Function at 0x42c132
Capabilities:
Enumerate files on windows
Get common file path
Get program files directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1114
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x41b]
push esi
push edi
mov esi, 0x3e7
mov byte [ebp - 0x41c], 0
push esi
push 0
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x803]
mov byte [ebp - 0x804], 0
push 0
push eax
call fcn.00626f50
push 0xb
pop ecx
mov esi, str.TransSoft_LtdFTP_Control_4ProfilesDefault
lea edi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push ebx
push str._n_entered____s
movsb byte es:[edi], byte [esi]
call fcn.00449974
push ebx
call fcn.00631510
add esp, 0x24
mov edi, 0x66c218
cmp eax, 1
jae 0x42c27a
lea eax, [ebp - 0x804]
xor ebx, ebx
push eax
push ebx
push ebx
push 0x26
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x42c1e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RecoverFtpControlPasswords
push str._s_Failed_to_find_program_files_folder__Error0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
jmp 0x42c3bc
lea eax, [ebp - 0x34]
mov esi, 0x3e8
push eax
lea eax, [ebp - 0x804]
push eax
push edi
lea eax, [ebp - 0x41c]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x41c]
push eax
call fcn.0044975e
add esp, 0x18
test eax, eax
jne 0x42c295
cmp dword [0x716864], ebx
je 0x42c1e1
lea eax, [ebp - 0x804]
push 0x20
push eax
call fcn.006271e0
pop ecx
pop ecx
test eax, eax
je 0x42c1e1
mov byte [eax], bl
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x804]
push eax
push edi
lea eax, [ebp - 0x41c]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x41c]
push eax
push str._n_Checking_file_on_64bit__s
call fcn.00449974
lea eax, [ebp - 0x41c]
push eax
call fcn.0044975e
add esp, 0x20
test eax, eax
je 0x42c1e1
jmp 0x42c295
push ebx
push str._sProfilesDefault
mov esi, 0x3e8
lea eax, [ebp - 0x41c]
push esi
push eax
call fcn.00445d6d
add esp, 0x10
lea eax, [ebp - 0x41c]
push eax
push str._n_Final_file_path_is____s
call fcn.00449974
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0xfd4]
push esi
push eax
call fcn.006311ec
push 0x66d678
lea eax, [ebp - 0xfd4]
push esi
push eax
call fcn.00631246
add esp, 0x20
lea eax, [ebp - 0x1114]
push eax
lea eax, [ebp - 0xfd4]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x42c1e1
mov ebx, 0x66c218
test byte [ebp - 0x1114], 0x10
je 0x42c34c
cmp byte [ebp - 0x10e8], 0x2e
je 0x42c39c
lea eax, [ebp - 0x10e8]
push eax
push str.RecoverFtpControlPasswords
push str._s___Found_the_Directory___s
call fcn.00449974
lea eax, [ebp - 0x10e8]
push eax
lea eax, [ebp - 0x41c]
push eax
push ebx
lea eax, [ebp - 0xbec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0xbec]
push eax
call fcn.0040f750
add esp, 0x24
jmp 0x42c39c
lea eax, [ebp - 0x10e8]
push 0x2e
push eax
call fcn.006271e0
pop ecx
pop ecx
test eax, eax
je 0x42c39c
push str..PRF
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
jne 0x42c39c
lea eax, [ebp - 0x10e8]
push eax
lea eax, [ebp - 0x41c]
push eax
push ebx
lea eax, [ebp - 0xbec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0xbec]
push eax
call fcn.0042c3cb
add esp, 0x18
lea ecx, [ebp - 0x1114]
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x42c2f3
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret