If you care, run an API spy on the EXE - I release it as an EXE because that's what Satoshi does, and the installer is in fact identical except for including x64 headers.

As a previous poster mentioned, if you give a toss, extract the binaries yourself, although I think if you're trying to imply I'm using the installer a springboard for something nefarious you're clearly off your trolley, any genuinely malicious person would put their code in the BitCoin EXE, not the installer.