Function at 0x403630
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
push esi
xor esi, esi
push edi
mov dword [ebp - 4], esi
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x400
mov edi, 0x438800
push edi
add eax, 0x3e8
push esi
mov dword [0x42a5c4], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 3
push 0x80000000
push edi
call fcn.004060fa
mov ebx, eax
cmp ebx, 0xffffffff
mov dword [ebp - 0xc], ebx
mov dword [0x40b010], ebx
jne 0x40368d
mov eax, str.Error_launching_installer
jmp 0x40394e
push edi
mov esi, 0x436800
push esi
call fcn.00406460
push esi
call fcn.00406780
push eax
push 0x439000
call fcn.00406460
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
test eax, eax
mov dword [0x4219c0], eax
mov ebx, eax
jbe 0x4037c8
mov esi, dword [0x42a5d4]
neg esi
sbb esi, esi
and esi, 0x7e00
add esi, 0x200
cmp ebx, esi
jae 0x4036de
mov esi, ebx
push esi
push 0x419970
call fcn.004031a9
test eax, eax
je 0x403955
cmp dword [0x42a5d4], 0
jne 0x403793
push 0x24
push 0x419970
lea eax, [ebp - 0x30]
push eax
call fcn.004060b0
test dword [ebp - 0x30], 0xfffffe00
jne 0x4037a1
cmp dword [ebp - 0x2c], 0xdeadbeef
jne 0x4037a1
cmp dword [ebp - 0x20], 0x74736e49
jne 0x4037a1
cmp dword [ebp - 0x24], 0x74666f73
jne 0x4037a1
cmp dword [ebp - 0x28], 0x6c6c754e
jne 0x4037a1
mov edx, dword [ebp + 8]
or edx, dword [ebp - 0x30]
mov eax, dword [0x41996c]
mov ecx, edx
and ecx, 2
or dword [0x42a640], ecx
mov ecx, dword [ebp - 0x18]
cmp ecx, ebx
mov dword [0x42a5d4], eax
mov dword [ebp + 8], edx
ja 0x40395d
test dl, 8
jne 0x403772
test dl, 4
jne 0x4037c8
inc dword [0x4219c4]
push 0x24
pop ebx
lea eax, [eax + ecx - 0x28]
mov dword [0x41996c], eax
add eax, 0x20
push 0
push eax
mov esi, ebx
call fcn.0040321c
jmp 0x4037a1
test byte [ebp + 8], 2
jne 0x4037a1
push 0
call fcn.00403145
pop ecx
cmp ebx, dword [0x4219c0]
jae 0x4037ba
push esi
push 0x419970
push dword [ebp - 4]
call fcn.00406e5b
mov dword [ebp - 4], eax
add dword [0x41996c], esi
sub ebx, esi
jne 0x4036c2
test byte [ebp - 0x30], 1
je 0x4037d4
inc dword [0x42a5c8]
test byte [ebp - 0x30], 0x80
je 0x4037e0
inc dword [0x42a5cc]
test word [ebp - 0x30], 0x100
je 0x4037ee
inc dword [0x42a5c0]
cmp dword [0x42a5cc], 0
je 0x403866
cmp dword [0x42a5c8], 0
jne 0x403866
push edi
lea eax, [ebp - 0x238]
push eax
call fcn.00406460
lea eax, [ebp - 0x238]
push eax
call fcn.004067ac
push eax
lea eax, [ebp - 0x238]
push eax
call fcn.00406460
lea eax, [ebp - 0x238]
push eax
push 0x4092cc
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 3
push 0x80000000
lea eax, [ebp - 0x238]
push eax
call fcn.004060fa
cmp eax, 0xffffffff
mov dword [0x40b014], eax
jne 0x403866
cmp dword [0x42a5c0], 0
je 0x40395d
push 1
call fcn.00403145
xor ebx, ebx
cmp dword [0x42a5d4], ebx
pop ecx
je 0x40395d
cmp dword [0x4219c4], ebx
je 0x4038d2
mov eax, dword [0x41996c]
add eax, 0xfffffffc
push ebx
push eax
call fcn.0040321c
push 4
lea eax, [ebp - 8]
push eax
call fcn.004031a9
test eax, eax
je 0x40395d
push 4
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.00406e5b
mov esi, eax
push 4
lea eax, [ebp + 8]
push eax
call fcn.004031a9
test eax, eax
je 0x40395d
cmp esi, dword [ebp + 8]
jne 0x40395d
push dword [ebp - 0x1c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov eax, dword [0x42a5d4]
add eax, 0x24
push eax
call fcn.00403205
push dword [ebp - 8]
push dword [ebp - 0x1c]
push esi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 1
call fcn.004032d8
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edi, edx
cdq
cmp ecx, eax
jne 0x40395d
cmp edi, edx
jne 0x40395d
mov dword [0x42a56c], esi
mov eax, dword [esi]
push 8
mov dword [0x42a5d0], eax
pop ecx
lea eax, [esi + 0x44]
sub eax, 8
add dword [eax], esi
dec ecx
cmp ecx, ebx
jne 0x403923
push 1
push ebx
push ebx
push dword [ebp - 0xc]
call fcn.004031bf
mov dword [esi + 0x3c], eax
push 0x40
add esi, 4
push esi
push 0x42a580
call fcn.004060b0
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4
push 1
call fcn.00403145
pop ecx
mov eax, str.Installer_integrity_check_has_failed._Common_causes_include_nincomplete_download_and_damaged_media._Contact_the_ninstallers_author_to_obtain_a_new_copy._n_nMore_information_at:_nhttp:__nsis.sf.net_NSIS_Error
jmp 0x40394e