Function at 0x432350
Capabilities:
Decode data using base64 via winapi
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a1439
mov eax, dword fs:[0]
push eax
sub esp, 0x294
mov eax, dword [0x4d0554]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x4c]
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x294], esi
call dword [sym.imp.FUSVCCLT.dll_public:_void___thiscall_CFCIFFAXRecvDataInfo::constructor_void_]
mov dword [ebp - 4], 0
test ebx, ebx
je 0x432723
cmp dword [ebp - 0x280], 0
je 0x432723
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x284], eax
test eax, eax
jne 0x4323e0
xor esi, esi
jmp 0x432408
mov ecx, eax
call fcn.0041d590
mov esi, eax
test esi, esi
je 0x432408
push 0
push 0
push dword [ebp - 0x284]
push esi
push 0xffffffffffffffff
push ebx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [edi + 0x216]
push eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.FUSVCCLT.dll_public:_enum__FCIF_RET___thiscall_CFCIFFAXRecvInfoBase::SetRegistId_char_const__]
push esi
lea ecx, [ebp - 0x4c]
call dword [sym.imp.FUSVCCLT.dll_public:_enum__FCIF_RET___thiscall_CFCIFFAXRecvDataInfo::SetFileName_char__]
push esi
call fcn.00439c20
add esp, 4
push 0
push 0x80
push 1
push 0
push 0
push 0x40000000
push dword [ebp - 0x280]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x284], eax
cmp eax, 0xffffffff
jne 0x43245e
mov ebx, 0x35
jmp 0x43272e
xor esi, esi
mov dword [ebp - 0x28c], esi
mov edx, dword [sym.imp.FUSVCCLT.dll_public:_void___thiscall_CFCIFFAXRecvDataInfo::SetOffset_int_]
lea ecx, [ebp - 0x4c]
push esi
call edx
xor esi, esi
lea eax, [ebp - 0x4c]
mov ebx, esi
push eax
lea eax, [edi + 0x2f4]
push eax
call dword [sym.imp.FUSVCCLT.dll_enum__FCIF_RET___cdecl_FCIFService::GetFAXRecvData_class_CFCIFTransportInfo___class_CFCIFFAXRecvDataInfo__]
mov ecx, dword [ebp - 0x294]
push eax
push str._RFT__FCIFService::GetFAXRecvData_Ret:_d
mov dword [ecx], eax
push dword [edi + 0x614]
call fcn.00437650
mov eax, dword [ebp - 0x294]
add esp, 0x14
mov edx, dword [eax]
test edx, edx
je 0x4324e6
push edx
call fcn.00436a80
test eax, eax
je 0x4325df
push 0xbb8
push dword [edi + 0x3c8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x4325d5
inc esi
cmp ebx, 5
jl 0x432474
mov ebx, 0x5c
jmp 0x432668
lea ecx, [ebp - 0x4c]
call dword [sym.imp.FUSVCCLT.dll_public:_enum__FCIF_FAXRECV_DATA_STATE___thiscall_CFCIFFAXRecvDataInfo::GetFaxRecvDataState_void_]
cmp eax, 3
ja case.default.0x4324f8
jmp dword [eax*4 + 0x432758]
lea ecx, [ebp - 0x4c]
xor ebx, ebx
call dword [sym.imp.FUSVCCLT.dll_public:_char____thiscall_CFCIFFAXRecvDataInfo::GetFileData_void_]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x29c], eax
call dword [sym.imp.FUSVCCLT.dll_public:_int___thiscall_CFCIFFAXRecvDataInfo::GetCDataSize_void_]
push eax
mov dword [ebp - 0x298], eax
call fcn.00439c25
mov esi, eax
add esp, 4
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x290], esi
test esi, esi
je 0x432636
push ebx
push ebx
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x288], eax
push ecx
push esi
push 1
push eax
push dword [ebp - 0x29c]
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x432619
mov esi, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ebp + 0xc]
lea eax, [esi + ecx]
cmp eax, edx
jbe 0x43257f
mov esi, edx
sub esi, ecx
push 0
lea eax, [ebp - 0x2a0]
push eax
push esi
push dword [ebp - 0x290]
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4325f3
push dword [ebp - 0x290]
call fcn.00439c20
mov esi, dword [ebp - 0x28c]
lea ecx, [ebp - 0x4c]
add esi, dword [ebp - 0x288]
add esp, 4
mov dword [ebp - 0x28c], esi
call dword [sym.imp.FUSVCCLT.dll_public:_bool___thiscall_CFCIFFAXRecvDataInfo::IsFileEnd_void_]
cmp al, 1
je 0x43267c
jmp 0x432466
mov ebx, 0x6b
jmp 0x432668
xor ebx, ebx
cmp edx, 0x198
setne bl
lea ebx, [ebx*2 + 0x5b]
jmp 0x432668
push esi
push str._RFT__WriteFile__d__Error
push dword [edi + 0x614]
call fcn.00437650
push dword [ebp - 0x290]
call fcn.00439c20
add esp, 0x10
mov ebx, 0x35
jmp 0x43267c
push str._RFT__CryptStringToBinary_Error
push dword [edi + 0x614]
call fcn.00437650
push esi
call fcn.00439c20
mov ebx, 0x6c
jmp 0x432679
push eax
push str._RFT__MemoryAlloc__d__Error
push dword [edi + 0x614]
call fcn.00437650
mov ebx, 0x6c
jmp 0x432679
mov ebx, 0x5e
jmp 0x432668
mov ebx, 0x5f
jmp 0x432668
mov ebx, 0x60
jmp 0x432668
mov ebx, 0x5d
push ebx
push str._RFT__DoWhileLoopBreak_Error_Ret:_d
push dword [edi + 0x614]
call fcn.00437650
add esp, 0xc
lea ecx, [ebp - 0x4c]
call dword [sym.imp.FUSVCCLT.dll_public:_bool___thiscall_CFCIFFAXRecvDataInfo::IsFileEnd_void_]
test al, al
mov edx, str.False
mov ecx, str.True
cmove ecx, edx
push ecx
push str._RFT__IsFileEnd_Ret:_s
push dword [edi + 0x614]
call fcn.00437650
add esp, 0xc
push dword [ebp - 0x284]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x280]
test ebx, ebx
jne 0x432706
push ebx
lea eax, [ebp - 0x27c]
xorps xmm0, xmm0
push eax
push esi
movlpd qword [ebp - 0x27c], xmm0
movlpd qword [ebp - 0x274], xmm0
movlpd qword [ebp - 0x26c], xmm0
call fcn.00452e95
cmp eax, 1
jne 0x432701
mov eax, dword [ebp + 0xc]
xor ecx, ecx
cmp eax, dword [ebp - 0x264]
jne 0x432701
cmp ecx, dword [ebp - 0x260]
je 0x43272e
mov ebx, 0x6c
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push esi
push str._RFT__DeleteFile__s_
push dword [edi + 0x614]
call fcn.00437650
add esp, 0xc
jmp 0x43272e
mov dword [esi], 0x258
mov ebx, 0x67
lea ecx, [ebp - 0x4c]
call dword [sym.imp.FUSVCCLT.dll_public:_void___thiscall_CFCIFFAXRecvDataInfo::destructor_void_]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00468009
mov esp, ebp
pop ebp
ret 0x10