Function at 0x4040b6
Capabilities:
Accept command line arguments
Copy file
Delete file
Get common file path
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], 0x4091e0
xor ebx, ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x42a400
mov edi, 0x400
push esi
push edi
mov dword [0x423f48], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.00404082
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
test eax, eax
jne 0x404120
push 0x3fb
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.Temp
push esi
call ebp
call fcn.00404082
test eax, eax
je 0x404275
mov esi, 0x4236c0
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.NSIS_Error
push esi
call fcn.00406a65
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, 0x429000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x429000], 0x22
mov dword [0x423ec0], eax
jne 0x40416b
mov byte [esp + 0x14], 0x22
mov esi, 0x429001
push dword [esp + 0x14]
push esi
call fcn.00406587
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov edi, eax
mov dword [esp + 0x18], edi
mov cl, byte [eax]
test cl, cl
je 0x4041fd
cmp cl, 0x20
jne 0x404193
inc eax
cmp byte [eax], 0x20
je 0x40418d
cmp byte [eax], 0x22
mov byte [esp + 0x14], 0x20
jne 0x4041a3
inc eax
mov byte [esp + 0x14], 0x22
cmp byte [eax], 0x2f
jne 0x4041d9
inc eax
cmp byte [eax], 0x53
jne 0x4041bc
mov cl, byte [eax + 1]
or cl, 0x20
cmp cl, 0x20
jne 0x4041bc
or ebx, 2
cmp dword [eax], 0x4352434e
jne 0x4041d2
mov cl, byte [eax + 4]
or cl, 0x20
cmp cl, 0x20
jne 0x4041d2
or ebx, 4
cmp word [eax], 0x3d44
je 0x4041eb
push dword [esp + 0x14]
push eax
call fcn.00406587
cmp byte [eax], 0x22
jne 0x404182
inc eax
jmp 0x404182
and byte [eax - 1], 0
add eax, 2
push eax
push 0x429400
call fcn.00406a65
push ebx
call fcn.004039f9
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], eax
jne 0x404275
cmp dword [0x423ed8], ebx
je 0x40426c
push ebx
push edi
call fcn.00406587
mov esi, eax
cmp esi, edi
jb 0x404236
cmp byte [esi], 0x5f
jne 0x404233
cmp byte [esi + 1], 0x3f
jne 0x404233
cmp byte [esi + 2], 0x3d
je 0x404236
dec esi
jmp 0x40421e
cmp esi, edi
mov dword [esp + 0x10], 0x40920c
jb 0x4042a9
and byte [esi], 0
add esi, 3
push esi
call fcn.00406646
test eax, eax
je 0x404275
push esi
push 0x429400
call fcn.00406a65
push esi
push 0x429800
call fcn.00406a65
mov dword [esp + 0x10], ebx
call fcn.004043d9
mov dword [esp + 0x18], eax
call fcn.0040439c
cmp dword [esp + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
je 0x404293
push 0x100010
push dword [esp + 4]
call fcn.00406497
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x14], ebx
mov edi, 0x41f8a1
mov esi, 0x41f8a0
mov ebx, 0x41f4a0
push 0x42a400
push edi
mov byte [0x41f8a0], 0x22
call fcn.00406a65
push str.ANSISu_.exe
push esi
call ebp
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], 0
je 0x404382
push 0x400
push ebx
push dword [0x423ec0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [eax + 0x41f495]
push 0x409235
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x404275
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x404382
push 0
push edi
call fcn.004067a1
cmp byte [0x429400], 0
je 0x404340
push 0x429400
push ebx
call fcn.00406a65
jmp 0x404346
push ebx
call fcn.004065a3
push 0x40924c
push esi
call ebp
push dword [esp + 0x18]
push esi
call ebp
push str.___
push esi
call ebp
push ebx
push esi
call ebp
push esi
call fcn.0040655b
push 0x42a400
push esi
call fcn.00406410
test eax, eax
je 0x404382
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esp + 0x10], 0
inc byte [str.ANSISu_.exe]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1a
jl 0x4042bc
jmp 0x404275