Function at 0x41b27e
Capabilities:
Accept command line arguments
Set environment variable

Disassembly:
sub esp, 0x590
mov eax, dword [0x43e748]
xor eax, esp
mov dword [esp + 0x58c], eax
push ebp
push esi
push edi
push 1
call fcn.0040a590
push 0x45aa90
call fcn.00405d94
lea ecx, [esp + 0xc]
call fcn.004164dd
xor ebp, ebp
push 7
pop eax
push 0x400
mov dword [esp + 0xec], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x134], eax
lea eax, [esp + 0x138]
push ebp
push eax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x108], ebp
mov dword [esp + 0x110], ebp
mov dword [esp + 0x120], ebp
mov dword [esp + 0x128], ebp
mov dword [esp + 0x138], ebp
call fcn.0041dbb0
add esp, 0xc
lea eax, [esp + 0xd4]
mov ecx, 0x45ab20
push eax
call fcn.004168e1
lea ecx, [esp + 0xd4]
call fcn.00416893
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
test esi, esi
je 0x41b42d
push esi
lea ecx, [esp + 0x30]
call fcn.004014a3
lea eax, [esp + 0x2c]
push eax
call fcn.004188ce
lea ecx, [esp + 0x2c]
call fcn.00401770
cmp byte [0x45aacd], 0
je 0x41b410
push ebx
push 0x433ed8
push ebp
mov ebx, 0xf001f
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov edi, eax
test edi, edi
je 0x41b406
push 9
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x41b406
mov esi, dword [eax + 1]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea eax, [esi + 9]
push eax
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
test esi, esi
je 0x41b406
lea ecx, [esi + 9]
mov ebx, 0x45ab20
push ecx
mov ecx, ebx
call fcn.00416b79
push ebx
mov byte [esi], 1
call fcn.0041adad
push 1
push ebp
push 0x400
mov ebx, 0x45ab80
push ebx
call fcn.00408c7e
push ebx
mov ecx, 0x45ab00
call fcn.00408d34
push 0x400
push ebx
call fcn.00408d6d
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
jmp 0x41b42d
push esi
lea ecx, [esp + 0x30]
call fcn.004014a3
lea eax, [esp + 0x2c]
push eax
call fcn.0041adad
lea ecx, [esp + 0x2c]
call fcn.00401770
lea eax, [esp + 0x2c]
push eax
call fcn.00405eb3
mov edi, 0x43e668
push eax
mov ecx, edi
call fcn.004057f6
lea ecx, [esp + 0x2c]
call fcn.00401770
cmp dword [0x43e67c], 8
mov eax, edi
jb 0x41b45d
mov eax, dword [0x43e668]
push eax
push str.sfxname
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x2a]
push eax
movzx eax, word [esp + 0x2c]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x34]
push eax
push str._4d__02d__02d__02d__02d__02d__03d
lea eax, [esp + 0x554]
push 0x32
push eax
call fcn.00404c1e
add esp, 0x28
lea eax, [esp + 0x534]
push eax
push str.sfxstime
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push 0x64
push esi
mov dword [0x45afc8], esi
mov dword [0x45afc4], esi
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [0x45af8c], eax
call fcn.004176c5
push edi
mov ecx, 0x45b4a8
mov dword [0x45af90], eax
call fcn.004071ea
lea ecx, [esp + 0x8c]
call fcn.004142a6
lea ecx, [esp + 0x44]
call fcn.004142a6
push ebp
push 0x4177e0
push ebp
lea eax, [esp + 0x98]
mov dword [0x45aa80], eax
lea eax, [esp + 0x50]
push str.STARTDLG
push esi
mov dword [0x45aa84], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [esp + 0x44]
mov dword [0x45aa84], ebp
mov dword [0x45aa80], ebp
call fcn.00414398
lea ecx, [esp + 0x8c]
call fcn.00414398
mov eax, dword [0x45af9c]
test eax, eax
je 0x41b56e
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x45aaa8], 0
je 0x41b57c
call fcn.00416a8c
mov ecx, 0x45ab10
call fcn.00408bb6
push dword [0x45af8c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x45af90]
test eax, eax
je 0x41b5a2
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x45b4e8], ebp
jne 0x41b5c2
cmp byte [0x45afb8], 0
je 0x41b5c2
push 0xff
mov ecx, 0x45b4e8
call fcn.00402fe8
mov eax, dword [0x45afa0]
mov byte [0x45afb8], 1
test eax, eax
je 0x41b5e4
push eax
call fcn.0041ae80
push dword [0x45afa0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x45af94], 0
mov esi, dword [0x45b4e8]
je 0x41b615
cmp byte [0x45af95], 0
mov eax, dword [0x43e6e0]
je 0x41b60f
mov esi, dword [0x45af98]
test eax, eax
jle 0x41b615
add esi, eax
jmp 0x41b615
test eax, eax
jns 0x41b615
sub esi, eax
lea ecx, [esp + 0xc]
call fcn.00416543
mov ecx, dword [esp + 0x598]
mov eax, esi
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.0041c344
add esp, 0x590
ret 0x10