Function at 0x4044d7
Capabilities:
Accept command line arguments
Copy file
Delete file
Get common file path
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
xor ebx, ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x42d400
push esi
mov edi, 0x400
push edi
mov dword [0x426048], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.00404466
test eax, eax
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
jne 0x404541
push 0x3fb
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.Temp
push esi
call ebp
call fcn.00404466
test eax, eax
je 0x40469f
mov esi, 0x4257a0
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.NSIS_Error
push esi
call sub.KERNEL32.dll_lstrcpyA
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
mov esi, 0x42c000
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x42c000], 0x22
mov dword [0x425fa4], eax
jne 0x40458c
mov byte [esp + 0x14], 0x22
mov esi, 0x42c001
push dword [esp + 0x14]
push esi
call fcn.00406956
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov edi, eax
mov dword [esp + 0x18], edi
jmp 0x404606
cmp cl, 0x20
jne 0x4045b0
inc eax
cmp byte [eax], 0x20
je 0x4045aa
cmp byte [eax], 0x22
mov byte [esp + 0x14], 0x20
jne 0x4045c0
inc eax
mov byte [esp + 0x14], 0x22
cmp byte [eax], 0x2f
jne 0x4045f6
inc eax
cmp byte [eax], 0x53
jne 0x4045d9
mov cl, byte [eax + 1]
or cl, 0x20
cmp cl, 0x20
jne 0x4045d9
or ebx, 2
cmp dword [eax], 0x4352434e
jne 0x4045ef
mov cl, byte [eax + 4]
or cl, 0x20
cmp cl, 0x20
jne 0x4045ef
or ebx, 4
cmp word [eax], 0x3d44
je 0x40460e
push dword [esp + 0x14]
push eax
call fcn.00406956
cmp byte [eax], 0x22
jne 0x404606
inc eax
mov cl, byte [eax]
test cl, cl
jne 0x4045a5
jmp 0x404620
mov byte [eax - 1], 0
add eax, 2
push eax
push 0x42c400
call sub.KERNEL32.dll_lstrcpyA
push ebx
call fcn.00404166
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], eax
jne 0x40469f
cmp dword [0x425ff8], ebx
je 0x40468f
push ebx
push edi
call fcn.00406956
mov esi, eax
jmp 0x404655
cmp byte [esi], 0x5f
jne 0x404654
cmp byte [esi + 1], 0x3f
jne 0x404654
cmp byte [esi + 2], 0x3d
je 0x404659
dec esi
cmp esi, edi
jae 0x404643
cmp esi, edi
mov dword [esp + 0x10], str.Error_launching_installer
jb 0x4046cd
mov byte [esi], 0
add esi, 3
push esi
call fcn.00406d91
test eax, eax
je 0x40469f
push esi
push 0x42c400
call sub.KERNEL32.dll_lstrcpyA
push esi
push 0x42c800
call sub.KERNEL32.dll_lstrcpyA
mov dword [esp + 0x10], ebx
call fcn.004065d9
push 1
mov dword [esp + 0x1c], eax
call fcn.00406c45
call fcn.0040449a
cmp dword [esp + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
je 0x4046bd
push 0x100010
push dword [esp + 4]
call fcn.00406905
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x14], ebx
mov edi, 0x420161
mov esi, 0x420160
mov ebx, 0x420960
push 0x42d400
push edi
mov byte [0x420160], 0x22
call sub.KERNEL32.dll_lstrcpyA
push str.ANSISu_.exe
push esi
call ebp
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], 0
je 0x4047a6
push 0x400
push ebx
push dword [0x425fa4]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x40a009
lea eax, [eax + 0x420955]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40469f
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x4047a6
push 0
push edi
call fcn.00406e5f
cmp byte [0x42c400], 0
je 0x404764
push 0x42c400
push ebx
call sub.KERNEL32.dll_lstrcpyA
jmp 0x40476a
push ebx
call fcn.00406d6b
push 0x408b3c
push esi
call ebp
push dword [esp + 0x18]
push esi
call ebp
push str.___
push esi
call ebp
push ebx
push esi
call ebp
push esi
call fcn.00406d3e
push 0x42d400
push esi
call fcn.0040688d
test eax, eax
je 0x4047a6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esp + 0x10], 0
inc byte [str.ANSISu_.exe]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1a
jl 0x4046e0
jmp 0x40469f