Function at 0x180008559
Capabilities:
Decode data using base64 via winapi

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
mov rbp, rsp
push rbx
push rdi
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x448
lea rdx, [rbp - 0x38]
sub rdx, rsp
sub rsp, 0x20
lea rcx, [rsp + 0x20]
call fcn.180009e0b
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
call fcn.180009fec
add rsp, 0x20
cmp rax, 0x20
je 0x180008643
sub rsp, 0x40
mov rcx, qword [rbp + 0x20]
mov rdx, 0
mov r8, 1
mov r9, 0
lea rax, [rbp - 0x440]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call qword [sym.imp.crypt32.dll_CryptStringToBinaryA]
add rsp, 0x40
sub rsp, 0x40
mov rcx, qword [rbp + 0x20]
mov rdx, 0
mov r8, 1
lea r9, [rbp - 0x238]
lea rax, [rbp - 0x440]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call qword [sym.imp.crypt32.dll_CryptStringToBinaryA]
add rsp, 0x40
jmp 0x180008662
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
lea rdx, [rbp - 0x238]
call fcn.180003bcc
add rsp, 0x20
mov qword [rbp - 0x440], rax
cmp qword [rbp + 0x50], 1
jne 0x18000868f
mov rdx, qword [rbp + 0x48]
sub rsp, 0x20
lea rcx, [rbp - 0x238]
lea rdx, [rdx + 0xba]
mov r8, qword [rbp - 0x440]
call fcn.180009fab
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
lea r8, [rbp - 0x238]
lea r9, [rbp - 0x3a8]
call fcn.180008e48
add rsp, 0x20
test rax, rax
je 0x180008a3f
sub rsp, 0x20
mov rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x28]
lea r8, [rbp - 0x428]
call fcn.180008a53
add rsp, 0x20
test rax, rax
je 0x180008a3f
lea rdi, [rbp - 0x438]
mov r12, 0x10
sub rsp, 0x20
mov rcx, 0x100
call fcn.180009f59
add rsp, 0x20
stosb byte [rdi], al
dec r12
jne 0x1800086ee
mov qword [rbp - 0x458], 0x94
sub rsp, 0x40
mov rcx, 1
mov rdx, 0x13
lea r8, [rbp - 0x3a8]
mov r9, 0x8c
mov qword [rsp + 0x20], 0
lea rax, [rbp - 0x31c]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x458]
mov qword [rsp + 0x30], rax
call qword [sym.imp.crypt32.dll_CryptDecodeObject]
add rsp, 0x40
mov dword [rbp - 0x288], 0x31415352
mov dword [rbp - 0x284], 0x400
mov dword [rbp - 0x280], 4
mov dword [rbp - 0x27c], 0x80
mov dword [rbp - 0x278], 0
mov dword [rbp - 0x274], 0
mov eax, dword [rbp - 0x30c]
bswap eax
mov dword [rbp - 0x270], eax
sub rsp, 0x20
lea rcx, [rbp - 0x289]
lea rdx, [rbp - 0x26c]
mov r8, 0x80
call fcn.180003a8a
add rsp, 0x20
sub rsp, 0x20
lea rcx, str.bcrypt.dll
call fcn.18000a4d8
add rsp, 0x20
sub rsp, 0x20
mov rcx, rax
lea rdx, str.BCryptImportKeyPair
call fcn.18000a390
add rsp, 0x20
mov rcx, qword [rbp + 0x38]
mov rdx, 0
lea r8, str.RSAPUBLICBLOB
lea r9, [rbp - 0x450]
sub rsp, 0x40
lea r12, [rbp - 0x288]
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x28], 0x9c
mov qword [rsp + 0x30], 0
call rax
add rsp, 0x40
lea rax, str.SHA1
mov qword [rbp - 0x478], rax
mov qword [rbp - 0x470], 0
mov qword [rbp - 0x468], 0
mov rdi, qword [rbp + 0x48]
sub rsp, 0x20
lea rcx, str.bcrypt.dll
call fcn.18000a4d8
add rsp, 0x20
sub rsp, 0x20
mov rcx, rax
lea rdx, str.BCryptEncrypt
call fcn.18000a390
add rsp, 0x20
mov rcx, qword [rbp - 0x450]
lea rdx, [rbp - 0x438]
mov r8, 0x56
lea r9, [rbp - 0x478]
sub rsp, 0x50
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov r12, qword [rbp + 0x48]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0x80
lea r12, [rbp - 0x458]
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 4
call rax
add rsp, 0x50
sub rsp, 0x20
lea rcx, [rbp - 0x450]
mov rdx, 0
mov r8, 1
call fcn.180003561
add rsp, 0x20
add rdi, qword [rbp - 0x458]
mov dword [rbp - 0x31c], 0x4d42444b
mov dword [rbp - 0x318], 1
mov dword [rbp - 0x314], 0x10
sub rsp, 0x20
lea rcx, [rbp - 0x438]
lea rdx, [rbp - 0x310]
mov r8, 0x10
call fcn.180009fab
add rsp, 0x20
sub rsp, 0x20
lea rcx, str.bcrypt.dll
call fcn.18000a4d8
add rsp, 0x20
sub rsp, 0x20
mov rcx, rax
lea rdx, str.BCryptImportKey
call fcn.18000a390
add rsp, 0x20
mov rcx, qword [rbp + 0x40]
mov rdx, 0
lea r8, str.KeyDataBlob
lea r9, [rbp - 0x450]
sub rsp, 0x50
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
lea r12, [rbp - 0x31c]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0x1c
mov qword [rsp + 0x40], 0
call rax
add rsp, 0x50
sub rsp, 0x20
lea rcx, [rbp - 0x3e2]
mov rdx, rdi
mov r8, 0x3a
call fcn.180009fab
add rsp, 0x20
sub rsp, 0x20
mov rcx, qword [rbp - 0x450]
mov rdx, rdi
mov r8, 0x3a
mov r9, 0
call fcn.180007ed8
add rsp, 0x20
add rdi, 0x3a
sub rdi, qword [rbp + 0x48]
sub rsp, 0x20
lea rcx, [rbp - 0x450]
mov rdx, 0
mov r8, 1
call fcn.180003561
add rsp, 0x20
mov rax, rdi
add rsp, 0x448
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rdi
pop rbx
pop rbp
ret