Function at 0x1808c413
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x73c
mov eax, dword [0x180f51f0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x6fc], 0
push ebx
push esi
push edi
mov edi, ecx
mov al, byte [edi]
mov byte [ebp - 0x710], al
test al, al
mov dword [ebp - 0x730], edi
mov eax, str.DropboxUpdateTask
jne 0x1808c44e
mov eax, str.DropboxUpdateTaskUser
push eax
lea eax, [ebp - 0x708]
call fcn.18003fba
mov esi, dword [ebp - 0x708]
push esi
call fcn.1809bb39
pop ecx
push dword [ebp - 0x710]
lea ebx, [ebp - 0x708]
call fcn.1809bd5e
mov ebx, dword [ebp - 0x708]
pop ecx
push ebx
call fcn.1809bb39
pop ecx
lea eax, [ebx - 0x10]
call fcn.18004250
lea eax, [esi - 0x10]
call fcn.18004250
cmp byte [edi], 0
je 0x1808c4ba
mov dword [ebp - 0x6fc], 1
call fcn.1806dbba
lea eax, [ebp - 0x738]
call fcn.1806e123
push 2
pop ebx
jmp 0x1808c4d3
push 2
pop ebx
mov dword [ebp - 0x6fc], ebx
call fcn.1806dbba
lea eax, [ebp - 0x73c]
call fcn.1806de9e
mov eax, dword [eax]
sub eax, 0x10
call fcn.18003d67
mov esi, eax
add esi, 0x10
mov dword [ebp - 0x714], esi
test byte [ebp - 0x6fc], bl
je 0x1808c505
mov eax, dword [ebp - 0x73c]
and dword [ebp - 0x6fc], 0xfffffffd
add eax, 0xfffffff0
call fcn.18004250
test byte [ebp - 0x6fc], 1
je 0x1808c51c
mov eax, dword [ebp - 0x738]
add eax, 0xfffffff0
call fcn.18004250
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
je 0x1808c56b
push 1
push ebx
mov dword [ebp - 0x72c], ecx
call fcn.18001d8a
push dword [edi + 4]
mov dword [ebp - 0x728], eax
push esi
lea eax, [ebp - 0x72c]
push str._SetupGoogleUpdate::UninstallPreviousVersions___s___s_
push eax
mov dword [ebp - 0x724], 1
mov dword [ebp - 0x720], ebx
call fcn.18001000
add esp, 0x10
xor eax, eax
cmp dword [esi - 0xc], eax
jne 0x1808c590
mov edi, 0x8000ffff
lea eax, [esi - 0x10]
call fcn.18004250
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1809ccb5
leave
ret
push 0x24c
push eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x254]
push eax
call fcn.1809d820
add esp, 0xc
push esi
lea eax, [ebp - 0x704]
call fcn.18003fba
push 0x180c439c
lea eax, [ebp - 0x704]
call fcn.180065de
mov edi, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x704]
call edi
mov dword [ebp - 0x71c], eax
cmp eax, 0xffffffff
jne 0x1808c66c
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
mov edi, eax
je 0x1808c649
push 0xfffffffffffffffe
pop esi
push esi
push ebx
mov dword [ebp - 0x72c], ecx
call fcn.18001d8a
push edi
push dword [ebp - 0x704]
mov dword [ebp - 0x728], eax
lea eax, [ebp - 0x72c]
push str._Subdirs_not_found_under_dir___s___d_
push eax
mov dword [ebp - 0x724], esi
mov dword [ebp - 0x720], ebx
call fcn.18001000
mov esi, dword [ebp - 0x714]
add esp, 0x10
test edi, edi
jle 0x1808c659
and edi, 0xffff
or edi, 0x80070000
mov eax, dword [ebp - 0x704]
add eax, 0xfffffff0
call fcn.18004250
jmp 0x1808c577
push str.DropboxUpdateDownload
lea eax, [ebp - 0x6fc]
call fcn.18003fba
mov eax, dword [ebp - 0x6fc]
push dword [eax - 0xc]
lea esi, [ebp - 0x6fc]
call fcn.18004129
push eax
call dword [sym.imp.SHLWAPI.dll_PathStripPathW]
or eax, 0xffffffff
call fcn.18003fe5
mov esi, 0x250
push dword [ebp - 0x714]
lea eax, [ebp - 0x70c]
call fcn.18003fba
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x70c]
call fcn.180065de
test byte [ebp - 0x258], 0x10
lea eax, [ebp - 0x22c]
jne 0x1808c6fb
push str.DropboxUpdate.exe
push eax
call fcn.1809dd43
pop ecx
pop ecx
test eax, eax
je 0x1808c8e3
mov ebx, dword [ebp - 0x70c]
call fcn.180052e1
jmp 0x1808c8e0
push 0x180c2dc8
push eax
call fcn.180a027a
pop ecx
pop ecx
test eax, eax
je 0x1808c8e3
lea eax, [ebp - 0x22c]
push 0x180c2ae0
push eax
call fcn.180a027a
pop ecx
pop ecx
test eax, eax
je 0x1808c8e3
mov eax, dword [ebp - 0x730]
push dword [eax + 4]
lea eax, [ebp - 0x22c]
push eax
call fcn.1809dd43
pop ecx
pop ecx
test eax, eax
je 0x1808c8e3
push dword [ebp - 0x6fc]
lea eax, [ebp - 0x22c]
push eax
call fcn.1809dd43
pop ecx
pop ecx
test eax, eax
je 0x1808c8e3
mov ebx, dword [ebp - 0x70c]
add ebx, 0xfffffff0
mov eax, ebx
call fcn.18003d67
add eax, 0x10
mov dword [ebp - 0x718], eax
push str.npDropboxOneClick.dll
lea eax, [ebp - 0x718]
call fcn.180065de
push esi
lea eax, [ebp - 0x6f8]
push 0
push eax
call fcn.1809d820
add esp, 0xc
lea eax, [ebp - 0x6f8]
push eax
push dword [ebp - 0x718]
call edi
mov dword [ebp - 0x708], eax
inc eax
neg eax
sbb eax, eax
and eax, dword [fcn.1800234b]
je 0x1808c7ff
mov eax, ebx
call fcn.18003d67
add eax, 0x10
mov dword [ebp - 0x700], eax
lea eax, [ebp - 0x6cc]
push eax
lea eax, [ebp - 0x700]
call fcn.180065de
push dword [ebp - 0x700]
call fcn.1800540d
mov eax, dword [ebp - 0x700]
pop ecx
add eax, 0xfffffff0
call fcn.18004250
mov eax, ebx
call fcn.18003d67
add eax, 0x10
mov dword [ebp - 0x700], eax
push str.npDropboxUpdate.dll
lea eax, [ebp - 0x700]
call fcn.180065de
push esi
lea eax, [ebp - 0x4a8]
push 0
push eax
call fcn.1809d820
add esp, 0xc
lea eax, [ebp - 0x4a8]
push eax
push dword [ebp - 0x700]
call edi
mov dword [ebp - 0x710], eax
inc eax
neg eax
sbb eax, eax
and eax, dword [fcn.1800234b]
je 0x1808c88a
mov eax, ebx
call fcn.18003d67
add eax, 0x10
mov dword [ebp - 0x734], eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x734]
call fcn.180065de
mov ebx, dword [ebp - 0x734]
push ebx
call fcn.1800540d
pop ecx
lea eax, [ebx - 0x10]
call fcn.18004250
call fcn.1808c1b1
mov ebx, dword [ebp - 0x70c]
call fcn.180052e1
cmp dword [ebp - 0x710], 0xffffffff
je 0x1808c8af
push dword [ebp - 0x710]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x700]
add eax, 0xfffffff0
call fcn.18004250
cmp dword [ebp - 0x708], 0xffffffff
je 0x1808c8d2
push dword [ebp - 0x708]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x718]
add eax, 0xfffffff0
call fcn.18004250
push 2
pop ebx
mov eax, dword [ebp - 0x70c]
add eax, 0xfffffff0
call fcn.18004250
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x71c]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1808c6a4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x12
je 0x1808c9aa
movzx ecx, byte [0x180fb8f9]
neg ecx
sbb ecx, ecx
and ecx, 0x180fbba0
je 0x1808c967
push 0xfffffffffffffffe
pop esi
push esi
push ebx
mov dword [ebp - 0x72c], ecx
call fcn.18001d8a
push edi
mov dword [ebp - 0x728], eax
lea eax, [ebp - 0x72c]
push str._::FindNextFile___failed___d_
push eax
mov dword [ebp - 0x724], esi
mov dword [ebp - 0x720], ebx
call fcn.18001000
add esp, 0xc
test edi, edi
jle 0x1808c977
and edi, 0xffff
or edi, 0x80070000
mov eax, dword [ebp - 0x6fc]
add eax, 0xfffffff0
call fcn.18004250
push dword [ebp - 0x71c]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x704]
add eax, 0xfffffff0
call fcn.18004250
mov esi, dword [ebp - 0x714]
jmp 0x1808c577
call fcn.1806dbba
push 0x180ed6ec
push str.HKLMSoftwareDropboxUpdateUpdate_
call fcn.1800f774
pop ecx
pop ecx
call fcn.1806dbba
mov eax, dword [ebp - 0x730]
movzx eax, byte [eax]
push 0x180e29b0
push eax
call fcn.180197de
push eax
call fcn.1800f774
mov eax, dword [ebp - 0x6fc]
pop ecx
pop ecx
add eax, 0xfffffff0
call fcn.18004250
push dword [ebp - 0x71c]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [ebp - 0x704]
add eax, 0xfffffff0
call fcn.18004250
xor edi, edi
jmp 0x1808c99f