Function at 0x41c831
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov edi, 0xb80003f5
mov eax, dword [0x66000000]
cmp edi, eax
je 0x45bc54
add eax, 0xfffffff3
cmp di, ax
je 0x45bc54
lea eax, [ecx + 0x78]
cmp di, ax
je 0x45bc40
inc eax
cmp di, ax
je 0x45bc40
lea eax, [ecx + 0x7a]
cmp di, ax
je 0x45bc40
inc eax
cmp di, ax
je 0x45bc40
lea eax, [ecx + 0x73]
cmp di, ax
je 0x45bbd9
inc eax
cmp di, ax
je 0x45bbd9
lea eax, [ecx + 0x75]
cmp di, ax
je 0x45bbd9
inc eax
cmp di, ax
je 0x45bbd9
lea eax, [ecx + 0x71]
cmp di, ax
je 0x45bbd9
inc eax
cmp di, ax
je 0x45bbd9
lea eax, [ecx + 0x77]
cmp di, ax
je 0x45bbd9
add eax, 5
cmp di, ax
je 0x45bbd9
lea eax, [edi - 6]
cmp eax, 0x95
ja case.0x41c74a.23
movzx eax, byte [eax + 0x41c79b]
jmp dword [eax*4 + 0x41c773]
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
push 0x22
pop ecx
movzx eax, word [edx + ecx]
add eax, 0xffffff9e
cmp eax, 0xb
ja case.0x41c74a.6
jmp 0x45bb2c
xor eax, eax
inc eax
jmp 0x41c753
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, ecx
mov dword [ebp - 4], edx
push esi
push edi
mov edi, dword [ebp + 8]
movzx eax, word [ebx]
movzx eax, ax
xor edx, edx
movzx eax, byte [eax + 0x4c2140]
lea ecx, [ebx + eax*2]
call fcn.0041c935
mov esi, eax
mov edx, 0x83
movzx ecx, word [esi]
mov bh, 0xe
mov eax, ecx
cmp ax, dx
je 0x41c92d
inc edx
cmp ax, dx
je 0x41c92d
mov edx, 0x88
cmp ax, dx
je 0x41c92d
inc edx
cmp ax, dx
je 0x41c92d
mov edx, 0x85
cmp ax, dx
je 0x45bcf8
inc edx
cmp ax, dx
je 0x45bcf8
mov edx, 0x8a
cmp ax, dx
je 0x45bcf8
inc edx
cmp ax, dx
je 0x45bcf8
cmp eax, 0x7d
je 0x41c92d
mov edx, 0x87
cmp ax, dx
je 0x45bcb5
add edx, 0xfffffffa
cmp ax, dx
je 0x41c923
mov edx, 0x82
cmp ax, dx
je 0x41c923
cmp eax, 0x55
je 0x45bccb
cmp eax, 0x56
je 0x45bccb
cmp eax, 0x5e
je 0x45bccb
xor edx, edx
inc edx
cmp ax, dx
je 0x45bd26
cmp eax, 2
je 0x45bd26
cmp ecx, 0x1b
je 0x45bd26
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov eax, dword [ebp + 0xc]
inc eax
push eax
jmp 0x45bd0e
push dword [ebp + 0xc]
jmp 0x45bd0e
mov edi, eax
jmp fcn.0041bca3
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x10]
invalid
push eax
push dword [ebp + 0xc]
mov ecx, ebx
push dword [ebp + 0x25]
rdpmc
or edi, esp
invalid
cld
cld
xor edx, dword [ebp - 0x7a8895f4]
ror byte [edi], 0x85
add dword [bx + si], eax
add byte [edi], cl
mov bh, 0x43
add cl, byte [ebp + 0x6658431c]
cmp dword [ebx], eax
je 0x45bb1a
jmp 0x8641c77f
test dword [edi], ecx
mov bh, 0x4e
add al, byte [ebx]
leave
add esi, ecx
jmp 0x8641c789
or cl, byte [esp + edi*8]
test ecx, ebp
sub dword [ecx], eax
add byte [eax], al
movzx eax, word [esi + 2]
cmp ax, cx
cmp eax, ecx
cmp eax, ecx
je 0x45bb97
push 0xf
pop ecx
cmp ax, cx
jmp 0x45bb91
jne 0xf45bca3
add esi, 4
jmp 0x45bca3
and eax, edx
mov edx, 0xd800
cmp ax, dx
jmp 0x45bbe1
mov ax, word [esi + 4]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xd800
cmp ax, cx
jne 0x8c1841a3
add esi, 2
jmp 0x8c1841a3
test edi, edi
jne 0x45bc52
push dword [ebp + 0x10]
mov edx, dword [ebp - 4]
mov ecx, esi
and ah, bh
cld
invalid
movzx eax, word [esi + 2]
lea esi, [esi + eax*2]
movzx eax, word [esi]
inc esi
add cl, byte [ebp - 0x48f0b9cc]
push es
cmp ax, bx
je 0x45bc33
test dword [0xb1673fc], ebp
cld
test dword [edi], ecx
mov bh, 0xf8
jmp 0x45bca3
movzx eax, word [esi + 2]
lea esi, [esi + eax*2]
movzx eax, word [esi]
cmp ax, bx
je 0x45bc6e
jmp 0x5ea1ba86
lea esi, [esi + eax*2]
movzx eax, word [esi + 2]
lea esi, [esi + eax*2]
movzx eax, word [esi]
cmp ax, bx
je 0x45bc8c
jmp 0x45ba86
movzx eax, di
xor edx, edx
inc edx
movzx eax, byte [eax + 0x4c2140]
lea ecx, [esi + eax*2]
call 0xfd41c963
or al, 0xfc
cld
mov esi, eax
cmp esi, dword [ebp - 4]
jae 0xfd41c79a
jmp 0x41c691
jne 0x45bc89
inc ebp
sar byte [edx], 1
mov ebx, 0xc7510045
inc ecx
push esi
mov esi, ecx
add al, byte [edx]
cld
inc dword [ecx]
add dword [eax], eax
add al, byte [eax]
add dword [edi], ecx
mov bh, 0x46
add ch, byte [edx + 0x77]
pop ecx
cmp word [esi + eax*2], cx
jne 0x8641c94a
jmp 0x5841c95b
push edi
cmp word [esi + 2], 0xd
jne 0xfd41c94a
mov eax, dword [ebp - 4]
test dword [edi + 0x50], eax
jne 0x8641c94a
cld
test dword [ebx + 0xf000c7d], eax
invalid
cmp dword [ebp + 0xc], 0
jg 0x8641c94a
cmp dword [edi + 0x70], 0
jne 0x8641c94a
jmp fcn.0045bd51
movzx ecx, word [esi + 4]
xor edx, edx
inc edx
cmp ecx, 0x20
jae 0x45bd34
shl edx, cl
push dword [ebp + 0xc]
or edx, dword [ebp - 4]
jmp 0x45bd3f
push edi