Function at 0x405fc0
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x114
mov eax, dword [0x41f3b8]
push ebx
push esi
push edi
mov dword [esp + 0x11c], eax
mov eax, dword [str.SOFTWARETriglow_PicturesPristonTale]
push str.PATH
push eax
mov esi, ecx
push 0x80000002
mov dword [esp + 0x1c], esi
call fcn.004077c0
mov eax, dword [esi]
lea ecx, [eax - 1]
add esp, 0xc
cmp ecx, 5
ja case.default.0x406007
jmp dword [ecx*4 + 0x4062b4]
push 0xea60
push 0
push str.660970B47809C974CC356D9849CFE86CBAB46CCA7EF3D32E98DAFFDC872677E525513043C3D031648044D1AEC36E92DAF3B1A3014A07ED09892096AE40E2E5FF0F7D04245246E417A4610E569540635C4BF10F1C521A6FEF199875B063AF335881D753A70AD42960AF
call fcn.0040e2e0
mov ecx, dword [0x4a1c50]
mov edx, dword [str.SOFTWARETriglow_PicturesPristonTale]
shl ecx, 0xa
add ecx, 0x440560
push ecx
push str.Server1
push edx
push 0x80000002
call fcn.00407880
mov eax, dword [0x4a1c50]
mov ecx, dword [str.SOFTWARETriglow_PicturesPristonTale]
shl eax, 0xa
add eax, 0x440660
push eax
push str.Server2
push ecx
push 0x80000002
call fcn.00407880
mov edx, dword [0x4a1c50]
mov eax, dword [str.SOFTWARETriglow_PicturesPristonTale]
shl edx, 0xa
add edx, 0x440760
push edx
push str.Server3
push eax
push 0x80000002
call fcn.00407880
mov ecx, dword [0x4a1c50]
mov edx, dword [str.SOFTWARETriglow_PicturesPristonTale]
shl ecx, 0xa
add ecx, 0x440460
push ecx
push str.ServerName
push edx
push 0x80000002
call fcn.00407880
xor eax, eax
add esp, 0x4c
mov ecx, 0x40
lea edi, [esp + 0x18]
push eax
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [esp + 0x18]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea edi, [esp + 0x18]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x4060e4
mov eax, dword [0x45965c]
mov dx, word [0x41a5a8]
cmp eax, 2
mov eax, dword [str.Game.exe]
mov word [edi], dx
mov edx, eax
jne 0x406130
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406107
lea edi, [esp + 0x18]
sub eax, edx
dec edi
lea ebx, [edi + 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x406118
push 1
push 0
push 0x41fcb8
jmp 0x40614f
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406130
lea edi, [esp + 0x18]
sub eax, edx
dec edi
lea ebx, [edi + 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x406141
push 1
push 0
push 0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push ebx
mov ecx, eax
push 0
and ecx, 3
push 0
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
mov esi, 0x4596f0
lea ecx, [ecx]
mov eax, dword [esi]
push eax
call edi
add esi, 0x10118
cmp esi, 0x499b50
jl 0x406180
mov ecx, dword [0x4a1fc8]
push ecx
call edi
mov edx, dword [ebp + 8]
push edx
call edi
mov eax, dword [0x4a1fcc]
mov ecx, dword [esp + 0x11c]
call fcn.004119a1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebp + 8]
push 0
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [0x4a1fc8]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
push eax
call edi
mov esi, 0x4596f0
jmp 0x4061e0
mov ecx, dword [esi]
push ecx
call edi
add esi, 0x10118
cmp esi, 0x499b50
jl 0x4061e0
mov dword [0x4a1fcc], 0
jmp 0x40626c
add eax, 0xfffffffd
imul eax, eax, 0x10118
add eax, 0x4596f4
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406210
sub eax, edx
mov dword [esp + 0x14], eax
je case.default.0x406007
mov ebx, dword [ebp + 8]
push 0
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x4a1fc8]
mov edi, dword [sym.imp.USER32.dll_DestroyWindow]
push edx
call edi
mov esi, 0x4596f0
nop
mov eax, dword [esi]
push eax
call edi
add esi, 0x10118
cmp esi, 0x499b50
jl 0x406240
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx]
sub edx, 3
mov dword [0x4a1cfc], edx
mov dword [0x4a1fcc], 2
push 0
push 0x41fb94
push ebx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [0x4a1fcc]
mov ecx, dword [esp + 0x11c]
call fcn.004119a1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [esp + 0x11c]
mov eax, 1
mov dword [0x4a1fcc], eax
call fcn.004119a1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc