Function at 0x10418505
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x3ac
mov eax, 0x1044ca03
call fcn.1041e43a
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10418547
call fcn.104125f0
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x104192f4
push dword [ebp - 0x14]
call fcn.10412b4a
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10418573
push 0xffffffffffffffff
call fcn.10416378
mov ecx, esi
jmp 0x10418537
push dword [ebp - 0x14]
call fcn.10418276
push dword [0x10c27750]
xor ebx, ebx
mov dword [ebp - 0x114], 0x56735658
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x110], 0x41386a45
lea eax, [ebp - 0x19]
mov dword [ebp - 0x10c], 0x42455347
mov dword [ebp - 0x108], 0x4c304142
push dword [ebp - 0x18]
mov dword [ebp - 0x104], 0x63455763
push eax
mov dword [ebp - 0x100], 0x614d6949
lea eax, [ebp - 0x114]
mov dword [ebp - 0xfc], 0x35306a46
mov dword [ebp - 0xf8], 0x6a6b7746
mov dword [ebp - 0xf4], 0x6745414e
mov dword [ebp - 0xf0], 0x6a416944
mov dword [ebp - 0xec], 0x70683244
mov dword [ebp - 0xe8], 0x79305159
mov dword [ebp - 0xe4], 0x73636841
mov dword [ebp - 0xe0], 0x6b6f5342
mov dword [ebp - 0xdc], 0x384d434a
mov dword [ebp - 0xd8], 0x6245684e
mov dword [ebp - 0xd4], 0x46454742
mov dword [ebp - 0xd0], 0x6c595141
mov dword [ebp - 0xcc], 0x67415149
mov dword [ebp - 0xc8], 0x6241484b
mov dword [ebp - 0xc4], 0x37736742
mov dword [ebp - 0xc0], 0x7a4d684e
mov dword [ebp - 0xbc], 0x3770574e
mov dword [ebp - 0xb8], 0x3656544f
mov dword [ebp - 0xb4], 0x42735149
mov dword [ebp - 0xb0], 0x2f455449
mov dword [ebp - 0xac], 0x73386e50
mov dword [ebp - 0xa8], 0x4a59544a
mov dword [ebp - 0xa4], 0x68456947
mov dword [ebp - 0xa0], 0x6d77514a
mov dword [ebp - 0x9c], 0x2f6b6859
mov dword [ebp - 0x98], 0x4e6f4146
mov dword [ebp - 0x94], 0x31677749
mov dword [ebp - 0x90], 0x694d5266
mov dword [ebp - 0x8c], 0x76677963
mov dword [ebp - 0x88], 0x43595250
mov dword [ebp - 0x84], 0x6e736946
mov dword [ebp - 0x80], 0x68415459
mov dword [ebp - 0x7c], 0x6245674f
mov dword [ebp - 0x78], 0x44634465
mov dword [ebp - 0x74], 0x724e5446
mov dword [ebp - 0x70], 0x6e51524d
mov dword [ebp - 0x6c], 0x67735264
mov dword [ebp - 0x68], 0x42495142
mov dword [ebp - 0x64], 0x6e556a41
mov dword [ebp - 0x60], 0x344d5844
mov dword [ebp - 0x5c], 0x7441414b
mov dword [ebp - 0x58], 0x59385845
mov dword [ebp - 0x54], 0x7230544c
mov dword [ebp - 0x50], 0x646b514e
mov dword [ebp - 0x4c], 0x75675348
mov dword [ebp - 0x48], 0x4d454346
mov dword [ebp - 0x44], 0x4a4d324d
mov dword [ebp - 0x40], 0x33397748
mov dword [ebp - 0x3c], 0x33746962
mov dword [ebp - 0x38], 0x70556842
mov dword [ebp - 0x34], 0x4f496941
mov dword [ebp - 0x30], 0x52555450
mov dword [ebp - 0x2c], 0x6c776a44
mov dword [ebp - 0x28], 0x6f6f5749
mov dword [ebp - 0x24], 0x35635350
mov dword [ebp - 0x20], 0x4141514e
mov word [ebp - 0x1c], 0x4c41
mov byte [ebp - 0x1a], 0x59
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0x394]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1041baac
push eax
mov ecx, esi
call fcn.104163d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x394]
call fcn.1041b8f2
cmp dword [ebp + 0x14], ebx
je 0x104192f2
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x144], 0x63495764
lea eax, [ebp - 0x114]
mov dword [ebp - 0x140], 0x44555843
mov dword [ebp - 0x13c], 0x3245324a
push dword [ebp - 0x18]
mov dword [ebp - 0x138], 0x35636e43
mov dword [ebp - 0x134], 0x3164694d
mov dword [ebp - 0x130], 0x6d775347
mov dword [ebp - 0x12c], 0x2f596744
mov dword [ebp - 0x128], 0x68496a46
mov dword [ebp - 0x124], 0x71345245
mov dword [ebp - 0x120], 0x3230784c
mov dword [ebp - 0x11c], 0x41346843
mov dword [ebp - 0x118], 0x64414141
mov dword [ebp - 0xfc], 0x62345462
mov dword [ebp - 0xf8], 0x4d41444b
mov dword [ebp - 0xf4], 0x794d5442
mov dword [ebp - 0xf0], 0x596f4147
mov dword [ebp - 0xec], 0x78515343
mov dword [ebp - 0xe8], 0x64557844
mov dword [ebp - 0xe4], 0x7141534b
mov dword [ebp - 0xe0], 0x68496a47
mov dword [ebp - 0xdc], 0x70345262
mov dword [ebp - 0xd8], 0x4d515150
mov dword [ebp - 0xd4], 0x67456746
mov dword [ebp - 0xd0], 0x674d7842
mov dword [ebp - 0xcc], 0x6b73534c
mov dword [ebp - 0xc8], 0x52494348
mov dword [ebp - 0xc4], 0x66416747
mov dword [ebp - 0xc0], 0x70387948
mov dword [ebp - 0xbc], 0x6c554341
mov dword [ebp - 0xb8], 0x61557741
mov dword [ebp - 0xb4], 0x67306a50
mov dword [ebp - 0xb0], 0x4b346941
mov dword [ebp - 0xac], 0x76305442
mov dword [ebp - 0xa8], 0x33425259
mov dword [ebp - 0xa4], 0x33675344
mov dword [ebp - 0xa0], 0x6a30674a
mov dword [ebp - 0x9c], 0x39686a4b
mov dword [ebp - 0x98], 0x6b39484d
mov dword [ebp - 0x94], 0x4d6b7a44
mov dword [ebp - 0x90], 0x7163784a
mov dword [ebp - 0x8c], 0x30687750
mov dword [ebp - 0x88], 0x7273514e
mov dword [ebp - 0x84], 0x7370424b
mov dword [ebp - 0x80], 0x3038414e
mov dword [ebp - 0x7c], 0x64457964
mov dword [ebp - 0x78], 0x35593349
mov dword [ebp - 0x74], 0x33635346
mov dword [ebp - 0x70], 0x6d6f5349
mov dword [ebp - 0x6c], 0x636f6844
mov dword [ebp - 0x68], 0x4355694f
mov dword [ebp - 0x64], 0x444d6746
mov dword [ebp - 0x60], 0x56596942
mov dword [ebp - 0x5c], 0x66495750
mov dword [ebp - 0x58], 0x79385349
mov dword [ebp - 0x54], 0x6151794f
mov dword [ebp - 0x50], 0x41306947
mov dword [ebp - 0x4c], 0x32747765
mov dword [ebp - 0x48], 0x61595259
mov dword [ebp - 0x44], 0x4355444c
mov dword [ebp - 0x40], 0x2f556a49
mov dword [ebp - 0x3c], 0x38455361
mov dword [ebp - 0x38], 0x64384443
mov dword [ebp - 0x34], 0x4355684b
mov dword [ebp - 0x30], 0x2f516a4a
mov dword [ebp - 0x2c], 0x305a3241
mov dword [ebp - 0x28], 0x2b395446
mov dword [ebp - 0x24], 0x5445434b
mov dword [ebp - 0x20], 0x41416759
mov word [ebp - 0x1c], 0x4b41
mov byte [ebp - 0x1a], 0x55
push eax
mov dword [ecx], ebx
lea eax, [ebp - 0x144]
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
push eax
call fcn.1040f456
lea eax, [ebp - 0x3a0]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.1041baac
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x19]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0xfc]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0x394]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1041baac
push eax
mov ecx, esi
call fcn.104163d0
lea ecx, [ebp - 0x394]
call fcn.1041b8f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.1041b8f2
mov dword [ebp - 0x388], 0x654d5764
mov dword [ebp - 0x384], 0x77465843
mov dword [ebp - 0x380], 0x5159544c
mov dword [ebp - 0x37c], 0x36645466
mov dword [ebp - 0x378], 0x5651534b
mov dword [ebp - 0x374], 0x35456744
mov dword [ebp - 0x370], 0x384d4441
mov dword [ebp - 0x36c], 0x6673414f
mov dword [ebp - 0x368], 0x74417950
mov dword [ebp - 0x364], 0x43344242
mov dword [ebp - 0x360], 0x42674349
mov dword [ebp - 0x35c], 0x4a675143
mov dword [ebp - 0x358], 0x4d6f6944
mov dword [ebp - 0x354], 0x2f513341
mov dword [ebp - 0x350], 0x33344349
mov dword [ebp - 0x34c], 0x304d684a
mov dword [ebp - 0x348], 0x7842574b
mov dword [ebp - 0x344], 0x53597949
mov dword [ebp - 0x340], 0x6a675145
mov dword [ebp - 0x33c], 0x6d305159
mov dword [ebp - 0x338], 0x62415446
mov dword [ebp - 0x334], 0x5751414b
mov dword [ebp - 0x330], 0x366b4241
mov dword [ebp - 0x32c], 0x396c7748
mov dword [ebp - 0x328], 0x71674141
mov dword [ebp - 0x324], 0x304d6a42
mov dword [ebp - 0x320], 0x464d5747
mov dword [ebp - 0x31c], 0x50417945
mov dword [ebp - 0x318], 0x4249674c
mov dword [ebp - 0x314], 0x74493341
mov dword [ebp - 0x310], 0x57417a47
mov dword [ebp - 0x30c], 0x6c4d7a59
mov dword [ebp - 0x308], 0x4530784e
mov dword [ebp - 0x304], 0x44737948
mov dword [ebp - 0x300], 0x6a677846
mov dword [ebp - 0x2fc], 0x72634850
mov dword [ebp - 0x2f8], 0x3435444b
mov dword [ebp - 0x2f4], 0x594d6850
mov dword [ebp - 0x2f0], 0x30307945
mov dword [ebp - 0x2ec], 0x6e595842
mov dword [ebp - 0x2e8], 0x4d675446
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x2e4], 0x724d6948
lea eax, [ebp - 0x28a]
mov dword [ebp - 0x2e0], 0x3059794e
mov dword [ebp - 0x2dc], 0x58387745
push dword [ebp - 0x18]
mov dword [ebp - 0x2d8], 0x48516964
push eax
mov dword [ebp - 0x2d4], 0x54637a42
lea eax, [ebp - 0x388]
mov dword [ebp - 0x2d0], 0x576f5349
mov dword [ebp - 0x2cc], 0x51456a4e
mov dword [ebp - 0x2c8], 0x6c34534b
mov dword [ebp - 0x2c4], 0x7a55774f
mov dword [ebp - 0x2c0], 0x6467574f
mov dword [ebp - 0x2bc], 0x4d55534d
mov dword [ebp - 0x2b8], 0x4b635142
mov dword [ebp - 0x2b4], 0x64344142
mov dword [ebp - 0x2b0], 0x6d636747
mov dword [ebp - 0x2ac], 0x5855674f
mov dword [ebp - 0x2a8], 0x516b5463
mov dword [ebp - 0x2a4], 0x3768674d
mov dword [ebp - 0x2a0], 0x4c63484b
mov dword [ebp - 0x29c], 0x704a4866
mov dword [ebp - 0x298], 0x73416742
mov dword [ebp - 0x294], 0x4a34484f
mov dword [ebp - 0x290], 0x41414141
mov word [ebp - 0x28c], 0x7774
mov dword [ebp - 0x90], 0x79493266
mov dword [ebp - 0x8c], 0x46514441
mov dword [ebp - 0x88], 0x3134424b
mov dword [ebp - 0x84], 0x74497742
mov dword [ebp - 0x80], 0x746b5241
mov dword [ebp - 0x7c], 0x46554150
mov dword [ebp - 0x78], 0x364a6d49
mov dword [ebp - 0x74], 0x6641774e
mov dword [ebp - 0x70], 0x4b554146
mov dword [ebp - 0x6c], 0x7042544a
mov dword [ebp - 0x68], 0x4c515445
mov dword [ebp - 0x64], 0x3063544a
mov dword [ebp - 0x60], 0x4a495345
mov dword [ebp - 0x5c], 0x4e497945
mov dword [ebp - 0x58], 0x426b7a4d
mov dword [ebp - 0x54], 0x4c45784d
mov dword [ebp - 0x50], 0x6d774245
mov dword [ebp - 0x4c], 0x34395459
mov dword [ebp - 0x48], 0x6c554359
mov dword [ebp - 0x44], 0x55346e41
mov dword [ebp - 0x40], 0x50635749
mov dword [ebp - 0x3c], 0x73516a49
mov dword [ebp - 0x38], 0x42737a4b
mov dword [ebp - 0x34], 0x3551694f
mov dword [ebp - 0x30], 0x6a59674d
mov dword [ebp - 0x2c], 0x55557a45
mov dword [ebp - 0x28], 0x34465342
mov dword [ebp - 0x24], 0x4e494349
mov dword [ebp - 0x20], 0x41414141
mov word [ebp - 0x1c], 0x7755
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0x394]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.1041baac
push eax
push ebx
sub esp, 0xc
mov ecx, esp
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
mov byte [ebp - 0x18], bl
lea eax, [ebp - 0x1a]
push dword [ebp - 0x18]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.1040f456
lea eax, [ebp - 0x3a0]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1041baac
push eax
mov ecx, esi
call fcn.104163d0
lea ecx, [ebp - 0x3a0]
call fcn.1041b8f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x394]
call fcn.1041b8f2
mov dword [ebp - 0x1e0], 0x614d5764
mov dword [ebp - 0x1dc], 0x6f344259
mov dword [ebp - 0x1d8], 0x76786a48
mov dword [ebp - 0x1d4], 0x2b514242
mov dword [ebp - 0x1d0], 0x7849694f
mov dword [ebp - 0x1cc], 0x496b7742
mov dword [ebp - 0x1c8], 0x39553243
mov dword [ebp - 0x1c4], 0x37394442
mov dword [ebp - 0x1c0], 0x4f595447
mov dword [ebp - 0x1bc], 0x62496746
mov dword [ebp - 0x1b8], 0x75567a44
mov dword [ebp - 0x1b4], 0x7a6b7850
mov dword [ebp - 0x1b0], 0x764e4264
mov dword [ebp - 0x1ac], 0x73305146
mov dword [ebp - 0x1a8], 0x33554442
mov dword [ebp - 0x1a4], 0x6838514f
mov dword [ebp - 0x1a0], 0x52557749
mov dword [ebp - 0x19c], 0x4e737741
mov dword [ebp - 0x198], 0x325a4444
mov dword [ebp - 0x194], 0x50306846
mov dword [ebp - 0x190], 0x4a386845
mov dword [ebp - 0x18c], 0x2f494146
mov dword [ebp - 0x188], 0x7238784d
mov dword [ebp - 0x184], 0x6349414b
mov dword [ebp - 0x180], 0x6f4a6763
mov dword [ebp - 0x17c], 0x6f494349
mov dword [ebp - 0x178], 0x6b42694b
mov dword [ebp - 0x174], 0x46495249
mov dword [ebp - 0x170], 0x764d4350
mov dword [ebp - 0x16c], 0x70394443
mov dword [ebp - 0x168], 0x57775442
mov dword [ebp - 0x164], 0x78785243
mov dword [ebp - 0x160], 0x48676744
mov dword [ebp - 0x15c], 0x6a515341
mov dword [ebp - 0x158], 0x576f414e
mov dword [ebp - 0x154], 0x46495344
mov dword [ebp - 0x150], 0x62346841
mov dword [ebp - 0x14c], 0x4141674b
mov word [ebp - 0x148], 0x4741
mov byte [ebp - 0x146], 0x30
mov dword [ebp - 0x288], 0x37493265
mov dword [ebp - 0x284], 0x76774448
mov dword [ebp - 0x280], 0x53386845
mov dword [ebp - 0x27c], 0x4c345365
mov dword [ebp - 0x278], 0x51384848
mov dword [ebp - 0x274], 0x7a497a4f
mov dword [ebp - 0x270], 0x424d4342
mov dword [ebp - 0x26c], 0x366c5341
mov dword [ebp - 0x268], 0x506b574d
mov dword [ebp - 0x264], 0x794e7a49
mov dword [ebp - 0x260], 0x31346843
mov dword [ebp - 0x25c], 0x4855694f
mov dword [ebp - 0x258], 0x496b4449
mov dword [ebp - 0x254], 0x6a677966
mov dword [ebp - 0x250], 0x436f4864
mov dword [ebp - 0x24c], 0x38557a42
mov dword [ebp - 0x248], 0x39676a49
mov dword [ebp - 0x244], 0x596f7945
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x240], 0x3059794f
lea eax, [ebp - 0x145]
mov dword [ebp - 0x23c], 0x4b4d5347
mov dword [ebp - 0x238], 0x536b5445
push dword [ebp - 0x18]
mov dword [ebp - 0x234], 0x6b6f535a
push eax
mov dword [ebp - 0x230], 0x3738334d
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x22c], 0x48413345
mov dword [ebp - 0x228], 0x74676849
mov dword [ebp - 0x224], 0x544d6e42
mov dword [ebp - 0x220], 0x34684363
mov dword [ebp - 0x21c], 0x6a414350
mov dword [ebp - 0x218], 0x67734145
mov dword [ebp - 0x214], 0x62555849
mov dword [ebp - 0x210], 0x5a414249
mov dword [ebp - 0x20c], 0x6f45674d
mov dword [ebp - 0x208], 0x4e6f5763
mov dword [ebp - 0x204], 0x424d6e49
mov dword [ebp - 0x200], 0x6f427745
mov dword [ebp - 0x1fc], 0x6d354142
mov dword [ebp - 0x1f8], 0x2b5a7a48
mov dword [ebp - 0x1f4], 0x39463349
mov dword [ebp - 0x1f0], 0x64416949
mov dword [ebp - 0x1ec], 0x38393366
mov dword [ebp - 0x1e8], 0x41416759
mov word [ebp - 0x1e4], 0x4841
mov byte [ebp - 0x1e2], 0x67
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0x3b8]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.1041baac
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x1e1]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x288]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1040f456
lea eax, [ebp - 0x3ac]
push eax
call fcn.104122f6
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.1041baac
push eax
mov ecx, esi
call fcn.104163d0
lea ecx, [ebp - 0x3ac]
call fcn.1041b8f2
lea ecx, [ebp - 0x3b8]
call fcn.1041b8f2
xor eax, eax
call fcn.1041e3e4
ret