Function at 0x403acf
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
and dword [ebp - 4], 0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x2004
mov edi, 0x4e00d8
push edi
add eax, 0x3e8
push 0
mov dword [0x473644], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 3
push 0x80000000
push edi
call fcn.00406626
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [ebp - 0xc], ebx
mov dword [0x40c010], ebx
jne 0x403b28
mov eax, str.Error_launching_installer
jmp 0x403df0
push esi
push edi
mov esi, 0x4d00b8
push esi
call fcn.0040698c
push esi
call fcn.00406edb
push eax
push 0x4e40e0
call fcn.0040698c
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
test eax, eax
mov dword [0x434208], eax
mov ebx, eax
jbe 0x403c64
mov esi, dword [0x473654]
neg esi
sbb esi, esi
and esi, 0x7e00
add esi, 0x200
cmp ebx, esi
jae 0x403b7a
mov esi, ebx
push esi
push 0x42c178
call fcn.0040363b
test eax, eax
je 0x403da7
cmp dword [0x473654], 0
jne 0x403c2f
push 0x24
push 0x42c178
lea eax, [ebp - 0x30]
push eax
call fcn.004065dc
test dword [ebp - 0x30], 0xfffffe00
jne 0x403c3d
cmp dword [ebp - 0x2c], 0xdeadbeef
jne 0x403c3d
cmp dword [ebp - 0x20], 0x74736e49
jne 0x403c3d
cmp dword [ebp - 0x24], 0x74666f73
jne 0x403c3d
cmp dword [ebp - 0x28], 0x6c6c754e
jne 0x403c3d
mov edx, dword [ebp + 8]
or edx, dword [ebp - 0x30]
mov eax, dword [0x42c174]
mov ecx, edx
and ecx, 2
or dword [0x4736c0], ecx
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
mov dword [0x473654], eax
mov dword [ebp + 8], edx
ja 0x403da0
test dl, 8
jne 0x403c0e
test dl, 4
jne 0x403c64
inc dword [0x43420c]
push 0x24
pop ebx
lea eax, [eax + ecx - 0x28]
mov dword [0x42c174], eax
add eax, 0x20
push 0
push eax
mov esi, ebx
call fcn.004036ae
jmp 0x403c3d
test byte [ebp + 8], 2
jne 0x403c3d
push 0
call fcn.004035d7
pop ecx
cmp ebx, dword [0x434208]
jae 0x403c56
push esi
push 0x42c178
push dword [ebp - 4]
call fcn.004075de
mov dword [ebp - 4], eax
add dword [0x42c174], esi
sub ebx, esi
jne 0x403b5e
test byte [ebp - 0x30], 1
je 0x403c70
inc dword [0x473648]
test byte [ebp - 0x30], 0x80
je 0x403c7c
inc dword [0x47364c]
test word [ebp - 0x30], 0x100
je 0x403c8a
inc dword [0x473640]
cmp dword [0x47364c], 0
je 0x403d02
cmp dword [0x473648], 0
jne 0x403d02
push edi
lea eax, [ebp - 0x238]
push eax
call fcn.0040698c
lea eax, [ebp - 0x238]
push eax
call fcn.00406f07
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.0040698c
lea eax, [ebp - 0x238]
push eax
push str._s.bin
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 3
push 0x80000000
lea eax, [ebp - 0x238]
push eax
call fcn.00406626
cmp eax, 0xffffffff
mov dword [0x40c014], eax
jne 0x403d02
cmp dword [0x473640], 0
je 0x403da0
push 1
call fcn.004035d7
xor ebx, ebx
cmp dword [0x473654], ebx
pop ecx
je 0x403da0
cmp dword [0x43420c], ebx
je 0x403d62
mov eax, dword [0x42c174]
add eax, 0xfffffffc
push ebx
push eax
call fcn.004036ae
push 4
lea eax, [ebp - 8]
push eax
call fcn.0040363b
test eax, eax
je 0x403da0
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.004075de
mov esi, eax
push 4
lea eax, [ebp + 8]
push eax
call fcn.0040363b
test eax, eax
je 0x403da0
cmp esi, dword [ebp + 8]
jne 0x403da0
push dword [ebp - 0x1c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov eax, dword [0x473654]
add eax, 0x24
push eax
call fcn.00403697
push dword [ebp - 8]
push dword [ebp - 0x1c]
push esi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
call fcn.0040376a
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edi, edx
cdq
cmp ecx, eax
jne 0x403da0
cmp edi, edx
je 0x403db1
mov eax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
jmp 0x403def
push 1
call fcn.004035d7
pop ecx
jmp 0x403da0
mov dword [0x4735fc], esi
mov eax, dword [esi]
push 8
mov dword [0x473650], eax
pop ecx
lea eax, [esi + 0x44]
sub eax, 8
add dword [eax], esi
dec ecx
cmp ecx, ebx
jne 0x403dc4
push 1
push ebx
push ebx
push dword [ebp - 0xc]
call fcn.00403651
mov dword [esi + 0x3c], eax
push 0x40
add esi, 4
push esi
push 0x473600
call fcn.004065dc
xor eax, eax
pop esi
pop edi
pop ebx
leave
ret 4