Function at 0x4076b0
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5759ce
mov eax, dword fs:[0]
push eax
sub esp, 0x1e8
mov eax, dword [0x676300]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
mov ebx, 0xf
mov byte [ebp - 0x1e5], 0
xor esi, esi
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], edi
mov byte [ebp - 0x84], 0
mov dword [ebp - 4], edi
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], edi
mov byte [ebp - 0x68], 0
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
mov byte [ebp - 0x4c], 0
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x30], 0
mov byte [ebp - 4], 3
cmp dword [0x6829a8], 0x3c
jb 0x407b05
lea ecx, [ebp - 0x1f0]
push ecx
push eax
call fcn.0040eaf0
cmp eax, edi
jl 0x407aed
mov edx, dword [ebp - 0x1f0]
push edx
call fcn.0040f410
mov ebx, eax
cmp dword [ebx], edi
je 0x40779d
mov eax, dword [ebx + 4]
push edi
push edi
push edi
push edi
push 0xffffffffffffffff
push eax
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov edi, eax
lea ecx, [edi + 1]
push ecx
call fcn.00538174
add esp, 4
push edi
mov esi, eax
push 0
push esi
call fcn.00534b40
mov edx, dword [ebx + 4]
add esp, 0xc
push 0
push 0
push edi
push esi
push 0xffffffffffffffff
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor edi, edi
lea eax, [ebx - 0x10]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
jne 0x4077b2
lea eax, [ebx - 0x10]
call fcn.004125b0
mov eax, dword [ebp - 0x1f0]
cmp eax, edi
je 0x4077d0
add eax, 0xfffffff0
mov edx, eax
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
jne 0x4077d0
call fcn.004125b0
cmp esi, edi
je 0x407ae8
mov eax, esi
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4077e0
sub eax, edx
je 0x407ae8
push eax
push esi
lea ecx, [ebp - 0x84]
call fcn.0040a3f0
push esi
call fcn.00535f7c
add esp, 4
lea edx, [ebp - 0x1ec]
push edx
lea edi, [ebp - 0x84]
mov byte [ebp - 0x1ec], 0x5c
call fcn.0040a4f0
cmp eax, 0xffffffff
jne 0x407895
mov esi, 0x10
cmp dword [ebp - 0x1c], esi
jb 0x407839
mov eax, dword [ebp - 0x30]
push eax
call fcn.00535f7c
add esp, 4
xor edi, edi
mov ebx, 0xf
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x30], 0
cmp dword [ebp - 0x38], esi
jb 0x40785b
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.00535f7c
add esp, 4
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
mov byte [ebp - 0x4c], 0
cmp dword [ebp - 0x54], esi
jb 0x407876
mov edx, dword [ebp - 0x68]
push edx
call fcn.00535f7c
add esp, 4
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], edi
mov byte [ebp - 0x68], 0
cmp dword [ebp - 0x70], esi
jb 0x407b5e
mov eax, dword [ebp - 0x84]
push eax
jmp 0x407b56
inc eax
push eax
push 0
lea ecx, [ebp - 0xa0]
push ecx
lea ecx, [ebp - 0x84]
call fcn.00408ae0
push eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 4
call fcn.0040a290
mov esi, 0x10
mov byte [ebp - 4], 3
cmp dword [ebp - 0x8c], esi
jb 0x4078d8
mov edx, dword [ebp - 0xa0]
push edx
call fcn.00535f7c
add esp, 4
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040b230
push 0xb
push str.mozglue.dll
lea ecx, [ebp - 0x4c]
call fcn.0040b110
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x38], esi
jae 0x407902
lea eax, [ebp - 0x4c]
push 0
push eax
call fcn.0053861d
add esp, 8
cmp eax, 0xffffffff
je 0x40793c
lea ecx, [ebp - 0x30]
call fcn.00451de0
lea ecx, [ebp - 0x4c]
call fcn.00451de0
lea ecx, [ebp - 0x68]
call fcn.00451de0
lea ecx, [ebp - 0x84]
call fcn.00451de0
mov al, 1
jmp 0x407b60
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0040b230
push 0x65cb1c
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0040c7d0
cmp dword [eax + 0x14], esi
jb 0x407968
mov eax, dword [eax]
lea ecx, [ebp - 0x1e4]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
lea ecx, [ebp - 0xa0]
mov edi, eax
call fcn.00451de0
cmp edi, 0xffffffff
jne 0x4079b0
lea ecx, [ebp - 0x30]
call fcn.00451de0
lea ecx, [ebp - 0x4c]
call fcn.00451de0
lea ecx, [ebp - 0x68]
call fcn.00451de0
lea ecx, [ebp - 0x84]
call fcn.00451de0
jmp 0x407b5e
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x4079c0
mov ecx, 0x65cb44
lea eax, [ebp - 0x1b8]
jmp 0x4079d0
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4079f0
test dl, dl
je 0x4079ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4079f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4079d0
xor eax, eax
jmp 0x4079f5
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407a9e
mov ecx, 0x65cb48
lea eax, [ebp - 0x1b8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x407a28
test dl, dl
je 0x407a24
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x407a28
add eax, 2
add ecx, 2
test dl, dl
jne 0x407a08
xor eax, eax
jmp 0x407a2d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x407a9e
test byte [ebp - 0x1e4], 0x10
je 0x407a9e
mov dl, byte [ebp - 0x1b8]
sub dl, 0x30
cmp dl, 9
ja 0x407a9e
lea eax, [ebp - 0x1b8]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x407a51
sub eax, edx
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x30]
call fcn.0040b110
push 0x5c
push 1
lea ecx, [ebp - 0x30]
call fcn.0040a340
push str.chrome.dll
lea ecx, [ebp - 0x30]
call fcn.0040a310
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], esi
jae 0x407a8e
lea eax, [ebp - 0x30]
push 0
push eax
call fcn.0053861d
add esp, 8
cmp eax, 0xffffffff
jne 0x407ae4
lea ecx, [ebp - 0x1e4]
push ecx
push edi
call ebx
test eax, eax
jne 0x4079c0
mov bl, byte [ebp - 0x1e5]
push edi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [ebp - 0x30]
call fcn.00451de0
lea ecx, [ebp - 0x4c]
call fcn.00451de0
lea ecx, [ebp - 0x68]
call fcn.00451de0
lea ecx, [ebp - 0x84]
call fcn.00451de0
mov al, bl
jmp 0x407b60
mov bl, 1
jmp 0x407ab6
mov ebx, 0xf
mov esi, 0x10
cmp dword [ebp - 0x1c], esi
jb 0x407b0a
mov edx, dword [ebp - 0x30]
push edx
call fcn.00535f7c
add esp, 4
jmp 0x407b0a
mov esi, 0x10
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], edi
mov byte [ebp - 0x30], 0
cmp dword [ebp - 0x38], esi
jb 0x407b25
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00535f7c
add esp, 4
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], edi
mov byte [ebp - 0x4c], 0
cmp dword [ebp - 0x54], esi
jb 0x407b40
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00535f7c
add esp, 4
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], edi
mov byte [ebp - 0x68], 0
cmp dword [ebp - 0x70], esi
jb 0x407b5e
mov edx, dword [ebp - 0x84]
push edx
call fcn.00535f7c
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00534bba
mov esp, ebp
pop ebp
ret 4