Function at 0x140014383
Capabilities:
Encrypt data using dpapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf88
mov r14, rdx
lea rax, [rsp + 0x110]
and qword [rax], 0
mov qword [rax + 8], 8
and qword [rax + 0x10], 0
mov qword [rsp + 0x78], rcx
imul rax, r8, 0x18
add rax, rdx
mov qword [rsp + 0x108], rax
lea r15, [0x14024bd15]
lea r13, [rsp + 0x618]
movabs rbp, 0x8000000000000000
cmp r14, qword [rsp + 0x108]
je 0x140014f54
mov rsi, qword [r14 + 8]
mov rdi, qword [r14 + 0x10]
mov qword [rsp + 0x20], 0xb
mov rcx, r13
mov rdx, rsi
mov r8, rdi
mov r9, r15
call case.0x14013e79a.258
lea rbx, [rsp + 0x870]
mov rcx, rbx
mov rdx, r13
call fcn.140004f3d
lea r12, [rsp + 0x150]
mov rcx, r12
mov rdx, rbx
call fcn.140009458
mov r13, qword [rsp + 0x150]
cmp r13, rbp
je 0x140014697
mov rbp, qword [rsp + 0x158]
mov r8, qword [rsp + 0x160]
mov rcx, rbx
mov rdx, rbp
call fcn.1401338ad
mov rcx, r12
mov rdx, rbx
call fcn.140009407
mov al, byte [rsp + 0x150]
cmp al, 6
je 0x140014682
lea rcx, [rsp + 0x151]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0xf]
lea rcx, [rsp + 0x3c1]
movups xmmword [rcx + 0xf], xmm1
movups xmmword [rcx], xmm0
mov byte [rsp + 0x3c0], al
mov r8d, 8
lea rcx, [rsp + 0x3c0]
lea rdx, [0x14024bd20]
call fcn.140001dab
mov r8d, 0xd
mov rcx, rax
lea rdx, [0x14024bd28]
call fcn.140001dab
mov rcx, rbx
mov rdx, rax
call fcn.14000ab8e
mov rcx, r12
mov rdx, rbx
call fcn.140001cea
lea rcx, [rsp + 0xd38]
mov rdx, r12
call fcn.1400094a3
mov rax, qword [rsp + 0xd38]
movabs r15, 0x8000000000000000
cmp rax, r15
je 0x14001466e
lea rcx, [rsp + 0xd40]
movups xmm0, xmmword [rcx]
lea rcx, [rsp + 0xae8]
movups xmmword [rcx], xmm0
mov qword [rsp + 0xae0], rax
mov rcx, rbx
lea rdx, [rsp + 0xae0]
call fcn.14000b968
mov rcx, r12
mov rdx, rbx
call fcn.1400095d5
mov rax, qword [rsp + 0x150]
cmp rax, r15
je 0x14001466e
mov qword [rsp + 0x50], rax
mov r15, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x160]
mov rcx, r15
lea r8, [0x14024be90]
call fcn.14000da69
mov dword [rsp + 0x150], edx
and dword [rsp + 0x870], 0
mov qword [rsp + 0x158], rax
and qword [rsp + 0x878], 0
and dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rbx
and qword [rsp + 0x20], 0
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.crypt32.dll_CryptUnprotectData
test eax, eax
je 0x140014661
mov eax, dword [rsp + 0x870]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x878]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x50]
mov rdx, r15
call fcn.140077287
lea rcx, [rsp + 0x3c0]
call fcn.140005ed4
mov rcx, r13
mov rdx, rbp
call fcn.140077287
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rax
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14000502d
mov rcx, r12
mov rdx, rbx
call fcn.14000963c
mov esi, dword [rsp + 0x160]
cmp esi, 2
jne 0x1400146a8
movabs rbp, 0x8000000000000000
lea r15, [0x14024bd15]
jmp 0x140014f32
mov rcx, qword [rsp + 0x50]
mov rdx, r15
call fcn.140077287
lea rcx, [rsp + 0x3c0]
call fcn.140005ed4
lea r15, [0x14024bd15]
mov rcx, r13
mov rdx, rbp
call fcn.140077287
movabs rbp, 0x8000000000000000
lea r13, [rsp + 0x618]
add r14, 0x18
jmp 0x1400143df
mov r13, r12
movups xmm0, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0x870], xmm0
mov r8d, 0x254
lea rcx, [rsp + 0x884]
lea rdx, [rsp + 0x164]
call fcn.140240685
and qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 8
and qword [rsp + 0xc0], 0
mov dword [rsp + 0x880], esi
movabs rbp, 0x8000000000000000
lea r15, [0x14024bd15]
lea rdi, [rsp + 0x618]
mov rcx, r13
mov rdx, rbx
call fcn.14013e060
cmp qword [rsp + 0x150], 0
je 0x140014e69
mov rcx, rdi
lea rdx, [rsp + 0x158]
call fcn.1400094d0
cmp qword [rsp + 0x618], 0
je 0x140014956
mov r8d, 0x258
lea rbx, [rsp + 0x3c0]
mov rcx, rbx
mov rdx, rdi
call fcn.140240685
lea rcx, [rsp + 0xe0]
mov rdx, rbx
call fcn.14013e270
mov rsi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov qword [rsp + 0x20], 0xa
lea rcx, [rsp + 0x58]
mov rdx, rsi
lea r9, [0x14024be27]
call case.0x14013e79a.258
mov rdi, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call fcn.1400052e4
mov ebp, eax
mov rcx, qword [rsp + 0x58]
mov rdx, rdi
call fcn.140077287
mov rcx, qword [rsp + 0xe0]
mov rdx, rsi
call fcn.140077287
test bpl, bpl
je 0x140014944
mov rsi, qword [rsp + 0x3c0]
mov r8d, 0x250
lea rcx, [rsp + 0xd38]
lea rdx, [rsp + 0x3c8]
call fcn.140240685
test rsi, rsi
lea r13, [rsp + 0x3c8]
movabs rbp, 0x8000000000000000
je 0x140014956
mov r8d, 0x250
lea rdi, [rsp + 0xae8]
mov rcx, rdi
lea rdx, [rsp + 0xd38]
call fcn.140240685
mov r8d, 0x250
lea rcx, [rsp + 0x158]
mov rdx, rdi
call fcn.140240685
mov qword [rsp + 0x150], rsi
lea rcx, [rsp + 0x3c0]
lea rdi, [rsp + 0x150]
mov rdx, rdi
call fcn.14013e270
mov rsi, qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x3d0]
mov qword [rsp + 0x20], 0xa
lea rcx, [rsp + 0x130]
mov rdx, rsi
lea r9, [0x14024be27]
call case.0x14013e79a.258
mov rcx, qword [rsp + 0x3c0]
mov rdx, rsi
call fcn.140077287
mov rcx, rdi
call fcn.140006c12
mov r12, qword [rsp + 0x130]
cmp r12, rbp
je 0x140014e87
mov rbx, qword [rsp + 0x138]
mov rsi, qword [rsp + 0x140]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x128], rax
mov r8d, 4
lea rdi, [rsp + 0x150]
mov rcx, rdi
lea rdx, [0x14024bcbe]
call fcn.14013b760
lea rcx, [rsp + 0x3c0]
mov rdx, rdi
call fcn.14000942a
mov rdi, qword [rsp + 0x3c0]
cmp rdi, rbp
mov qword [rsp + 0x50], rbx
jne 0x140014973
lea rdi, [rsp + 0x618]
lea rbx, [rsp + 0x870]
lea r13, [rsp + 0x150]
jmp 0x140014e57
mov rcx, rbx
call fcn.140006c12
movabs rbp, 0x8000000000000000
lea rdi, [rsp + 0x618]
lea rbx, [rsp + 0x870]
lea r13, [rsp + 0x150]
jmp 0x140014714
mov qword [rsp + 0x40], r12
mov r15, qword [rsp + 0x3c8]
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x48], rax
mov rcx, rbx
mov rdx, rsi
call case.0x14013c80f.493
test rax, rax
je 0x140014b1b
mov r12, rbx
mov qword [rsp + 0x20], rdx
lea rbx, [rsp + 0xd38]
mov rcx, rbx
mov rdx, r15
mov r8, qword [rsp + 0x48]
mov r9, rax
call case.0x14013e79a.258
mov rcx, rdi
mov rdx, r15
call fcn.140077287
lea rdi, [rsp + 0x150]
mov rcx, rdi
mov rdx, rbx
call fcn.1400098f4
mov rcx, r12
mov rdx, rsi
mov r8, rdi
call fcn.140004faa
mov rcx, rax
call fcn.14000953a
mov rsi, qword [rsp + 0xd40]
test rax, rax
lea r15, [0x14024bd15]
je 0x140014e2a
mov rdi, qword [rsp + 0xd48]
lea rbx, [rsp + 0x150]
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14000e4b1
lea r12, [rsp + 0x3c0]
mov rcx, r12
mov rdx, rbx
call fcn.14000965c
cmp qword [rsp + 0x3c0], 0
je 0x140014e2a
mov qword [rsp + 0x100], rdi
mov qword [rsp + 0x48], rsi
mov ecx, 0xc
lea rdx, [rsp + 0x618]
mov rdi, rdx
mov rsi, r13
rep movsq qword [rdi], qword [rsi]
mov r9d, 0x3e
mov rcx, rbx
lea r8, [0x14024be31]
call fcn.14000e5f1
mov rcx, r12
mov rdx, rbx
call fcn.1400093dc
mov rax, qword [rsp + 0x3c0]
test rax, rax
je 0x140014b32
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmm3, xmmword [r13 + 0x30]
lea rcx, [rsp + 0xae8]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov qword [rsp + 0xae0], rax
mov rcx, rbx
lea rdx, [rsp + 0xae0]
call fcn.14000edb6
cmp byte [rsp + 0x150], 0x13
jne 0x140014b3f
mov rax, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x160]
lea rdi, [rsp + 0x618]
lea rcx, [rsp + 0x3c0]
mov r12, qword [rsp + 0x40]
jmp 0x140014bb2
mov rcx, rdi
mov rdx, r15
call fcn.140077287
lea r15, [0x14024bd15]
jmp 0x140014e3a
lea rdi, [rsp + 0x618]
jmp 0x140014e1d
movups xmm0, xmmword [rsp + 0x150]
movups xmm1, xmmword [rsp + 0x160]
movups xmm2, xmmword [rsp + 0x170]
movups xmm3, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x3c0], xmm0
movaps xmmword [rsp + 0x3f0], xmm3
movaps xmmword [rsp + 0x3e0], xmm2
movaps xmmword [rsp + 0x3d0], xmm1
cmp byte [rsp + 0x3c0], 0x13
lea rdi, [rsp + 0x618]
lea rcx, [rsp + 0x3c0]
mov r12, qword [rsp + 0x40]
jne 0x140014e0b
mov rax, qword [rsp + 0x3c8]
mov rdx, qword [rsp + 0x3d0]
lea r8, [rsp + 0x128]
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rdx
lea rdx, [rsp + 0xc8]
call fcn.140002484
cmp qword [rsp + 0x3c0], rbp
jne 0x140014c19
and qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 8
and qword [rsp + 0x90], 0
lea rcx, [rsp + 0xd0]
call fcn.1400056c8
jmp 0x140014dfc
mov ecx, 0x120
call fcn.14000a240
test rax, rax
je 0x140014fa7
mov r13, rax
mov ecx, 9
mov rdi, rax
lea rsi, [rsp + 0x3c0]
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0x58], 4
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0xc8]
movaps xmmword [rsp + 0xe0], xmm0
mov ebp, 1
mov r15d, 0x48
lea rax, [rsp + 0x150]
mov rcx, rax
lea rdx, [rsp + 0xe0]
call fcn.140002484
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x150], rax
je 0x140014cf6
cmp rbp, qword [rsp + 0x58]
je 0x140014cdc
lea rdi, [r15 + r13]
mov ecx, 9
lea rax, [rsp + 0x150]
mov rsi, rax
rep movsq qword [rdi], qword [rsi]
inc rbp
mov qword [rsp + 0x68], rbp
add r15, 0x48
jmp 0x140014c8c
mov r8d, 1
lea rcx, [rsp + 0x58]
mov rdx, rbp
call fcn.140240c80
mov r13, qword [rsp + 0x60]
jmp 0x140014cb7
lea rcx, [rsp + 0xe8]
call fcn.1400056c8
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x80], xmm0
test rax, rax
movabs rbp, 0x8000000000000000
lea r15, [0x14024bd15]
lea rdi, [rsp + 0x618]
lea rbx, [rsp + 0x870]
lea r13, [rsp + 0x150]
je 0x140014dfc
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
mov rdx, qword [rsp + 0x100]
call fcn.140004f2b
mov qword [rsp + 0x150], rax
mov rcx, r13
call fcn.140006eb4
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x88]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x3c0], xmm0
lea rcx, [rsp + 0xae0]
call fcn.140006215
mov rcx, rdi
call fcn.1400056ec
mov rcx, qword [rsp + 0xd38]
mov rdx, rsi
call fcn.140077287
mov rax, qword [rsp + 0x40]
cmp rax, rbp
je 0x140014e57
mov qword [rsp + 0x150], rax
movaps xmm0, xmmword [rsp + 0x3c0]
lea rax, [rsp + 0x158]
movups xmmword [rax], xmm0
lea rcx, [rsp + 0xb0]
mov rdx, r13
call fcn.14000a024
mov rcx, r13
call fcn.140006cde
jmp 0x140014e57
lea rcx, [rsp + 0x80]
call fcn.140006cde
jmp 0x140014e10
call fcn.140005e02
lea rcx, [rsp + 0xae0]
call fcn.140006215
mov rcx, rdi
call fcn.1400056ec
mov rsi, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xd38]
mov rdx, rsi
call fcn.140077287
lea rdi, [rsp + 0x618]
lea rbx, [rsp + 0x870]
lea r13, [rsp + 0x150]
mov r12, qword [rsp + 0x40]
mov rcx, r12
mov rdx, qword [rsp + 0x50]
call fcn.140077287
jmp 0x140014714
mov rcx, r13
call fcn.140005500
and qword [rsp + 0xae0], 0
lea rcx, [rsp + 0xae0]
call fcn.140006eeb
lea rcx, [rsp + 0x870]
call fcn.14000568a
cmp qword [rsp + 0xc0], 0
je 0x140014f25
mov rsi, qword [rsp + 0xb0]
lea rax, [rsp + 0xb8]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
call fcn.140077287
cmp rsi, rbp
lea r13, [rsp + 0x618]
je 0x14001469f
mov qword [rsp + 0x870], rsi
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x884]
movups xmmword [rax - 0xc], xmm0
lea rcx, [rsp + 0x110]
lea rsi, [rsp + 0x870]
mov rdx, rsi
call fcn.14000a024
mov rcx, rsi
call fcn.140006cde
jmp 0x14001469f
lea rcx, [rsp + 0xb0]
call fcn.140006cde
lea r13, [rsp + 0x618]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
call fcn.140077287
jmp 0x14001469f
cmp qword [rsp + 0x120], 0
je 0x140014f7d
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x110]
movups xmmword [rcx], xmm0
jmp 0x140014f92
mov rax, qword [rsp + 0x78]
mov qword [rax], rbp
lea rcx, [rsp + 0x110]
call fcn.140006cde
nop
add rsp, 0xf88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 8
mov edx, 0x120
call fcn.1402413c0
int3