Function at 0x4d7d71
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5b0
mov eax, dword [0x55b0a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
xor edi, edi
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push edi
push edi
push edi
push edi
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004d5ef3
pop ecx
push edi
push dword [ebp + 8]
mov ecx, 0x55e14c
push edi
call fcn.004d6300
push edi
lea ecx, [ebp - 0x5b0]
call fcn.004d4110
push esi
lea ecx, [ebp - 0x5b0]
call fcn.004d42f6
push str.draft_zip
lea ecx, [ebp - 0x5b0]
call fcn.004d4c50
test eax, eax
je 0x4d7f29
lea eax, [ebp - 0x560]
push eax
push str.draft_path
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
lea ecx, [ebp - 0x64]
push dword [eax]
call fcn.00404150
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
lea eax, [ebp - 0x560]
push eax
push str.dest_file
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
lea ecx, [ebp - 0x34]
push dword [eax]
call fcn.00404150
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
push ecx
push ecx
lea eax, [ebp - 0x64]
mov ecx, esp
push eax
call fcn.0040f910
lea ecx, [ebp - 0xf4]
call fcn.0040d920
lea eax, [ebp - 0xf4]
push eax
call fcn.00411420
pop ecx
test al, al
je 0x4d7f09
lea ecx, [ebp - 0x55c]
call fcn.004c1e74
cmp dword [ebp - 0x50], 8
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x560]
cmovae eax, dword [ebp - 0x64]
push eax
call fcn.004af026
cmp dword [ebp - 0x20], 8
lea ecx, [ebp - 0x560]
push ecx
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
cmovae eax, dword [ebp - 0x34]
push eax
call fcn.004af026
lea ecx, [ebp - 0x55c]
call fcn.004c205b
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x55c]
call fcn.004c203c
lea ecx, [ebp - 0x55c]
call fcn.004c1e89
lea ecx, [ebp - 0xf4]
call fcn.0040d9a0
xor ebx, ebx
lea ecx, [ebp - 0x34]
push edi
inc ebx
push ebx
call fcn.004058c0
lea ecx, [ebp - 0x64]
jmp 0x4d862c
push 7
pop ebx
xor eax, eax
mov dword [ebp - 0xf8], ebx
mov esi, 0x5369f8
mov dword [ebp - 0xfc], edi
push esi
mov word [ebp - 0x10c], ax
call fcn.004d92ea
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.004063d0
lea eax, [ebp - 0x560]
push eax
push esi
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
mov esi, dword [eax]
cmp word [esi], di
jne 0x4d7f86
mov eax, edi
jmp 0x4d7f8d
push esi
call fcn.004d92ea
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.004063d0
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
push edi
xor eax, eax
mov dword [ebp - 0xc8], ebx
push 0x542f78
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], edi
mov word [ebp - 0xdc], ax
call fcn.004063d0
mov esi, str.draft_1
lea ecx, [ebp - 0x5b0]
push esi
call fcn.004d4c50
test eax, eax
je 0x4d8047
lea eax, [ebp - 0x560]
push eax
push esi
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
mov esi, dword [eax]
cmp word [esi], di
jne 0x4d801a
mov eax, edi
jmp 0x4d8021
push esi
call fcn.004d92ea
pop ecx
push eax
push esi
lea ecx, [ebp - 0xdc]
call fcn.004063d0
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
push edi
xor eax, eax
mov dword [ebp - 0xb0], ebx
push 0x542f78
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0xb4], edi
mov word [ebp - 0xc4], ax
call fcn.004063d0
mov esi, str.draft_2
lea ecx, [ebp - 0x5b0]
push esi
call fcn.004d4c50
test eax, eax
je 0x4d80db
lea eax, [ebp - 0x560]
push eax
push esi
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
mov esi, dword [eax]
cmp word [esi], di
jne 0x4d80ae
mov eax, edi
jmp 0x4d80b5
push esi
call fcn.004d92ea
pop ecx
push eax
push esi
lea ecx, [ebp - 0xc4]
call fcn.004063d0
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
push edi
xor eax, eax
mov dword [ebp - 0x80], ebx
push 0x542f78
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x84], edi
mov word [ebp - 0x94], ax
call fcn.004063d0
mov esi, str.draft_3
lea ecx, [ebp - 0x5b0]
push esi
call fcn.004d4c50
test eax, eax
je 0x4d816c
lea eax, [ebp - 0x560]
push eax
push esi
lea eax, [ebp - 0x568]
push eax
lea ecx, [ebp - 0x5b0]
call fcn.004d4bd4
mov ecx, eax
call fcn.004d523e
mov esi, dword [eax]
cmp word [esi], di
jne 0x4d813f
mov eax, edi
jmp 0x4d8146
push esi
call fcn.004d92ea
pop ecx
push eax
push esi
lea ecx, [ebp - 0x94]
call fcn.004063d0
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x568]
call fcn.004d4195
xor eax, eax
mov dword [ebp - 0x110], ebx
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x124]
push eax
mov dword [ebp - 0x114], edi
call fcn.004cc700
push ecx
lea eax, [ebp - 0x124]
mov ecx, esp
push eax
call fcn.0040f910
lea ecx, [ebp - 0x7c]
call fcn.0040d920
lea eax, [ebp - 0x7c]
push eax
call fcn.00411420
xor ebx, ebx
inc ebx
pop ecx
test al, al
je 0x4d85ea
push ecx
push ecx
mov ecx, esp
push str.Feedback
call fcn.004043f0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
lea eax, [ebp - 0xac]
push eax
call fcn.00414300
push edi
call fcn.004e2955
and dword [ebp - 0x54], 0
mov edi, eax
xor eax, eax
mov dword [ebp - 0x50], 7
push 0x535ac0
mov esi, edx
mov word [ebp - 0x64], ax
call fcn.004d92ea
add esp, 0xc
lea ecx, [ebp - 0x64]
push eax
push 0x535ac0
call fcn.004063d0
push 0x536a44
call fcn.004d92ea
pop ecx
push eax
push 0x536a44
lea ecx, [ebp - 0x64]
call fcn.0040c700
push eax
lea ecx, [ebp - 0xf4]
call fcn.0040bc90
push esi
lea eax, [ebp - 0x1c]
push edi
push eax
call fcn.004d7d16
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004d52df
add esp, 0x10
mov ecx, esp
push eax
call fcn.0040f910
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0xac]
call fcn.0040eb70
xor edi, edi
lea ecx, [ebp - 0x34]
push edi
push ebx
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0xf4]
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0x64]
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0x1c]
call fcn.004058c0
lea eax, [ebp - 0x4c]
push eax
call fcn.00414300
pop ecx
cmp dword [ebp - 0xcc], edi
je 0x4d830c
push ecx
push ecx
mov ecx, esp
push str.draft_1
call fcn.004043f0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040eb70
lea eax, [ebp - 0x34]
push eax
call fcn.00414300
pop ecx
push ebx
lea eax, [ebp - 0x34]
push eax
push ecx
push ecx
lea eax, [ebp - 0xdc]
mov ecx, esp
push eax
call fcn.0040f910
lea ecx, [ebp - 0x1c]
call fcn.0040d920
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
lea ecx, [ebp - 0x34]
call fcn.0040d9a0
cmp dword [ebp - 0xb4], edi
je 0x4d836e
push ecx
push ecx
mov ecx, esp
push str.draft_2
call fcn.004043f0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040eb70
lea eax, [ebp - 0x34]
push eax
call fcn.00414300
pop ecx
push ebx
lea eax, [ebp - 0x34]
push eax
push ecx
push ecx
lea eax, [ebp - 0xc4]
mov ecx, esp
push eax
call fcn.0040f910
lea ecx, [ebp - 0x1c]
call fcn.0040d920
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
lea ecx, [ebp - 0x34]
call fcn.0040d9a0
cmp dword [ebp - 0x84], edi
je 0x4d83d0
push ecx
push ecx
mov ecx, esp
push str.draft_3
call fcn.004043f0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040eb70
lea eax, [ebp - 0x34]
push eax
call fcn.00414300
pop ecx
push ebx
lea eax, [ebp - 0x34]
push eax
push ecx
push ecx
lea eax, [ebp - 0x94]
mov ecx, esp
push eax
call fcn.0040f910
lea ecx, [ebp - 0x1c]
call fcn.0040d920
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
lea ecx, [ebp - 0x34]
call fcn.0040d9a0
push ebx
lea eax, [ebp - 0x4c]
push eax
push ecx
push ecx
mov ecx, esp
push 0x536a48
call fcn.004043f0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
push ebx
lea eax, [ebp - 0x4c]
push eax
push ecx
push ecx
mov ecx, esp
push 0x536a54
call fcn.004043f0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
push ebx
lea eax, [ebp - 0x4c]
push eax
push ecx
push ecx
mov ecx, esp
push str.VesdkLog
call fcn.004043f0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
push ebx
lea eax, [ebp - 0x4c]
push eax
push ecx
push ecx
mov ecx, esp
push str.Crash
call fcn.004043f0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
push ebx
lea eax, [ebp - 0x4c]
push eax
push ecx
push ecx
mov ecx, esp
push str.TTNet
call fcn.004043f0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040eb70
push eax
call fcn.00410f50
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
lea ecx, [ebp - 0x34c]
call fcn.004c1e74
push str._feed_draft.zip
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004c8c97
pop ecx
mov ecx, esp
push eax
call fcn.0040f910
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xac]
call fcn.0040eb70
push eax
lea ecx, [ebp - 0x13c]
call fcn.00409c50
lea ecx, [ebp - 0x1c]
call fcn.0040d9a0
push edi
push ebx
lea ecx, [ebp - 0xf4]
call fcn.004058c0
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x560]
cmovae eax, dword [ebp - 0x4c]
push eax
call fcn.004af026
cmp dword [ebp - 0x128], 8
lea ecx, [ebp - 0x560]
push ecx
push ecx
lea eax, [ebp - 0x13c]
mov ecx, esp
cmovae eax, dword [ebp - 0x13c]
push eax
call fcn.004af026
lea ecx, [ebp - 0x34c]
call fcn.004c205b
mov ecx, dword [ebp - 0x560]
lea ecx, [ecx - 0x10]
call fcn.004b04f5
lea ecx, [ebp - 0x34c]
call fcn.004c203c
lea eax, [ebp - 0x4c]
push ebx
push eax
call fcn.00410d20
cmp dword [ebp - 0x98], 8
lea eax, [ebp - 0xac]
pop ecx
cmovae eax, dword [ebp - 0xac]
pop ecx
push ebx
push edi
push eax
push str.explorer.exe
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, 0x55e14c
call fcn.004d7543
call dword [sym.imp.ole32.dll_CoUninitialize]
push edi
push ebx
lea ecx, [ebp - 0x13c]
call fcn.004058c0
lea ecx, [ebp - 0x34c]
call fcn.004c1e89
lea ecx, [ebp - 0x4c]
call fcn.0040d9a0
lea ecx, [ebp - 0xac]
call fcn.0040d9a0
lea ecx, [ebp - 0x7c]
call fcn.0040d9a0
push edi
push ebx
lea ecx, [ebp - 0x124]
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0x94]
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0xc4]
call fcn.004058c0
push edi
push ebx
lea ecx, [ebp - 0xdc]
call fcn.004058c0
lea ecx, [ebp - 0x10c]
push edi
push ebx
call fcn.004058c0
lea ecx, [ebp - 0x5b0]
call fcn.004d41a0
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004d9c43
mov esp, ebp
pop ebp
ret 0x10