Function at 0x403fa2
Capabilities:
Accept command line arguments
Copy file
Delete file
Get common file path
Terminate process

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x10], str.Error_writing_temporary_file._Make_sure_your_temp_folder_is_valid.
xor ebx, ebx
mov byte [esp + 0x14], 0x20
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, 0x7a9400
mov edi, 0x400
push esi
push edi
mov dword [0x7a2808], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
call fcn.00403f6e
mov ebp, dword [sym.imp.KERNEL32.dll_lstrcatA]
test eax, eax
jne 0x40400c
push 0x3fb
push esi
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push str.Temp
push esi
call ebp
call fcn.00403f6e
test eax, eax
je 0x404161
mov esi, 0x7a1f80
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push str.Advantig_Error
push esi
call fcn.0040694b
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov esi, 0x7a8000
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp byte [0x7a8000], 0x22
mov dword [0x7a2780], eax
jne 0x404057
mov byte [esp + 0x14], 0x22
mov esi, 0x7a8001
push dword [esp + 0x14]
push esi
call fcn.0040646d
push eax
call dword [sym.imp.USER32.dll_CharNextA]
mov edi, eax
mov dword [esp + 0x18], edi
mov cl, byte [eax]
test cl, cl
je 0x4040e9
cmp cl, 0x20
jne 0x40407f
inc eax
cmp byte [eax], 0x20
je 0x404079
cmp byte [eax], 0x22
mov byte [esp + 0x14], 0x20
jne 0x40408f
inc eax
mov byte [esp + 0x14], 0x22
cmp byte [eax], 0x2f
jne 0x4040c5
inc eax
cmp byte [eax], 0x53
jne 0x4040a8
mov cl, byte [eax + 1]
or cl, 0x20
cmp cl, 0x20
jne 0x4040a8
or ebx, 2
cmp dword [eax], 0x4352434e
jne 0x4040be
mov cl, byte [eax + 4]
or cl, 0x20
cmp cl, 0x20
jne 0x4040be
or ebx, 4
cmp word [eax], 0x3d44
je 0x4040d7
push dword [esp + 0x14]
push eax
call fcn.0040646d
cmp byte [eax], 0x22
jne 0x40406e
inc eax
jmp 0x40406e
and byte [eax - 1], 0
add eax, 2
push eax
push 0x7a8400
call fcn.0040694b
push ebx
call fcn.004038ef
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x10], eax
jne 0x404161
cmp dword [0x7a2798], ebx
je 0x404158
push ebx
push edi
call fcn.0040646d
mov esi, eax
cmp esi, edi
jb 0x404122
cmp byte [esi], 0x5f
jne 0x40411f
cmp byte [esi + 1], 0x3f
jne 0x40411f
cmp byte [esi + 2], 0x3d
je 0x404122
dec esi
jmp 0x40410a
cmp esi, edi
mov dword [esp + 0x10], str.Error_launching_installer
jb 0x40418f
and byte [esi], 0
add esi, 3
push esi
call fcn.0040652c
test eax, eax
je 0x404161
push esi
push 0x7a8400
call fcn.0040694b
push esi
push 0x7a8800
call fcn.0040694b
mov dword [esp + 0x10], ebx
call fcn.004042bf
mov dword [esp + 0x18], eax
call fcn.00404282
cmp dword [esp + 0x10], 0
pop edi
pop esi
pop ebp
pop ebx
je 0x40417f
push 0x100010
push dword [esp + 4]
call fcn.0040637d
call dword [sym.imp.ole32.dll_OleUninitialize]
push dword [esp + 8]
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov dword [esp + 0x14], ebx
mov edi, 0x79e159
mov esi, 0x79e158
mov ebx, 0x79dd58
push 0x7a9400
push edi
mov byte [0x79e158], 0x22
call fcn.0040694b
push str.AADVANTIGu_.exe
push esi
call ebp
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [esp + 0x10], 0
je 0x404268
push 0x400
push ebx
push dword [0x7a2780]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [eax + 0x79dd49]
push 0x409275
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x404161
push 0
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x404268
push 0
push edi
call fcn.00406687
cmp byte [0x7a8400], 0
je 0x404226
push 0x7a8400
push ebx
call fcn.0040694b
jmp 0x40422c
push ebx
call fcn.00406489
push 0x409290
push esi
call ebp
push dword [esp + 0x18]
push esi
call ebp
push str.___
push esi
call ebp
push ebx
push esi
call ebp
push esi
call fcn.00406441
push 0x7a9400
push esi
call fcn.004062f6
test eax, eax
je 0x404268
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
and dword [esp + 0x10], 0
inc byte [str.AADVANTIGu_.exe]
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x1a
jl 0x4041a2
jmp 0x404161