Function at 0x4334b0
Capabilities:
Encode data using base64

Disassembly:
push 0xffffffffffffffff
push 0x44d4e6
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
mov eax, dword [0x4612b0]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4612b0]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov ebp, dword [esp + 0xf4]
xor eax, eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0x1c], eax
call fcn.004354c0
test eax, eax
je 0x43351f
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
call fcn.00419840
call fcn.004300d0
mov ecx, eax
mov eax, 0x6394722b
imul ecx
sar edx, 0xd
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 0x5244
jle 0x433553
push 0x5244
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00418970
call fcn.00419900
mov ecx, dword [esp + 0xec]
lea edx, [esp + 0x34]
push edx
sub esp, 0x1c
xor eax, eax
mov esi, esp
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], eax
lea ebx, [esi + 4]
mov dword [esp + 0x44], eax
mov byte [ebx], al
mov eax, dword [esi + 0x18]
mov edi, 0x10
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], esp
cmp eax, edi
jb 0x433591
mov ecx, dword [ebx]
jmp 0x433593
mov ecx, ebx
cmp ecx, str.t_fu_
ja 0x4335cc
cmp eax, edi
jb 0x4335a3
mov ecx, dword [ebx]
jmp 0x4335a5
mov ecx, ebx
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.t_fu_
jbe 0x4335cc
cmp eax, edi
jb 0x4335b8
mov ebx, dword [ebx]
push 0x40
mov eax, str.t_fu_
sub eax, ebx
push eax
push esi
mov ecx, esi
call fcn.00402d80
jmp 0x43360e
cmp eax, 0x40
jae 0x4335de
mov ecx, dword [esi + 0x14]
push ecx
push 0x40
mov ecx, esi
call fcn.004034b0
mov ecx, dword [esi + 0x18]
cmp ecx, edi
jb 0x4335e9
mov eax, dword [ebx]
jmp 0x4335eb
mov eax, ebx
push 0x40
push str.t_fu_
push ecx
push eax
call fcn.00439429
add esp, 0x10
mov dword [esi + 0x14], 0x40
cmp dword [esi + 0x18], edi
jb 0x43360a
mov ebx, dword [ebx]
mov byte [ebx + 0x40], 0
lea esi, [esp + 0x70]
call fcn.004016b0
mov byte [esp + 0xd4], 1
call fcn.00401770
mov byte [esp + 0xd0], 2
cmp dword [eax + 0x18], edi
jb 0x433636
mov edx, dword [eax + 4]
jmp 0x433639
lea edx, [eax + 4]
xor ebx, ebx
mov eax, edx
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x433660
sub eax, esi
push eax
push edx
lea ecx, [esp + 0xb0]
call fcn.004030c0
cmp dword [esp + 0x4c], edi
jb 0x43368a
mov edx, dword [esp + 0x38]
push edx
call fcn.004393c9
add esp, 4
mov dword [esp + 0x4c], 0xf
mov dword [esp + 0x48], ebx
mov byte [esp + 0x38], 0
lea esi, [esp + 0x50]
mov byte [esp + 0xd0], 5
call fcn.00429e20
cmp dword [esp + 0x28], ebx
je 0x4339d4
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
lea esp, [esp]
mov eax, dword [esp + 0x24]
dec dword [esp + 0x28]
mov esi, eax
inc eax
mov dword [esp + 0x24], eax
cmp dword [esp + 0xec], esi
ja 0x4336dd
call fcn.00438391
cmp dword [esp + 0xf0], 0x10
mov eax, dword [esp + 0xdc]
jae 0x4336f5
lea eax, [esp + 0xdc]
mov cl, byte [eax + esi]
mov eax, dword [esp + 0x1c]
mov byte [esp + eax + 0x14], cl
inc eax
push 4
mov dword [esp + 0x20], eax
call edi
lea edx, [esp + 0x30]
cmp eax, edx
jle 0x43371b
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
jmp 0x43371f
push 0xe
call edi
cmp dword [esp + 0x1c], 3
mov dword [esp + 0xd0], 5
mov bl, byte [esp + 0x15]
jne 0x4337cf
mov al, byte [esp + 0x14]
mov cl, al
shr cl, 2
and al, 3
shl al, 4
mov byte [esp + 0x18], cl
mov dl, bl
shr dl, 4
add al, dl
mov byte [esp + 0x19], al
mov al, byte [esp + 0x16]
mov cl, bl
and cl, 0xf
add cl, cl
mov dl, al
add cl, cl
shr dl, 6
add cl, dl
and al, 0x3f
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1b], al
xor esi, esi
jmp 0x433780
movzx edi, byte [esp + esi + 0x18]
lea eax, [esp + 0xa8]
call fcn.00404d70
mov al, byte [eax]
mov byte [esp + 0x2c], al
mov ecx, dword [esp + 0x2c]
push ecx
mov eax, 1
mov edi, ebp
call fcn.00412590
call fcn.00417430
test eax, eax
je 0x4337bb
call fcn.004309c0
call fcn.00436210
inc esi
cmp esi, 4
jl 0x433780
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [esp + 0x1c], 0
cmp dword [esp + 0x28], 0
jne 0x4336c0
cmp dword [esp + 0x1c], 0
je 0x4339d4
mov esi, dword [esp + 0x1c]
cmp esi, 3
jge 0x433809
mov edx, 3
sub edx, esi
push edx
lea eax, [esp + esi + 0x18]
push 0
push eax
call fcn.0043fbd0
mov bl, byte [esp + 0x21]
add esp, 0xc
movzx eax, byte [esp + 0x14]
shr al, 2
push 0
mov byte [esp + 0x1c], al
call fcn.0043a6c4
mov al, byte [esp + 0x18]
and al, 3
mov cl, bl
shl al, 4
shr cl, 4
add al, cl
mov byte [esp + 0x1d], al
mov al, byte [esp + 0x1a]
and bl, 0xf
mov dl, al
add bl, bl
and al, 0x3f
add bl, bl
shr dl, 6
mov byte [esp + 0x1f], al
lea eax, [esi + 1]
add bl, dl
xor edi, edi
add esp, 4
mov byte [esp + 0x1a], bl
mov dword [esp + 0x24], edi
mov dword [esp + 0x2c], eax
test eax, eax
jle 0x433944
mov byte [esp + 0x23], 0
lea esp, [esp]
movzx esi, byte [esp + edi + 0x18]
cmp dword [esp + 0xbc], esi
ja 0x433883
call fcn.00438391
cmp dword [esp + 0xc0], 0x10
mov eax, dword [esp + 0xac]
jae 0x43389b
lea eax, [esp + 0xac]
mov bl, byte [eax + esi]
or eax, 0xffffffff
sub eax, dword [ebp + 0x14]
cmp eax, 1
ja 0x4338ae
call fcn.00438359
mov esi, dword [ebp + 0x14]
inc esi
cmp esi, 0xfffffffe
jbe 0x4338bc
call fcn.00438359
mov eax, dword [ebp + 0x18]
cmp eax, esi
jae 0x4338e7
mov ecx, dword [ebp + 0x14]
push ecx
push esi
mov ecx, ebp
call fcn.004034b0
test esi, esi
jbe 0x43391a
mov edi, dword [ebp + 0x14]
mov edx, 0x10
lea eax, [ebp + 4]
cmp dword [ebp + 0x18], edx
jb 0x433903
mov ecx, dword [eax]
jmp 0x433905
test esi, esi
jne 0x4338d1
mov dword [ebp + 0x14], esi
cmp eax, 0x10
jb 0x4338fb
mov eax, dword [ebp + 4]
mov byte [eax], 0
jmp 0x43391a
lea eax, [ebp + 4]
mov byte [eax], 0
jmp 0x43391a
mov ecx, eax
mov byte [ecx + edi], bl
mov dword [ebp + 0x14], esi
cmp dword [ebp + 0x18], edx
jb 0x433912
mov eax, dword [eax]
mov edi, dword [esp + 0x24]
mov byte [eax + esi], 0
lea eax, [esp + 0x23]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x433921
sub eax, edx
je 0x433931
call fcn.00430a50
inc edi
cmp edi, dword [esp + 0x2c]
mov dword [esp + 0x24], edi
jl 0x433870
mov esi, dword [esp + 0x1c]
cmp esi, 3
jge 0x4339d4
mov ebx, 3
sub ebx, dword [esp + 0x1c]
or edx, 0xffffffff
sub edx, dword [ebp + 0x14]
cmp edx, 1
ja 0x433966
call fcn.00438359
mov esi, dword [ebp + 0x14]
inc esi
cmp esi, 0xfffffffe
jbe 0x433974
call fcn.00438359
mov eax, dword [ebp + 0x18]
cmp eax, esi
jae 0x43399f
mov eax, dword [ebp + 0x14]
push eax
push esi
mov ecx, ebp
call fcn.004034b0
test esi, esi
jbe 0x4339cf
mov edx, dword [ebp + 0x14]
mov edi, 0x10
lea eax, [ebp + 4]
cmp dword [ebp + 0x18], edi
jb 0x4339bb
mov ecx, dword [eax]
jmp 0x4339bd
test esi, esi
jne 0x433989
mov dword [ebp + 0x14], esi
cmp eax, 0x10
jb 0x4339b3
mov eax, dword [ebp + 4]
mov byte [eax], 0
jmp 0x4339cf
lea eax, [ebp + 4]
mov byte [eax], 0
jmp 0x4339cf
mov ecx, eax
mov byte [ecx + edx], 0x3d
mov dword [ebp + 0x14], esi
cmp dword [ebp + 0x18], edi
jb 0x4339cb
mov eax, dword [eax]
mov byte [eax + esi], 0
sub ebx, 1
jne 0x433956
mov esi, 0x10
cmp dword [esp + 0xc0], esi
jb 0x4339f2
mov ecx, dword [esp + 0xac]
push ecx
call fcn.004393c9
add esp, 4
mov dword [esp + 0xc0], 0xf
mov dword [esp + 0xbc], 0
mov byte [esp + 0xac], 0
cmp dword [esp + 0xf0], esi
jb 0x433a29
mov edx, dword [esp + 0xdc]
push edx
call fcn.004393c9
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.00438dc1
add esp, 0xc0
ret 0x20