354153
xor eax, 0x831286f3
rol eax, 0xcc
popf
jmp 0x140180c49
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140181e35
push rax
pushf
mov eax, 0xa4e73fef
pushf
not eax
add eax, 0xf3446668
xor eax, 0xfe9aba4c
rol eax, 0x98
popf
pushf
not eax
add eax, 0xee4d7a69
xor eax, 0xb99cb31c
rol eax, 0xfc
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xf8cea144
pushf
not eax
add eax, 0x88152243
xor eax, 0xa0e518c5
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xb4e7c461
xor eax, 0xdd165617
rol eax, 0x2e
popf
pushf
not eax
add eax, 0xe46e900c
xor eax, 0xc2424291
rol eax, 0xf0
popf
jmp 0x140180c49
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140181eda
push rax
pushf
mov eax, 0x9b2b8579
pushf
not eax
add eax, 0x8980aa85
xor eax, 0xb332512f
rol eax, 0x24
popf
pushf
not eax
add eax, 0xcd49e582
xor eax, 0xcf0d70fc
rol eax, 0x72
popf
pushf
not eax
add eax, 0xbae40e8e
xor eax, 0x9be3270e
rol eax, 0x25
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x1617ef7b
pushf
not eax
add eax, 0xb7eb9c01
xor eax, 0xb68794ec
rol eax, 0x42
popf
pushf
not eax
add eax, 0x92c9153e
xor eax, 0xe34d9e93
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xaf4c1031
xor eax, 0xc1222eeb
rol eax, 0xfb
popf
pushf
not eax
add eax, 0xce2e6116
xor eax, 0xc4d21c39
rol eax, 0x2e
popf
jmp 0x140180c49
mov rcx, r8
push rax
pushf
mov eax, 0xcb585d2d
pushf
not eax
add eax, 0xdb1314e9
xor eax, 0xc07c2d55
rol eax, 0x56
popf
pushf
not eax
add eax, 0xd61b61b7
xor eax, 0xd271fe59
rol eax, 0xda
popf
pushf
not eax
add eax, 0xc16605b7
xor eax, 0x9a45957d
rol eax, 0x17
popf
jmp 0x140180c49
call fcn.14019a0bc
push rax
pushf
mov eax, 0x4f5ca75e
pushf
not eax
add eax, 0xd3f923d6
xor eax, 0x99e5a8f8
rol eax, 0x7c
popf
pushf
not eax
add eax, 0x99b2fd87
xor eax, 0x9a253ca2
rol eax, 0x69
popf
pushf
not eax
add eax, 0xec6c151d
xor eax, 0xef32dca1
rol eax, 0x2e
popf
jmp 0x140180c49
xor al, al
jmp 0x140182663
mov qword [rsp + 0x90], r13
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0xa8]
jmp 0x14018201a
call qword [sym.imp.ole32.dll_GetHGlobalFromStream]
mov rcx, qword [rsp + 0x90]
jmp 0x140182029
call qword [sym.imp.KERNEL32.dll_GlobalSize]
movsxd rsi, eax
mov r15, qword [r14 + 8]
mov rdx, qword [r14]
mov rcx, r15
sub rcx, rdx
cmp rsi, rcx
jae 0x14018209d
push rax
pushf
mov eax, 0x69283b7d
pushf
not eax
add eax, 0xb194169a
xor eax, 0xb52a1922
rol eax, 0xa0
popf
pushf
not eax
add eax, 0x87774cac
xor eax, 0xb79b3170
rol eax, 0xbe
popf
pushf
not eax
add eax, 0xb44812e3
xor eax, 0x8c7f8d7a
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xd5e69aa9
xor eax, 0xe194a5da
rol eax, 0x40
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xe2caed7e
pushf
not eax
add eax, 0xc6d6c876
xor eax, 0xe8ab3402
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xa457a5be
xor eax, 0x9f06f8a8
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xc8f7a531
xor eax, 0xf7be2afe
rol eax, 0xf6
popf
pushf
not eax
add eax, 0xc5777cd8
xor eax, 0xeb4fd3fa
rol eax, 0xcc
popf
jmp 0x140180c49
lea rax, [rsi + rdx]
jmp 0x14018231e
jbe 0x14018217a
push rax
pushf
mov eax, 0x4ec39731
pushf
not eax
add eax, 0xdeec5384
xor eax, 0xf08f59d5
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd450d771
xor eax, 0xa5b11808
rol eax, 0x86
popf
pushf
not eax
add eax, 0x90092c36
xor eax, 0xb10f5856
rol eax, 0xaa
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xd62ed3a7
pushf
not eax
add eax, 0xce1f6b21
xor eax, 0x90f9a752
rol eax, 0xbc
popf
pushf
not eax
add eax, 0xb9e0a804
xor eax, 0xfc1086ee
rol eax, 0xc3
popf
pushf
not eax
add eax, 0xf758417c
xor eax, 0xf953a1fc
rol eax, 0xb
popf
jmp 0x140180c49
mov rax, qword [r14 + 0x10]
sub rax, rdx
cmp rsi, rax
jbe 0x140182225
push rax
pushf
mov eax, 0x25f5875
pushf
not eax
add eax, 0xb37f8dd2
xor eax, 0xcc0ca2c8
rol eax, 0xb0
popf
pushf
not eax
add eax, 0xb3fe6108
xor eax, 0x97df81c6
rol eax, 0xd4
popf
pushf
not eax
add eax, 0xe1367056
xor eax, 0xdacca7f2
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xb7acfa98
xor eax, 0x9584efcc
rol eax, 0x94
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xf3865b58
pushf
not eax
add eax, 0xedef3026
xor eax, 0xa821f88c
rol eax, 0x45
popf
pushf
not eax
add eax, 0xe40c3b66
xor eax, 0x858faed2
rol eax, 0x26
popf
pushf
not eax
add eax, 0xe40bad83
xor eax, 0xc9c4333f
rol eax, 0xa3
popf
jmp 0x140180c49
mov rdx, rsi
mov rcx, r14
call fcn.1402eed08
jmp 0x14018237a
mov rbx, rsi
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, r15
call fcn.140077f70
lea rax, [r15 + rbx]
push rax
pushf
mov eax, 0xe8f0e10a
pushf
not eax
add eax, 0xae3a8795
xor eax, 0xbea7cde6
rol eax, 0xbb
popf
pushf
not eax
add eax, 0xf9ed872e
xor eax, 0xb10e13d2
rol eax, 0x28
popf
jmp 0x140180c49
mov qword [r14 + 8], rax
push rax
pushf
mov eax, 0x1fac570a
pushf
not eax
add eax, 0xb99fc60b
xor eax, 0x8e08697b
rol eax, 0xc6
popf
pushf
not eax
add eax, 0xffda5790
xor eax, 0x9c18f295
rol eax, 1
popf
pushf
not eax
add eax, 0xb268ec24
xor eax, 0xe79c8216
rol eax, 0x33
popf
pushf
not eax
add eax, 0x82961090
xor eax, 0x970110e8
rol eax, 0x85
popf
jmp 0x140180c49
mov rcx, qword [rsp + 0x90]
jmp 0x140182383
call qword [sym.imp.KERNEL32.dll_GlobalLock]
mov r8, rsi
mov rdx, rax
mov rcx, qword [r14]
call fcn.1400778d0
mov rcx, qword [rsp + 0x90]
jmp 0x1401823a0
call qword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
jmp 0x1401823b2
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rcx, r12
jmp 0x1401823ba
call qword [sym.imp.gdiplus.dll_GdipDisposeImage]
nop
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1401823fe
push rax
pushf
mov eax, 0xb53781ab
pushf
not eax
add eax, 0xc6abf717
xor eax, 0xe0c840ba
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xd1cf4127
xor eax, 0xf2fc582e
rol eax, 0x6d
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xb9c1f661
pushf
not eax
add eax, 0x947f0471
xor eax, 0x862e9ede
rol eax, 0xe
popf
pushf
not eax
add eax, 0xfa193c9a
xor eax, 0xd53ecc7b
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x93f1ad20
xor eax, 0x8be1647a
rol eax, 0x72
popf
pushf
not eax
add eax, 0xb1fb8002
xor eax, 0xe4709e6a
rol eax, 0x27
popf
jmp 0x140180c49
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1401824ac
push rax
pushf
mov eax, 0x813f39c3
pushf
not eax
add eax, 0xececef4e
xor eax, 0x8af530d3
rol eax, 4
popf
pushf
not eax
add eax, 0x91e47d16
xor eax, 0xdd2e7f49
rol eax, 0x5c
popf
pushf
not eax
add eax, 0x80db51e3
xor eax, 0x96c42eff
rol eax, 0x7c
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0x424eb078
pushf
not eax
add eax, 0x818a2f02
xor eax, 0xed8ee0dc
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xd48e4925
xor eax, 0x8c6d24b1
rol eax, 0xfb
popf
pushf
not eax
add eax, 0x886b1128
xor eax, 0x944642f6
rol eax, 0xf5
popf
pushf
not eax
add eax, 0xb6ad7abd
xor eax, 0x88d556ed
rol eax, 0x98
popf
jmp 0x140180c49
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140182560
push rax
pushf
mov eax, 0x646b92ec
pushf
not eax
add eax, 0xa62f54e7
xor eax, 0xf3ce881c
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xfc056c1a
xor eax, 0xd75ab0d7
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xe7ec6574
xor eax, 0x933099ab
rol eax, 0x3e
popf
jmp 0x140180c49
push rax
pushf
mov eax, 0xcb352f1f
pushf
not eax
add eax, 0xb9b0de39
xor eax, 0xf8c1bf39
rol eax, 0x77
popf
pushf
not eax
add eax, 0x95e4238f
xor eax, 0xffc93da5
rol eax, 0x7f
popf
pushf
not eax
add eax, 0xed19867a
xor eax, 0xf51ba93f
rol eax, 0x54
popf
pushf
not eax
add eax, 0xae19f631
xor eax, 0x879da57e
rol eax, 0x69
popf
jmp 0x140180c49
mov rcx, r8
push rax
pushf
mov eax, 0x7514cb2
pushf
not eax
add eax, 0xff4f86c4
xor eax, 0xd1591da4
rol eax, 0x20
popf
pushf
not eax
add eax, 0xc8c42c5a
xor eax, 0xd8971f18
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xe1254f0b
xor eax, 0xa9ace9f6
rol eax, 0x36
popf
jmp 0x140180c49
call fcn.14019a0bc
push rax
pushf
mov eax, 0xf5d7557a
pushf
not eax
add eax, 0x97c85c40
xor eax, 0x835637ad
rol eax, 0x34
popf
pushf
not eax
add eax, 0x91cc66d8
xor eax, 0xcf4a3c64
rol eax, 0xc6
popf
jmp 0x140180c49
mov al, 0xc1
pushf
not al
add al, 0x2d
xor al, 0xf1
rol al, 0x6a
popf
pushf
not al
add al, 0x68
xor al, 0xd4
rol al, 0x13
popf
pushf
not al
add al, 0xbb
xor al, 0x61
rol al, 0x1c
popf
mov byte [rdi], 0
mov qword [rdi + 0x18], setsockopt
mov qword [rdi + 0x10], r13
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.140167aab
int3