Function at 0x43adc4
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x4c
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x1c], 0x78a13529
mov ebp, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], eax
lea edi, [esp + 0x2c]
mov esi, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov eax, dword [esp + 0x1c]
cmp eax, 0xedfbd3ce
jle 0x43ae35
cmp eax, 0x4034fc6b
jg 0x43ae89
cmp eax, 0x22eb69f5
jle 0x43af2a
cmp eax, 0x3de22965
jg 0x43b05a
cmp eax, 0x22eb69f6
je 0x43b113
cmp eax, 0x327a55ad
jne 0x43aded
mov dword [esp + 0x1c], 0xb1bedde3
jmp 0x43aded
cmp eax, 0xb1bedde2
jle 0x43aed5
cmp eax, 0xc275a18e
jle 0x43af65
cmp eax, 0xd2d87be8
jg 0x43b087
cmp eax, 0xc275a18f
je 0x43b132
cmp eax, 0xc37141f3
jne 0x43aded
shr ebp, 2
imul ebp, ebp, 0xdd
mov eax, 0xecb12a5f
cmp ebp, 0x67
jl 0x43b2f4
mov eax, 0x9978191a
jmp 0x43b2f4
cmp eax, 0x626988b7
jle 0x43afdb
cmp eax, 0x6a667c0e
jg 0x43b0b1
cmp eax, 0x626988b8
je 0x43b150
cmp eax, 0x6753933f
jne 0x43aded
imul ebp, ebp, 0x2e0
mov eax, 0xd2d87be9
cmp ebp, 0x6100
jb 0x43aecd
mov eax, 0x4131dcee
shr ebp, 8
jmp 0x43b2f4
cmp eax, 0xa5ae260e
jg 0x43b02c
cmp eax, 0x96f251b9
jle 0x43b0cc
cmp eax, 0x96f251ba
je 0x43b18f
cmp eax, 0x9978191a
jne 0x43aded
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call fcn.0044f6e4
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x28]
mov byte [ecx + eax], 0
mov dword [esp + 0x1c], 0xa5ae260f
jmp 0x43aded
cmp eax, 0xedfbd3cf
je 0x43b1ab
cmp eax, 0x1249dc0b
je 0x43b1c1
cmp eax, 0x1e35e006
jne 0x43aded
cmp dword [esp + 0x44], 0
mov eax, 0x6a667c0f
je 0x43b2f4
mov eax, 0x327a55ad
jmp 0x43b2f4
cmp eax, 0xb1bedde3
je 0x43b1fa
cmp eax, 0xb2a1aad2
je 0x43b20f
cmp eax, 0xb8b656b8
jne 0x43aded
mov dword [esp], ebx
call fcn.0044fd60
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
xor ecx, ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 0x24], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
mov dword [esp + 8], 1
call esi
sub esp, 0x1c
mov ecx, 0x8b71f59c
test eax, eax
je 0x43afd2
mov ecx, 0x1249dc0b
mov dword [esp + 0x1c], ecx
jmp 0x43aded
cmp eax, 0x4034fc6c
je 0x43b230
cmp eax, 0x4131dcee
je 0x43b30a
cmp eax, 0x4d070cd3
jne 0x43aded
shl ebp, 0x11
mov dword [esp + 4], ebp
mov dword [esp], 0x1f48
call fcn.0043adc4
mov dword [esp + 8], ebp
mov dword [esp + 4], 0x36fe
mov dword [esp], 0x128a
call fcn.00425eef
jmp 0x43b1b4
cmp eax, 0xa5ae260f
je 0x43b24e
cmp eax, 0xaa3358b0
je 0x43b271
cmp eax, 0xaeaab18d
jne 0x43aded
mov dword [esp + 0x1c], 0xc275a18f
jmp 0x43aded
cmp eax, 0x3de22966
je 0x43b27e
cmp eax, 0x3e41e8cd
jne 0x43aded
imul ebp, ebp, 0x3800000
add ebp, 0xff202780
and ebp, 0xffa02600
jmp 0x43b1b4
cmp eax, 0xd2d87be9
je 0x43b2a1
cmp eax, 0xecb12a5f
jne 0x43aded
imul ebp, ebp, 0x1c800
mov eax, 0x96f251ba
test ebp, ebp
jne 0x43b109
jmp 0x43b2f4
cmp eax, 0x6a667c0f
je 0x43b2cf
cmp eax, 0x78a13529
je 0x43b1b4
jmp 0x43aded
cmp eax, 0x81fa49ba
jne 0x43b2fd
lea ebp, [ebp*8 - 0x303]
mov dword [esp + 8], ebp
mov dword [esp + 4], 0x3d8
mov dword [esp], 0x6378
call fcn.00425eef
call fcn.00407e02
mov eax, 0xb8b656b8
cmp ebp, 0x4b
jb 0x43b2f4
mov eax, 0xc275a18f
jmp 0x43b2f4
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x64]
mov dword [ecx], eax
mov dword [esp + 0x1c], 0x8b71f59c
mov eax, dword [esp + 0x28]
mov dword [esp + 0x24], eax
jmp 0x43aded
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x1c], 0x3de22966
jmp 0x43aded
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
xor edx, edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
mov dword [esp], ebx
mov dword [esp + 8], 1
call esi
sub esp, 0x1c
mov dword [esp + 0x44], eax
mov dword [esp + 0x1c], 0x1e35e006
jmp 0x43aded
shl ebp, 6
add ebp, 0xfffd4000
and ebp, 0xfffff000
mov dword [esp + 0x1c], 0x9978191a
jmp 0x43aded
shl ebp, 0x11
add ebp, 0xffcf0000
mov dword [esp + 0x1c], 0xb8b656b8
jmp 0x43aded
mov ecx, dword [esp + 0x20]
mov eax, 0xffffff6d
add ecx, eax
shr ecx, 0xc
imul eax, ecx, 0x620
imul ecx, ecx
imul edx, ecx, 0x7a77
dec edx
mov dword [esp + 0x20], eax
mov eax, 0x6753933f
cmp edx, ecx
je 0x43b2f4
mov eax, 0xaeaab18d
jmp 0x43b2f4
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x48], eax
mov dword [esp + 0x1c], 0x4034fc6c
jmp 0x43aded
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.0044f33c
mov dword [esp + 0x1c], 0x8b71f59c
mov dword [esp + 0x24], 0
jmp 0x43aded
imul eax, dword [esp + 0x20], 0x10c00
add eax, 0xd69b29
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0xaa3358b0
jmp 0x43aded
mov eax, dword [esp + 0x20]
and eax, 0xfffffffc
shl eax, 0xa
imul eax, eax, 0x5e
add eax, 0xfffff20c
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x626988b8
jmp 0x43aded
mov dword [esp + 0x1c], 0x22eb69f6
jmp 0x43aded
mov eax, dword [esp + 0x20]
shr eax, 0xb
imul eax, eax, 0x364
add eax, 0xf6
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x9978191a
jmp 0x43aded
add ebp, ebp
add ebp, 0x1c8
mov dword [esp + 4], ebp
mov dword [esp], 0x33
call fcn.0043adc4
call fcn.0043bb3f
mov eax, 0x4d070cd3
cmp ebp, 0x72
jae 0x43b2f4
mov eax, 0xedfbd3cf
jmp 0x43b2f4
mov eax, dword [esp + 0x20]
add eax, 0x49
mov dword [esp + 0x20], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x20b
dec edx
mov eax, 0x1e35e006
cmp edx, ecx
je 0x43b2f4
mov eax, 0xb2a1aad2
mov dword [esp + 0x1c], eax
jmp 0x43aded
cmp eax, 0x8b71f59c
jne 0x43aded
jmp 0x43b351
mov esi, ebx
mov ebx, edi
shr ebp, 8
and ebp, 0xfffffff0
add ebp, 0xab0
mov dword [esp + 8], 0x44bb
mov dword [esp], 0x15a3
mov edi, 0x3e41e8cd
and ebp, 0x1ffc000
mov dword [esp + 4], ebp
je 0x43b33f
mov edi, 0xb8b656b8
call fcn.00425eef
mov dword [esp + 0x1c], edi
mov edi, ebx
mov ebx, esi
jmp 0x43ade7
mov dword [esp + 0x3c], ebp
mov eax, dword [esp + 0x24]
mov dword [esp + 0x38], eax
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret