Function at 0x428a6d
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4270
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 6
pop ecx
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x138c]
mov esi, str.FTP_Explorerprofiles.xml
lea eax, [ebp - 0x1372]
rep movsd dword es:[edi], dword [esi]
push 0x3ce
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00626f50
push ebx
call fcn.00631510
add esp, 0x10
cmp eax, 1
jae 0x428b16
lea eax, [ebp - 0x2afc]
push eax
push 0
push 0
push 0x1a
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x428aec
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RecoverFTPExplorerPasswords
push str._s_Failed_to_find_appdata_folder__Error0x_.8x
jmp 0x428b82
lea eax, [ebp - 0x138c]
mov esi, 0x3e8
push eax
lea eax, [ebp - 0x2afc]
push eax
push 0x66c218
lea eax, [ebp - 0x7d4]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x428b2c
push ebx
mov esi, 0x3e8
lea eax, [ebp - 0x7d4]
push esi
push eax
call fcn.006311ec
add esp, 0xc
lea eax, [ebp - 0x7d4]
mov ebx, str.RecoverFTPExplorerPasswords
push eax
push ebx
push str._n_s_Final_profile_path___s
call fcn.00449974
and dword [ebp - 0x4270], 0
lea eax, [ebp - 0x7d4]
push 0x66ca20
push eax
lea eax, [ebp - 0x4270]
push eax
call fcn.00632119
add esp, 0x18
test eax, eax
jne 0x428b75
cmp dword [ebp - 0x4270], eax
jne 0x428c22
lea eax, [ebp - 0x7d4]
push eax
push ebx
push str._s_Unable_to_find_filezilla_password_file_:__s
call fcn.00449974
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
lea eax, [ebp - 0x426c]
push eax
call fcn.00631510
pop ecx
test eax, eax
je 0x428bcd
lea eax, [ebp - 0x426c]
push eax
call fcn.00631510
dec eax
pop ecx
cmp eax, 0x1388
jae 0x428ea5
mov byte [ebp + eax - 0x426c], 0
lea eax, [ebp - 0x426c]
push eax
lea eax, [ebp - 0x2714]
push 0x1388
push eax
call fcn.006311ec
lea eax, [ebp - 0x2714]
push eax
call fcn.00631510
inc eax
push eax
lea eax, [ebp - 0x2714]
push eax
call fcn.00631711
lea eax, [ebp - 0x2714]
push str.__ftpx_
push eax
call fcn.00627320
add esp, 0x20
test eax, eax
je 0x428c29
push str.We_have_hit_the_end_of_FTP_account__now_resetting_back_the_state
call fcn.00449974
pop ecx
xor edi, edi
jmp 0x428e6f
mov eax, edi
sub eax, 0
je 0x428e40
sub eax, 1
je 0x428dec
sub eax, 1
je 0x428d68
sub eax, 1
jne 0x428e6f
lea eax, [ebp - 0x2714]
push str._password_
push eax
call fcn.00627320
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x428e6f
lea eax, [ebp - 0x2714]
push str.__password_
push eax
call fcn.00627320
pop ecx
pop ecx
test eax, eax
je 0x428c9e
lea ecx, [ebp - 0x2714]
sub eax, ecx
cmp eax, 0x1388
jae 0x428ea5
mov byte [ebp + eax - 0x426c], 0
push str._password_
call fcn.00631510
lea ecx, [ebp - 0x2714]
sub ebx, ecx
lea ecx, [ebp - 0x426c]
add ecx, ebx
add ecx, eax
lea eax, [ebp - 0x3ec]
push ecx
push esi
push eax
call fcn.006311ec
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0xbbc]
push eax
push str.RecoverFTPExplorerPasswords
push str._s___Found_ftp_account____s__user__s__pass__s
call fcn.00449974
mov ebx, str.01000000D08C9DDF0115D1118C7A00C0
push ebx
call fcn.00631510
push eax
lea eax, [ebp - 0x3ec]
push ebx
push eax
call fcn.006317d8
add esp, 0x34
test eax, eax
jne 0x428d36
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x2ee4]
push esi
push eax
call fcn.006311ec
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x2ee4]
push eax
call fcn.0040a28b
add esp, 0x14
push 0xffffffffffffffff
mov ebx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push ebx
push eax
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0xbbc]
push eax
push ebx
push 0x13c
push 4
call fcn.00412c85
add esp, 0x20
jmp 0x428c22
lea eax, [ebp - 0x2714]
push str._login_
push eax
call fcn.00627320
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x428e6f
lea eax, [ebp - 0x2714]
push str.__login_
push eax
call fcn.00627320
pop ecx
pop ecx
test eax, eax
je 0x428db7
lea ecx, [ebp - 0x2714]
sub eax, ecx
cmp eax, 0x1388
jae 0x428ea5
mov byte [ebp + eax - 0x426c], 0
push str._login_
call fcn.00631510
lea ecx, [ebp - 0x2714]
sub ebx, ecx
lea ecx, [ebp - 0x426c]
add ecx, ebx
add ecx, eax
lea eax, [ebp - 0xfa4]
push ecx
push esi
push eax
call fcn.006311ec
add esp, 0x10
push 3
pop edi
jmp 0x428e6f
lea eax, [ebp - 0x2714]
push str._host_
push eax
call fcn.00627320
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
je 0x428e6f
lea eax, [ebp - 0x2714]
push str.__host_
push eax
call fcn.00627320
pop ecx
pop ecx
test eax, eax
je 0x428e1f
mov byte [eax], 0
push str._host_
call fcn.00631510
add eax, ebx
push eax
lea eax, [ebp - 0xbbc]
push esi
push eax
call fcn.006311ec
add esp, 0x10
push 2
jmp 0x428de6
lea eax, [ebp - 0x2714]
push str._ftpx_
push eax
call fcn.00627320
pop ecx
pop ecx
test eax, eax
je 0x428e6f
xor edi, edi
mov byte [ebp - 0xbbc], 0
mov byte [ebp - 0xfa4], 0
inc edi
mov byte [ebp - 0x3ec], 0
push dword [ebp - 0x4270]
lea eax, [ebp - 0x426c]
push 0x1388
push eax
call fcn.00631f4f
add esp, 0xc
test eax, eax
jne 0x428b9b
push dword [ebp - 0x4270]
call fcn.00637603
xor eax, eax
pop ecx
inc eax
jmp 0x428b8c
call fcn.005fe87a
int3