Function at 0x439a38
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], 0x78a13529
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov esi, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov eax, dword [ebp - 0x10]
cmp eax, 0xedfbd3ce
jle 0x439aa0
cmp eax, 0x4034fc6b
jg 0x439b10
cmp eax, 0x22eb69f5
jle 0x439baf
cmp eax, 0x3de22965
jg 0x439cbd
cmp eax, 0x22eb69f6
je 0x439d4c
cmp eax, 0x327a55ad
jne 0x439a5a
mov dword [ebp - 0x10], 0xaa3358b0
jmp 0x439a5a
cmp eax, 0xb1bedde2
jle 0x439b51
cmp eax, 0xc275a18e
jle 0x439c1c
cmp eax, 0xd2d87be8
jg 0x439cde
cmp eax, 0xc275a18f
je 0x439d6d
cmp eax, 0xc37141f3
jne 0x439a5a
add edi, 0xd9
shr edi, 3
sub esp, 0xc
mov dword [esp], edi
mov dword [esp + 8], 0x392
mov dword [esp + 4], 0x5c44
call fcn.004250b7
add esp, 0xc
mov eax, 0xecb12a5f
cmp edi, 0xc6
jne 0x439f6f
jmp 0x439f74
cmp eax, 0x6753933e
jg 0x439c5a
cmp eax, 0x4d070cd2
jle 0x439d08
cmp eax, 0x4d070cd3
je 0x439d79
cmp eax, 0x626988b8
jne 0x439a5a
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xb2a1aad2
jmp 0x439a5a
cmp eax, 0xa5ae260e
jg 0x439c8d
cmp eax, 0x81fa49ba
je 0x439ff4
cmp eax, 0x8b71f59c
je 0x439dc3
cmp eax, 0x9978191a
jne 0x439a5a
mov eax, dword [ebp - 0x14]
add eax, 0x6c
shr eax, 0x15
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x35c5
dec edx
shl eax, 3
mov dword [ebp - 0x14], eax
mov eax, 0x8b71f59c
cmp edx, ecx
je 0x439f74
mov eax, 0xc275a18f
jmp 0x439f74
cmp eax, 0xedfbd3cf
je 0x439dfd
cmp eax, 0x1249dc0b
je 0x439e4c
cmp eax, 0x1e35e006
jne 0x439a5a
mov eax, dword [ebp - 0x34]
mov byte [eax], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
sub esp, 0x1c
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
xor eax, eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], 1
call esi
mov ecx, 0x6a667c0f
test eax, eax
je 0x439ef2
mov ecx, 0xb1bedde3
jmp 0x439ef2
cmp eax, 0xb1bedde3
je 0x439e8f
cmp eax, 0xb2a1aad2
je 0x439ec5
cmp eax, 0xb8b656b8
jne 0x439a5a
sub esp, 4
mov dword [esp], ebx
call fcn.0044e5a0
add esp, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xaeaab18d
jmp 0x439a5a
cmp eax, 0x6753933f
je 0x439efa
cmp eax, 0x6a667c0f
je 0x439f2c
cmp eax, 0x78a13529
jne 0x439a5a
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb8b656b8
jmp 0x439a5a
cmp eax, 0xa5ae260f
je 0x439f49
cmp eax, 0xaa3358b0
je 0x439f7c
cmp eax, 0xaeaab18d
jne 0x439a5a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], 0x1249dc0b
jmp 0x439a5a
cmp eax, 0x3de22966
je 0x439f98
cmp eax, 0x3e41e8cd
jne 0x439a5a
add edi, 0x7c
shr edi, 0x16
jmp 0x439fcd
cmp eax, 0xd2d87be9
je 0x439fc1
cmp eax, 0xecb12a5f
jne 0x439a5a
shr edi, 1
imul edi, edi, 0x1a1b0
mov dword [ebp - 0x10], 0x1e35e006
jmp 0x439a5a
cmp eax, 0x4131dcee
jne 0x439fe7
add edi, 0x2c
call fcn.004079ef
sub esp, 8
mov dword [esp], edi
mov dword [esp + 4], 0x2eae
call fcn.00439a38
add esp, 8
mov eax, 0x626988b8
cmp edi, 0xc9
je 0x439f74
mov eax, 0x3e41e8cd
jmp 0x439f74
mov eax, dword [ebp - 0x14]
shl eax, 0x12
add eax, 0x3540000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4034fc6c
mov dword [ebp - 0x1c], 0
jmp 0x439a5a
mov dword [ebp - 0x10], 0x3de22966
jmp 0x439a5a
shr edi, 3
and edi, 0xfffffffe
imul eax, edi, 0xe7
add eax, 0xfffffff4
shr eax, 0xd
imul edi, eax, 0x2a
sub esp, 4
mov dword [esp], edi
call fcn.0043a04a
sub esp, 8
mov dword [esp], edi
mov dword [esp + 8], 0x4655
mov dword [esp + 4], 0x2d35
call fcn.004250b7
add esp, 0xc
mov dword [ebp - 0x10], 0x1249dc0b
jmp 0x439a5a
add edi, 0x32
shr edi, 6
imul edi, edi, 0x3c27
sub esp, 4
mov dword [esp], edi
call fcn.0043a04a
add esp, 4
call fcn.004079ef
mov eax, 0x1249dc0b
cmp edi, 0xed
jl 0x439f74
mov eax, 0x6753933f
jmp 0x439f74
add edi, 0x66
sub esp, 0xc
mov dword [esp + 8], edi
mov dword [esp + 4], 0x4047
mov dword [esp], 0x58f7
call fcn.004250b7
mov dword [esp + 4], edi
mov dword [esp + 8], 0x2e4f
mov dword [esp], 0x43ef
call fcn.004250b7
add esp, 0xc
mov eax, 0x4131dcee
cmp edi, 0xe6
jae 0x439f6f
jmp 0x439f74
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
sub esp, 0x1c
xor edx, edx
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov dword [ebp - 0x1c], 0
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp], ebx
mov dword [esp + 8], 1
call esi
mov ecx, 0x4034fc6c
test eax, eax
je 0x439ef2
mov ecx, 0x9978191a
jmp 0x439ef2
mov eax, dword [ebp - 0x14]
mov ecx, 0x9b
add eax, ecx
imul ecx, eax, 0xfb0
imul eax, eax
imul edx, eax, 0x12c1
shr ecx, 9
dec edx
add ecx, 0xda
mov dword [ebp - 0x14], ecx
mov ecx, 0x3de22966
cmp edx, eax
je 0x439ef2
mov ecx, 0x327a55ad
jmp 0x439ef2
imul ecx, dword [ebp - 0x14], 0x2a3a
mov eax, ecx
shr eax, 0xa
imul eax, eax
shr ecx, 0x14
and ecx, 0xfffffffc
imul edx, eax, 0x1e1
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xedfbd3cf
cmp edx, eax
je 0x439ef2
mov ecx, 0x1e35e006
mov dword [ebp - 0x10], ecx
jmp 0x439a5a
and edi, 0xffffffe0
sub esp, 0xc
mov dword [esp + 8], edi
mov dword [esp + 4], 0x56c
mov dword [esp], 0x4ec4
call fcn.004250b7
add esp, 0xc
mov eax, 0xd2d87be9
cmp edi, 0x52
jae 0x439f74
mov eax, 0x4d070cd3
jmp 0x439f74
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.0044db0c
add esp, 4
mov dword [ebp - 0x10], 0x22eb69f6
jmp 0x439a5a
mov eax, dword [ebp - 0x14]
shr eax, 0xd
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x3e23
shl eax, 4
add eax, 0x400
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x3de22966
cmp edx, ecx
je 0x439f74
mov eax, 0x626988b8
mov dword [ebp - 0x10], eax
jmp 0x439a5a
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x4034fc6c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jmp 0x439a5a
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
inc eax
sub esp, 4
mov dword [esp], eax
call fcn.0044deb4
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xa5ae260f
jmp 0x439a5a
imul edi, edi, 0x2e32
add edi, 0xa4a4b
sub esp, 4
mov dword [esp], edi
call fcn.0043a04a
add esp, 4
mov dword [ebp - 0x10], 0xb8b656b8
jmp 0x439a5a
cmp eax, 0x4034fc6c
jne 0x439a5a
jmp 0x43a036
mov esi, ebx
shl edi, 6
add edi, 0x9c800
call fcn.0043a608
sub esp, 8
mov dword [esp + 4], 0x810
mov ebx, 0xc37141f3
and edi, 0xfffff800
mov dword [esp], edi
je 0x43a024
mov ebx, 0x3de22966
call fcn.00439a38
add esp, 8
mov dword [ebp - 0x10], ebx
mov ebx, esi
jmp 0x439a54
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret