Function at 0x104101b8
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x360
mov eax, 0x1044f65e
call fcn.1044d171
mov ebx, edx
mov edi, ecx
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x14]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x104101f8
call fcn.1041ac1a
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10410fff
push dword [ebp - 0x14]
call fcn.1041abcd
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
test eax, eax
jne 0x10410223
push ecx
mov ecx, esi
call fcn.1041aba6
mov ecx, esi
jmp 0x104101e8
push dword [ebp - 0x14]
mov ecx, esi
call fcn.1041ab9d
mov ecx, 0x10c30e80
mov dword [ebp - 0xc4], 0x376b4558
mov dword [ebp - 0xc0], 0x674e484b
mov dword [ebp - 0xbc], 0x30597946
mov dword [ebp - 0xb8], 0x74745449
mov dword [ebp - 0xb4], 0x32777745
mov dword [ebp - 0xb0], 0x3449544b
mov dword [ebp - 0xac], 0x436b4444
mov dword [ebp - 0xa8], 0x2b417763
mov dword [ebp - 0xa4], 0x506b6743
mov dword [ebp - 0xa0], 0x344d5845
mov dword [ebp - 0x9c], 0x6f513348
mov dword [ebp - 0x98], 0x38414350
mov dword [ebp - 0x94], 0x336b6949
mov dword [ebp - 0x90], 0x56736e46
mov dword [ebp - 0x8c], 0x7651684f
mov dword [ebp - 0x88], 0x39787a46
mov dword [ebp - 0x84], 0x68734348
mov dword [ebp - 0x80], 0x69497864
mov dword [ebp - 0x7c], 0x5545684f
mov dword [ebp - 0x78], 0x4c557942
mov dword [ebp - 0x74], 0x31455349
mov dword [ebp - 0x70], 0x6445424a
mov dword [ebp - 0x6c], 0x54733344
mov dword [ebp - 0x68], 0x74706761
mov dword [ebp - 0x64], 0x33355248
mov dword [ebp - 0x60], 0x2b594750
mov dword [ebp - 0x5c], 0x35306950
mov dword [ebp - 0x58], 0x2b517763
mov dword [ebp - 0x54], 0x374e794c
mov dword [ebp - 0x50], 0x564d6a49
mov dword [ebp - 0x4c], 0x365a6841
mov dword [ebp - 0x48], 0x336b6864
mov dword [ebp - 0x44], 0x3234424b
mov dword [ebp - 0x40], 0x32594347
mov dword [ebp - 0x3c], 0x646f544d
mov dword [ebp - 0x38], 0x3759784f
mov dword [ebp - 0x34], 0x6c415165
mov dword [ebp - 0x30], 0x59777764
mov dword [ebp - 0x2c], 0x2f67524a
mov dword [ebp - 0x28], 0x76564362
mov dword [ebp - 0x24], 0x676b7759
mov dword [ebp - 0x20], 0x48776941
mov dword [ebp - 0x1c], 0x4141514b
mov word [ebp - 0x18], 0x4841
mov byte [ebp - 0x16], 0x30
call fcn.10419ced
push eax
xor ebx, ebx
lea eax, [ebp - 0x15]
push ebx
push eax
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x320]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x32c]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.10419f7e
push eax
mov ecx, esi
call fcn.1041a4d5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x32c]
call fcn.10419fb8
mov dword [ebp - 0x1fc], 0x47414864
mov dword [ebp - 0x1f8], 0x63675163
mov dword [ebp - 0x1f4], 0x79557764
push ebx
lea eax, [ebp - 0x12d]
mov dword [ebp - 0x1f0], 0x73674348
mov dword [ebp - 0x1ec], 0x51386943
mov dword [ebp - 0x1e8], 0x6241774c
mov dword [ebp - 0x1e4], 0x66386942
mov dword [ebp - 0x1e0], 0x78307a4c
mov dword [ebp - 0x1dc], 0x7a776e41
mov dword [ebp - 0x1d8], 0x784d5365
mov dword [ebp - 0x1d4], 0x33707a45
mov dword [ebp - 0x1d0], 0x35495241
mov dword [ebp - 0x1cc], 0x476f424d
mov dword [ebp - 0x1c8], 0x4e55414d
mov dword [ebp - 0x1c4], 0x4459424d
mov dword [ebp - 0x1c0], 0x3774684d
mov dword [ebp - 0x1bc], 0x36566a4a
mov dword [ebp - 0x1b8], 0x46414143
mov dword [ebp - 0x1b4], 0x6159774c
mov dword [ebp - 0x1b0], 0x71426a4e
mov dword [ebp - 0x1ac], 0x31425241
mov dword [ebp - 0x1a8], 0x74594849
mov dword [ebp - 0x1a4], 0x33454343
mov dword [ebp - 0x1a0], 0x46775442
mov dword [ebp - 0x19c], 0x74415350
mov dword [ebp - 0x198], 0x6f776a44
mov dword [ebp - 0x194], 0x59634165
mov dword [ebp - 0x190], 0x45456945
mov dword [ebp - 0x18c], 0x3434444a
mov dword [ebp - 0x188], 0x704e6745
mov dword [ebp - 0x184], 0x536b4261
mov dword [ebp - 0x180], 0x4d456748
mov dword [ebp - 0x17c], 0x7573434c
mov dword [ebp - 0x178], 0x616b5346
mov dword [ebp - 0x174], 0x58597748
mov dword [ebp - 0x170], 0x704d444e
mov dword [ebp - 0x16c], 0x644d7950
mov dword [ebp - 0x168], 0x72494741
mov dword [ebp - 0x164], 0x2b68524f
mov dword [ebp - 0x160], 0x4c775842
mov dword [ebp - 0x15c], 0x474d334a
mov dword [ebp - 0x158], 0x67554146
mov dword [ebp - 0x154], 0x7a635447
mov dword [ebp - 0x150], 0x646f444e
mov dword [ebp - 0x14c], 0x566b425a
mov dword [ebp - 0x148], 0x72517747
mov dword [ebp - 0x144], 0x7263524b
mov dword [ebp - 0x140], 0x2f514143
mov dword [ebp - 0x13c], 0x7541535a
mov dword [ebp - 0x138], 0x31416e4b
mov dword [ebp - 0x134], 0x4141774e
mov word [ebp - 0x130], 0x4a41
mov byte [ebp - 0x12e], 0x51
mov dword [ebp - 0x80], 0x77524462
mov dword [ebp - 0x7c], 0x74514144
mov dword [ebp - 0x78], 0x3031444d
mov dword [ebp - 0x74], 0x63344142
mov dword [ebp - 0x70], 0x5641544c
mov dword [ebp - 0x6c], 0x4777414d
mov dword [ebp - 0x68], 0x6573534b
mov dword [ebp - 0x64], 0x596b334a
mov dword [ebp - 0x60], 0x2b467a44
mov dword [ebp - 0x5c], 0x4d417843
mov dword [ebp - 0x58], 0x32454459
mov dword [ebp - 0x54], 0x67557761
mov dword [ebp - 0x50], 0x5434544a
mov dword [ebp - 0x4c], 0x67396850
mov dword [ebp - 0x48], 0x36646946
mov dword [ebp - 0x44], 0x72416846
mov dword [ebp - 0x40], 0x71384350
mov dword [ebp - 0x3c], 0x32345245
mov dword [ebp - 0x38], 0x7067675a
mov dword [ebp - 0x34], 0x4f49784c
mov dword [ebp - 0x30], 0x7968794b
mov dword [ebp - 0x2c], 0x4e736764
mov dword [ebp - 0x28], 0x33685343
mov dword [ebp - 0x24], 0x53416761
mov dword [ebp - 0x20], 0x7864435a
mov dword [ebp - 0x1c], 0x41416762
mov word [ebp - 0x18], 0x4541
mov byte [ebp - 0x16], 0x73
push eax
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x320]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x344]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.10419f7e
push eax
push ebx
lea eax, [ebp - 0x15]
push eax
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x328]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x338]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.10419f7e
push eax
mov ecx, esi
call fcn.1041a4d5
lea ecx, [ebp - 0x338]
call fcn.10419fb8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x344]
call fcn.10419fb8
mov dword [ebp - 0x12c], 0x45454864
mov dword [ebp - 0x128], 0x506f5341
mov dword [ebp - 0x124], 0x70636a44
mov dword [ebp - 0x120], 0x4c676a42
mov dword [ebp - 0x11c], 0x30634147
mov dword [ebp - 0x118], 0x35555344
mov dword [ebp - 0x114], 0x51494844
mov dword [ebp - 0x110], 0x734d794f
mov dword [ebp - 0x10c], 0x6a77334a
mov dword [ebp - 0x108], 0x55416842
mov dword [ebp - 0x104], 0x30636749
mov dword [ebp - 0x100], 0x6934434a
mov dword [ebp - 0xfc], 0x68774463
mov dword [ebp - 0xf8], 0x57736a47
mov dword [ebp - 0xf4], 0x79494348
mov dword [ebp - 0xf0], 0x5651514c
mov dword [ebp - 0xec], 0x50736844
mov dword [ebp - 0xe8], 0x50414763
mov dword [ebp - 0xe4], 0x4a496947
mov dword [ebp - 0xe0], 0x716b474c
mov dword [ebp - 0xdc], 0x37746e41
mov dword [ebp - 0xd8], 0x69636743
mov dword [ebp - 0xd4], 0x76306e63
mov dword [ebp - 0xd0], 0x746c4145
mov dword [ebp - 0xcc], 0x3351674a
mov dword [ebp - 0xc8], 0x5a557943
mov dword [ebp - 0xc4], 0x6c524147
mov dword [ebp - 0xc0], 0x71596947
mov dword [ebp - 0xbc], 0x43457848
mov dword [ebp - 0xb8], 0x6f464165
mov dword [ebp - 0xb4], 0x4655414b
mov dword [ebp - 0xb0], 0x39516e66
mov dword [ebp - 0xac], 0x6163534b
mov dword [ebp - 0xa8], 0x536b675a
mov dword [ebp - 0xa4], 0x4659774d
mov dword [ebp - 0xa0], 0x36304464
mov dword [ebp - 0x9c], 0x50456a49
mov dword [ebp - 0x98], 0x4f55774b
mov dword [ebp - 0x94], 0x63305262
mov dword [ebp - 0x90], 0x6942524e
mov dword [ebp - 0x8c], 0x6849545a
mov dword [ebp - 0x88], 0x4949794c
mov dword [ebp - 0x84], 0x756b5346
mov dword [ebp - 0x80], 0x61775359
mov dword [ebp - 0x7c], 0x5759475a
mov dword [ebp - 0x78], 0x47514147
mov dword [ebp - 0x74], 0x4d306765
mov dword [ebp - 0x70], 0x78494349
mov dword [ebp - 0x6c], 0x34464246
mov dword [ebp - 0x68], 0x436f7747
mov dword [ebp - 0x64], 0x7874334d
mov dword [ebp - 0x60], 0x7652334e
mov dword [ebp - 0x5c], 0x4755694d
mov dword [ebp - 0x58], 0x524d6a42
mov dword [ebp - 0x54], 0x73305445
mov dword [ebp - 0x50], 0x504d5248
mov dword [ebp - 0x4c], 0x47516942
mov dword [ebp - 0x48], 0x7a687863
mov dword [ebp - 0x44], 0x5445515a
mov dword [ebp - 0x40], 0x35307a4d
mov dword [ebp - 0x3c], 0x78707845
mov dword [ebp - 0x38], 0x736f584b
mov dword [ebp - 0x34], 0x795a6942
mov dword [ebp - 0x30], 0x576b7750
mov dword [ebp - 0x2c], 0x67597743
mov dword [ebp - 0x28], 0x45344241
mov dword [ebp - 0x24], 0x7034534c
mov dword [ebp - 0x20], 0x65387a4d
mov dword [ebp - 0x1c], 0x41414165
mov word [ebp - 0x18], 0x4d41
mov byte [ebp - 0x16], 0x6f
mov dword [ebp - 0x220], 0x4e676966
mov dword [ebp - 0x21c], 0x67565844
mov dword [ebp - 0x218], 0x6e386a41
mov dword [ebp - 0x214], 0x534d7859
mov dword [ebp - 0x210], 0x316f4466
mov dword [ebp - 0x20c], 0x674d4748
mov dword [ebp - 0x208], 0x6967534f
mov dword [ebp - 0x204], 0x4b495746
mov dword [ebp - 0x200], 0x356c444f
mov dword [ebp - 0x1fc], 0x6a516a41
mov dword [ebp - 0x1f8], 0x3646484e
mov dword [ebp - 0x1f4], 0x39596866
mov dword [ebp - 0x1f0], 0x55596964
mov dword [ebp - 0x1ec], 0x6d557945
mov dword [ebp - 0x1e8], 0x416f6a48
mov dword [ebp - 0x1e4], 0x37735246
mov dword [ebp - 0x1e0], 0x42557849
mov dword [ebp - 0x1dc], 0x2b6f524c
mov dword [ebp - 0x1d8], 0x7538794f
mov dword [ebp - 0x1d4], 0x676b674e
mov dword [ebp - 0x1d0], 0x55554443
mov dword [ebp - 0x1cc], 0x586b7948
mov dword [ebp - 0x1c8], 0x6f785145
mov dword [ebp - 0x1c4], 0x5a6b444b
mov dword [ebp - 0x1c0], 0x59494345
mov dword [ebp - 0x1bc], 0x35565345
mov dword [ebp - 0x1b8], 0x38595242
mov dword [ebp - 0x1b4], 0x59597a4e
mov dword [ebp - 0x1b0], 0x4667684e
mov dword [ebp - 0x1ac], 0x67637746
mov dword [ebp - 0x1a8], 0x5877684e
mov dword [ebp - 0x1a4], 0x4b514164
mov dword [ebp - 0x1a0], 0x6f34684d
mov dword [ebp - 0x19c], 0x2b415348
mov dword [ebp - 0x198], 0x47555149
mov dword [ebp - 0x194], 0x5538524c
mov dword [ebp - 0x190], 0x72637847
mov dword [ebp - 0x18c], 0x7a454141
mov dword [ebp - 0x188], 0x6f595750
mov dword [ebp - 0x184], 0x794d4846
mov dword [ebp - 0x180], 0x37687949
mov dword [ebp - 0x17c], 0x74646e64
mov dword [ebp - 0x178], 0x6159534c
mov dword [ebp - 0x174], 0x695a7949
mov dword [ebp - 0x170], 0x48637748
push ebx
lea eax, [ebp - 0x15]
mov dword [ebp - 0x16c], 0x31525746
push eax
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x168], 0x42676e47
push eax
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x164], 0x71736844
mov dword [ebp - 0x160], 0x666b7748
mov dword [ebp - 0x15c], 0x6f784463
mov dword [ebp - 0x158], 0x346f6a44
mov dword [ebp - 0x154], 0x76645164
mov dword [ebp - 0x150], 0x3968774e
mov dword [ebp - 0x14c], 0x694d6748
mov dword [ebp - 0x148], 0x6a6b6a44
mov dword [ebp - 0x144], 0x55387847
mov dword [ebp - 0x140], 0x38396749
mov dword [ebp - 0x13c], 0x6745434e
mov dword [ebp - 0x138], 0x4963535a
mov dword [ebp - 0x134], 0x4151784d
mov dword [ebp - 0x130], 0x79434141
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x338]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.10419f7e
push eax
push ebx
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x320]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x344]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.10419f7e
push eax
mov ecx, esi
call fcn.1041a4d5
lea ecx, [ebp - 0x344]
call fcn.10419fb8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.10419fb8
mov dword [ebp - 0x25c], 0x41454864
mov dword [ebp - 0x258], 0x7263484d
mov dword [ebp - 0x254], 0x69554147
mov dword [ebp - 0x250], 0x3555414b
mov dword [ebp - 0x24c], 0x62304244
mov dword [ebp - 0x248], 0x31496748
mov dword [ebp - 0x244], 0x6677794a
mov dword [ebp - 0x240], 0x32785463
mov dword [ebp - 0x23c], 0x6e515159
mov dword [ebp - 0x238], 0x6a345342
mov dword [ebp - 0x234], 0x37705443
mov dword [ebp - 0x230], 0x68647948
mov dword [ebp - 0x22c], 0x4141674a
mov word [ebp - 0x228], 0x4341
mov byte [ebp - 0x226], 0x49
mov dword [ebp - 0x318], 0x596f6e65
push ebx
lea eax, [ebp - 0x225]
mov dword [ebp - 0x314], 0x53596745
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x310], 0x61414249
push eax
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x30c], 0x38675442
mov dword [ebp - 0x308], 0x676f7743
mov dword [ebp - 0x304], 0x2b55694f
mov dword [ebp - 0x300], 0x5a594242
mov dword [ebp - 0x2fc], 0x56455243
mov dword [ebp - 0x2f8], 0x6e305342
mov dword [ebp - 0x2f4], 0x44775245
mov dword [ebp - 0x2f0], 0x4d49544f
mov dword [ebp - 0x2ec], 0x75556949
mov dword [ebp - 0x2e8], 0x58495365
mov dword [ebp - 0x2e4], 0x66455449
mov dword [ebp - 0x2e0], 0x5055794d
mov dword [ebp - 0x2dc], 0x55454350
mov dword [ebp - 0x2d8], 0x6e676e48
mov dword [ebp - 0x2d4], 0x78646864
mov dword [ebp - 0x2d0], 0x48344342
mov dword [ebp - 0x2cc], 0x46304245
mov dword [ebp - 0x2c8], 0x45514845
mov dword [ebp - 0x2c4], 0x556f6e64
mov dword [ebp - 0x2c0], 0x63736841
mov dword [ebp - 0x2bc], 0x68736e50
mov dword [ebp - 0x2b8], 0x53514443
mov dword [ebp - 0x2b4], 0x365a6743
mov dword [ebp - 0x2b0], 0x53673341
mov dword [ebp - 0x2ac], 0x7a737a46
mov dword [ebp - 0x2a8], 0x6b385345
mov dword [ebp - 0x2a4], 0x38635244
mov dword [ebp - 0x2a0], 0x6273414b
mov dword [ebp - 0x29c], 0x6f6c6846
mov dword [ebp - 0x298], 0x74304263
mov dword [ebp - 0x294], 0x4d6b7a43
mov dword [ebp - 0x290], 0x4667524d
mov dword [ebp - 0x28c], 0x72494262
mov dword [ebp - 0x288], 0x484d6e4c
mov dword [ebp - 0x284], 0x2b41534d
mov dword [ebp - 0x280], 0x38733347
mov dword [ebp - 0x27c], 0x51553342
mov dword [ebp - 0x278], 0x32786946
mov dword [ebp - 0x274], 0x52634849
mov dword [ebp - 0x270], 0x5130434d
mov dword [ebp - 0x26c], 0x586b5146
mov dword [ebp - 0x268], 0x644d415a
mov dword [ebp - 0x264], 0x4141674f
mov word [ebp - 0x260], 0x4941
mov byte [ebp - 0x25e], 0x63
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x35c]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.10419f7e
push eax
push ebx
lea eax, [ebp - 0x25d]
push eax
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x36c]
call fcn.104115b3
sub esp, 0xc
mov ecx, esp
push ecx
push dword [eax + 4]
push dword [eax]
call fcn.1041a126
lea ecx, [ebp - 0x350]
call fcn.10411096
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.10419f7e
push eax
mov ecx, esi
call fcn.1041a4d5
lea ecx, [ebp - 0x350]
call fcn.10419fb8
lea ecx, [ebp - 0x35c]
call fcn.10419fb8
xor eax, eax
call fcn.1044d11b
ret