Function at 0x444950
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov dword [ebp - 0x28], 0xaa937b77
mov ecx, 0xaa937b77
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x24]
cmp ecx, 0xf6c5cd5a
jle 0x4449c2
cmp ecx, 0x3bc3b378
jg 0x4449f4
cmp ecx, 0x13d0c0b7
jle 0x444a9b
cmp ecx, 0x241b1475
je 0x444b5a
cmp ecx, 0x3a09e3b4
jne 0x444c49
shr edi, 0xa
lea eax, [edi + edi*4]
lea eax, [edi + eax*8]
add eax, 0xffffed6b
shr eax, 3
imul edi, eax, 0xc1
mov ecx, 0x724743a3
cmp edi, 0x61
jae 0x44496b
jmp 0x4449ea
cmp ecx, 0xd85c26d5
jg 0x444a40
cmp ecx, 0xaa937b76
jg 0x444aca
cmp ecx, 0x895cf966
je 0x444b6c
cmp ecx, 0xa076448d
jne 0x44496b
mov ecx, 0xeee9bf99
jmp 0x44496b
cmp ecx, 0x724743a2
jg 0x444b00
cmp ecx, 0x3bc3b379
je 0x444b85
cmp ecx, 0x64ee4232
jne 0x44496b
shr edi, 3
and edi, 0xfffffff
call fcn.00407949
mov ecx, 0x3bc3b379
cmp edi, 3
jae 0x444a35
mov ecx, 0x724743a3
add edi, 0xad
jmp 0x44496b
cmp ecx, 0xeb227f64
jg 0x444b2c
cmp ecx, 0xd85c26d6
je 0x444b9b
cmp ecx, 0xdd27e91b
jne 0x44496b
mov eax, dword [ebp - 0x14]
add eax, 0x13
shr eax, 0xc
mov edx, eax
imul edx, eax
imul ebx, edx, 0x1367
dec ebx
shl eax, 0xb
add eax, 0xfffa6800
mov dword [ebp - 0x14], eax
mov ecx, 0x64ee4232
cmp ebx, edx
je 0x44496b
mov ecx, 0x895cf966
jmp 0x44496b
cmp ecx, 0xf6c5cd5b
je 0x444bcd
cmp ecx, 0x845a74
jne 0x44496b
push dword [ebp - 0x18]
call fcn.0045d3c9
add esp, 4
mov ecx, 0x13d0c0b8
xor esi, esi
jmp 0x44496b
cmp ecx, 0xaa937b77
je 0x444bf2
cmp ecx, 0xc3501d22
jne 0x44496b
mov eax, dword [ebp - 0x14]
shl eax, 5
and eax, 0x3fffffe0
add eax, 0x73
mov dword [ebp - 0x14], eax
mov ecx, 0x13d0c0b8
mov esi, dword [ebp - 0x18]
jmp 0x44496b
cmp ecx, 0x724743a3
je 0x444c35
cmp ecx, 0x7e43d795
jne 0x44496b
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov ecx, 0xc3501d22
jmp 0x44496b
cmp ecx, 0xeb227f65
je 0x444b91
cmp ecx, 0xeee9bf99
jne 0x44496b
mov eax, dword [ebp - 0x20]
inc eax
push eax
call fcn.0045d774
add esp, 4
mov dword [ebp - 0x18], eax
mov ecx, 0xeb227f65
jmp 0x44496b
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov ecx, 0xd85c26d6
jmp 0x44496b
cmp dword [ebp - 0x30], 0
mov ecx, 0x845a74
je 0x44496b
mov ecx, 0x7e43d795
jmp 0x44496b
imul edi, edi, 0x9a
add edi, 0xffff7b62
mov ecx, 0x724743a3
jmp 0x44496b
mov eax, dword [ebp - 0x14]
shr eax, 0xa
lea eax, [eax + eax*4]
mov edx, eax
imul edx, eax
imul ebx, edx, 0x2027
shr eax, 0xf
dec ebx
mov dword [ebp - 0x14], eax
mov ecx, 0x241b1475
cmp edx, ebx
je 0x44496b
mov ecx, 0xa076448d
jmp 0x44496b
xor eax, eax
push eax
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x18]
push 1
push dword [ebp - 0x1c]
push dword [ebp + 8]
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov dword [ebp - 0x30], eax
mov ecx, 0xdd27e91b
jmp 0x44496b
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 8]
push ebx
call fcn.0045de60
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
xor esi, esi
push esi
push esi
push dword [ebp - 0x10]
push esi
push 1
push dword [ebp - 0x1c]
push ebx
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov ecx, 0x13d0c0b8
test eax, eax
je 0x44496b
mov ecx, 0x241b1475
jmp 0x44496b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov byte [ecx + eax], 0
mov ecx, 0xf6c5cd5b
jmp 0x44496b
cmp ecx, 0x13d0c0b8
jne 0x44496b
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x10]
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret