Function at 0x14001375d
Capabilities:
Encrypt data using dpapi

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf88
lea rax, [rsp + 0x118]
and qword [rax], 0
mov qword [rax + 8], 8
and qword [rax + 0x10], 0
mov r15, rdx
mov qword [rsp + 0x78], rcx
imul rax, r8, 0x18
add rax, rdx
mov qword [rsp + 0x110], rax
lea r14, [0x14024bd15]
lea r13, [rsp + 0x618]
lea rbx, [rsp + 0x870]
movabs rbp, 0x8000000000000000
cmp r15, qword [rsp + 0x110]
je 0x140014320
mov rsi, qword [r15 + 8]
mov rdi, qword [r15 + 0x10]
mov qword [rsp + 0x20], 0xb
mov rcx, r13
mov rdx, rsi
mov r8, rdi
mov r9, r14
call case.0x14013e79a.258
mov rcx, rbx
mov rdx, r13
call fcn.140004f3d
lea r12, [rsp + 0x3b0]
mov rcx, r12
mov rdx, rbx
call fcn.140009458
mov r13, qword [rsp + 0x3b0]
cmp r13, rbp
jne 0x140013829
lea r13, [rsp + 0x618]
jmp 0x140013a8a
mov rbp, qword [rsp + 0x3b8]
mov r8, qword [rsp + 0x3c0]
mov rcx, rbx
mov rdx, rbp
call fcn.1401338ad
mov rcx, r12
mov rdx, rbx
call fcn.140009407
mov al, byte [rsp + 0x3b0]
cmp al, 6
je 0x140013a65
lea rcx, [rsp + 0x3b1]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0xf]
lea rcx, [rsp + 0x151]
movups xmmword [rcx + 0xf], xmm1
movups xmmword [rcx], xmm0
mov byte [rsp + 0x150], al
mov r8d, 8
lea rcx, [rsp + 0x150]
lea rdx, [0x14024bd20]
call fcn.140001dab
mov r8d, 0xd
mov rcx, rax
lea rdx, [0x14024bd28]
call fcn.140001dab
mov rcx, rbx
mov rdx, rax
call fcn.14000ab8e
mov rcx, r12
mov rdx, rbx
call fcn.140001cea
lea rcx, [rsp + 0xae0]
mov rdx, r12
call fcn.1400094a3
mov rax, qword [rsp + 0xae0]
movabs r14, 0x8000000000000000
cmp rax, r14
je 0x140013a51
lea rcx, [rsp + 0xae8]
movups xmm0, xmmword [rcx]
lea rcx, [rsp + 0xd38]
movups xmmword [rcx], xmm0
mov qword [rsp + 0xd30], rax
mov rcx, rbx
lea rdx, [rsp + 0xd30]
call fcn.14000b968
mov rcx, r12
mov rdx, rbx
call fcn.1400095d5
mov rax, qword [rsp + 0x3b0]
cmp rax, r14
je 0x140013a51
mov qword [rsp + 0x40], rax
mov r14, qword [rsp + 0x3b8]
mov rdx, qword [rsp + 0x3c0]
mov rcx, r14
lea r8, [0x14024bfc8]
call fcn.14000da69
mov dword [rsp + 0x3b0], edx
and dword [rsp + 0x870], 0
mov qword [rsp + 0x3b8], rax
and qword [rsp + 0x878], 0
and dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rbx
and qword [rsp + 0x20], 0
mov rcx, r12
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call sub.crypt32.dll_CryptUnprotectData
test eax, eax
je 0x140013a44
mov eax, dword [rsp + 0x870]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x878]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x40]
mov rdx, r14
call fcn.140077287
lea rcx, [rsp + 0x150]
call fcn.140005ed4
mov rcx, r13
mov rdx, rbp
call fcn.140077287
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rax
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14000502d
mov rcx, r12
mov rdx, rbx
call fcn.14000963c
mov esi, dword [rsp + 0x3c0]
cmp esi, 2
jne 0x140013a93
movabs rbp, 0x8000000000000000
lea r14, [0x14024bd15]
jmp 0x1400142fe
mov rcx, qword [rsp + 0x40]
mov rdx, r14
call fcn.140077287
lea rcx, [rsp + 0x150]
call fcn.140005ed4
