Function at 0x405f10
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x15a4
call fcn.0040ab40
push ebx
mov ebx, dword [esp + 0x15b0]
push ebp
push esi
push edi
mov ecx, 0x11
xor eax, eax
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov ebp, dword [esp + 0x70]
mov edi, dword [esp + 0x15b8]
mov esi, 1
mov dword [esp + 0x10], 0xffffffff
push esi
or ebp, esi
push ebx
push edi
mov word [esp + 0x80], si
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x50], 0x44
call fcn.00405d70
mov ebp, eax
mov eax, dword [0x41df84]
add esp, 0xc
mov dword [esp + 0x14], ebp
test eax, eax
jne 0x405f83
mov eax, dword [0x41df94]
test eax, eax
jle 0x405fbf
mov eax, dword [edi]
push eax
push str.S_JVMLOADMSG
call fcn.00401b60
add esp, 4
lea ecx, [esp + 0x1b8]
push eax
push ecx
call fcn.0040aaee
lea edx, [esp + 0x1c0]
push edx
push 0
call fcn.00405d00
push 0x419168
push 0
call fcn.00405d00
add esp, 0x1c
lea eax, [esp + 0x18]
lea ecx, [esp + 0x44]
push eax
push ecx
push 0
push 0
push 0x200
push esi
push 0
push 0
push ebp
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x40602f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push esi
push str.CreateOUIProcess__
push str.S_ERGOSLST
call fcn.00401b60
add esp, 4
lea edx, [esp + 0x5bc]
push eax
push edx
call fcn.0040aaee
lea eax, [esp + 0x5c4]
push eax
call fcn.00405d30
add esp, 0x14
call fcn.0040a360
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x15a4
ret
mov eax, dword [0x41df84]
test eax, eax
je 0x4060e0
push 0x41928c
push 0x41eae0
call fcn.0040a6cd
mov esi, eax
push esi
push 0x419168
call fcn.0040b559
add esp, 0x10
push ebx
push str.S_TOTAL_ARGS
call fcn.00401b80
add esp, 4
lea ecx, [esp + 0x8c]
push eax
push ecx
call fcn.0040aaee
lea edx, [esp + 0x94]
push esi
push edx
call fcn.0040b559
add esp, 0x14
push esi
push str.S_CMDLINE_ARG_ELTS
call fcn.00401b80
add esp, 4
push eax
call fcn.0040b559
add esp, 8
test ebx, ebx
jle 0x4060c6
mov eax, dword [edi]
push esi
push eax
call fcn.0040b559
push esi
push 0x419168
call fcn.0040b559
push esi
call fcn.0040a9e1
add esp, 0x14
add edi, 4
dec ebx
jne 0x4060a3
push esi
push 0x419168
call fcn.0040b559
push esi
call fcn.0040a9e1
push esi
call fcn.0040a657
add esp, 0x10
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x15c0]
test eax, eax
je 0x406166
mov ebp, dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageA]
push pe_nt_image_headers32
push 0xffffffffffffffff
lea edx, [esp + 0x20]
push 0
push edx
push 1
call ebp
test eax, eax
je 0x406162
cmp eax, 1
jne 0x40610e
push eax
push 0
push 0
lea eax, [esp + 0x34]
push 0
push eax
call esi
test eax, eax
je 0x40610e
cmp dword [esp + 0x2c], 0x12
je 0x40610e
lea ecx, [esp + 0x28]
push ecx
call edi
lea edx, [esp + 0x28]
push edx
call ebx
push 1
push 0
push 0
lea eax, [esp + 0x34]
push 0
push eax
call esi
test eax, eax
jne 0x406138
jmp 0x40610e
mov ebp, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x10]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x406180
mov esi, dword [esp + 0x10]
jmp 0x406188
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebp
call fcn.0040a4d2
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x15a4
ret