Function at 0x18000c462
Capabilities:
Encrypt data using dpapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xbe8
movaps xmmword [rsp + 0xbd0], xmm6
mov qword [rsp + 0xd8], rcx
lea r12, [rsp + 0x448]
mov qword [r12], rdx
mov qword [r12 + 8], r8
and qword [rsp + 0xf8], 0
mov eax, 1
mov qword [rsp + 0x100], rax
mov r15d, 1
and qword [rsp + 0x108], 0
lea rsi, [rsp + 0x498]
mov rcx, rsi
call fcn.18000d8fe
lea r8, str.srcchromium_decrypt.rs
lea rdi, [rsp + 0x970]
mov rcx, rdi
mov rdx, rsi
call fcn.180008226
mov rcx, rdi
call fcn.180028880
mov rbx, rax
mov r14, rdx
lea r13, [rsp + 0x1f0]
mov qword [r13], r12
lea rax, [0x18012a560]
mov qword [rsi], rax
mov eax, 2
mov qword [rsi + 8], rax
and qword [rsi + 0x20], 0
lea rax, [0x18000f2a6]
mov qword [r13 + 8], rax
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], r15
lea r15, [rsp + 0x700]
lea rdx, [rsp + 0x498]
mov rcx, r15
call fcn.1800085ba
mov bpl, 1
mov byte [r15 + 0x18], bpl
lea rsi, [rsp + 0x458]
mov rcx, rsi
mov rdx, rbx
mov r8, r14
mov r9, r15
call fcn.1800051db
mov rcx, rdi
call fcn.180007c14
lea rbx, [rsp + 0x498]
mov rcx, rbx
call fcn.18000d8fe
lea r8, str.srcchromium_decrypt.rs
lea rdi, [rsp + 0x970]
mov rcx, rdi
mov rdx, rbx
call fcn.180008226
mov rcx, rdi
call fcn.180028880
mov r14, rax
mov r15, rdx
lea rax, [0x18012a5a8]
mov qword [rbx], rax
mov eax, 2
mov qword [rbx + 8], rax
and qword [rbx + 0x20], 0
mov qword [r13], r12
lea rax, [0x18000f2a6]
mov qword [r13 + 8], rax
mov qword [rbx + 0x10], r13
mov eax, 1
mov qword [rbx + 0x18], rax
lea rbx, [rsp + 0x700]
lea r12, [rsp + 0x498]
mov rcx, rbx
mov rdx, r12
call fcn.1800085ba
mov byte [rbx + 0x18], bpl
lea rcx, [rsp + 0x1d0]
mov rdx, r14
mov r8, r15
mov r9, rbx
call fcn.1800051db
mov rcx, rdi
call fcn.180007c14
and dword [r12], 0
xorps xmm0, xmm0
movups xmmword [r12 + 8], xmm0
mov dword [r12 + 0x18], 7
and qword [r12 + 0x1c], 0
and word [r12 + 0x24], 0
mov byte [r12 + 0x20], bpl
mov rcx, rsi
call fcn.180028880
mov r8, rdx
lea rcx, [rsp + 0x498]
mov rdx, rax
call fcn.18000da02
mov rbx, rax
mov rdi, rdx
mov rcx, rsi
call fcn.180007c14
mov qword [rsp + 0x140], rbx
mov qword [rsp + 0x148], rdi
movabs rsi, 0x8000000000000000
test rbx, rbx
je 0x18000c6a9
mov qword [rsp + 0x128], rsi
lea rcx, [rsp + 0x140]
call fcn.180007e77
mov rbx, qword [rsp + 0xd8]
mov rdi, rsi
jmp 0x18000c876
lea rcx, [rsp + 0xb0]
mov qword [rcx], rdi
lea rsi, [rsp + 0x1f0]
and qword [rsi], 0
mov qword [rsi + 8], 1
and qword [rsi + 0x10], 0
mov rdx, rsi
call fcn.18001d9f0
mov rcx, rax
call fcn.180008261
mov rdx, qword [rsi + 8]
mov r8, qword [rsi + 0x10]
lea rsi, [rsp + 0x498]
mov rcx, rsi
call fcn.1800194cc
cmp byte [rsi], 6
je 0x18000d34c
movups xmm0, xmmword [rsp + 0x498]
movups xmm1, xmmword [rsp + 0x4a8]
lea r8, [rsp + 0x700]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rcx, str.os_crypt
mov edx, 8
call fcn.1800199a5
test rax, rax
mov rbx, qword [rsp + 0xd8]
movabs rdi, 0x8000000000000000
je 0x18000c82e
lea rcx, str.encrypted_key
mov edx, 0xd
mov r8, rax
call fcn.1800199a5
test rax, rax
je 0x18000c82e
mov rcx, rax
call fcn.180019752
test rax, rax
je 0x18000c82e
mov r8, rdx
lea rsi, [rsp + 0x498]
mov rcx, rsi
mov rdx, rax
call fcn.180009208
cmp qword [rsi], rdi
je 0x18000d39a
lea rdi, [rsp + 0x498]
mov rax, qword [rdi + 0x10]
lea rsi, [rsp + 0x970]
mov qword [rsi + 0x10], rax
movups xmm0, xmmword [rdi]
movaps xmmword [rsi], xmm0
mov r8d, 5
mov rcx, rdi
mov rdx, rsi
call fcn.180008657
mov rcx, rdi
call fcn.180007d4b
mov eax, dword [rsi + 0x10]
mov rdx, qword [rsi + 8]
lea rcx, [rsp + 0x60]
mov dword [rcx], eax
and dword [rdi], 0
mov qword [rcx + 8], rdx
and qword [rdi + 8], 0
and dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rdi
and qword [rsp + 0x20], 0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.crypt32.dll_CryptUnprotectData
mov rdx, qword [rdi + 8]
mov r8d, dword [rdi]
lea rcx, [rsp + 0x128]
call fcn.1800083f6
mov rcx, rsi
call fcn.180007c14
movabs rdi, 0x8000000000000000
jmp 0x18000c836
mov qword [rsp + 0x128], rdi
lea rcx, [rsp + 0x700]
call fcn.180007bc0
lea rcx, [rsp + 0x1f0]
call fcn.180007c14
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.kernel32.dll_CloseHandle]
cmp qword [rsp + 0x140], 0
je 0x18000c876
lea rcx, [rsp + 0x140]
call fcn.180007e77
lea rcx, [rsp + 0x1d0]
call fcn.180028880
mov r8, rdx
lea rsi, [rsp + 0x498]
mov rcx, rsi
mov rdx, rax
call fcn.180025df0
cmp dword [rsi + 0x10], 2
jne 0x18000c8bc
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x700], rax
mov dword [rsp + 0x710], 2
jmp 0x18000c8d7
lea rcx, [rsp + 0x700]
lea rdx, [rsp + 0x498]
mov r8d, 0x268
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsp + 0x1d0]
call fcn.180007c14
cmp dword [rsp + 0x710], 2
je 0x18000d17e
lea r15, [rsp + 0x498]
lea rdx, [rsp + 0x700]
mov r8d, 0x268
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
lea r13, [rsp + 0x200]
lea rbp, [rsp + 0x970]
lea rbx, [rsp + 0x478]
lea r14, [rsp + 0x1f0]
lea r12, [rsp + 0x1b0]
xorps xmm6, xmm6
mov rcx, rbp
mov rdx, r15
call fcn.18001da30
cmp qword [rsp + 0x970], 0
je 0x18000d155
mov rcx, qword [rsp + 0x978]
mov rax, qword [rsp + 0x980]
test rcx, rcx
je 0x18000d1f8
mov qword [rsp + 0x1f0], rcx
mov qword [rsp + 0x1f8], rax
mov r8d, 0x248
mov rcx, r13
lea rdx, [rsp + 0x988]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rbx
mov rdx, r14
call fcn.18001dac0
mov rcx, r14
call fcn.180007d81
mov rcx, rbx
call fcn.180028880
mov rcx, rax
call fcn.180022650
test al, al
je 0x18000d148
mov rcx, rbx
call fcn.180028880
mov rcx, rax
call fcn.180021f70
test rax, rax
je 0x18000d148
mov rcx, rax
call fcn.180002471
test rax, rax
je 0x18000d224
mov rsi, rax
mov rdi, rdx
mov r9d, 7
mov rcx, rax
lea r8, str.DefaultProfile
call fcn.180016ae6
test al, al
jne 0x18000ca28
mov r9d, 7
mov rcx, rsi
mov rdx, rdi
lea r8, [0x18012a5ff]
call fcn.180016ae6
test al, al
je 0x18000d148
mov rcx, rbx
call fcn.180028880
mov r8, rdx
mov rcx, r14
mov rdx, rax
call fcn.180026b50
movabs rdi, 0x8000000000000000
cmp qword [rsp + 0x1f0], rdi
je 0x18000d230
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0x1a0], xmm1
movaps xmmword [rsp + 0x190], xmm0
lea rcx, [rsp + 0x190]
call fcn.180028880
mov r8, rdx
mov qword [rsp + 0x20], 0xa
mov rcx, r12
mov rdx, rax
lea r9, str.Login_DataYa_Passman_DataSELECT_action_url__username_value__password_value_FROM_loginsTemp_Data
call fcn.1800224f0
mov rcx, r12
call fcn.180028880
mov r8, rdx
mov rcx, r14
mov rdx, rax
call fcn.1800264c0
cmp dword [rsp + 0x1f0], 2
lea rbp, [rsp + 0x60]
jne 0x18000cae8
mov rax, qword [rsp + 0x1f8]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 2
lea rcx, [rsp + 0x68]
call fcn.180007acc
jmp 0x18000cb12
mov ecx, 9
mov rdi, rbp
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
cmp qword [rsp + 0x60], 2
jne 0x18000cb6a
lea rcx, [rsp + 0x68]
call fcn.180007acc
movabs rdi, 0x8000000000000000
lea rcx, [rsp + 0x190]
call fcn.180028880
mov r8, rdx
mov qword [rsp + 0x20], 0xf
mov rcx, r14
mov rdx, rax
lea r9, [0x18012a62a]
call fcn.1800224f0
mov rcx, r12
call fcn.180007c14
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0x1c0], xmm1
movaps xmmword [rsp + 0x1b0], xmm0
mov sil, 1
jmp 0x18000cb76
xor esi, esi
movabs rdi, 0x8000000000000000
and qword [rsp + 0x40], 0
mov rcx, r12
call fcn.180028880
mov rcx, rax
call fcn.180002471
test rax, rax
je 0x18000cc45
mov r8, rdx
mov rcx, rbp
mov rdx, rax
call fcn.180016236
cmp qword [rsp + 0x60], rdi
jne 0x18000cc92
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x148], rax
lea rdx, [rsp + 0x40]
mov r8d, 0x10001
xor r9d, r9d
call fcn.1800a470c
mov edi, eax
lea rcx, [rsp + 0x140]
call fcn.180007c2e
test edi, edi
je 0x18000cce4
mov rdx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1800165a0
cmp dword [rsp + 0x1f0], 2
jne 0x18000cd1a
mov rcx, qword [rsp + 0x40]
call fcn.1800a32e0
movsxd rax, edi
mov qword [rsp + 0xb0], 1
mov qword [rsp + 0xb8], rax
movabs rdi, 0x8000000000000000
mov qword [rsp + 0xc0], rdi
jmp 0x18000cd5e
lea rax, str.failed_to_process_a_path
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 1
mov qword [rsp + 0x200], 8
movups xmmword [rsp + 0x208], xmm6
lea rcx, [rsp + 0xc0]
mov rdx, r14
call fcn.1800085ba
and qword [rsp + 0xb0], 0
jmp 0x18000cd5e
lea rax, str.failed_to_process_a_path
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], 1
mov qword [rsp + 0x200], 8
movups xmmword [rsp + 0x208], xmm6
lea rcx, [rsp + 0xc0]
mov rdx, r14
call fcn.1800085ba
and qword [rsp + 0xb0], 0
mov rcx, rbp
call fcn.180007685
jmp 0x18000cd5e
and qword [rsp + 0xb8], 0
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xb0], 2
movabs rdi, 0x8000000000000000
lea rbp, [rsp + 0x110]
jmp 0x18000cd75
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0xd0], rax
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0xc0], xmm1
movaps xmmword [rsp + 0xb0], xmm0
mov rcx, qword [rsp + 0x40]
call fcn.1800a32e0
movabs rdi, 0x8000000000000000
lea rbp, [rsp + 0x110]
cmp qword [rsp + 0xb0], 2
jne 0x18000ce0d
lea rcx, [rsp + 0xb8]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x120], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x140]
mov rdx, rbp
call fcn.1800099f1
mov rax, qword [rsp + 0x140]
cmp rax, rdi
jne 0x18000ce11
mov rcx, r12
call fcn.180028880
mov r9d, 9
mov rcx, rax
lea r8, [0x18012a676]
call fcn.180026c10
mov qword [rsp + 0x1f0], rax
mov qword [rsp + 0x1f8], rdx
test rax, rax
lea rbp, [rsp + 0x970]
je 0x18000ceda
cmp rax, 1
jne 0x18000cecd
mov qword [rsp + 0x60], rdx
lea rcx, [rsp + 0x60]
call fcn.180007acc
jmp 0x18000d102
xor esi, esi
jmp 0x18000ce87
lea rdx, [rsp + 0x148]
mov rcx, qword [rdx + 0x20]
mov qword [r13 + 0x18], rcx
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [r13 + 8], xmm1
movups xmmword [r13 - 8], xmm0
mov qword [rsp + 0x1f0], rax
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, r14
lea r8, [rsp + 0x128]
mov r9d, esi
call fcn.18000bc67
mov rdx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
lea rcx, [rsp + 0xf8]
call fcn.18000db18
mov rcx, rdi
call fcn.180007c14
mov rcx, r14
call fcn.180007c50
mov rcx, rbp
call fcn.180007c9c
mov sil, 1
mov rcx, r12
call fcn.180007c14
lea rcx, [rsp + 0x190]
call fcn.180007c14
cmp dword [rsp + 0xb0], 2
lea rbp, [rsp + 0x970]
jne 0x18000d13b
test sil, sil
jne 0x18000d148
lea rcx, [rsp + 0xb8]
call fcn.180007c9c
jmp 0x18000d148
lea rcx, [rsp + 0x1f8]
call fcn.180007acc
and qword [rsp + 0xe0], 0
mov edx, 9
lea rcx, [0x18012a676]
call fcn.180002471
test rax, rax
je 0x18000d28e
mov r8, rdx
lea rcx, [rsp + 0x40]
mov rdx, rax
call fcn.180016236
cmp qword [rsp + 0x40], rdi
jne 0x18000d249
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
lea rdx, [rsp + 0xe0]
mov r8d, 0x10001
xor r9d, r9d
call fcn.1800a470c
mov edi, eax
lea rcx, [rsp + 0x170]
call fcn.180007c2e
test edi, edi
je 0x18000cfbd
mov rdx, qword [rsp + 0xe0]
mov rcx, r14
call fcn.1800165a0
cmp dword [rsp + 0x1f0], 2
je 0x18000d2c9
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x80], rax
movups xmm0, xmmword [rsp + 0x1f0]
movups xmm1, xmmword [rsp + 0x200]
movaps xmmword [rsp + 0x70], xmm1
movaps xmmword [rsp + 0x60], xmm0
mov rcx, qword [rsp + 0xe0]
call fcn.1800a32e0
cmp qword [rsp + 0x60], 2
je 0x18000cfd0
jmp 0x18000d2f6
mov rax, qword [rsp + 0xe0]
and qword [rsp + 0x68], 0
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x68]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rcx]
movaps xmmword [rsp + 0xe0], xmm0
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0xe0]
call fcn.1800099f1
movabs rdi, 0x8000000000000000
cmp qword [rsp + 0x60], rdi
je 0x18000d0eb
movups xmm0, xmmword [rsp + 0x60]
movups xmm1, xmmword [rsp + 0x70]
movups xmm2, xmmword [rsp + 0x80]
movaps xmmword [rsp + 0x210], xmm2
movaps xmmword [rsp + 0x200], xmm1
movaps xmmword [rsp + 0x1f0], xmm0
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, r14
lea r8, [rsp + 0x128]
mov r9d, esi
call fcn.18000bc67
mov rdx, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
lea rcx, [rsp + 0xf8]
call fcn.18000db18
mov rcx, rdi
call fcn.180007c14
mov r8d, 9
mov rcx, rdi
movabs rsi, 0x8000000000000000
lea rdx, [0x18012a676]
call fcn.180026b50
cmp qword [rsp + 0x40], rsi
je 0x18000d37e
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movaps xmmword [rsp + 0x180], xmm1
movaps xmmword [rsp + 0x170], xmm0
lea rcx, [rsp + 0x170]
call fcn.180001878
mov qword [rsp + 0x40], rax
test rax, rax
je 0x18000d0dc
lea rcx, [rsp + 0x40]
call fcn.180007e1e
mov rcx, r14
call fcn.180007c50
cmp qword [rsp + 0x60], rsi
jne 0x18000d0f5
lea rcx, [rsp + 0x60]
call fcn.180007656
lea rcx, [rsp + 0xe0]
call fcn.180007c9c
lea rcx, [rsp + 0x140]
call fcn.180007656
lea rcx, [rsp + 0x110]
call fcn.180007c9c
mov rcx, r12
call fcn.180007c14
lea rcx, [rsp + 0x190]
call fcn.180007c14
cmp dword [rsp + 0xb0], 2
je 0x18000d148
lea rcx, [rsp + 0xb0]
call fcn.180007673
mov rcx, rbx
call fcn.180007c14
jmp 0x18000c93b
lea rcx, [rsp + 0x498]
call fcn.180007a85
cmp dword [rsp + 0x710], 2
mov rbx, qword [rsp + 0xd8]
movabs rdi, 0x8000000000000000
jne 0x18000d18b
lea rcx, [rsp + 0x700]
call fcn.180007e8d
cmp qword [rsp + 0x108], 0
je 0x18000d1bc
mov rax, qword [rsp + 0x108]
mov qword [rbx + 0x10], rax
movups xmm0, xmmword [rsp + 0xf8]
movups xmmword [rbx], xmm0
lea rcx, [rsp + 0x128]
call fcn.1800076a6
jmp 0x18000d1d9
mov qword [rbx], rdi
lea rcx, [rsp + 0x128]
call fcn.1800076a6
lea rcx, [rsp + 0xf8]
call fcn.180007c14
mov rax, rbx
movaps xmm6, xmmword [rsp + 0xbd0]
add rsp, 0xbe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r8, [rsp + 0x60]
mov qword [r8], rax
lea rax, str.srcchromium_decrypt.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, fcn.180007acc
mov edx, 0x2b
call fcn.180126c00
lea rcx, str.srcchromium_decrypt.rs
call fcn.180126830
mov rax, qword [rsp + 0x1f8]
lea r8, [rsp + 0x60]
mov qword [r8], rax
lea rax, str.srcchromium_decrypt.rs
jmp 0x18000d207
lea rdx, [rsp + 0x1f0]
lea rax, str.failed_to_process_a_path
mov qword [rdx], rax
mov qword [rdx + 8], 1
mov qword [rdx + 0x10], 8
xorps xmm0, xmm0
movups xmmword [rdx + 0x18], xmm0
lea rcx, [rsp + 0x70]
call fcn.1800085ba
and qword [rsp + 0x60], 0
lea rcx, [rsp + 0x40]
call fcn.180007685
jmp 0x18000d2f6
lea rdx, [rsp + 0x1f0]
lea rax, str.failed_to_process_a_path
mov qword [rdx], rax
mov qword [rdx + 8], 1
mov qword [rdx + 0x10], 8
xorps xmm0, xmm0
movups xmmword [rdx + 0x18], xmm0
lea rcx, [rsp + 0x70]
call fcn.1800085ba
and qword [rsp + 0x60], 0
jmp 0x18000d2f6
mov rcx, qword [rsp + 0xe0]
call fcn.1800a32e0
movsxd rax, edi
mov qword [rsp + 0x60], 1
mov qword [rsp + 0x68], rax
movabs rax, 0x8000000000000000
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x80]
lea r8, [rsp + 0x1f0]
mov qword [r8 + 0x20], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov qword [r8 + 0x10], rdx
mov rdx, qword [rsp + 0x78]
mov qword [r8 + 0x18], rdx
mov qword [r8], rax
mov qword [r8 + 8], rcx
lea rax, str.srcchromium_decrypt.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, fcn.180007ab2
jmp 0x18000d21a
mov rax, qword [rsp + 0x4a0]
lea r8, [rsp + 0x700]
mov qword [r8], rax
lea rax, str.srcchromium_decrypt.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, [0x180129130]
jmp 0x18000d21a
mov rax, qword [rsp + 0x48]
lea r8, [rsp + 0x170]
mov qword [r8], rax
lea rax, str.srcchromium_decrypt.rs
jmp 0x18000d207
movups xmm0, xmmword [rsp + 0x4a0]
lea r8, [rsp + 0x970]
movaps xmmword [r8], xmm0
lea rax, str.srcchromium_decrypt.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x180129150]
lea r9, [0x180129240]
jmp 0x18000d21a