lea r14, [0x14024bd15]
mov rcx, r13
mov rdx, rbp
call fcn.140077287
movabs rbp, 0x8000000000000000
lea r13, [rsp + 0x618]
lea rbx, [rsp + 0x870]
add r15, 0x18
jmp 0x1400137c1
movups xmm0, xmmword [rsp + 0x3b0]
movaps xmmword [rsp + 0x870], xmm0
mov r8d, 0x254
lea rcx, [rsp + 0x884]
lea rdx, [rsp + 0x3c4]
call fcn.140240685
and qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 8
and qword [rsp + 0xc0], 0
mov dword [rsp + 0x880], esi
movabs rbp, 0x8000000000000000
lea r14, [0x14024bd15]
lea r13, [rsp + 0x618]
lea rbx, [rsp + 0x3b0]
mov rcx, rbx
lea rdx, [rsp + 0x870]
call fcn.14013e060
cmp qword [rsp + 0x3b0], 0
je 0x140014235
mov rcx, r13
lea rdx, [rsp + 0x3b8]
call fcn.1400094d0
cmp qword [rsp + 0x618], 0
je 0x140013d1b
mov r8d, 0x258
lea rcx, [rsp + 0x150]
mov rdx, r13
mov r12, rcx
call fcn.140240685
lea rcx, [rsp + 0xe0]
mov rdx, r12
call fcn.14013e270
mov rsi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf0]
mov qword [rsp + 0x20], 8
lea rcx, [rsp + 0x58]
mov rdx, rsi
lea r9, str.Web_DataSELECT_name_on_card__expiration_month__expiration_year__card_number_encrypted_FROM_credit_cards_src_browserchromiumcreditcards.rs
call case.0x14013e79a.258
mov rdi, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call fcn.1400052e4
mov ebp, eax
mov rcx, qword [rsp + 0x58]
mov rdx, rdi
call fcn.140077287
mov rcx, qword [rsp + 0xe0]
mov rdx, rsi
call fcn.140077287
test bpl, bpl
je 0x140013d09
mov rsi, qword [rsp + 0x150]
mov r8d, 0x250
lea rcx, [rsp + 0xae0]
lea rdx, [rsp + 0x158]
call fcn.140240685
test rsi, rsi
lea r13, [rsp + 0x158]
movabs rbp, 0x8000000000000000
je 0x140013d1b
mov r8d, 0x250
lea rdi, [rsp + 0xd38]
mov rcx, rdi
lea rdx, [rsp + 0xae0]
call fcn.140240685
mov r8d, 0x250
lea rcx, [rsp + 0x3b8]
mov rdx, rdi
call fcn.140240685
mov qword [rsp + 0x3b0], rsi
lea rcx, [rsp + 0x150]
mov rdx, rbx
call fcn.14013e270
mov rsi, qword [rsp + 0x158]
mov r8, qword [rsp + 0x160]
mov qword [rsp + 0x20], 8
lea rcx, [rsp + 0x130]
mov rdx, rsi
lea r9, str.Web_DataSELECT_name_on_card__expiration_month__expiration_year__card_number_encrypted_FROM_credit_cards_src_browserchromiumcreditcards.rs
call case.0x14013e79a.258
mov rcx, qword [rsp + 0x150]
mov rdx, rsi
call fcn.140077287
mov rcx, rbx
call fcn.140006c12
mov r12, qword [rsp + 0x130]
cmp r12, rbp
je 0x140014253
mov rsi, qword [rsp + 0x138]
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x40], rax
mov r8d, 4
mov rcx, rbx
lea rdx, [0x14024b7ce]
call fcn.14013b760
lea rcx, [rsp + 0x150]
mov rdx, rbx
call fcn.14000942a
mov rdi, qword [rsp + 0x150]
cmp rdi, rbp
jne 0x140013d28
lea r13, [rsp + 0x618]
jmp 0x140013ee0
mov rcx, r12
call fcn.140006c12
movabs rbp, 0x8000000000000000
lea r13, [rsp + 0x618]
jmp 0x140013b04
mov qword [rsp + 0x48], r12
mov r14, qword [rsp + 0x158]
mov r12, qword [rsp + 0x160]
mov rcx, rsi
mov rdx, qword [rsp + 0x40]
call case.0x14013c80f.493
test rax, rax
je 0x140013ec1
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0xae0]
mov rdx, r14
mov r8, r12
mov r9, rax
call case.0x14013e79a.258
mov rcx, rdi
mov rdx, r14
call fcn.140077287
mov rcx, rbx
lea rdx, [rsp + 0xae0]
call fcn.1400098f4
mov rcx, rsi
mov rdx, qword [rsp + 0x40]
mov r8, rbx
call fcn.140004faa
mov rcx, rax
call fcn.14000953a
mov r12, qword [rsp + 0xae8]
test rax, rax
lea r14, [0x14024bd15]
mov rdi, rsi
je 0x140014208
mov rsi, qword [rsp + 0xaf0]
mov rcx, rbx
mov qword [rsp + 0x40], r12
mov rdx, r12
mov r8, rsi
call fcn.14000e4b1
lea r12, [rsp + 0x150]
mov rcx, r12
mov rdx, rbx
call fcn.14000965c
cmp qword [rsp + 0x150], 0
je 0x140013ee8
mov qword [rsp + 0x108], rsi
mov qword [rsp + 0x50], rdi
mov ecx, 0xc
lea rdx, [rsp + 0x618]
mov rdi, rdx
mov rsi, r13
rep movsq qword [rdi], qword [rsi]
mov r9d, 0x60
mov rcx, rbx
lea r8, [0x14024bf40]
call fcn.14000e5f1
mov rcx, r12
mov rdx, rbx
call fcn.1400093dc
mov rax, qword [rsp + 0x150]
test rax, rax
je 0x140013ef2
movups xmm0, xmmword [r13]
movups xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmm3, xmmword [r13 + 0x30]
lea rcx, [rsp + 0xd38]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx], xmm0
mov qword [rsp + 0xd30], rax
mov rcx, rbx
lea rdx, [rsp + 0xd30]
call fcn.14000edb6
cmp byte [rsp + 0x3b0], 0x13
jne 0x140013f04
mov rax, qword [rsp + 0x3b8]
mov rcx, qword [rsp + 0x3c0]
lea r13, [rsp + 0x618]
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
jmp 0x140013f74
mov rcx, rdi
mov rdx, r14
call fcn.140077287
lea r14, [0x14024bd15]
lea r13, [rsp + 0x618]
mov r12, qword [rsp + 0x48]
mov rdi, rsi
jmp 0x140014225
mov r12, qword [rsp + 0x40]
jmp 0x140014208
lea r13, [rsp + 0x618]
mov rdi, qword [rsp + 0x50]
jmp 0x1400141fb
movups xmm0, xmmword [rsp + 0x3b0]
movups xmm1, xmmword [rsp + 0x3c0]
movups xmm2, xmmword [rsp + 0x3d0]
movups xmm3, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x150], xmm0
movaps xmmword [rsp + 0x180], xmm3
movaps xmmword [rsp + 0x170], xmm2
movaps xmmword [rsp + 0x160], xmm1
cmp byte [rsp + 0x150], 0x13
lea r13, [rsp + 0x618]
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
jne 0x1400141e1
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x160]
lea rdx, [rsp + 0x98]
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rcx
lea rcx, [rsp + 0x150]
lea rdx, [rsp + 0xc8]
call fcn.140002c7c
cmp qword [rsp + 0x150], rbp
jne 0x140013fe3
and qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 8
and qword [rsp + 0x90], 0
lea rcx, [rsp + 0xd0]
call fcn.1400056c8
jmp 0x1400141d2
mov ecx, 0xe0
call fcn.14000a240
test rax, rax
je 0x140014373
mov rsi, rax
mov rax, qword [rsp + 0x180]
mov qword [rsi + 0x30], rax
movups xmm0, xmmword [rsp + 0x150]
movups xmm1, xmmword [rsp + 0x160]
movups xmm2, xmmword [rsp + 0x170]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
mov qword [rsp + 0x58], 4
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 1
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xf0], rax
movups xmm0, xmmword [rsp + 0xc8]
movaps xmmword [rsp + 0xe0], xmm0
mov edi, 1
mov r14d, 0x38
mov rcx, rbx
lea rdx, [rsp + 0xe0]
call fcn.140002c7c
cmp qword [rsp + 0x3b0], rbp
je 0x1400140e9
cmp rdi, qword [rsp + 0x58]
je 0x1400140cf
mov rax, qword [rsp + 0x3e0]
mov qword [rsi + r14 + 0x30], rax
movups xmm0, xmmword [rsp + 0x3b0]
movups xmm1, xmmword [rsp + 0x3c0]
movups xmm2, xmmword [rsp + 0x3d0]
movups xmmword [rsi + r14 + 0x20], xmm2
movups xmmword [rsi + r14 + 0x10], xmm1
movups xmmword [rsi + r14], xmm0
inc rdi
mov qword [rsp + 0x68], rdi
add r14, 0x38
jmp 0x14001406a
mov r8d, 1
lea rcx, [rsp + 0x58]
mov rdx, rdi
call fcn.140240d44
mov rsi, qword [rsp + 0x60]
jmp 0x14001408b
lea rcx, [rsp + 0xe8]
call fcn.1400056c8
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x90], rax
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x80], xmm0
test rax, rax
lea r14, [0x14024bd15]
mov rdi, qword [rsp + 0x50]
je 0x1400141d2
mov rsi, qword [rsp + 0x40]
mov rcx, rsi
mov rdx, qword [rsp + 0x108]
call fcn.140004f2b
mov qword [rsp + 0x3b0], rax
mov rcx, rbx
call fcn.140006eb4
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x88]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x150], xmm0
lea rcx, [rsp + 0xd30]
call fcn.140006215
mov rcx, r13
call fcn.1400056ec
mov rcx, qword [rsp + 0xae0]
mov rdx, rsi
call fcn.140077287
mov rax, qword [rsp + 0x48]
cmp rax, rbp
je 0x140014225
mov qword [rsp + 0x3b0], rax
movaps xmm0, xmmword [rsp + 0x150]
lea rax, [rsp + 0x3b8]
movups xmmword [rax], xmm0
lea rcx, [rsp + 0xb0]
mov rdx, rbx
call fcn.14000a0b2
mov rcx, rbx
call fcn.140006c24
jmp 0x140014225
lea rcx, [rsp + 0x80]
call fcn.140006c24
jmp 0x1400141ee
lea rcx, [rsp + 0x150]
call fcn.140005e02
lea rcx, [rsp + 0xd30]
call fcn.140006215
mov r12, qword [rsp + 0x40]
mov rcx, r13
call fcn.1400056ec
mov rcx, qword [rsp + 0xae0]
mov rdx, r12
call fcn.140077287
lea r13, [rsp + 0x618]
mov r12, qword [rsp + 0x48]
mov rcx, r12
mov rdx, rdi
call fcn.140077287
jmp 0x140013b04
mov rcx, rbx
call fcn.140005500
and qword [rsp + 0xd30], 0
lea rcx, [rsp + 0xd30]
call fcn.140006eeb
lea rcx, [rsp + 0x870]
call fcn.14000568a
cmp qword [rsp + 0xc0], 0
je 0x1400142f1
mov rsi, qword [rsp + 0xb0]
lea rax, [rsp + 0xb8]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x3b0], xmm0
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
call fcn.140077287
cmp rsi, rbp
lea r13, [rsp + 0x618]
lea rbx, [rsp + 0x870]
je 0x140013a8a
mov qword [rsp + 0x870], rsi
movaps xmm0, xmmword [rsp + 0x3b0]
lea rax, [rsp + 0x884]
movups xmmword [rax - 0xc], xmm0
lea rcx, [rsp + 0x118]
mov rdx, rbx
call fcn.14000a0b2
mov rcx, rbx
call fcn.140006c24
jmp 0x140013a8a
lea rcx, [rsp + 0xb0]
call fcn.140006c24
lea r13, [rsp + 0x618]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
call fcn.140077287
jmp 0x140013a82
cmp qword [rsp + 0x128], 0
je 0x140014349
mov rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x78]
mov qword [rcx + 0x10], rax
movups xmm0, xmmword [rsp + 0x118]
movups xmmword [rcx], xmm0
jmp 0x14001435e
mov rax, qword [rsp + 0x78]
mov qword [rax], rbp
lea rcx, [rsp + 0x118]
call fcn.140006c24
nop
add rsp, 0xf88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 8
mov edx, 0xe0
call fcn.1402413c0
int3