Function at 0x41312c
Capabilities:
Check if file exists
Copy file
Create directory

Disassembly:
push 0x44
mov eax, 0x448e3f
call fcn.00432bf3
mov eax, dword [ebp + 8]
mov dword [0x46463c], eax
xor esi, esi
push esi
push 0x102
call sub.msi.dll_MsiSetPropertyW
push 0x46463c
push 0x7fdf
push 0x41299d
call sub.msi.dll_MsiSetInternalUI
lea ecx, [ebp - 0x18]
call fcn.00408a81
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x18]
push eax
call fcn.00412c7b
mov dword [ebp - 0x24], eax
push dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
call fcn.00413499
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.0041bca9
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x20]
push eax
call fcn.0040a444
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x1c]
push eax
call fcn.00413499
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 8]
call fcn.00401ac2
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c]
push eax
call fcn.004025c1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.00408aab
push dword [ebp + 8]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040a49f
pop ecx
pop ecx
mov byte [ebp - 4], 6
push dword [eax]
lea eax, [ebp - 0x20]
push eax
call fcn.00413499
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.00401ac2
mov byte [ebp - 4], 6
lea eax, [ebp - 0x20]
push eax
call fcn.004025c1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00408aab
push str.Downloaded_Installers
lea edi, [ebp + 8]
call fcn.004134bf
push dword [ebp + 8]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
test eax, eax
jne 0x41324c
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x41324c
call fcn.0040b3f1
push dword [ebp - 0x18]
lea edi, [ebp + 8]
call fcn.004134bf
push dword [ebp + 8]
call ebx
test eax, eax
jne 0x41326e
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x413247
push str._setup.msi
lea edi, [ebp + 8]
call fcn.004134bf
push esi
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x413247
mov dword [ebp - 4], 2
jmp 0x4132d3
mov byte [ebp - 4], 1
call fcn.0041bcbf
xor edi, edi
cmp dword [ebp - 0x24], esi
jne 0x413354
push esi
push dword [ebp + 8]
call sub.msi.dll_MsiOpenDatabaseW
mov edi, eax
push 0xa
lea ecx, [ebp - 0x50]
call fcn.0042b54f
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.00405060
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.0042b5f5
mov ebx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xc]
call fcn.00408aab
cmp ebx, esi
je 0x413348
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
lea eax, [ebp - 0x18]
push eax
call fcn.00403f52
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
call fcn.00412de3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x50]
call fcn.0042b666
lea eax, [ebp + 0xc]
push eax
push 0x4644a0
call fcn.00405060
mov byte [ebp - 4], 0xd
push str.SlimCleaner
mov ecx, eax
call fcn.004025e1
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00408aab
test bl, bl
je 0x4133f1
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.FixCleaner
call fcn.0040153f
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 1
call fcn.0040a699
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], esi
je 0x4133e5
push str.__qn
lea ecx, [ebp + 0xc]
call fcn.0040b37b
lea eax, [ebp + 0xc]
push eax
call fcn.00409e1d
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xf
cmp eax, esi
je 0x4133e5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], esi
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00408aab
cmp edi, esi
je 0x413458
cmp edi, 0x642
je 0x41347c
cmp edi, 0x669
je 0x413445
cmp edi, 0xbc1
jbe 0x413415
cmp edi, 0xbc3
jbe 0x413445
mov eax, dword [0x464640]
cmp eax, esi
je 0x41342f
mov dword [ebp - 0x28], eax
push 0x4583b4
lea eax, [ebp - 0x28]
push eax
call fcn.004327af
cmp edi, esi
jle 0x41343f
and edi, 0xffff
or edi, 0x80070000
push edi
call fcn.004017bc
push esi
push esi
push 0x8001
push dword [0x4644d0]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004025c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00408aab
xor eax, eax
inc eax
call fcn.00432c98
ret 8
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.004025c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00408aab
xor eax, eax
jmp 0x413474