Function at 0x428eab
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x7170
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0xbdb]
push esi
push edi
push 0x3e7
push 0
push eax
mov byte [ebp - 0xbdc], 0
call fcn.00626f50
mov esi, str.Ftplist.txt
mov byte [ebp - 0x13ac], 0
lea edi, [ebp - 0x10]
lea eax, [ebp - 0x13ab]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, str.C:FTP_Navigator
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov esi, 0x3e7
push esi
push 0
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x7f3]
mov byte [ebp - 0x7f4], 0
push 0
push eax
call fcn.00626f50
push ebx
call fcn.00631510
add esp, 0x28
lea edi, [esi + 1]
mov esi, str.RecoverFTPNavigatorPasswords
cmp eax, 1
jae 0x428f93
lea eax, [ebp - 0x7f4]
push edi
push eax
call fcn.00411264
pop ecx
pop ecx
test eax, eax
jne 0x428f8d
push esi
push str._s_Failed_to_find_instlal_location_of_FTP_Navigator...using_default_path
call fcn.00449974
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x7f4]
push edi
push eax
call fcn.006311ec
add esp, 0x14
lea eax, [ebp - 0x13ac]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov al, byte [ebp - 0x13ac]
mov byte [ebp - 0x7f4], al
lea ebx, [ebp - 0x7f4]
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x66c218
lea eax, [ebp - 0xbdc]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0xbdc]
push eax
push str._n_Final_FTP_Navigator_file_is____s
call fcn.00449974
push 0x66ca20
lea eax, [ebp - 0xbdc]
xor ebx, ebx
push eax
lea eax, [ebp - 0x7170]
mov dword [ebp - 0x7170], ebx
push eax
call fcn.00632119
add esp, 0x28
test eax, eax
jne 0x428fee
cmp dword [ebp - 0x7170], ebx
jne 0x429342
lea eax, [ebp - 0xbdc]
push eax
push esi
push str._s_Failed_to_open_FTP_Navigator_file__s
call fcn.00449974
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
lea eax, [ebp - 0x716c]
mov byte [ebp - 0x1f64], bl
push eax
mov byte [ebp - 0x1794], bl
mov byte [ebp - 0x1b7c], bl
mov byte [ebp - 0xfc4], bl
call fcn.00631510
pop ecx
test eax, eax
je 0x42905d
lea eax, [ebp - 0x716c]
push eax
call fcn.00631510
dec eax
pop ecx
cmp eax, 0x2710
jae 0x429378
mov byte [ebp + eax - 0x716c], bl
lea eax, [ebp - 0x716c]
push eax
lea eax, [ebp - 0x4a5c]
push 0x2710
push eax
call fcn.006311ec
lea eax, [ebp - 0x4a5c]
push eax
call fcn.00631510
inc eax
push eax
lea eax, [ebp - 0x4a5c]
push eax
call fcn.00631711
lea eax, [ebp - 0x4a5c]
push str.password
push eax
call fcn.00627320
add esp, 0x20
test eax, eax
je 0x429342
lea eax, [ebp - 0x4a5c]
push str.password
push eax
call fcn.00627320
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4291ba
push str.password
call fcn.00631510
lea ecx, [ebp - 0x4a5c]
sub esi, ecx
lea ecx, [ebp - 0x716c]
add esi, ecx
add esi, eax
push 0x3b
push esi
call fcn.006270b0
add esp, 0xc
test eax, eax
je 0x429342
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x40c]
push edi
push eax
call fcn.00631360
lea eax, [ebp - 0x40c]
push 0x66c5bc
push eax
call fcn.00631370
add esp, 0x18
test eax, eax
je 0x429342
lea eax, [ebp - 0x40c]
push 0x6738e0
push eax
call fcn.00631370
pop ecx
pop ecx
test eax, eax
je 0x429342
lea eax, [ebp - 0x716c]
push eax
push str._n_n_Password_present_in_line__s
call fcn.00449974
pop ecx
pop ecx
lea eax, [ebp - 0x40c]
push eax
push eax
call fcn.00631510
pop ecx
push eax
push str._n_Found_Encoded_Password___d__s
call fcn.00449974
push edi
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0x40c]
push eax
call fcn.00407abb
add esp, 0x18
test eax, eax
jne 0x42919e
lea eax, [ebp - 0x40c]
push eax
push str._n_Failed_ot_decode_the_password__s
call fcn.00449974
pop ecx
pop ecx
jmp 0x429342
lea eax, [ebp - 0xfc4]
push eax
push eax
call fcn.00631510
pop ecx
push eax
push str._n_Final_password___d__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x4a5c]
push str.user
push eax
call fcn.00627320
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x429223
push str.user
call fcn.00631510
lea ecx, [ebp - 0x4a5c]
sub esi, ecx
lea ecx, [ebp - 0x716c]
add esi, ecx
add esi, eax
push 0x3b
push esi
call fcn.006270b0
add esp, 0xc
test eax, eax
je 0x429223
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x1f64]
push edi
push eax
call fcn.00631360
lea eax, [ebp - 0x1f64]
push eax
push str._n_Found_User_s
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x4a5c]
push str.server
push eax
call fcn.00627320
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x42928c
push str.server
call fcn.00631510
lea ecx, [ebp - 0x4a5c]
sub esi, ecx
lea ecx, [ebp - 0x716c]
add esi, ecx
add esi, eax
push 0x3b
push esi
call fcn.006270b0
add esp, 0xc
test eax, eax
je 0x42928c
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x1b7c]
push edi
push eax
call fcn.00631360
lea eax, [ebp - 0x1b7c]
push eax
push str._n_Found_host_s
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x4a5c]
push str.port
push eax
call fcn.00627320
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4292f5
push str.port
call fcn.00631510
lea ecx, [ebp - 0x4a5c]
sub esi, ecx
lea ecx, [ebp - 0x716c]
add esi, ecx
add esi, eax
push 0x3b
push esi
call fcn.006270b0
add esp, 0xc
test eax, eax
je 0x4292f5
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x1794]
push edi
push eax
call fcn.00631360
lea eax, [ebp - 0x1794]
push eax
push str._n_Found_port_s
call fcn.00449974
add esp, 0x18
lea eax, [ebp - 0x1794]
push eax
lea eax, [ebp - 0x1b7c]
push eax
push str._s:_s
lea eax, [ebp - 0x234c]
push edi
push eax
call fcn.00445d6d
push 0xffffffffffffffff
mov esi, 0x66ae5d
lea eax, [ebp - 0xfc4]
push esi
push eax
lea eax, [ebp - 0x1f64]
push eax
lea eax, [ebp - 0x234c]
push eax
push esi
push 0x14c
push 4
call fcn.00412c85
add esp, 0x34
push dword [ebp - 0x7170]
lea eax, [ebp - 0x716c]
push 0x2710
push eax
call fcn.00631f4f
add esp, 0xc
test eax, eax
jne 0x429014
push dword [ebp - 0x7170]
call fcn.00637603
xor eax, eax
pop ecx
inc eax
jmp 0x429005
call fcn.005fe87a
int3