Function at 0x404068
Capabilities:
Accept command line arguments
Copy file
Delete file
Get common file path
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
xor ebx, ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x436400
mov edi, 0x400
push esi
push edi
mov dword [0x42fc88], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.00404034
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
test eax, eax
jne 0x4040d2
push 0x3fb
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.Temp
push esi
call ebp
call fcn.00404034
test eax, eax
je 0x404227
mov esi, 0x42f400
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.NSIS_Error
push esi
call fcn.00406d97
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, 0x435000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x435000], 0x22
mov dword [0x42fc00], eax
jne 0x40411d
mov byte [esp + 0x14], 0x22
mov esi, 0x435001
push dword [esp + 0x14]
push esi
call fcn.004068b9
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov edi, eax
mov dword [esp + 0x18], edi
mov cl, byte [eax]
test cl, cl
je 0x4041af
cmp cl, 0x20
jne 0x404145
inc eax
cmp byte [eax], 0x20
je 0x40413f
cmp byte [eax], 0x22
mov byte [esp + 0x14], 0x20
jne 0x404155
inc eax
mov byte [esp + 0x14], 0x22
cmp byte [eax], 0x2f
jne 0x40418b
inc eax
cmp byte [eax], 0x53
jne 0x40416e
mov cl, byte [eax + 1]
or cl, 0x20
cmp cl, 0x20
jne 0x40416e
or ebx, 2
cmp dword [eax], 0x4352434e
jne 0x404184
mov cl, byte [eax + 4]
or cl, 0x20
cmp cl, 0x20
jne 0x404184
or ebx, 4
cmp word [eax], 0x3d44
je 0x40419d
push dword [esp + 0x14]
push eax
call fcn.004068b9
cmp byte [eax], 0x22
jne 0x404134
inc eax
jmp 0x404134
and byte [eax - 1], 0
add eax, 2
push eax
push 0x435400
call fcn.00406d97
push ebx
call fcn.00403b0f
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], eax
jne 0x404227
cmp dword [0x42fc18], ebx
je 0x40421e
push ebx
push edi
call fcn.004068b9
mov esi, eax
cmp esi, edi
jb 0x4041e8
cmp byte [esi], 0x5f
jne 0x4041e5
cmp byte [esi + 1], 0x3f
jne 0x4041e5
cmp byte [esi + 2], 0x3d
je 0x4041e8
dec esi
jmp 0x4041d0
cmp esi, edi
mov dword [esp + 0x10], str.Error_launching_installer
jb 0x40425b
and byte [esi], 0
add esi, 3
push esi
call fcn.00406978
test eax, eax
je 0x404227
push esi
push 0x435400
call fcn.00406d97
push esi
push 0x435800
call fcn.00406d97
mov dword [esp + 0x10], ebx
call fcn.00404373
mov dword [esp + 0x18], eax
call fcn.0040434e
cmp dword [esp + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
je 0x404245
push 0x100010
push dword [esp + 4]
call fcn.004067c9
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x14], ebx
mov edi, 0x42b5e1
mov esi, 0x42b5e0
mov ebx, 0x42b1e0
push 0x436400
push edi
mov byte [0x42b5e0], 0x22
call fcn.00406d97
push str.ANSISu_.exe
push esi
call ebp
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], 0
je 0x404334
push 0x400
push ebx
push dword [0x42fc00]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [eax + 0x42b1d5]
push 0x40a23d
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x404227
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x404334
push 0
push edi
call fcn.00406ad3
cmp byte [0x435400], 0
je 0x4042f2
push 0x435400
push ebx
call fcn.00406d97
jmp 0x4042f8
push ebx
call fcn.004068d5
push 0x40a254
push esi
call ebp
push dword [esp + 0x18]
push esi
call ebp
push str.___
push esi
call ebp
push ebx
push esi
call ebp
push esi
call fcn.0040688d
push 0x436400
push esi
call fcn.00406742
test eax, eax
je 0x404334
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esp + 0x10], 0
inc byte [str.ANSISu_.exe]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1a
jl 0x40426e
jmp 0x404227