Function at 0x10061d8
Capabilities:
Copy file
Create directory
Get common file path
Query environment variable

Disassembly:
push 0x88c
push 0x1001c88
call fcn.01012f9c
mov eax, dword [0x1017484]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x86c], eax
xor esi, esi
mov word [ebp - 0x634], si
mov edx, 0x81
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x632]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x224], si
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x222]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x84c], esi
mov dword [ebp - 0x848], esi
mov dword [ebp - 0x844], esi
mov dword [ebp - 0x840], esi
cmp dword [0x101a3b0], esi
jne 0x1006966
mov dword [ebp - 4], esi
mov dword [0x101a3b0], 1
call sub.LOG.dll_LogDeleteOnNextInit
push esi
push esi
push 0x1001c6c
push 0x1c
call fcn.01008c7b
mov ebx, eax
mov dword [ebp - 0x89c], ebx
cmp ebx, esi
je 0x10062e9
push ebx
push 0x1001c4c
lea eax, [ebp - 0x83c]
push eax
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
call edi
add esp, 0xc
push esi
lea eax, [ebp - 0x83c]
push eax
push esi
push esi
call sub.LOG.dll_LogReInitW
push ebx
push 0x1001c2c
push 0x1019f98
call edi
push ebx
push 0x1001c0c
push 0x101a1a0
call edi
add esp, 0x18
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, 0x104
jmp 0x10063e2
mov ebx, 0x104
push ebx
lea eax, [ebp - 0x42c]
push eax
push 0x1001bf4
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x890], eax
cmp eax, esi
jbe 0x100636a
cmp eax, 0xf7
jae 0x100636a
lea eax, [ebp - 0x42c]
push eax
push 0x1001c4c
lea eax, [ebp - 0x83c]
push eax
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
call edi
add esp, 0xc
push esi
lea eax, [ebp - 0x83c]
push eax
push esi
push esi
call sub.LOG.dll_LogReInitW
lea eax, [ebp - 0x42c]
push eax
push 0x1001c2c
push 0x1019f98
call edi
lea eax, [ebp - 0x42c]
push eax
push 0x1001c0c
push 0x101a1a0
call edi
add esp, 0x18
jmp 0x10063e2
mov eax, dword [0x101e854]
mov eax, dword [eax + 0xac]
mov dword [ebp - 0x888], eax
cmp eax, esi
je 0x1006391
push ebx
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
jne 0x1006312
push esi
push 0x1001bdc
push esi
push esi
call sub.LOG.dll_LogReInitW
mov edi, 0x1019f98
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0x1001bc0
push edi
test eax, eax
je 0x10063cb
mov edi, dword [sym.imp.SHLWAPI.dll_PathAppendW]
call edi
push 0x1001ba4
push 0x101a1a0
call edi
jmp 0x10063e2
mov edi, dword [sym.imp.msvcrt.dll_wcscpy]
call edi
push 0x1001ba4
push 0x101a1a0
call edi
add esp, 0x10
push 1
call sub.LOG.dll_SuppressAllLogPopups
push esi
push dword [ebp - 0x868]
push dword [ebp - 0x864]
call sub.MIGISM.dll_IsmInitialize
test eax, eax
je 0x100691a
mov dword [0x1017028], 0x80004005
mov eax, dword [ebp + 0xc]
neg eax
sbb eax, eax
and eax, 0xf0000000
add eax, 0x20000000
or eax, 0x80000000
push eax
call sub.MIGISM.dll_IsmSetPlatform
test eax, eax
je 0x100691a
push 0x1001b94
push 0x1001938
push 0x10000000
call sub.MIGISM.dll_IsmSetEnvironmentFlag
cmp dword [ebp + 0xc], esi
jne 0x10066d5
mov word [ebp - 0x634], si
push ebx
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x1001b70
lea eax, [ebp - 0x634]
push eax
mov edi, dword [sym.imp.msvcrt.dll_wcscat]
call edi
pop ecx
pop ecx
mov dword [ebp - 0x858], esi
push esi
push esi
push 0x1001b60
push 0x23
call fcn.01008c7b
mov dword [ebp - 0x850], eax
cmp eax, esi
je 0x10065c2
mov dword [ebp - 4], 1
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
push 0x1001b48
lea eax, [ebp - 0x224]
push eax
call edi
add esp, 0x10
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x10064ec
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0xb7
jne 0x1006597
push 0x1001b3c
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x100651d
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0xb7
jne 0x1006597
push 0x1001b20
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x100658d
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0x50
jne 0x1006597
push esi
push 0x80
push 3
push esi
push 3
push 0xc0000000
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x88c], eax
cmp eax, 0xffffffff
jne 0x1006586
call ebx
mov dword [ebp - 0x854], eax
jmp 0x1006597
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x858], 1
mov dword [ebp - 4], esi
call fcn.010065af
jmp 0x10065c8
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp - 0x858], esi
jne 0x10066ba
push esi
push 1
push 0x1001b04
push 0x1c
call fcn.01008c7b
mov dword [ebp - 0x850], eax
cmp eax, esi
je 0x10066b2
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
push 0x1001b48
lea eax, [ebp - 0x224]
push eax
call edi
add esp, 0x10
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1006638
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0xb7
jne 0x10066aa
push 0x1001b3c
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push esi
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1006669
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0xb7
jne 0x10066aa
push 0x1001b20
lea eax, [ebp - 0x224]
push eax
call edi
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x634]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x10066a0
call ebx
mov dword [ebp - 0x854], eax
cmp eax, 0x50
jne 0x10066aa
mov dword [ebp - 0x858], 1
mov dword [ebp - 4], esi
call fcn.01006869
cmp dword [ebp - 0x858], esi
je 0x10066d5
lea eax, [ebp - 0x224]
push eax
push 0x1001af4
push 0x1001938
push 0x20000000
call sub.MIGISM.dll_IsmSetEnvironmentString
mov edi, dword [ebp + 0xc]
neg edi
sbb edi, edi
and edi, 0xf0000000
add edi, 0x20000000
push 0x1001ae4
mov ebx, 0x1001938
push ebx
push edi
call sub.MIGISM.dll_IsmSetEnvironmentFlag
push 0x1001ad0
push ebx
push edi
call sub.MIGISM.dll_IsmSetEnvironmentFlag
call sub.MIGISM.dll_IsmStartEtmModules
test eax, eax
je 0x100691a
cmp dword [ebp - 0x85c], esi
je 0x100672c
push dword [ebp - 0x85c]
push 0x1001ab8
push esi
push edi
call sub.MIGISM.dll_IsmSetEnvironmentString
call sub.MIGISM.dll_IsmStartTransport
test eax, eax
je 0x100691a
cmp dword [ebp + 0x10], esi
je 0x1006785
push 0x1001968
call sub.MIGISM.dll_IsmRegisterTransport
mov dword [ebp - 0x860], eax
push esi
push 2
push eax
call sub.MIGISM.dll_IsmSelectTransport
mov dword [ebp - 0x894], eax
cmp eax, esi
je 0x1006782
mov dword [ebp - 0x898], esi
push dword [ebp - 0x86c]
push esi
push esi
push 4
push dword [ebp - 0x860]
push eax
push edi
call sub.MIGISM.dll_IsmSetTransportStorage
test eax, eax
jne 0x1006785
mov dword [ebp + 0x10], esi
mov dword [0x1017028], esi
cmp dword [ebp + 0xc], esi
jne 0x1006908
mov dword [ebp - 4], 3
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x844]
push eax
call fcn.010052d5
test eax, eax
je 0x10068d5
cmp dword [ebp - 0x844], esi
je 0x10068d5
cmp dword [ebp - 0x840], esi
je 0x10068d5
push 1
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x100687c
push esi
push esi
push esi
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x84c]
push eax
call sub.MIGISM.dll_IsmDoesRollbackDataExist
test eax, eax
je 0x100687c
push dword [ebp - 0x844]
push dword [ebp - 0x84c]
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpIW]
call edi
test eax, eax
jne 0x1006825
push dword [ebp - 0x840]
push dword [ebp - 0x848]
call edi
test eax, eax
je 0x1006894
call fcn.01005427
test eax, eax
jne 0x1006894
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x870], eax
lea eax, [ebp - 0x874]
push eax
push 4
call sub.MIGISM.dll_IsmSendMessageToApp
push 1
call sub.MIGISM.dll_IsmPreserveJournal
mov dword [0x1017028], 0x80004005
jmp 0x10068d5
push esi
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x10068ac
push esi
push esi
push esi
push esi
push esi
call sub.MIGISM.dll_IsmDoesRollbackDataExist
test eax, eax
je 0x10068ac
call fcn.0100c4de
push esi
push esi
push 0x8006
call fcn.0100c535
call sub.MIGISM.dll_IsmRollback
jmp 0x10068d5
push dword [ebp - 0x840]
push 0x1001a9c
mov edi, 0x100161c
push edi
push esi
call sub.MIGISM.dll_IsmSetEnvironmentString
push dword [ebp - 0x844]
push 0x1001a84
push edi
push esi
call sub.MIGISM.dll_IsmSetEnvironmentString
mov dword [ebp - 4], esi
call fcn.0100697d
cmp dword [0x1017028], esi
jl 0x100691a
push 1
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x10068f9
call sub.MIGISM.dll_IsmCanWriteRollbackJournal
test eax, eax
jne 0x1006908
push esi
call sub.MIGISM.dll_IsmSetRollbackJournalType
test eax, eax
je 0x1006908
call sub.MIGISM.dll_IsmCanWriteRollbackJournal
cmp dword [0x1017028], esi
jl 0x100691a
cmp dword [ebp + 0xc], esi
je 0x100691a
call fcn.010056c7
or dword [ebp - 4], 0xffffffff
call fcn.010069e4
cmp dword [0x1017028], esi
jge 0x1006966
call fcn.01005558
neg eax
sbb eax, eax
and eax, 0x16
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x87c], esi
mov dword [ebp - 0x878], esi
lea eax, [ebp - 0x884]
push eax
push 0x1b
call sub.MIGISM.dll_IsmSendMessageToApp
call fcn.0100619a
mov eax, dword [0x1017028]
mov ecx, dword [ebp - 0x1c]
call fcn.01012bde
call fcn.01012fd7
ret 0x18