Function at 0x40abb4
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov eax, 0x40ab54
call fcn.004048f4
xor eax, eax
push ebp
push 0x40b249
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x40d5f8]
mov edx, 0x40b260
call fcn.004034cc
jne 0x40abf5
push 1
call sub.KERNEL32.DLL_Sleep
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d5f8
call fcn.004031b8
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d5fc
call fcn.004031b8
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d600
call fcn.004031b8
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d604
call fcn.004031b8
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d608
call fcn.004031b8
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405658
mov edx, dword [ebp - 0x10]
mov eax, 0x40d60c
call fcn.004031b8
push 0x40d610
push 0x105
call sub.KERNEL32.DLL_GetTempPathA
lea edx, [ebp - 0x10]
mov eax, 0x40d610
call fcn.004057c8
mov eax, dword [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
xor eax, eax
call fcn.004026cc
mov eax, dword [ebp - 0x14]
pop edx
call fcn.0040a8e0
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40ad50
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40ad50
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40ad50
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40ad50
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5f8]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40adab
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d5f8]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40ae37
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40ae37
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40ae37
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40ae37
lea edx, [ebp - 0x10]
mov eax, dword [0x40d5fc]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40ae92
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d5fc]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40af1e
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40af1e
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40af1e
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40af1e
lea edx, [ebp - 0x10]
mov eax, dword [0x40d600]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40af79
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d600]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40b005
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40b005
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40b005
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40b005
lea edx, [ebp - 0x10]
mov eax, dword [0x40d604]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40b060
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d604]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40b0ec
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40b0ec
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40b0ec
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40b0ec
lea edx, [ebp - 0x10]
mov eax, dword [0x40d608]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40b147
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d608]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ac
call fcn.004034cc
je 0x40b1d3
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2bc
call fcn.004034cc
je 0x40b1d3
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2cc
call fcn.004034cc
je 0x40b1d3
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2dc
call fcn.004034cc
je 0x40b1d3
lea edx, [ebp - 0x10]
mov eax, dword [0x40d60c]
call fcn.00405690
mov eax, dword [ebp - 0x10]
mov edx, 0x40b2ec
call fcn.004034cc
jne 0x40b22e
push 1
lea edx, [ebp - 0x10]
mov eax, 2
call fcn.004026cc
mov eax, dword [ebp - 0x10]
call fcn.00403580
push eax
lea edx, [ebp - 0x14]
mov eax, 1
call fcn.004026cc
mov eax, dword [ebp - 0x14]
call fcn.00403580
push eax
lea edx, [ebp - 0x18]
mov eax, 0x40d610
call fcn.004057c8
lea eax, [ebp - 0x18]
mov edx, dword [0x40d60c]
call fcn.004033c4
mov eax, dword [ebp - 0x18]
call fcn.00403580
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40b250
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00403188
ret