Function at 0x443c50
Capabilities:
Decode data using base64 via winapi

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], 0xaa937b77
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp eax, 0x76d9ca5
jle 0x443cd2
cmp eax, 0x3a09e3b3
jle 0x443d1b
cmp eax, 0x602deeae
jle 0x443dde
cmp eax, 0x724743a2
jg 0x443eca
cmp eax, 0x602deeaf
je 0x443f0f
cmp eax, 0x64ee4232
jne 0x443c66
imul edi, dword [ebp - 0x14], 0x10600
add edi, 0xcaaa00
and edi, 0xffffe000
mov dword [ebp - 0x14], edi
push edi
call fcn.004441a3
add esp, 4
push edi
push 0x2c63
call fcn.00401450
jmp 0x443fd7
cmp eax, 0xdd27e91a
jg 0x443d80
cmp eax, 0xc3501d21
jg 0x443e20
cmp eax, 0x895cf966
je 0x443f42
cmp eax, 0xa076448d
je 0x443f56
cmp eax, 0xaa937b77
jne 0x443c66
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x241b1475
jmp 0x443c66
cmp eax, 0x13d0c0b7
jg 0x443e55
cmp eax, 0x76d9ca6
je 0x443f90
cmp eax, 0xa3fe076
je 0x443fb7
cmp eax, 0x12caeac5
jne 0x443c66
mov eax, dword [ebp - 0x14]
add eax, 8
shr eax, 2
imul edi, eax, 0x97
add edi, 0xffffff62
mov dword [ebp - 0x14], edi
push edi
call fcn.004441a3
add esp, 4
mov eax, 0x895cf966
cmp edi, 0x5d
je 0x444180
mov eax, 0x1ceb96f1
jmp 0x444180
cmp eax, 0xf6c5cd5a
jg 0x443e7b
cmp eax, 0xdd27e91b
je 0x443fdc
cmp eax, 0xeb227f65
je 0x443ff3
cmp eax, 0xeee9bf99
jne 0x443c66
mov eax, dword [ebp - 0x1c]
shr eax, 6
mov ecx, eax
imul ecx, eax
shl eax, 4
imul edx, ecx, 0x7c61
dec edx
add eax, 0x20
mov dword [ebp - 0x1c], eax
mov eax, 0x13d0c0b8
cmp ecx, edx
je 0x444180
mov eax, 0xd85c26d6
jmp 0x444180
cmp eax, 0x3a09e3b4
je 0x444039
cmp eax, 0x3bc3b379
je 0x444064
cmp eax, 0x4da77fde
jne 0x443c66
mov eax, dword [ebp - 0x14]
shl eax, 0x14
mov dword [ebp - 0x14], eax
push eax
push 0x40f2
push 0xb07
call fcn.0042bb48
add esp, 0xc
jmp 0x444053
cmp eax, 0xc3501d22
je 0x444099
cmp eax, 0xccb8bb14
je 0x4440da
cmp eax, 0xd85c26d6
jne 0x443c66
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x724743a3
jmp 0x443c66
cmp eax, 0x13d0c0b8
je 0x444111
cmp eax, 0x1ceb96f1
je 0x44412e
cmp eax, 0x241b1475
je 0x444058
jmp 0x443c66
cmp eax, 0xf6c5cd5b
je 0x444141
cmp eax, 0x845a74
je 0x44415a
cmp eax, 0x6f0d1ed
jne 0x443c66
imul edi, dword [ebp - 0x14], 0x50b8000
add edi, 0x549781b9
mov dword [ebp - 0x14], edi
push edi
call fcn.004441a3
add esp, 4
push edi
call fcn.004441a3
add esp, 4
mov dword [ebp - 0x10], 0xccb8bb14
jmp 0x443c66
cmp eax, 0x724743a3
jne 0x444188
mov eax, dword [ebp - 0x1c]
shr eax, 1
imul ecx, eax, 0xd9
imul ecx, ecx
imul edx, ecx, 0x17ad
imul eax, eax, 0xbf92
add eax, 0xe2
dec edx
mov dword [ebp - 0x1c], eax
mov eax, 0xa3fe076
cmp ecx, edx
je 0x444180
mov eax, 0xeb227f65
jmp 0x444180
imul edi, dword [ebp - 0x14], 0x2e62f0
add edi, 0x2040cae0
mov dword [ebp - 0x14], edi
push edi
call fcn.004441a3
add esp, 4
push edi
push 0x34ad
call fcn.00443c50
add esp, 8
mov dword [ebp - 0x10], 0xd85c26d6
jmp 0x443c66
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x845a74
jmp 0x443c66
push ebx
call fcn.0045dbe0
add esp, 4
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
xor esi, esi
push esi
push esi
push dword [ebp - 0x18]
push esi
push 1
push dword [ebp - 0x24]
push ebx
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov ecx, 0x7e43d795
test eax, eax
je 0x444031
mov ecx, 0xeee9bf99
jmp 0x444031
mov ecx, dword [ebp - 0x14]
and ecx, 0xffffffe0
shl ecx, 4
mov dword [ebp - 0x14], ecx
mov eax, 0xd85c26d6
cmp ecx, 0xc1
jge 0x444180
mov eax, 0xa076448d
jmp 0x444180
mov edi, dword [ebp - 0x14]
shl edi, 7
or edi, 0x76
mov dword [ebp - 0x14], edi
push edi
call fcn.004441a3
add esp, 4
push 0x73d
push edi
call fcn.00443c50
add esp, 8
jmp 0x444058
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x7e43d795
mov esi, dword [ebp - 0x20]
jmp 0x443c66
mov eax, dword [ebp - 0x28]
inc eax
push eax
call fcn.0045d564
add esp, 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov byte [ecx + eax], 0
xor eax, eax
push eax
push eax
push dword [ebp - 0x18]
push dword [ebp - 0x20]
push 1
push dword [ebp - 0x24]
push ebx
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov ecx, 0xf6c5cd5b
test eax, eax
je 0x444031
mov ecx, 0x895cf966
mov dword [ebp - 0x10], ecx
jmp 0x443c66
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*2]
add eax, 0xffffffc5
mov dword [ebp - 0x14], eax
push 0x1b49
push eax
call fcn.00443c50
add esp, 8
call fcn.00444750
mov dword [ebp - 0x10], 0xa076448d
jmp 0x443c66
mov eax, dword [ebp - 0x14]
shr eax, 0xc
imul edi, eax, 0xee
add edi, 0xacec
shr edi, 9
mov dword [ebp - 0x14], edi
call fcn.00444750
mov eax, 0xa076448d
cmp edi, 0x7f
je 0x444180
mov eax, 0x3a09e3b4
jmp 0x444180
mov edi, dword [ebp - 0x14]
shl edi, 0xe
add edi, 0xffc5c000
and edi, 0xfff80000
add edi, 0xffffbe83
mov dword [ebp - 0x14], edi
push edi
push 0x6cf
call fcn.00401450
add esp, 8
mov eax, 0xa076448d
cmp edi, 0x69
jl 0x444180
mov eax, 0x64ee4232
jmp 0x444180
mov eax, dword [ebp - 0x14]
shr eax, 9
imul edi, eax, 0x16580
shr edi, 4
add edi, 0xffffff28
mov dword [ebp - 0x14], edi
push 0x5aeb
push edi
call fcn.00401450
add esp, 8
mov eax, 0x76d9ca6
cmp edi, 0x1a
jb 0x444180
mov eax, 0x602deeaf
jmp 0x444180
mov eax, dword [ebp - 0x14]
shl eax, 0xa
and eax, 0x1ffffc00
or eax, 0x5e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xc3501d22
jmp 0x443c66
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xeb227f65
jmp 0x443c66
push dword [ebp - 0x20]
call fcn.0045d1bc
add esp, 4
mov dword [ebp - 0x10], 0x7e43d795
xor esi, esi
jmp 0x443c66
mov eax, dword [ebp - 0x1c]
lea ecx, [eax - 0x6e]
imul ecx, ecx
imul edx, ecx, 0x2723
dec edx
add eax, 0x88
mov dword [ebp - 0x1c], eax
mov eax, 0x6f0d1ed
cmp ecx, edx
je 0x444180
mov eax, 0xdd27e91b
mov dword [ebp - 0x10], eax
jmp 0x443c66
cmp eax, 0x7e43d795
jne 0x443c66
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x18]
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret