Function at 0x140006c00
Capabilities:
Decode data using base64 via winapi
Encrypt or decrypt via wincrypt
Import public key

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x140027008]
xor rax, rsp
mov qword [rbp + 0x770], rax
mov qword [rsp + 0x68], r8
mov edi, edx
mov r12, rcx
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x70]
call fcn.140009150
xor ebx, ebx
mov dword [rsp + 0x44], 0x800
mov ecx, 0xc8
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x48], ebx
mov r15d, ebx
mov qword [rsp + 0x58], rbx
lea edx, [rbx + 1]
mov qword [rsp + 0x50], rbx
call fcn.140009d98
mov r13, rax
test rax, rax
je 0x140006e8a
mov qword [rsp + 0x30], rbx
lea rax, [rsp + 0x44]
lea rsi, str.MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7LwY2eLgPaTGIYJ5EmancLsBX_LjcMoCjz5lMSeeCsPpandTPw4UCPfvsJBNPC6LPAPqUT1w5TSe73uZbS9JY2l4Ui6hySSn5QbKQ3eSClxQON5zzKYtoAv2RDXkn3ksjffwR18BvlyJgmJTLeUIJFrq4xxxPpwImSKBhwIDAQAB
mov qword [rsp + 0x28], rbx
mov rcx, rsi
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x70]
xor edx, edx
lea r8d, [rbx + 1]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x140006e4a
mov r9d, dword [rsp + 0x44]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0x70]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x30], rax
lea edx, [rbx + 8]
mov qword [rsp + 0x28], rbx
lea ecx, [rbx + 1]
mov dword [rsp + 0x20], 0x8000
call qword [sym.imp.CRYPT32.dll_CryptDecodeObjectEx]
test eax, eax
je 0x140006e4a
lea r9d, [rbx + 1]
mov dword [rsp + 0x20], 0xf0000000
lea r8, str.Microsoft_Enhanced_Cryptographic_Provider_v1.0
xor edx, edx
lea rcx, [rsp + 0x58]
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140006e4a
mov r8, qword [rsp + 0x60]
lea r9, [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
lea edx, [rbx + 1]
call qword [sym.imp.CRYPT32.dll_CryptImportPublicKeyInfo]
test eax, eax
je 0x140006e4a
mov dword [rsp + 0x40], 0x75
mov r14d, ebx
mov esi, ebx
mov edx, 1
mov ecx, 0x88
call fcn.140009d98
mov rbx, rax
test rax, rax
je 0x140006e8a
mov ecx, dword [rsp + 0x40]
mov edx, esi
imul edx, ecx
add rdx, r12
cmp edi, ecx
jae 0x140006d92
mov r8d, edi
mov rcx, rax
call fcn.1400098c0
mov r14d, 1
mov dword [rsp + 0x40], edi
jmp 0x140006d9d
mov r8, rcx
mov rcx, rbx
call fcn.1400098c0
mov rcx, qword [rsp + 0x50]
lea rax, [rsp + 0x40]
mov dword [rsp + 0x30], 0x88
xor r9d, r9d
mov qword [rsp + 0x28], rax
mov r8d, r14d
xor edx, edx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.ADVAPI32.dll_CryptEncrypt]
test eax, eax
je 0x140006e8a
mov ecx, dword [rsp + 0x40]
xor r9d, r9d
test ecx, 0xfffffffe
jbe 0x140006e0f
nop
movzx r8d, byte [r9 + rbx]
sub ecx, r9d
dec ecx
movzx ecx, byte [rcx + rbx]
mov byte [r9 + rbx], cl
mov eax, dword [rsp + 0x40]
sub eax, r9d
inc r9d
dec eax
mov byte [rax + rbx], r8b
mov ecx, dword [rsp + 0x40]
mov eax, ecx
shr eax, 1
cmp r9d, eax
jb 0x140006de0
mov r8d, ecx
mov rdx, rbx
imul ecx, esi
add rcx, r13
call fcn.1400098c0
add r15d, dword [rsp + 0x40]
mov rcx, rbx
mov dword [rsp + 0x40], 0x75
add edi, 0xffffff8b
call fcn.14000a2c4
inc esi
test r14d, r14d
je 0x140006d50
lea rsi, str.MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC7LwY2eLgPaTGIYJ5EmancLsBX_LjcMoCjz5lMSeeCsPpandTPw4UCPfvsJBNPC6LPAPqUT1w5TSe73uZbS9JY2l4Ui6hySSn5QbKQ3eSClxQON5zzKYtoAv2RDXkn3ksjffwR18BvlyJgmJTLeUIJFrq4xxxPpwImSKBhwIDAQAB
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x50]
mov dword [rax], r15d
call qword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
mov rcx, qword [rsp + 0x58]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x140006e71
xor edx, edx
mov rcx, rsi
call fcn.140009150
mov rax, r13
jmp 0x140006e8c
xor eax, eax
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.140008040
mov rbx, qword [rsp + 0x8d8]
add rsp, 0x880
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret