Function at 0x403f88
Capabilities:
Accept command line arguments
Copy file
Delete file
Get common file path
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
xor ebx, ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x435400
mov edi, 0x400
push esi
push edi
mov dword [0x42eca8], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.00403f54
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
test eax, eax
jne 0x403ff2
push 0x3fb
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.Temp
push esi
call ebp
call fcn.00403f54
test eax, eax
je 0x404149
mov esi, 0x42e420
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.NSIS_Error
push esi
call sub.KERNEL32.dll_lstrcpyA
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, 0x434000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x434000], 0x22
mov dword [0x42ec20], eax
jne 0x40403d
mov byte [esp + 0x14], 0x22
mov esi, 0x434001
push dword [esp + 0x14]
push esi
call fcn.004063d1
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov edi, eax
mov dword [esp + 0x18], edi
jmp 0x4040b7
cmp cl, 0x20
jne 0x404061
inc eax
cmp byte [eax], 0x20
je 0x40405b
cmp byte [eax], 0x22
mov byte [esp + 0x14], 0x20
jne 0x404071
inc eax
mov byte [esp + 0x14], 0x22
cmp byte [eax], 0x2f
jne 0x4040a7
inc eax
cmp byte [eax], 0x53
jne 0x40408a
mov cl, byte [eax + 1]
or cl, 0x20
cmp cl, 0x20
jne 0x40408a
or ebx, 2
cmp dword [eax], 0x4352434e
jne 0x4040a0
mov cl, byte [eax + 4]
or cl, 0x20
cmp cl, 0x20
jne 0x4040a0
or ebx, 4
cmp word [eax], 0x3d44
je 0x4040bf
push dword [esp + 0x14]
push eax
call fcn.004063d1
cmp byte [eax], 0x22
jne 0x4040b7
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x404056
jmp 0x4040d1
and byte [eax - 1], 0
add eax, 2
push eax
push 0x434400
call sub.KERNEL32.dll_lstrcpyA
push ebx
call fcn.00403a41
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], eax
jne 0x404149
cmp dword [0x42ec38], ebx
je 0x404140
push ebx
push edi
call fcn.004063d1
mov esi, eax
jmp 0x404106
cmp byte [esi], 0x5f
jne 0x404105
cmp byte [esi + 1], 0x3f
jne 0x404105
cmp byte [esi + 2], 0x3d
je 0x40410a
dec esi
cmp esi, edi
jae 0x4040f4
cmp esi, edi
mov dword [esp + 0x10], str.Error_launching_installer
jb 0x404177
and byte [esi], 0
add esi, 3
push esi
call fcn.0040648e
test eax, eax
je 0x404149
push esi
push 0x434400
call sub.KERNEL32.dll_lstrcpyA
push esi
push 0x434800
call sub.KERNEL32.dll_lstrcpyA
mov dword [esp + 0x10], ebx
call fcn.0040428f
mov dword [esp + 0x18], eax
call fcn.0040426a
cmp dword [esp + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
je 0x404167
push 0x100010
push dword [esp + 4]
call fcn.004062eb
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x14], ebx
mov edi, 0x42a5e9
mov esi, 0x42a5e8
mov ebx, 0x42a1e8
push 0x435400
push edi
mov byte [0x42a5e8], 0x22
call sub.KERNEL32.dll_lstrcpyA
push str.ANSISu_.exe
push esi
call ebp
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], 0
je 0x404250
push 0x400
push ebx
push dword [0x42ec20]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [eax + 0x42a1dd]
push 0x409241
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x404149
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x404250
push 0
push edi
call fcn.004065e2
cmp byte [0x434400], 0
je 0x40420e
push 0x434400
push ebx
call sub.KERNEL32.dll_lstrcpyA
jmp 0x404214
push ebx
call fcn.004063ed
push 0x409258
push esi
call ebp
push dword [esp + 0x18]
push esi
call ebp
push str.___
push esi
call ebp
push ebx
push esi
call ebp
push esi
call fcn.004063a5
push 0x435400
push esi
call fcn.00406273
test eax, eax
je 0x404250
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esp + 0x10], 0
inc byte [str.ANSISu_.exe]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1a
jl 0x40418a
jmp 0x404149