Function at 0x4ab280
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Create process suspended
Resume thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53f33f
mov eax, dword fs:[0]
push eax
sub esp, 0xcac
mov eax, dword [0x583384]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc3c], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc4c], eax
call fcn.00406110
mov ecx, eax
test ecx, ecx
jne 0x4ab2d2
push 0x80004005
call fcn.004063a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xc40], esi
mov dword [ebp - 4], 0
call fcn.00406110
mov ecx, eax
test ecx, ecx
jne 0x4ab2fc
push 0x80004005
call fcn.004063a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0xc44], edi
mov byte [ebp - 4], 1
call fcn.00406110
mov ecx, eax
test ecx, ecx
jne 0x4ab323
push 0x80004005
call fcn.004063a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0xc48], ebx
lea ecx, [ebp - 0xc74]
mov byte [ebp - 4], 2
call fcn.0040db70
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
push 0x40
lea eax, [ebp - 0xcb4]
mov byte [ebp - 4], 4
push 0
push eax
mov dword [ebp - 0xcb8], 0x44
call fcn.00517590
xorps xmm0, xmm0
mov ecx, 1
movups xmmword [ebp - 0xc5c], xmm0
mov eax, dword [esi - 8]
add esp, 0xc
sub ecx, dword [esi - 4]
sub eax, 0x201
or eax, ecx
jge 0x4ab3a7
push 0x201
lea ecx, [ebp - 0xc40]
call fcn.00406dd0
mov esi, dword [ebp - 0xc40]
push 0x200
push esi
push 0
push dword [ebp - 0xc4c]
call dword [sym.imp.SHELL32.dll_DragQueryFileA]
test eax, eax
jne 0x4ab3ce
mov dword [ebp - 0xc3c], 0xffffffff
jmp 0x4ab5d9
push 0x7e
push esi
call fcn.00516960
add esp, 8
test eax, eax
je 0x4ab430
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, 0x201
or eax, ecx
jge 0x4ab407
push 0x201
lea ecx, [ebp - 0xc44]
call fcn.00406dd0
mov edi, dword [ebp - 0xc44]
push 0x200
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameA]
test eax, eax
je 0x4ab430
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0xc40]
call fcn.00413fa0
mov esi, dword [ebp - 0xc40]
test esi, esi
jne 0x4ab438
xor ecx, ecx
jmp 0x4ab449
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ab440
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0xc48]
call fcn.00407040
mov ebx, dword [ebp - 0xc48]
push 0x5c
push ebx
call fcn.00516a90
add esp, 8
test eax, eax
je 0x4ab46e
mov byte [eax], 0
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0xcb8]
push eax
push ebx
push 0
push 4
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x4ab4a3
mov dword [ebp - 0xc3c], 0xfffffffe
jmp 0x4ab5d9
push esi
call fcn.004bc1b0
add esp, 4
mov word [ebp - 0x14], 0x101
test eax, eax
jne 0x4ab4f9
push dword [ebp - 0xc54]
lea eax, [ebp - 0xc40]
mov dword [ebp - 0x30], 7
push 0x546b90
push eax
call fcn.00406950
mov esi, dword [ebp - 0xc40]
add esp, 0xc
cmp byte [esi], 0
jne 0x4ab4e6
xor ecx, ecx
jmp 0x4ab519
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ab4f0
jmp 0x4ab517
mov dword [ebp - 0x30], 3
cmp byte [esi], 0
jne 0x4ab509
xor ecx, ecx
jmp 0x4ab519
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4ab510
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00404fc0
lea eax, [ebp - 0x30]
mov ecx, 0x58cb40
push eax
call fcn.00452f10
lea ecx, [ebp - 0xc38]
call fcn.00453d30
mov eax, dword [ebp - 0xc3c]
lea ecx, [ebp - 0xc38]
push 0
mov byte [ebp - 4], 5
push dword [eax + 4]
call fcn.004a8f30
cmp eax, 1
jne 0x4ab590
mov eax, dword [ebp - 0xc3c]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0xc3c]
call fcn.004a8790
mov ecx, dword [ebp - 0xc3c]
push 1
call fcn.004a8a90
push dword [ebp - 0xc58]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x4ab5ac
lea eax, [ebp - 0x30]
mov ecx, 0x58cb40
push eax
call fcn.00452ff0
push 0
push dword [ebp - 0xc5c]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0xc58]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xc5c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc38]
mov dword [ebp - 0xc3c], 0
call fcn.00453eb0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x4ab5ee
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.0043e750
lea ecx, [ebp - 0xc64]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.004121e0
push dword [ebp - 0xc64]
call fcn.0051350d
add esp, 4
lea ecx, [ebp - 0xc6c]
call fcn.004121e0
push dword [ebp - 0xc6c]
call fcn.0051350d
add esp, 4
lea ecx, [ebp - 0xc74]
call fcn.004121e0
push dword [ebp - 0xc74]
call fcn.0051350d
lea edx, [ebx - 0x10]
mov byte [ebp - 4], 1
or ebx, 0xffffffff
add esp, 4
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4ab669
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4ab684
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4ab6a0
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0xc3c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00513512
mov esp, ebp
pop ebp
ret 0x10