Function at 0x408a40
Capabilities:
Contain obfuscated stackstrings
Create new key via cryptacquirecontext
Encrypt data using aes via winapi
Encrypt or decrypt via wincrypt

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x43c
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x18]
push esi
mov esi, dword [ebp + 0x14]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x438], eax
mov byte [esi], 0
mov dword [ebp - 0x14], 0x414e4558
cmp byte [edi], 0
mov dword [ebp - 0x10], 0x524f4d52
mov dword [ebp - 0xc], 0x54464f53
mov dword [ebp - 8], 0x45524157
jne 0x408aa4
push str.DecryptClawsmailPassword
push str._n_s:_ClawsMail_Input_password_is_empty..returning_now
call fcn.00449974
pop ecx
pop ecx
xor eax, eax
jmp 0x408cc7
cmp dword [ebp + 0x10], 0x20
je 0x408ac1
push dword [ebp + 0x10]
push str.DecryptClawsmailPassword
push str._n_s:_ClawsMail_Input_Key_size___d__is_not_expected_size_of_32
call fcn.00449974
add esp, 0xc
jmp 0x408a9d
push 0x3e8
lea eax, [ebp - 0x3fc]
push eax
push edi
call fcn.00445e29
add esp, 0xc
mov dword [ebp - 0x43c], eax
test eax, eax
jne 0x408aed
push edi
push str.DecryptClawsmailPassword
push str._n_s:_DecodeBase64Data_failed_to_decode_input_data__s
jmp 0x408ab7
push eax
push edi
call fcn.00631510
pop ecx
push eax
push str.DecryptClawsmailPassword
push str._n_n_s:_DecodeBase64Data_Success___Input_Pass_length__d__Decoded_Pass_Length_d
call fcn.00449974
push 0x20
pop eax
push eax
push dword [ebp - 0x438]
mov dword [ebp - 0x420], eax
lea eax, [ebp - 0x41c]
push eax
mov dword [ebp - 0x428], 0x208
mov dword [ebp - 0x424], 0x6610
call fcn.006269d0
add esp, 0x1c
lea eax, [ebp - 0x430]
xor edi, edi
push 0xf0000000
push 0x18
push edi
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x408b6b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, str.DecryptClawsmailPassword
push edi
push str._s:_CryptAcquireContext_failed__Error0x_.8x
jmp 0x408ab7
lea eax, [ebp - 0x42c]
push eax
push edi
push edi
push 0x2c
lea eax, [ebp - 0x428]
push eax
push dword [ebp - 0x430]
call dword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
jne 0x408ba4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, str.DecryptClawsmailPassword
push edi
push str._s:_CryptImportKey_failed__Error0x_.8x
jmp 0x408ab7
push edi
lea eax, [ebp - 0x14]
push eax
push 1
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptSetKeyParam]
test eax, eax
jne 0x408bd2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, str.DecryptClawsmailPassword
push edi
push str._s:_CryptSetKeyParam_failed__Error0x_.8x
jmp 0x408ab7
mov eax, dword [ebp - 0x43c]
xor ecx, ecx
mov dword [ebp - 0x434], eax
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x3fc]
mov byte [esi], cl
push eax
push ecx
push 1
push ecx
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
jne 0x408c5b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x434]
mov edi, str.DecryptClawsmailPassword
push edi
push str._n_n_s:_CryptDecrypt_failed__may_be_due_to_padding_issue____length_d___Error0x_.8x_n
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push dword [ebx]
push esi
call fcn.006311ec
push esi
call fcn.00631510
push esi
mov dword [ebx], eax
call fcn.00631510
add esp, 0x24
cmp eax, 1
jb 0x408a9d
push esi
push edi
push str._n_n_s:___Successfully_Decrypted_Passord___s__n_n
call fcn.00449974
add esp, 0xc
jmp 0x408c97
push dword [ebp - 0x434]
mov edi, str.DecryptClawsmailPassword
push edi
push str._n_n_s:_Successfully_decrypted_the_password_of_size__d
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
push dword [ebx]
push esi
call fcn.006311ec
push esi
call fcn.00631510
push esi
push edi
push str._n_n_s:___Final_password_is___s__n_n
mov dword [ebx], eax
call fcn.00449974
add esp, 0x28
cmp dword [ebp - 0x42c], 0
je 0x408cac
push dword [ebp - 0x42c]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
cmp dword [ebp - 0x430], 0
je 0x408cc4
xor edi, edi
push edi
push dword [ebp - 0x430]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret