Function at 0x1400060d0
Capabilities:
Encrypt data using dpapi

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0x100
mov rax, qword [0x140079040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rdi, rdx
mov rbx, rcx
mov qword [rsp + 0x40], rdx
xor esi, esi
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], rsi
lea r8d, [rsi + 8]
lea rdx, str.os_crypt
lea rcx, [rbp - 0x59]
call fcn.14000bbe8
lea rdx, [rbp - 0x59]
mov rcx, rbx
call fcn.14000d964
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rbp - 0x71], rsi
mov qword [rbp - 0x69], rsi
lea r8d, [rsi + 0xd]
lea rdx, str.encrypted_key
lea rcx, [rsp + 0x48]
call fcn.14000bbe8
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.14000d964
lea rdx, [rbp + 7]
mov rcx, rax
call fcn.14000b7b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], rsi
lea r14d, [rsi + 0xf]
mov qword [rbp - 0x11], r14
mov byte [rbp - 0x29], sil
lea r8, [rbp - 0x29]
lea rdx, [rbp + 7]
lea rcx, [rsp + 0x48]
call fcn.1400043d4
mov r15d, 0x1000
mov rdx, qword [rbp - 0x69]
cmp rdx, r14
jbe 0x1400061da
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, r15
jb 0x1400061d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000634c
call fcn.140020dd0
lea r10, [rbp - 0x29]
mov r9, qword [rbp - 0x29]
mov r8, qword [rbp - 0x11]
cmp r8, r14
cmova r10, r9
add r10, 5
lea rcx, [rbp - 0x29]
cmp r8, r14
cmova rcx, r9
lea rax, [rbp - 0x29]
cmova rax, r9
mov rdx, rcx
sub rdx, rax
sub r10, rcx
mov rbx, qword [rbp - 0x19]
mov rax, rbx
sub rax, rdx
cmp rax, r10
cmovb r10, rax
lea rcx, [rbp - 0x29]
cmp r8, r14
cmova rcx, r9
add rcx, rdx
sub rbx, r10
mov r8, rbx
sub r8, rdx
inc r8
lea rdx, [rcx + r10]
call fcn.140041870
mov qword [rbp - 0x19], rbx
mov dword [rbp - 0x39], ebx
lea rax, [rbp - 0x29]
cmp qword [rbp - 0x11], r14
cmova rax, qword [rbp - 0x29]
mov qword [rbp - 0x31], rax
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
lea rax, [rbp - 9]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x39]
call qword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x1400062fd
mov qword [rdi], rsi
jmp 0x140006312
call fcn.140020dd0
mov byte [rbp - 0x29], sil
mov qword [rbp - 0x11], r14
mov qword [rbp - 0x19], rsi
mov rdx, qword [rbp + 0x1f]
cmp rdx, r14
jbe 0x1400062d7
inc rdx
mov rcx, qword [rbp + 7]
cmp rdx, r15
mov rax, rcx
jb 0x1400062d2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006358
call fcn.140020dd0
mov rax, rdi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140020db0
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x10
call fcn.140020dd8
movups xmm0, xmmword [rbp - 9]
movdqu xmmword [rax], xmm0
mov qword [rdi], rax
mov rdx, qword [rbp - 0x11]
cmp rdx, r14
jbe 0x140006295
inc rdx
mov rcx, qword [rbp - 0x29]
cmp rdx, r15
mov rax, rcx
jb 0x140006290
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006352
jmp 0x140006290
call fcn.14002e0c8
nop
call fcn.14002e0c8
nop
call fcn.14002e0c8
int3