Function at 0x40302e
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x400
mov esi, 0x42ac00
push esi
add eax, 0x3e8
push ebx
mov dword [0x423c20], eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 3
push 0x80000000
push esi
call fcn.00405610
mov edi, eax
cmp edi, 0xffffffff
mov dword [0x409010], edi
jne 0x403088
mov eax, str.Error_executing_installer
jmp 0x4032c2
push esi
mov esi, 0x429c00
push esi
call fcn.004057a0
push esi
call fcn.0040591a
push eax
push 0x42b000
call fcn.004057a0
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
cmp eax, ebx
mov dword [0x41ad78], eax
mov esi, eax
jle 0x4031a3
mov ebx, 0x40acf0
mov eax, dword [0x423c2c]
neg eax
sbb eax, eax
and eax, reloc.USER32.dll_wsprintfA
add eax, 0x200
cmp esi, eax
mov edi, esi
jl 0x4030dc
mov edi, eax
push edi
push ebx
call fcn.00402d3c
test eax, eax
je 0x403236
cmp dword [0x423c2c], 0
jne 0x40316e
push 0x1c
push ebx
lea eax, [ebp - 0x24]
push eax
call fcn.004055cc
mov eax, dword [ebp - 0x24]
test eax, 0xfffffff0
jne 0x40317c
cmp dword [ebp - 0x20], 0xdeadbeef
jne 0x40317c
cmp dword [ebp - 0x14], 0x74736e49
jne 0x40317c
cmp dword [ebp - 0x18], 0x74666f73
jne 0x40317c
cmp dword [ebp - 0x1c], 0x6c6c754e
jne 0x40317c
or dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x40acec]
and eax, 2
or dword [0x423ca0], eax
mov eax, dword [ebp - 0xc]
cmp eax, esi
mov dword [0x423c2c], ecx
jg 0x40323e
test byte [ebp + 8], 8
jne 0x403160
test byte [ebp + 8], 4
jne 0x4031a1
inc dword [ebp - 8]
lea esi, [eax - 4]
cmp edi, esi
jbe 0x40317c
mov edi, esi
jmp 0x40317c
test byte [ebp + 8], 2
jne 0x40317c
push 0
call fcn.00402c9d
pop ecx
cmp esi, dword [0x41ad78]
jge 0x403191
push edi
push ebx
push dword [ebp - 4]
call fcn.00405fd4
mov dword [ebp - 4], eax
add dword [0x40acec], edi
sub esi, edi
test esi, esi
jg 0x4030c1
xor ebx, ebx
push 1
call fcn.00402c9d
cmp dword [0x423c2c], ebx
pop ecx
je 0x40323e
cmp dword [ebp - 8], ebx
je 0x4031de
push dword [0x40acec]
call fcn.00402d6e
push 4
lea eax, [ebp + 8]
push eax
call fcn.00402d3c
test eax, eax
je 0x40323e
mov eax, dword [ebp - 4]
cmp eax, dword [ebp + 8]
jne 0x40323e
push dword [ebp - 0x10]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, 0x412cf0
mov esi, eax
call fcn.00406042
push 0x42a400
lea eax, [ebp - 0x128]
push eax
call fcn.0040563f
push ebx
push 0x4000100
push 2
push ebx
push ebx
push 0xc0000000
lea eax, [ebp - 0x128]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [0x409014], eax
jne 0x403245
mov eax, str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
jmp 0x4032c2
push 1
call fcn.00402c9d
pop ecx
mov eax, str.Invalid_CRC_n
jmp 0x4032c2
mov eax, dword [0x423c2c]
add eax, 0x1c
push eax
call fcn.00402d6e
mov ecx, dword [ebp - 0x24]
push dword [ebp - 0x10]
not ecx
and ecx, 4
mov dword [0x41ed84], eax
sub eax, ecx
mov ecx, dword [ebp - 0xc]
push esi
push ebx
lea eax, [eax + ecx - 0x1c]
push 0xffffffffffffffff
mov dword [0x41ed80], eax
call fcn.00402f03
cmp eax, dword [ebp - 0x10]
jne 0x40323e
test byte [ebp - 0x24], 1
mov dword [0x423bcc], esi
mov eax, dword [esi]
mov dword [0x423c28], eax
je 0x403298
inc dword [0x423c24]
push 8
pop ecx
lea eax, [esi + 0x44]
sub eax, 8
add dword [eax], esi
dec ecx
cmp ecx, ebx
jne 0x40329e
mov eax, dword [0x41ad7c]
mov dword [esi + 0x3c], eax
push 0x40
add esi, 4
push esi
push 0x423be0
call fcn.004055cc
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4