Function at 0x4a9715
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
sub esp, 0x5c
lea ebp, [esp - 4]
mov eax, dword [0x601328]
xor eax, ebp
mov dword [ebp + 0x5c], eax
push 0x8c
mov eax, 0x56f111
call fcn.0054d40c
mov eax, dword [ebp + 0x68]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0x6c]
mov edi, ecx
mov dword [ebp + 0x10], eax
mov dword [ebp + 0xc], edi
call fcn.00462c28
mov al, byte [eax]
test al, al
jne 0x4a97ab
lea eax, [ebp - 0x98]
push eax
call fcn.00409b60
and dword [ebp - 4], 0
lea eax, [ebp - 0x90]
push 0x5b3068
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x40]
lea eax, [ebp - 0x98]
call fcn.00407170
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 1
call fcn.00406a80
lea ecx, [ebp + 0x40]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x98]
call fcn.00407660
jmp 0x4a98c0
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], 2
call fcn.004068d0
mov byte [ebp - 4], 3
call fcn.00462c28
lea esi, [ebp + 0x1c]
call fcn.00406720
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x4a97de
mov esi, dword [eax + 4]
jmp 0x4a97e1
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5b3068
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 3
call fcn.00409c40
lea eax, [ebp + 0x38]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov ebx, 0x2710
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4a9871
lea ecx, [ebp + 0x1c]
lea eax, [ebp - 0x90]
call fcn.00406700
push 0x6b1
push str..InternetExplorer.cpp
push eax
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp + 0x1c]
call fcn.00409c40
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 2
call fcn.004067e0
or dword [ebp - 4], 0xffffffff
jmp 0x4a98c5
mov ebx, 0x2710
mov eax, dword [ebp + 8]
mov dword [ebp + 4], eax
lea edx, [eax + 2]
xor esi, esi
mov cx, word [eax]
inc eax
inc eax
cmp cx, si
jne 0x4a98d0
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
mov dword [ebp], eax
lea eax, [ebp + 0x14]
push eax
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp]
push eax
call dword [sym.imp.CRYPT32.dll_CryptProtectData]
test eax, eax
jne 0x4a9a6e
call fcn.00462c28
cmp byte [eax], 0
jne 0x4a9966
lea eax, [ebp - 0x98]
push eax
call fcn.00409b60
lea eax, [ebp - 0x90]
push str.CInternetExplorer::CryptGUID:_FAIL
push eax
mov dword [ebp - 4], 9
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x40]
lea eax, [ebp - 0x98]
call fcn.00407170
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0xa
call fcn.00406a80
lea ecx, [ebp + 0x40]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x98]
call fcn.00407660
jmp 0x4a9afb
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], 0xb
call fcn.004068d0
mov byte [ebp - 4], 0xc
call fcn.00462c28
lea esi, [ebp + 0x1c]
call fcn.00406720
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x4a9999
mov esi, dword [eax + 4]
jmp 0x4a999c
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CInternetExplorer::CryptGUID:_FAIL
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xc
call fcn.00409c40
lea eax, [ebp + 0x38]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4a9a27
lea ecx, [ebp + 0x1c]
lea eax, [ebp - 0x90]
call fcn.00406700
push 0x6b9
push str..InternetExplorer.cpp
push eax
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp + 0x1c]
call fcn.00409c40
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xb
call fcn.004067e0
jmp 0x4a9961
mov eax, dword [ebp + 0x14]
push eax
mov dword [edi], eax
call fcn.00545b75
pop ecx
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
cmp eax, esi
je 0x4a9af2
push dword [edi]
push dword [ebp + 0x18]
push eax
call fcn.0054eea0
add esp, 0xc
call fcn.00462c28
cmp byte [eax], 0
jne 0x4a9b1a
lea eax, [ebp - 0x98]
push eax
call fcn.00409b60
lea eax, [ebp - 0x90]
push str.CInternetExplorer::CryptGUID:_copy_guid
push eax
mov dword [ebp - 4], 0x12
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x40]
lea eax, [ebp - 0x98]
call fcn.00407170
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x13
call fcn.00406a80
lea ecx, [ebp + 0x40]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x98]
call fcn.00407660
push dword [ebp + 0x18]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x5c]
xor ecx, ebp
call fcn.0054677c
add ebp, 0x60
leave
ret 8
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], 0x14
call fcn.004068d0
mov byte [ebp - 4], 0x15
call fcn.00462c28
lea esi, [ebp + 0x1c]
call fcn.00406720
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x18], 8
jb 0x4a9b4d
mov esi, dword [eax + 4]
jmp 0x4a9b50
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CInternetExplorer::CryptGUID:_copy_guid
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x15
call fcn.00409c40
lea eax, [ebp + 0x38]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x17
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
test al, al
je 0x4a9bdb
lea ecx, [ebp + 0x1c]
lea eax, [ebp - 0x90]
call fcn.00406700
push 0x6c2
push str..InternetExplorer.cpp
push eax
push ebx
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x18
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp + 0x1c]
call fcn.00409c40
lea ecx, [ebp + 0x38]
mov byte [ebp - 4], 0x15
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0x14
call fcn.004067e0
jmp 0x4a9af2