Function at 0x44bfe0
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
mov eax, ecx
mov esi, edx
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 8], eax
push ecx
mov eax, dword [eax + 4]
xor ebx, ebx
push eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.ntdll.dll_RtlEnumerateGenericTableWithoutSplayingAvl]
test eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], eax
setne byte [ebp - 0x24]
test eax, eax
je 0x44c260
push 0x4023e0
push 0x10
call fcn.00461ec5
mov edi, dword [esi]
mov dword [ebp - 0x14], eax
pop ecx
pop ecx
cmp edi, eax
je 0x44c041
push edi
call fcn.00447100
mov edi, dword [ebp - 0x14]
mov dword [esi], edi
test edi, edi
jne 0x44c04c
mov eax, 0x425fac
jmp 0x44c0bc
mov ecx, dword [ebp - 8]
xor eax, eax
stosd dword es:[edi], eax
xor edx, edx
mov dword [ebp - 0x14], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x18]
mov edi, dword [eax]
mov al, byte [ecx + 8]
lea ecx, [ebp - 0x14]
test al, al
mov dword [ebp - 0x20], edi
push ecx
sete dl
mov byte [ebp - 1], al
dec edx
mov ecx, edi
and edx, 0xffffffec
add edx, 0x2d
call fcn.0043efe7
mov esi, eax
test esi, esi
jns 0x44c08c
mov eax, 0x425fc0
jmp 0x44c0c1
xor eax, eax
cmp byte [ebp - 1], al
push 0x4023e0
sete al
dec eax
and eax, 0xfffffff0
add eax, 0x20
push eax
call fcn.00462078
mov edx, dword [ebp - 0x1c]
pop ecx
pop ecx
mov ecx, dword [edx]
mov dword [ecx + 0xc], eax
mov ecx, dword [edx]
cmp dword [ecx + 0xc], ebx
jne 0x44c0c8
mov eax, 0x42601c
mov esi, 0x8007000e
push ebx
push eax
jmp 0x44c1d7
mov esi, dword [ebp - 8]
xor eax, eax
push ebx
push ebx
cmp byte [esi + 8], al
sete al
dec eax
and eax, 0xfffffff0
add eax, 0x20
mov dword [ecx + 4], eax
xor eax, eax
cmp byte [esi + 8], al
lea ecx, [ebp - 0xc]
push ecx
sete al
dec eax
and eax, 0xfffffff0
add eax, 0x20
mov dword [ebp - 0xc], eax
mov eax, dword [edx]
push dword [eax + 0xc]
push 1
push dword [ebp - 0x14]
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
jne 0x44c158
call fcn.0043eac5
mov esi, eax
cmp esi, 0x800700ea
jne 0x44c132
mov ecx, dword [ebp - 8]
xor eax, eax
mov edx, 0x426750
cmp byte [ecx + 8], al
sete al
dec eax
and eax, 0xfffffff0
add eax, 0x20
jmp 0x44c13a
mov eax, dword [ebp - 0x20]
mov edx, 0x426698
push eax
push edx
push esi
push ebx
call fcn.0043b918
add esp, 0x10
test esi, esi
jns 0x44c278
mov edx, 0x4b3
jmp 0x44c26a
xor eax, eax
cmp byte [esi + 8], al
sete al
dec eax
and eax, 0xfffffff0
add eax, 0x20
cmp dword [ebp - 0xc], eax
je 0x44c188
push eax
push dword [ebp - 0xc]
push 0x4265f8
push ebx
call fcn.0043b96c
add esp, 0x10
mov edx, 0x4b9
jmp 0x44c265
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
mov edi, dword [eax + 4]
lea eax, [ebp - 0x18]
push eax
push 0x2d
pop edx
mov ecx, edi
call fcn.0043efe7
mov esi, eax
test esi, esi
jns 0x44c1ad
push ebx
push 0x426038
jmp 0x44c1d7
push 0x4023e0
push 0x20
pop esi
push esi
call fcn.00462078
mov edx, dword [ebp - 0x1c]
pop ecx
pop ecx
push ebx
mov ecx, dword [edx]
mov dword [ecx + 8], eax
mov eax, dword [edx]
cmp dword [eax + 8], ebx
jne 0x44c1e5
push 0x42609c
mov esi, 0x8007000e
mov edx, esi
mov cl, 1
call fcn.0043b847
jmp 0x44c278
mov dword [eax], esi
lea ecx, [ebp - 0x10]
mov eax, dword [edx]
push ebx
push ecx
mov dword [ebp - 0x10], esi
push dword [eax + 8]
push 1
push dword [ebp - 0x18]
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
jne 0x44c242
call fcn.0043eac5
mov esi, eax
mov eax, 0x800700ea
cmp esi, eax
jne 0x44c227
push 0x20
push 0x426578
push eax
push ebx
call fcn.0043b918
add esp, 0x10
jmp 0x44c23b
push edi
push 0x4264c8
push esi
push ebx
call fcn.0043b918
add esp, 0x10
test esi, esi
jns 0x44c278
mov edx, 0x4d9
jmp 0x44c26a
cmp dword [ebp - 0x10], esi
je 0x44c27a
push esi
push dword [ebp - 0x10]
push 0x426430
push ebx
call fcn.0043b96c
add esp, 0x10
mov edx, 0x4df
jmp 0x44c265
mov edx, 0x4e6
mov esi, 0x80070057
mov ecx, dword [ebp + 4]
push esi
push 0x4244e8
call fcn.0043c390
mov ebx, esi
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret