Function at 0x140012272
Capabilities:
Encrypt data using dpapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf88
mov qword [rsp + 0x68], rcx
lea rax, [rsp + 0x110]
and qword [rax], 0
mov qword [rax + 8], 8
and qword [rax + 0x10], 0
imul rax, r8, 0x18
add rax, rdx
mov qword [rsp + 0x100], rax
lea r12, [rsp + 0x151]
lea rbp, [rsp + 0xd30]
lea r13, [rsp + 0xac0]
lea rbx, [rsp + 0x150]
movabs r15, 0x8000000000000000
cmp rdx, qword [rsp + 0x100]
je 0x140012e3d
mov rsi, qword [rdx + 8]
mov qword [rsp + 0x108], rdx
mov rdi, qword [rdx + 0x10]
mov qword [rsp + 0x20], 0xb
mov rcx, rbp
mov rdx, rsi
mov r8, rdi
lea r9, [0x14024bd15]
call case.0x14013e79a.258
mov rcx, r13
mov rdx, rbp
call fcn.140004f3d
mov rcx, rbx
mov rdx, r13
call fcn.140009458
mov r14, qword [rsp + 0x150]
cmp r14, r15
je 0x1400125a4
mov rbp, qword [rsp + 0x158]
mov r8, qword [rsp + 0x160]
mov rcx, r13
mov rdx, rbp
call fcn.1401338ad
mov rcx, rbx
mov rdx, r13
call fcn.140009407
mov al, byte [rsp + 0x150]
cmp al, 6
je 0x140012581
movups xmm0, xmmword [r12]
movups xmm1, xmmword [r12 + 0xf]
lea rcx, [rsp + 0x3c1]
movups xmmword [rcx + 0xf], xmm1
movups xmmword [rcx], xmm0
mov byte [rsp + 0x3c0], al
mov r8d, 8
lea rcx, [rsp + 0x3c0]
lea rdx, [0x14024bd20]
call fcn.140001dab
mov r8d, 0xd
mov rcx, rax
lea rdx, [0x14024bd28]
call fcn.140001dab
mov rcx, r13
mov rdx, rax
call fcn.14000ab8e
mov rcx, rbx
mov rdx, r13
call fcn.140001cea
lea rcx, [rsp + 0x618]
mov rdx, rbx
call fcn.1400094a3
mov rax, qword [rsp + 0x618]
cmp rax, r15
je 0x140012574
lea rcx, [rsp + 0x620]
movups xmm0, xmmword [rcx]
lea rcx, [rsp + 0x870]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x868], rax
mov rcx, r13
lea rdx, [rsp + 0x868]
call fcn.14000b968
mov rcx, rbx
mov rdx, r13
call fcn.1400095d5
mov r12, qword [rsp + 0x150]
cmp r12, r15
jne 0x14001244e
lea r12, [rsp + 0x151]
jmp 0x140012574
mov r15, qword [rsp + 0x158]
mov rdx, qword [rsp + 0x160]
mov rcx, r15
lea r8, [0x14024bd38]
call fcn.14000da69
mov dword [rsp + 0x150], edx
and dword [rsp + 0xac0], 0
mov qword [rsp + 0x158], rax
and qword [rsp + 0xac8], 0
and dword [rsp + 0x28], 0
mov qword [rsp + 0x30], r13
and qword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.crypt32.dll_CryptUnprotectData
test eax, eax
je 0x140012557
mov eax, dword [rsp + 0xac0]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0xac8]
mov qword [rsp + 0x38], rax
mov rcx, r12
mov rdx, r15
call fcn.140077287
lea rcx, [rsp + 0x3c0]
call fcn.140005ed4
mov rcx, r14
mov rdx, rbp
call fcn.140077287
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], rax
mov rcx, r13
mov rdx, rsi
mov r8, rdi
call fcn.14000502d
mov rcx, rbx
mov rdx, r13
call fcn.14000963c
mov esi, dword [rsp + 0x160]
cmp esi, 2
jne 0x1400125b5
lea r12, [rsp + 0x151]
movabs r15, 0x8000000000000000
lea rbp, [rsp + 0xd30]
jmp 0x140012e23
mov rcx, r12
mov rdx, r15
call fcn.140077287
lea r12, [rsp + 0x151]
movabs r15, 0x8000000000000000
lea rcx, [rsp + 0x3c0]
call fcn.140005ed4
mov rcx, r14
mov rdx, rbp
call fcn.140077287
lea rbp, [rsp + 0xd30]
lea r13, [rsp + 0xac0]
lea rbx, [rsp + 0x150]
mov rdx, qword [rsp + 0x108]
add rdx, 0x18
jmp 0x1400122dc
movups xmm0, xmmword [rsp + 0x150]
movaps xmmword [rsp + 0xac0], xmm0
mov r8d, 0x254
lea rcx, [rsp + 0xad4]
lea rdx, [rsp + 0x164]
call fcn.140240685
and qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 8
and qword [rsp + 0xd8], 0
mov dword [rsp + 0xad0], esi
lea r12, [rsp + 0x151]
movabs r15, 0x8000000000000000
lea rbp, [rsp + 0xd30]
mov rcx, rbx
mov rdx, r13
call fcn.14013e060
cmp qword [rsp + 0x150], 0
je 0x140012d73
mov rcx, rbp
lea rdx, [rsp + 0x158]
call fcn.1400094d0
cmp qword [rsp + 0xd30], 0
je 0x14001261f
mov r8d, 0x258
lea r14, [rsp + 0x3c0]
mov rcx, r14
mov rdx, rbp
call fcn.140240685
lea rcx, [rsp + 0xe0]
mov rdx, r14
call fcn.14013e270
mov rsi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov r15d, 7
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x48]
mov rdx, rsi
lea r9, str.NetworkCookiestempSELECT_host_key__name__encrypted_value_FROM_cookies_src_browserchromiumcookies.rsLocal_Stateos_cryptencrypted_key
call case.0x14013e79a.258
mov rdi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov qword [rsp + 0x20], r15
lea rcx, [rsp + 0x70]
mov rdx, rdi
lea r9, [0x14024bcb7]
call case.0x14013e79a.258
mov r15, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x80]
mov rcx, r15
call fcn.1400052e4
mov ebp, eax
mov rcx, qword [rsp + 0x70]
mov rdx, r15
call fcn.140077287
mov rcx, qword [rsp + 0x48]
mov rdx, rdi
call fcn.140077287
mov rcx, qword [rsp + 0xe0]
mov rdx, rsi
call fcn.140077287
test bpl, bpl
je 0x140012d66
mov rsi, qword [rsp + 0x3c0]
mov r8d, 0x250
lea rcx, [rsp + 0x618]
lea rdx, [rsp + 0x3c8]
call fcn.140240685
test rsi, rsi
movabs r15, 0x8000000000000000
lea rbp, [rsp + 0xd30]
je 0x14001261f
mov r8d, 0x250
lea rdi, [rsp + 0x870]
mov rcx, rdi
lea rdx, [rsp + 0x618]
call fcn.140240685
mov r8d, 0x250
lea rcx, [rsp + 0x158]
mov rdx, rdi
call fcn.140240685
mov qword [rsp + 0x150], rsi
lea rcx, [rsp + 0x3c0]
mov rdx, rbx
call fcn.14013e270
mov rsi, qword [rsp + 0x3c8]
mov r8, qword [rsp + 0x3d0]
mov r14d, 7
mov qword [rsp + 0x20], r14
mov rcx, rbp
mov rdx, rsi
lea r9, str.NetworkCookiestempSELECT_host_key__name__encrypted_value_FROM_cookies_src_browserchromiumcookies.rsLocal_Stateos_cryptencrypted_key
call case.0x14013e79a.258
mov rdi, qword [rsp + 0xd38]
mov r8, qword [rsp + 0xd40]
mov qword [rsp + 0x20], r14
lea rcx, [rsp + 0x130]
mov rdx, rdi
lea r9, [0x14024bcb7]
call case.0x14013e79a.258
mov rcx, qword [rsp + 0xd30]
mov rdx, rdi
call fcn.140077287
mov rcx, qword [rsp + 0x3c0]
mov rdx, rsi
call fcn.140077287
mov rcx, rbx
call fcn.140006c12
mov r14, qword [rsp + 0x130]
cmp r14, r15
je 0x140012d91
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x128], rax
mov r8d, 4
mov rcx, rbx
lea rdx, [0x14024bcbe]
call fcn.14013b760
lea rcx, [rsp + 0x3c0]
mov rdx, rbx
call fcn.14000942a
mov rdi, qword [rsp + 0x3c0]
cmp rdi, r15
je 0x140012a5c
mov r15, qword [rsp + 0x3c8]
mov r12, qword [rsp + 0x3d0]
mov rcx, rsi
mov rdx, qword [rsp + 0x38]
call case.0x14013c80f.493
test rax, rax
je 0x140012a3f
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x20], rdx
lea r14, [rsp + 0x618]
mov rcx, r14
mov rdx, r15
mov r8, r12
mov r9, rax
call case.0x14013e79a.258
mov rcx, rdi
mov rdx, r15
call fcn.140077287
mov rcx, rbx
mov rdx, r14
call fcn.1400098f4
mov rdi, rsi
mov rcx, rsi
mov rdx, qword [rsp + 0x38]
mov r8, rbx
call fcn.140004faa
mov rsi, rax
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x3c8], rdx
lea rcx, [rsp + 0x3c0]
call fcn.140006ddb
test rsi, rsi
lea r12, [rsp + 0x151]
lea r15, [rsp + 0x3c8]
jne 0x140012d32
lea rsi, [rsp + 0x868]
mov rcx, rsi
lea rdx, [rsp + 0x618]
call fcn.1400098f4
mov rcx, rbx
mov rdx, rsi
call fcn.14000e357
lea r14, [rsp + 0x3c0]
mov rcx, r14
mov rdx, rbx
call fcn.14000965c
cmp qword [rsp + 0x3c0], 0
je 0x140012d32
mov qword [rsp + 0x38], rdi
mov ecx, 0xc
mov rdi, rbp
mov rsi, r15
rep movsq qword [rdi], qword [rsi]
mov r9d, 0x34
mov rcx, rbx
mov rdx, rbp
lea r8, [0x14024bcc2]
call fcn.14000e5f1
mov rcx, r14
mov rdx, rbx
call fcn.1400093dc
mov rax, qword [rsp + 0x3c0]
test rax, rax
je 0x140012a64
movups xmm0, xmmword [r15]
movups xmm1, xmmword [r15 + 0x10]
movups xmm2, xmmword [r15 + 0x20]
movups xmm3, xmmword [r15 + 0x30]
lea rcx, [rsp + 0x870]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov qword [rsp + 0x868], rax
mov rcx, rbx
lea rdx, [rsp + 0x868]
call fcn.14000edb6
cmp byte [rsp + 0x150], 0x13
mov rdi, qword [rsp + 0x38]
jne 0x140012a6e
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x160]
movabs rsi, 0x8000000000000000
lea r14, [rsp + 0x3c0]
jmp 0x140012ade
mov rcx, rdi
mov rdx, r15
call fcn.140077287
lea r12, [rsp + 0x151]
movabs r15, 0x8000000000000000
mov rdi, rsi
jmp 0x140012d56
mov rdi, qword [rsp + 0x38]
jmp 0x140012d2a
movups xmm0, xmmword [rsp + 0x150]
movups xmm1, xmmword [rsp + 0x160]
movups xmm2, xmmword [rsp + 0x170]
movups xmm3, xmmword [rsp + 0x180]
movaps xmmword [rsp + 0x3c0], xmm0
movaps xmmword [rsp + 0x3f0], xmm3
movaps xmmword [rsp + 0x3e0], xmm2
movaps xmmword [rsp + 0x3d0], xmm1
cmp byte [rsp + 0x3c0], 0x13
lea r14, [rsp + 0x3c0]
jne 0x140012d15
mov rax, qword [rsp + 0x3c8]
mov rcx, qword [rsp + 0x3d0]
movabs rsi, 0x8000000000000000
lea rdx, [rsp + 0x128]
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rcx
mov rcx, r14
lea rdx, [rsp + 0x70]
call fcn.140003457
cmp qword [rsp + 0x3c0], rsi
jne 0x140012b3c
and qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 8
and qword [rsp + 0xa0], 0
lea rcx, [rsp + 0x78]
call fcn.1400056c8
jmp 0x140012d06
mov ecx, 0x120
call fcn.14000a240
test rax, rax
je 0x140012e90
mov r13, rax
mov ecx, 9
mov rdi, rax
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
mov qword [rsp + 0x48], 4
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 1
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0xe0], xmm0
mov ebp, 1
mov r15d, 0x48
mov rcx, rbx
lea rdx, [rsp + 0xe0]
call fcn.140003457
movabs rax, 0x8000000000000000
cmp qword [rsp + 0x150], rax
mov rdi, qword [rsp + 0x38]
je 0x140012c06
cmp rbp, qword [rsp + 0x48]
je 0x140012bec
lea rdi, [r15 + r13]
mov ecx, 9
mov rsi, rbx
rep movsq qword [rdi], qword [rsi]
inc rbp
mov qword [rsp + 0x58], rbp
add r15, 0x48
jmp 0x140012b9f
mov r8d, 1
lea rcx, [rsp + 0x48]
mov rdx, rbp
call fcn.140240c80
mov r13, qword [rsp + 0x50]
jmp 0x140012bcf
lea rcx, [rsp + 0xe8]
call fcn.1400056c8
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rsp + 0x90], xmm0
test rax, rax
lea rbp, [rsp + 0xd30]
lea r13, [rsp + 0xac0]
je 0x140012d06
mov rsi, qword [rsp + 0x618]
mov rdi, qword [rsp + 0x620]
mov rdx, qword [rsp + 0x628]
mov rcx, rdi
call case.0x14013f32b.338
mov r15, rax
mov rcx, rsi
mov rdx, rdi
mov rdi, qword [rsp + 0x38]
call fcn.140077287
mov qword [rsp + 0x150], r15
mov rcx, rbx
call fcn.140006eb4
mov rsi, qword [rsp + 0x90]
lea rax, [rsp + 0x98]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x3c0], xmm0
lea rcx, [rsp + 0x868]
call fcn.140006215
mov rcx, rbp
call fcn.1400056ec
movabs r15, 0x8000000000000000
cmp rsi, r15
mov r14, qword [rsp + 0x40]
je 0x140012d56
mov qword [rsp + 0x150], rsi
movaps xmm0, xmmword [rsp + 0x3c0]
lea rax, [rsp + 0x158]
movups xmmword [rax], xmm0
lea rcx, [rsp + 0xc8]
mov rdx, rbx
call fcn.14000a024
mov rcx, rbx
call fcn.140006cde
jmp 0x140012d56
lea rcx, [rsp + 0x90]
call fcn.140006cde
jmp 0x140012d1d
mov rcx, r14
call fcn.140005e02
lea rcx, [rsp + 0x868]
call fcn.140006215
mov rcx, rbp
call fcn.1400056ec
mov rcx, qword [rsp + 0x618]
mov rdx, qword [rsp + 0x620]
call fcn.140077287
movabs r15, 0x8000000000000000
mov r14, qword [rsp + 0x40]
mov rcx, r14
mov rdx, rdi
call fcn.140077287
jmp 0x14001261f
mov rcx, r14
call fcn.140006c12
jmp 0x14001260d
mov rcx, rbx
call fcn.140005500
and qword [rsp + 0x868], 0
lea rcx, [rsp + 0x868]
call fcn.140006eeb
mov rcx, r13
call fcn.14000568a
cmp qword [rsp + 0xd8], 0
je 0x140012e16
mov rsi, qword [rsp + 0xc8]
lea rax, [rsp + 0xd0]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.140077287
cmp rsi, r15
je 0x1400125a4
mov qword [rsp + 0xac0], rsi
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0xad4]
movups xmmword [rax - 0xc], xmm0
lea rcx, [rsp + 0x110]
mov rdx, r13
call fcn.14000a024
mov rcx, r13
call fcn.140006cde
jmp 0x1400125a4
lea rcx, [rsp + 0xc8]
call fcn.140006cde
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0xb8]
call fcn.140077287
jmp 0x1400125a4
cmp qword [rsp + 0x120], 0
je 0x140012e66
mov rax, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x110]
movups xmmword [rcx], xmm0
jmp 0x140012e7b
mov rax, qword [rsp + 0x68]
mov qword [rax], r15
lea rcx, [rsp + 0x110]
call fcn.140006cde
nop
add rsp, 0xf88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 8
mov edx, 0x120
call fcn.1402413c0
int3