Function at 0x412f19
Capabilities:
Check if file exists
Copy file
Create directory

Disassembly:
push 0x44
mov eax, 0x448c2c
call fcn.00432a03
mov eax, dword [ebp + 8]
mov dword [0x46463c], eax
xor esi, esi
push esi
push 0x102
call sub.msi.dll_MsiSetPropertyW
push 0x46463c
push 0x7fdf
push 0x41278a
call sub.msi.dll_MsiSetInternalUI
lea ecx, [ebp - 0x18]
call fcn.00401b04
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.00412a68
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
call fcn.00413286
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.0041bab9
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x20]
push eax
call fcn.0040a2f1
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x1c]
push eax
call fcn.00413286
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 8]
call fcn.00401ab7
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
call fcn.004132ec
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004088d8
push dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a34c
pop ecx
pop ecx
mov byte [ebp - 4], 6
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call fcn.00413286
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.00401ab7
mov byte [ebp - 4], 6
lea eax, [ebp - 0x20]
push eax
call fcn.004132ec
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004088d8
push str.Downloaded_Installers
lea edi, [ebp + 8]
call fcn.004132ac
push dword [ebp + 8]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
test eax, eax
jne 0x413039
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x413039
call fcn.0040b229
push dword [ebp - 0x18]
lea edi, [ebp + 8]
call fcn.004132ac
push dword [ebp + 8]
call ebx
test eax, eax
jne 0x41305b
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x413034
push str._setup.msi
lea edi, [ebp + 8]
call fcn.004132ac
push esi
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x413034
mov dword [ebp - 4], 2
jmp 0x4130c0
mov byte [ebp - 4], 1
call fcn.0041bacf
xor edi, edi
cmp dword [ebp - 0x24], esi
jne 0x413141
push esi
push dword [ebp + 8]
call sub.msi.dll_MsiOpenDatabaseW
mov edi, eax
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0042b35c
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.0040504d
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.0042b402
mov ebx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xc]
call fcn.004088d8
cmp ebx, esi
je 0x413135
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00403f51
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
call fcn.00412bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0042b473
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.0040504d
mov byte [ebp - 4], 0xd
push str.SlimCleaner
mov ecx, eax
call fcn.00402497
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.004088d8
test bl, bl
je 0x4131de
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.FixCleaner
call fcn.0040153f
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 1
call fcn.0040a546
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], esi
je 0x4131d2
push str.__qn
lea ecx, [ebp + 0xc]
call fcn.0040b1b3
lea eax, [ebp + 0xc]
push eax
call fcn.00409cca
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf
cmp eax, esi
je 0x4131d2
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.004088d8
cmp edi, esi
je 0x413245
cmp edi, 0x642
je 0x413269
cmp edi, 0x669
je 0x413232
cmp edi, 0xbc1
jbe 0x413202
cmp edi, 0xbc3
jbe 0x413232
mov eax, dword [0x464640]
cmp eax, esi
je 0x41321c
mov dword [ebp - 0x28], eax
push 0x458374
lea eax, [ebp - 0x28]
push eax
call fcn.004325bf
cmp edi, esi
jle 0x41322c
and edi, 0xffff
or edi, 0x80070000
push edi
call fcn.004017d0
push esi
push esi
push 0x8001
push dword [0x4644d0]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004132ec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004088d8
xor eax, eax
inc eax
call fcn.00432aa8
ret 8
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004132ec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004088d8
xor eax, eax
jmp 0x413261