Function at 0x1400070d4
Capabilities:
Encrypt data using dpapi

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa0
mov rsi, r9
mov ebx, r8d
mov rdi, rdx
call fcn.1400135a4
lea rcx, [rbp + 0xf]
mov rdx, rax
call sub.mfc110.dll_Ordinal_322
test rdi, rdi
je 0x140007358
mov r15, qword [rbp + 0x77]
test r15, r15
je 0x140007358
mov r12, qword [rbp + 0x7f]
test r12, r12
je 0x140007358
cmp ebx, 0x64
ja 0x140007358
lea rcx, [rbp - 0x39]
mov rdx, rdi
call fcn.140002f18
lea rcx, [rbp - 0x29]
mov rdx, rsi
call fcn.140002f18
mov dword [rbp - 0x11], ebx
mov rbx, qword [rbp - 0x39]
test rbx, rbx
je 0x140007175
cmp qword [rbx + 8], 0
jne 0x14000716f
mov rcx, qword [rbx]
call fcn.140012690
mov qword [rbx + 8], rax
mov rax, qword [rbx + 8]
jmp 0x140007177
xor eax, eax
mov rdi, qword [rbp - 0x29]
mov esi, dword [rbp + 0x6f]
mov qword [rbp - 9], rax
mov dword [rbp - 0x21], esi
test rdi, rdi
je 0x1400071a3
cmp qword [rdi + 8], 0
jne 0x14000719d
mov rcx, qword [rdi]
call fcn.140012690
mov qword [rdi + 8], rax
mov rax, qword [rdi + 8]
jmp 0x1400071a5
xor eax, eax
mov qword [rbp - 0x19], rax
lea rax, [rbp - 0x21]
neg esi
sbb r8, r8
lea rcx, [rbp - 0x11]
xor r9d, r9d
and r8, rax
lea rax, [rbp - 1]
xor edx, edx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 1
and qword [rsp + 0x20], 0
call qword [sym.imp.CRYPT32.dll_CryptProtectData]
test eax, eax
jne 0x1400071e9
mov esi, 0x80004005
jmp 0x1400072c8
mov edx, dword [rbp - 1]
mov r14, qword [rbp + 7]
test edx, edx
je 0x1400072b8
and qword [rbp - 0x41], 0
lea r8, [rbp - 0x41]
mov r9b, 1
mov rcx, r14
call fcn.14000144c
test al, al
je 0x1400072b8
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x1400072b8
mov edx, 0x1000
call qword [sym.imp.MSVCR110.dll_strnlen]
lea rcx, [rax + 1]
call qword [sym.imp.MSVCR110.dll_malloc]
mov rsi, rax
test rax, rax
je 0x14000726a
mov r8, qword [rbp - 0x41]
test r8, r8
jne 0x14000724b
xor eax, eax
jmp 0x14000725d
mov edx, 0x1000
mov rcx, r8
call qword [sym.imp.MSVCR110.dll_strnlen]
mov r8, qword [rbp - 0x41]
lea rdx, [rax + 1]
mov rcx, rsi
call qword [sym.imp.MSVCR110.dll_strcpy_s]
mov rcx, qword [rbp - 0x41]
call qword [sym.imp.MSVCR110.dll_free]
lea rcx, [rbp - 0x31]
mov rdx, rsi
call qword [sym.imp.mfc110.dll_Ordinal_310]
test rsi, rsi
je 0x1400072a5
mov edx, 0x1000
mov rcx, rsi
call qword [sym.imp.MSVCR110.dll_strnlen]
lea rcx, [rbp - 0x31]
mov dword [r12], eax
call qword [sym.imp.mfc110.dll_Ordinal_2341]
mov qword [r15], rax
mov rcx, rsi
call qword [sym.imp.MSVCR110.dll_free]
lea rcx, [rbp - 0x31]
call qword [sym.imp.mfc110.dll_Ordinal_1026]
test r14, r14
je 0x1400072c6
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor esi, esi
or r14d, 0xffffffff
test rdi, rdi
je 0x140007313
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
add eax, r14d
jne 0x14000730f
mov rbx, qword [rbp - 0x29]
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400072f4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
and qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140007307
call sub.MSVCR110.dll_void___cdecl_operator_delete___void____ptr64_
and qword [rbx + 8], 0
mov rcx, rbx
call sub.MSVCR110.dll_void___cdecl_operator_delete_void____ptr64_
mov rbx, qword [rbp - 0x39]
test rbx, rbx
je 0x14000735d
mov eax, r14d
lock xadd dword [rbx + 0x10], eax
add eax, r14d
jne 0x14000735d
mov rbx, qword [rbp - 0x39]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000733b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
and qword [rbx], 0
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000734e
call sub.MSVCR110.dll_void___cdecl_operator_delete___void____ptr64_
and qword [rbx + 8], 0
mov rcx, rbx
call sub.MSVCR110.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x14000735d
mov esi, 0x80070057
lea rcx, [rbp + 0xf]
call sub.mfc110.dll_Ordinal_1030
lea r11, [rsp + 0xa0]
mov eax, esi
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret