Function at 0x4cf8a0
Capabilities:
Encode data using base64 via winapi
Hash data via bcrypt

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov edi, dword [ebp + 8]
mov eax, dword [0x7a9040]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x20]
lea ecx, [ebp - 0x20]
mov dword [ecx + 8], eax
movsd xmm0, qword [ebp + 0x18]
movsd qword [ecx], xmm0
xor eax, eax
mov dword [ecx + 0xc], eax
lea edx, [ebp - 0x28]
mov dword [edx + 4], eax
mov dword [edx], eax
push edx
push ecx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
test eax, eax
je 0x4cfa34
mov edi, str.User_Choice_set_via_Windows_User_Experience_D18B6DD5_6124_4341_9318_804003BAFA0B
mov esi, str._s_s_s_08lx_08lx_s
push edi
push dword [ebp - 0x28]
push dword [ebp - 0x24]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.004d1490
add esp, 0x1c
lea ebx, [eax + 1]
lea esi, [eax*2 + 2]
xor ecx, ecx
dec ecx
cmp eax, 0xffffffff
cmovl esi, ecx
push esi
call fcn.00650823
add esp, 4
push esi
mov esi, eax
push 0
push eax
call fcn.006547d0
add esp, 0xc
push edi
mov edi, dword [ebp + 8]
push dword [ebp - 0x28]
push dword [ebp - 0x24]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
mov eax, str._s_s_s_08lx_08lx_s
push eax
push 0xffffffffffffffff
push ebx
push esi
call fcn.004d14f0
add esp, 0x28
push esi
call dword [sym.imp.USER32.dll_CharLowerW]
test esi, esi
je 0x4cfa34
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ebx, [eax*2 + 2]
cmp ebx, 7
jbe 0x4cfa23
mov dword [ebp - 0x2c], esi
xor esi, esi
mov dword [ebp - 0x20], esi
push esi
push esi
push 0x740546
lea eax, [ebp - 0x20]
push eax
call sub.bcrypt.dll_BCryptOpenAlgorithmProvider
test eax, eax
js 0x4cfa20
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x20]
sub esp, 0x1c
mov dword [esp + 0x18], esi
xorps xmm0, xmm0
movups xmmword [esp + 8], xmm0
lea ecx, [ebp - 0x28]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.bcrypt.dll_BCryptCreateHash
test eax, eax
js 0x4cfa16
push 0
mov dword [ebp - 0x30], ebx
push ebx
mov esi, dword [ebp - 0x2c]
push esi
push dword [ebp - 0x28]
call sub.bcrypt.dll_BCryptHashData
xor ebx, ebx
test eax, eax
js 0x4cfa6e
mov esi, 0x10
push esi
call fcn.00650823
add esp, 4
xorps xmm0, xmm0
movups xmmword [eax], xmm0
push 0
push esi
mov esi, eax
push eax
push dword [ebp - 0x28]
call sub.bcrypt.dll_BCryptFinishHash
test eax, eax
jns 0x4cfa69
test esi, esi
je 0x4cfa6b
push esi
call fcn.0065082c
add esp, 4
jmp 0x4cfa6b
push 0
push dword [ebp - 0x20]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
mov esi, dword [ebp - 0x2c]
mov dword [edi], 0
push esi
call fcn.0065082c
add esp, 4
jmp 0x4cfa3a
mov dword [edi], 0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00650d60
mov eax, edi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret 0x20
mov edi, dword [ebp + 8]
mov dword [edi], 0
mov esi, dword [ebp - 0x2c]
push dword [ebp - 0x3c]
call fcn.0065082c
add esp, 4
jmp 0x4cfa29
mov ebx, esi
mov esi, dword [ebp - 0x2c]
push dword [ebp - 0x28]
call sub.bcrypt.dll_BCryptDestroyHash
push 0
push dword [ebp - 0x20]
call sub.bcrypt.dll_BCryptCloseAlgorithmProvider
test ebx, ebx
je 0x4cfa23
mov ecx, dword [ebp - 0x30]
shr ecx, 3
mov eax, dword [ebx]
mov dword [ebp - 0x3c], ebx
mov edx, dword [ebx + 4]
or eax, 1
mov dword [ebp - 0x34], eax
or edx, 1
mov dword [ebp - 0x40], edx
cmp ecx, 1
adc ecx, 0
xor ebx, ebx
xor edx, edx
xor esi, esi
xor edi, edi
xor eax, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [ecx + ebx*8]
add eax, ebx
imul eax, dword [ebp - 0x34]
rol eax, 0x10
add edi, ebx
mov ecx, edi
rol ecx, 0x10
imul ecx, ecx, 0xef0569fb
imul edi, dword [ebp - 0x34]
add edi, ecx
imul ecx, edi, 0x79f8a395
shr edi, 0x10
imul ebx, edi, 0x689b6b9f
add ebx, ecx
mov ecx, ebx
rol ecx, 0x10
imul edi, ecx, 0xc3efea97
add edi, ebx
mov ecx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x2c]
mov ecx, dword [ebx + ecx*8 + 4]
imul eax, eax, 0xcf98b111
rol eax, 0x10
imul eax, eax, 0x87085b9f
rol eax, 0x10
imul eax, eax, 0x12ceb96d
rol eax, 0x10
imul eax, eax, 0x257e1d83
add esi, eax
add eax, ecx
mov ebx, dword [ebp - 0x40]
imul eax, ebx
rol eax, 0x10
add edx, edi
imul eax, eax, 0xa27416f5
rol eax, 0x10
add edi, ecx
mov ecx, edi
rol ecx, 0x10
imul ecx, ecx, 0xc31713db
imul edi, ebx
add edi, ecx
imul ecx, edi, 0x59c3af2d
shr edi, 0x10
imul ebx, edi, 0xddcd1f0f
add ebx, ecx
mov ecx, ebx
rol ecx, 0x10
imul edi, ecx, 0x35bd1ec9
add edi, ebx
mov ebx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x30]
imul eax, eax, 0xd38396ff
rol eax, 0x10
imul eax, eax, 0x7c932b89
rol eax, 0x10
imul eax, eax, 0xbfa49f69
add esi, eax
add edx, edi
inc ebx
cmp ecx, ebx
jne 0x4cfab1
xor edi, eax
mov dword [ebp - 0x20], edi
xor edx, esi
mov dword [ebp - 0x1c], edx
xor eax, eax
mov dword [ebp - 0x28], eax
lea edi, [ebp - 0x28]
push edi
push eax
push 0x40000001
push 8
lea esi, [ebp - 0x20]
push esi
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringW]
test eax, eax
je 0x4cfa50
mov eax, dword [ebp - 0x28]
lea ecx, [eax + eax]
test eax, eax
mov ebx, 0xffffffff
cmovns ebx, ecx
push ebx
call fcn.00650823
add esp, 4
mov esi, eax
push ebx
push 0
push eax
call fcn.006547d0
add esp, 0xc
push edi
push esi
push 0x40000001
push 8
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringW]
mov edx, esi
test eax, eax
setne cl
cmovne eax, esi
mov edi, dword [ebp + 8]
mov dword [edi], eax
test esi, esi
sete al
or al, cl
mov esi, dword [ebp - 0x2c]
jne 0x4cfa5c
push edx
call fcn.0065082c
add esp, 4
jmp 0x4cfa5c