Function at 0x14000400f
Capabilities:
Get file size

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x278
mov edi, ecx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, 0x2000
xor ecx, ecx
add eax, 0x3e8
mov dword [0x14002f140], eax
mov rax, qword [0x14000d200]
mov rbp, qword [rax]
lea rsi, [rbp + 0x6c000]
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov r8d, 3
mov edx, 0x80000000
mov rcx, rsi
call fcn.1400075fb
mov rbx, rax
mov qword [0x14000a028], rax
lea rax, [0x14000be60]
cmp rbx, 0xffffffffffffffff
je 0x140004348
lea r12, [rbp + 0x5c000]
mov rdx, rsi
xor r13d, r13d
mov rcx, r12
lea r14, [0x14002f1c0]
lea r15, [rsp + 0x4c]
call fcn.140007a21
mov rcx, r12
xor r12d, r12d
call fcn.140007405
lea rcx, [rbp + 0x70000]
mov rdx, rax
call fcn.140007a21
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [0x14004328c], eax
mov esi, eax
test esi, esi
je 0x1400041ae
cmp dword [0x14002f148], 1
mov rcx, r14
sbb ebx, ebx
and ebx, 0xffff8200
add ebx, 0x8000
cmp esi, ebx
cmovbe ebx, esi
mov edx, ebx
call fcn.140003cee
test eax, eax
jne 0x140004112
mov ecx, 1
call fcn.140003c0a
jmp 0x140004192
cmp dword [0x14002f148], 0
jne 0x1400041d0
mov r8d, 0x1c
mov rdx, r14
mov rcx, r15
call fcn.14000755f
mov eax, dword [rsp + 0x4c]
cmp eax, 0xf
ja 0x1400041df
cmp dword [rsp + 0x50], 0xdeadbeef
jne 0x1400041df
cmp dword [rsp + 0x5c], 0x74736e49
jne 0x1400041df
cmp dword [rsp + 0x58], 0x74666f73
jne 0x1400041df
cmp dword [rsp + 0x54], 0x6c6c754e
jne 0x1400041df
mov edx, dword [0x140043288]
or edi, eax
mov rax, qword [0x14000d160]
mov dword [0x14002f148], edx
mov edx, edi
and edx, 2
or dword [rax + 0x20], edx
mov eax, dword [rsp + 0x64]
cmp esi, eax
jae 0x14000419e
lea rax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
jmp 0x140004348
test edi, 8
jne 0x1400041c3
test edi, 4
je 0x1400041c3
mov ecx, 1
call fcn.140003c0a
cmp dword [0x14002f148], 0
jne 0x140004205
jmp 0x140004192
lea esi, [rax - 4]
inc r13d
cmp ebx, esi
cmova ebx, esi
jmp 0x1400041df
test edi, 2
jne 0x1400041df
xor ecx, ecx
call fcn.140003c0a
cmp esi, dword [0x14004328c]
jae 0x1400041f8
mov ecx, r12d
mov r8d, ebx
mov rdx, r14
call fcn.140008700
mov r12d, eax
add dword [0x140043288], ebx
sub esi, ebx
jmp 0x1400040d3
test r13d, r13d
lea rsi, [rsp + 0x68]
je 0x14000423a
mov ecx, dword [0x140043288]
call fcn.140003d00
mov edx, 4
mov rcx, rsi
call fcn.140003cee
test eax, eax
je 0x140004192
cmp dword [rsp + 0x68], r12d
jne 0x140004192
movsxd rdx, dword [rsp + 0x60]
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
lea rcx, [0x1400431e0]
mov rbx, rax
call fcn.140008770
lea rdx, [rbp + 0x64000]
mov rcx, rsi
call fcn.140007647
xor eax, eax
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov edx, 0xc0000000
mov rcx, rsi
mov dword [rsp + 0x28], 0x4000100
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14000a020], rax
inc rax
lea rax, [0x14000c02c]
je 0x140004348
mov eax, dword [0x14002f148]
lea ecx, [rax + 0x1c]
call fcn.140003d00
xor edx, edx
mov edi, dword [rsp + 0x64]
test byte [rsp + 0x4c], 4
sete dl
mov r9d, dword [rsp + 0x60]
mov dword [0x140043294], eax
mov r8, rbx
shl edx, 2
lea ecx, [rdi - 0x1c]
sub ecx, edx
xor edx, edx
add eax, ecx
or ecx, 0xffffffff
mov dword [0x140043290], eax
call fcn.140003ed2
cmp eax, dword [rsp + 0x60]
jne 0x140004192
mov qword [0x14002f150], rbx
mov eax, dword [rbx]
mov dword [0x14002f14c], eax
test byte [rsp + 0x4c], 1
je 0x140004314
inc dword [0x14002f144]
xor eax, eax
add qword [rbx + rax + 0x58], rbx
sub rax, 0xc
cmp rax, 0xffffffffffffffa0
jne 0x140004316
movsxd rax, dword [0x140043298]
lea rdx, [rbx + 4]
mov r8d, 0x60
lea rcx, [0x14002f160]
mov qword [rbx + 0x58], rax
call fcn.14000755f
xor eax, eax
add rsp, 0x278
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret