Function at 0x403648
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 4], esi
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x400
mov edi, 0x438800
push edi
add eax, 0x3e8
push esi
mov dword [0x42a5e4], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 3
push 0x80000000
push edi
call fcn.00406112
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [ebp - 0xc], ebx
mov dword [0x40b010], ebx
jne 0x4036a5
mov eax, str.Error_launching_installer
jmp 0x403966
push edi
mov esi, 0x436800
push esi
call fcn.00406478
push esi
call fcn.00406798
push eax
push 0x439000
call fcn.00406478
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
test eax, eax
mov dword [0x4219c8], eax
mov ebx, eax
jbe 0x4037e0
mov esi, dword [0x42a5f4]
neg esi
sbb esi, esi
and esi, 0x7e00
add esi, 0x200
cmp ebx, esi
jae 0x4036f6
mov esi, ebx
push esi
push 0x419978
call fcn.004031c1
test eax, eax
je 0x40396d
cmp dword [0x42a5f4], 0
jne 0x4037ab
push 0x24
push 0x419978
lea eax, [ebp - 0x30]
push eax
call fcn.004060c8
test dword [ebp - 0x30], 0xfffffe00
jne 0x4037b9
cmp dword [ebp - 0x2c], 0xdeadbeef
jne 0x4037b9
cmp dword [ebp - 0x20], 0x74736e49
jne 0x4037b9
cmp dword [ebp - 0x24], 0x74666f73
jne 0x4037b9
cmp dword [ebp - 0x28], 0x6c6c754e
jne 0x4037b9
mov edx, dword [ebp + 8]
or edx, dword [ebp - 0x30]
mov eax, dword [0x419974]
mov ecx, edx
and ecx, 2
or dword [0x42a660], ecx
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
mov dword [0x42a5f4], eax
mov dword [ebp + 8], edx
ja 0x403975
test dl, 8
jne 0x40378a
test dl, 4
jne 0x4037e0
inc dword [0x4219cc]
push 0x24
pop ebx
lea eax, [eax + ecx - 0x28]
mov dword [0x419974], eax
add eax, 0x20
push 0
push eax
mov esi, ebx
call fcn.00403234
jmp 0x4037b9
test byte [ebp + 8], 2
jne 0x4037b9
push 0
call fcn.0040315d
pop ecx
cmp ebx, dword [0x4219c8]
jae 0x4037d2
push esi
push 0x419978
push dword [ebp - 4]
call fcn.00406e73
mov dword [ebp - 4], eax
add dword [0x419974], esi
sub ebx, esi
jne 0x4036da
test byte [ebp - 0x30], 1
je 0x4037ec
inc dword [0x42a5e8]
test byte [ebp - 0x30], 0x80
je 0x4037f8
inc dword [0x42a5ec]
test word [ebp - 0x30], 0x100
je 0x403806
inc dword [0x42a5e0]
cmp dword [0x42a5ec], 0
je 0x40387e
cmp dword [0x42a5e8], 0
jne 0x40387e
push edi
lea eax, [ebp - 0x238]
push eax
call fcn.00406478
lea eax, [ebp - 0x238]
push eax
call fcn.004067c4
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.00406478
lea eax, [ebp - 0x238]
push eax
push 0x4092cc
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 3
push 0x80000000
lea eax, [ebp - 0x238]
push eax
call fcn.00406112
cmp eax, 0xffffffff
mov dword [0x40b014], eax
jne 0x40387e
cmp dword [0x42a5e0], 0
je 0x403975
push 1
call fcn.0040315d
xor ebx, ebx
cmp dword [0x42a5f4], ebx
pop ecx
je 0x403975
cmp dword [0x4219cc], ebx
je 0x4038ea
mov eax, dword [0x419974]
add eax, 0xfffffffc
push ebx
push eax
call fcn.00403234
push 4
lea eax, [ebp - 8]
push eax
call fcn.004031c1
test eax, eax
je 0x403975
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.00406e73
mov esi, eax
push 4
lea eax, [ebp + 8]
push eax
call fcn.004031c1
test eax, eax
je 0x403975
cmp esi, dword [ebp + 8]
jne 0x403975
push dword [ebp - 0x1c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov eax, dword [0x42a5f4]
add eax, 0x24
push eax
call fcn.0040321d
push dword [ebp - 8]
push dword [ebp - 0x1c]
push esi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
call fcn.004032f0
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edi, edx
cdq
cmp ecx, eax
jne 0x403975
cmp edi, edx
jne 0x403975
mov dword [0x42a58c], esi
mov eax, dword [esi]
push 8
mov dword [0x42a5f0], eax
pop ecx
lea eax, [esi + 0x44]
sub eax, 8
add dword [eax], esi
dec ecx
cmp ecx, ebx
jne 0x40393b
push 1
push ebx
push ebx
push dword [ebp - 0xc]
call fcn.004031d7
mov dword [esi + 0x3c], eax
push 0x40
add esi, 4
push esi
push 0x42a5a0
call fcn.004060c8
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4
push 1
call fcn.0040315d
pop ecx
mov eax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
jmp 0x403966