Function at 0x42ad10
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push 0xffffffffffffffff
push 0x463050
mov eax, dword fs:[0]
push eax
mov eax, 0x1a44
call fcn.0044f450
mov eax, dword [0x47f038]
xor eax, esp
mov dword [esp + 0x1a40], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x47f038]
xor eax, esp
push eax
lea eax, [esp + 0x1a58]
mov dword fs:[0], eax
mov edi, dword [esp + 0x1a68]
push edi
xor esi, esi
push str.ProcessSectionIsAnyDriverExist_____s__n
mov ebx, ecx
mov dword [esp + 0x38], edi
mov dword [esp + 0x30], esi
call fcn.004412c0
inc dword [ebx + 0x8cd8]
mov eax, dword [ebx + 0x8cd8]
push eax
push edi
push str.Push___s____index___d__n
call fcn.004412c0
mov eax, dword [ebx + 0x8cd8]
imul eax, eax, 0x88
mov dword [eax + ebx + 0x495c], 0xffffffff
mov edx, dword [ebx + 0x8cd8]
add esp, 0x14
imul edx, edx, 0x88
mov ecx, edi
lea edx, [edx + ebx + 0x48dc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, si
jne 0x42adb4
mov ecx, dword [ebx + 4]
push esi
lea eax, [esp + 0xa58]
push eax
push esi
push edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x44], esi
call 0x409a30
test al, al
je 0x42b40a
jmp 0x42adf0
lea ecx, [esp + 0xa54]
push ecx
push esi
push edi
push str.__s___d____s__n
call fcn.004412c0
add esp, 0x10
lea edx, [esp + 0xa54]
push edx
mov ecx, ebx
call fcn.00417110
push 0x1c2d0
call fcn.0044e29f
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 0
test eax, eax
je 0x42ae45
mov ecx, eax
call fcn.004409e0
mov ebp, eax
mov dword [esp + 0x38], eax
jmp 0x42ae4b
xor ebp, ebp
mov dword [esp + 0x38], ebp
push 0x46ce98
lea eax, [esp + 0xa58]
push eax
mov ecx, ebp
mov dword [esp + 0x1a68], 0xffffffff
call fcn.00440c30
cmp byte [ebp + 0x1c2cc], 0
je 0x42ae88
cmp dword [ebp + 0x1c2c8], 0
jg 0x42ae80
xor eax, eax
jmp 0x42ae96
lea eax, [ebp + 0x32c8]
jmp 0x42ae96
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push str.DriverClass
push eax
call fcn.0044e882
add esp, 8
test eax, eax
jne 0x42b315
inc dword [ebx + 0x8cd8]
mov ecx, dword [ebx + 0x8cd8]
cmp byte [ebp + 0x1c2cc], al
je 0x42aed0
cmp dword [ebp + 0x1c2c8], eax
jle 0x42aede
lea eax, [ebp + 0x32c8]
jmp 0x42aede
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push ecx
push eax
push str.__Push___s_m_nCurSct___Index___d__n
call fcn.004412c0
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
add esp, 0xc
mov dword [ecx + ebx + 0x495c], 0xffffffff
cmp byte [ebp + 0x1c2cc], 0
je 0x42af22
cmp dword [ebp + 0x1c2c8], 0
jg 0x42af1a
xor ecx, ecx
jmp 0x42af30
lea ecx, [ebp + 0x32c8]
jmp 0x42af30
xor ecx, ecx
cmp dword [ebp + 0x1c2c8], ecx
setle cl
dec ecx
and ecx, ebp
mov edx, dword [ebx + 0x8cd8]
imul edx, edx, 0x88
lea edx, [edx + ebx + 0x48dc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x42af43
inc dword [esp + 0x14]
xor eax, eax
push 0x7e
push eax
lea ecx, [esp + 0x2c6]
or esi, 0xffffffff
push ecx
mov dword [esp + 0x2c], esi
mov word [esp + 0x2c8], ax
call fcn.0044e1b0
add esp, 0xc
cmp byte [ebp + 0x1c2cc], 0
je 0x42af9a
cmp dword [ebp + 0x1c2c8], 1
jg 0x42af92
xor ecx, ecx
jmp 0x42afad
lea ecx, [ebp + 0x3ac8]
jmp 0x42afad
cmp dword [ebp + 0x1c2c8], 1
jg 0x42afa7
xor ecx, ecx
jmp 0x42afad
lea ecx, [ebp + 0x104]
lea edx, [esp + 0x2bc]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x42afb4
lea edx, [esp + 0x2bc]
push edx
push str.___szClass_____s__n
call fcn.004412c0
lea eax, [esp + 0x2c4]
push str.Image
push eax
call fcn.0044e882
add esp, 0x10
test eax, eax
jne 0x42b2dc
push 0x104
lea ecx, [esp + 0x648]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
lea edx, [esp + 0x644]
push edx
lea eax, [esp + 0x440]
push str._sinfoem.inf
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x440]
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [esp + 0x24], eax
cmp eax, 0xffffffff
je 0x42b2dc
jmp 0x42b050
lea eax, [esp + 0x98]
push eax
lea ecx, [esp + 0x648]
push ecx
lea edx, [esp + 0x444]
push str._sinf_s
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
push 0x4fc8
call fcn.0044e29f
add esp, 0x14
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 1
test eax, eax
je 0x42b0ac
push 0
lea ecx, [esp + 0x440]
push ecx
mov ecx, eax
call fcn.00442710
mov esi, eax
mov dword [esp + 0x1c], eax
jmp 0x42b0b2
xor esi, esi
mov dword [esp + 0x1c], esi
push 0x474
mov dword [esp + 0x1a64], 0xffffffff
call fcn.0044e29f
add esp, 4
mov dword [esp + 0x18], eax
mov dword [esp + 0x1a60], 2
test eax, eax
je 0x42b0f8
mov edx, dword [ebx + 8]
movzx ecx, byte [edx + 0x1e89]
mov edx, dword [ebx]
push ecx
push 0
push edx
mov ecx, eax
call fcn.00405340
mov edi, eax
jmp 0x42b0fa
xor edi, edi
lea eax, [esp + 0x2bc]
push eax
mov ecx, esi
mov dword [esp + 0x1a64], 0xffffffff
call fcn.00441ae0
push eax
call fcn.0044e882
add esp, 8
test eax, eax
jne 0x42b289
lea ecx, [esp + 0x43c]
push ecx
push str.____Found_Inf___s__n
call fcn.004412c0
add esp, 8
lea ecx, [esp + 0x54]
call fcn.00407d10
lea edx, [esp + 0x54]
push edx
mov ecx, esi
mov dword [esp + 0x1a64], 3
call fcn.00442920
mov dword [esp + 0x18], eax
test eax, eax
je 0x42b275
xor esi, esi
mov dword [esp + 0x2c], esi
test eax, eax
jle 0x42b268
lea ecx, [esp + 0x3c]
call fcn.00407d10
mov eax, dword [esp + 0x54]
mov eax, dword [eax + esi*8]
push eax
push str.MANUF____s__n
mov byte [esp + 0x1a68], 4
call fcn.004412c0
mov ecx, dword [esp + 0x5c]
mov ecx, dword [ecx + esi*8]
add esp, 8
lea edx, [esp + 0x84c]
jmp 0x42b1b0
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x42b1b0
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x850]
push eax
call fcn.00442a10
mov ebp, eax
xor esi, esi
test ebp, ebp
jle 0x42b237
nop
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + esi*8]
push eax
push esi
push str._____saModels__d___s_n
call fcn.004412c0
add esp, 0xc
test edi, edi
je 0x42b232
mov edx, dword [esp + 0x3c]
mov eax, dword [edx + esi*8]
mov ecx, dword [ebx + 0xc]
push 0x470d58
push eax
call fcn.004453e0
test eax, eax
je 0x42b232
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + esi*8]
push eax
mov ecx, edi
call fcn.00402bc0
cmp dword [esp + 0x20], 1
jne 0x42b22e
mov eax, 1
mov dword [esp + 0x20], eax
inc esi
cmp esi, ebp
jl 0x42b1e0
lea ecx, [esp + 0x3c]
call fcn.00407cb0
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1a60], 3
call fcn.00407e50
mov esi, dword [esp + 0x2c]
inc esi
cmp esi, dword [esp + 0x18]
mov dword [esp + 0x2c], esi
jl 0x42b174
mov ebp, dword [esp + 0x38]
lea ecx, [esp + 0x54]
call fcn.00407cb0
mov esi, dword [esp + 0x1c]
lea ecx, [esp + 0x54]
mov dword [esp + 0x1a60], 0xffffffff
call fcn.00407e50
test edi, edi
je 0x42b29d
mov ecx, edi
call fcn.004053e0
push edi
call fcn.0044e22a
add esp, 4
test esi, esi
je 0x42b2b1
mov ecx, esi
call fcn.00443470
push esi
call fcn.0044e22a
add esp, 4
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x6c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x42b050
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x20]
push esi
push str.__nKeyResult_____d__n
call fcn.004412c0
add esp, 8
cmp esi, 0xffffffff
jne 0x42b2fe
push str.__Set_nKeyResult_to__0__n
xor esi, esi
call fcn.004412c0
add esp, 4
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
mov dword [ecx + ebx + 0x495c], esi
mov esi, dword [esp + 0x34]
cmp byte [ebp + 0x1c2cc], 0
je 0x42b333
cmp dword [ebp + 0x1c2c8], 0
jg 0x42b32b
xor eax, eax
jmp 0x42b341
lea eax, [ebp + 0x32c8]
jmp 0x42b341
xor eax, eax
cmp dword [ebp + 0x1c2c8], eax
setle al
dec eax
and eax, ebp
push str.Return
push eax
call fcn.0044e882
add esp, 8
test eax, eax
jne 0x42b3d9
xor edx, edx
push 0xfe
push edx
lea eax, [esp + 0x346]
push eax
mov word [esp + 0x348], dx
call fcn.0044e1b0
add esp, 0xc
cmp byte [ebp + 0x1c2cc], 0
je 0x42b395
cmp dword [ebp + 0x1c2c8], 1
jg 0x42b38d
xor ecx, ecx
jmp 0x42b3a8
lea ecx, [ebp + 0x3ac8]
jmp 0x42b3a8
cmp dword [ebp + 0x1c2c8], 1
jg 0x42b3a2
xor ecx, ecx
jmp 0x42b3a8
lea ecx, [ebp + 0x104]
lea edx, [esp + 0x33c]
nop
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
test ax, ax
jne 0x42b3b0
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x340]
push edx
mov ecx, ebx
call fcn.0041dfb0
mov dword [esp + 0x28], eax
mov ecx, ebp
call fcn.00440490
push ebp
call fcn.0044e22a
mov ecx, dword [ebx + 4]
add esp, 4
push 0
lea eax, [esp + 0xa58]
push eax
inc esi
push esi
push edi
mov dword [esp + 0x44], esi
call 0x409a30
test al, al
jne 0x42adf0
cmp dword [esp + 0x14], 1
jl 0x42b489
mov esi, dword [esp + 0x14]
xor ebp, ebp
or edi, 0xffffffff
lea ebx, [ebx]
mov eax, dword [ebx + 0x8cd8]
push eax
imul eax, eax, 0x88
lea ecx, [eax + ebx + 0x48dc]
push ecx
push str.Pop___s__index___d__n
call fcn.004412c0
mov edx, dword [ebx + 0x8cd8]
imul edx, edx, 0x88
mov dword [edx + ebx + 0x495c], edi
mov eax, dword [ebx + 0x8cd8]
imul eax, eax, 0x88
mov dword [eax + ebx + 0x48d8], ebp
mov ecx, dword [ebx + 0x8cd8]
imul ecx, ecx, 0x88
xor edx, edx
mov word [ecx + ebx + 0x48dc], dx
add dword [ebx + 0x8cd8], edi
add esp, 0xc
sub esi, 1
jne 0x42b420
mov esi, dword [esp + 0x28]
mov eax, dword [ebx + 0x8cd8]
mov ecx, dword [esp + 0x30]
push esi
push eax
push ecx
push str.Look_at___s____index___d__Res___d__n_n
call fcn.004412c0
mov edx, dword [ebx + 0x8cd8]
add esp, 0x10
imul edx, edx, 0x88
mov dword [edx + ebx + 0x495c], esi
mov eax, esi
mov ecx, dword [esp + 0x1a58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1a40]
xor ecx, esp
call fcn.0044e1a0
add esp, 0x1a50
ret 4