Function at 0x1005ccc
Capabilities:
Copy file
Create directory
Get common file path
Query environment variable

Disassembly:
push 0x88c
push 0x1001b58
call fcn.01011fec
mov eax, dword [0x101647c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x86c], eax
xor esi, esi
mov word [ebp - 0x634], si
mov edx, 0x81
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x632]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x224], si
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x222]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x854], esi
mov dword [ebp - 0x840], esi
mov dword [ebp - 0x84c], esi
mov dword [ebp - 0x850], esi
cmp dword [0x101938c], esi
jne 0x1006422
mov dword [ebp - 4], esi
mov dword [0x101938c], 1
call sub.LOG.dll_LogDeleteOnNextInit
push esi
push esi
push 0x1001b38
push 0x1c
call fcn.0100825f
mov ebx, eax
mov dword [ebp - 0x89c], ebx
cmp ebx, esi
je 0x1005ddd
push ebx
push 0x1001b18
lea eax, [ebp - 0x83c]
push eax
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
call edi
add esp, 0xc
push esi
lea eax, [ebp - 0x83c]
push eax
push esi
push esi
call sub.LOG.dll_LogReInitW
push ebx
push 0x1001af8
push 0x1018f78
call edi
push ebx
push 0x1001ad8
push 0x1019180
call edi
add esp, 0x18
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, 0x104
jmp 0x1005ed6
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x42c]
push eax
push 0x1001ac0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x890], eax
cmp eax, esi
jbe 0x1005e5e
cmp eax, 0xf7
jae 0x1005e5e
lea eax, [ebp - 0x42c]
push eax
push 0x1001b18
lea eax, [ebp - 0x83c]
push eax
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
call edi
add esp, 0xc
push esi
lea eax, [ebp - 0x83c]
push eax
push esi
push esi
call sub.LOG.dll_LogReInitW
lea eax, [ebp - 0x42c]
push eax
push 0x1001af8
push 0x1018f78
call edi
lea eax, [ebp - 0x42c]
push eax
push 0x1001ad8
push 0x1019180
call edi
add esp, 0x18
jmp 0x1005ed6
mov eax, dword [0x101d824]
mov eax, dword [eax + 0xac]
mov dword [ebp - 0x888], eax
cmp eax, esi
je 0x1005e85
push ebx
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x1005e06
push esi
push 0x1001aa8
push esi
push esi
call sub.LOG.dll_LogReInitW
mov edi, 0x1018f78
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x1001a8c
push edi
test eax, eax
je 0x1005ebf
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
call edi
push 0x1001a70
push 0x1019180
call edi
jmp 0x1005ed6
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
call edi
push 0x1001a70
push 0x1019180
call edi
add esp, 0x10
push 1
call sub.LOG.dll_SuppressAllLogPopups
push esi
push dword [ebp - 0x868]
push dword [ebp - 0x864]
call sub.MIGISM.dll_IsmInitialize
test eax, eax
je 0x10063d6
mov edi, dword [ebp + 0xc]
neg edi
sbb edi, edi
and edi, 0xf0000000
add edi, 0x20000000
push edi
call fcn.01004da6
mov dword [0x1016028], eax
cmp eax, esi
jl 0x10063d6
mov dword [0x1016028], 0x80004005
push edi
call sub.MIGISM.dll_IsmSetPlatform
test eax, eax
je 0x10063d6
cmp dword [ebp + 0xc], esi
jne 0x10061c1
mov word [ebp - 0x634], si
push ebx
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x1001a4c
lea eax, [ebp - 0x634]
push eax
mov edi, dword [sym.imp.msvcrt.dll_wcscat]
call edi
pop ecx
pop ecx
mov dword [ebp - 0x858], esi
push esi
push esi
push 0x1001a3c
push 0x23
call fcn.0100825f
mov dword [ebp - 0x848], eax
cmp eax, esi
je 0x10060b2
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
push 0x1001a24
lea eax, [ebp - 0x224]
push eax
call edi
add esp, 0x10
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1005fdc
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0xb7
jne 0x1006087
push 0x1001a18
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x100600d
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0xb7
jne 0x1006087
push 0x10019fc
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x100607d
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0x50
jne 0x1006087
push esi
push 0x80
push 3
push esi
push 3
push 0xc0000000
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x88c], eax
cmp eax, 0xffffffff
jne 0x1006076
call ebx
mov dword [ebp - 0x844], eax
jmp 0x1006087
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x858], 1
mov dword [ebp - 4], esi
call fcn.0100609f
jmp 0x10060b8
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x858], esi
jne 0x10061aa
push esi
push 1
push 0x10019e0
push 0x1c
call fcn.0100825f
mov dword [ebp - 0x848], eax
cmp eax, esi
je 0x10061a2
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
push 0x1001a24
lea eax, [ebp - 0x224]
push eax
call edi
add esp, 0x10
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1006128
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0xb7
jne 0x100619a
push 0x1001a18
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1006159
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0xb7
jne 0x100619a
push 0x10019fc
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x1006190
call ebx
mov dword [ebp - 0x844], eax
cmp eax, 0x50
jne 0x100619a
mov dword [ebp - 0x858], 1
mov dword [ebp - 4], esi
call fcn.01006350
cmp dword [ebp - 0x858], esi
je 0x10061c1
lea eax, [ebp - 0x224]
push eax
push 0x10019d0
push esi
push 0x20000000
call sub.MIGISM.dll_IsmSetEnvironmentString
mov edi, dword [ebp + 0xc]
neg edi
sbb edi, edi
and edi, 0xf0000000
add edi, 0x20000000
push 0x10019c0
push esi
push edi
call sub.MIGISM.dll_IsmSetEnvironmentFlag
push 0x10019ac
push esi
push edi
call sub.MIGISM.dll_IsmSetEnvironmentFlag
call sub.MIGISM.dll_IsmStartEtmModules
test eax, eax
je 0x10063d6
cmp dword [ebp - 0x85c], esi
je 0x1006213
push dword [ebp - 0x85c]
push 0x1001994
push esi
push edi
call sub.MIGISM.dll_IsmSetEnvironmentString
call sub.MIGISM.dll_IsmStartTransport
test eax, eax
je 0x10063d6
cmp dword [ebp + 0x10], esi
je 0x100626c
push 0x1001848
call sub.MIGISM.dll_IsmRegisterTransport
mov dword [ebp - 0x860], eax
push esi
push 2
push eax
call sub.MIGISM.dll_IsmSelectTransport
mov dword [ebp - 0x894], eax
cmp eax, esi
je 0x1006269
mov dword [ebp - 0x898], esi
push dword [ebp - 0x86c]
push esi
push esi
push 4
push dword [ebp - 0x860]
push eax
push edi
call sub.MIGISM.dll_IsmSetTransportStorage
test eax, eax
jne 0x100626c
mov dword [ebp + 0x10], esi
mov dword [0x1016028], esi
cmp dword [ebp + 0xc], esi
jne 0x10063c4
mov dword [ebp - 4], 3
lea eax, [ebp - 0x850]
push eax
lea eax, [ebp - 0x84c]
push eax
call fcn.01004e35
test eax, eax
je 0x1006391
cmp dword [ebp - 0x84c], esi
je 0x1006391
cmp dword [ebp - 0x850], esi
je 0x1006391
push 1
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x1006363
push esi
push esi
push esi
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x854]
push eax
call sub.MIGISM.dll_IsmDoesRollbackDataExist
test eax, eax
je 0x1006363
push dword [ebp - 0x84c]
push dword [ebp - 0x854]
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpIW]
call edi
test eax, eax
jne 0x100630c
push dword [ebp - 0x850]
push dword [ebp - 0x840]
call edi
test eax, eax
je 0x100637b
call fcn.01004f87
test eax, eax
jne 0x100637b
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x870], eax
lea eax, [ebp - 0x874]
push eax
push 4
call sub.MIGISM.dll_IsmSendMessageToApp
push 1
call sub.MIGISM.dll_IsmPreserveJournal
mov dword [0x1016028], 0x80004005
jmp 0x1006391
push esi
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x1006391
push esi
push esi
push esi
push esi
push esi
call sub.MIGISM.dll_IsmDoesRollbackDataExist
test eax, eax
je 0x1006391
call fcn.0100b8c4
push esi
push esi
push 0x8006
call fcn.0100b91b
call sub.MIGISM.dll_IsmRollback
mov dword [ebp - 4], esi
call fcn.01006439
cmp dword [0x1016028], esi
jl 0x10063d6
push 1
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x10063b5
call sub.MIGISM.dll_IsmCanWriteRollbackJournal
test eax, eax
jne 0x10063c4
push esi
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x10063c4
call sub.MIGISM.dll_IsmCanWriteRollbackJournal
cmp dword [0x1016028], esi
jl 0x10063d6
cmp dword [ebp + 0xc], esi
je 0x10063d6
call fcn.01005227
or dword [ebp - 4], 0xffffffff
call fcn.010064a0
cmp dword [0x1016028], esi
jge 0x1006422
call fcn.010050b8
neg eax
sbb eax, eax
and eax, 0x16
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x87c], esi
mov dword [ebp - 0x878], esi
lea eax, [ebp - 0x884]
push eax
push 0x1b
call sub.MIGISM.dll_IsmSendMessageToApp
call fcn.01005c8e
mov eax, dword [0x1016028]
mov ecx, dword [ebp - 0x1c]
call fcn.01011c2a
call fcn.01012027
ret 0x18