Function at 0x412ea8
Capabilities:
Check if file exists
Copy file
Create directory

Disassembly:
push 0x44
mov eax, 0x448bbc
call fcn.00432993
mov eax, dword [ebp + 8]
mov dword [0x46463c], eax
xor esi, esi
push esi
push 0x102
call sub.msi.dll_MsiSetPropertyW
push 0x46463c
push 0x7fdf
push 0x412719
call sub.msi.dll_MsiSetInternalUI
lea ecx, [ebp - 0x18]
call fcn.00408979
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.004129f7
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
call fcn.00413215
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.0041ba49
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x20]
push eax
call fcn.0040a2dc
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x1c]
push eax
call fcn.00413215
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 8]
call fcn.00401ab7
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
call fcn.0041327b
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.004089a3
push dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a337
pop ecx
pop ecx
mov byte [ebp - 4], 6
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call fcn.00413215
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.00401ab7
mov byte [ebp - 4], 6
lea eax, [ebp - 0x20]
push eax
call fcn.0041327b
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.004089a3
push str.Downloaded_Installers
lea edi, [ebp + 8]
call fcn.0041323b
push dword [ebp + 8]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
test eax, eax
jne 0x412fc8
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x412fc8
call fcn.0040b214
push dword [ebp - 0x18]
lea edi, [ebp + 8]
call fcn.0041323b
push dword [ebp + 8]
call ebx
test eax, eax
jne 0x412fea
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x412fc3
push str._setup.msi
lea edi, [ebp + 8]
call fcn.0041323b
push esi
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x412fc3
mov dword [ebp - 4], 2
jmp 0x41304f
mov byte [ebp - 4], 1
call fcn.0041ba5f
xor edi, edi
cmp dword [ebp - 0x24], esi
jne 0x4130d0
push esi
push dword [ebp + 8]
call sub.msi.dll_MsiOpenDatabaseW
mov edi, eax
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0042b2ec
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.0040506c
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.0042b392
mov ebx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xc]
call fcn.004089a3
cmp ebx, esi
je 0x4130c4
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00403f71
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
call fcn.00412b5f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0042b403
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.0040506c
mov byte [ebp - 4], 0xd
push str.SlimCleaner
mov ecx, eax
call fcn.004024de
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.004089a3
test bl, bl
je 0x41316d
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.FixCleaner
call fcn.0040153f
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 1
call fcn.0040a531
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], esi
je 0x413161
push str.__qn
lea ecx, [ebp + 0xc]
call fcn.0040b19e
lea eax, [ebp + 0xc]
push eax
call fcn.00409cb5
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf
cmp eax, esi
je 0x413161
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.004089a3
cmp edi, esi
je 0x4131d4
cmp edi, 0x642
je 0x4131f8
cmp edi, 0x669
je 0x4131c1
cmp edi, 0xbc1
jbe 0x413191
cmp edi, 0xbc3
jbe 0x4131c1
mov eax, dword [0x464640]
cmp eax, esi
je 0x4131ab
mov dword [ebp - 0x28], eax
push 0x458364
lea eax, [ebp - 0x28]
push eax
call fcn.0043254f
cmp edi, esi
jle 0x4131bb
and edi, 0xffff
or edi, 0x80070000
push edi
call fcn.004017d0
push esi
push esi
push 0x8001
push dword [0x4644d0]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.0041327b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004089a3
xor eax, eax
inc eax
call fcn.00432a38
ret 8
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.0041327b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004089a3
xor eax, eax
jmp 0x4131f0