Function at 0x417df0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push 0xa50
mov eax, 0x44a2b0
call fcn.004386f7
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp + 0x1c]
xor edi, edi
mov ebx, edi
lea ecx, [ebp - 0x7e8]
mov dword [ebp - 0xa48], esi
mov dword [ebp - 0xa44], eax
mov dword [ebp - 0xa3c], ebx
call sym.DELDRV.exe_public:_void___thiscall_CDeviceInf::constructor_void_
mov esi, 0x105
push esi
lea eax, [ebp - 0x428]
push eax
mov dword [ebp - 4], edi
mov dword [ebp - 0xa4c], edi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x4180d1
push 0x453034
lea eax, [ebp - 0x428]
push esi
push eax
call fcn.004391ef
push 0x44d8a8
lea eax, [ebp - 0x428]
push esi
push eax
call fcn.004391ef
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x21c]
push esi
push eax
call fcn.00439aca
push str.oem.inf
lea eax, [ebp - 0x21c]
push esi
push eax
call fcn.004391ef
add esp, 0x30
cmp dword [0x468e7c], edi
je 0x417ee7
mov esi, str.setupapi.dll
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
jne 0x417ed5
push esi
call fcn.00401fef
pop ecx
test eax, eax
je 0x417ee7
push str.SetupUninstallOEMInfW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xa4c], eax
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
mov dword [ebp - 0xa58], esi
cmp esi, 0xffffffff
je 0x4180cf
lea eax, [ebp - 0x428]
push eax
mov ebx, 0x105
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.00439aca
lea eax, [ebp - 0xa0c]
push eax
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.004391ef
add esp, 0x18
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public:_void___thiscall_CDeviceInf::Clear_void_
xor eax, eax
mov dword [ebp - 0x42c], 7
mov dword [ebp - 0x430], edi
mov word [ebp - 0x440], ax
cmp word [ebp - 0x21c], ax
jne 0x417f6d
mov eax, edi
jmp 0x417f7a
lea eax, [ebp - 0x21c]
push eax
call fcn.0043860f
pop ecx
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x440]
call fcn.00401db2
mov eax, dword [ebp - 0xa54]
lea ecx, [ebp - 0x440]
mov esi, dword [eax]
push ecx
lea ecx, [ebp - 0xa5c]
push ecx
mov ecx, eax
call fcn.004057eb
cmp dword [eax], esi
push edi
push 1
lea ecx, [ebp - 0x440]
setne bl
call fcn.00401ba5
test bl, bl
jne 0x4180a6
mov ebx, dword [ebp - 0xa40]
test ebx, ebx
je 0x417ff8
xor eax, eax
cmp ax, word [ebx]
je 0x417ff8
push str.NONE
push ebx
call fcn.0043925b
pop ecx
pop ecx
test eax, eax
jne 0x417ff8
mov eax, dword [ebp - 0xa44]
test eax, eax
je 0x417ff8
xor ecx, ecx
cmp cx, word [eax]
jne 0x41802f
push dword [ebp + 0xc]
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.0041b92d
add esp, 0xc
test eax, eax
je 0x4180a6
push ebx
lea eax, [ebp - 0x21c]
push eax
push str.__1_s___has_a_string___2_s__.
push str.DeleteAllRelatedInf
push 4
call fcn.00405a24
add esp, 0x14
lea eax, [ebp - 0x21c]
push eax
push str.InfFile__1_s_._n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
add esp, 0x10
lea eax, [ebp - 0x21c]
push edi
push 1
push 0x105
push eax
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public:_int___thiscall_CDeviceInf::Init_wchar_t_const___unsigned_int__int__int_
test eax, eax
je 0x4180a6
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public:_wchar_t_const____thiscall_CDeviceInf::GetInfClass_void_
mov esi, eax
test esi, esi
je 0x4180a6
push dword [ebp - 0xa48]
push esi
call fcn.0043933f
pop ecx
pop ecx
test eax, eax
je 0x4180e8
push esi
push dword [ebp - 0xa48]
push str.InfClass_is_not_match_SRC_1_s___DST_2_s__._n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
add esp, 0x14
mov ebx, dword [ebp - 0xa3c]
mov esi, dword [ebp - 0xa58]
lea eax, [ebp - 0xa38]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x417f0c
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public_virtual:_void___thiscall_CDeviceInf::destructor_void_
mov eax, edi
call fcn.004386a6
ret
push edi
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public:_int___thiscall_CDeviceInf::GetFullInfo_int_
test eax, eax
jne 0x41810e
push str.Cannot_get_inf_full_info._n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
add esp, 0xc
jmp 0x4180a6
test ebx, ebx
je 0x41814f
xor eax, eax
cmp ax, word [ebx]
je 0x41814f
push str.NONE
push ebx
call fcn.0043925b
pop ecx
pop ecx
test eax, eax
jne 0x41814f
mov ebx, dword [ebp - 0xa44]
test ebx, ebx
je 0x41814f
cmp ax, word [ebx]
je 0x41814f
push str.skip_HWID_check._n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
add esp, 0xc
jmp 0x4181b8
lea ecx, [ebp - 0x7e8]
mov ebx, edi
call sym.DELDRV.exe_public:_unsigned_long_int___thiscall_CDeviceInf::GetDeviceIdCount_void_
test eax, eax
je 0x418193
mov edi, dword [ebp - 0xa40]
push ebx
lea ecx, [ebp - 0x7e8]
call sym.DELDRV.exe_public:_wchar_t_const____thiscall_CDeviceInf::GetDeviceId_unsigned_long_int_
mov esi, eax
push edi
push esi
call fcn.0043933f
pop ecx
pop ecx
test eax, eax
je 0x418191
lea ecx, [ebp - 0x7e8]
inc ebx
call sym.DELDRV.exe_public:_unsigned_long_int___thiscall_CDeviceInf::GetDeviceIdCount_void_
cmp ebx, eax
jb 0x418166
xor edi, edi
mov ebx, dword [ebp - 0xa40]
push ebx
push esi
call fcn.0043933f
pop ecx
pop ecx
test eax, eax
je 0x4181b2
push esi
push ebx
push str.hardware_is_not_match_SRC_1_s___DST_2_s__._n
jmp 0x418097
mov ebx, dword [ebp - 0xa44]
push ebx
push str.pDescription_is__1_s__n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
add esp, 0x10
test ebx, ebx
je 0x4181f2
push edi
push edi
push dword [ebp + 0x20]
lea ecx, [ebp - 0x7e8]
push ebx
call sym.DELDRV.exe_public:_unsigned_long_int___thiscall_CDeviceInf::HasSuitableDriver_wchar_t_const___unsigned_int__wchar_t_const___unsigned_int_
test eax, eax
jne 0x4181f2
push esi
push ebx
push str.Description_is_not_match_SRC_1_s___DST_2_s__._n
jmp 0x418097
mov esi, dword [ebp - 0xa48]
test esi, esi
je 0x418268
push str.Printer
push esi
call fcn.0043933f
pop ecx
pop ecx
test eax, eax
jne 0x418243
lea eax, [ebp - 0x7e8]
push eax
call fcn.00436581
pop ecx
test eax, eax
je 0x418243
push str.DriverInfo_is_match._n
push str.DeleteAllRelatedInf
push 5
call fcn.00405a24
mov eax, dword [ebp - 0xa50]
add esp, 0xc
mov dword [eax], 1
jmp 0x4180a6
push 0x450a94
push esi
call fcn.0043933f
pop ecx
pop ecx
test eax, eax
jne 0x418268
mov eax, dword [ebp - 0xa50]
cmp dword [eax], edi
je 0x418268
push str.Not_delete_NULL_driver_inf._n
jmp 0x4180fd
lea eax, [ebp - 0x21c]
push eax
push str.Same_target_inf_has_been_found._Delete_it.__1_s___n
push str.DeleteAllRelatedInf
push 4
call fcn.00405a24
mov ebx, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
add esp, 0x10
lea eax, [ebp - 0x21c]
push eax
call ebx
and eax, 0xfffffffe
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov eax, dword [ebp - 0xa4c]
test eax, eax
je 0x4182c5
push edi
push edi
lea ecx, [ebp - 0xa0c]
push ecx
call eax
mov ebx, eax
mov dword [ebp - 0xa3c], ebx
jmp 0x4180ac
cmp dword [0x468e84], 0
jne 0x4180a6
lea eax, [ebp - 0x21c]
push eax
call ebx
cmp eax, 0xffffffff
je 0x4180a6
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x21c]
push eax
call esi
mov ebx, eax
mov dword [ebp - 0xa3c], ebx
test ebx, ebx
jne 0x418337
lea eax, [ebp - 0x21c]
push eax
push str.Cannot_delete_the_file__1_s__._n
mov esi, str.DeleteAllRelatedInf
push esi
push 4
call fcn.00405a24
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error__0x_1_lx__n
push esi
push 4
call fcn.00405a24
add esp, 0x10
jmp 0x4180ac
cmp dword [0x468e14], 0
jne 0x4180ac
lea eax, [ebp - 0x21c]
push 0x2e
push eax
call fcn.00439299
pop ecx
pop ecx
test eax, eax
je 0x4180ac
xor ecx, ecx
push str..PNF
mov word [eax], cx
lea eax, [ebp - 0x21c]
push 0x105
push eax
call fcn.004391ef
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x21c]
push eax
call esi
jmp 0x4182b8