Function at 0x430628
Capabilities:
Copy file
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4140
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 6
pop ecx
mov esi, str.MailbirdStoreStore.db
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x20]
xor eax, eax
rep movsd dword es:[edi], dword [esi]
push 0x12
pop ecx
push 0x14
movsb byte es:[edi], byte [esi]
mov esi, str.select_Server_Host__Server_Port__Username__EncryptedPassword_from_Accounts
mov dword [ebp - 0x413c], eax
lea edi, [ebp - 0xc0]
mov dword [ebp - 0x4138], eax
rep movsd dword es:[edi], dword [esi]
pop ecx
mov dword [ebp - 0x4140], eax
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.select_Server_Host__Server_Port__Username__EncryptedPassword_from_SenderIdentities
lea edi, [ebp - 0x74]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.RecoverMailbirdPasswords
push esi
push str._s_:_Looking_for_Mailbird_accounts...
call fcn.00449974
pop ecx
pop ecx
test ebx, ebx
je 0x4307e2
push ebx
call fcn.00631510
pop ecx
cmp eax, 1
jb 0x4307e2
push ebx
call fcn.00631510
pop ecx
cmp byte [eax + ebx - 1], 0x5c
jne 0x4306ce
push ebx
call fcn.00631510
pop ecx
mov byte [eax + ebx - 1], 0
push ebx
push str._sStoreStore.db
mov edi, 0x3e8
lea eax, [ebp - 0x4a8]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x4a8]
push eax
call fcn.00449791
add esp, 0x14
test eax, eax
jne 0x430733
push ebx
push str._sStore.db
lea eax, [ebp - 0x4a8]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x4a8]
push eax
call fcn.00449791
add esp, 0x14
test eax, eax
jne 0x430733
push ebx
push esi
push str._s_:_Specified_Mail_bird_profile_path_does_not_contain_store.db_file____s_
call fcn.00449974
add esp, 0xc
jmp 0x430dc8
lea eax, [ebp - 0x4a8]
push eax
push esi
push str._n_s_:__Custom_path___mailbird_store_file_is__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x1a24]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push eax
call fcn.0063d41d
call fcn.0063d3fc
push eax
lea eax, [ebp - 0x1a24]
push eax
push str._smailb__d
lea eax, [ebp - 0x1060]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x1060]
push eax
push esi
push str._n_s_:_Final_mail_bird_temp_account_path_is__s
call fcn.00449974
add esp, 0x24
lea eax, [ebp - 0x1060]
push 0
push eax
lea eax, [ebp - 0x4a8]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x430869
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x1060]
push eax
lea eax, [ebp - 0x4a8]
push eax
push esi
push str._s:_Failed_to_copy_file__s_to_tmp_file__s__Error0x_.8x
call fcn.00449974
add esp, 0x14
lea esi, [ebp - 0x4a8]
jmp 0x430884
lea eax, [ebp - 0x4a8]
push eax
xor eax, eax
push eax
push eax
push 0x1c
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x430809
push str._n_Failed_to_get_current_users_local_appdata_folder
call fcn.00449974
jmp 0x430dc7
lea eax, [ebp - 0x20]
mov edi, 0x3e8
push eax
lea eax, [ebp - 0x4a8]
push edi
push eax
call fcn.00631246
lea eax, [ebp - 0x4a8]
push eax
push esi
push str._s_:_Mailbird_account_file_path___s_
call fcn.00449974
lea eax, [ebp - 0x4a8]
push eax
call fcn.00449791
add esp, 0x1c
test eax, eax
jne 0x430748
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x4a8]
push eax
push esi
push str._s_:_Specified_Mail_bird_account_file____s__does_not_exist__Error0x_.8x
call fcn.00449974
add esp, 0x10
jmp 0x430dc8
lea eax, [ebp - 0x1060]
push eax
push esi
push str._s:_Successfully_copied_to_tmp_file__s
call fcn.00449974
add esp, 0xc
lea esi, [ebp - 0x1060]
push esi
mov ebx, str.RecoverMailbirdPasswords
push ebx
push str._n_s_:_Final_mail_bird_account_file_path_is__s
call fcn.00449974
push 0
push 1
lea eax, [ebp - 0x413c]
push eax
push esi
call fcn.0045c0d6
add esp, 0x1c
test eax, eax
je 0x4308b7
push eax
push esi
push ebx
push str._s_:_Failed_to_open_the_database_file__s__Error___d
jmp 0x43085c
push 0
lea eax, [ebp - 0x4138]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00631510
pop ecx
push eax
lea eax, [ebp - 0xc0]
push eax
push dword [ebp - 0x413c]
call fcn.0045c551
add esp, 0x14
test eax, eax
jne 0x430b12
cmp dword [ebp - 0x4138], eax
je 0x430b12
mov esi, str.RecoverMailbirdPasswords
push esi
push str._n_s_:_Accounts_query_executed_successfully...Now_going_through_each_entries
call fcn.00449974
mov ebx, dword [ebp - 0x4140]
pop ecx
pop ecx
xor eax, eax
inc ebx
push esi
push str._n_s_:_Looking_for_next_account
mov byte [ebp - 0x1448], al
mov byte [ebp - 0x890], al
mov byte [ebp - 0xc78], al
mov byte [ebp - 0x4134], al
call fcn.00449974
push dword [ebp - 0x4138]
call fcn.0045ccca
add esp, 0xc
cmp eax, 0x65
je 0x430b26
cmp eax, 0x64
jne 0x430b26
push 3
push dword [ebp - 0x4138]
call fcn.0045ce99
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x43097c
mov esi, str.RecoverMailbirdPasswords
push esi
push str._n_s_:_Found_empty_password....
call fcn.00449974
jmp 0x43090d
push esi
call fcn.00631510
pop ecx
push esi
cmp eax, 0x2328
jb 0x4309a9
call fcn.00631510
push eax
mov esi, str.RecoverMailbirdPasswords
push esi
push str._n_s_:_Found_password_length_more___d__...ignoring_....
call fcn.00449974
add esp, 0x10
jmp 0x43090f
lea eax, [ebp - 0x4134]
push 0x2710
push eax
call fcn.006311ec
lea eax, [ebp - 0x4134]
push eax
call fcn.00631510
add esp, 0x10
mov esi, str.RecoverMailbirdPasswords
cmp eax, 1
jae 0x4309dc
push ebx
push esi
push str._s____d_Password_is_not_present_...check_next_entry
jmp 0x430a16
lea eax, [ebp - 0x4134]
push eax
push esi
push str._s___Found_encrypted_password__s
call fcn.00449974
push edi
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x4134]
push eax
call fcn.0040b8ab
add esp, 0x18
test eax, eax
jne 0x430a23
lea eax, [ebp - 0x4134]
push eax
push esi
push str._s____Error___Failed_to_decrypt_mailbox_password_for__s
call fcn.00449974
add esp, 0xc
jmp 0x43090f
push 0
push dword [ebp - 0x4138]
call fcn.0045ce99
pop ecx
pop ecx
test eax, eax
je 0x430a59
push eax
lea eax, [ebp - 0x890]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0x890]
push eax
push esi
push str._s___Found_server__s
call fcn.00449974
add esp, 0x18
push 1
push dword [ebp - 0x4138]
call fcn.0045ce29
push eax
push esi
push str._s___Found_port__d
call fcn.00449974
push 2
push dword [ebp - 0x4138]
call fcn.0045ce99
add esp, 0x1c
test eax, eax
je 0x430aa9
push eax
lea eax, [ebp - 0xc78]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0xc78]
push eax
push esi
push str._s___Found_username__s
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x890]
push str.imap
push eax
call fcn.00627320
test eax, eax
mov edx, str.IMAP
mov ecx, str.POP3
lea eax, [ebp - 0x163c]
cmovne ecx, edx
push ecx
push 0x1f4
push eax
call fcn.006311ec
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0xc78]
push eax
lea eax, [ebp - 0x890]
push eax
lea eax, [ebp - 0x163c]
push eax
push 0x103
push 2
call fcn.00412c85
add esp, 0x34
jmp 0x43090f
push eax
mov esi, str.RecoverMailbirdPasswords
push esi
push str._s_:_Failed_to_query_the_accounts_table_for__list__Error___d
call fcn.00449974
add esp, 0xc
cmp dword [ebp - 0x4138], 0
je 0x430b3b
push dword [ebp - 0x4138]
call fcn.0045cfda
pop ecx
lea eax, [ebp - 0x74]
push eax
push esi
push str._n_n_n_n___s_:_Looking_for_SMTP_accounts_query_s_....
