Function at 0x102187de
Capabilities:
Contain obfuscated stackstrings
Encode data using base64 via winapi

Disassembly:
push 0x2e0
mov eax, 0x1024bcd4
call fcn.1021e371
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 0x14]
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
push eax
push 0
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x10218820
call fcn.102125e1
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x10219604
push dword [ebp - 0x14]
call fcn.10212b3b
lea ecx, [ebp - 0x14]
push ecx
push eax
push 0x40000001
push dword [ebx]
push edi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
mov ecx, esi
test eax, eax
jne 0x1021884c
push 0xffffffffffffffff
call fcn.1021698c
mov ecx, esi
jmp 0x10218810
push dword [ebp - 0x14]
call fcn.1021854f
push dword [0x10627740]
xor ebx, ebx
mov dword [ebp - 0xdc], 0x43385557
push ebx
sub esp, 0xc
mov dword [ebp - 0xd8], 0x3830524c
mov ecx, esp
mov dword [ebp - 0xd4], 0x74676e45
lea eax, [ebp - 0x19]
mov dword [ebp - 0xd0], 0x70344841
mov dword [ebp - 0xcc], 0x7345424e
push dword [ebp - 0x18]
mov dword [ebp - 0xc8], 0x4d387848
push eax
mov dword [ebp - 0xc4], 0x67556a46
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xc0], 0x75556a42
mov dword [ebp - 0xbc], 0x46415247
mov dword [ebp - 0xb8], 0x78414159
mov dword [ebp - 0xb4], 0x334a7945
mov dword [ebp - 0xb0], 0x55594443
mov dword [ebp - 0xac], 0x66386a50
mov dword [ebp - 0xa8], 0x4b6b7965
mov dword [ebp - 0xa4], 0x7a774364
mov dword [ebp - 0xa0], 0x36317948
mov dword [ebp - 0x9c], 0x64557762
mov dword [ebp - 0x98], 0x7351534f
mov dword [ebp - 0x94], 0x7063424a
mov dword [ebp - 0x90], 0x6d45794a
mov dword [ebp - 0x8c], 0x53775844
mov dword [ebp - 0x88], 0x34554248
mov dword [ebp - 0x84], 0x36494145
mov dword [ebp - 0x80], 0x3070674f
mov dword [ebp - 0x7c], 0x794a684c
mov dword [ebp - 0x78], 0x46634850
mov dword [ebp - 0x74], 0x6a70534a
mov dword [ebp - 0x70], 0x486b4449
mov dword [ebp - 0x6c], 0x31424748
mov dword [ebp - 0x68], 0x6f385447
mov dword [ebp - 0x64], 0x50387850
mov dword [ebp - 0x60], 0x6b415166
mov dword [ebp - 0x5c], 0x3473535a
mov dword [ebp - 0x58], 0x30417941
mov dword [ebp - 0x54], 0x7545684c
mov dword [ebp - 0x50], 0x3359784f
mov dword [ebp - 0x4c], 0x6973544a
mov dword [ebp - 0x48], 0x7a5a7843
mov dword [ebp - 0x44], 0x46306762
mov dword [ebp - 0x40], 0x6c4a694c
mov dword [ebp - 0x3c], 0x3356524f
mov dword [ebp - 0x38], 0x30596963
mov dword [ebp - 0x34], 0x68704248
mov dword [ebp - 0x30], 0x67745343
mov dword [ebp - 0x2c], 0x78687765
mov dword [ebp - 0x28], 0x56596a4e
mov dword [ebp - 0x24], 0x75746765
mov dword [ebp - 0x20], 0x41417750
mov word [ebp - 0x1c], 0x4941
mov byte [ebp - 0x1a], 0x77
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2c8]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], ebx
call fcn.1021b9b7
push eax
mov ecx, esi
call fcn.102169e4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.1021b7ff
cmp dword [ebp + 0x14], ebx
je 0x10219602
mov dword [ebp - 0xac], 0x65595863
mov dword [ebp - 0xa8], 0x47457a49
mov dword [ebp - 0xa4], 0x2b73444e
mov dword [ebp - 0xa0], 0x49557765
mov dword [ebp - 0x9c], 0x79637941
mov dword [ebp - 0x98], 0x6f386a49
mov dword [ebp - 0x94], 0x4a735164
mov dword [ebp - 0x90], 0x5a34534f
mov dword [ebp - 0x8c], 0x4745544a
mov dword [ebp - 0x88], 0x2b6f4446
mov dword [ebp - 0x84], 0x7067794a
mov dword [ebp - 0x80], 0x4b6f5363
mov dword [ebp - 0x7c], 0x36596844
mov dword [ebp - 0x78], 0x5541694a
mov dword [ebp - 0x74], 0x7a425142
mov dword [ebp - 0x70], 0x556b7a4f
mov dword [ebp - 0x6c], 0x6141794e
mov dword [ebp - 0x68], 0x796b6e41
mov dword [ebp - 0x64], 0x7a646762
mov dword [ebp - 0x60], 0x6e426d4e
mov dword [ebp - 0x5c], 0x744e7848
mov dword [ebp - 0x58], 0x6b734150
mov dword [ebp - 0x54], 0x764d7748
mov dword [ebp - 0x50], 0x64674841
mov dword [ebp - 0x4c], 0x656f514e
mov dword [ebp - 0x48], 0x41597847
mov dword [ebp - 0x44], 0x6e425344
mov dword [ebp - 0x40], 0x755a6d5a
mov dword [ebp - 0x3c], 0x70496945
mov dword [ebp - 0x38], 0x4c516d59
mov dword [ebp - 0x34], 0x7542584e
mov dword [ebp - 0x30], 0x6e427a4d
mov dword [ebp - 0x2c], 0x4438785a
mov dword [ebp - 0x28], 0x6835684e
mov dword [ebp - 0x24], 0x57775449
mov dword [ebp - 0x20], 0x4141414d
mov word [ebp - 0x1c], 0x4741
mov byte [ebp - 0x1a], 0x63
mov dword [ebp - 0x1cc], 0x73415861
mov dword [ebp - 0x1c8], 0x70674344
mov dword [ebp - 0x1c4], 0x5573444a
mov dword [ebp - 0x1c0], 0x33417747
mov dword [ebp - 0x1bc], 0x70786842
mov dword [ebp - 0x1b8], 0x4a63424e
mov dword [ebp - 0x1b4], 0x38494146
mov dword [ebp - 0x1b0], 0x43496742
mov dword [ebp - 0x1ac], 0x33305245
mov dword [ebp - 0x1a8], 0x6a425741
mov dword [ebp - 0x1a4], 0x394d534d
mov dword [ebp - 0x1a0], 0x70557744
mov dword [ebp - 0x19c], 0x3651475a
mov dword [ebp - 0x198], 0x6f314149
mov dword [ebp - 0x194], 0x70417a49
mov dword [ebp - 0x190], 0x68735248
mov dword [ebp - 0x18c], 0x78635244
mov dword [ebp - 0x188], 0x4b415749
mov dword [ebp - 0x184], 0x79744743
mov dword [ebp - 0x180], 0x2b497a59
mov dword [ebp - 0x17c], 0x6f46534e
mov dword [ebp - 0x178], 0x53346a4c
mov dword [ebp - 0x174], 0x6441794b
mov dword [ebp - 0x170], 0x56555264
mov dword [ebp - 0x16c], 0x7a306a48
mov dword [ebp - 0x168], 0x73595249
mov dword [ebp - 0x164], 0x6234424f
mov dword [ebp - 0x160], 0x48774366
mov dword [ebp - 0x15c], 0x4c41694b
mov dword [ebp - 0x158], 0x394d6d4e
mov dword [ebp - 0x154], 0x67496942
mov dword [ebp - 0x150], 0x3935684e
mov dword [ebp - 0x14c], 0x3067414b
mov dword [ebp - 0x148], 0x4b41534c
mov dword [ebp - 0x144], 0x5173674e
mov dword [ebp - 0x140], 0x546f794f
mov dword [ebp - 0x13c], 0x48457a4f
mov dword [ebp - 0x138], 0x3235524f
mov dword [ebp - 0x134], 0x6455784b
mov dword [ebp - 0x130], 0x4759524f
mov dword [ebp - 0x12c], 0x6a30694d
mov dword [ebp - 0x128], 0x2b59514c
mov dword [ebp - 0x124], 0x4d776942
push ebx
sub esp, 0xc
mov dword [ebp - 0x120], 0x6551424b
mov ecx, esp
mov dword [ebp - 0x11c], 0x4e593341
lea eax, [ebp - 0x19]
mov dword [ebp - 0x118], 0x774e7743
mov dword [ebp - 0x114], 0x55734144
push dword [ebp - 0x18]
mov dword [ebp - 0x110], 0x7578414d
push eax
mov dword [ebp - 0x10c], 0x3278674f
lea eax, [ebp - 0xac]
mov dword [ebp - 0x108], 0x4e636a4d
mov dword [ebp - 0x104], 0x446b5362
mov dword [ebp - 0x100], 0x32776a45
mov dword [ebp - 0xfc], 0x374d7841
mov dword [ebp - 0xf8], 0x4e344365
mov dword [ebp - 0xf4], 0x32516842
mov dword [ebp - 0xf0], 0x73516945
mov dword [ebp - 0xec], 0x556f4442
mov dword [ebp - 0xe8], 0x33306d49
mov dword [ebp - 0xe4], 0x41414141
mov word [ebp - 0xe0], 0x5172
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2d4]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.1021b9b7
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0xde]
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x1cc]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2c8]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1021b9b7
push eax
mov ecx, esi
call fcn.102169e4
lea ecx, [ebp - 0x2c8]
call fcn.1021b7ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.1021b7ff
mov dword [ebp - 0xdc], 0x63635863
mov dword [ebp - 0xd8], 0x6577684b
mov dword [ebp - 0xd4], 0x71644143
mov dword [ebp - 0xd0], 0x41414147
mov dword [ebp - 0xcc], 0x4b4d6a4b
mov dword [ebp - 0xc8], 0x626f334c
mov dword [ebp - 0xc4], 0x754d6a4a
mov dword [ebp - 0xc0], 0x7930434f
mov dword [ebp - 0xbc], 0x74304164
mov dword [ebp - 0xb8], 0x6763534d
mov dword [ebp - 0xb4], 0x32345359
mov dword [ebp - 0xb0], 0x53594346
mov dword [ebp - 0xac], 0x66457843
mov dword [ebp - 0xa8], 0x736c5344
mov dword [ebp - 0xa4], 0x30454466
mov dword [ebp - 0xa0], 0x7173424b
mov dword [ebp - 0x9c], 0x6e637745
mov dword [ebp - 0x98], 0x62776846
mov dword [ebp - 0x94], 0x54344343
mov dword [ebp - 0x90], 0x3049534a
mov dword [ebp - 0x8c], 0x6f596959
mov dword [ebp - 0x88], 0x6e49794c
mov dword [ebp - 0x84], 0x2f497759
mov dword [ebp - 0x80], 0x76386a66
mov dword [ebp - 0x7c], 0x5645524e
mov dword [ebp - 0x78], 0x3363524d
mov dword [ebp - 0x74], 0x2f386e64
mov dword [ebp - 0x70], 0x3763524a
mov dword [ebp - 0x6c], 0x6773674e
mov dword [ebp - 0x68], 0x66674842
mov dword [ebp - 0x64], 0x4f49424f
mov dword [ebp - 0x60], 0x626f524e
mov dword [ebp - 0x5c], 0x74637741
mov dword [ebp - 0x58], 0x37677849
mov dword [ebp - 0x54], 0x4d45784f
mov dword [ebp - 0x50], 0x52594449
mov dword [ebp - 0x4c], 0x62677a46
mov dword [ebp - 0x48], 0x6141695a
mov dword [ebp - 0x44], 0x4a556a4c
mov dword [ebp - 0x40], 0x6e4a7862
mov dword [ebp - 0x3c], 0x3255684e
mov dword [ebp - 0x38], 0x7041544b
mov dword [ebp - 0x34], 0x526f7850
mov dword [ebp - 0x30], 0x30384449
mov dword [ebp - 0x2c], 0x4477334c
mov dword [ebp - 0x28], 0x7a646a47
mov dword [ebp - 0x24], 0x6b566763
mov dword [ebp - 0x20], 0x41414147
mov word [ebp - 0x1c], 0x4941
mov byte [ebp - 0x1a], 0x73
mov dword [ebp - 0x1ec], 0x4f637965
mov dword [ebp - 0x1e8], 0x6c555250
mov dword [ebp - 0x1e4], 0x36776849
mov dword [ebp - 0x1e0], 0x6f30774b
mov dword [ebp - 0x1dc], 0x5863774b
mov dword [ebp - 0x1d8], 0x32424341
mov dword [ebp - 0x1d4], 0x59386a4e
mov dword [ebp - 0x1d0], 0x6f49684d
mov dword [ebp - 0x1cc], 0x6f416a4a
mov dword [ebp - 0x1c8], 0x464d5248
mov dword [ebp - 0x1c4], 0x63777846
mov dword [ebp - 0x1c0], 0x5a597742
mov dword [ebp - 0x1bc], 0x6545544a
mov dword [ebp - 0x1b8], 0x36634364
mov dword [ebp - 0x1b4], 0x314e5344
mov dword [ebp - 0x1b0], 0x6163484c
mov dword [ebp - 0x1ac], 0x66635764
mov dword [ebp - 0x1a8], 0x4a6f4266
mov dword [ebp - 0x1a4], 0x54774148
mov dword [ebp - 0x1a0], 0x41414147
mov dword [ebp - 0x19c], 0x694a7a48
mov dword [ebp - 0x198], 0x6e565141
mov dword [ebp - 0x194], 0x50344449
mov dword [ebp - 0x190], 0x7334444f
mov dword [ebp - 0x18c], 0x4f497750
mov dword [ebp - 0x188], 0x4d556744
mov dword [ebp - 0x184], 0x376f4446
mov dword [ebp - 0x180], 0x37344359
mov dword [ebp - 0x17c], 0x7a68474b
mov dword [ebp - 0x178], 0x71497759
mov dword [ebp - 0x174], 0x67304859
mov dword [ebp - 0x170], 0x6f426d4b
mov dword [ebp - 0x16c], 0x714d4159
mov dword [ebp - 0x168], 0x31345848
mov dword [ebp - 0x164], 0x33464349
mov dword [ebp - 0x160], 0x4363514d
mov dword [ebp - 0x15c], 0x586f7762
mov dword [ebp - 0x158], 0x776b3347
mov dword [ebp - 0x154], 0x2b685749
mov dword [ebp - 0x150], 0x48637947
mov dword [ebp - 0x14c], 0x54414847
mov dword [ebp - 0x148], 0x79596d44
mov dword [ebp - 0x144], 0x2b737a49
mov dword [ebp - 0x140], 0x38385141
mov dword [ebp - 0x13c], 0x77515841
mov dword [ebp - 0x138], 0x676b6a41
push ebx
sub esp, 0xc
mov dword [ebp - 0x134], 0x6739684a
mov ecx, esp
mov dword [ebp - 0x130], 0x78314361
lea eax, [ebp - 0x19]
mov dword [ebp - 0x12c], 0x33497946
mov dword [ebp - 0x128], 0x6a5a6845
push dword [ebp - 0x18]
mov dword [ebp - 0x124], 0x2b497a42
push eax
mov dword [ebp - 0x120], 0x2b514466
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x11c], 0x2b6f784d
mov dword [ebp - 0x118], 0x68457750
mov dword [ebp - 0x114], 0x6951424a
mov dword [ebp - 0x110], 0x32705843
mov dword [ebp - 0x10c], 0x2f675445
mov dword [ebp - 0x108], 0x5a347a59
mov dword [ebp - 0x104], 0x334d5243
mov dword [ebp - 0x100], 0x2b4d4448
mov dword [ebp - 0xfc], 0x7142534c
mov dword [ebp - 0xf8], 0x5045674b
mov dword [ebp - 0xf4], 0x5730334d
mov dword [ebp - 0xf0], 0x68526e44
mov dword [ebp - 0xec], 0x67307a4f
mov dword [ebp - 0xe8], 0x586f424b
mov dword [ebp - 0xe4], 0x41414141
mov word [ebp - 0xe0], 0x5178
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2c8]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 3
call fcn.1021b9b7
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0xde]
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x1ec]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2d4]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.1021b9b7
push eax
mov ecx, esi
call fcn.102169e4
lea ecx, [ebp - 0x2d4]
call fcn.1021b7ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.1021b7ff
mov dword [ebp - 0x2bc], 0x59635863
mov dword [ebp - 0x2b8], 0x6f567a50
mov dword [ebp - 0x2b4], 0x6f73684d
mov dword [ebp - 0x2b0], 0x75747a4a
mov dword [ebp - 0x2ac], 0x6d594265
mov dword [ebp - 0x2a8], 0x67384448
mov dword [ebp - 0x2a4], 0x686c5263
mov dword [ebp - 0x2a0], 0x7a555241
mov dword [ebp - 0x29c], 0x7630684c
mov dword [ebp - 0x298], 0x52304743
push ebx
sub esp, 0xc
mov dword [ebp - 0x294], 0x54773342
mov ecx, esp
mov dword [ebp - 0x290], 0x376f6a45
lea eax, [ebp - 0x231]
mov dword [ebp - 0x28c], 0x4c6b5450
mov dword [ebp - 0x288], 0x4a386e43
push dword [ebp - 0x18]
mov dword [ebp - 0x284], 0x50494249
push eax
mov dword [ebp - 0x280], 0x416f4146
lea eax, [ebp - 0x2bc]
mov dword [ebp - 0x27c], 0x59554746
mov dword [ebp - 0x278], 0x49414242
mov dword [ebp - 0x274], 0x56386a64
mov dword [ebp - 0x270], 0x4e556765
mov dword [ebp - 0x26c], 0x334e5442
mov dword [ebp - 0x268], 0x596f5745
mov dword [ebp - 0x264], 0x764a6749
mov dword [ebp - 0x260], 0x67645146
mov dword [ebp - 0x25c], 0x53497845
mov dword [ebp - 0x258], 0x3659444b
mov dword [ebp - 0x254], 0x62307a4d
mov dword [ebp - 0x250], 0x68597747
mov dword [ebp - 0x24c], 0x68494246
mov dword [ebp - 0x248], 0x71645449
mov dword [ebp - 0x244], 0x796b5159
mov dword [ebp - 0x240], 0x6746674c
mov dword [ebp - 0x23c], 0x326f434b
mov dword [ebp - 0x238], 0x41415159
mov word [ebp - 0x234], 0x4741
mov byte [ebp - 0x232], 0x45
mov dword [ebp - 0x230], 0x436f7766
mov dword [ebp - 0x22c], 0x78774263
mov dword [ebp - 0x228], 0x4e775347
mov dword [ebp - 0x224], 0x5351444a
mov dword [ebp - 0x220], 0x78774342
mov dword [ebp - 0x21c], 0x376c5444
mov dword [ebp - 0x218], 0x4a557943
mov dword [ebp - 0x214], 0x62496d4e
mov dword [ebp - 0x210], 0x2f746743
mov dword [ebp - 0x20c], 0x6e52444f
mov dword [ebp - 0x208], 0x32386a47
mov dword [ebp - 0x204], 0x34637743
mov dword [ebp - 0x200], 0x76594166
mov dword [ebp - 0x1fc], 0x6530584b
mov dword [ebp - 0x1f8], 0x6d457765
mov dword [ebp - 0x1f4], 0x41414141
mov word [ebp - 0x1f0], 0x414c
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2ec]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov dword [ebp - 4], 5
call fcn.1021b9b7
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0x1ee]
mov ecx, esp
push dword [ebp - 0x18]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0x230]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1020f1e0
lea eax, [ebp - 0x2e0]
push eax
call fcn.102122eb
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.1021b9b7
push eax
mov ecx, esi
call fcn.102169e4
lea ecx, [ebp - 0x2e0]
call fcn.1021b7ff
lea ecx, [ebp - 0x2ec]
call fcn.1021b7ff
xor eax, eax
call fcn.1021e31b
ret