Function at 0x404490
Capabilities:
Get file size

Disassembly:
sub esp, 0x230
push ebx
push esi
push edi
xor ebx, ebx
mov dword [0x413168], 0
xor edi, edi
mov dword [0x41316c], 0
mov dword [0x413170], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], edi
mov dword [0x413178], ebx
mov dword [esp + 0x14], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x800
push 0x456000
add eax, 0xfa0
push edi
mov dword [0x413180], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 3
push 0x80000000
push 0x456000
call fcn.004082a0
mov esi, eax
mov dword [0x40e010], esi
cmp esi, 0xffffffff
jne 0x40451d
pop edi
pop esi
mov eax, str.Error_launching_installer
pop ebx
add esp, 0x230
ret 4
push ebp
push 0x456000
push 0x452000
call fcn.00408510
push 0x452000
call fcn.004086f0
push eax
push 0x457000
call fcn.00408510
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, dword [esp + 0x34]
mov esi, eax
mov dword [0x427198], esi
test esi, esi
jle 0x4046d0
mov ebx, dword [esp + 0x244]
cmp dword [0x43953c], 0
mov eax, 0x8000
mov edi, 0x200
cmovne edi, eax
cmp esi, edi
cmovl edi, esi
push edi
push 0x413188
push dword [0x40e010]
call fcn.004082d0
test eax, eax
je 0x404794
cmp dword [0x43953c], 0
jne 0x40468e
movdqu xmm1, xmmword [0x413188]
mov ebp, dword [0x4131a0]
movq xmm0, qword [0x413198]
movd ecx, xmm1
movdqu xmmword [esp + 0x1c], xmm1
movq qword [esp + 0x2c], xmm0
test ecx, 0xfffffff0
jne 0x40469d
cmp dword [0x41318c], 0xdeadbeef
jne 0x40469d
cmp dword [0x413198], 0x74736e49
jne 0x40469d
cmp dword [0x413194], 0x74666f73
jne 0x40469d
cmp dword [0x413190], 0x6c6c754e
jne 0x40469d
cmp byte [0x4131a4], 1
mov eax, dword [0x42719c]
mov dword [0x43953c], eax
jne 0x404660
cmp byte [0x4131a5], 0x5d
jne 0x404660
cmp byte [0x4131a6], 0
jne 0x404660
cmp byte [0x4131a7], 0
jne 0x404660
cmp byte [0x4131aa], 0
jne 0x404660
mov dword [esp + 0x18], 1
mov dword [0x41317c], 1
or ebx, ecx
mov eax, ebx
and eax, 2
or dword [0x439620], eax
cmp ebp, esi
jg 0x4047ae
test bl, 8
jne 0x40467f
test bl, 4
jne 0x4046c8
inc dword [esp + 0x14]
lea esi, [ebp - 4]
cmp edi, esi
jbe 0x40469d
mov edi, esi
jmp 0x40469d
test bl, 2
jne 0x40469d
push 0
call fcn.004043d0
add esp, 4
cmp esi, dword [0x427198]
jge 0x4046b8
push edi
push 0x413188
push dword [esp + 0x18]
call fcn.00408d90
mov dword [esp + 0x10], eax
add dword [0x42719c], edi
sub esi, edi
test esi, esi
jg 0x404566
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov eax, dword [0x4271a0]
test eax, eax
je 0x4046e0
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [0x43953c], 0
mov dword [0x4271a0], 0
je 0x4047ae
test edi, edi
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
je 0x404733
push 0
push 0
push dword [0x42719c]
push dword [0x40e010]
call edi
push 4
lea eax, [esp + 0x14]
push eax
push dword [0x40e010]
call fcn.004082d0
test eax, eax
je 0x4047ae
cmp ebx, dword [esp + 0x10]
jne 0x4047ae
mov ebx, dword [esp + 0x30]
push ebx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, 0x4271a8
mov esi, eax
call fcn.00409e70
push 0x454000
lea eax, [esp + 0x3c]
push eax
call fcn.00408400
push 0
push 0x4000100
push 2
push 0
push 0
push 0xc0000000
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x40e014], eax
cmp eax, 0xffffffff
jne 0x4047c0
pop ebp
pop edi
pop esi
mov eax, str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
pop ebx
add esp, 0x230
ret 4
mov eax, dword [0x4271a0]
test eax, eax
je 0x4047a4
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [0x4271a0], 0
pop ebp
pop edi
pop esi
mov eax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
pop ebx
add esp, 0x230
ret 4
cmp dword [0x41317c], 0
je 0x4047d6
push 0x439520
call fcn.00408ab0
add esp, 4
mov ecx, dword [esp + 0x18]
mov eax, dword [0x43953c]
add ecx, 0x1c
push 0
push 0
add eax, ecx
push eax
push dword [0x40e010]
call edi
mov ecx, dword [esp + 0x1c]
mov dword [0x427190], eax
not ecx
and ecx, 4
sub eax, ecx
sub eax, dword [esp + 0x18]
push ebx
push esi
add eax, 0xffffffe4
push 0
add eax, ebp
push 0xffffffffffffffff
mov dword [0x427194], eax
call fcn.00404230
cmp eax, ebx
jne 0x4047ae
test byte [esp + 0x1c], 1
mov dword [0x439544], esi
mov eax, dword [esi]
mov dword [0x439540], eax
je 0x404838
inc dword [0x439538]
mov ecx, 8
lea eax, [esi + 0x44]
add dword [eax - 8], esi
lea eax, [eax - 8]
dec ecx
jne 0x404840
mov eax, dword [0x42718c]
mov dword [esi + 0x3c], eax
movdqu xmm0, xmmword [esi + 4]
movdqu xmmword [0x439560], xmm0
movdqu xmm0, xmmword [esi + 0x14]
movdqu xmmword [0x439570], xmm0
movdqu xmm0, xmmword [esi + 0x24]
movdqu xmmword [0x439580], xmm0
movdqu xmm0, xmmword [esi + 0x34]
mov dword [0x413168], ecx
movdqu xmmword [0x439590], xmm0
call fcn.00403dc0
mov edi, dword [0x439574]
mov ebx, eax
test edi, edi
jle 0x40490b
mov ebp, dword [0x439570]
xor esi, esi
mov ecx, dword [0x413168]
lea ebx, [ebx]
mov eax, dword [esi + ebp]
sub eax, 0xc9
je 0x4048db
dec eax
jne 0x404905
mov eax, dword [esi + ebp + 4]
mov dword [0x413174], 0
test eax, eax
je 0x404905
mov dword [0x413174], 1
jmp 0x404905
mov edx, dword [esi + ebp + 4]
mov eax, dword [esi + ebp + 8]
test edx, edx
jne 0x4048ef
add ecx, eax
mov dword [0x413168], ecx
test ebx, ebx
je 0x4048f8
cmp edx, 2
jmp 0x4048fb
cmp edx, 1
jne 0x404905
add ecx, eax
mov dword [0x413168], ecx
add esi, 0x1c
dec edi
jne 0x4048b0
pop ebp
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x230
ret 4