Function at 0x42792e
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x49bc50
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [0x4cc854]
push ebx
push esi
mov esi, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], 0
mov dword [esp + 8], eax
lea eax, [esp + 0x10]
mov byte [esp + 0x28], 1
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Default_User_ID
call fcn.0048c471
push ecx
mov byte [esp + 0x34], 2
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Identities
call fcn.0048c471
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x38], 1
call fcn.00428a70
cmp eax, 7
je 0x4279bc
lea ecx, [esp + 8]
mov byte [esp + 0x28], 0
call fcn.0048c403
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.0048c403
xor eax, eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x24
ret 4
lea ecx, [esp + 0x10]
lea edx, [esp + 0x18]
push ecx
push str.Identities_
push edx
call fcn.0048c70c
push str.SoftwareMicrosoftOutlook_Express5.0
push eax
lea eax, [esp + 0x1c]
mov bl, 3
push eax
mov byte [esp + 0x34], bl
call fcn.0048c698
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 4
call fcn.0048c53c
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], bl
call fcn.0048c403
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 1
call fcn.0048c403
lea ecx, [esp + 0x10]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Store_Root
call fcn.0048c471
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0x38], 5
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x38], 1
call fcn.00428a70
cmp eax, 7
je 0x427a86
lea ecx, [esp + 8]
mov byte [esp + 0x28], 0
call fcn.0048c403
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.0048c403
xor eax, eax
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x24
ret 4
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x10]
push eax
call fcn.0048c58c
push 1
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 6
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Store_Root
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 7
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], 1
call fcn.004288e0
lea ecx, [esp + 8]
push str.Mail
lea edx, [esp + 0x34]
push ecx
push edx
call fcn.0048c698
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 8
call fcn.0048c53c
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], 1
call fcn.0048c403
mov eax, dword [0x4cc854]
mov dword [esp + 0xc], eax
push 0
lea ecx, [esp + 0x10]
mov bl, 9
push 0x4c2da4
push ecx
mov byte [esp + 0x34], bl
call fcn.0048a7fc
add esp, 0xc
lea edx, [esp + 0xc]
push 4
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0xa
mov ecx, esp
mov dword [esp + 0x20], esp
push str.Safe_Attachments
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
mov byte [esp + 0x3c], 0xb
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0xc
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Check_Mail_on_Startup
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0xd
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0xe
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Digitally_Sign_Messages
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0xf
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x10
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Encrypt_Messages
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x11
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
mov ecx, esp
lea edx, [esp + 0x14]
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x12
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Message_Send_HTML
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x13
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x14
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Message_Read_HTML
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x15
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x16
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Message_Plain_Allow_8bit_in_Header
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x17
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 1
lea ecx, [esp + 0x10]
push 0x4c2da4
push ecx
call fcn.0048a7fc
add esp, 0xc
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x18
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Message_Plain_Format_MIME
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x19
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
push 4
push ecx
lea edx, [esp + 0x14]
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
call fcn.0048c178
push ecx
mov byte [esp + 0x34], 0x1a
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Message_Plain_Encoding_Format
call fcn.0048c471
push ecx
lea eax, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
mov byte [esp + 0x3c], 0x1b
call fcn.0048c178
push reloc.WS2_32.dll_accept
mov ecx, esi
mov byte [esp + 0x3c], bl
call fcn.004288e0
lea ecx, [esp + 0xc]
mov byte [esp + 0x28], 1
call fcn.0048c403
lea ecx, [esp + 8]
mov byte [esp + 0x28], 0
call fcn.0048c403
lea ecx, [esp + 0x10]
mov dword [esp + 0x28], 0xffffffff
call fcn.0048c403
mov ecx, dword [esp + 0x20]
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret 4