Function at 0x4d8df0
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call fcn.005423e0
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 0x23a
push 0x22f
call fcn.0051f3b4
lea eax, [esp + 0x10]
push eax
call fcn.00542280
lea ebp, [0x72abe8]
mov edx, dword [ebp + 0x160]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov eax, str.Target
push eax
push dword [esp + 0x10]
call fcn.0053f8e0
and eax, eax
je 0x4d8ea3
push edx
call fcn.00542240
pop edx
push eax
mov eax, str.CIRAF
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push dword [esp + 0x20]
call fcn.0053f5c0
call fcn.004fa482
add dword [esp], edx
call fcn.0053f8e0
call fcn.004fa4e0
and eax, eax
je 0x4d8ea3
mov eax, 1
jmp 0x4d8ea5
xor eax, eax
and eax, eax
je 0x4d8eea
mov edx, dword [esp + 0x10]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
mov edx, 0x63b57e
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x61f062
push eax
mov eax, 1
push eax
call fcn.004557b6
pop eax
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov eax, str.Transmitter
push eax
push dword [esp + 0x10]
call fcn.0053f8e0
and eax, eax
je 0x4d8f1a
lea ebp, [0x72b240]
push dword [ebp]
push dword [esp + 0x14]
call fcn.0053f8e0
and eax, eax
je 0x4d8f1a
mov eax, 1
jmp 0x4d8f1c
xor eax, eax
and eax, eax
je 0x4d911e
push 2
push 0xffffffff
push 0x100c
lea ebp, [0x72a850]
push dword [ebp + 0x5c]
call sub.USER32.dll_SendMessageW
mov dword [esp + 4], eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.00540480
call fcn.00542370
mov edx, 0x62075c
pop ecx
push ecx
call fcn.004fa4f0
mov ecx, eax
call fcn.004fa4a0
je 0x4d901c
push edx
call fcn.00542240
pop edx
push eax
mov edx, 0x61f59a
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x6206d8
push eax
mov eax, 0x6206d8
push eax
push dword [esp + 0x24]
call fcn.0053f790
mov ebx, eax
inc ebx
push ebx
push dword [esp + 0x24]
call fcn.0053f490
pop eax
lea eax, [esp + 0xc]
push eax
call fcn.00542280
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x61f062
push eax
push dword [esp + 0x24]
push 4
call fcn.005037f0
call fcn.004fa482
add dword [esp], edx
call fcn.005405a0
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov ebx, dword [esp + 4]
and ebx, ebx
jl 0x4d911e
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72b240]
push dword [ebp]
push 1
push dword [esp + 0x20]
call fcn.0053f490
mov edx, 0x620a08
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [0x72b428]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 0x1c]
call fcn.005410d0
call fcn.004fa482
add dword [esp], edx
call fcn.00474482
push dword [esp]
call fcn.004fa4e0
call fcn.004fa482
add dword [esp], edx
push dword [0x72b518]
call fcn.00535655
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, 0x63b57e
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
mov eax, 9
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72b240]
push dword [ebp]
push 2
push dword [esp + 0x2c]
call fcn.0053f490
call fcn.004fa482
add dword [esp], edx
call fcn.004dfc0f
pop eax
lea eax, [esp + 0x14]
push eax
call fcn.00542280
push 0x10
call fcn.004b03dd
and eax, eax
je 0x4d91cf
lea ebp, [0x72a978]
mov edx, dword [ebp + 0x38]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
mov edx, str.CSVUB_information.txt
push edx
call fcn.00542310
lea eax, [esp + 0x18]
push eax
call fcn.00542280
push dword [esp + 0x14]
call fcn.00482439
mov dword [esp], eax
cmp dword [esp], 0
je 0x4d91bb
push 2
push dword [esp + 4]
call fcn.00524270
push 2
push dword [esp + 0x14]
push dword [esp + 8]
call fcn.005244d0
push dword [esp]
call fcn.00523a00
push 5
push 0
push 0
push dword [esp + 0x20]
mov eax, str.edit
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
jmp 0x4d91cd
push dword [esp + 0x14]
lea ebp, [0x72a850]
push dword [ebp]
call fcn.004cf534
jmp 0x4d91e7
push 1
push 0x24
call fcn.005286e6
push dword [esp + 0x10]
call fcn.005379ea
xor eax, eax
push dword [esp + 0x10]
call fcn.00542440
push dword [esp + 0xc]
call fcn.00542440
push dword [esp + 8]
call fcn.00542440
push dword [esp + 0x14]
call fcn.00542440
add esp, 0x18
pop ebx
pop ebp
ret