Function at 0x41b341
Capabilities:
Accept command line arguments
Set environment variable

Disassembly:
sub esp, 0x590
mov eax, dword [0x43e748]
xor eax, esp
mov dword [esp + 0x58c], eax
push ebp
push esi
push edi
push 1
call fcn.0040a5d1
push 0x45aa90
call fcn.00405d94
lea ecx, [esp + 0xc]
call fcn.0041659d
xor ebp, ebp
push 7
pop eax
push 0x400
mov dword [esp + 0xec], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x134], eax
lea eax, [esp + 0x138]
push ebp
push eax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x108], ebp
mov dword [esp + 0x110], ebp
mov dword [esp + 0x120], ebp
mov dword [esp + 0x128], ebp
mov dword [esp + 0x138], ebp
call fcn.0041dc70
add esp, 0xc
lea eax, [esp + 0xd4]
mov ecx, 0x45ab20
push eax
call fcn.004169a1
lea ecx, [esp + 0xd4]
call fcn.00416953
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
test esi, esi
je 0x41b4f0
push esi
lea ecx, [esp + 0x30]
call fcn.004014a3
lea eax, [esp + 0x2c]
push eax
call fcn.0041898e
lea ecx, [esp + 0x2c]
call fcn.00401770
cmp byte [0x45aacd], 0
je 0x41b4d3
push ebx
push 0x433ed8
push ebp
mov ebx, 0xf001f
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov edi, eax
test edi, edi
je 0x41b4c9
push 9
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x41b4c9
mov esi, dword [eax + 1]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea eax, [esi + 9]
push eax
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
test esi, esi
je 0x41b4c9
lea ecx, [esi + 9]
mov ebx, 0x45ab20
push ecx
mov ecx, ebx
call fcn.00416c39
push ebx
mov byte [esi], 1
call fcn.0041ae6d
push 1
push ebp
push 0x400
mov ebx, 0x45ab80
push ebx
call fcn.00408c82
push ebx
mov ecx, 0x45ab00
call fcn.00408d38
push 0x400
push ebx
call fcn.00408d71
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
jmp 0x41b4f0
push esi
lea ecx, [esp + 0x30]
call fcn.004014a3
lea eax, [esp + 0x2c]
push eax
call fcn.0041ae6d
lea ecx, [esp + 0x2c]
call fcn.00401770
lea eax, [esp + 0x2c]
push eax
call fcn.00405eb3
mov edi, 0x43e668
push eax
mov ecx, edi
call fcn.004057f6
lea ecx, [esp + 0x2c]
call fcn.00401770
cmp dword [0x43e67c], 8
mov eax, edi
jb 0x41b520
mov eax, dword [0x43e668]
push eax
push str.sfxname
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x2a]
push eax
movzx eax, word [esp + 0x2c]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x34]
push eax
push str._4d__02d__02d__02d__02d__02d__03d
lea eax, [esp + 0x554]
push 0x32
push eax
call fcn.00404c1e
add esp, 0x28
lea eax, [esp + 0x534]
push eax
push str.sfxstime
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push 0x64
push esi
mov dword [0x45afc8], esi
mov dword [0x45afc4], esi
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [0x45af8c], eax
call fcn.00417785
push edi
mov ecx, 0x45b4a8
mov dword [0x45af90], eax
call fcn.004071ea
lea ecx, [esp + 0x8c]
call fcn.00414366
lea ecx, [esp + 0x44]
call fcn.00414366
push ebp
push 0x4178a0
push ebp
lea eax, [esp + 0x98]
mov dword [0x45aa80], eax
lea eax, [esp + 0x50]
push str.STARTDLG
push esi
mov dword [0x45aa84], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [esp + 0x44]
mov dword [0x45aa84], ebp
mov dword [0x45aa80], ebp
call fcn.00414458
lea ecx, [esp + 0x8c]
call fcn.00414458
mov eax, dword [0x45af9c]
test eax, eax
je 0x41b631
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x45aaa8], 0
je 0x41b63f
call fcn.00416b4c
mov ecx, 0x45ab10
call fcn.00408bba
push dword [0x45af8c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x45af90]
test eax, eax
je 0x41b665
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x45b4e8], ebp
jne 0x41b685
cmp byte [0x45afb8], 0
je 0x41b685
push 0xff
mov ecx, 0x45b4e8
call fcn.00402fe8
mov eax, dword [0x45afa0]
mov byte [0x45afb8], 1
test eax, eax
je 0x41b6a7
push eax
call fcn.0041af40
push dword [0x45afa0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x45af94], 0
mov esi, dword [0x45b4e8]
je 0x41b6d8
cmp byte [0x45af95], 0
mov eax, dword [0x43e6e0]
je 0x41b6d2
mov esi, dword [0x45af98]
test eax, eax
jle 0x41b6d8
add esi, eax
jmp 0x41b6d8
test eax, eax
jns 0x41b6d8
sub esi, eax
lea ecx, [esp + 0xc]
call fcn.00416603
mov ecx, dword [esp + 0x598]
mov eax, esi
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.0041c404
add esp, 0x590
ret 0x10