Function at 0x468660
Capabilities:
Copy file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x504dd0
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x5732cc]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 4], 0
push 0x468ad0
call fcn.004dbbc8
add esp, 4
mov byte [ebp - 0x11], 0
call fcn.004294f0
mov ecx, eax
call fcn.0048eb50
test al, al
je 0x4689be
lea eax, [esi + 4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00441cb0
mov byte [ebp - 4], 1
mov ecx, esi
call fcn.004655b0
cmp byte [esi + 0x11], 0
jne 0x468967
mov byte [esi + 0x11], 1
mov ecx, esi
call fcn.00467d90
test al, al
je 0x468963
call fcn.0044fc50
mov ecx, eax
call fcn.00442270
push 0x5422ee
lea ecx, [ebp - 0x1c]
call fcn.0041ad50
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
call fcn.004663f0
test al, al
je 0x468957
push 1
push 0
mov edi, dword [ebp - 0x1c]
push edi
call fcn.0046dc30
add esp, 0xc
test al, al
je 0x468957
push 0x5422ee
lea ecx, [ebp - 0x18]
call fcn.0041ad50
mov byte [ebp - 4], 3
call fcn.004294f0
mov ecx, eax
call fcn.0048eb50
test al, al
je 0x468781
lea edx, [ebp - 0x28]
push edx
call fcn.004294f0
mov ecx, eax
call fcn.0048f870
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x18]
call fcn.0041e3d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00416630
jmp 0x4687a3
cmp dword [esi + 8], 0
je 0x468991
lea eax, [esi + 0xc]
mov ecx, dword [eax]
cmp dword [ecx - 8], 1
jle 0x468991
push eax
lea ecx, [ebp - 0x18]
call fcn.0041e3d0
push 0x514670
lea ecx, [ebp - 0x18]
call fcn.0041d470
push str.pwd_vault.dat
lea ecx, [ebp - 0x18]
call fcn.0041d470
push 0
mov edx, dword [ebp - 0x18]
push edx
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x46885d
mov byte [ebp - 0x11], 1
call fcn.004294f0
mov ecx, eax
call fcn.0048eb50
test al, al
je 0x468838
push 0x51428c
lea ecx, [ebp - 0x24]
call fcn.0041ad50
mov bl, 5
mov byte [ebp - 4], bl
push str.PWDVaultRestoreSuccess
lea ecx, [ebp - 0x20]
call fcn.0041ad50
mov byte [ebp - 4], 6
push 0
push 0
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.0044fcf0
mov ecx, eax
call fcn.004a4a40
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x20]
call fcn.00416630
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x24]
call fcn.00416630
call fcn.0044fc50
mov ecx, eax
call fcn.00443740
test al, al
je 0x46894b
call fcn.00431060
mov ecx, eax
call fcn.00446750
jmp 0x46894b
call fcn.004294f0
mov ecx, eax
call fcn.0048eb50
test al, al
je 0x4688bf
push 0x51428c
lea ecx, [ebp - 0x20]
call fcn.0041ad50
mov bl, 7
mov byte [ebp - 4], bl
push str.PWDVaultRestoreFailure
lea ecx, [ebp - 0x24]
call fcn.0041ad50
mov byte [ebp - 4], 8
push 0
push 0
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x24]
push eax
call fcn.0044fcf0
mov ecx, eax
call fcn.004a4a40
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x24]
call fcn.00416630
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.00416630
push 0x15c0
lea ecx, [ebp - 0x28]
push ecx
call fcn.0042d4a0
mov ecx, eax
call fcn.0042d1d0
mov bl, 9
mov byte [ebp - 4], bl
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
lea edx, [ebp - 0x28]
push edx
call fcn.0041ea10
mov byte [ebp - 4], 0xa
push 0x66
push 0
push str.Vault_Auto_Recovery
push 0
mov byte [ebp - 4], bl
call fcn.00439230
add esp, 0x14
call fcn.0044fc50
mov ecx, eax
call fcn.00442270
call fcn.00431060
mov ecx, eax
call fcn.004446f0
push 0
call fcn.004294f0
mov ecx, eax
call fcn.0048ed70
push 0
push 0
push 0
push 0x901a
call fcn.004295b0
mov ecx, eax
call fcn.00492690
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.00416630
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00416630
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00416630
mov byte [esi + 0x11], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
je 0x46897c
mov ecx, dword [eax]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov al, byte [ebp - 0x11]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00416630
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00416630
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
je 0x4689be
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret