Function at 0x5c8ac6
Capabilities:
Create process on windows

Disassembly:
push ebp
sub esp, 0x68
mov eax, 0x6c20fd
call fcn.00651da4
sub esp, 0xf4
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0x4ec]
cmp dword [edi], 0
jne 0x5c8b8c
push 0x80
call fcn.00651ae6
mov esi, eax
pop ecx
mov dword [ebp + 0x68], esi
and dword [ebp - 4], 0
test esi, esi
je 0x5c8b26
push 0x102c00
sub esp, 0x18
mov ecx, esp
push str.featureContent
call fcn.0040f49f
push ebx
mov ecx, esi
call fcn.00624567
mov esi, eax
jmp 0x5c8b28
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [ebp + 0x68], esi
test esi, esi
je 0x5c8b3a
mov ecx, esi
call fcn.006248a8
lea eax, [ebp + 0x68]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.005c0956
mov dword [ebp - 4], 2
test esi, esi
je 0x5c8b5e
mov ecx, esi
call fcn.00624cd3
mov ecx, dword [edi]
or dword [ebp - 4], 0xffffffff
push 0
push 0
sub esp, 0x18
mov eax, esp
and dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
jb 0x5c8b80
mov eax, dword [eax]
xor edx, edx
mov word [eax], dx
mov eax, dword [ecx]
push 3
call dword [eax + 0x54]
push 0x6d8c2c
lea ecx, [ebp + 0x4c]
call fcn.0040f49f
cmp byte [0x7f8984], 0
mov dword [ebp - 4], 3
je 0x5c8bbf
cmp dword [0x7f8998], 0
je 0x5c8bbf
push 0xffffffffffffffff
push 0
mov bl, 1
push 0x7f8988
jmp 0x5c8bd3
xor bl, bl
cmp dword [0x7f897c], 0
je 0x5c8bdb
push 0xffffffffffffffff
push 0
push 0x7f896c
lea ecx, [ebp + 0x4c]
call fcn.0040f9be
call fcn.0045f561
lea ecx, [ebp - 0x100]
mov dword [ebp + 0x68], eax
call fcn.004ca926
push 1
push 0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 4
push eax
call fcn.0046e4c6
mov byte [ebp - 4], 5
call fcn.0045edef
push edx
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.00502237
mov esi, eax
push 0x6db288
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00455873
push esi
push eax
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 7
push eax
call fcn.00428c9e
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.0040facf
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0xa
call fcn.0040facf
mov esi, str.h_value
push esi
call fcn.0040f6ae
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f612
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f579
mov esi, 0x727fe4
push esi
call fcn.0040f6ae
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f612
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f579
mov esi, str.osv
push esi
call fcn.0040f6ae
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f612
cmp dword [ebp - 0xb8], 0x10
mov eax, dword [ebp - 0xcc]
jae 0x5c8ccd
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp + 0x18]
call fcn.0040f49f
mov esi, eax
cmp dword [ebp - 0xe8], 0x10
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], 0xb
jae 0x5c8cf1
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.0040f49f
push 0x7560b4
push eax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xc
push eax
call fcn.00428cee
push esi
push eax
lea eax, [ebp]
mov byte [ebp - 4], 0xd
push eax
call fcn.00428c9e
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0xe
push esi
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f579
push esi
push 1
lea ecx, [ebp]
call fcn.0040facf
push esi
push 1
lea ecx, [ebp - 0x84]
call fcn.0040facf
push esi
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040facf
push esi
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040facf
mov esi, str.iev
push esi
call fcn.0040f6ae
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f612
mov esi, dword [ebp + 0x68]
lea eax, [ebp + 0x18]
push esi
push eax
call fcn.0043f4e7
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0xf
call fcn.0040f579
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040facf
push str.geo
call fcn.0040f6ae
pop ecx
push eax
push str.geo
lea ecx, [ebp + 0x4c]
call fcn.0040f612
call fcn.0056e378
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f579
push str.client_version
call fcn.0040f6ae
pop ecx
push eax
push str.client_version
lea ecx, [ebp + 0x4c]
call fcn.0040f612
call fcn.0049187f
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.0043f4e7
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x10
call fcn.0040f579
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040facf
push str.ieVersion
lea ecx, [ebp]
call fcn.0040f49f
push 1
push esi
lea eax, [ebp]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00618ddd
xor esi, esi
mov byte [ebp - 4], 0x13
push esi
push 1
lea ecx, [ebp]
call fcn.0040facf
push str.session_id
lea ecx, [ebp + 0x30]
call fcn.0040f49f
push 1
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x54]
mov ecx, esp
push eax
call fcn.0040fa4b
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.004802bb
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x15
call fcn.0040f579
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040facf
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040facf
mov esi, str.popout
test bl, bl
jne 0x5c8eba
mov esi, str.pageShow
push str.action
lea ecx, [ebp + 0x30]
call fcn.0040f49f
push 0
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00428ecf
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0x17
push esi
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040f579
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040facf
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040facf
push str.TronTv
lea ecx, [ebp + 0x30]
call fcn.0040f49f
push esi
push esi
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x47
call fcn.004857ae
push esi
inc esi
mov byte [ebp - 4], 0x13
push esi
lea ecx, [ebp + 0x30]
call fcn.0040facf
test bl, bl
je 0x5c8fde
cmp dword [ebp + 0x60], 0x10
mov ecx, dword [ebp + 0x4c]
mov edx, ecx
jae 0x5c8f4f
lea edx, [ebp + 0x4c]
mov eax, dword [ebp + 0x5c]
add eax, edx
cmp dword [ebp + 0x60], 0x10
jae 0x5c8f5d
lea ecx, [ebp + 0x4c]
lea edx, [ebp + 0x67]
push edx
push eax
push ecx
lea ecx, [ebp + 0x30]
call fcn.005ace07
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0x19
jae 0x5c8f7b
lea eax, [ebp + 0x30]
push esi
xor ebx, ebx
push ebx
push ebx
push eax
push 0x6d24b4
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x756a0c
lea ecx, [ebp - 0x24]
call fcn.0040f49f
push 0x727f88
lea ecx, [ebp]
mov byte [ebp - 4], 0x1a
call fcn.0040f49f
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp]
mov byte [ebp - 4], 0x1b
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
push ebx
push esi
lea ecx, [ebp]
call fcn.0040facf
push ebx
push esi
lea ecx, [ebp - 0x24]
call fcn.0040facf
push ebx
push esi
lea ecx, [ebp + 0x30]
call fcn.004284eb
jmp 0x5c900a
push 0x756a0c
lea ecx, [ebp - 0x24]
call fcn.0040f49f
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp + 0x4c]
mov byte [ebp - 4], 0x1c
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
xor ebx, ebx
lea ecx, [ebp - 0x24]
push ebx
push esi
call fcn.0040facf
push ebx
push esi
lea ecx, [ebp - 0x3c]
call fcn.0040facf
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.0040facf
push ebx
push esi
lea ecx, [ebp - 0x6c]
call fcn.0040facf
lea ecx, [ebp - 0x100]
call fcn.004cab93
push ebx
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040facf
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x6c]
pop ebp
ret 8