Function at 0x419fd1
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10e4
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0xbbb]
push edi
mov edi, 0x3e7
xor ebx, ebx
push edi
push ebx
push eax
mov byte [ebp - 0xbbc], bl
call fcn.00626f50
push edi
lea eax, [ebp - 0x3eb]
mov byte [ebp - 0x3ec], bl
push ebx
push eax
call fcn.00626f50
push edi
lea eax, [ebp - 0xfa3]
mov byte [ebp - 0xfa4], bl
push ebx
push eax
call fcn.00626f50
push edi
lea eax, [ebp - 0x7d3]
mov byte [ebp - 0x7d4], bl
push ebx
push eax
call fcn.00626f50
push esi
call fcn.00631510
add esp, 0x34
cmp eax, 1
jae 0x41a109
mov edi, dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
lea eax, [ebp - 0xbbc]
push eax
push ebx
push ebx
push 0x1a
push ebx
call edi
test eax, eax
jns 0x41a08f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.PerformFlashFXPPasswordRecovery
push str._s_Failed_to_find_appdata_folder__Error0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
jmp 0x41a28b
lea eax, [ebp - 0xbbc]
mov esi, 0x3e8
push eax
push str._sFlashFXP
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044975e
add esp, 0x14
test eax, eax
jne 0x41a11f
lea eax, [ebp - 0x3ec]
push eax
push str.PerformFlashFXPPasswordRecovery
push str._s___Flashfxp_profile__s_does_not_exist...checking_in_Common_Appdata_folder
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0xbbc]
push eax
push ebx
push ebx
push 0x23
push ebx
call edi
test eax, eax
js 0x41a06f
lea eax, [ebp - 0xbbc]
push eax
push str._sFlashFXP
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.00445d6d
add esp, 0x10
jmp 0x41a11f
push esi
mov esi, 0x3e8
lea eax, [ebp - 0x3ec]
push esi
push eax
call fcn.006311ec
add esp, 0xc
lea eax, [ebp - 0x3ec]
mov ebx, str.PerformFlashFXPPasswordRecovery
push eax
push ebx
push str._s___Flashfxp_profiles__path___s
call fcn.00449974
lea eax, [ebp - 0x3ec]
push eax
call fcn.0044975e
add esp, 0x10
test eax, eax
lea eax, [ebp - 0x3ec]
push eax
jne 0x41a15b
push ebx
push str._s___Specified_Flashfxp_profile_folder__s_does_not_exist
jmp 0x41a080
push str._sSites.dat
lea eax, [ebp - 0x7d4]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x7d4]
push eax
push ebx
push str._s___Checking_Flashfxp_sites_file___s
call fcn.00449974
lea eax, [ebp - 0x7d4]
push eax
call fcn.00449791
add esp, 0x20
test eax, eax
je 0x41a19f
lea eax, [ebp - 0x7d4]
push eax
call fcn.0042aa55
pop ecx
lea eax, [ebp - 0x3ec]
mov ebx, 0x6716cc
push eax
push ebx
mov edi, 0x208
lea eax, [ebp - 0xfa4]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x3ec]
push eax
push ebx
lea eax, [ebp - 0xfa4]
push edi
push eax
call fcn.00445d6d
add esp, 0x20
lea eax, [ebp - 0x10e4]
push eax
lea eax, [ebp - 0xfa4]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x41a207
push str.PerformFlashFXPPasswordRecovery
push str._s_No_stored_Smart_FTP_account_files_found
call fcn.00449974
pop ecx
pop ecx
jmp 0x41a088
test byte [ebp - 0x10e4], 0x10
je 0x41a26f
cmp byte [ebp - 0x10b8], 0x2e
je 0x41a26f
lea eax, [ebp - 0x10b8]
push eax
lea eax, [ebp - 0x3ec]
push eax
push str._s_sSites.dat
lea eax, [ebp - 0x7d4]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x7d4]
push eax
push str.PerformFlashFXPPasswordRecovery
push str._s___Checking_Flashfxp_sites_file___s
call fcn.00449974
lea eax, [ebp - 0x7d4]
push eax
call fcn.00449791
add esp, 0x24
test eax, eax
je 0x41a26f
lea eax, [ebp - 0x7d4]
push eax
call fcn.0042aa55
pop ecx
lea ecx, [ebp - 0x10e4]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x41a207
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret