Function at 0x10006dc0
Capabilities:
Copy file
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001c480
push 0x1001bb66
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x624
push ebx
push esi
push edi
xor ebx, ebx
mov byte [ebp - 0x634], bl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x633]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x224], bl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x223]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x42c], bl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x42b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x328], bl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x327]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x530], bl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x52f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea eax, [ebp - 0x328]
push eax
push 0x10021410
mov edi, dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
call edi
push 0x103
push str._system32drivers
lea ecx, [ebp - 0x328]
push ecx
mov esi, dword [sym.imp.MSVCRT.dll_strncat]
call esi
add esp, 0xc
mov byte [ebp - 0x225], bl
push 0x104
lea edx, [ebp - 0x42c]
push edx
push 0x10021430
call edi
push 0x103
push str.SysWOW64drivers
lea eax, [ebp - 0x42c]
push eax
call esi
add esp, 0xc
mov byte [ebp - 0x329], bl
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1000eb30
mov dword [ebp - 4], ebx
push 0x103
lea edx, [ebp - 0x328]
push edx
lea eax, [ebp - 0x634]
push eax
mov edi, dword [sym.imp.MSVCRT.dll_strncpy]
call edi
mov byte [ebp - 0x531], bl
push 0x103
push 0x10021450
lea ecx, [ebp - 0x634]
push ecx
call esi
mov byte [ebp - 0x531], bl
push 0x103
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0x224]
push eax
call edi
mov byte [ebp - 0x121], bl
push 0x103
push str.devcon.exe
lea ecx, [ebp - 0x224]
push ecx
call esi
add esp, 0x30
mov byte [ebp - 0x121], bl
push ebx
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x103
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x634]
push edx
call edi
mov byte [ebp - 0x531], bl
push 0x103
push 0x10021468
lea eax, [ebp - 0x634]
push eax
call esi
mov byte [ebp - 0x531], bl
push 0x103
lea ecx, [ebp - 0x42c]
push ecx
lea edx, [ebp - 0x224]
push edx
call edi
mov byte [ebp - 0x121], bl
push 0x103
push str.gwvnic.inf
lea eax, [ebp - 0x224]
push eax
call esi
add esp, 0x30
mov byte [ebp - 0x121], bl
push ebx
lea ecx, [ebp - 0x224]
push ecx
lea edx, [ebp - 0x634]
push edx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x103
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x634]
push ecx
call edi
mov byte [ebp - 0x531], bl
push 0x103
push 0x10021480
lea edx, [ebp - 0x634]
push edx
call esi
mov byte [ebp - 0x531], bl
push 0x103
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x224]
push ecx
call edi
mov byte [ebp - 0x121], bl
push 0x103
push str.gwvnic.cat
lea edx, [ebp - 0x224]
push edx
call esi
add esp, 0x30
mov byte [ebp - 0x121], bl
push ebx
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x634]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push 0x103
lea edx, [ebp - 0x328]
push edx
lea eax, [ebp - 0x634]
push eax
call edi
mov byte [ebp - 0x531], bl
push 0x103
push 0x10021498
lea ecx, [ebp - 0x634]
push ecx
call esi
mov byte [ebp - 0x531], bl
push 0x103
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0x224]
push eax
call edi
mov byte [ebp - 0x121], bl
push 0x103
push str.gwvnic.sys
lea ecx, [ebp - 0x224]
push ecx
call esi
add esp, 0x30
mov byte [ebp - 0x121], bl
push ebx
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 4], 0xffffffff
call fcn.10007140
mov byte [ebp - 0x530], bl
lea edx, [ebp - 0x42c]
push edx
lea eax, [ebp - 0x42c]
push eax
push str._sdevcon.exe_update__sgwvnic.inf_gwvnic
push 0x104
lea ecx, [ebp - 0x530]
push ecx
call fcn.1000c010
add esp, 0x14
push 1
push 1
lea edx, [ebp - 0x530]
push edx
call fcn.1000ee70
push ebx
call fcn.1000e630
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret