Function at 0x405a80
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xde8
mov eax, dword [0x4b9510]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x34c], str.ENCWCHAR_sqlite3_prepare_v2___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
mov dword [ebp - 0x348], str.ENCWCHAR_sqlite3_open___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
lea eax, [ebp - 0x330]
mov dword [ebp - 0x338], eax
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x424], 0
jmp 0x405ada
mov edx, dword [ebp - 0x424]
add edx, 1
mov dword [ebp - 0x424], edx
cmp dword [ebp - 0x424], 2
jae 0x405b19
push 0xc8
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp + eax*4 - 0x338]
push ecx
push 0
push 8
mov edx, dword [0x4bb3e8]
push edx
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp + eax*4 - 0x34c]
push ecx
call fcn.0040b370
add esp, 0x18
jmp 0x405acb
mov dword [ebp - 0x340], 0x4a7818
lea edx, [ebp - 0x420]
mov dword [ebp - 0x344], edx
mov dword [ebp - 0x428], 0
jmp 0x405b4a
mov eax, dword [ebp - 0x428]
add eax, 1
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 1
jae 0x405b88
push 0xc8
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp + ecx*4 - 0x344]
push edx
push 0
push 7
mov eax, dword [0x4bb3ec]
push eax
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp + ecx*4 - 0x340]
push edx
call fcn.0040b6e0
add esp, 0x18
jmp 0x405b3b
mov dword [ebp - 0x350], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x354], 0
mov dword [ebp - 4], 0
lea eax, [ebp - 4]
push eax
call fcn.004043f0
add esp, 4
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x33c], 0
push 0x30d40
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
je 0x406119
call fcn.00403c90
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x4060e5
push 0x4a7860
mov ecx, dword [ebp - 0x350]
mov edx, dword [ebp - 0x33c]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x42c]
push ecx
push 0x4a768c
push 0x104
push 0x4bb3f0
call fcn.004936c6
add esp, 0x10
lea edx, [ebp - 0x430]
push edx
push 0x4bb3f0
call fcn.0048ee00
add esp, 8
test eax, eax
jne 0x4060ac
push 0
lea eax, [ebp - 0x434]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x420]
push ecx
mov edx, dword [ebp - 0x430]
push edx
call fcn.0044db70
add esp, 0x14
test eax, eax
jne 0x40606f
mov eax, dword [ebp - 0x434]
push eax
call fcn.0042a430
add esp, 4
cmp eax, 0x64
jne 0x40605e
push 0x4a7868
mov ecx, dword [ebp - 0x350]
mov edx, dword [ebp - 0x33c]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
push 0
mov ecx, dword [ebp - 0x434]
push ecx
call fcn.0042b910
add esp, 8
mov dword [ebp - 0x43c], eax
mov edx, dword [ebp - 0x43c]
push edx
push 0x4a774c
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x33c]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
push 1
mov eax, dword [ebp - 0x434]
push eax
call fcn.0042b910
add esp, 8
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x440]
push ecx
push 0x4a7870
mov edx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x33c]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
push 2
mov edx, dword [ebp - 0x434]
push edx
call fcn.0042b870
add esp, 8
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
movsx ecx, byte [eax]
cmp ecx, 0x76
je 0x405e67
mov dword [ebp - 0x838], 0x401
mov edx, dword [ebp - 0x438]
mov dword [ebp - 0x834], edx
lea eax, [ebp - 0x840]
push eax
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x838]
push ecx
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x405dea
push 0x4a7890
mov edx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x33c]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
jmp 0x405e62
mov edx, dword [ebp - 0x83c]
add edx, dword [ebp - 0x840]
mov byte [edx], 0
push 0x3e8
lea eax, [ebp - 0x830]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x83c]
push ecx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea edx, [ebp - 0x830]
push edx
push 0x4a78b0
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x33c]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x83c]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x406059
mov edx, dword [ebp - 0x438]
movsx eax, byte [edx]
cmp eax, 0x76
jne 0x406059
cmp dword [ebp - 0x354], 0
je 0x406059
push 0x64
push 0
lea ecx, [ebp - 0xcb8]
push ecx
call fcn.00493180
add esp, 0xc
push 0xc
mov edx, dword [ebp - 0x438]
add edx, 3
push edx
lea eax, [ebp - 0xcb8]
push eax
call fcn.00493210
add esp, 0xc
push 0x64
push 0
lea ecx, [ebp - 0xc48]
push ecx
call fcn.00493180
add esp, 0xc
push 2
mov edx, dword [ebp - 0x434]
push edx
call fcn.0042b730
add esp, 8
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x844], 0
jne 0x405eec
jmp 0x405c8b
mov eax, dword [ebp - 0x844]
sub eax, 0xf
mov dword [ebp - 0x844], eax
mov ecx, dword [ebp - 0x844]
push ecx
mov edx, dword [ebp - 0x438]
add edx, 0xf
push edx
lea eax, [ebp - 0xc48]
push eax
call fcn.00493210
add esp, 0xc
mov ecx, dword [ebp - 0x844]
mov dword [ebp - 0xc4c], ecx
call fcn.00490e00
mov dword [ebp - 0xbe0], 0
push 0x260
push 0
lea edx, [ebp - 0xbd8]
push edx
call fcn.00493180
add esp, 0xc
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x354]
push ecx
lea edx, [ebp - 0xbe0]
push edx
call fcn.00490e10
add esp, 0xc
test eax, eax
je 0x405f6f
jmp 0x405c8b
push 0
push 0
push 0xc
lea eax, [ebp - 0xcb8]
push eax
push 0
lea ecx, [ebp - 0xbe0]
push ecx
call fcn.00491140
add esp, 0x18
test eax, eax
je 0x405f96
jmp 0x405c8b
push 0x12c
push 0
lea edx, [ebp - 0x978]
push edx
call fcn.00493180
add esp, 0xc
lea eax, [ebp - 0x978]
push eax
lea ecx, [ebp - 0xc48]
push ecx
mov edx, dword [ebp - 0xc4c]
push edx
lea eax, [ebp - 0xbe0]
push eax
call fcn.00491750
add esp, 0x10
test eax, eax
je 0x405fd9
jmp 0x405c8b
mov byte [ebp - 0xde8], 0
push 0x12b
push 0
lea ecx, [ebp - 0xde7]
push ecx
call fcn.00493180
add esp, 0xc
push 0x12c
lea edx, [ebp - 0xde8]
push edx
lea eax, [ebp - 0xbe0]
push eax
call fcn.00491920
add esp, 0xc
mov ecx, dword [ebp - 0xc4c]
mov byte [ebp + ecx - 0x988], 0
lea edx, [ebp - 0x978]
push edx
push 0x4a78d0
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x33c]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x405c8b
mov ecx, dword [ebp - 0x434]
push ecx
call fcn.00425cd0
add esp, 4
jmp 0x40609b
lea edx, [ebp - 0x330]
push edx
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x33c]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x430]
push eax
call fcn.0048cf00
add esp, 4
jmp 0x4060d8
lea ecx, [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x33c]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x350]
mov dword [ebp - 0x350], eax
mov edx, dword [ebp - 0x42c]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x354], 0
je 0x4060fb
mov eax, dword [ebp - 0x354]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 0x33c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [eax + eax + 2]
mov eax, dword [ebp + 8]
mov dword [eax], edx
mov eax, dword [ebp - 0x33c]
jmp 0x406131
cmp dword [ebp - 0x354], 0
je 0x40612f
mov ecx, dword [ebp - 0x354]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004931fa
mov esp, ebp
pop ebp
ret