Function at 0x41a5f0
Capabilities:
Enumerate files on windows
Get common file path

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x48f5ad
push eax
mov eax, 0x1b7c
mov dword fs:[0], esp
call fcn.004724a0
push ebx
push ebp
push esi
push edi
call fcn.0044bde0
mov ebp, dword [esp + 0x1b9c]
test eax, eax
je 0x41a6b9
push ebp
lea eax, [esp + 0x190]
push str.CDIFxUninstall::IsInbuildDriverExist_:_pszDeviceID___s_n
push eax
call fcn.00471c30
mov edi, str.ENTRY:
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x28c]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x28c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x18c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0044bd70
mov ecx, eax
call fcn.0044be10
lea eax, [esp + 0x28c]
push eax
call fcn.0044bd70
mov ecx, eax
call fcn.0044c180
xor esi, esi
push ebp
lea ecx, [esp + 0x2c]
mov dword [esp + 0x30], esi
call fcn.004822f6
mov eax, dword [0x4b538c]
mov dword [esp + 0x1b94], esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x54]
mov byte [esp + 0x1b94], 3
call fcn.00471297
mov ecx, 0x7d
mov eax, 0x4b4b4b4b
lea edi, [esp + 0x11c0]
mov dword [esp + 0x1098], esi
mov dword [esp + 0x10a0], esi
mov dword [esp + 0x10a4], esi
mov dword [esp + 0x10ac], esi
mov dword [esp + 0x11bc], esi
rep stosd dword es:[edi], eax
mov ecx, 0x1f4
xor eax, eax
lea edi, [esp + 0x13b4]
rep stosd dword es:[edi], eax
mov dword [esp + 0x10b4], 0xffffffff
push 0xa
lea ecx, [esp + 0x74]
mov byte [esp + 0x1b98], 5
call fcn.00481a49
lea ecx, [esp + 0x28]
mov byte [esp + 0x1b94], 6
call fcn.0048273e
lea ecx, [esp + 0x38c]
push 0x104
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push str.DriverStoreFileRepository
lea ecx, [esp + 0x1c]
call fcn.004822f6
mov esi, eax
lea edx, [esp + 0x38c]
lea ecx, [esp + 0x1c]
push edx
mov byte [esp + 0x1b98], 7
call fcn.004822f6
push esi
push eax
lea eax, [esp + 0x2c]
mov bl, 8
push eax
mov byte [esp + 0x1ba0], bl
call fcn.0048246b
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b98], 9
call fcn.00482375
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b94], bl
call fcn.00482288
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b94], 7
call fcn.00482288
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b94], 6
call fcn.00482288
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041af50
xor ebp, ebp
cmp eax, ebp
jne 0x41a8ac
push str.DRVSTORE
lea ecx, [esp + 0x20]
call fcn.004822f6
mov esi, eax
lea edx, [esp + 0x38c]
lea ecx, [esp + 0x24]
push edx
mov byte [esp + 0x1b98], 0xa
call fcn.004822f6
push esi
push eax
lea eax, [esp + 0x20]
mov bl, 0xb
push eax
mov byte [esp + 0x1ba0], bl
call fcn.0048246b
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b98], 0xc
call fcn.00482375
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b94], bl
call fcn.00482288
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b94], 0xa
call fcn.00482288
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b94], 6
call fcn.00482288
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x3c]
call fcn.0041af50
cmp eax, ebp
je 0x41ad24
lea edx, [esp + 0x20]
push str..
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.004824d1
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b98], 0xd
call fcn.00482375
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b94], 6
call fcn.00482288
mov ecx, dword [esp + 0x14]
push ebp
push ecx
lea ecx, [esp + 0x5c]
call fcn.0047135a
cmp eax, ebp
je 0x41ad19
mov bl, 0x14
cmp dword [esp + 0x2c], ebp
jne 0x41ad19
lea ecx, [esp + 0x54]
call fcn.0047157a
lea ecx, [esp + 0x54]
mov dword [esp + 0x50], eax
call fcn.00471541
test eax, eax
jne 0x41ad0f
mov edx, dword [esp + 0x54]
push 0x10
lea ecx, [esp + 0x58]
call dword [edx + 0x38]
cmp eax, ebp
je 0x41ad0f
push 0x4ac194
lea ecx, [esp + 0x40]
call fcn.004822f6
mov esi, eax
lea eax, [esp + 0x44]
lea ecx, [esp + 0x54]
push eax
mov byte [esp + 0x1b98], 0xe
call fcn.00471649
push esi
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x1ba0], 0xf
call fcn.0048246b
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b98], 0x10
call fcn.00482375
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b94], 0xf
call fcn.00482288
lea ecx, [esp + 0x44]
mov byte [esp + 0x1b94], 0xe
call fcn.00482288
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1b94], 6
call fcn.00482288
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x490]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x24], eax
je 0x41ad0f
jmp 0x41a9dc
xor ebp, ebp
lea ecx, [esp + 0x4bc]
push ecx
lea ecx, [esp + 0x4c]
call fcn.004822f6
mov esi, eax
push 0x4a919c
lea ecx, [esp + 0x44]
mov byte [esp + 0x1b98], 0x11
call fcn.004822f6
mov edi, eax
lea edx, [esp + 0x30]
lea ecx, [esp + 0x54]
push edx
mov byte [esp + 0x1b98], 0x12
call fcn.00471649
push edi
push eax
lea eax, [esp + 0x3c]
mov byte [esp + 0x1b9c], 0x13
push eax
call fcn.0048246b
push esi
lea ecx, [esp + 0x50]
push eax
push ecx
mov byte [esp + 0x1ba0], bl
call fcn.0048246b
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b98], 0x15
call fcn.00482375
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1b94], bl
call fcn.00482288
lea ecx, [esp + 0x34]
mov byte [esp + 0x1b94], 0x13
call fcn.00482288
lea ecx, [esp + 0x30]
mov byte [esp + 0x1b94], 0x12
call fcn.00482288
lea ecx, [esp + 0x40]
mov byte [esp + 0x1b94], 0x11
call fcn.00482288
lea ecx, [esp + 0x48]
mov byte [esp + 0x1b94], 6
call fcn.00482288
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x1098]
push edx
call fcn.0041d6a0
lea ecx, [esp + 0x70]
call fcn.00481a88
mov ecx, 0x7d
mov eax, 0x4b4b4b4b
lea edi, [esp + 0x6d4]
mov dword [esp + 0x6d0], ebp
rep stosd dword es:[edi], eax
mov ecx, 0x1f4
xor eax, eax
lea edi, [esp + 0x8c8]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x6d0]
lea ecx, [esp + 0x1098]
push eax
mov byte [esp + 0x1b98], 0x16
call fcn.0041eb70
cmp dword [esp + 0x6d0], ebp
jne 0x41ab19
mov dword [esp + 0x1c], ebp
jmp 0x41ab60
lea edx, [esp + 0x6d4]
lea ecx, [esp + 0x6d4]
test edx, edx
mov dword [esp + 0x1c], ecx
je 0x41ab60
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x6d0]
push eax
call fcn.00404d60
cmp eax, 0xffffffff
je 0x41ab4e
mov eax, dword [esp + eax*4 + 0x8c8]
jmp 0x41ab50
xor eax, eax
push eax
lea ecx, [esp + 0x74]
call fcn.00481b86
cmp dword [esp + 0x1c], ebp
jne 0x41ab2f
mov eax, dword [esp + 0x6d0]
mov ebp, dword [esp + 0x7c]
xor edi, edi
mov byte [esp + 0x1b94], 6
test eax, eax
jbe 0x41aba4
lea esi, [esp + 0x8c8]
mov eax, dword [esi]
test eax, eax
je 0x41ab95
push eax
call fcn.00486245
add esp, 4
mov dword [esi], 0
mov eax, dword [esp + 0x6d0]
inc edi
add esi, 4
cmp edi, eax
jb 0x41ab80
test ebp, ebp
je 0x41acdf
mov esi, dword [esp + 0x74]
test esi, esi
je 0x41acdf
mov eax, esi
mov esi, dword [esi]
add eax, 8
lea ecx, [esp + 0x10]
push eax
call fcn.00482375
lea ecx, [esp + 0x10]
call fcn.0048273e
mov ecx, dword [esp + 0x28]
push ecx
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
jne 0x41abf8
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x28]
push edx
call fcn.00481260
cmp eax, 0xffffffff
je 0x41ac57
push str.HDAUDIO
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
je 0x41ac64
push str.FUNC_01
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
jne 0x41ac64
push str.FUNC_02
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
je 0x41ac57
push str.VEN_
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
je 0x41ac57
push str.DEV_
lea ecx, [esp + 0x14]
call fcn.00481260
cmp eax, 0xffffffff
jne 0x41ac64
test esi, esi
je 0x41acdf
jmp 0x41abb8
call fcn.0044bde0
test eax, eax
je 0x41ac9b
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18c]
push eax
push str.Found_Match_:__s_n
push ecx
call fcn.00471c30
add esp, 0xc
lea edx, [esp + 0x18c]
push edx
call fcn.0044bd70
mov ecx, eax
call fcn.0044c180
call fcn.0044bde0
test eax, eax
je 0x41acd7
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
push eax
push ecx
lea edx, [esp + 0x94]
push str.Found_csTestID___s__csDeviceID___s_n
push edx
call fcn.00471c30
add esp, 0x10
lea eax, [esp + 0x8c]
push eax
call fcn.0044bd70
mov ecx, eax
call fcn.0044c180
mov dword [esp + 0x2c], 1
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x490]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
je 0x41ad02
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x41a9da
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor ebp, ebp
cmp dword [esp + 0x50], ebp
jne 0x41a8fc
lea ecx, [esp + 0x54]
call fcn.00471310
jmp 0x41ad3e
call fcn.0044bde0
test eax, eax
je 0x41ad3e
push str.FAILED_to_Find_Driver_Store_Folder_n
call fcn.0044bd70
mov ecx, eax
call fcn.0044c180
call fcn.0044bde0
test eax, eax
je 0x41ade1
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x5d0]
push ecx
push str.CDIFxUninstall::IsInbuildDriverExist_:_bRetVal___d_n
push edx
call fcn.00471c30
mov edi, str.EXIT:
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x8c]
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x8c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x5d0]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
lea eax, [esp + 0x8c]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.0044bd70
mov ecx, eax
call fcn.0044c180
call fcn.0044bd70
mov ecx, eax
call fcn.0044be20
lea ecx, [esp + 0x70]
mov byte [esp + 0x1b94], 5
call fcn.00481abd
lea ecx, [esp + 0x1098]
mov byte [esp + 0x1b94], 4
call fcn.0041cf30
lea ecx, [esp + 0x54]
mov byte [esp + 0x1b94], 3
call fcn.004712d4
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b94], 2
call fcn.00482288
lea ecx, [esp + 0x14]
mov byte [esp + 0x1b94], 1
call fcn.00482288
lea ecx, [esp + 0x20]
mov byte [esp + 0x1b94], 0
call fcn.00482288
lea ecx, [esp + 0x28]
mov dword [esp + 0x1b94], 0xffffffff
call fcn.00482288
mov ecx, dword [esp + 0x1b8c]
mov eax, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1b88
ret 4