Function at 0x1002cac0
Capabilities:
Check if file exists
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068f87
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x1008bb60]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x138], 0
lea ecx, [ebp - 0x10]
call fcn.100016b0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.100016b0
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x194]
cmp dword [eax + 4], 0
je 0x1002cb82
mov ecx, dword [ebp - 0x194]
call fcn.1002d200
push 0x104
lea ecx, [ebp - 0x134]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x134]
push edx
lea ecx, [ebp - 0x10]
call fcn.10001710
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x24]
call fcn.10001710
push ecx
mov ecx, esp
mov dword [ebp - 0x154], esp
push str.PI_0000
call fcn.10002ce0
mov dword [ebp - 0x198], eax
call fcn.1001c670
add esp, 4
call fcn.1002d2c0
test eax, eax
je 0x1002cceb
push ecx
mov ecx, esp
mov dword [ebp - 0x158], esp
push str.PI_0001
call fcn.10002ce0
mov dword [ebp - 0x19c], eax
call fcn.1001c670
add esp, 4
call fcn.10019960
movzx ecx, al
test ecx, ecx
je 0x1002cc7c
push ecx
mov ecx, esp
mov dword [ebp - 0x15c], esp
push str.PI_0002
call fcn.10002ce0
mov dword [ebp - 0x1a0], eax
call fcn.1001c670
add esp, 4
push str.kavbootc64_ev.sys
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x160]
push eax
call fcn.10002af0
add esp, 0xc
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x1a8]
push edx
lea ecx, [ebp - 0x24]
call fcn.100016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x160]
call fcn.100016d0
jmp 0x1002cce9
push ecx
mov ecx, esp
mov dword [ebp - 0x164], esp
push str.PI_0003
call fcn.10002ce0
mov dword [ebp - 0x1ac], eax
call fcn.1001c670
add esp, 4
push str.kavbootc_ev.sys
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x168]
push ecx
call fcn.10002af0
add esp, 0xc
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x24]
call fcn.100016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x168]
call fcn.100016d0
jmp 0x1002cd57
push ecx
mov ecx, esp
mov dword [ebp - 0x16c], esp
push str.PI_0004
call fcn.10002ce0
mov dword [ebp - 0x1b8], eax
call fcn.1001c670
add esp, 4
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x170]
push eax
call fcn.10002af0
add esp, 0xc
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x1c0]
push edx
lea ecx, [ebp - 0x24]
call fcn.100016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x170]
call fcn.100016d0
push str.Drivers
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x174]
push ecx
call fcn.10002af0
add esp, 0xc
mov dword [ebp - 0x1c4], eax
mov edx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], edx
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x10]
call fcn.100016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x174]
call fcn.100016d0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x178]
push eax
call fcn.10002af0
add esp, 0xc
mov dword [ebp - 0x1cc], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x1d0]
push edx
lea ecx, [ebp - 0x10]
call fcn.100016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
call fcn.100016d0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x20]
push eax
push 0
lea ecx, [ebp - 0x10]
call fcn.10001730
push eax
mov ecx, dword [ebp - 0x194]
call fcn.1002d050
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x148]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x14]
push ecx
push 0
lea ecx, [ebp - 0x24]
call fcn.10001730
push eax
mov ecx, dword [ebp - 0x194]
call fcn.1002d050
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
push str.PI_0005
call fcn.10002ce0
mov dword [ebp - 0x1d4], eax
call fcn.1001c670
add esp, 4
call fcn.1002d2c0
test eax, eax
je 0x1002cf21
push ecx
mov ecx, esp
mov dword [ebp - 0x180], esp
push str.PI_0006
call fcn.10002ce0
mov dword [ebp - 0x1d8], eax
call fcn.1001c670
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
lea edx, [ebp - 0x10]
push edx
call fcn.10002cc0
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x194]
call fcn.1002ca30
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xb458
je 0x1002cee2
cmp dword [ebp - 0x150], 0xd858
jne 0x1002cf21
push ecx
mov ecx, esp
mov dword [ebp - 0x188], esp
push str.PI_0007
call fcn.10002ce0
mov dword [ebp - 0x1e4], eax
call fcn.1001c670
add esp, 4
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.10001730
push eax
push 0
lea ecx, [ebp - 0x24]
call fcn.10001730
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
push str.PI_0008
call fcn.10002ce0
mov dword [ebp - 0x1e8], eax
call fcn.1001c670
add esp, 4
cmp dword [ebp - 0x1c], 0
je 0x1002cfa9
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x20]
jle 0x1002cf73
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.10001730
push eax
push 0
lea ecx, [ebp - 0x24]
call fcn.10001730
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x1c], eax
jmp 0x1002cfa7
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x20]
jne 0x1002cfa7
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x144]
jle 0x1002cfa7
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.10001730
push eax
push 0
lea ecx, [ebp - 0x24]
call fcn.10001730
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x1c], eax
jmp 0x1002cfca
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.10001730
push eax
push 0
lea ecx, [ebp - 0x24]
call fcn.10001730
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x10]
call fcn.10025f80
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x1002cfe7
mov dword [ebp - 0x13c], 1
mov ecx, dword [ebp - 0x194]
cmp dword [ecx + 4], 0
je 0x1002cffe
mov ecx, dword [ebp - 0x194]
call fcn.1002d160
mov edx, dword [ebp - 0x13c]
mov dword [ebp - 0x190], edx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24]
call fcn.100016d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.100016d0
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.10041acb
mov esp, ebp
pop ebp
ret 8