Function at 0x42f560
Capabilities:
Copy file
Create directory
Get common file path
Manipulate boot configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fab2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb8c
push ebx
push esi
push edi
lea eax, [ebp - 0x498]
mov dword [ebp - 0x10], esp
xor ebx, ebx
push eax
mov dword [ebp - 4], ebx
call fcn.004ab6e0
add esp, 4
lea ecx, [ebp - 0xd0]
push ecx
call fcn.00401350
add esp, 4
lea edx, [ebp - 0xb0]
push 0x80
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa98]
push eax
push str._sdllcache
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x418]
push edx
push str._sdllcache_bk
push eax
call fcn.004f175f
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0x898]
push ecx
push str._s_sfc.dll
push edx
call fcn.004f175f
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xb98]
push eax
push str._s_sfc_os.dll
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x998]
push edx
push str._sdllcache_bk_sfc_os.dll
push eax
call fcn.004f175f
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0x798]
push ecx
push str._sdllcache_bk_sfc.dll
push edx
call fcn.004f175f
add esp, 0x48
lea eax, [ebp - 0x418]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
push eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
call fcn.0042f2f0
mov esi, dword [0xe56de8]
lea ecx, [ebp - 0xa98]
push ecx
mov dword [ebp - 0x1c], esi
call fcn.0042f2f0
mov eax, dword [0xe56de8]
add esp, 8
xor edi, edi
cmp esi, eax
mov dword [ebp - 0x30], ebx
jge 0x42fb6b
lea edx, [ebp - 0x418]
push ebx
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xa98]
push eax
call fcn.0042ebe0
lea ecx, [ebp - 0xa98]
push ecx
call fcn.004f2beb
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
add esp, 8
cmp ebx, dword [0xe56de8]
jge 0x42f72d
mov edx, ebx
push 0x50dc3c
shl edx, 6
lea edi, [edx + 0xdfcf18]
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f72a
push 0x50e1d0
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f72a
lea eax, [ebp - 0x418]
push edi
push eax
lea ecx, [ebp - 0x598]
push str._s_s
push ecx
mov byte [ebp - 0x598], 0
call fcn.004f175f
add esp, 0x10
lea edx, [ebp - 0x598]
push 1
push edx
push edi
call esi
mov dword [ebp - 0x30], 1
inc ebx
jmp 0x42f6bd
lea eax, [ebp - 0xb0]
push eax
call fcn.0042f3c0
mov ecx, dword [0xe56df4]
lea edx, [ebp - 0xb0]
push edx
mov dword [ebp - 0x28], ecx
call fcn.0042f020
lea eax, [ebp - 0xb0]
push eax
call fcn.004f2beb
add esp, 0xc
xor ebx, ebx
cmp ebx, dword [ebp - 0x28]
jge 0x42f7c5
mov ecx, ebx
push 0x50dc3c
shl ecx, 6
lea edi, [ecx + 0xdfcf18]
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f7c2
push 0x50e1d0
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f7c2
lea edx, [ebp - 0x418]
push edi
push edx
lea eax, [ebp - 0x598]
push str._s_s
push eax
mov byte [ebp - 0x598], 0
call fcn.004f175f
add esp, 0x10
lea ecx, [ebp - 0x598]
push 1
push ecx
push edi
call esi
inc ebx
jmp 0x42f75f
lea edx, [ebp - 0xb0]
push edx
call fcn.0042f490
mov eax, dword [0xe56df0]
lea ecx, [ebp - 0xb0]
push ecx
mov dword [ebp - 0x2c], eax
call fcn.0042f200
lea edx, [ebp - 0xb0]
push edx
call fcn.004f2beb
add esp, 0xc
xor ebx, ebx
cmp ebx, dword [ebp - 0x2c]
jge 0x42f85c
mov eax, ebx
push 0x50dc3c
shl eax, 6
lea edi, [eax + 0xdfcf18]
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f859
push 0x50e1d0
push edi
call fcn.004f61e0
add esp, 8
test eax, eax
je 0x42f859
lea ecx, [ebp - 0x418]
push edi
push ecx
lea edx, [ebp - 0x598]
push str._s_s
push edx
mov byte [ebp - 0x598], 0
call fcn.004f175f
add esp, 0x10
lea eax, [ebp - 0x598]
push 1
push eax
push edi
call esi
inc ebx
jmp 0x42f7f6
push str.NTDETECT.COM
push str.c:endpcache
lea ecx, [ebp - 0x318]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.NTDETECT.COM
push edx
lea eax, [ebp - 0x218]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x318]
lea edx, [ebp - 0x218]
push 1
push ecx
push edx
call esi
push str.ntldr
push str.c:endpcache
lea eax, [ebp - 0x318]
push str._s_s
push eax
call fcn.004f175f
lea ecx, [ebp - 0xb0]
push str.ntldr
push ecx
lea edx, [ebp - 0x218]
push str._s_s
push edx
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea eax, [ebp - 0x318]
lea ecx, [ebp - 0x218]
push 1
push eax
push ecx
call esi
push 0x5196ac
push str.c:endpcache_
lea edx, [ebp - 0x318]
push str._s_s
push edx
call fcn.004f175f
lea eax, [ebp - 0xb0]
push 0x5196ac
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea edx, [ebp - 0x318]
lea eax, [ebp - 0x218]
push 1
push edx
push eax
call esi
push str.bootfont.bin
push str.c:endpcache
lea ecx, [ebp - 0x318]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.bootfont.bin
push edx
lea eax, [ebp - 0x218]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x318]
push 1
push ecx
lea edx, [ebp - 0x218]
push edx
call esi
lea eax, [ebp - 0x418]
push str.NTDETECT.COM
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.NTDETECT.COM
push edx
lea eax, [ebp - 0x318]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x218]
lea edx, [ebp - 0x318]
push 1
push ecx
push edx
call esi
lea eax, [ebp - 0x418]
push str.ntldr
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.ntldr
push edx
lea eax, [ebp - 0x318]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x218]
lea edx, [ebp - 0x318]
push 1
push ecx
push edx
call esi
cmp dword [0xe56da0], 1
jne 0x42fab7
lea eax, [ebp - 0x418]
push str.mtldr
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.mtldr
push edx
lea eax, [ebp - 0x318]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x218]
lea edx, [ebp - 0x318]
push 1
push ecx
push edx
call esi
lea eax, [ebp - 0x418]
push 0x5196ac
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push 0x5196ac
push edx
lea eax, [ebp - 0x318]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x218]
lea edx, [ebp - 0x318]
push 1
push ecx
push edx
call esi
lea eax, [ebp - 0x418]
push str.bootfont.bin
push eax
lea ecx, [ebp - 0x218]
push str._s_s
push ecx
call fcn.004f175f
lea edx, [ebp - 0xb0]
push str.bootfont.bin
push edx
lea eax, [ebp - 0x318]
push str._s_s
push eax
mov byte [ebp - 0xae], 0
call fcn.004f175f
add esp, 0x20
lea ecx, [ebp - 0x218]
lea edx, [ebp - 0x318]
push 1
push ecx
push edx
call esi
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x2c]
jmp 0x42fb71
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileA]
push str.c:endpcache
call fcn.004f2beb
lea eax, [ebp - 0x898]
push eax
call fcn.004bd410
add esp, 8
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x42fba3
mov dword [ebp - 0x18], 1
lea ecx, [ebp - 0xb98]
push ecx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x42fbcb
mov dword [ebp - 0x14], 1
lea edx, [ebp - 0x798]
push edx
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x42fbf3
mov dword [ebp - 0x20], 1
lea eax, [ebp - 0x998]
push eax
call fcn.004bd410
add esp, 4
push 0x5144fc
push eax
call fcn.004f61e0
add esp, 8
test eax, eax
jne 0x42fc1b
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x42fc3a
cmp dword [ebp - 0x20], 1
jne 0x42fc58
lea ecx, [ebp - 0x898]
push 1
lea edx, [ebp - 0x798]
push ecx
push edx
jmp 0x42fc56
cmp eax, 1
jne 0x42fc58
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x42fc58
lea eax, [ebp - 0x798]
push 1
lea ecx, [ebp - 0x898]
push eax
push ecx
call esi
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x42fc77
cmp dword [ebp - 0x24], 1
jne 0x42fc95
lea edx, [ebp - 0xb98]
push 1
lea eax, [ebp - 0x998]
push edx
push eax
jmp 0x42fc93
cmp eax, 1
jne 0x42fc95
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x42fc95
lea ecx, [ebp - 0x998]
push 1
lea edx, [ebp - 0xb98]
push ecx
push edx
call esi
push 1
lea ecx, [ebp - 0x118]
call fcn.004f0653
mov eax, dword [0x4fe4e8]
lea ecx, [ebp - 0x118]
push eax
push 8
push str.c:endpcacheprocess_log.txt
mov byte [ebp - 4], 1
call fcn.004f0727
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x42fd74
mov ecx, dword [ebp - 0x18]
mov eax, 1
cmp ecx, eax
jne 0x42fd27
cmp dword [ebp - 0x14], eax
jne 0x42fd27
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0xd0]
push esi
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x498]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x698]
push 0x51963c
push eax
call fcn.004f175f
push esi
push 0x5195fc
push 0xd06b30
call fcn.004f175f
add esp, 0x20
jmp 0x42fe27
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0xd0]
push esi
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x498]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x698]
push 0x51963c
push eax
call fcn.004f175f
push esi
push 0x5195a8
push 0xd06b30
call fcn.004f175f
add esp, 0x20
jmp 0x42fe21
cmp eax, 1
jne 0x42fe27
cmp dword [ebp - 0x18], eax
jne 0x42fdd5
cmp dword [ebp - 0x14], eax
jne 0x42fdd5
mov esi, dword [ebp - 0x1c]
push ebx
push edi
lea ecx, [ebp - 0xd0]
push esi
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x498]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x698]
push 0x519534
push eax
call fcn.004f175f
push ebx
push edi
push esi
push 0x5194c8
push 0xd06b30
call fcn.004f175f
add esp, 0x30
jmp 0x42fe27
mov esi, dword [ebp - 0x1c]
push ebx
push edi
lea ecx, [ebp - 0xd0]
push esi
push ecx
call fcn.004fa6c0
add esp, 4
lea edx, [ebp - 0x498]
push eax
push edx
call fcn.004fa6c0
add esp, 4
push eax
lea eax, [ebp - 0x698]
push 0x519454
push eax
call fcn.004f175f
push ebx
push edi
push esi
push 0x5193d4
push 0xd06b30
call fcn.004f175f
add esp, 0x30
inc dword [0xe56d24]
lea ecx, [ebp - 0x698]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.004f0087
push 0xa
mov ecx, eax
call fcn.004eff40
push 0x402150
mov ecx, eax
call fcn.004016a0
lea ecx, [ebp - 0x118]
call fcn.004f076e
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0
call fcn.004f0714
lea ecx, [ebp - 0x104]
call fcn.004f05fb
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret