Function at 0x5bae21
Capabilities:
Create process on windows

Disassembly:
push ebp
sub esp, 0x68
mov eax, 0x6b1d45
call fcn.00640244
sub esp, 0xf4
push ebx
mov ebx, ecx
push esi
push edi
lea edi, [ebx + 0x4cc]
cmp dword [edi], 0
jne 0x5baee5
push 0x80
call fcn.0063ffa4
mov esi, eax
pop ecx
mov dword [ebp + 0x68], esi
and dword [ebp - 4], 0
test esi, esi
je 0x5bae81
push 0x102c00
sub esp, 0x18
mov ecx, esp
push str.featureContent
call fcn.0040eeff
push ebx
mov ecx, esi
call fcn.00613565
mov esi, eax
jmp 0x5bae83
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [ebp + 0x68], esi
test esi, esi
je 0x5bae95
mov ecx, esi
call fcn.006138a6
lea eax, [ebp + 0x68]
mov dword [ebp - 4], 1
push eax
mov ecx, edi
call fcn.005b306a
push 2
pop ebx
mov dword [ebp - 4], ebx
test esi, esi
je 0x5baeb8
mov ecx, esi
call fcn.00613cd1
mov ecx, dword [edi]
or dword [ebp - 4], 0xffffffff
push 0
push 0
sub esp, 0x18
mov eax, esp
and dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
cmp dword [eax + 0x14], 8
jb 0x5baeda
mov eax, dword [eax]
xor edx, edx
mov word [eax], dx
mov eax, dword [ecx]
push ebx
call dword [eax + 0x54]
push str.http:__trontv.com____pclassic
lea ecx, [ebp + 0x4c]
call fcn.0040eeff
cmp byte [0x7e14a4], 0
mov dword [ebp - 4], 3
je 0x5baf18
cmp dword [0x7e14b8], 0
je 0x5baf18
push 0xffffffffffffffff
push 0
mov bl, 1
push 0x7e14a8
jmp 0x5baf2c
xor bl, bl
cmp dword [0x7e149c], 0
je 0x5baf34
push 0xffffffffffffffff
push 0
push 0x7e148c
lea ecx, [ebp + 0x4c]
call fcn.0040f41e
call fcn.00462a7b
lea ecx, [ebp - 0x100]
mov dword [ebp + 0x68], eax
call fcn.004cdc06
push 1
push 0
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 4
push eax
call fcn.0047165a
mov byte [ebp - 4], 5
call fcn.0046253b
push edx
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.0050482b
mov esi, eax
push 0x6cb4c8
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.004594c6
push esi
push eax
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 7
push eax
call fcn.00428938
push 0
push 1
lea ecx, [ebp - 0x24]
call fcn.0040f52f
push 0
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0xa
call fcn.0040f52f
mov esi, str.h_value
push esi
call fcn.0040f10e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f072
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040efd9
mov esi, 0x716640
push esi
call fcn.0040f10e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f072
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040efd9
mov esi, str.osv
push esi
call fcn.0040f10e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f072
cmp dword [ebp - 0xb8], 0x10
mov eax, dword [ebp - 0xcc]
jae 0x5bb026
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp + 0x18]
call fcn.0040eeff
mov esi, eax
cmp dword [ebp - 0xe8], 0x10
mov ecx, dword [ebp - 0xfc]
mov byte [ebp - 4], 0xb
jae 0x5bb04a
lea ecx, [ebp - 0xfc]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.0040eeff
push 0x743dc4
push eax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xc
push eax
call fcn.00428988
push esi
push eax
lea eax, [ebp]
mov byte [ebp - 4], 0xd
push eax
call fcn.00428938
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0xe
push esi
push eax
lea ecx, [ebp + 0x4c]
call fcn.0040efd9
push esi
push 1
lea ecx, [ebp]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp - 0x84]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp - 0x9c]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f52f
mov esi, str.iev
push esi
call fcn.0040f10e
pop ecx
push eax
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f072
mov esi, dword [ebp + 0x68]
lea eax, [ebp + 0x18]
push esi
push eax
call fcn.00444481
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0xf
call fcn.0040efd9
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f52f
push str.geo
call fcn.0040f10e
pop ecx
push eax
push str.geo
lea ecx, [ebp + 0x4c]
call fcn.0040f072
call fcn.0056fcff
push 0xffffffffffffffff
push 0
add eax, 0xb8
lea ecx, [ebp + 0x4c]
push eax
call fcn.0040efd9
push str.client_version
call fcn.0040f10e
pop ecx
push eax
push str.client_version
lea ecx, [ebp + 0x4c]
call fcn.0040f072
call fcn.00495134
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00444481
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x10
call fcn.0040efd9
push 0
push 1
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 0xa
call fcn.0040f52f
push str.ieVersion
lea ecx, [ebp]
call fcn.0040eeff
push 1
push esi
lea eax, [ebp]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00606c92
xor esi, esi
mov byte [ebp - 4], 0x13
push esi
push 1
lea ecx, [ebp]
call fcn.0040f52f
push str.session_id
lea ecx, [ebp + 0x30]
call fcn.0040eeff
push 1
sub esp, 0x18
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x54]
mov ecx, esp
push eax
call fcn.0040f4ab
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.00483a72
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x15
call fcn.0040efd9
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040f52f
mov esi, str.popout
test bl, bl
jne 0x5bb218
mov esi, str.pageShow
push str.action
lea ecx, [ebp + 0x30]
call fcn.0040eeff
push 0
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp + 0x18]
push eax
call fcn.0046a515
push 0xffffffffffffffff
xor esi, esi
mov byte [ebp - 4], 0x17
push esi
push eax
lea ecx, [ebp - 0x3c]
call fcn.0040efd9
push esi
push 1
lea ecx, [ebp + 0x18]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp + 0x30]
mov byte [ebp - 4], 0x13
call fcn.0040f52f
push str.TronTv
lea ecx, [ebp + 0x30]
call fcn.0040eeff
push esi
push esi
push esi
lea eax, [ebp + 0x30]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x3c]
push eax
push 0x41
call fcn.00488d2d
push esi
inc esi
mov byte [ebp - 4], 0x13
push esi
lea ecx, [ebp + 0x30]
call fcn.0040f52f
test bl, bl
je 0x5bb33c
cmp dword [ebp + 0x60], 0x10
mov ecx, dword [ebp + 0x4c]
mov edx, ecx
jae 0x5bb2ad
lea edx, [ebp + 0x4c]
mov eax, dword [ebp + 0x5c]
add eax, edx
cmp dword [ebp + 0x60], 0x10
jae 0x5bb2bb
lea ecx, [ebp + 0x4c]
lea edx, [ebp + 0x67]
push edx
push eax
push ecx
lea ecx, [ebp + 0x30]
call fcn.005af5b8
cmp dword [ebp + 0x44], 8
mov eax, dword [ebp + 0x30]
mov byte [ebp - 4], 0x19
jae 0x5bb2d9
lea eax, [ebp + 0x30]
push esi
xor ebx, ebx
push ebx
push ebx
push eax
push 0x6c15d4
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0x74471c
lea ecx, [ebp - 0x24]
call fcn.0040eeff
push str.http:__utclient.utorrent.com_offers_trontv_popout_index.html
lea ecx, [ebp]
mov byte [ebp - 4], 0x1a
call fcn.0040eeff
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp]
mov byte [ebp - 4], 0x1b
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
push ebx
push esi
lea ecx, [ebp]
call fcn.0040f52f
push ebx
push esi
lea ecx, [ebp - 0x24]
call fcn.0040f52f
push ebx
push esi
lea ecx, [ebp + 0x30]
call fcn.004281f2
jmp 0x5bb368
push 0x74471c
lea ecx, [ebp - 0x24]
call fcn.0040eeff
mov ecx, dword [edi]
lea edx, [ebp - 0x24]
push edx
lea edx, [ebp + 0x4c]
mov byte [ebp - 4], 0x1c
push edx
mov eax, dword [ecx]
call dword [eax + 0x64]
xor ebx, ebx
lea ecx, [ebp - 0x24]
push ebx
push esi
call fcn.0040f52f
push ebx
push esi
lea ecx, [ebp - 0x3c]
call fcn.0040f52f
push ebx
push esi
lea ecx, [ebp - 0x54]
call fcn.0040f52f
push ebx
push esi
lea ecx, [ebp - 0x6c]
call fcn.0040f52f
lea ecx, [ebp - 0x100]
call fcn.004cde73
push ebx
push esi
lea ecx, [ebp + 0x4c]
call fcn.0040f52f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x6c]
pop ebp
ret 8