Function at 0x402004
Capabilities:
Get file size
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x44f0]
mov eax, 0x4574
call fcn.00405a00
mov eax, dword [0x40806c]
xor eax, ebp
mov dword [ebp + 0x44ec], eax
push ebx
push esi
push edi
push 0x104
mov esi, 0x40bdc0
xor ebx, ebx
push esi
push ebx
mov dword [ebp + 0x78], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push ebx
push ebx
push 3
push ebx
push 1
push 0x80000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
lea ecx, [ebp + 0x80]
push ecx
push 0x40
lea ecx, [ebp + 0x84]
push ecx
push eax
mov dword [0x40808c], eax
call esi
test eax, eax
je 0x40209a
cmp dword [ebp + 0x80], 0x40
jne 0x40209a
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
push ebx
push ebx
push dword [ebp + 0xc0]
push dword [0x40808c]
call edi
mov dword [ebp + 0x7c], eax
cmp eax, 0xffffffff
jne 0x4020a4
push str.Could_not_read_the_source_SFX.
call fcn.00401038
push ebx
lea eax, [ebp + 0x80]
push eax
push 0xf8
lea eax, [ebp - 0x84]
push eax
push dword [0x40808c]
call esi
test eax, eax
je 0x40209a
cmp dword [ebp + 0x80], 0xf8
jne 0x40209a
cmp dword [ebp - 0x84], 0x4550
jne 0x40209a
mov eax, pe_nt_image_headers32
cmp word [ebp - 0x70], ax
jne 0x40209a
xor eax, eax
mov dword [ebp + 0x74], ebx
cmp ax, word [ebp - 0x7e]
jae 0x40213a
push ebx
lea eax, [ebp + 0x80]
push eax
push 0x28
lea eax, [ebp + 0xc4]
push eax
push dword [0x40808c]
call esi
test eax, eax
je 0x40209a
cmp dword [ebp + 0x80], 0x28
jne 0x40209a
mov eax, dword [ebp + 0xd4]
mov ecx, dword [ebp + 0xd8]
add eax, ecx
cmp dword [ebp + 0x7c], eax
jae 0x40212e
mov dword [ebp + 0x7c], eax
movzx eax, word [ebp - 0x7e]
inc dword [ebp + 0x74]
cmp dword [ebp + 0x74], eax
jl 0x4020f2
push ebx
push ebx
push dword [ebp + 0x7c]
push dword [0x40808c]
call edi
mov dword [ebp + 0x7c], eax
cmp eax, 0xffffffff
je 0x40209a
push ebx
lea eax, [ebp + 0x80]
push eax
push 0x3fff
lea eax, [ebp + 0xec]
push eax
push dword [0x40808c]
call esi
test eax, eax
je 0x40209a
mov eax, dword [ebp + 0x80]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.Unnamed_Archive
push 0x4084b8
mov byte [ebp + eax + 0xec], bl
call edi
cmp dword [ebp + 0x80], 4
jb 0x4023b1
mov esi, 0x4065fc
mov edi, dword [ebp + 0x78]
push 4
lea edi, [ebp + edi + 0xec]
push 0x4065f4
push edi
call fcn.004018ba
add esp, 0xc
test eax, eax
je 0x4023ab
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp + 0x78]
lea eax, [ecx + eax + 1]
mov dword [ebp + 0x78], eax
lea eax, [ebp + 0x40ec]
push eax
push ebx
push esi
push edi
call fcn.0040112c
add esp, 0x10
cmp byte [eax], bl
je 0x402399
push str.Delete
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40221c
movsx eax, byte [edi + 7]
and eax, 0xf
mov dword [0x40b3d8], eax
jmp 0x402399
push str.NoGUI
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x402243
movsx eax, byte [edi + 6]
and eax, 0xf
mov dword [0x40b3c4], eax
jmp 0x402399
push str.Debug
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40226a
movsx eax, byte [edi + 6]
and eax, 0xf
mov dword [0x40b3cc], eax
jmp 0x402399
push str.Name
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40228a
push 0x4084b8
jmp 0x40234d
push str.Exec
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4022aa
push 0x4085b8
jmp 0x40234d
push str.DefaultPath
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4022ca
push 0x40bb40
jmp 0x40234d
push str.Intro
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x4022e7
push 0x40b720
jmp 0x40234d
push str.AutoExtract
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40230e
movsx eax, byte [edi + 0xc]
and eax, 0xf
mov dword [0x4084b4], eax
jmp 0x402399
push str.OpenFolder
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x402332
movsx eax, byte [edi + 0xb]
and eax, 0xf
mov dword [0x4086bc], eax
jmp 0x402399
push 0x40659c
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x40235b
push 0x4086c0
push 1
push esi
push edi
call fcn.0040112c
add esp, 0x10
jmp 0x402399
push str.Shortcut
lea eax, [ebp + 0x40ec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x402399
lea eax, [ebp + 0x40ec]
push eax
push 1
push esi
push edi
call fcn.0040112c
add esp, 0x10
lea eax, [ebp + 0x40ec]
push eax
push ebx
push ebx
push dword [0x408088]
call dword [sym.imp.USER32.dll_AppendMenuA]
mov eax, dword [ebp + 0x78]
add eax, 4
cmp eax, dword [ebp + 0x80]
jbe 0x4021a8
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp + 0x78]
lea ecx, [eax + 4]
cmp ecx, dword [ebp + 0x80]
jbe 0x4023c9
push str.Could_not_get_file_info._This_archive_is_likely_corrupted.
jmp 0x40209f
mov ecx, dword [ebp + 0x7c]
push ebx
push dword [0x40808c]
add eax, ecx
mov dword [0x40b3d0], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
sub eax, dword [0x40b3d0]
mov dword [0x40b3d4], eax
cmp byte [0x40bb40], bl
jne 0x402417
cmp dword [0x4084b4], 1
jne 0x40240b
push str._temp_
mov esi, 0x40bb40
push esi
call edi
jmp 0x40241c
push str._curdir_
push 0x40bb40
call edi
mov esi, 0x40bb40
call fcn.00401fa6
push 0x104
push esi
call fcn.004012bb
push esi
call fcn.004018e6
add esp, 0xc
push esi
mov esi, 0x40bc60
push esi
call edi
cmp dword [0x4084b4], 1
jne 0x402464
push 0x4064d0
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push esi
call fcn.0040175c
pop ecx
mov dword [section..data], 3
mov ecx, dword [ebp + 0x44ec]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004059e5
add ebp, 0x44f0
leave
ret