Function at 0x41fdf0
Capabilities:
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xf0
mov esi, dword [esp + 0x108]
mov eax, dword [esp + 0x104]
lea ecx, [esp + 0x78]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x100001
mov dword [esp + 0xc], 3
mov dword [esp + 0x10], 0x4021
call fcn.0043f0b0
xor ebx, ebx
cmp eax, 0
jl 0x4206eb
mov dword [esp], esi
call fcn.00416fd0
shl eax, 1
mov word [esp + 0xcc], ax
movzx eax, ax
add eax, 2
mov word [esp + 0xce], ax
mov dword [esp + 0xd0], esi
mov dword [esp], 0x848
call fcn.00438130
mov dword [esp + 0x4c], eax
mov esi, dword [esp + 0x78]
mov al, byte [esp + 0x88]
mov byte [esp + 0xb4], al
mov byte [esp + 0x8c], 5
mov byte [esp + 0x8d], 0x7a
mov byte [esp + 0x8e], 0x7b
mov byte [esp + 0x8f], pe_nt_image_headers32
mov eax, 4
mov byte [esp + eax + 0x8c], 0
add eax, 1
cmp eax, 6
jne 0x41fea9
xor eax, eax
cmp eax, 6
jae 0x41ff0f
movzx edx, byte [esp + eax + 0x8c]
mov ecx, eax
add ecx, 0xbfc60a3f
mov edi, edx
xor edi, 0xffffffff
and ecx, edi
mov edi, 0xc0
sub edi, eax
and edi, edx
or ecx, edi
mov edx, ecx
and edx, 1
or ecx, 1
add ecx, 0xc4
add ecx, edx
mov byte [esp + eax + 0x8c], cl
mov ecx, eax
and ecx, 1
or eax, 1
add eax, 0x7584095f
or eax, ecx
add eax, 0x8a7bf6a1
jmp 0x41febb
mov edi, dword [esp + 0x8c]
xor ebx, ebx
mov ecx, 2
cmp ebx, dword [0x44b030]
jb 0x41ff2a
jmp 0x41ffe4
mov ecx, dword [0x44b034]
cmp dword [ecx + ebx*8], 0x557d0c65
sete dl
mov byte [esp + 0x3b], dl
test dl, 1
jne 0x41ff48
jmp 0x41ffd1
mov edx, dword [ecx + ebx*8 + 4]
mov ecx, 2
cmp edx, edi
je 0x41ffd3
mov eax, dword [0x44b038]
xor ecx, ecx
lea ecx, [esp + 0xe8]
lea ebp, [esp + 0xcc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], 0x848
mov dword [esp + 0x28], 2
mov dword [esp + 0x2c], 1
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], 0
call fcn.0043b600
mov ecx, 1
jmp 0x41ffd3
xor ecx, ecx
test byte [esp + 0x3b], 1
je 0x41ffdc
jmp 0x41ffe4
add ebx, 1
jmp 0x41ff18
cmp ecx, 2
jne 0x41ffeb
mov eax, edi
xor ebx, ebx
cmp eax, 0
jl 0x4205d1
mov dword [esp + 0x40], 0
xor ebx, ebx
xor esi, esi
mov eax, dword [esp + 0x4c]
jmp 0x420008
mov edi, dword [eax + 0x3c]
shr edi, 1
mov ecx, eax
add ecx, 0x38
mov dword [esp + 0xe4], ecx
mov dword [esp + 0x44], eax
mov eax, dword [eax + 0x38]
mov ecx, eax
xor ecx, 0xfffffbff
and ecx, eax
cmp ecx, 0
jne 0x420222
mov al, byte [esp + 0x6c]
mov byte [esp + 0x94], al
mov byte [esp + 0x70], 0x36
mov byte [esp + 0x71], 0x5b
mov byte [esp + 0x72], 0x5a
mov byte [esp + 0x73], 0x59
mov eax, 4
mov byte [esp + eax + 0x70], 0
add eax, 1
cmp eax, 7
jne 0x420057
mov dword [esp + 0x48], ebx
xor eax, eax
cmp eax, 7
jae 0x4200a9
movzx ebx, byte [esp + eax + 0x70]
mov ecx, 0x10
sub ecx, eax
or ecx, ebx
mov edx, 0x10
sub edx, eax
mov ebp, 0x10
sub ebp, eax
and edx, ebp
and edx, ebx
xor ecx, 0xffffffff
or edx, ecx
add dl, 0x55
mov byte [esp + eax + 0x70], dl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x42006a
mov ebp, dword [esp + 0x44]
add ebp, 0x44
lea eax, [esp + 0x70]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.00420700
cmp eax, 0
mov ebx, dword [esp + 0x48]
je 0x420222
mov dword [esp + 0x3c], esi
mov al, byte [esp + 0x68]
mov byte [esp + 0x98], al
mov byte [esp + 0xbc], 0x6a
mov byte [esp + 0xbd], 0x39
mov byte [esp + 0xbe], 0x6c
mov byte [esp + 0xbf], 0x3f
mov byte [esp + 0xc0], 0x3c
mov byte [esp + 0xc1], 0x3d
mov eax, 6
mov byte [esp + eax + 0xbc], 0
add eax, 1
cmp eax, 0xc
jne 0x420115
xor esi, esi
cmp esi, 0xc
jae 0x420155
mov dl, byte [esp + esi + 0xbc]
movzx ebx, dl
mov eax, esi
add eax, 0xb746308a
mov ecx, eax
and ecx, ebx
shl ecx, 1
sub eax, ecx
add al, dl
add al, 0x4e
mov byte [esp + esi + 0xbc], al
add esi, 1
jmp 0x420127
lea eax, [esp + 0xbc]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], edi
call fcn.00420700
cmp eax, 0
setne al
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x3c]
test al, 1
jne 0x420183
jmp 0x420222
mov eax, edi
add eax, 1
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x42019e
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc80
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], edi
mov edi, eax
call fcn.00416c00
mov word [eax], 0
mov eax, dword [esp + 0x44]
mov eax, dword [eax + 0x28]
mov ecx, dword [esp + 0xe4]
mov edx, dword [ecx]
mov ecx, edx
xor ecx, 0x10
xor ecx, 0xffffffff
or edx, 0x10
and edx, ecx
xor ecx, ecx
cmp edx, 0
setne cl
mov edx, dword [esp + 0x110]
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp], edi
and ecx, 1
mov dword [esp + 4], ecx
call dword [esp + 0x10c]
and al, 1
movzx eax, al
and bl, 1
movzx ecx, bl
or ecx, eax
cmp ecx, 0
setne bl
and bl, 1
mov dword [esp], edi
call fcn.0040cc90
jmp 0x420222
cmp esi, 0
je 0x42022d
mov edi, dword [esp + 0x40]
jmp 0x42025d
mov dword [esp], 0x10900
call fcn.00438130
mov edi, eax
cmp edi, 0
sete al
jmp 0x420243
test al, 1
jne 0x420249
jmp 0x420259
xor esi, esi
mov eax, 2
mov edi, dword [esp + 0x44]
jmp 0x4205c3
mov esi, edi
jmp 0x42025d
cmp edi, esi
jne 0x4205a2
mov al, byte [esp + 0x5c]
mov byte [esp + 0x9c], al
mov byte [esp + 0x60], 0x24
mov byte [esp + 0x61], 0x3c
mov byte [esp + 0x62], 0x25
mov byte [esp + 0x63], 0x21
mov eax, 4
mov byte [esp + eax + 0x60], 0
add eax, 1
cmp eax, 7
jne 0x420289
mov dword [esp + 0xc8], edi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x48], ebx
xor eax, eax
cmp eax, 7
jae 0x420336
movzx ecx, byte [esp + eax + 0x60]
mov dword [esp + 0xd4], ecx
mov ebx, eax
add ebx, 0x1abaee49
mov esi, 0xe54511b6
sub esi, eax
mov edx, 0xe54511b6
sub edx, eax
mov ecx, esi
and ecx, 0x3f
mov edi, ebx
and edi, 0xc0
mov ebp, edx
and ebp, 0x3f
and ebx, 0xc0
or ecx, edi
or ebp, ebx
xor ecx, ebp
or esi, edx
xor esi, 0xffffffff
or ecx, esi
mov esi, dword [esp + 0xd4]
and ecx, esi
mov edx, eax
add edx, 0x1abaee49
or edx, esi
xor ecx, edx
mov edx, ecx
xor edx, 0x85a6a76e
shl ecx, 1
and ecx, 0xf4b2b122
sub ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x60], cl
add eax, 1
jmp 0x4202a7
mov eax, dword [esp + 0x60]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0xdc], eax
mov al, byte [esp + 0x7c]
mov byte [esp + 0xb8], al
mov byte [esp + 0x80], 5
mov byte [esp + 0x81], 0x7a
mov byte [esp + 0x82], 0x7b
mov byte [esp + 0x83], pe_nt_image_headers32
mov eax, 4
mov byte [esp + eax + 0x80], 0
add eax, 1
cmp eax, 6
jne 0x42037c
xor eax, eax
mov ebx, dword [esp + 0x48]
cmp eax, 6
jae 0x4203e6
movzx edx, byte [esp + eax + 0x80]
mov ecx, eax
add ecx, 0xbfc60a3f
mov esi, edx
xor esi, 0xffffffff
and ecx, esi
mov esi, 0xc0
sub esi, eax
and esi, edx
or ecx, esi
mov edx, ecx
and edx, 1
or ecx, 1
add ecx, 0xc4
add ecx, edx
mov byte [esp + eax + 0x80], cl
mov ecx, eax
and ecx, 1
or eax, 1
add eax, 0x7584095f
or eax, ecx
add eax, 0x8a7bf6a1
jmp 0x420392
mov ebp, dword [esp + 0x80]
xor esi, esi
mov ecx, 2
cmp esi, dword [0x44b030]
jb 0x420401
jmp 0x4204cc
mov ecx, dword [0x44b034]
cmp dword [ecx + esi*8], 0x557d0c65
sete dl
mov byte [esp + 0x3a], dl
test dl, 1
jne 0x42041f
jmp 0x4204b9
mov edx, dword [ecx + esi*8 + 4]
mov ecx, 2
cmp edx, ebp
je 0x4204bb
mov eax, dword [0x44b038]
xor ecx, ecx
lea ecx, [esp + 0xe8]
lea edi, [esp + 0xcc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0xb
mov eax, dword [esp + 0xdc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 2
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], 0
call fcn.0043b600
mov ecx, 1
jmp 0x4204bb
xor ecx, ecx
test byte [esp + 0x3a], 1
je 0x4204c4
jmp 0x4204cc
add esi, 1
jmp 0x4203ef
cmp ecx, 2
mov esi, dword [esp + 0x3c]
jne 0x4204d7
mov eax, ebp
mov cl, byte [esp + 0x50]
mov byte [esp + 0xa0], cl
mov byte [esp + 0x54], 0x9d
mov byte [esp + 0x55], 0x91
mov byte [esp + 0x56], 0x92
mov byte [esp + 0x57], 0x13
mov ecx, 4
mov byte [esp + ecx + 0x54], 0
add ecx, 1
cmp ecx, 7
jne 0x4204fb
xor ecx, ecx
cmp ecx, 7
jae 0x42053c
movzx esi, byte [esp + ecx + 0x54]
mov edi, ecx
add edi, 0xa4
mov edx, 0x5b
sub edx, ecx
and edx, esi
xor esi, 0xffffffff
and edi, esi
mov esi, dword [esp + 0x3c]
or edx, edi
add dl, 0xcc
mov byte [esp + ecx + 0x54], dl
add ecx, 1
jmp 0x42050a
mov ecx, dword [esp + 0x54]
cmp eax, ecx
mov edi, dword [esp + 0xc8]
jne 0x42057b
xor eax, eax
mov edx, edi
jmp 0x420551
mov ecx, edx
mov esi, dword [ecx]
cmp esi, 0
je 0x420568
shr esi, 2
shl esi, 2
mov edx, ecx
add edx, esi
mov eax, ecx
jmp 0x420551
cmp eax, 0
mov esi, dword [esp + 0x3c]
je 0x420577
mov dword [eax], 0
xor eax, eax
jmp 0x42057b
cmp eax, 0
jge 0x42058f
mov dword [esp], esi
call fcn.00438230
mov eax, 2
jmp 0x420593
xor eax, eax
jmp 0x420593
cmp eax, 0
je 0x4205a2
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0x44]
jmp 0x4205c3
mov eax, dword [edi]
cmp eax, 0
setne cl
test cl, 1
jne 0x4205b1
jmp 0x4205bb
mov ecx, edi
add ecx, eax
mov dword [esp + 0x40], ecx
jmp 0x4205c1
mov dword [esp + 0x40], esi
jmp 0x4205c1
xor eax, eax
test eax, eax
mov eax, edi
je 0x420008
jmp 0x4205cf
jmp 0x4205d1
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call fcn.00438230
mov eax, dword [esp + 0x78]
mov dword [esp + 0xd8], eax
mov al, byte [esp + 0xa4]
mov byte [esp + 0xb0], al
mov byte [esp + 0xa8], 5
mov byte [esp + 0xa9], 0x7a
mov byte [esp + 0xaa], 0x7b
mov byte [esp + 0xab], pe_nt_image_headers32
mov eax, 4
mov byte [esp + eax + 0xa8], 0
add eax, 1
cmp eax, 6
jne 0x42061b
xor eax, eax
cmp eax, 6
jae 0x420681
movzx edx, byte [esp + eax + 0xa8]
mov ecx, eax
add ecx, 0xbfc60a3f
mov edi, edx
xor edi, 0xffffffff
and ecx, edi
mov edi, 0xc0
sub edi, eax
and edi, edx
or ecx, edi
mov edx, ecx
and edx, 1
or ecx, 1
add ecx, 0xc4
add ecx, edx
mov byte [esp + eax + 0xa8], cl
mov ecx, eax
and ecx, 1
or eax, 1
add eax, 0x7584095f
or eax, ecx
add eax, 0x8a7bf6a1
jmp 0x42062d
mov edi, dword [esp + 0xa8]
xor ebp, ebp
cmp ebp, dword [0x44b030]
jb 0x420694
jmp 0x4206eb
mov esi, ebx
mov eax, dword [0x44b034]
cmp dword [eax + ebp*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x4206ac
jmp 0x4206db
mov eax, dword [eax + ebp*8 + 4]
cmp eax, edi
jne 0x4206b6
jmp 0x4206db
mov ecx, dword [0x44b038]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov eax, dword [esp + 0xd8]
mov dword [esp + 0xc], eax
call fcn.0043b600
test bl, 1
je 0x4206e4
mov ebx, esi
jmp 0x4206eb
add ebp, 1
mov ebx, esi
jmp 0x42068a
and bl, 1
movzx eax, bl
add esp, 0xf0
pop esi
pop edi
pop ebx
pop ebp
ret