Function at 0x100063e0
Capabilities:
Decode data using base64 via winapi

Disassembly:
push 0xffffffffffffffff
push 0x100f1cbb
mov eax, dword fs:[0]
push eax
sub esp, 0xc2c
mov eax, dword [0x10139d00]
xor eax, esp
mov dword [esp + 0xc28], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10139d00]
xor eax, esp
push eax
lea eax, [esp + 0xc40]
mov dword fs:[0], eax
mov eax, dword [esp + 0xc54]
mov ebp, dword [esp + 0xc50]
push 0x800
xor ebx, ebx
lea edx, [esp + 0x40]
push ebx
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
call fcn.100d4cc0
add esp, 0xc
push 0x400
lea eax, [esp + 0x40]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str...360NetBase.dll
mov eax, 0x800
lea edi, [esp + 0x40]
call fcn.100044f0
mov edx, edi
push edx
call fcn.10007240
mov ecx, eax
call fcn.10007320
test eax, eax
je 0x1000666d
push 0x50
push ebx
push 0x101ded08
call fcn.100d4cc0
add esp, 0xc
call fcn.10007240
mov eax, dword [eax + 0x38]
cmp eax, ebx
je 0x1000666d
call eax
mov esi, eax
cmp esi, ebx
je 0x1000666d
call fcn.10007240
mov eax, dword [eax + 0xd4]
cmp eax, ebx
je 0x100064dd
push str.Cache_Control:_no_cache
push ebx
call eax
add esp, 8
mov edi, eax
jmp 0x100064df
xor edi, edi
push ebp
lea eax, [esp + 0x840]
push str.http:__inf.safe.360.cn_api_key_key_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
push 0x1388
push 0x9c
push esi
mov dword [esp + 0xc60], ebx
call fcn.100070d0
push 0x1388
push 0x9b
push esi
call fcn.100070d0
lea ecx, [esp + 0x860]
push ecx
push 0x2712
push esi
call fcn.100070d0
push ebx
push 0x34
push esi
call fcn.100070d0
push 1
push 0x50
push esi
call fcn.100070d0
add esp, 0x48
push edi
push 0x2727
push esi
call fcn.100070d0
push 0x10011630
push 0x4e2b
push esi
call fcn.100070d0
lea edx, [esp + 0x38]
push edx
push 0x2711
push esi
call fcn.100070d0
push ebx
push 0x51
push esi
call fcn.100070d0
push ebx
push 0x40
push esi
call fcn.100070d0
add esp, 0x3c
call fcn.10007240
mov eax, dword [eax + 0x40]
cmp eax, ebx
je 0x100065a6
push esi
call eax
add esp, 4
lea eax, [esp + 0x14]
push eax
push 0x200002
push esi
mov dword [esp + 0x20], ebx
call fcn.10007080
add esp, 0xc
test eax, eax
jne 0x10006659
cmp dword [esp + 0x14], 0xc8
jne 0x10006659
cmp dword [esp + 0x34], ebx
jbe 0x1000664c
mov eax, dword [esp + 0x24]
mov ebp, 0x10
cmp dword [esp + 0x38], ebp
jae 0x100065ec
lea eax, [esp + 0x24]
push str.null
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1000664c
mov edi, dword [esp + 0x1c]
mov ecx, dword [edi]
inc ecx
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
cmp esi, ebx
je 0x1000664c
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x38], ebp
jae 0x10006620
lea eax, [esp + 0x24]
push ebx
push ebx
push edi
push esi
push 1
push ebx
push eax
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov edx, dword [edi]
mov eax, dword [esp + 0x18]
push ebx
push ebx
push edx
push eax
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push esi
mov bl, 1
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea ecx, [esp + 0x20]
call fcn.10002cc0
mov al, bl
jmp 0x1000666f
cmp dword [esp + 0x38], 0x10
jb 0x1000666d
mov ecx, dword [esp + 0x24]
push ecx
call fcn.100d072d
add esp, 4
xor al, al
mov ecx, dword [esp + 0xc40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc28]
xor ecx, esp
call fcn.100d0738
add esp, 0xc38
ret 8