Function at 0x401bc0
Capabilities:
Accept command line arguments
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe2c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
xor eax, eax
push edi
push 0x7fe
push eax
mov word [ebp - 0xe1c], ax
xor ebx, ebx
lea eax, [ebp - 0xe1a]
mov dword [ebp - 0xe2c], esi
push eax
call fcn.004067c0
add esp, 8
lea edx, [ebp - 0xe1c]
mov ecx, esi
call fcn.004019b0
add esp, 4
test eax, eax
js 0x401f71
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x61c], ax
lea eax, [ebp - 0x61a]
push eax
call fcn.004067c0
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x414], ax
lea eax, [ebp - 0x412]
push eax
call fcn.004067c0
add esp, 0x18
lea eax, [ebp - 0x20c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp eax, 0x104
jae 0x401f6a
lea ecx, [ebp - 0x61c]
xor edi, edi
lea esi, [ebp - 0x20c]
mov eax, ecx
mov edx, 0x104
sub esi, eax
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x401ca2
movzx eax, word [esi + ecx]
test ax, ax
je 0x401ca2
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x401c84
jmp 0x401ca6
test edx, edx
jne 0x401cae
sub ecx, 2
mov edi, 0x8007007a
xor eax, eax
mov word [ecx], ax
test edi, edi
js 0x401f6a
push str.DeviceHealth.cab
lea eax, [ebp - 0x20c]
push eax
push str._s_s
lea eax, [ebp - 0x414]
push 0x104
push eax
call fcn.00401400
add esp, 0x14
test eax, eax
js 0x401f6a
lea ecx, [ebp - 0x414]
call fcn.004016b0
test eax, eax
js 0x401f63
mov dword [ebp - 0xe28], ebx
call fcn.00401160
mov ecx, eax
test ecx, ecx
je 0x401f8b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xe28]
mov dword [ebp - 0xe28], eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00402980
test eax, eax
js 0x401f2f
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push eax
call fcn.004067c0
push 0x418b80
lea eax, [ebp - 0x61c]
push eax
push str._s_s
lea eax, [ebp - 0x20c]
push 0x104
push eax
call fcn.00401400
add esp, 0x20
test eax, eax
js 0x401f28
call fcn.00401590
lea ecx, [ebp - 0xe20]
mov dword [ebp - 0xe20], ebx
mov esi, eax
call fcn.00401fa0
test esi, esi
js 0x401ee6
lea ecx, [ebp - 0xe20]
call fcn.00401460
test eax, eax
js 0x401ee6
lea eax, [ebp - 0xe24]
mov dword [ebp - 0xe24], ebx
push eax
push dword [ebp - 0xe2c]
mov esi, 0x80004005
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
xor edi, edi
cmp dword [ebp - 0xe24], ebx
jle 0x401ee6
mov ebx, eax
jmp 0x401df0
push str._quiet
push dword [ebx + edi*4]
call fcn.00405d24
add esp, 8
test eax, eax
jne 0x401e26
sub esp, 0xc
mov edx, str.InstFlight
push str.flight
call fcn.00403a70
add esp, 0x10
lea esi, [eax - 1]
neg esi
sbb esi, esi
and esi, 0x80004005
inc edi
cmp edi, dword [ebp - 0xe24]
jl 0x401df0
mov ebx, 0
test esi, esi
js 0x401ee6
mov eax, dword [ebp - 0xe20]
lea ecx, [ebp - 0xe20]
push dword [eax - 0xc]
call fcn.004020a0
push eax
lea edx, [ebp - 0xe1c]
lea ecx, [ebp - 0x20c]
call fcn.004017b0
push ecx
lea eax, [ebp - 0xe24]
mov dword [ebp - 0xe24], ebx
push eax
call fcn.00403b20
add esp, 0xc
cmp eax, 3
je 0x401e85
mov dword [ebp - 0xe24], ebx
jmp 0x401ec0
mov eax, dword [ebp - 0xe20]
lea ecx, [ebp - 0xe20]
sub esp, 0xc
push dword [eax - 0xc]
call fcn.004020a0
push eax
mov edx, str.InstLogPath
call fcn.00403a70
add esp, 0x10
cmp eax, 1
jne 0x401ec0
lea edx, [ebp - 0xe1c]
lea ecx, [ebp - 0x20c]
call fcn.004018e0
sub esp, 8
mov edx, str.InstErrorCode
call fcn.00403bc0
mov edx, str.InstLogPath
call fcn.00403bc0
mov edx, str.InstFlight
call fcn.00403bc0
add esp, 8
jmp 0x401ef9
lea edx, [ebp - 0xe1c]
lea ecx, [ebp - 0x20c]
call fcn.004018e0
mov ebx, eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0xe20]
or eax, 0xffffffff
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x401f34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x401f34
mov ebx, 0x4e25
jmp 0x401f34
mov ebx, 0x4e24
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0xe28]
or ecx, 0xffffffff
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x401f76
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x401f76
mov ebx, 0x4e23
jmp 0x401f76
mov ebx, 0x4e22
jmp 0x401f76
mov ebx, 0x4e21
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00405c41
mov esp, ebp
pop ebp
ret 0x10
push 0x80004005
call fcn.00401030
int3