Function at 0x43a894
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x28
mov ebx, dword [esp + 0x3c]
mov dword [esp], 0x78a13529
mov esi, dword [esp + 0x18]
lea edi, [esp + 0xc]
mov ebp, dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov eax, dword [esp]
cmp eax, 0x1249dc0a
jle 0x43a923
cmp eax, 0x4034fc6b
jle 0x43a962
cmp eax, 0x6753933e
jg 0x43a9e7
cmp eax, 0x4034fc6c
je 0x43aa94
cmp eax, 0x4d070cd3
je 0x43aab0
cmp eax, 0x626988b8
jne 0x43a8b4
mov ecx, dword [esp + 4]
add ecx, 0xfffffffd
imul eax, ecx, 0xbf
imul ecx, ecx
imul edx, ecx, 0x6693
dec edx
mov dword [esp + 4], eax
mov eax, 0x9978191a
cmp ecx, edx
je 0x43abbd
mov eax, 0x3de22966
jmp 0x43abbd
cmp eax, 0xb1bedde2
jg 0x43a99a
cmp eax, 0xa5ae260e
jle 0x43aa09
cmp eax, 0xa5ae260f
je 0x43aaf1
cmp eax, 0xaa3358b0
je 0x43ab1b
cmp eax, 0xaeaab18d
jne 0x43a8b4
mov dword [esp], 0xc275a18f
jmp 0x43a8b4
cmp eax, 0x22eb69f5
jle 0x43aa33
cmp eax, 0x22eb69f6
je 0x43ab2f
cmp eax, 0x327a55ad
je 0x43ab3b
cmp eax, 0x3de22966
jne 0x43a8b4
mov dword [esp], 0xa5ae260f
jmp 0x43a8b4
cmp eax, 0xb8b656b7
jle 0x43aa5c
cmp eax, 0xb8b656b8
je 0x43ab6e
cmp eax, 0xc275a18f
je 0x43ab87
cmp eax, 0xd2d87be9
jne 0x43a8b4
imul eax, dword [esp + 4], 0x6180
add eax, 0x4c4a78
mov dword [esp + 4], eax
mov dword [esp], 0x6753933f
mov esi, dword [esp + 8]
jmp 0x43a8b4
cmp eax, 0x6a667c0f
je 0x43abac
cmp eax, 0x78a13529
jne 0x43ac17
mov dword [esp], 0xb8b656b8
jmp 0x43a8b4
cmp eax, 0x8b71f59c
je 0x43abc5
cmp eax, 0x9978191a
jne 0x43a8b4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov dword [esp], 0x626988b8
jmp 0x43a8b4
cmp eax, 0x1249dc0b
je 0x43abdb
cmp eax, 0x1e35e006
jne 0x43a8b4
mov eax, dword [esp + 0x1c]
mov byte [eax], 0
mov dword [esp], 0xb2a1aad2
jmp 0x43a8b4
cmp eax, 0xb1bedde3
je 0x43abff
cmp eax, 0xb2a1aad2
jne 0x43a8b4
xor eax, eax
push eax
push eax
push edi
push dword [esp + 0x14]
push 1
push dword [esp + 0x24]
push ebx
call ebp
mov dword [esp + 0x20], eax
mov dword [esp], 0x327a55ad
jmp 0x43a8b4
mov eax, dword [esp + 4]
shl eax, 0xe
add eax, 0x44150
mov dword [esp + 4], eax
mov dword [esp], 0xaa3358b0
jmp 0x43a8b4
mov eax, dword [esp + 4]
mov ecx, 0xffffff42
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x62b3
dec edx
shr eax, 2
and eax, 0x3ffff
imul eax, eax, 0x9c
mov dword [esp + 4], eax
mov eax, 0xc275a18f
cmp ecx, edx
je 0x43aae7
mov eax, 0x6753933f
mov dword [esp], eax
xor esi, esi
jmp 0x43a8b4
mov eax, dword [esp + 0x14]
inc eax
push eax
call fcn.0044f4f4
add esp, 4
mov dword [esp + 8], eax
mov eax, dword [esp + 0x14]
add eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
mov dword [esp], 0x1e35e006
jmp 0x43a8b4
mov eax, dword [esp + 0xc]
mov dword [esp + 0x24], eax
mov dword [esp], 0x22eb69f6
jmp 0x43a8b4
mov dword [esp], 0x8b71f59c
jmp 0x43a8b4
imul eax, dword [esp + 4], 0xf5
lea ecx, [eax - 0x19f]
imul ecx, ecx
lea eax, [eax*4 - 0x67c]
imul edx, ecx, 0x3d57
dec edx
mov dword [esp + 4], eax
mov eax, 0xb8b656b8
cmp ecx, edx
je 0x43abbd
mov eax, 0x6a667c0f
jmp 0x43abbd
push ebx
call fcn.0044fb70
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp], 0x1249dc0b
jmp 0x43a8b4
xor esi, esi
push esi
push esi
push edi
push esi
push 1
push dword [esp + 0x24]
push ebx
call ebp
mov ecx, 0x6753933f
test eax, eax
je 0x43aba4
mov ecx, 0x9978191a
mov dword [esp], ecx
jmp 0x43a8b4
cmp dword [esp + 0x20], 0
mov eax, 0xb1bedde3
je 0x43abbd
mov eax, 0x4034fc6c
mov dword [esp], eax
jmp 0x43a8b4
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x40]
mov dword [ecx], eax
mov dword [esp], 0xd2d87be9
jmp 0x43a8b4
mov eax, dword [esp + 4]
shl eax, 4
add eax, 0x1fff670
shr eax, 6
and eax, 0x7ffff
mov dword [esp + 4], eax
mov dword [esp], 0xaeaab18d
jmp 0x43a8b4
push dword [esp + 8]
call fcn.0044f149
add esp, 4
mov dword [esp], 0x4d070cd3
jmp 0x43a8b4
cmp eax, 0x6753933f
jne 0x43a8b4
mov dword [esp + 0x18], esi
mov eax, esi
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret