Function at 0x4d8e3b
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
call fcn.005423e0
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 0x23a
push 0x22f
call fcn.0051f3b4
lea eax, [esp + 0x10]
push eax
call fcn.00542280
lea ebp, [0x72abf8]
mov edx, dword [ebp + 0x160]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov eax, str.Target
push eax
push dword [esp + 0x10]
call fcn.0053f8e0
and eax, eax
je 0x4d8eee
push edx
call fcn.00542240
pop edx
push eax
mov eax, str.CIRAF
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push dword [esp + 0x20]
call fcn.0053f5c0
call fcn.004fa482
add dword [esp], edx
call fcn.0053f8e0
call fcn.004fa4e0
and eax, eax
je 0x4d8eee
mov eax, 1
jmp 0x4d8ef0
xor eax, eax
and eax, eax
je 0x4d8f35
mov edx, dword [esp + 0x10]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
mov edx, 0x63b588
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x61f062
push eax
mov eax, 1
push eax
call fcn.00455801
pop eax
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov eax, str.Transmitter
push eax
push dword [esp + 0x10]
call fcn.0053f8e0
and eax, eax
je 0x4d8f65
lea ebp, [0x72b250]
push dword [ebp]
push dword [esp + 0x14]
call fcn.0053f8e0
and eax, eax
je 0x4d8f65
mov eax, 1
jmp 0x4d8f67
xor eax, eax
and eax, eax
je 0x4d9169
push 2
push 0xffffffff
push 0x100c
lea ebp, [0x72a860]
push dword [ebp + 0x5c]
call sub.USER32.dll_SendMessageW
mov dword [esp + 4], eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 1
push dword [esp + 0x1c]
call fcn.00540480
call fcn.00542370
mov edx, 0x620792
pop ecx
push ecx
call fcn.004fa4f0
mov ecx, eax
call fcn.004fa4a0
je 0x4d9067
push edx
call fcn.00542240
pop edx
push eax
mov edx, 0x61f5d0
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x62070e
push eax
mov eax, 0x62070e
push eax
push dword [esp + 0x24]
call fcn.0053f790
mov ebx, eax
inc ebx
push ebx
push dword [esp + 0x24]
call fcn.0053f490
pop eax
lea eax, [esp + 0xc]
push eax
call fcn.00542280
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x61f062
push eax
push dword [esp + 0x24]
push 4
call fcn.005037f0
call fcn.004fa482
add dword [esp], edx
call fcn.005405a0
lea eax, [esp + 0x14]
push eax
call fcn.00542280
mov ebx, dword [esp + 4]
and ebx, ebx
jl 0x4d9169
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72b250]
push dword [ebp]
push 1
push dword [esp + 0x20]
call fcn.0053f490
mov edx, 0x620a3e
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov ebx, dword [esp + 0x14]
mov ebp, dword [0x72b438]
imul ebx, ebx, 0x5c
add ebp, ebx
push dword [ebp + 0x1c]
call fcn.005410d0
call fcn.004fa482
add dword [esp], edx
call fcn.004744cd
push dword [esp]
call fcn.004fa4e0
call fcn.004fa482
add dword [esp], edx
push dword [0x72b528]
call fcn.00535655
mov ebp, eax
mov edx, dword [ebp]
push edx
call fcn.00542310
mov edx, dword [esp + 0xc]
push edx
call fcn.00542310
mov edx, 0x63b588
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
mov eax, 9
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
lea ebp, [0x72b250]
push dword [ebp]
push 2
push dword [esp + 0x2c]
call fcn.0053f490
call fcn.004fa482
add dword [esp], edx
call fcn.004dfc5a
pop eax
lea eax, [esp + 0x14]
push eax
call fcn.00542280
push 0x10
call fcn.004b0428
and eax, eax
je 0x4d921a
lea ebp, [0x72a988]
mov edx, dword [ebp + 0x38]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
mov edx, str.CSVUB_information.txt
push edx
call fcn.00542310
lea eax, [esp + 0x18]
push eax
call fcn.00542280
push dword [esp + 0x14]
call fcn.00482484
mov dword [esp], eax
cmp dword [esp], 0
je 0x4d9206
push 2
push dword [esp + 4]
call fcn.00524270
push 2
push dword [esp + 0x14]
push dword [esp + 8]
call fcn.005244d0
push dword [esp]
call fcn.00523a00
push 5
push 0
push 0
push dword [esp + 0x20]
mov eax, str.edit
push eax
push 0
call sub.SHELL32.dll_ShellExecuteW
jmp 0x4d9218
push dword [esp + 0x14]
lea ebp, [0x72a860]
push dword [ebp]
call fcn.004cf57f
jmp 0x4d9232
push 1
push 0x24
call fcn.005286e6
push dword [esp + 0x10]
call fcn.005379ea
xor eax, eax
push dword [esp + 0x10]
call fcn.00542440
push dword [esp + 0xc]
call fcn.00542440
push dword [esp + 8]
call fcn.00542440
push dword [esp + 0x14]
call fcn.00542440
add esp, 0x18
pop ebx
pop ebp
ret