Function at 0x180030010
Capabilities:
Encode data using base64 via winapi

Disassembly:
push rbp
sub rsp, 0xc0
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x68], r9
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], rdx
mov qword [rbp - 0x50], rcx
mov rax, qword [0x1800950a8]
xor rax, rbp
mov qword [rbp + 0x38], rax
mov dword [rbp - 0x48], 0xc166f073
mov eax, dword [rbp - 0x48]
mov dword [rbp - 0x6c], eax
sub eax, 0x811bf028
je 0x1800302f8
jmp 0x18003005b
mov eax, dword [rbp - 0x6c]
sub eax, 0xa385a3a6
je 0x18003026a
jmp 0x18003006e
mov eax, dword [rbp - 0x6c]
sub eax, 0xa73800c2
je 0x1800302dc
jmp 0x180030081
mov eax, dword [rbp - 0x6c]
sub eax, 0xbf37e12e
je 0x18003022c
jmp 0x180030094
mov eax, dword [rbp - 0x6c]
sub eax, 0xc166f073
je 0x1800301b6
jmp 0x1800300a7
mov eax, dword [rbp - 0x6c]
sub eax, 0xc72ef970
je 0x180030296
jmp 0x1800300ba
mov eax, dword [rbp - 0x6c]
sub eax, 0xdd692eef
je 0x180030399
jmp 0x1800300cd
mov eax, dword [rbp - 0x6c]
sub eax, 0xf0bf36cc
je 0x180030349
jmp 0x1800300e0
mov eax, dword [rbp - 0x6c]
sub eax, 0x2ecdce3e
je 0x18003023f
jmp 0x1800300f3
mov eax, dword [rbp - 0x6c]
sub eax, 0x317774ea
je 0x180030218
jmp 0x180030106
mov eax, dword [rbp - 0x6c]
sub eax, 0x385d01d9
je 0x18003033d
jmp 0x180030119
mov eax, dword [rbp - 0x6c]
sub eax, 0x4467577d
je 0x1800303b7
jmp 0x18003012c
mov eax, dword [rbp - 0x6c]
sub eax, 0x47a16340
je 0x180030282
jmp 0x18003013f
mov eax, dword [rbp - 0x6c]
sub eax, 0x47c55358
je 0x18003032a
jmp 0x180030152
mov eax, dword [rbp - 0x6c]
sub eax, 0x4d254295
je 0x180030315
jmp 0x180030165
mov eax, dword [rbp - 0x6c]
sub eax, 0x5514dbc5
je 0x180030253
jmp 0x180030178
mov eax, dword [rbp - 0x6c]
sub eax, 0x69a750c8
je 0x18003037b
jmp 0x18003018b
mov eax, dword [rbp - 0x6c]
sub eax, 0x6a40ac1e
je 0x18003035e
jmp 0x18003019e
mov eax, dword [rbp - 0x6c]
sub eax, 0x77ea15df
je 0x1800303a5
jmp 0x1800301b1
jmp 0x1800303d6
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x68]
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r8, rsp
mov qword [rbp - 0x18], r8
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r8, rsp
mov qword [rbp - 0x10], r8
call fcn.18008acc0
sub rsp, rax
mov rax, qword [rbp - 0x58]
mov r8, rsp
mov qword [rbp - 8], r8
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x48], 0x317774ea
jmp 0x1800303d6
mov rax, qword [rbp - 0x50]
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x48], 0xbf37e12e
jmp 0x1800303d6
mov rax, qword [rbp - 0x38]
mov dword [rbp - 0x44], eax
mov dword [rbp - 0x48], 0x2ecdce3e
jmp 0x1800303d6
mov rax, qword [rbp - 0x28]
mov qword [rbp], rax
mov dword [rbp - 0x48], 0x5514dbc5
jmp 0x1800303d6
mov rax, qword [rbp]
mov rax, qword [rax]
mov qword [rbp + 8], rax
mov dword [rbp - 0x48], 0xa385a3a6
jmp 0x1800303d6
mov rax, qword [rbp + 8]
mov ecx, eax
mov rax, qword [rbp - 0x18]
mov dword [rax], ecx
mov dword [rbp - 0x48], 0x47a16340
jmp 0x1800303d6
mov rax, qword [rbp - 0x30]
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x48], 0xc72ef970
jmp 0x1800303d6
mov edx, dword [rbp - 0x44]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x18]
mov r9, qword [rbp + 0x10]
mov r8d, 0x40000001
sub rsp, 0x30
mov qword [rsp + 0x20], rax
call qword [sym.imp.CRYPT32.dll_CryptBinaryToStringA]
add rsp, 0x30
mov ecx, eax
mov rax, qword [rbp - 0x10]
mov dword [rax], ecx
mov rax, qword [rbp - 8]
mov dword [rax], 0
mov dword [rbp - 0x48], 0xa73800c2
jmp 0x1800303d6
mov rdx, qword [rbp - 0x10]
mov eax, 0xf0bf36cc
mov ecx, 0x811bf028
cmp dword [rdx], 0
cmove eax, ecx
mov dword [rbp - 0x48], eax
jmp 0x1800303d6
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp + 0x18], eax
mov dword [rbp - 0x48], 0x4d254295
jmp 0x1800303d6
mov rax, qword [rbp - 8]
mov ecx, dword [rbp + 0x18]
mov dword [rax], ecx
mov dword [rbp - 0x48], 0x47c55358
jmp 0x1800303d6
mov dword [rbp - 0x1c], 0xffffffff
mov dword [rbp - 0x48], 0x385d01d9
jmp 0x1800303d6
mov dword [rbp - 0x48], 0x77ea15df
jmp 0x1800303d6
mov rax, qword [rbp - 0x18]
mov eax, dword [rax]
mov dword [rbp + 0x1c], eax
mov dword [rbp - 0x48], 0x6a40ac1e
jmp 0x1800303d6
mov eax, dword [rbp + 0x1c]
mov eax, eax
mov qword [rbp + 0x20], rax
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x48], 0x69a750c8
jmp 0x1800303d6
mov rcx, qword [rbp + 0x20]
mov rax, qword [rbp + 0x28]
mov qword [rax], rcx
mov dword [rbp - 0x1c], 0
mov dword [rbp - 0x48], 0xdd692eef
jmp 0x1800303d6
mov dword [rbp - 0x48], 0x77ea15df
jmp 0x1800303d6
mov eax, dword [rbp - 0x1c]
mov dword [rbp + 0x34], eax
mov dword [rbp - 0x48], 0x4467577d
jmp 0x1800303d6
mov eax, dword [rbp + 0x34]
mov dword [rbp - 0x7c], eax
mov rcx, qword [rbp + 0x38]
xor rcx, rbp
sub rsp, 0x20
call fcn.18008ac40
mov eax, dword [rbp - 0x7c]
lea rsp, [rbp + 0x40]
pop rbp
ret
jmp 0x180030045