Function at 0x140008d70
Capabilities:
Encrypt data using dpapi

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rax, qword [0x140174200]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov r15, rcx
mov qword [rsp + 0x78], rcx
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x58], rsi
lea ecx, [rsi + 0x30]
call fcn.1400374ac
mov r12, rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], sil
lea ecx, [rsi + 0x32]
call fcn.14003777c
mov r13, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x60]
call fcn.140011910
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x90]
call fcn.140106a30
mov rdx, r15
lea rcx, [rbp + 0x90]
call fcn.140011730
nop
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
mov rax, qword [rbp + rcx + 0xd0]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x50], rcx
mov rax, qword [rcx]
call qword [rax + 8]
nop
lea rcx, [rsp + 0x48]
call fcn.140006910
mov r8, qword [rax]
mov dl, 0xa
mov rcx, rax
call qword [r8 + 0x40]
movzx ebx, al
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140008e94
mov rdx, qword [rcx]
call qword [rdx + 0x10]
test rax, rax
je 0x140008e94
mov r8, qword [rax]
lea edx, [rsi + 1]
mov rcx, rax
call qword [r8]
movzx r8d, bl
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x90]
call fcn.1400142c0
mov rcx, qword [rax]
movsxd rdx, dword [rcx + 4]
test byte [rdx + rax + 0x10], 6
jne 0x14000918b
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp - 0x20], rsi
mov byte [rbp - 0x18], 0
movdqa xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
mov qword [rbp + 0x10], rsi
mov byte [rbp + 0x18], 0
movdqa xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x30], 0
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x40], rsi
mov byte [rbp + 0x48], 0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
jb 0x140008f2e
mov rcx, qword [rbp - 0x80]
mov rdx, qword [rbp - 0x70]
add rdx, rcx
mov rax, rcx
jmp 0x140008f3a
lea rdx, [rbp - 0x80]
add rdx, qword [rbp - 0x70]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rcx
lea r9, [rbp + 0x60]
lea r8, [rbp - 0x20]
mov rcx, rax
call fcn.140014510
test al, al
je 0x140008ff4
mov rcx, qword [rbp - 8]
mov r8, qword [rbp - 0x10]
sub rcx, r8
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 1
lea rax, [rbp + 0x38]
jbe 0x140008f8b
lea rax, [r8 + 0x18]
cmp byte [rax + 0x10], 0
je 0x140008f9b
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
jmp 0x140008fa4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
cmp rdx, r8
jne 0x140008fd5
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
jmp 0x140008fe2
sub r8, rdx
lea rcx, [rsp + 0x58]
call fcn.140001bb0
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rsp + 0x68]
movups xmmword [rbp - 0x38], xmm1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x60]
call fcn.140001650
nop
mov rbx, qword [rbp - 0x58]
sub rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14003777c
mov rdi, rax
lea rsi, [rbx - 5]
mov r14, qword [rbp - 0x60]
add r14, 5
test rsi, rsi
je 0x140009093
test rax, rax
jne 0x140009045
call fcn.140113700
mov dword [rax], 0x16
jmp 0x14000908e
test r14, r14
je 0x14000905f
cmp rbx, rsi
jb 0x14000905f
mov r8, rsi
mov rdx, r14
mov rcx, rdi
call fcn.140106380
jmp 0x140009093
mov r8, rbx
xor edx, edx
mov rcx, rdi
call fcn.140106a30
test r14, r14
jne 0x14000907e
call fcn.140113700
mov dword [rax], 0x16
jmp 0x14000908e
cmp rbx, rsi
jae 0x140009093
call fcn.140113700
mov dword [rax], 0x22
call fcn.140113594
mov dword [rsp + 0x48], ebx
mov qword [rsp + 0x50], rdi
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
xor esi, esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x1400090de
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CryptUnprotectData_failed_with_error_0x_.8x
call fcn.140007cd0
jmp 0x1400090f6
mov ebx, dword [rsp + 0x58]
mov r8d, ebx
mov rdx, qword [rsp + 0x60]
mov rcx, r13
call fcn.140106380
mov byte [rbx + r13], sil
mov rcx, rdi
call fcn.140037738
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140009145
mov rdx, qword [rbp - 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009134
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009394
call fcn.140037738
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rsi
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140009181
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000917b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000939a
call fcn.140037738
nop
lea rcx, [rbp - 0x10]
call fcn.140010a70
nop
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x90], rax
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x8c], edx
lea rcx, [rbp + 0xa0]
call fcn.140011680
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x90], rax
mov rax, qword [rbp + 0x90]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x8c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x140], rax
lea rcx, [rbp + 0x140]
call fcn.140036784
nop
lea rcx, [rbp + 0x60]
call fcn.140012b90
mov rcx, qword [rbp + 0x80]
test rcx, rcx
je 0x140009242
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140009242
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x14000927d
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009278
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400093a0
call fcn.140037738
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rax, qword [r12 + 8]
mov qword [rax], rsi
mov rbx, qword [r12]
test rbx, rbx
je 0x140009301
mov rdi, qword [rbx]
mov rdx, qword [rbx + 0x28]
cmp rdx, 0x10
jb 0x1400092dc
mov rcx, qword [rbx + 0x10]
inc rdx
cmp rdx, 0x1000
jb 0x1400092d7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009388
mov rcx, r8
call fcn.140037738
mov qword [rbx + 0x20], rsi
mov qword [rbx + 0x28], 0xf
mov byte [rbx + 0x10], 0
mov edx, 0x30
mov rcx, rbx
call fcn.140037738
mov rbx, rdi
test rdi, rdi
jmp 0x14000929c
mov edx, 0x30
mov rcx, r12
call fcn.140037738
nop
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140009345
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140009340
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000938e
mov rcx, r8
call fcn.140037738
mov qword [r15 + 0x10], rsi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rax, r13
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.1400371f0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401135b4
nop
call fcn.1401135b4
nop
call fcn.1401135b4
nop
call fcn.1401135b4
nop
call fcn.1401135b4
int3