Function at 0x40bfde
Capabilities:
Check if file exists
Copy file
Create directory

Disassembly:
push 0x40
mov eax, 0x452eb5
call fcn.0043b161
mov eax, dword [ebp + 8]
mov dword [0x471970], eax
xor esi, esi
push esi
push 0x102
call sub.msi.dll_MsiSetPropertyW
push 0x471970
push 0x7fdf
push 0x40b63b
call sub.msi.dll_MsiSetInternalUI
lea ecx, [ebp - 0x14]
call fcn.00401b67
mov dword [ebp - 4], esi
push dword [ebp + 0xc]
lea eax, [ebp - 0x14]
push eax
call fcn.0040b8e5
mov dword [ebp - 0x20], eax
push dword [ebp + 0xc]
lea eax, [ebp + 8]
push eax
call fcn.0040c367
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.0042aa0e
mov byte [ebp - 4], 2
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1c]
push eax
call fcn.00413305
pop ecx
mov byte [ebp - 4], 4
push dword [eax]
lea eax, [ebp - 0x18]
push eax
call fcn.0040c367
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp + 8]
call fcn.00401af4
mov byte [ebp - 4], 4
lea eax, [ebp - 0x18]
push eax
call fcn.00404291
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c]
call fcn.00401b44
push dword [ebp + 8]
lea eax, [ebp - 0x18]
push eax
call fcn.00413360
pop ecx
pop ecx
mov byte [ebp - 4], 6
push dword [eax]
lea eax, [ebp - 0x1c]
push eax
call fcn.0040c367
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.00401af4
mov byte [ebp - 4], 6
lea eax, [ebp - 0x1c]
push eax
call fcn.00404291
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x18]
call fcn.00401b44
push str.Downloaded_Installers
lea edi, [ebp + 8]
call fcn.0040c38d
push dword [ebp + 8]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
call ebx
test eax, eax
jne 0x40c0fe
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x40c0fe
call fcn.00408514
push dword [ebp - 0x14]
lea edi, [ebp + 8]
call fcn.0040c38d
push dword [ebp + 8]
call ebx
test eax, eax
jne 0x40c120
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x40c0f9
push str._setup.msi
lea edi, [ebp + 8]
call fcn.0040c38d
push esi
push dword [ebp + 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x40c0f9
mov dword [ebp - 4], 2
jmp 0x40c185
mov byte [ebp - 4], 1
call fcn.0042aa24
xor edi, edi
cmp dword [ebp - 0x20], esi
jne 0x40c208
push dword [ebp + 0x10]
push dword [ebp + 8]
call sub.msi.dll_MsiOpenDatabaseW
mov edi, eax
push 0xa
lea ecx, [ebp - 0x4c]
call fcn.00430a88
mov byte [ebp - 4], 0xa
lea eax, [ebp + 0xc]
push eax
push 0x4719b8
call fcn.0040d94d
mov byte [ebp - 4], 0xb
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x4c]
call fcn.00430b2e
mov ebx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0xc]
call fcn.00401b44
cmp ebx, esi
je 0x40c1fc
push ecx
mov ecx, esp
mov dword [ebp + 0xc], esp
lea eax, [ebp - 0x14]
push eax
call fcn.0040517e
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xa
call fcn.0040bc91
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.00430b9f
lea eax, [ebp + 0xc]
push eax
push 0x4719b8
call fcn.0040d94d
mov byte [ebp - 4], 0xd
push 0x45bbe8
mov ecx, eax
call fcn.004042c6
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00401b44
test bl, bl
je 0x40c2a5
push ecx
mov ecx, esp
mov dword [ebp + 0x10], esp
push 0x45bc04
call fcn.0040151c
mov byte [ebp - 4], 0xe
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 1
call fcn.0041356d
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], esi
je 0x40c299
push str.__qn
lea ecx, [ebp + 0xc]
call fcn.00408591
lea eax, [ebp + 0xc]
push eax
call fcn.0041313c
pop ecx
mov dword [ebp + 0x10], eax
mov byte [ebp - 4], 0xf
cmp eax, esi
je 0x40c299
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0x10], esi
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.00401b44
cmp edi, esi
je 0x40c30c
cmp edi, 0x642
je 0x40c330
cmp edi, 0x669
je 0x40c2f9
cmp edi, 0xbc1
jbe 0x40c2c9
cmp edi, 0xbc3
jbe 0x40c2f9
mov eax, dword [0x471974]
cmp eax, esi
je 0x40c2e3
mov dword [ebp - 0x24], eax
push 0x463460
lea eax, [ebp - 0x24]
push eax
call fcn.0043b436
cmp edi, esi
jle 0x40c2f3
and edi, 0xffff
or edi, 0x80070000
push edi
call fcn.004017c5
push esi
push esi
push 0x8001
push dword [0x4719e8]
call dword [sym.imp.USER32.dll_PostThreadMessageW]
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.00404291
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401b44
xor eax, eax
inc eax
call fcn.0043b206
ret 0xc
mov byte [ebp - 4], 0
lea eax, [ebp + 8]
push eax
call fcn.00404291
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401b44
xor eax, eax
jmp 0x40c328