Function at 0x44069f
Capabilities:
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3b8
mov eax, dword [0x4a02f0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
xor esi, esi
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2e4], esi
call fcn.00401f50
push 7
pop edi
xor eax, eax
push 0x49b454
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], esi
mov word [ebp - 0x20], ax
call fcn.00401fb0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0040e190
pop ecx
pop ecx
push esi
push 1
lea ecx, [ebp - 0x20]
call fcn.00402b70
cmp dword [ebp - 0x60], 8
mov eax, dword [ebp - 0x74]
jae 0x440714
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x2e0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2ec], eax
cmp eax, 0xffffffff
je 0x440a0c
push ebx
mov dword [ebp - 0x2e8], esi
call fcn.004483f1
mov ebx, eax
pop ecx
mov dword [ebp - 0x2f4], ebx
test byte [ebp - 0x2e0], 0x10
je 0x4409c9
call fcn.0040ab90
test eax, eax
jg 0x440798
or dword [ebp - 0x2e4], 1
push esi
push 0x9e
push str.installer_tdsetuputilhelper.cc
lea ecx, [ebp - 0x3b8]
call fcn.0040add0
lea ecx, [ebp - 0x2b4]
push ecx
add eax, 8
push str.directory_found:
push eax
call fcn.00403540
pop ecx
pop ecx
push eax
call fcn.0040b670
pop ecx
pop ecx
test byte [ebp - 0x2e4], 1
je 0x4407b3
and dword [ebp - 0x2e4], 0xfffffffe
lea ecx, [ebp - 0x3b8]
call fcn.0040ae20
xor eax, eax
mov word [ebp - 0x20], ax
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], esi
call fcn.00401fb0
lea eax, [ebp - 0x20]
push eax
call fcn.004483f1
pop ecx
push eax
lea ecx, [ebp - 0x2e8]
call fcn.004401cd
push esi
push 1
lea ecx, [ebp - 0x20]
call fcn.00402b70
cmp dword [ebp - 0x2e8], esi
je 0x4409c9
push dword [ebp - 0x2e8]
mov ecx, ebx
call fcn.0044822e
test al, al
je 0x4409c9
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0x58]
call fcn.00401f50
xor eax, eax
mov word [ebp - 0x3c], ax
lea eax, [ebp - 0x2b4]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], esi
call fcn.00401fb0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0040e190
pop ecx
pop ecx
push esi
push 1
lea ecx, [ebp - 0x3c]
call fcn.00402b70
xor eax, eax
push 0xffffffffffffffff
mov word [ebp - 0x20], ax
push esi
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x10], esi
call fcn.00402710
xor eax, eax
push str.chrome.dll
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x3c], ax
call fcn.00401fb0
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040e190
pop ecx
pop ecx
push esi
push 1
lea ecx, [ebp - 0x3c]
call fcn.00402b70
call fcn.0040ab90
test eax, eax
jg 0x4408ec
or dword [ebp - 0x2e4], 2
push esi
push 0xa6
push str.installer_tdsetuputilhelper.cc
lea ecx, [ebp - 0x3b8]
call fcn.0040add0
add eax, 8
push str.deleting_directory
push eax
call fcn.00403540
cmp dword [ebp - 0x44], 8
pop ecx
pop ecx
mov ecx, dword [ebp - 0x58]
jae 0x4408e3
lea ecx, [ebp - 0x58]
push ecx
push eax
call fcn.0040b670
pop ecx
pop ecx
test byte [ebp - 0x2e4], 2
je 0x440907
and dword [ebp - 0x2e4], 0xfffffffd
lea ecx, [ebp - 0x3b8]
call fcn.0040ae20
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2f0], esi
mov dword [ebp - 0x308], esi
mov dword [ebp - 0x304], esi
mov dword [ebp - 0x300], esi
call fcn.00401f50
push eax
lea ecx, [ebp - 0x308]
call fcn.0044447a
lea ecx, [ebp - 0x3c]
call fcn.00401f80
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x90]
call fcn.00417fc0
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x3c]
call fcn.00401f50
push eax
call fcn.0044a4bb
add esp, 0xc
push eax
lea ecx, [ebp - 0x2f0]
call fcn.004401cd
lea ecx, [ebp - 0x3c]
call fcn.00401f80
lea ecx, [ebp - 0x90]
call fcn.00401f80
mov ebx, dword [ebp - 0x2f0]
mov byte [ebx + 0xa0], 1
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
lea ecx, [ebp - 0x308]
call fcn.0043be30
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax]
push esi
push 1
lea ecx, [ebp - 0x20]
call fcn.00402b70
push esi
push 1
lea ecx, [ebp - 0x58]
call fcn.00402b70
mov ebx, dword [ebp - 0x2f4]
lea eax, [ebp - 0x2e0]
push eax
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x440746
push dword [ebp - 0x2ec]
call dword [sym.imp.KERNEL32.dll_FindClose]
cmp ebx, esi
je 0x4409fc
mov eax, dword [ebx]
push 1
mov ecx, ebx
call dword [eax]
mov ecx, dword [ebp - 0x2e8]
cmp ecx, esi
je 0x440a0c
mov eax, dword [ecx]
push 1
call dword [eax]
push esi
push 1
lea ecx, [ebp - 0x74]
call fcn.00402b70
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046e0cd
leave
ret