Function at 0x405350
Capabilities:
Encode data using base64
Read .ini file

Disassembly:
sub esp, 0x984
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x130]
rep stosd dword es:[edi], eax
push esi
lea eax, [esp + 0x134]
push 0x400
push eax
push 0x44a580
push str.guid
push str.computer
mov dword [esp + 0x30], esi
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov ebp, dword [esp + 0x998]
lea ecx, [esp + 0x130]
push ecx
mov ecx, ebp
call fcn.0042af97
mov ecx, 0x119
xor eax, eax
lea edi, [esp + 0x530]
rep stosd dword es:[edi], eax
lea edi, [esp + 0x130]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], ecx
jne 0x4053e1
lea edi, [esp + 0x130]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x10], ecx
lea edx, [esp + 0x130]
lea eax, [ecx - 3]
mov dword [esp + 0x14], edx
xor edx, edx
test eax, eax
lea ebx, [esp + 0x530]
jle 0x405520
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0x64]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0xa8]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0xec]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
lea ecx, [eax + 2]
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
movsb byte es:[edi], byte [esi]
lea eax, [edx + edx*2]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
mov ecx, eax
shr ecx, 2
and ecx, 0x3f
jl 0x405478
cmp ecx, 0x40
jge 0x405478
mov cl, byte [esp + ecx + 0x64]
jmp 0x40547a
mov cl, 0x3d
movsx edi, cl
mov ecx, eax
mov esi, eax
shr ecx, 0xc
and esi, 3
and ecx, 0xf
shl esi, 4
or ecx, esi
jl 0x40549f
cmp ecx, 0x40
jge 0x40549f
mov cl, byte [esp + ecx + 0xa8]
jmp 0x4054a1
mov cl, 0x3d
movsx esi, cl
mov ecx, eax
mov ebp, eax
shr ecx, 8
and ecx, 0xf
shr ebp, 0x16
shl ecx, 2
and ebp, 3
or ecx, ebp
jl 0x4054c9
cmp ecx, 0x40
jge 0x4054c9
mov cl, byte [esp + ecx + 0xec]
jmp 0x4054cb
mov cl, 0x3d
shr eax, 0x10
and eax, 0x3f
movsx ecx, cl
jl 0x4054e1
cmp eax, 0x40
jge 0x4054e1
mov al, byte [esp + eax + 0x20]
jmp 0x4054e3
mov al, 0x3d
movsx eax, al
shl eax, 8
or eax, ecx
mov ecx, dword [esp + 0x14]
shl eax, 8
or eax, esi
add ebx, 4
shl eax, 8
or eax, edi
add ecx, 3
mov dword [ebx - 4], eax
dec edx
mov dword [esp + 0x14], ecx
jne 0x40545d
mov ebp, dword [esp + 0x998]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
cmp edx, ecx
jge 0x405628
sub ecx, edx
xor eax, eax
mov ebp, ecx
mov dword [esp + 0x10], eax
test ebp, ebp
jle 0x405550
mov esi, dword [esp + 0x14]
mov edx, ecx
lea edi, [esp + 0x10]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x10]
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0x20]
mov edx, eax
rep movsd dword es:[edi], dword [esi]
shr edx, 2
and edx, 0x3f
movsb byte es:[edi], byte [esi]
jl 0x405576
cmp edx, 0x40
jge 0x405576
mov dl, byte [esp + edx + 0x20]
jmp 0x405578
mov dl, 0x3d
mov byte [ebx], dl
mov edx, eax
mov ecx, eax
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
shr edx, 0xc
and ecx, 3
and edx, 0xf
shl ecx, 4
or edx, ecx
mov ecx, 0x10
lea edi, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jl 0x4055aa
cmp edx, 0x40
jge 0x4055aa
mov dl, byte [esp + edx + 0x20]
jmp 0x4055ac
mov dl, 0x3d
cmp ebp, 1
mov byte [ebx + 1], dl
jle 0x4055e7
mov edx, eax
mov ecx, eax
shr edx, 8
and edx, 0xf
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
shr ecx, 0x16
shl edx, 2
and ecx, 3
lea edi, [esp + 0x20]
or edx, ecx
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jl 0x4055e7
cmp edx, 0x40
jge 0x4055e7
mov dl, byte [esp + edx + 0x20]
jmp 0x4055e9
mov dl, 0x3d
cmp ebp, 2
mov byte [ebx + 2], dl
jle 0x405615
mov ecx, 0x10
mov esi, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea edi, [esp + 0x20]
rep movsd dword es:[edi], dword [esi]
shr eax, 0x10
and eax, 0x3f
movsb byte es:[edi], byte [esi]
jl 0x405615
cmp eax, 0x40
jge 0x405615
mov al, byte [esp + eax + 0x20]
jmp 0x405617
mov al, 0x3d
mov esi, dword [esp + 0x18]
mov ebp, dword [esp + 0x998]
mov byte [ebx + 3], al
add ebx, 4
lea edx, [esp + 0x530]
lea ecx, [ebp + 4]
push edx
mov byte [ebx], 0
call fcn.0042af97
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x130]
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
rep stosd dword es:[edi], eax
push esi
lea eax, [esp + 0x134]
push 0x400
push eax
push str.12000
push str.uptime
push str.computer
call ebx
lea ecx, [esp + 0x130]
push ecx
call fcn.00418509
add esp, 4
lea edx, [esp + 0x130]
mov dword [ebp + 8], eax
mov ecx, 0x100
push esi
push 0x400
push edx
xor eax, eax
lea edi, [esp + 0x13c]
push 0x44a580
push str.upsetting
push str.computer
rep stosd dword es:[edi], eax
call ebx
lea eax, [esp + 0x130]
lea ecx, [ebp + 0xc]
push eax
call fcn.0042af97
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x984
ret 4