Function at 0x10002c70
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000f628
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0xbd], dl
mov dword [ebp - 0xe4], ecx
mov edi, dword [ebp + 8]
cmp dword [edi + 0x10], 3
mov esi, dword [edi + 4]
mov dword [ebp - 0xcc], esi
jne 0x10003275
push 0
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ebx, dword [sym.imp.node.exe_napi_typeof]
mov dword [ebp - 0xbc], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10002d01
lea edx, [ebp - 0x18]
push edx
push ecx
push dword [eax]
call ebx
add esp, 0xc
test eax, eax
jne 0x1000329c
cmp dword [ebp - 0x18], 1
je 0x1000326e
push 0
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ecx, eax
call fcn.10002900
test al, al
jne 0x1000326e
push 0
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x1000326e
lea edx, [ebp - 0xb5]
push edx
push ecx
push dword [eax]
call dword [sym.imp.node.exe_napi_is_typedarray]
add esp, 0xc
test eax, eax
je 0x10002d5d
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
cmp byte [ebp - 0xb5], 0
je 0x1000326e
push 0
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
test ecx, ecx
je 0x1000326e
push 0
push 0
push 0
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x1c]
push edx
push ecx
push eax
call dword [sym.imp.node.exe_napi_get_typedarray_info]
add esp, 0x1c
test eax, eax
je 0x10002dc0
mov edx, dword [ebp - 0x24]
jmp 0x100032a4
cmp dword [ebp - 0x1c], 1
jne 0x1000326e
push 1
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10002e0c
lea edx, [ebp - 0xbc]
push edx
push ecx
push dword [eax]
call ebx
add esp, 0xc
test eax, eax
je 0x10002dff
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
cmp dword [ebp - 0xbc], 1
je 0x10002eb6
push 1
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10003267
lea edx, [ebp - 0xb5]
push edx
push ecx
push dword [eax]
call dword [sym.imp.node.exe_napi_is_typedarray]
add esp, 0xc
test eax, eax
je 0x10002e49
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
cmp byte [ebp - 0xb5], 0
je 0x10003267
push 1
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
test ecx, ecx
je 0x10003267
push 0
push 0
push 0
lea edx, [ebp - 0x18]
push edx
lea edx, [ebp - 0x1c]
push edx
push ecx
push eax
call dword [sym.imp.node.exe_napi_get_typedarray_info]
add esp, 0x1c
test eax, eax
je 0x10002eac
mov edx, dword [ebp - 0x24]
jmp 0x100032a4
cmp dword [ebp - 0x1c], 1
jne 0x10003267
push 2
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10002ef8
lea edx, [ebp - 0xbc]
push edx
push ecx
push dword [eax]
call ebx
add esp, 0xc
test eax, eax
je 0x10002eeb
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
cmp dword [ebp - 0xbc], 1
je 0x10003243
push 2
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ecx, eax
call fcn.10002900
test al, al
jne 0x10003243
push 2
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x10003243
lea edx, [ebp - 0xbc]
push edx
push ecx
push dword [eax]
call ebx
add esp, 0xc
test eax, eax
je 0x10002f50
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
cmp dword [ebp - 0xbc], 4
jne 0x10003243
push 2
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x1c]
push eax
call fcn.10001220
mov dword [ebp - 4], 0
lea eax, [ebp - 0x70]
cmp dword [ebp - 0x5c], 0xf
push str.LocalMachine
cmova eax, dword [ebp - 0x70]
push eax
call fcn.10006a9c
add esp, 8
mov ecx, edi
neg eax
sbb eax, eax
and eax, 0xfffffffc
add eax, 4
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xc8]
push 0
push eax
call fcn.10002be0
lea ecx, [ebp - 0x84]
push dword [eax + 4]
push dword [eax]
call fcn.10003690
push 0
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
lea ecx, [ebp - 0x40]
push dword [eax + 4]
push dword [eax]
call fcn.10003690
push 1
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xd4], 0
push eax
mov ecx, edi
call fcn.10002be0
mov dword [ebp - 0x18], eax
mov ecx, dword [eax + 4]
test ecx, ecx
jne 0x10003019
xor eax, eax
jmp 0x1000303a
lea edx, [ebp - 0xd0]
push edx
push ecx
push dword [eax]
call ebx
add esp, 0xc
test eax, eax
je 0x10003034
mov edx, dword [ebp - 0x18]
jmp 0x100032a2
mov eax, dword [ebp - 0xd0]
cmp eax, 1
je 0x1000308b
push 1
lea eax, [ebp - 0xc8]
mov ecx, edi
push eax
call fcn.10002be0
lea ecx, [ebp - 0x28]
push dword [eax + 4]
push dword [eax]
call fcn.10003690
mov eax, dword [ebp - 0x18]
mov ecx, edi
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xc8]
push 1
push eax
call fcn.10002be0
lea ecx, [ebp - 0x28]
push dword [eax + 4]
push dword [eax]
call fcn.10003690
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x74]
xor ecx, ecx
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xd8]
push dword [ebp - 0xbc]
push ecx
push ecx
cmp byte [ebp - 0xbd], cl
je 0x100030d6
cmp dword [ebp - 0xd4], ecx
cmove eax, ecx
push eax
push ecx
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.CRYPT32.dll_CryptProtectData]
jmp 0x100030ef
cmp dword [ebp - 0xd4], ecx
cmove eax, ecx
push eax
push 0
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
setne al
test al, al
jne 0x1000317c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x88]
call fcn.100028e0
mov esi, eax
push ecx
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.100032c0
push esi
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.10003480
add esp, 4
lea ecx, [ebp - 0x44]
call fcn.100020f0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 5
call fcn.100020f0
push ecx
lea ecx, [ebp - 0x2c]
call fcn.100020e0
push eax
lea ecx, [ebp - 0xcc]
call fcn.10001190
mov edx, eax
lea ecx, [ebp - 0xb4]
call fcn.100029b0
add esp, 4
lea eax, [ebp - 0xb4]
push 0x10016190
jmp 0x100032b4
lea eax, [ebp - 0xd0]
push eax
push 0
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push esi
call dword [sym.imp.node.exe_napi_create_buffer_copy]
add esp, 0x14
test eax, eax
je 0x100031bc
mov edx, esi
lea ecx, [ebp - 0xb4]
call fcn.100013b0
push 0x10016190
lea eax, [ebp - 0xb4]
jmp 0x100032b4
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x100]
push esi
call fcn.10003690
push dword [ebp - 0xdc]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x100]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ebx], eax
cmp ecx, 0xf
jbe 0x10003225
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000321b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100032ba
push ecx
push edx
call fcn.10003905
add esp, 8
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100038c2
mov esp, ebp
pop ebp
ret
push str.Third_argument__scope__must_be_a_string
lea ecx, [ebp - 0xcc]
call fcn.10001190
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.10002a70
add esp, 4
push 0x100161a0
jmp 0x100032b1
push str.Second_argument__optionalEntropy__must_be_null_or_an_ArrayBuffer
jmp 0x10003248
push str.First_argument__data__must_be_a_valid_Uint8Array
jmp 0x10003248
push ecx
lea ecx, [ebp - 0xcc]
call fcn.10001190
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.10002b30
add esp, 4
lea eax, [ebp - 0x58]
push 0x100161fc
push eax
call fcn.10004e70
mov edx, dword [ebp - 0xbc]
mov edx, dword [edx]
lea ecx, [ebp - 0x58]
call fcn.100013b0
push 0x10016190
lea eax, [ebp - 0x58]
push eax
call fcn.10004e70
call fcn.10006d2f
int3