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x4138]
push 0
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00631510
pop ecx
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x413c]
call fcn.0045c551
add esp, 0x14
test eax, eax
jne 0x430d7a
cmp dword [ebp - 0x4138], eax
je 0x430d7a
lea eax, [ebp - 0x74]
push eax
push esi
push str._n_n_n_n___s_:_SMTP_query__s_executed_successfully...Now_going_through_each_entries
call fcn.00449974
add esp, 0xc
xor ebx, ebx
push esi
push str._n_s_:_Looking_for_next_account
mov byte [ebp - 0x1448], 0
inc ebx
mov byte [ebp - 0x890], 0
mov byte [ebp - 0xc78], 0
mov byte [ebp - 0x4134], 0
call fcn.00449974
push dword [ebp - 0x4138]
call fcn.0045ccca
add esp, 0xc
cmp eax, 0x65
je 0x430d8d
cmp eax, 0x64
jne 0x430d8d
push esi
push str._n_s_:_Copying_next_encrypted_password....
call fcn.00449974
push 3
push dword [ebp - 0x4138]
call fcn.0045ce99
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x430c18
mov esi, str.RecoverMailbirdPasswords
push esi
push str._n_s_:_Found_empty_password....
call fcn.00449974
pop ecx
pop ecx
jmp 0x430b9b
push esi
call fcn.00631510
pop ecx
push esi
cmp eax, 0x2328
jb 0x430c45
call fcn.00631510
push eax
mov esi, str.RecoverMailbirdPasswords
push esi
push str._n_s_:_Found_password_length_more___d__...ignoring_....
call fcn.00449974
add esp, 0x10
jmp 0x430b9b
lea eax, [ebp - 0x4134]
push 0x2710
push eax
call fcn.006311ec
lea eax, [ebp - 0x4134]
push eax
call fcn.00631510
add esp, 0x10
mov esi, str.RecoverMailbirdPasswords
cmp eax, 1
jae 0x430c78
push ebx
push esi
push str._s____d_Password_is_not_present_...check_next_entry
jmp 0x430cb2
lea eax, [ebp - 0x4134]
push eax
push esi
push str._s___Found_encrypted_password__s
call fcn.00449974
push edi
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x4134]
push eax
call fcn.0040b8ab
add esp, 0x18
test eax, eax
jne 0x430cbf
lea eax, [ebp - 0x4134]
push eax
push esi
push str._s____Error___Failed_to_decrypt_mailbox_password_for__s
call fcn.00449974
add esp, 0xc
jmp 0x430b9b
push 0
push dword [ebp - 0x4138]
call fcn.0045ce99
pop ecx
pop ecx
test eax, eax
je 0x430cf5
push eax
lea eax, [ebp - 0x890]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0x890]
push eax
push esi
push str._s___Found_server__s
call fcn.00449974
add esp, 0x18
push 1
push dword [ebp - 0x4138]
call fcn.0045ce29
push eax
push esi
push str._s___Found_port__d
call fcn.00449974
push 2
push dword [ebp - 0x4138]
call fcn.0045ce99
add esp, 0x1c
test eax, eax
je 0x430d45
push eax
lea eax, [ebp - 0xc78]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0xc78]
push eax
push esi
push str._s___Found_username__s
call fcn.00449974
add esp, 0x18
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x1448]
push eax
lea eax, [ebp - 0xc78]
push eax
lea eax, [ebp - 0x890]
push eax
push str.SMTP
push 0x103
push 2
call fcn.00412c85
add esp, 0x20
jmp 0x430b9b
push eax
lea eax, [ebp - 0x74]
push eax
push esi
push str._s_:_Failed_to_query_the_SMTP_table__s__Error___d
call fcn.00449974
add esp, 0x10
cmp dword [ebp - 0x4138], 0
je 0x430da2
push dword [ebp - 0x4138]
call fcn.0045cfda
pop ecx
push dword [ebp - 0x413c]
call fcn.0045b0c9
pop ecx
lea eax, [ebp - 0x1060]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push esi
push str._n_n___s_:_Finished....
call fcn.00449974
pop ecx
pop ecx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret