Function at 0x417240
Capabilities:
Check if file exists
Copy file
Create directory
Move file
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59716b
mov eax, dword fs:[0]
push eax
sub esp, 0xa00
mov eax, dword [0x60dfd4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebx + 0x68]
test eax, eax
je 0x417721
mov eax, dword [eax]
test eax, eax
je 0x417721
push eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x417721
mov eax, dword [ebx + 0x68]
test eax, eax
je 0x4172ac
mov eax, dword [eax]
test eax, eax
je 0x4172ac
push eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, eax
jmp 0x4172ae
xor esi, esi
lea edi, [ebx + 0xcc8]
push edi
mov dword [ebp - 0xa0c], edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esi, eax
lea eax, [esi*2 + 6]
push eax
lea eax, [ebp - 0x9ac]
push 0
push eax
call fcn.0056eeb0
mov ecx, dword [ebx + 0x68]
add esp, 0xc
test ecx, ecx
jne 0x417331
push 0xc
call fcn.0041d1b5
mov ecx, eax
add esp, 4
mov dword [ebp - 0xa08], ecx
test ecx, ecx
je 0x41731d
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 1
mov dword [ecx], 0
jmp 0x41731f
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x68], ecx
test ecx, ecx
je 0x417c62
push dword [ecx]
lea eax, [esi + 3]
push edi
push 0x5eba10
push eax
push eax
lea eax, [ebp - 0x9ac]
push eax
call fcn.0041c410
add esp, 0x18
mov dword [ebp - 0x9c4], 0x80
lea eax, [ebp - 0x9b8]
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x9b0], 0
mov dword [ebp - 0x9b4], 0
push eax
push 0
lea eax, [ebp - 0x9ac]
push eax
call dword [sym.imp.msi.dll_MsiOpenProductW]
mov eax, dword [ebp - 0x9b8]
test eax, eax
je 0x41741e
mov ecx, 0x1f
lea edi, [ebp - 0x49c]
mov esi, 0x5ed188
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x9b0]
push ecx
lea ecx, [ebp - 0x49c]
push ecx
push eax
call dword [sym.imp.msi.dll_MsiEnumClientsA]
mov eax, dword [ebp - 0x9b0]
test eax, eax
je 0x417418
push 0
push eax
call dword [sym.imp.msi.dll_MsiViewModify]
test eax, eax
jne 0x417418
push 1
call dword [sym.imp.msi.dll_MsiDatabaseExportA]
mov dword [ebp - 0x9b4], eax
lea eax, [ebp - 0x9b4]
push eax
push dword [ebp - 0x9b0]
call dword [sym.imp.msi.dll_MsiDatabaseIsTablePersistentA]
test eax, eax
jne 0x417418
lea eax, [ebp - 0x9c4]
push eax
lea eax, [ebp - 0x7a4]
push eax
push 1
push dword [ebp - 0x9b4]
call dword [sym.imp.msi.dll_MsiRecordSetStreamA]
lea edi, [ebx + 0xcc8]
mov eax, dword [ebp - 0x9b4]
test eax, eax
je 0x41742f
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov eax, dword [ebp - 0x9b0]
test eax, eax
je 0x417440
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
mov eax, dword [ebp - 0x9b8]
test eax, eax
je 0x417451
push eax
call dword [sym.imp.msi.dll_MsiConfigureFeatureFromDescriptorA]
lea eax, [ebp - 0x7a4]
push eax
lea eax, [ebx + 0x8b4]
push eax
push str._s__s_
push 0x104
lea esi, [ebx + 0xabc]
push 0x104
push esi
mov dword [ebp - 0xa08], esi
call fcn.0041c410
add esp, 0x18
push 0
push esi
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov eax, dword [ebx + 0x68]
test eax, eax
je 0x4174a4
mov eax, dword [eax]
test eax, eax
je 0x4174a4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, eax
jmp 0x4174a6
xor esi, esi
lea eax, [ebx + 0xabc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, esi
mov dword [ebp - 0x9bc], eax
lea esi, [eax + eax]
lea eax, [esi + 6]
push eax
lea eax, [ebp - 0x6a4]
push 0
push eax
call fcn.0056eeb0
mov ecx, dword [ebx + 0x68]
add esp, 0xc
test ecx, ecx
jne 0x417528
push 0xc
call fcn.0041d1b5
mov ecx, eax
add esp, 4
mov dword [ebp - 0x9c0], ecx
test ecx, ecx
je 0x417514
xorps xmm0, xmm0
movq qword [ecx], xmm0
mov dword [ecx + 8], 0
mov dword [ecx + 4], 0
mov dword [ecx + 8], 1
mov dword [ecx], 0
jmp 0x417516
xor ecx, ecx
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x68], ecx
test ecx, ecx
je 0x417c62
push dword [ecx]
mov eax, dword [ebp - 0x9bc]
lea ecx, [ebx + 0xabc]
push ecx
add eax, 3
push 0x5eba10
push eax
push eax
lea eax, [ebp - 0x6a4]
push eax
call fcn.0041c410
lea eax, [ebp - 0x6a4]
push 0
push eax
call fcn.00575b60
add esp, 0x20
test eax, eax
jne 0x41756c
mov dword [ebx + 0x1b14], 1
cmp esi, 0x208
jae 0x417c6c
xor eax, eax
mov word [ebp + esi - 0x6a4], ax
add esi, 2
cmp esi, 0x208
jae 0x417c6c
push edi
mov word [ebp + esi - 0x6a4], ax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str..msi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esi, eax
lea eax, [esi*2 + 6]
push eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0056eeb0
push edi
lea eax, [esi + 3]
push str._s.msi
push eax
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0041c410
lea eax, [esi + esi]
add esp, 0x20
cmp eax, 0x208
jae 0x417c6c
xor ecx, ecx
mov word [ebp + eax - 0x218], cx
add eax, 2
cmp eax, 0x208
jae 0x417c6c
mov word [ebp + eax - 0x218], cx
cmp dword [ebx + 0x1b14], ecx
je 0x41773f
lea esi, [ebx + 0x14ec]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 2
mov dword [ebp - 0x9bc], eax
lea ecx, [eax*2 + 2]
push ecx
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0056eeb0
mov eax, dword [ebp - 0x9bc]
push esi
inc eax
push 0x5eba48
push eax
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0041c410
add esp, 0x20
lea eax, [ebp - 0x420]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov eax, dword [ebp - 0x9bc]
lea ecx, [eax*2 - 4]
cmp ecx, 0x208
jae 0x417c6c
xor edx, edx
lea eax, [eax*2 - 2]
mov word [ebp + ecx - 0x420], dx
cmp eax, 0x208
jae 0x417c6c
xor ecx, ecx
mov dword [ebp - 0xa00], 1
mov word [ebp + eax - 0x420], cx
lea eax, [ebp - 0x6a4]
mov dword [ebp - 0x9fc], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 0x9f8], eax
mov eax, 0x14
mov word [ebp - 0x9f4], ax
lea eax, [ebp - 0xa04]
push eax
mov dword [ebp - 0xa04], ecx
mov dword [ebp - 0x9f2], ecx
mov dword [ebp - 0x9ee], ecx
mov dword [ebp - 0x9ea], ecx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x41773f
push dword [ebp - 0x9f8]
push dword [ebp - 0x9fc]
push str.Setup___CopyInstallSuiteFiles_copy_file_from__s__to__s__fails_
call fcn.0041c4c0
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056a6fa
mov esp, ebp
pop ebp
ret
push edi
lea ecx, [ebp - 0x9bc]
mov dword [ebp - 0x9bc], 0
call fcn.004104f0
mov dword [ebp - 4], 2
call fcn.00421571
mov edi, eax
test edi, edi
je 0x417c71
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, edi
call esi
lea edi, [eax + 0x10]
mov dword [ebp - 0x9b4], edi
mov eax, str..Intel_Bluetooth.msi_Update
mov byte [ebp - 4], 3
test eax, 0xffff0000
jne 0x4177b1
movzx esi, ax
push esi
call fcn.0042e288
test eax, eax
je 0x4177c9
push esi
push eax
lea ecx, [ebp - 0x9b4]
call fcn.004103f0
jmp 0x4177c3
push 0x1c
push str..Intel_Bluetooth.msi_Update
lea ecx, [ebp - 0x9b4]
call fcn.004050e0
mov edi, dword [ebp - 0x9b4]
lea eax, [ebp - 0x9b4]
mov byte [ebp - 4], 4
push eax
lea edx, [ebx + 0xcc8]
mov dword [ebp - 0x9b0], 0
lea ecx, [ebp - 0x9b0]
call fcn.0040b6d0
lea eax, [ebx + 0xabc]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x9b8]
mov dword [ebp - 0x9b8], 0
call fcn.004104f0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x9b8]
lea ecx, [ecx - 0x10]
call fcn.00404fd0
push dword [ebp - 0x9b0]
lea esi, [eax + 0x10]
mov dword [ebp - 0x9c0], esi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x417967
lea edx, [ebp - 0x9c0]
lea ecx, [ebp - 0x9b0]
call fcn.00406f30
mov esi, dword [ebp - 0x9c0]
test al, al
jne 0x417967
push esi
push dword [ebp - 0x9b0]
push str.Setup___CopyInstallSuiteFiles_copy_dir_from__s__to__s__fails_
call fcn.0041c4c0
or ebx, 0xffffffff
add esp, 0xc
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41789d
lfence
mov ebx, dword [esi]
push esi
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 5
mov eax, ebx
mov ecx, dword [ebp - 0x9b8]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4178d0
lfence
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 4
mov eax, ebx
mov ecx, dword [ebp - 0x9b0]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x417903
lfence
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [edi - 0x10]
mov eax, ebx
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x41792d
lfence
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, edi
call esi
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x9bc]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x417721
lfence
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, edi
call esi
jmp 0x417721
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x417993
lfence
mov ebx, dword [esi]
push esi
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 5
mov eax, ebx
mov ecx, dword [ebp - 0x9b8]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4179c6
lfence
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 4
mov eax, ebx
mov ecx, dword [ebp - 0x9b0]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x4179f9
lfence
mov ebx, dword [ecx]
push ecx
mov eax, dword [ebx]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, ebx
call esi
or ebx, 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [edi - 0x10]
mov eax, ebx
lock xadd dword [ecx + 0xc], eax
dec eax
test eax, eax
jg 0x417a23
lfence
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, edi
call esi
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x9bc]
add ecx, 0xfffffff0
lock xadd dword [ecx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x417a54
lfence
mov edi, dword [ecx]
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x5a72d4]
mov ecx, edi
call esi
mov ebx, dword [ebp - 0xa08]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [ebp - 0x420]
lea ecx, [esi*2 + 6]
push ecx
push 0
push eax
call fcn.0056eeb0
push ebx
lea eax, [esi + 3]
push 0x5eba48
push eax
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0041c410
lea eax, [esi*2]
add esp, 0x20
cmp eax, 0x208
jae 0x417c6c
xor ecx, ecx
lea esi, [esi*2 + 2]
mov word [ebp + eax - 0x420], cx
cmp esi, 0x208
jae 0x417c6c
xor eax, eax
mov dword [ebp - 0x9e0], 2
mov word [ebp + esi - 0x420], ax
mov dword [ebp - 0x9e4], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x9dc], eax
lea eax, [ebp - 0x420]
mov dword [ebp - 0x9d8], eax
mov eax, 0x14
mov word [ebp - 0x9d4], ax
lea eax, [ebp - 0x9e4]
push eax
mov dword [ebp - 0x9d2], ecx
mov dword [ebp - 0x9ce], ecx
mov dword [ebp - 0x9ca], ecx
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
je 0x417b34
push dword [ebp - 0x9d8]
push dword [ebp - 0x9dc]
jmp 0x417714
mov ebx, dword [ebp - 0xa0c]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str..ms_
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esi, eax
lea edi, [esi + esi]
lea eax, [edi + 6]
push eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0056eeb0
push ebx
lea eax, [esi + 3]
push str._s.ms_
push eax
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0041c410
add esp, 0x20
cmp edi, 0x208
jae 0x417c6c
xor eax, eax
mov word [ebp + edi - 0x218], ax
add edi, 2
cmp edi, 0x208
jae 0x417c6c
mov word [ebp + edi - 0x218], ax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x9dc], eax
lea eax, [ebp - 0x9e4]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
jne 0x417b23
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push str..cab
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add esi, eax
lea edi, [esi + esi]
lea eax, [edi + 6]
push eax
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0056eeb0
push ebx
lea eax, [esi + 3]
push str._s.cab
push eax
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.0041c410
add esp, 0x20
cmp edi, 0x208
jae 0x417c6c
xor eax, eax
mov word [ebp + edi - 0x218], ax
add edi, 2
cmp edi, 0x208
jae 0x417c6c
mov word [ebp + edi - 0x218], ax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x9dc], eax
lea eax, [ebp - 0x9e4]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
test eax, eax
jne 0x417b23
mov eax, 1
jmp 0x417723
push 0x8007000e
call fcn.0056db90
call fcn.0056ac65
push 0x80004005
call fcn.00403ba0
int3