Function at 0x440f3c
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov ebp, dword [esp + 0x3c]
push ebp
call fcn.0045bb70
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp], 0xaa937b77
mov ebx, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
xor edi, edi
mov eax, dword [esp]
cmp eax, 0x6f0d1ec
jg 0x440fb8
cmp eax, 0xdd27e91a
jg 0x440ff0
cmp eax, 0xaa937b76
jle 0x441063
cmp eax, 0xaa937b77
je 0x4410d0
cmp eax, 0xc3501d22
je 0x44112d
cmp eax, 0xd85c26d6
jne 0x440f65
imul eax, dword [esp + 4], 0x328000
or eax, 0x99
mov dword [esp + 4], eax
mov dword [esp], 0xa076448d
jmp 0x440f65
cmp eax, 0x3bc3b378
jg 0x441028
cmp eax, 0x13d0c0b7
jle 0x441094
cmp eax, 0x13d0c0b8
je 0x441147
cmp eax, 0x241b1475
je 0x441181
cmp eax, 0x3a09e3b4
je 0x44127e
jmp 0x440f65
cmp eax, 0xeee9bf98
jle 0x4410dc
cmp eax, 0xeee9bf99
je 0x4411a6
cmp eax, 0xf6c5cd5b
je 0x4411b2
cmp eax, 0x845a74
jne 0x440f65
mov dword [esp], 0x13d0c0b8
jmp 0x440f65
cmp eax, 0x724743a2
jg 0x441106
cmp eax, 0x4da77fde
je 0x4411c7
cmp eax, 0x64ee4232
jne 0x441271
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov dword [esp], 0x3bc3b379
mov esi, dword [esp + 8]
jmp 0x440f65
cmp eax, 0x895cf966
je 0x4411ec
cmp eax, 0xa076448d
jne 0x440f65
cmp dword [esp + 0x20], 0
mov eax, 0x3bc3b379
je 0x44108a
mov eax, 0xeee9bf99
mov dword [esp], eax
xor esi, esi
jmp 0x440f65
cmp eax, 0x6f0d1ed
je 0x441208
cmp eax, 0xa3fe076
jne 0x440f65
shr ebx, 0x11
add ebx, 0xab
shr ebx, 9
add ebx, 0xffffffc5
push 0x1e7c
push ebx
call fcn.00440f3c
add esp, 8
push ebx
call fcn.004412cc
add esp, 4
mov dword [esp], 0x241b1475
jmp 0x440f65
cmp eax, 0xdd27e91b
je 0x441232
cmp eax, 0xeb227f65
jne 0x440f65
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov dword [esp], 0x724743a3
jmp 0x440f65
cmp eax, 0x724743a3
je 0x441265
cmp eax, 0x7e43d795
jne 0x440f65
shl dword [esp + 4], 0x13
mov dword [esp], 0x845a74
jmp 0x440f65
push dword [esp + 8]
call fcn.0045b0dc
add esp, 4
mov dword [esp], 0x3bc3b379
xor esi, esi
jmp 0x440f65
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov byte [ecx + eax], 0
push edi
push edi
lea eax, [esp + 0x14]
push eax
push dword [esp + 0x14]
push 1
push dword [esp + 0x24]
push ebp
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov ecx, 0xc3501d22
test eax, eax
je 0x441179
mov ecx, 0x64ee4232
mov dword [esp], ecx
jmp 0x440f65
push edi
push edi
lea eax, [esp + 0x14]
push eax
push edi
push 1
push dword [esp + 0x24]
push ebp
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov dword [esp + 0x20], eax
mov dword [esp], 0xd85c26d6
jmp 0x440f65
mov dword [esp], 0xeb227f65
jmp 0x440f65
mov eax, dword [esp + 0x14]
inc eax
mov dword [esp + 0x24], eax
mov dword [esp], 0xdd27e91b
jmp 0x440f65
lea eax, [ebx + ebx*8]
lea eax, [eax + eax*2]
add eax, ebx
add ebx, eax
add ebx, 0xffffff7b
push ebx
call fcn.004412cc
add esp, 4
mov eax, 0xeb227f65
cmp ebx, 0xe
jae 0x44122b
jmp 0x44125d
push dword [esp + 0x24]
call fcn.0045b484
add esp, 4
mov dword [esp + 8], eax
mov dword [esp], 0x7e43d795
jmp 0x440f65
imul ebx, ebx, 0xb90d9
shr ebx, 1
push ebx
push 0x635d
call fcn.004013e0
add esp, 8
mov eax, 0x241b1475
cmp ebx, 0xec
je 0x44125d
mov eax, 0xf6c5cd5b
jmp 0x44125d
mov eax, dword [esp + 4]
add eax, 0x25
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x3a7d
and eax, 0xfffffffe
shl eax, 0xb
dec edx
mov dword [esp + 4], eax
mov eax, 0xa076448d
cmp ecx, edx
je 0x44125d
mov eax, 0x895cf966
mov dword [esp], eax
jmp 0x440f65
mov dword [esp], 0xf6c5cd5b
jmp 0x440f65
cmp eax, 0x3bc3b379
jne 0x440f65
jmp 0x4412ba
mov edi, ebp
shl ebx, 0xb
mov ebp, ebx
add ebp, 0x69000
mov ebx, ebp
shr ebx, 0xa
push ebx
push 0x1090
call fcn.004013e0
add esp, 8
mov eax, 0xa3fe076
cmp ebp, 0x1d401
jae 0x4412b0
mov eax, 0x6f0d1ed
mov dword [esp], eax
mov ebp, edi
jmp 0x440f63
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], esi
mov eax, esi
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret