Function at 0x404b4f
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x238
mov eax, dword [0x42600c]
xor eax, esp
mov dword [esp + 0x234], eax
push ebx
push esi
xor ebx, ebx
push 6
mov eax, ebx
push ebx
mov dword [esp + 0x18], eax
call dword [sym.imp.ole32.dll_CoInitializeEx]
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 8
push eax
mov dword [esp + 0x28], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
sub esp, 0xc
call fcn.00405fa6
test eax, eax
jns 0x404bb7
push 0x10
push ebx
push str.Initialization_failed.
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x404e45
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
cmp dword [esp + 0x18], 2
mov esi, eax
je 0x404bd9
cmp dword [esp + 0x18], 3
jne 0x404c01
push 0x422510
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x404c01
cmp dword [esp + 0x18], 3
jne 0x404bf5
mov ebx, dword [esi + 8]
mov ecx, ebx
call fcn.00404aa6
jmp 0x404e45
lea ecx, [esp + 0x1c]
call fcn.00401df6
push 0x50
lea eax, [esp + 0x1ec]
push ebx
push eax
call fcn.0040a160
add esp, 0xc
lea eax, [esp + 0x1e8]
push eax
push ebx
push ebx
push str.2505C53F_2C1A_4770_B052_6EEA31F5C59A
call dword [sym.imp.msi.dll_MsiSourceListClearAllW]
test eax, eax
jne 0x404c7d
push str.InstallLocation
lea ecx, [esp + 0x10]
call fcn.00401c80
lea eax, [esp + 0x1e8]
push eax
lea ecx, [esp + 0x18]
call fcn.00401c80
push 3
pop eax
mov dword [esp + 0x10], eax
lea edx, [esp + 0xc]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
call fcn.0040159e
pop ecx
test al, al
je 0x404c7d
push 3
mov byte [esp + 0xf], 1
pop eax
jmp 0x404c85
mov eax, dword [esp + 0x10]
mov byte [esp + 0xb], bl
test al, 2
je 0x404c9d
and eax, 0xfffffffd
lea ecx, [esp + 0x14]
mov dword [esp + 0x10], eax
call fcn.004020ac
mov eax, dword [esp + 0x10]
test al, 1
je 0x404caa
lea ecx, [esp + 0xc]
call fcn.004020ac
cmp byte [esp + 0xb], bl
je 0x404d4a
cmp dword [esp + 0x18], 2
jne 0x404cda
push 0x422588
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x404cda
push 1
call fcn.00404600
pop ecx
jmp 0x404e37
push ebx
lea ecx, [esp + 0x2c]
call fcn.00403ec5
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [esp + 0x30]
call fcn.00404e5d
cmp eax, 2
je 0x404e2e
push ebx
call fcn.00404600
pop ecx
test al, al
je 0x404e2e
push str.Installation_succeeded.
lea ecx, [esp + 0x10]
call fcn.00401c80
push ebx
lea eax, [esp + 0x10]
push eax
push 0x6e
pop edx
lea ecx, [esp + 0x1c]
call fcn.00401240
pop ecx
xor edx, edx
mov ecx, eax
call fcn.004012ff
pop ecx
lea ecx, [esp + 0x14]
call fcn.004020ac
lea ecx, [esp + 0xc]
jmp 0x404e29
push 1
call fcn.00404600
pop ecx
push 1
lea ecx, [esp + 0x2c]
call fcn.00403ec5
push ecx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [esp + 0x30]
call fcn.00404e5d
cmp eax, 6
jne 0x404e2e
push str.OutlookFreeware_Utility_Manager_is_not_installed_on_this_machine__it_is_required_to_install_and_run_this_utility._n_nYou_will_be_redirected_to_OutlookFreeware_Utility_Manager_download_page_now.
lea ecx, [esp + 0x10]
call fcn.00401c80
push 0x65
lea eax, [esp + 0x10]
push eax
push 0x6a
pop edx
lea ecx, [esp + 0x18]
call fcn.00401240
pop ecx
xor edx, edx
mov ecx, eax
call fcn.004012ff
pop ecx
lea ecx, [esp + 0x10]
call fcn.004020ac
lea ecx, [esp + 0xc]
call fcn.004020ac
push 0x422204
lea ecx, [esp + 0x10]
call fcn.00401c80
push str._runtime.aspx_srcss
lea eax, [esp + 0x10]
push eax
push 0x74
pop edx
lea ecx, [esp + 0x28]
call fcn.00401240
pop ecx
push eax
mov edx, str.https:__www.outlookfreeware.com_
lea ecx, [esp + 0x18]
call fcn.00404ee2
pop ecx
mov edx, eax
lea ecx, [esp + 0x18]
call fcn.0040184e
pop ecx
lea ecx, [esp + 0x10]
call fcn.004020ac
lea ecx, [esp + 0x20]
call fcn.004020ac
lea ecx, [esp + 0xc]
call fcn.004020ac
push 1
push ebx
push ebx
push dword [esp + 0x20]
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x14]
call fcn.004020ac
lea ecx, [esp + 0x28]
call fcn.004040a0
call fcn.00405e64
lea ecx, [esp + 0x1c]
call fcn.004020ac
mov ecx, dword [esp + 0x23c]
xor eax, eax
pop esi
pop ebx
xor ecx, esp
call fcn.00408808
mov esp, ebp
pop ebp
ret 0x10