Function at 0x42c1ec
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov dword [ebp - 0x10], 0x204b3ed8
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov ebx, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov eax, dword [ebp - 0x10]
cmp eax, 0x1ab0e90d
jg 0x42c24a
cmp eax, 0xd7df6f28
jle 0x42c290
cmp eax, 0xe88c2599
jg 0x42c31e
cmp eax, 0xd7df6f29
je 0x42c3fb
cmp eax, 0xd91beb26
je 0x42c40f
cmp eax, 0xe3a20264
jne 0x42c208
mov dword [ebp - 0x10], 0x5577d6d4
jmp 0x42c208
cmp eax, 0x5577d6d3
jle 0x42c2c8
cmp eax, 0x6fa4c2e3
jg 0x42c34b
cmp eax, 0x5577d6d4
je 0x42c447
cmp eax, 0x5b1bebb4
je 0x42c463
cmp eax, 0x614631bb
jne 0x42c208
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0xb215b350
mov esi, dword [ebp - 0x1c]
jmp 0x42c208
cmp eax, 0xbe8bd99f
jle 0x42c3a5
cmp eax, 0xbe8bd9a0
je 0x42c470
cmp eax, 0xc92049e7
je 0x42c484
cmp eax, 0xca7d9612
jne 0x42c208
mov dword [ebp - 0x10], 0xd7df6f29
jmp 0x42c208
cmp eax, 0x2154265b
jle 0x42c3d3
cmp eax, 0x2154265c
je 0x42c490
cmp eax, 0x359a4a84
je 0x42c4ad
cmp eax, 0x435e3da1
jne 0x42c208
xor eax, eax
push eax
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
push 1
push dword [ebp - 0x20]
push dword [ebp + 8]
call ebx
mov ecx, 0x5b1bebb4
test eax, eax
je 0x42c316
mov ecx, 0x6fa4c2e4
mov dword [ebp - 0x10], ecx
jmp 0x42c208
cmp eax, 0xe88c259a
je 0x42c4c5
cmp eax, 0xda8ad0d
je 0x42c504
cmp eax, 0x17dbd9f7
jne 0x42c208
mov dword [ebp - 0x10], 0xe88c259a
jmp 0x42c208
cmp eax, 0x6fa4c2e4
je 0x42c510
cmp eax, 0x709e7a25
je 0x42c526
cmp eax, 0x71c5912e
jne 0x42c208
imul eax, dword [ebp - 0x14], 0x76
shr eax, 3
lea ecx, [eax + 0x21]
imul ecx, ecx
imul edx, ecx, 0x4a1d
dec edx
imul eax, eax, 0x7a00
add eax, 0xffb977cb
mov dword [ebp - 0x14], eax
mov eax, 0x359a4a84
cmp edx, ecx
je 0x42c4bd
mov eax, 0xc92049e7
jmp 0x42c4bd
cmp eax, 0x8a7477c9
je 0x42c53f
cmp eax, 0x9a29c658
jne 0x42c561
mov eax, dword [ebp - 0x14]
shl eax, 0xb
add eax, 0xffffffa5
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x435e3da1
jmp 0x42c208
cmp eax, 0x1ab0e90e
je 0x42c555
cmp eax, 0x204b3ed8
jne 0x42c208
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x17dbd9f7
jmp 0x42c208
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x709e7a25
jmp 0x42c208
imul eax, edi, 0x4700
and eax, 0xffff8000
imul edi, eax, 0x9e20
call fcn.0042c95c
push 0x2279
push edi
call fcn.0042c1ec
add esp, 8
mov eax, 0x359a4a84
cmp edi, 0xc8
jl 0x42c4bd
mov eax, 0xe88c259a
jmp 0x42c4bd
mov eax, dword [ebp - 0x24]
inc eax
push eax
call fcn.0043e964
add esp, 4
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x71c5912e
jmp 0x42c208
push dword [ebp - 0x1c]
call fcn.0043e5b4
add esp, 4
jmp 0x42c49f
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xda8ad0d
jmp 0x42c208
mov dword [ebp - 0x10], 0x8a7477c9
jmp 0x42c208
imul eax, dword [ebp - 0x14], 0x53800
add eax, 0xfde6e7d9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb215b350
xor esi, esi
jmp 0x42c208
cmp dword [ebp - 0x34], 0
mov eax, 0x2154265c
je 0x42c4bd
mov eax, 0xca7d9612
mov dword [ebp - 0x10], eax
jmp 0x42c208
mov dword [ebp - 0x28], edi
mov edi, esi
mov esi, ebx
mov ebx, dword [ebp + 8]
push ebx
call fcn.0043eec0
add esp, 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
push eax
push dword [ebp - 0x18]
push eax
push 1
push dword [ebp - 0x20]
push ebx
mov ebx, esi
mov esi, edi
mov edi, dword [ebp - 0x28]
call ebx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x359a4a84
jmp 0x42c208
mov dword [ebp - 0x10], 0x614631bb
jmp 0x42c208
imul eax, dword [ebp - 0x14], 0x3f000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x1ab0e90e
jmp 0x42c208
mov eax, dword [ebp - 0x14]
add eax, eax
add eax, 0xfffffe57
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe3a20264
jmp 0x42c208
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + eax], 0
mov dword [ebp - 0x10], 0x9a29c658
jmp 0x42c208
mov dword [ebp - 0x10], 0xbe8bd9a0
jmp 0x42c208
cmp eax, 0xb215b350
jne 0x42c208
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x18]
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret