Function at 0x401050
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x41408b
mov eax, dword fs:[0]
push eax
sub esp, 0x340
mov eax, dword [0x41d660]
xor eax, esp
mov dword [esp + 0x338], eax
push ebx
push esi
push edi
mov eax, dword [0x41d660]
xor eax, esp
push eax
lea eax, [esp + 0x350]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp edi, 2
jge 0x4012a0
push 0x41a9e4
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.Relink.exe_can_be_used_to_upgrade_an_existing_virtual_package_to_the_current_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.ThinApp_version._ExistingPackage_can_contain_wildcards__.exe__and_can_also_be_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.a_.msi_package__VirtualPackage.msi__n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41a9e4
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.__Usage:_relink___Recursive__ExistingPackage__ExistingPackage...__n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41aaf4
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.With__h_and_additional_options__relink_can_also_be_used_to_Horizon_enable_an__n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.existing_Thinapp_package._n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41aaf4
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.__If_the_existing_package_is_not_VMware_Workspace_enabled_n_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h_______________________generates_new_AppID__sets_base_version_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h__AppID__guid__________sets_AppIDguid__sets_base_version_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41ac28
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.__If_the_existing_package_is_already_VMware_Workspace_enabled_n_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h__AppID__guid__________sets_AppIDguid__sets_base_version_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h__VersionID___________retains_existing_AppID__increments_VersionID_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h__VersionID__integer___retains_existing_AppID__sets_VersionID_integer__n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41ac28
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.__You_can_also_specify_both_a_custom_AppID_and_VersionID_for_the_package:_n_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.____h__AppID__guid___VersionID__integer__n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 0x41ac28
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push str.__AppID_guids_must_be_of_the_form_XXXXXXXX_XXXX_XXXX_XXXX_XXXXXXXXXXXX_n
call fcn.00402b3c
add eax, 0x40
push eax
call fcn.00402990
add esp, 8
push 1
call fcn.00402f05
push 0x104
lea eax, [esp + 0x140]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x13c]
push eax
call fcn.00402200
mov edx, eax
lea ecx, [esp + 0x13c]
sub edx, ecx
mov ecx, 0x104
sar edx, 1
push str.tlink.exe
sub ecx, edx
push ecx
push eax
call fcn.00402f19
add esp, 0xc
lea ecx, [esp + 0x7c]
call fcn.00401690
lea eax, [esp + 0x13c]
mov dword [esp + 0x358], 0
push eax
lea eax, [esp + 0x80]
push str.__ls_
push eax
call fcn.00401f70
mov esi, 1
add esp, 0xc
cmp edi, esi
jle 0x4013c5
lea edi, [esi + 1]
jmp 0x401330
push str._Recursive
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
jne 0x40134f
push eax
push eax
push 0xffffffffffffffff
push str.__Recursive
jmp 0x4013a7
push str._AddNotificationDll
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
jne 0x4013b5
mov eax, dword [ebp + 8]
cmp edi, eax
jge 0x4013b8
push 0
push 0
push 0xffffffffffffffff
push str.__AddNotificationDll__
push 1
lea ecx, [esp + 0x90]
inc esi
inc edi
call fcn.004018b0
push 0
push 0
push 0xffffffffffffffff
push dword [ebx + esi*4]
lea ecx, [esp + 0x8c]
push 1
call fcn.004018b0
push 0
push 0
push 0xffffffffffffffff
push 0x41ae7c
push 1
lea ecx, [esp + 0x90]
call fcn.004018b0
mov eax, dword [ebp + 8]
inc esi
inc edi
cmp esi, eax
jl 0x401330
mov edi, dword [ebp + 8]
push 0
push 0
push 0xffffffffffffffff
push 0x41ae80
push 1
lea ecx, [esp + 0x90]
call fcn.004018b0
mov esi, 1
mov byte [esp + 0x17], 0
cmp edi, esi
jle 0x401559
push str._Recursive
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
je 0x401550
push str._AddNotificationDll
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
je 0x40154f
push 0x41ae94
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
jne 0x40143e
mov byte [esp + 0x17], 1
jmp 0x401504
push str._AppID
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
jne 0x401480
cmp byte [esp + 0x17], al
je 0x4015f8
lea eax, [esp + 0x12c]
push eax
push dword [ebx + esi*4 + 4]
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
jns 0x401504
push str.Bad_AppID_format___use_XXXXXXXX_XXXX_XXXX_XXXX_XXXXXXXXXXXX_n
jmp 0x401288
push str._VersionID
push dword [ebx + esi*4]
call fcn.00402ffd
add esp, 8
test eax, eax
jne 0x401504
cmp byte [esp + 0x17], al
je 0x40160c
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 1
push eax
push 0x41af70
push dword [ebx + esi*4 + 4]
call fcn.0040316b
add esp, 0xc
cmp eax, 1
jne 0x4014cf
mov eax, dword [esp + 0x18]
cmp eax, 2
jb 0x4014cf
cmp eax, 0x63
jbe 0x401504
mov edx, dword [ebx + esi*4 + 4]
mov eax, edx
lea ecx, [eax + 2]
mov dword [esp + 0x1c], ecx
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4014e0
sub eax, dword [esp + 0x1c]
sar eax, 1
cmp eax, 1
jne 0x401602
cmp word [edx], 0x2b
jne 0x401602
push 0
push 0
push 0xffffffffffffffff
push 0x41afb0
push 1
lea ecx, [esp + 0x90]
call fcn.004018b0
push 0
push 0
push 0xffffffffffffffff
push dword [ebx + esi*4]
lea ecx, [esp + 0x8c]
push 1
call fcn.004018b0
push 0
push 0
push 0xffffffffffffffff
push 0x41ae7c
push 1
lea ecx, [esp + 0x90]
call fcn.004018b0
jmp 0x401550
inc esi
inc esi
cmp esi, edi
jl 0x4013f0
push 0x44
lea eax, [esp + 0x38]
push 0
push eax
call fcn.00404580
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
add esp, 0xc
mov dword [esp + 0x34], 0x44
push 0xfffffffffffffff6
call edi
mov esi, dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 1
mov dword [esp + 0x70], eax
lea eax, [esp + 0x70]
push 1
push eax
call esi
push 0xfffffffffffffff5
call edi
push 1
mov dword [esp + 0x74], eax
lea eax, [esp + 0x74]
push 1
push eax
call esi
push 0xfffffffffffffff4
call edi
push 1
mov dword [esp + 0x78], eax
lea eax, [esp + 0x78]
push 1
push eax
call esi
lea eax, [esp + 0x24]
mov dword [esp + 0x60], pe_nt_image_headers32
push eax
lea eax, [esp + 0x38]
push eax
push 0
push 0
push 0
push 1
push 0
push 0
push dword [esp + 0x9c]
lea eax, [esp + 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x401616
push str.Failed_to_launch_tlink_n
jmp 0x401288
push str._AppID_specified_without_specifying__h_before_it._n
jmp 0x401288
push str.Bad_VersionID___must_be_in_the_range__2_99__or_._n
jmp 0x401288
push str._VersionID_specified_without_specifying__h_before_it._n
jmp 0x401288
push dword [esp + 0x28]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push 0xffffffffffffffff
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [esp + 0x24]
call esi
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x7c]
mov dword [esp + 0x358], 0xffffffff
call fcn.00401720
mov eax, esi
mov ecx, dword [esp + 0x350]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x338]
xor ecx, esp
call fcn.00402981
mov esp, ebp
pop ebp
ret