Function at 0x5bceb1
Capabilities:
Create process on windows

Disassembly:
push ebp
sub esp, 0x68
mov eax, 0x6b425b
call fcn.006426c4
sub esp, 0xf4
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0x4d8]
cmp dword [edi], 0
jne 0x5bcf77
push 0x80
call fcn.00642424
mov esi, eax
pop ecx
mov dword [ebp + 0x68], esi
and dword [ebp - 4], 0
test esi, esi
je 0x5bcf11
push 0x102c00
sub esp, 0x18
mov ecx, esp
push str.featureContent
call fcn.0040f32f
push ebx
mov ecx, esi
call fcn.00615772
mov esi, eax
jmp 0x5bcf13
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [ebp + 0x68], esi
test esi, esi
je 0x5bcf25
mov ecx, esi
call fcn.00615ab3
lea eax, [ebp + 0x68]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.005b4de9
mov dword [ebp - 4], 2
test esi, esi
je 0x5bcf49
mov ecx, esi
call fcn.00615ede
mov ecx, dword [edi]
or dword [ebp - 4], 0xffffffff
push 0
push 0
sub esp, 0x18
mov eax, esp
and dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
jb 0x5bcf6b
mov eax, dword [eax]
xor edx, edx
mov word [eax], dx
mov eax, dword [ecx]
push 3
call dword [eax + 0x54]
push 0x6cbf74
lea ecx, [ebp + 0x4c]
call fcn.0040f32f
cmp byte [0x7e58c4], 0
mov dword [ebp - 4], 3
je 0x5bcfaa
cmp dword [0x7e58d8], 0
je 0x5bcfaa
push 0xffffffffffffffff
push 0
mov bl, 1
push 0x7e58c8
jmp 0x5bcfbe
xor bl, bl
cmp dword [0x7e58bc], 0
je 0x5bcfc6
push 0xffffffffffffffff
push 0
push 0x7e58ac
lea ecx, [ebp + 0x4c]
call fcn.0040f84e
call fcn.004632ca
lea ecx, [ebp - 0x100]
mov dword [ebp + 0x68], eax
call fcn.004ce5a0
push 1
push 0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 4
push eax
call fcn.004722e0
mov byte [ebp - 4], 5
call fcn.00462d8a
push edx
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.00505383
mov esi, eax
push 0x6ce578
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.00459906
push esi
push eax
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 7
push eax
call fcn.00428d3c
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.0040f95f
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0xa
call fcn.0040f95f
mov esi, str.h_value
push esi
call fcn.0040f53e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f409
mov esi, 0x7199d4
push esi
call fcn.0040f53e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f409
mov esi, str.osv
push esi
call fcn.0040f53e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
cmp dword [ebp - 0xb8], 0x10
mov eax, dword [ebp - 0xcc]
jae 0x5bd0b8
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp + 0x18]
call fcn.0040f32f
mov esi, eax
cmp dword [ebp - 0xe8], 0x10
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], 0xb
jae 0x5bd0dc
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.0040f32f
push 0x74709c
push eax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xc
push eax
call fcn.00428d8c
push esi
push eax
lea eax, [ebp]
mov byte [ebp - 4], 0xd
push eax
call fcn.00428d3c
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0xe
push esi
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040f409
push esi
push 1
lea ecx, [ebp]
call fcn.0040f95f
push esi
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f95f
push esi
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f95f
push esi
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f95f
mov esi, str.iev
push esi
call fcn.0040f53e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
mov esi, dword [ebp + 0x68]
lea eax, [ebp + 0x18]
push esi
push eax
call fcn.0044494c
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0xf
call fcn.0040f409
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f95f
push str.geo
call fcn.0040f53e
pop ecx
push eax
push str.geo
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
call fcn.0057110b
push 0xffffffffffffffff
push 0
add eax, 0xb8
lea ecx, [ebp + 0x4c]
push eax
call fcn.0040f409
push str.client_version
call fcn.0040f53e
pop ecx
push eax
push str.client_version
lea ecx, [ebp + 0x4c]
call fcn.0040f4a2
call fcn.0049535c
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.0044494c
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x10
call fcn.0040f409
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f95f
push str.ieVersion
lea ecx, [ebp]
call fcn.0040f32f
push 1
push esi
lea eax, [ebp]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.0046cc6c
xor esi, esi
mov byte [ebp - 4], 0x13
push esi
push 1
lea ecx, [ebp]
call fcn.0040f95f
push str.session_id
lea ecx, [ebp + 0x30]
call fcn.0040f32f
push 1
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x54]
mov ecx, esp
push eax
call fcn.0040f8db
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00483fda
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x15
call fcn.0040f409
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040f95f
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040f95f
mov esi, str.popout
test bl, bl
jne 0x5bd2aa
mov esi, str.pageShow
push str.action
lea ecx, [ebp + 0x30]
call fcn.0040f32f
push 0
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.0046adc6
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0x17
push esi
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040f409
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040f95f
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040f95f
push str.TronTv
lea ecx, [ebp + 0x30]
call fcn.0040f32f
push esi
push esi
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x41
call fcn.00489021
push esi
inc esi
mov byte [ebp - 4], 0x13
push esi
lea ecx, [ebp + 0x30]
call fcn.0040f95f
test bl, bl
je 0x5bd3ce
cmp dword [ebp + 0x60], 0x10
mov ecx, dword [ebp + 0x4c]
mov edx, ecx
jae 0x5bd33f
lea edx, [ebp + 0x4c]
mov eax, dword [ebp + 0x5c]
add eax, edx
cmp dword [ebp + 0x60], 0x10
jae 0x5bd34d
lea ecx, [ebp + 0x4c]
lea edx, [ebp + 0x67]
push edx
push eax
push ecx
lea ecx, [ebp + 0x30]
call fcn.005b1188
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0x19
jae 0x5bd36b
lea eax, [ebp + 0x30]
push esi
xor ebx, ebx
push ebx
push ebx
push eax
push 0x6c4654
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x7479ec
lea ecx, [ebp - 0x24]
call fcn.0040f32f
push 0x719978
lea ecx, [ebp]
mov byte [ebp - 4], 0x1a
call fcn.0040f32f
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp]
mov byte [ebp - 4], 0x1b
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
push ebx
push esi
lea ecx, [ebp]
call fcn.0040f95f
push ebx
push esi
lea ecx, [ebp - 0x24]
call fcn.0040f95f
push ebx
push esi
lea ecx, [ebp + 0x30]
call fcn.004285f6
jmp 0x5bd3fa
push 0x7479ec
lea ecx, [ebp - 0x24]
call fcn.0040f32f
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp + 0x4c]
mov byte [ebp - 4], 0x1c
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
xor ebx, ebx
lea ecx, [ebp - 0x24]
push ebx
push esi
call fcn.0040f95f
push ebx
push esi
lea ecx, [ebp - 0x3c]
call fcn.0040f95f
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.0040f95f
push ebx
push esi
lea ecx, [ebp - 0x6c]
call fcn.0040f95f
lea ecx, [ebp - 0x100]
call fcn.004ce80d
push ebx
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f95f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x6c]
pop ebp
ret 8