Function at 0x4af640
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Create process suspended
Resume thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54590f
mov eax, dword fs:[0]
push eax
sub esp, 0xcac
mov eax, dword [0x58a710]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc3c], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc4c], eax
call fcn.00404730
mov ecx, eax
test ecx, ecx
jne 0x4af692
push 0x80004005
call fcn.004049a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0xc40], esi
mov dword [ebp - 4], 0
call fcn.00404730
mov ecx, eax
test ecx, ecx
jne 0x4af6bc
push 0x80004005
call fcn.004049a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0xc44], edi
mov byte [ebp - 4], 1
call fcn.00404730
mov ecx, eax
test ecx, ecx
jne 0x4af6e3
push 0x80004005
call fcn.004049a0
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0xc48], ebx
lea ecx, [ebp - 0xc74]
mov byte [ebp - 4], 2
call fcn.0040cb30
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
push 0x40
lea eax, [ebp - 0xcb4]
mov byte [ebp - 4], 4
push 0
push eax
mov dword [ebp - 0xcb8], 0x44
call fcn.0051d400
xorps xmm0, xmm0
mov ecx, 1
movups xmmword [ebp - 0xc5c], xmm0
mov eax, dword [esi - 8]
add esp, 0xc
sub ecx, dword [esi - 4]
sub eax, 0x201
or eax, ecx
jge 0x4af767
push 0x201
lea ecx, [ebp - 0xc40]
call fcn.004053d0
mov esi, dword [ebp - 0xc40]
push 0x200
push esi
push 0
push dword [ebp - 0xc4c]
call dword [sym.imp.SHELL32.dll_DragQueryFileA]
test eax, eax
jne 0x4af78e
mov dword [ebp - 0xc3c], 0xffffffff
jmp 0x4af999
push 0x7e
push esi
call fcn.0051c7d0
add esp, 8
test eax, eax
je 0x4af7f0
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, 0x201
or eax, ecx
jge 0x4af7c7
push 0x201
lea ecx, [ebp - 0xc44]
call fcn.004053d0
mov edi, dword [ebp - 0xc44]
push 0x200
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameA]
test eax, eax
je 0x4af7f0
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0xc40]
call fcn.00414200
mov esi, dword [ebp - 0xc40]
test esi, esi
jne 0x4af7f8
xor ecx, ecx
jmp 0x4af809
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4af800
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0xc48]
call fcn.00405640
mov ebx, dword [ebp - 0xc48]
push 0x5c
push ebx
call fcn.0051c900
add esp, 8
test eax, eax
je 0x4af82e
mov byte [eax], 0
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0xcb8]
push eax
push ebx
push 0
push 4
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x4af863
mov dword [ebp - 0xc3c], 0xfffffffe
jmp 0x4af999
push esi
call fcn.004c0b30
add esp, 4
mov word [ebp - 0x14], 0x101
test eax, eax
jne 0x4af8b9
push dword [ebp - 0xc54]
lea eax, [ebp - 0xc40]
mov dword [ebp - 0x30], 7
push 0x54dbb4
push eax
call fcn.00404f50
mov esi, dword [ebp - 0xc40]
add esp, 0xc
cmp byte [esi], 0
jne 0x4af8a6
xor ecx, ecx
jmp 0x4af8d9
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4af8b0
jmp 0x4af8d7
mov dword [ebp - 0x30], 3
cmp byte [esi], 0
jne 0x4af8c9
xor ecx, ecx
jmp 0x4af8d9
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4af8d0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x2c]
call fcn.00411490
lea eax, [ebp - 0x30]
mov ecx, 0x5941bc
push eax
call fcn.00454ab0
lea ecx, [ebp - 0xc38]
call fcn.004557e0
mov eax, dword [ebp - 0xc3c]
lea ecx, [ebp - 0xc38]
push 0
mov byte [ebp - 4], 5
push dword [eax + 4]
call fcn.004ad510
cmp eax, 1
jne 0x4af950
mov eax, dword [ebp - 0xc3c]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [ebp - 0xc3c]
call fcn.004acd70
mov ecx, dword [ebp - 0xc3c]
push 1
call fcn.004ad070
push dword [ebp - 0xc58]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x4af96c
lea eax, [ebp - 0x30]
mov ecx, 0x5941bc
push eax
call fcn.00454b90
push 0
push dword [ebp - 0xc5c]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push dword [ebp - 0xc58]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xc5c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0xc38]
mov dword [ebp - 0xc3c], 0
call fcn.00455960
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x4af9ae
inc eax
lea ecx, [ebp - 0x2c]
push eax
push dword [ebp - 0x2c]
call fcn.00407600
lea ecx, [ebp - 0xc64]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00411590
push dword [ebp - 0xc64]
call fcn.0051939b
add esp, 4
lea ecx, [ebp - 0xc6c]
call fcn.00411590
push dword [ebp - 0xc6c]
call fcn.0051939b
add esp, 4
lea ecx, [ebp - 0xc74]
call fcn.00411590
push dword [ebp - 0xc74]
call fcn.0051939b
lea edx, [ebx - 0x10]
mov byte [ebp - 4], 1
or ebx, 0xffffffff
add esp, 4
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4afa29
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x4afa44
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add esi, 0xfffffff0
lock xadd dword [esi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x4afa60
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0xc3c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005193a0
mov esp, ebp
pop ebp
ret 0x10