Function at 0x429170
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x45fb20
mov eax, dword fs:[0]
push eax
mov eax, 0x1a44
call fcn.0044bf30
mov eax, dword [0x47b038]
xor eax, esp
mov dword [esp + 0x1a40], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47b038]
xor eax, esp
push eax
lea eax, [esp + 0x1a58]
mov dword fs:[0], eax
mov edi, dword [esp + 0x1a68]
push edi
xor esi, esi
push str.ProcessSectionIsAnyDriverExist_____s__n
mov ebx, ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x30], esi
call fcn.0043e2c0
inc dword [ebx + 0x8cd8]
mov eax, dword [ebx + 0x8cd8]
push eax
push edi
push str.Push___s____index___d__n
call fcn.0043e2c0
mov eax, dword [ebx + 0x8cd8]
imul eax, eax, 0x88
mov dword [eax + ebx + 0x495c], 0xffffffff
mov edx, dword [ebx + 0x8cd8]
add esp, 0x14
imul edx, edx, 0x88
mov ecx, edi
lea edx, [edx + ebx + 0x48dc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, si
jne 0x429214
mov ecx, dword [ebx + 4]
push esi
lea eax, [esp + 0xa58]
push eax
push esi
push edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x44], esi
call fcn.004090a0
test al, al
je 0x42986a
jmp 0x429250
lea ecx, [esp + 0xa54]
push ecx
push esi
push edi
push str.__s___d____s__n
call fcn.0043e2c0
add esp, 0x10
lea edx, [esp + 0xa54]
push edx
mov ecx, ebx
call fcn.004160e0
push 0x1c2d0
call fcn.0044ad7f
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 0
test eax, eax
je 0x4292a5
mov ecx, eax
call fcn.0043d9e0
mov ebp, eax
mov dword [esp + 0x38], eax
jmp 0x4292ab
xor ebp, ebp
mov dword [esp + 0x38], ebp
push 0x469868
lea eax, [esp + 0xa58]
push eax
mov ecx, ebp
mov dword [esp + 0x1a68], 0xffffffff
call fcn.0043dc30
cmp byte [ebp + 0x1c2cc], 0
je 0x4292e8
cmp dword [ebp + 0x1c2c8], 0
jg 0x4292e0
xor eax, eax
jmp 0x4292f6
lea eax, [ebp + 0x32c8]
jmp 0x4292f6
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push str.DriverClass
push eax
call fcn.0044b362
add esp, 8
test eax, eax
jne 0x429775
inc dword [ebx + 0x8cd8]
mov ecx, dword [ebx + 0x8cd8]
cmp byte [ebp + 0x1c2cc], al
je 0x429330
cmp dword [ebp + 0x1c2c8], eax
jle 0x42933e
lea eax, [ebp + 0x32c8]
jmp 0x42933e
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push ecx
push eax
push str.__Push___s_m_nCurSct___Index___d__n
call fcn.0043e2c0
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
add esp, 0xc
mov dword [ecx + ebx + 0x495c], 0xffffffff
cmp byte [ebp + 0x1c2cc], 0
je 0x429382
cmp dword [ebp + 0x1c2c8], 0
jg 0x42937a
xor ecx, ecx
jmp 0x429390
lea ecx, [ebp + 0x32c8]
jmp 0x429390
xor ecx, ecx
cmp dword [ebp + 0x1c2c8], ecx
setle cl
dec ecx
and ecx, ebp
mov edx, dword [ebx + 0x8cd8]
imul edx, edx, 0x88
lea edx, [edx + ebx + 0x48dc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x4293a3
inc dword [esp + 0x14]
xor eax, eax
push 0x7e
push eax
lea ecx, [esp + 0x2c6]
or esi, 0xffffffff
push ecx
mov dword [esp + 0x2c], esi
mov word [esp + 0x2c8], ax
call fcn.0044ac90
add esp, 0xc
cmp byte [ebp + 0x1c2cc], 0
je 0x4293fa
cmp dword [ebp + 0x1c2c8], 1
jg 0x4293f2
xor ecx, ecx
jmp 0x42940d
lea ecx, [ebp + 0x3ac8]
jmp 0x42940d
cmp dword [ebp + 0x1c2c8], 1
jg 0x429407
xor ecx, ecx
jmp 0x42940d
lea ecx, [ebp + 0x104]
lea edx, [esp + 0x2bc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x429414
lea edx, [esp + 0x2bc]
push edx
push str.___szClass_____s__n
call fcn.0043e2c0
lea eax, [esp + 0x2c4]
push str.Image
push eax
call fcn.0044b362
add esp, 0x10
test eax, eax
jne 0x42973c
push 0x104
lea ecx, [esp + 0x648]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea edx, [esp + 0x644]
push edx
lea eax, [esp + 0x440]
push str._sinfoem.inf
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
je 0x42973c
jmp 0x4294b0
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x648]
push ecx
lea edx, [esp + 0x444]
push str._sinf_s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x4fc8
call fcn.0044ad7f
add esp, 0x14
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 1
test eax, eax
je 0x42950c
push 0
lea ecx, [esp + 0x440]
push ecx
mov ecx, eax
call fcn.0043f710
mov esi, eax
mov dword [esp + 0x1c], eax
jmp 0x429512
xor esi, esi
mov dword [esp + 0x1c], esi
push 0x470
mov dword [esp + 0x1a64], 0xffffffff
call fcn.0044ad7f
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 2
test eax, eax
je 0x429558
mov edx, dword [ebx + 8]
movzx ecx, byte [edx + 0x1e89]
mov edx, dword [ebx]
push ecx
push 0
push edx
mov ecx, eax
call fcn.00404c60
mov edi, eax
jmp 0x42955a
xor edi, edi
lea eax, [esp + 0x2bc]
push eax
mov ecx, esi
mov dword [esp + 0x1a64], 0xffffffff
call fcn.0043eae0
push eax
call fcn.0044b362
add esp, 8
test eax, eax
jne 0x4296e9
lea ecx, [esp + 0x43c]
push ecx
push str.____Found_Inf___s__n
call fcn.0043e2c0
add esp, 8
lea ecx, [esp + 0x54]
call fcn.004031d0
lea edx, [esp + 0x54]
push edx
mov ecx, esi
mov dword [esp + 0x1a64], 3
call fcn.0043f920
mov dword [esp + 0x18], eax
test eax, eax
je 0x4296d5
xor esi, esi
mov dword [esp + 0x2c], esi
test eax, eax
jle 0x4296c8
lea ecx, [esp + 0x3c]
call fcn.004031d0
mov eax, dword [esp + 0x54]
mov eax, dword [eax + esi*8]
push eax
push str.MANUF____s__n
mov byte [esp + 0x1a68], 4
call fcn.0043e2c0
mov ecx, dword [esp + 0x5c]
mov ecx, dword [ecx + esi*8]
add esp, 8
lea edx, [esp + 0x84c]
jmp 0x429610
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x429610
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x850]
push eax
call fcn.0043fa10
mov ebp, eax
xor esi, esi
test ebp, ebp
jle 0x429697
nop
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + esi*8]
push eax
push esi
push str._____saModels__d___s_n
call fcn.0043e2c0
add esp, 0xc
test edi, edi
je 0x429692
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + esi*8]
mov ecx, dword [ebx + 0xc]
push 0x46d5d0
push eax
call fcn.00442110
test eax, eax
je 0x429692
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + esi*8]
push eax
mov ecx, edi
call fcn.00402970
cmp dword [esp + 0x20], 1
jne 0x42968e
mov eax, 1
mov dword [esp + 0x20], eax
inc esi
cmp esi, ebp
jl 0x429640
lea ecx, [esp + 0x3c]
call fcn.004031f0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1a60], 3
call fcn.00404b90
mov esi, dword [esp + 0x2c]
inc esi
cmp esi, dword [esp + 0x18]
mov dword [esp + 0x2c], esi
jl 0x4295d4
mov ebp, dword [esp + 0x38]
lea ecx, [esp + 0x54]
call fcn.004031f0
mov esi, dword [esp + 0x1c]
lea ecx, [esp + 0x54]
mov dword [esp + 0x1a60], 0xffffffff
call fcn.00404b90
test edi, edi
je 0x4296fd
mov ecx, edi
call fcn.00404d00
push edi
call fcn.0044ad0a
add esp, 4
test esi, esi
je 0x429711
mov ecx, esi
call fcn.00440470
push esi
call fcn.0044ad0a
add esp, 4
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x6c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4294b0
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x20]
push esi
push str.__nKeyResult_____d__n
call fcn.0043e2c0
add esp, 8
cmp esi, 0xffffffff
jne 0x42975e
push str.__Set_nKeyResult_to__0__n
xor esi, esi
call fcn.0043e2c0
add esp, 4
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
mov dword [ecx + ebx + 0x495c], esi
mov esi, dword [esp + 0x34]
cmp byte [ebp + 0x1c2cc], 0
je 0x429793
cmp dword [ebp + 0x1c2c8], 0
jg 0x42978b
xor eax, eax
jmp 0x4297a1
lea eax, [ebp + 0x32c8]
jmp 0x4297a1
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push str.Return
push eax
call fcn.0044b362
add esp, 8
test eax, eax
jne 0x429839
xor edx, edx
push 0xfe
push edx
lea eax, [esp + 0x346]
push eax
mov word [esp + 0x348], dx
call fcn.0044ac90
add esp, 0xc
cmp byte [ebp + 0x1c2cc], 0
je 0x4297f5
cmp dword [ebp + 0x1c2c8], 1
jg 0x4297ed
xor ecx, ecx
jmp 0x429808
lea ecx, [ebp + 0x3ac8]
jmp 0x429808
cmp dword [ebp + 0x1c2c8], 1
jg 0x429802
xor ecx, ecx
jmp 0x429808
lea ecx, [ebp + 0x104]
lea edx, [esp + 0x33c]
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x429810
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x340]
push edx
mov ecx, ebx
call fcn.0041ce60
mov dword [esp + 0x28], eax
mov ecx, ebp
call fcn.0043d490
push ebp
call fcn.0044ad0a
mov ecx, dword [ebx + 4]
add esp, 4
push 0
lea eax, [esp + 0xa58]
push eax
inc esi
push esi
push edi
mov dword [esp + 0x44], esi
call fcn.004090a0
test al, al
jne 0x429250
cmp dword [esp + 0x14], 1
jl 0x4298e9
mov esi, dword [esp + 0x14]
xor ebp, ebp
or edi, 0xffffffff
lea ebx, [ebx]
mov eax, dword [ebx + 0x8cd8]
push eax
imul eax, eax, 0x88
lea ecx, [eax + ebx + 0x48dc]
push ecx
push str.Pop___s__index___d__n
call fcn.0043e2c0
mov edx, dword [ebx + 0x8cd8]
imul edx, edx, 0x88
mov dword [edx + ebx + 0x495c], edi
mov eax, dword [ebx + 0x8cd8]
imul eax, eax, 0x88
mov dword [eax + ebx + 0x48d8], ebp
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
xor edx, edx
mov word [ecx + ebx + 0x48dc], dx
add dword [ebx + 0x8cd8], edi
add esp, 0xc
sub esi, 1
jne 0x429880
mov esi, dword [esp + 0x28]
mov eax, dword [ebx + 0x8cd8]
mov ecx, dword [esp + 0x30]
push esi
push eax
push ecx
push str.Look_at___s____index___d__Res___d__n_n
call fcn.0043e2c0
mov edx, dword [ebx + 0x8cd8]
add esp, 0x10
imul edx, edx, 0x88
mov dword [edx + ebx + 0x495c], esi
mov eax, esi
mov ecx, dword [esp + 0x1a58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1a40]
xor ecx, esp
call fcn.0044ac80
add esp, 0x1a50
ret 4