Function at 0x40d130
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509b2b
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x72400c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xd4], ecx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xcc], ebx
mov edi, dword [ebx + 4]
mov esi, dword [ebx]
cmp esi, edi
je 0x40d18e
nop dword [eax]
mov ecx, esi
call fcn.0040dc30
add esi, 0x44
cmp esi, edi
jne 0x40d180
mov eax, dword [ebx]
mov dword [ebx + 4], eax
mov ebx, dword [ebp - 0xd4]
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cmp eax, 8
jb 0x40d80d
xor edx, edx
mov eax, dword [ebx + 4]
mov ecx, dword [ebx]
sub eax, ecx
sar eax, 3
mov dword [ebp - 0xd0], edx
cmp edx, eax
jae 0x40dc09
lea ebx, [ecx + edx*8]
push 0x7289c8
mov ecx, ebx
mov dword [ebp - 0xc0], ebx
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40d217
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d1ec
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7289dc], 8
mov ecx, 0x7289c8
mov edx, dword [0x7289d8]
cmovae ecx, dword [0x7289c8]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d219
mov esi, edi
cmp esi, edi
je 0x40d7e5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d7e5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x40d7e5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov ebx, dword [esi + 0x28]
sub ecx, ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d283
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [0x728994], 8
lea edx, [ebx + 0x10]
mov eax, 0x728980
cmovae eax, dword [0x728980]
cmp dword [ebx + 0x14], 8
jb 0x40d2a1
mov ebx, dword [ebx]
push dword [0x728990]
mov edx, dword [edx]
mov ecx, ebx
push eax
call fcn.00410500
add esp, 8
test eax, eax
jne 0x40d7e5
mov ecx, dword [ebp - 0xc0]
push 0x728a28
call fcn.004124a0
mov esi, eax
cmp esi, edi
je 0x40d30b
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d2e0
mov eax, dword [eax]
push dword [edx]
cmp dword [0x728a3c], 8
mov ecx, 0x728a28
mov edx, dword [0x728a38]
cmovae ecx, dword [0x728a28]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d30d
mov esi, edi
cmp esi, edi
je 0x40d80d
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d80d
push str.fise_data
lea ecx, [ebp - 0x2c]
call fcn.0040f910
mov dword [ebp - 4], 0
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
lea ebx, [ebp - 0x2c]
mov ecx, 0x6c
cmovae eax, dword [ebp - 0x2c]
mov word [eax + 4], cx
mov eax, 0x2aaaaaab
cmp dword [ebp - 0x18], 8
mov ecx, dword [esi + 0x2c]
cmovae ebx, dword [ebp - 0x2c]
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d38a
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp word [ebx], 0
jne 0x40d394
xor ecx, ecx
jmp 0x40d3af
mov ecx, ebx
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40d3a0
sub ecx, edx
sar ecx, 1
cmp dword [edi + 0x14], 8
lea edx, [edi + 0x10]
jb 0x40d3ba
mov edi, dword [edi]
mov edx, dword [edx]
push ecx
push ebx
mov ecx, edi
call fcn.00410500
add esp, 8
test eax, eax
jne 0x40d814
mov ebx, dword [ebp - 0xc0]
mov ecx, ebx
push 0x7287e8
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40d423
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d3f8
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7287fc], 8
mov ecx, 0x7287e8
mov edx, dword [0x7287f8]
cmovae ecx, dword [0x7287e8]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d425
mov esi, edi
cmp esi, edi
je 0x40d7d6
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jne 0x40d7d6
mov dword [ebp - 0xc4], 0
mov eax, 0x2aaaaaab
mov ecx, dword [esi + 0x2c]
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d47c
push str.invalid_vector_T__subscript
call fcn.004cf6b5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov ebx, dword [edi + 0x10]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d4a1
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [edi + 0x14], 8
jb 0x40d4a9
mov edi, dword [edi]
push 0
push 0
lea eax, [ebp - 0xc4]
push eax
push 0
push 1
push ebx
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x40d805
xor eax, eax
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x5c], 0
mov word [ebp - 0x6c], ax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], eax
mov word [ebp - 0x44], ax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x54]
push dword [ebp - 0xc4]
call fcn.0040ee20
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x54]
sub eax, ebx
mov dword [ebp - 0xc4], eax
mov eax, 0x2aaaaaab
mov ecx, dword [esi + 0x2c]
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d53f
push str.invalid_vector_T__subscript
call fcn.004cf6b5
mov eax, dword [edi + 0x10]
mov ecx, dword [esi + 0x2c]
mov dword [ebp - 0xbc], eax
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d56a
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [edi + 0x14], 8
jb 0x40d572
mov edi, dword [edi]
push 0
push 0
lea eax, [ebp - 0xc4]
push eax
push ebx
push 1
push dword [ebp - 0xbc]
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x40d7fd
mov ebx, dword [ebp - 0xc0]
mov ecx, ebx
push 0x7288c0
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40d5e8
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d5bd
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7288d4], 8
mov ecx, 0x7288c0
mov edx, dword [0x7288d0]
cmovae ecx, dword [0x7288c0]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d5ea
mov esi, edi
cmp esi, edi
je 0x40d63f
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d63f
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d62c
push str.invalid_vector_T__subscript
call fcn.004cf6b5
lea eax, [ebp - 0x6c]
cmp eax, edi
je 0x40d63f
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.0040f6c0
push 0x7288a8
mov ecx, ebx
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40d68c
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d661
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7288bc], 8
mov ecx, 0x7288a8
mov edx, dword [0x7288b8]
cmovae ecx, dword [0x7288a8]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d68e
mov esi, edi
mov byte [ebp - 0x48], 0
cmp esi, edi
je 0x40d709
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d709
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov ebx, dword [esi + 0x28]
sub ecx, ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d6d4
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [ebx + 0x14], 8
lea edx, [ebx + 0x10]
jb 0x40d6df
mov ebx, dword [ebx]
mov edx, dword [edx]
mov ecx, ebx
push 4
push 0x70fd94
call fcn.00410500
movzx ecx, byte [ebp - 0x48]
add esp, 8
mov ebx, dword [ebp - 0xc0]
test eax, eax
mov eax, 1
cmove ecx, eax
mov byte [ebp - 0x48], cl
push 0x728878
mov ecx, ebx
call fcn.004124a0
mov esi, eax
cmp esi, edi
je 0x40d754
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d729
mov eax, dword [eax]
push dword [edx]
cmp dword [0x72888c], 8
mov ecx, 0x728878
mov edx, dword [0x728888]
cmovae ecx, dword [0x728878]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d756
mov esi, edi
push 0x70f8c0
lea ecx, [ebp - 0x44]
call fcn.0040f7e0
cmp esi, dword [ebx]
je 0x40d7b8
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40d7b8
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d7a5
push str.invalid_vector_T__subscript
call fcn.004cf6b5
lea eax, [ebp - 0x44]
cmp eax, edi
je 0x40d7b8
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.0040f6c0
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0x70]
push eax
mov dword [ebp - 0x70], 1
call fcn.0040eb30
lea ecx, [ebp - 0x70]
call fcn.0040dc30
lea ecx, [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
call fcn.0040f850
mov edx, dword [ebp - 0xd0]
mov ebx, dword [ebp - 0xd4]
inc edx
jmp 0x40d1a9
lea ecx, [ebp - 0x70]
call fcn.0040dc30
lea ecx, [ebp - 0x2c]
call fcn.0040f850
xor al, al
jmp 0x40dc0b
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d839
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [edi + 0x14], 8
lea edx, [edi + 0x10]
jb 0x40d844
mov edi, dword [edi]
mov edx, dword [edx]
mov ecx, edi
push 0xc
push str.download_url
call fcn.00410500
add esp, 8
test eax, eax
jne 0x40d7d6
mov ebx, dword [ebp - 0xc0]
mov ecx, ebx
push 0x7287e8
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40d8b2
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d887
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7287fc], 8
mov ecx, 0x7287e8
mov edx, dword [0x7287f8]
cmovae ecx, dword [0x7287e8]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d8b4
mov esi, edi
cmp esi, edi
je 0x40d7d6
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
jne 0x40d7d6
mov dword [ebp - 0xc8], 0
mov eax, 0x2aaaaaab
mov ecx, dword [esi + 0x2c]
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d90b
push str.invalid_vector_T__subscript
call fcn.004cf6b5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov ebx, dword [edi + 0x10]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40d930
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [edi + 0x14], 8
jb 0x40d938
mov edi, dword [edi]
push 0
push 0
lea eax, [ebp - 0xc8]
push eax
push 0
push 1
push ebx
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x40d805
xor eax, eax
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], eax
mov word [ebp - 0x88], ax
mov ebx, dword [ebp - 0xc0]
mov ecx, ebx
mov byte [ebp - 4], 4
push 0x7288a8
mov byte [ebp - 0x8c], al
call fcn.004124a0
mov ebx, dword [ebx]
mov edi, eax
cmp edi, ebx
je 0x40d9f4
cmp dword [edi + 0x24], 8
lea eax, [edi + 0x10]
lea edx, [eax + 0x10]
jb 0x40d9c9
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7288bc], 8
mov ecx, 0x7288a8
mov edx, dword [0x7288b8]
cmovae ecx, dword [0x7288a8]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40d9f6
mov edi, ebx
cmp edi, ebx
je 0x40da6d
mov ecx, dword [edi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [edi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40da6d
mov ecx, dword [edi + 0x2c]
mov eax, 0x2aaaaaab
mov ebx, dword [edi + 0x28]
sub ecx, ebx
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40da38
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [ebx + 0x14], 8
lea edx, [ebx + 0x10]
jb 0x40da43
mov ebx, dword [ebx]
mov edx, dword [edx]
mov ecx, ebx
push 4
push 0x70fd94
call fcn.00410500
movzx ecx, byte [ebp - 0x8c]
add esp, 8
test eax, eax
mov eax, 1
cmove ecx, eax
mov byte [ebp - 0x8c], cl
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x98]
push dword [ebp - 0xc8]
call fcn.0040ee20
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x94]
mov ebx, dword [ebp - 0x98]
sub eax, ebx
mov dword [ebp - 0xc8], eax
mov eax, 0x2aaaaaab
mov ecx, dword [esi + 0x2c]
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40dac2
push str.invalid_vector_T__subscript
call fcn.004cf6b5
mov eax, dword [edi + 0x10]
mov ecx, dword [esi + 0x2c]
mov dword [ebp - 0xbc], eax
sub ecx, edi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40daed
push str.invalid_vector_T__subscript
call fcn.004cf6b5
cmp dword [edi + 0x14], 8
jb 0x40daf5
mov edi, dword [edi]
push 0
push 0
lea eax, [ebp - 0xc8]
push eax
push ebx
push 1
push dword [ebp - 0xbc]
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x40dbf2
mov ebx, dword [ebp - 0xc0]
mov ecx, ebx
push 0x7288c0
call fcn.004124a0
mov edi, dword [ebx]
mov esi, eax
cmp esi, edi
je 0x40db6b
cmp dword [esi + 0x24], 8
lea eax, [esi + 0x10]
lea edx, [eax + 0x10]
jb 0x40db40
mov eax, dword [eax]
push dword [edx]
cmp dword [0x7288d4], 8
mov ecx, 0x7288c0
mov edx, dword [0x7288d0]
cmovae ecx, dword [0x7288c0]
push eax
call fcn.00410500
shr eax, 0x1f
add esp, 8
test al, al
je 0x40db6d
mov esi, edi
cmp esi, edi
je 0x40dbc5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
sub ecx, dword [esi + 0x28]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x40dbc5
mov ecx, dword [esi + 0x2c]
mov eax, 0x2aaaaaab
mov edi, dword [esi + 0x28]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40dbaf
push str.invalid_vector_T__subscript
call fcn.004cf6b5
lea eax, [ebp - 0xb0]
cmp eax, edi
je 0x40dbc5
push 0xffffffffffffffff
push 0
push edi
mov ecx, eax
call fcn.0040f6c0
mov ecx, dword [ebp - 0xcc]
lea eax, [ebp - 0xb4]
push eax
mov dword [ebp - 0xb4], 2
call fcn.0040eb30
lea ecx, [ebp - 0xb4]
jmp 0x40d7d1
lea ecx, [ebp - 0xb4]
call fcn.0040dc30
lea ecx, [ebp - 0x2c]
call fcn.0040f850
xor al, al
jmp 0x40dc0b
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004ce564
mov esp, ebp
pop ebp
ret 4