Function at 0x412d03
Capabilities:
Check if file exists
Copy file
Create directory

Disassembly:
push 0x44
mov eax, 0x4489e3
call fcn.004327f3
mov eax, dword [ebp + 8]
mov dword [0x46463c], eax
xor esi, esi
push esi
push 0x102
call sub.msi.dll_MsiSetPropertyW
push 0x46463c
push 0x7fdf
push 0x412574
call sub.msi.dll_MsiSetInternalUI
lea ecx, [ebp - 0x18]
call fcn.00401ae0
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.00412852
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
call fcn.00413070
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.0041b8a9
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x20]
push eax
call fcn.0040a0e5
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x1c]
push eax
call fcn.00413070
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 8]
call fcn.00401a93
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
call fcn.004130d6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.00401b17
push dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a140
pop ecx
pop ecx
mov byte [ebp - 4], 6
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call fcn.00413070
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.00401a93
mov byte [ebp - 4], 6
lea eax, [ebp - 0x20]
push eax
call fcn.004130d6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00401b17
push str.Downloaded_Installers
lea edi, [ebp + 8]
call fcn.00413096
push dword [ebp + 8]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
test eax, eax
jne 0x412e23
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x412e23
call fcn.0040b067
push dword [ebp - 0x18]
lea edi, [ebp + 8]
call fcn.00413096
push dword [ebp + 8]
call ebx
test eax, eax
jne 0x412e45
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x412e1e
push str._setup.msi
lea edi, [ebp + 8]
call fcn.00413096
push esi
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x412e1e
mov dword [ebp - 4], 2
jmp 0x412eaa
mov byte [ebp - 4], 1
call fcn.0041b8bf
xor edi, edi
cmp dword [ebp - 0x24], esi
jne 0x412f2b
push esi
push dword [ebp + 8]
call sub.msi.dll_MsiOpenDatabaseW
mov edi, eax
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0042b14f
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.00404e81
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.0042b1f5
mov ebx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xc]
call fcn.00401b17
cmp ebx, esi
je 0x412f1f
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00403de1
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
call fcn.004129ba
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0042b266
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.00404e81
mov byte [ebp - 4], 0xd
push str.SlimCleaner
mov ecx, eax
call fcn.00402483
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00401b17
test bl, bl
je 0x412fc8
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.FixCleaner
call fcn.0040153f
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 1
call fcn.0040a33a
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], esi
je 0x412fbc
push str.__qn
lea ecx, [ebp + 0xc]
call fcn.0040aff1
lea eax, [ebp + 0xc]
push eax
call fcn.00409abe
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf
cmp eax, esi
je 0x412fbc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00401b17
cmp edi, esi
je 0x41302f
cmp edi, 0x642
je 0x413053
cmp edi, 0x669
je 0x41301c
cmp edi, 0xbc1
jbe 0x412fec
cmp edi, 0xbc3
jbe 0x41301c
mov eax, dword [0x464640]
cmp eax, esi
je 0x413006
mov dword [ebp - 0x28], eax
push 0x4582e4
lea eax, [ebp - 0x28]
push eax
call fcn.004323af
cmp edi, esi
jle 0x413016
and edi, 0xffff
or edi, 0x80070000
push edi
call fcn.004017ac
push esi
push esi
push 0x8001
push dword [0x4644d0]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004130d6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401b17
xor eax, eax
inc eax
call fcn.00432898
ret 8
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004130d6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00401b17
xor eax, eax
jmp 0x41304b