Function at 0x42f120
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x44
mov edi, dword [ebp + 0xc]
mov eax, dword [0x575010]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov esi, 0x80070057
cmp edi, 1
jg 0x42f2d3
push dword [ebp + 0x10]
call dword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
test eax, eax
je 0x42f2d3
mov ebx, eax
call dword [sym.imp.ole32.dll_CoImpersonateClient]
test eax, eax
js 0x42f29a
mov dword [ebp - 0x50], ebx
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
xor eax, eax
dec eax
lea esi, [ebp - 0x1c]
mov dword [esi], eax
push 0x14
call fcn.00507d96
add esp, 4
mov ebx, eax
mov ecx, eax
push 0x42e230
push 0x42e220
call fcn.00487990
mov dword [ebp - 0x20], ebx
mov ecx, esi
push ebx
call fcn.00487a70
lea esi, [ebp - 0x28]
xor eax, eax
dec eax
mov dword [esi + 4], eax
mov dword [esi], eax
mov ecx, esi
call fcn.0042f370
mov ecx, esi
call fcn.004725f0
test al, al
je 0x42f29e
lea ebx, [ebp - 0x34]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
push esi
push edi
push ebx
call fcn.0042cb8c
add esp, 0xc
movzx eax, byte [ebx + 0xb]
mov ecx, eax
test al, al
jns 0x42f1e7
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0x42f2a8
xor eax, eax
lea edi, [ebp - 0x40]
mov dword [edi + 4], eax
mov dword [edi], eax
mov dword [edi + 8], eax
push edi
push ebx
call fcn.0042f3d2
add esp, 8
lea esi, [ebp - 0x4c]
mov ecx, esi
push dword [ebp - 0x50]
push dword [ebp + 0x10]
call fcn.0042f42c
push edi
push esi
call fcn.0042f3d2
add esp, 8
cmp byte [esi + 0xb], 0
jns 0x42f231
push dword [ebp - 0x4c]
call fcn.00507dc6
add esp, 4
movzx eax, byte [ebp - 0x35]
test al, al
cmovs eax, dword [ebp - 0x3c]
cmovs edi, dword [ebp - 0x40]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edi
sub esp, 0x1c
lea eax, [ebp - 0x18]
mov dword [esp + 0x18], eax
xorps xmm0, xmm0
movups xmmword [esp + 8], xmm0
mov dword [esp], esi
mov dword [esp + 4], 0x558fdc
call dword [sym.imp.CRYPT32.dll_CryptProtectData]
test eax, eax
mov edi, 0
jne 0x42f27f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
xor edi, edi
inc edi
cmp byte [ebp - 0x35], 0
jns 0x42f290
push dword [ebp - 0x40]
call fcn.00507dc6
add esp, 4
mov esi, 0x8004a005
mov al, byte [ebp - 0x29]
jmp 0x42f2b0
mov esi, eax
jmp 0x42f2d3
xor edi, edi
inc edi
mov esi, 0x8004a001
jmp 0x42f2bf
xor edi, edi
inc edi
mov esi, 0x8004a002
test al, al
jns 0x42f2bf
push dword [ebp - 0x34]
call fcn.00507dc6
add esp, 4
lea ecx, [ebp - 0x28]
call fcn.0042e250
lea ecx, [ebp - 0x1c]
call fcn.00487aa0
test edi, edi
je 0x42f2e9
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00508d63
mov eax, esi
add esp, 0x44
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
xor eax, eax
lea ecx, [ebp - 0x34]
mov dword [ecx + 4], eax
mov dword [ecx], eax
lea eax, [ebp - 0x18]
mov ebx, dword [eax + 4]
sub esp, 0x1c
mov dword [esp + 0x18], ecx
xorps xmm0, xmm0
movups xmmword [esp + 8], xmm0
mov dword [esp], eax
mov dword [esp + 4], 0x558fdc
call dword [sym.imp.CRYPT32.dll_CryptProtectData]
mov edi, eax
test eax, eax
jne 0x42f32f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
mov esi, 0x8004a006
test ebx, ebx
je 0x42f33a
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
test edi, edi
je 0x42f2d3
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp - 0x30]
push dword [ebp - 0x34]
push edi
call dword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov dword [esi], eax
xor ecx, ecx
test eax, eax
mov esi, 0x8007000e
cmovne esi, ecx
test edi, edi
je 0x42f2d3
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x42f2d3