Function at 0x423a5b
Capabilities:
Accept command line arguments
Set environment variable

Disassembly:
sub esp, 0x590
mov eax, dword [0x448778]
xor eax, esp
mov dword [esp + 0x58c], eax
push ebp
push esi
push edi
push 1
call fcn.00416a01
push 0x452340
call fcn.00411089
lea ecx, [esp + 0xc]
call fcn.0041e9f4
xor ebp, ebp
push 7
pop eax
push 0x400
mov dword [esp + 0xec], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x134], eax
lea eax, [esp + 0x138]
push ebp
push eax
mov dword [esp + 0xe0], ebp
mov dword [esp + 0xf0], ebp
mov dword [esp + 0xf8], ebp
mov dword [esp + 0x108], ebp
mov dword [esp + 0x110], ebp
mov dword [esp + 0x120], ebp
mov dword [esp + 0x128], ebp
mov dword [esp + 0x138], ebp
call fcn.00426700
add esp, 0xc
lea eax, [esp + 0xd4]
mov ecx, 0x4523d0
push eax
call fcn.0041edba
lea ecx, [esp + 0xd4]
call fcn.0041ed6c
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, eax
test esi, esi
je 0x423c0a
push esi
lea ecx, [esp + 0x30]
call fcn.004014a7
lea eax, [esp + 0x2c]
push eax
call fcn.00420f0e
lea ecx, [esp + 0x2c]
call fcn.00401a66
cmp byte [0x45237d], 0
je 0x423bed
push ebx
push str.winrarsfxmappingfile.tmp
push ebp
mov ebx, 0xf001f
push ebx
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov edi, eax
test edi, edi
je 0x423be3
push 9
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
test eax, eax
je 0x423be3
mov esi, dword [eax + 1]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea eax, [esi + 9]
push eax
push ebp
push ebp
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
test esi, esi
je 0x423be3
lea ecx, [esi + 9]
mov ebx, 0x4523d0
push ecx
mov ecx, ebx
call fcn.0041f158
push ebx
mov byte [esi], 1
call fcn.0042340d
push 1
push ebp
push 0x400
mov ebx, 0x452430
push ebx
call fcn.00414e65
push ebx
mov ecx, 0x4523b0
call fcn.00414f1b
push 0x400
push ebx
call fcn.00414f54
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
jmp 0x423c0a
push esi
lea ecx, [esp + 0x30]
call fcn.004014a7
lea eax, [esp + 0x2c]
push eax
call fcn.0042340d
lea ecx, [esp + 0x2c]
call fcn.00401a66
lea eax, [esp + 0x2c]
push eax
call fcn.00411179
mov edi, 0x448698
push eax
mov ecx, edi
call fcn.004025a4
lea ecx, [esp + 0x2c]
call fcn.00401a66
cmp dword [0x4486ac], 8
mov eax, edi
jb 0x423c3a
mov eax, dword [0x448698]
push eax
push str.sfxname
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [esp + 0x2a]
push eax
movzx eax, word [esp + 0x2c]
push eax
movzx eax, word [esp + 0x2e]
push eax
movzx eax, word [esp + 0x30]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x32]
push eax
movzx eax, word [esp + 0x34]
push eax
push str._4d__02d__02d__02d__02d__02d__03d
lea eax, [esp + 0x554]
push 0x32
push eax
call fcn.0040f6aa
add esp, 0x28
lea eax, [esp + 0x534]
push eax
push str.sfxstime
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push ebp
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
push 0x64
push esi
mov dword [0x44b084], esi
mov dword [0x44b080], esi
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [0x45283c], eax
call fcn.0041fcf5
push edi
mov ecx, 0x44b088
mov dword [0x452840], eax
call fcn.00413298
lea ecx, [esp + 0x8c]
call fcn.0041c92f
lea ecx, [esp + 0x44]
call fcn.0041c92f
push ebp
push 0x41fe20
push ebp
lea eax, [esp + 0x98]
mov dword [0x452330], eax
lea eax, [esp + 0x50]
push str.STARTDLG
push esi
mov dword [0x452334], eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
lea ecx, [esp + 0x44]
mov dword [0x452334], ebp
mov dword [0x452330], ebp
call fcn.0041ca21
lea ecx, [esp + 0x8c]
call fcn.0041ca21
mov eax, dword [0x45284c]
test eax, eax
je 0x423d4b
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x452358], 0
je 0x423d59
call fcn.0041f06b
mov ecx, 0x4523c0
call fcn.00414d9d
push dword [0x45283c]
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [0x452840]
test eax, eax
je 0x423d7f
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [0x44b0c8], ebp
jne 0x423d9f
cmp byte [0x452870], 0
je 0x423d9f
push 0xff
mov ecx, 0x44b0c8
call fcn.0040948e
mov eax, dword [0x452850]
mov byte [0x452870], 1
test eax, eax
je 0x423dc1
push eax
call fcn.004234e0
push dword [0x452850]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x452844], 0
mov esi, dword [0x44b0c8]
je 0x423df2
cmp byte [0x452845], 0
mov eax, dword [0x448710]
je 0x423dec
mov esi, dword [0x452848]
test eax, eax
jle 0x423df2
add esi, eax
jmp 0x423df2
test eax, eax
jns 0x423df2
sub esi, eax
lea ecx, [esp + 0xc]
call fcn.0041ea5a
mov ecx, dword [esp + 0x598]
mov eax, esi
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.00424c44
add esp, 0x590
ret 0x10