Function at 0x140003d68
Capabilities:
Get file size

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x290
mov rax, qword [0x14000d188]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov esi, ecx
xor r15d, r15d
xor r14d, r14d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rdi, [0x1400e6000]
mov r8d, 0x2000
add eax, 0x3e8
mov rdx, rdi
xor ecx, ecx
mov dword [0x140078d40], eax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edx, 0x80000000
lea r8d, [r15 + 3]
mov rcx, rdi
call fcn.140007ebc
mov qword [0x14000d020], rax
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140003df9
lea rax, str.Error_launching_installer
jmp 0x140004054
mov rdx, rdi
lea rcx, [0x1400d6000]
call fcn.140008170
lea rcx, [0x1400d6000]
call fcn.140008334
mov rdx, rax
lea rcx, [0x1400ea000]
call fcn.140008170
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [0x140021230], eax
mov edi, eax
test eax, eax
je 0x140003f42
mov ecx, dword [0x140078d48]
lea rdx, [0x14002ae30]
neg ecx
mov rcx, qword [0x14000d020]
sbb ebx, ebx
and ebx, 0x7e00
add ebx, 0x200
cmp edi, ebx
cmovb ebx, edi
mov r8d, ebx
call fcn.140007f10
test eax, eax
je 0x140004043
cmp dword [0x140078d48], 0
jne 0x140003f0a
mov r8d, 0x1c
lea rdx, [0x14002ae30]
lea rcx, [rsp + 0x48]
call fcn.14000982c
test dword [rsp + 0x48], 0xfffffff0
jne 0x140003f17
cmp dword [rsp + 0x4c], 0xdeadbeef
jne 0x140003f17
cmp dword [rsp + 0x58], 0x74736e49
jne 0x140003f17
cmp dword [rsp + 0x54], 0x74666f73
jne 0x140003f17
cmp dword [rsp + 0x50], 0x6c6c754e
jne 0x140003f17
mov eax, dword [0x140021234]
or esi, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x60]
mov dword [0x140078d48], eax
mov eax, esi
and eax, 2
or dword [0x140078e40], eax
cmp ecx, edi
ja 0x14000404d
mov eax, esi
and al, 0xc
cmp al, 4
je 0x140003f42
inc r14d
lea edi, [rcx - 4]
cmp ebx, edi
jbe 0x140003f17
mov ebx, edi
jmp 0x140003f17
test sil, 2
jne 0x140003f17
xor ecx, ecx
call fcn.140003c5c
cmp edi, dword [0x140021230]
jae 0x140003f34
mov r8d, ebx
lea rdx, [0x14002ae30]
mov ecx, r15d
call fcn.1400084b4
mov r15d, eax
add dword [0x140021234], ebx
sub edi, ebx
jne 0x140003e3e
mov ecx, 1
call fcn.140003c5c
cmp dword [0x140078d48], 0
je 0x14000404d
test r14d, r14d
je 0x140003fa1
mov edx, dword [0x140021234]
xor r9d, r9d
mov rcx, qword [0x14000d020]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov rcx, qword [0x14000d020]
lea rdx, [rsp + 0x40]
mov r8d, 4
call fcn.140007f10
test eax, eax
je 0x14000404d
cmp r15d, dword [rsp + 0x40]
jne 0x14000404d
movsxd rdx, dword [rsp + 0x5c]
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
and dword [0x140021788], 0
lea rdx, [0x1400de000]
and dword [0x140021784], 0
lea rcx, [rsp + 0x70]
mov rbx, rax
mov edi, 8
lea rax, [0x140022e0c]
mov dword [0x140021260], edi
mov qword [0x14002ae20], rax
mov qword [0x14002ae18], rax
lea rax, [0x14002ae0c]
mov qword [0x14002ae10], rax
call fcn.140008054
and qword [rsp + 0x30], 0
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x28], 0x4000100
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 2
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [0x14000d028], rax
cmp rax, 0xffffffffffffffff
jne 0x140004080
lea rax, str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
jmp 0x140004054
mov ecx, 1
call fcn.140003c5c
lea rax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1400098e0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
mov edx, dword [0x140078d48]
xor r9d, r9d
mov rcx, qword [0x14000d020]
add edx, 0x1c
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [rsp + 0x48]
mov r8, rbx
mov r9d, dword [rsp + 0x5c]
not edx
and edx, 4
mov dword [0x140021228], eax
sub eax, edx
or ecx, 0xffffffff
mov edx, dword [rsp + 0x60]
add edx, 0xffffffe4
add eax, edx
xor edx, edx
mov dword [0x14002122c], eax
call fcn.140003b08
cmp eax, dword [rsp + 0x5c]
jne 0x14000404d
test byte [rsp + 0x48], 1
mov qword [0x140078d50], rbx
mov eax, dword [rbx]
mov dword [0x140078d4c], eax
je 0x1400040f4
inc dword [0x140078d44]
lea rax, [rbx + 0x64]
lea rax, [rax - 0xc]
add qword [rax], rbx
add edi, 0xffffffff
jne 0x1400040f8
movsxd rax, dword [0x140021224]
lea rdx, [rbx + 4]
lea r8d, [rdi + 0x60]
mov qword [rbx + 0x58], rax
lea rcx, [0x140078d60]
call fcn.14000982c
xor eax, eax
jmp 0x140004054