Function at 0x10022250
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1016761b
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x102db678]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x168], eax
mov eax, dword [esi]
mov dword [esi + 4], eax
lea eax, [ecx + 0x18]
mov ecx, eax
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x160], eax
call fcn.1001f3e0
test eax, eax
jne 0x100222bb
mov eax, dword [esi + 4]
sub eax, dword [esi]
jmp 0x10022f2d
push 0x100
lea eax, [ebp - 0x110]
push 0
push eax
call fcn.10146ed0
xor esi, esi
add esp, 0xc
xor edi, edi
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x15c], edi
mov ecx, dword [ebp - 0x160]
lea eax, [ebp - 0x110]
push 0x100
push eax
call fcn.1001f560
test eax, eax
je 0x10022f15
add esi, eax
mov dword [ebp - 0x118], 0
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x114], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x128], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10022330
sub ecx, edx
lea eax, [ebp - 0x110]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.1001a6e0
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x118]
cmovae ecx, edx
mov dword [ebp - 4], 0
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x14c], eax
cmp eax, 7
jb 0x10022422
add eax, 0xfffffffa
add eax, ecx
mov dword [ebp - 0x154], eax
sub eax, ecx
push eax
push 0x2f
push ecx
call fcn.10147d40
mov esi, eax
add esp, 0xc
test esi, esi
je 0x10022416
nop dword [eax]
mov ecx, esi
mov edx, str._Length
mov edi, 3
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100223cb
add ecx, 4
add edx, 4
or edi, 0xffffffff
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100223f2
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100223f2
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100223f2
cmp edi, 0xffffffff
je 0x100223ee
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100223f2
xor eax, eax
jmp 0x100223f7
sbb eax, eax
or eax, 1
test eax, eax
je 0x10022468
mov eax, dword [ebp - 0x154]
inc esi
sub eax, esi
push eax
push 0x2f
push esi
call fcn.10147d40
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100223b0
mov edx, dword [ebp - 0x148]
mov esi, dword [ebp - 0x144]
mov eax, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp eax, 0x10
jb 0x10022dae
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x10022459
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10022f5c
push ecx
push edx
call fcn.10144f68
add esp, 8
jmp 0x10022dae
sub esi, dword [ebp - 0x150]
cmp esi, 0xffffffff
je 0x10022416
cmp dword [ebp - 0x114], 0x10
lea edi, [ebp - 0x128]
mov eax, dword [ebp - 0x14c]
cmovae edi, dword [ebp - 0x148]
cmp eax, 1
jb 0x100224de
add eax, edi
sub eax, edi
push eax
push 0x20
push edi
call fcn.10147d40
mov esi, eax
add esp, 0xc
test esi, esi
je 0x100224de
movzx ecx, byte [esi]
cmp cl, 0x20
jne 0x100224b4
xor eax, eax
jmp 0x100224b9
sbb eax, eax
or eax, 1
test eax, eax
je 0x100225eb
mov eax, dword [ebp - 0x14c]
inc esi
add eax, edi
sub eax, esi
push eax
push 0x20
push esi
call fcn.10147d40
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x100224a8
mov eax, dword [ebp - 0x158]
lea esi, [eax + 1]
push esi
call fcn.1014531a
push esi
mov edi, eax
push 0
push edi
mov dword [ebp - 0x15c], edi
call fcn.10146ed0
mov ecx, dword [ebp - 0x160]
add esp, 0x10
push dword [ebp - 0x158]
push 1
push edi
call fcn.1001f3f0
test eax, eax
je 0x10022f4a
mov ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10022522
sub ecx, edx
push ecx
push edi
lea ecx, [ebp - 0x128]
call fcn.1001a6e0
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0x128]
cmovae ecx, edx
mov dword [ebp - 0x14c], edx
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x148], edx
cmp edx, 0xf
jb 0x1002275c
lea eax, [edx - 0xe]
add eax, ecx
mov dword [ebp - 0x154], eax
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10022756
mov ecx, edi
mov edx, str._xmpGImg:width_
mov esi, 0xb
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100225b1
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100225a0
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1002272a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1002272a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1002272a
cmp esi, 0xffffffff
je 0x100225e4
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x1002272a
xor eax, eax
jmp 0x1002272f
sub esi, edi
cmp esi, 0xffffffff
je 0x100224de
mov edx, dword [ebp - 0x14c]
lea edi, [ebp - 0x128]
cmp dword [ebp - 0x114], 0x10
mov ecx, dword [ebp - 0x148]
cmovae edi, ecx
lea eax, [edx - 1]
cmp esi, eax
ja 0x1002266f
lea ecx, [esi + edi]
lea eax, [edi + edx]
sub eax, ecx
push eax
push 0x2f
push ecx
call fcn.10147d40
mov edx, eax
add esp, 0xc
test edx, edx
je 0x10022669
movzx ecx, byte [edx]
cmp cl, 0x2f
jne 0x1002263f
xor eax, eax
jmp 0x10022644
sbb eax, eax
or eax, 1
test eax, eax
je 0x1002271d
mov eax, dword [ebp - 0x14c]
inc edx
add eax, edi
sub eax, edx
push eax
push 0x2f
push edx
call fcn.10147d40
mov edx, eax
add esp, 0xc
test edx, edx
jne 0x10022633
mov ecx, dword [ebp - 0x148]
or edx, 0xffffffff
cmp edx, 0xffffffff
je 0x100224de
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp eax, esi
jb 0x10022f57
sub eax, esi
sub edx, esi
cmp eax, edx
cmovb edx, eax
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
cmovae eax, ecx
lea ecx, [ebp - 0x140]
push edx
add eax, esi
push eax
call fcn.1001a6e0
lea ecx, [ebp - 0x128]
call fcn.1001a690
movups xmm1, xmmword [ebp - 0x140]
cmp dword [ebp - 0x12c], 0x10
lea ecx, [ebp - 0x128]
movq xmm0, qword [ebp - 0x130]
movd eax, xmm1
movups xmmword [ebp - 0x128], xmm1
cmovae ecx, eax
movq qword [ebp - 0x118], xmm0
push ecx
call fcn.1014c5b9
add esp, 4
mov dword [ebp - 0x158], eax
jmp 0x100224e4
mov ecx, dword [ebp - 0x148]
sub edx, edi
jmp 0x10022672
sbb eax, eax
or eax, 1
test eax, eax
je 0x100227dc
mov eax, dword [ebp - 0x154]
inc edi
sub eax, edi
push eax
push 0x3c
push edi
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10022592
mov edx, dword [ebp - 0x148]
mov esi, dword [ebp - 0x114]
lea ecx, [ebp - 0x128]
mov eax, dword [ebp - 0x14c]
cmp esi, 0x10
cmovae ecx, eax
mov dword [ebp - 0x150], ecx
cmp edx, 0x10
jb 0x10022a16
lea eax, [ecx - 0xf]
add eax, edx
mov dword [ebp - 0x154], eax
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100229f4
nop word [eax + eax]
mov ecx, edi
mov edx, str._xmpGImg:height_
mov esi, 0xc
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100229ac
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100227c0
xor eax, eax
jmp 0x100229d1
sub edi, dword [ebp - 0x150]
cmp edi, 0xffffffff
je 0x10022756
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x128]
mov esi, dword [ebp - 0x148]
lea edx, [edi + 0xf]
cmovae ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x150], ecx
cmp esi, 0x10
jb 0x100228be
lea eax, [esi - 0x10]
cmp edx, eax
ja 0x100228be
lea eax, [esi - 0xf]
add eax, ecx
add ecx, edx
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100228b8
mov ecx, edi
mov edx, str.__xmpGImg:width_
mov esi, 0xc
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10022865
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10022850
xor eax, eax
jmp 0x1002288a
cmp al, byte [edx]
jne 0x10022885
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10022885
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10022885
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x10022885
xor eax, eax
jmp 0x1002288a
sbb eax, eax
or eax, 1
test eax, eax
je 0x1002299b
mov ecx, dword [ebp - 0x150]
inc edi
mov eax, dword [ebp - 0x148]
add ecx, 0xfffffff1
add eax, ecx
sub eax, edi
push eax
push 0x3c
push edi
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10022843
mov edx, dword [ebp - 0x154]
or edi, 0xffffffff
cmp edi, 0xffffffff
je 0x10022756
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp eax, edx
jb 0x10022f57
sub eax, edx
lea ecx, [ebp - 0x140]
sub edi, edx
cmp eax, edi
cmovb edi, eax
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
cmovae eax, dword [ebp - 0x14c]
push edi
add eax, edx
push eax
call fcn.1001a6e0
cmp dword [ebp - 0x12c], 0x10
lea eax, [ebp - 0x140]
cmovae eax, dword [ebp - 0x140]
push eax
call fcn.1014c5b9
mov ecx, dword [ebp - 0x16c]
add esp, 4
mov edx, dword [ebp - 0x12c]
mov dword [ecx], eax
cmp edx, 0x10
jb 0x1002297e
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10022974
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10022f5c
push edx
push ecx
call fcn.10144f68
add esp, 8
mov edx, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x14c], ecx
jmp 0x1002275c
sub edi, dword [ebp - 0x150]
mov edx, dword [ebp - 0x154]
jmp 0x100228c1
cmp al, byte [edx]
jne 0x100229cc
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100229cc
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100229cc
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100229cc
xor eax, eax
jmp 0x100229d1
sbb eax, eax
or eax, 1
test eax, eax
je 0x100229fc
mov eax, dword [ebp - 0x154]
inc edi
sub eax, edi
push eax
push 0x3c
push edi
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x100227b0
or edi, 0xffffffff
jmp 0x10022be8
sub edi, dword [ebp - 0x150]
mov edx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov esi, dword [ebp - 0x114]
jmp 0x10022a19
or edi, 0xffffffff
cmp edi, 0xffffffff
je 0x10022be8
add edi, 0x10
lea ecx, [ebp - 0x128]
cmp esi, 0x10
mov dword [ebp - 0x150], edi
cmovae ecx, eax
mov dword [ebp - 0x154], ecx
cmp edx, 0x11
jb 0x10022af1
lea eax, [edx - 0x11]
cmp edi, eax
ja 0x10022af1
lea eax, [edx - 0x10]
add eax, ecx
add ecx, edi
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10022aeb
nop dword [eax]
mov ecx, edi
mov edx, str.__xmpGImg:height_
mov esi, 0xd
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10022a91
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10022a80
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10022ab8
cmp esi, 0xfffffffd
je 0x10022ab4
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10022ab8
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10022ab8
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x10022ab8
xor eax, eax
jmp 0x10022abd
sbb eax, eax
or eax, 1
test eax, eax
je 0x10022bd1
mov ecx, dword [ebp - 0x154]
inc edi
mov eax, dword [ebp - 0x148]
add ecx, 0xfffffff0
add eax, ecx
sub eax, edi
push eax
push 0x3c
push edi
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10022a70
mov edx, dword [ebp - 0x148]
or edi, 0xffffffff
cmp edi, 0xffffffff
je 0x10022be2
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp edx, eax
jb 0x10022f57
sub edi, eax
lea ecx, [ebp - 0x140]
sub edx, eax
lea eax, [ebp - 0x128]
cmp edx, edi
cmovb edi, edx
cmp dword [ebp - 0x114], 0x10
push edi
cmovae eax, dword [ebp - 0x14c]
mov edi, dword [ebp - 0x150]
add eax, edi
push eax
call fcn.1001a6e0
cmp dword [ebp - 0x12c], 0x10
lea eax, [ebp - 0x140]
cmovae eax, dword [ebp - 0x140]
push eax
call fcn.1014c5b9
mov ecx, dword [ebp - 0x168]
add esp, 4
mov edx, dword [ebp - 0x12c]
mov dword [ecx], eax
cmp edx, 0x10
jb 0x10022bb7
mov ecx, dword [ebp - 0x140]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10022bad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10022f5c
push edx
push ecx
call fcn.10144f68
add esp, 8
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x148], ecx
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x14c], ecx
jmp 0x10022be8
sub edi, dword [ebp - 0x154]
mov edx, dword [ebp - 0x148]
jmp 0x10022af4
mov edi, dword [ebp - 0x150]
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x128]
mov edx, dword [ebp - 0x148]
cmovae ecx, dword [ebp - 0x14c]
mov dword [ebp - 0x150], ecx
cmp edx, 0xf
jb 0x10022d67
lea eax, [edx - 0xf]
cmp edi, eax
ja 0x10022d67
lea eax, [edx - 0xe]
add eax, ecx
add ecx, edi
mov dword [ebp - 0x154], eax
sub eax, ecx
push eax
push 0x3c
push ecx
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10022d67
mov ecx, edi
mov edx, str._xmpGImg:image_
mov esi, 0xb
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10022c61
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10022c50
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10022c88
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10022c88
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10022c88
cmp esi, 0xffffffff
je 0x10022c84
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x10022c88
xor eax, eax
jmp 0x10022c8d
sbb eax, eax
or eax, 1
test eax, eax
je 0x10022cb1
mov eax, dword [ebp - 0x154]
inc edi
sub eax, edi
push eax
push 0x3c
push edi
call fcn.10147d40
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10022c41
jmp 0x10022d67
sub edi, dword [ebp - 0x150]
mov edx, dword [ebp - 0x14c]
cmp edi, 0xffffffff
je 0x10022d6d
cmp dword [ebp - 0x114], 0x10
lea eax, [edi + 0xf]
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x148]
cmovae ecx, edx
mov dword [ebp - 0x154], ecx
cmp eax, 0x10
jb 0x10022d6d
add eax, 0xfffffff0
or edi, 0xffffffff
cmp eax, edi
cmovb edi, eax
add edi, ecx
nop dword [eax]
cmp byte [edi], 0x3c
jne 0x10022d55
mov edx, edi
mov eax, str.__xmpGImg:image_
mov esi, 0xc
mov ecx, dword [edx]
cmp ecx, dword [eax]
jne 0x10022d26
add edx, 4
add eax, 4
sub esi, 4
jae 0x10022d11
xor eax, eax
jmp 0x10022d4b
cmp cl, byte [eax]
jne 0x10022d46
mov cl, byte [edx + 1]
cmp cl, byte [eax + 1]
jne 0x10022d46
mov cl, byte [edx + 2]
cmp cl, byte [eax + 2]
jne 0x10022d46
mov cl, byte [edx + 3]
cmp cl, byte [eax + 3]
jne 0x10022d46
xor eax, eax
jmp 0x10022d4b
sbb eax, eax
or eax, 1
test eax, eax
je 0x10022d5c
mov ecx, dword [ebp - 0x154]
cmp edi, ecx
je 0x10022d67
dec edi
jmp 0x10022d00
sub edi, dword [ebp - 0x154]
cmp edi, 0xffffffff
jne 0x10022dc5
mov edx, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 4], 0xffffffff
cmp ecx, 0x10
jb 0x10022da8
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10022d9e
mov edx, dword [edx - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10022f5c
push ecx
push edx
call fcn.10144f68
add esp, 8
mov esi, dword [ebp - 0x144]
mov edi, dword [ebp - 0x15c]
cmp esi, 0xa000
ja 0x10022f15
jmp 0x100222e1
mov ecx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
cmp eax, ecx
jb 0x10022f57
sub eax, ecx
sub edi, ecx
cmp eax, edi
cmovb edi, eax
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
cmovae eax, dword [ebp - 0x14c]
add eax, ecx
lea ecx, [ebp - 0x140]
push edi
push eax
call fcn.1001a6e0
lea ecx, [ebp - 0x128]
call fcn.1001a690
movups xmm0, xmmword [ebp - 0x140]
push 0x102d42f0
lea eax, [ebp - 0x128]
movups xmmword [ebp - 0x128], xmm0
push str.xA_
movq xmm0, qword [ebp - 0x130]
push eax
movq qword [ebp - 0x118], xmm0
call fcn.1001a950
mov edi, dword [ebp - 0x118]
lea ecx, [ebp - 0x144]
add esp, 0xc
mov dword [ebp - 0x144], 0
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
cmovae eax, dword [ebp - 0x128]
push 0
push 0
push ecx
push 0
push 1
push edi
push eax
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov eax, dword [ebp - 0x144]
test eax, eax
je 0x10022f04
push eax
call fcn.1014531a
add esp, 4
lea ecx, [ebp - 0x128]
cmp dword [ebp - 0x114], 0x10
mov esi, eax
lea eax, [ebp - 0x144]
cmovae ecx, dword [ebp - 0x128]
push 0
push 0
push eax
push esi
push 1
push edi
push ecx
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x10022efb
push dword [ebp - 0x168]
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x164]
add eax, esi
push eax
push esi
call fcn.10020610
push esi
call fcn.1014535c
add esp, 4
lea ecx, [ebp - 0x128]
call fcn.1001a430
mov edi, dword [ebp - 0x15c]
test edi, edi
je 0x10022f22
push edi
call fcn.1014535c
add esp, 4
mov ecx, dword [ebp - 0x164]
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101452d9
mov esp, ebp
pop ebp
ret 0xc
lea ecx, [ebp - 0x128]
call fcn.1001a430
jmp 0x10022f15
call fcn.1001ae10
call fcn.1014ad03
int3