Function at 0x1400058d0
Capabilities:
Encrypt data using dpapi

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0xb70
mov rax, qword [0x1400e8180]
xor rax, rsp
mov qword [rsp + 0xb60], rax
mov rbx, rdx
mov rsi, rcx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x188], rdx
mov r8d, 0xc
lea rdx, str._Local_State
mov rcx, rbx
call fcn.140021a00
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140005927
mov rcx, qword [rbx]
xor edx, edx
call fcn.1400984cc
test eax, eax
jne 0x140005f3c
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x250]
call fcn.140088260
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140005958
mov rdx, qword [rbx]
mov r8d, 1
lea rcx, [rsp + 0x250]
call fcn.14001dc10
nop
xor edi, edi
mov qword [rsp + 0x1c0], rdi
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], 0xf
mov byte [rsp + 0x1c0], dil
mov qword [rsp + 0x1f0], rdi
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], 0xf
mov byte [rsp + 0x1f0], dil
mov byte [rsp + 0x1e0], dil
xor edx, edx
lea rcx, [rsp + 0x1e8]
call fcn.140023400
nop
mov qword [rsp + 0x248], rdi
lea rax, [rsp + 0x250]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
mov rax, qword [rsp + rcx + 0x298]
mov qword [rsp + 0x178], rax
lea r8, [rsp + 0x210]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x80]
call fcn.140027390
nop
lea r8, [rsp + 0x1e0]
mov rcx, rax
call fcn.1400206c0
nop
lea rcx, [rsp + 0xc8]
call fcn.14001f6a0
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x140005a5f
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
mov qword [rsp + 0x210], rdi
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], 0xf
mov r8d, 8
lea rdx, str.os_crypt
lea rcx, [rsp + 0x210]
call fcn.1400218a0
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x1e0]
call fcn.14002d160
mov r14, rax
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], 0xf
mov r8d, 0xd
lea rdx, str.encrypted_key
lea rcx, [rsp + 0x1a0]
call fcn.1400218a0
lea rdx, [rsp + 0x1a0]
mov rcx, r14
call fcn.14002d160
cmp byte [rax], 3
jne 0x140005fe9
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140005b0e
mov rdx, qword [rdx]
lea rcx, [rsp + 0x1c0]
call fcn.1400218a0
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x360]
call fcn.140088260
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 0x10
cmovae r8, qword [rsp + 0x1c0]
mov dword [rsp + 0x38], 3
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x180]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
mov r9, qword [rsp + 0x1d0]
mov edx, 0x800
lea rcx, [rsp + 0x360]
call qword [sym.imp.libsodium.dll_sodium_base642bin]
test eax, eax
jne 0x140005d57
mov r8, qword [rsp + 0x180]
add r8, 0xfffffffffffffffb
mov qword [rsp + 0x210], rdi
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], 0xf
mov byte [rsp + 0x210], al
lea rdx, [rsp + 0x365]
lea rcx, [rsp + 0x210]
call fcn.1400218a0
nop
mov eax, dword [rsp + 0x220]
mov dword [rsp + 0x190], eax
lea rax, [rsp + 0x210]
cmp qword [rsp + 0x228], 0x10
cmovae rax, qword [rsp + 0x210]
mov qword [rsp + 0x198], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x190]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x140005cec
mov r8d, dword [rsp + 0x170]
mov qword [rsp + 0x1a0], rdi
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], 0xf
mov byte [rsp + 0x1a0], 0
mov rdx, qword [rsp + 0x178]
lea rcx, [rsp + 0x1a0]
call fcn.1400218a0
nop
lea rdx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 0x10
cmovae rdx, qword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1f0]
call fcn.1400218a0
nop
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0x10
jb 0x140005d03
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ce5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000603a
call fcn.140080f50
jmp 0x140005d03
xor r8d, r8d
lea rdx, [0x1400cfb1b]
lea rcx, [rsp + 0x1f0]
call fcn.1400218a0
mov rcx, qword [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rsp + 0x228]
cmp rdx, 0x10
jb 0x140005d6e
inc rdx
mov rcx, qword [rsp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005d50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006040
call fcn.140080f50
jmp 0x140005d6e
xor r8d, r8d
lea rdx, [0x1400cfb1b]
lea rcx, [rsp + 0x1f0]
call fcn.1400218a0
lea rcx, [rsp + 0x260]
call fcn.140020d50
test rax, rax
jne 0x140005db4
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
lea r9, [rsp + 0x250]
add rcx, r9
mov edx, 6
mov eax, 2
cmp qword [rcx + 0x48], 0
cmovne edx, eax
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.140003a40
movups xmm0, xmmword [rsp + 0x1f0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rsp + 0x200]
movups xmmword [rsi + 0x10], xmm1
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x208], 0xf
mov byte [rsp + 0x1f0], 0
movzx edx, byte [rsp + 0x1e0]
lea rcx, [rsp + 0x1e8]
call fcn.140021040
nop
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 0x10
jb 0x140005e40
inc rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006046
call fcn.140080f50
mov qword [rsp + 0x1d0], rdi
mov qword [rsp + 0x1d8], 0xf
mov byte [rsp + 0x1c0], 0
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x250], rax
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x24c], edx
lea rcx, [rsp + 0x260]
call fcn.14001db60
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x250], rax
mov rax, qword [rsp + 0x250]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x24c], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x300], rax
lea rcx, [rsp + 0x300]
call fcn.1400838c0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140005f25
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140005f20
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000604c
mov rcx, r8
call fcn.140080f50
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rax, rsi
jmp 0x140005fbf
xor edi, edi
mov qword [rsi], rdi
mov qword [rsi + 0x10], rdi
mov qword [rsi + 0x18], 0xf
mov byte [rsi], dil
xor r8d, r8d
lea rdx, [0x1400cfb1b]
mov rcx, rsi
call fcn.1400218a0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140005f99
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140005f94
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005fe3
mov rcx, r8
call fcn.140080f50
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rax, rsi
jmp 0x140005fbf
mov rcx, qword [rsp + 0xb60]
xor rcx, rsp
call fcn.140080f30
mov rbx, qword [rsp + 0xba0]
add rsp, 0xb70
pop r14
pop rdi
pop rsi
ret
call fcn.1400996b0
nop
mov rcx, rax
call fcn.14002d8f0
mov qword [rsp + 0x170], rax
lea r8, [rsp + 0x170]
lea rdx, str.type_must_be_string__but_is
lea rcx, [rsp + 0x210]
call fcn.140037080
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rsp + 0x48]
call fcn.140034f30
lea rdx, [0x1400e5790]
lea rcx, [rsp + 0x48]
call fcn.140087adc
nop
call fcn.1400996b0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
nop
call fcn.1400996b0
int3