Function at 0x462c76
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x6ab2c3
call fcn.00664608
sub esp, 0x34
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 0x2d
mov al, byte [ebx]
pop edx
cmp al, dl
jne 0x463237
mov cl, byte [ebx + 6]
cmp cl, dl
je 0x462ca6
cmp byte [ebx + 7], dl
jne 0x463237
movzx edx, byte [ebx + 1]
mov edi, 0x4c57
movzx esi, byte [ebx + 2]
mov eax, edx
shl eax, 8
add eax, esi
cmp eax, edi
ja 0x462f2f
je 0x462f25
mov edi, 0x4253
cmp eax, edi
ja 0x462dfb
je 0x462df1
add edi, 0xffffffef
cmp eax, edi
ja 0x462d46
je 0x462d3c
sub eax, 0x4147
je 0x462d0a
sub eax, 0xb
je 0x462d32
sub eax, 4
je 0x462d28
dec eax
sub eax, 1
je 0x462d1e
dec eax
sub eax, 1
je 0x462d14
sub eax, 0x24
jne 0x46316e
mov esi, str.Ares
jmp 0x4631b0
mov esi, str.Azureus
jmp 0x4631b0
mov esi, str.BitPump
jmp 0x4631b0
mov esi, str.Avicora
jmp 0x4631b0
mov esi, str.Arctic
jmp 0x4631b0
mov esi, str.BitBuddy
jmp 0x4631b0
sub eax, 0x4243
je 0x462de7
dec eax
sub eax, 1
je 0x462ddd
sub eax, 1
je 0x462dd3
sub eax, 1
je 0x462dc9
sub eax, 8
je 0x462d7d
sub eax, 3
jne 0x46316e
mov esi, str.BitRocket
jmp 0x4631b0
mov dl, byte [ebx + 4]
cmp dl, 0x41
jne 0x462da7
cmp byte [ebx + 5], 0x30
jne 0x462da7
movzx eax, cl
sub eax, 0x3d
push eax
push str.Bits_on_Wheels_1.0._d
push dword [ebp + 8]
call fcn.004577f2
add esp, 0xc
jmp 0x46361f
movzx eax, cl
push eax
movzx eax, byte [ebx + 5]
push eax
movzx eax, dl
push eax
push str.Bits_on_Wheels__c_c_c
push dword [ebp + 8]
call fcn.004577f2
add esp, 0x14
jmp 0x46361f
mov esi, 0x6d8508
jmp 0x4631b0
mov esi, str.Bitflu
jmp 0x4631b0
mov esi, str.BitTorrent_SDK
jmp 0x4631b0
mov esi, str.BitComet
jmp 0x4631b0
mov esi, str.BitSlave
jmp 0x4631b0
mov ecx, 0x4654
cmp eax, ecx
ja 0x462ec0
je 0x462e70
sub eax, 0x4258
je 0x462e66
sub eax, 0xec
je 0x462e5c
sub eax, 0x10
je 0x462e52
sub eax, 0xf1
je 0x462e48
sub eax, 0xfd
je 0x462e3e
sub eax, 0x11
jne 0x46316e
mov esi, str.electric_sheep
jmp 0x4631b0
mov esi, str.EBit
jmp 0x4631b0
mov esi, str.DelugeTorrent
jmp 0x4631b0
mov esi, str.CTorrent
jmp 0x4631b0
mov esi, str.Enhanced_CTorrent
jmp 0x4631b0
mov esi, str.Bittorrent_X
jmp 0x4631b0
push 9
xor ecx, ecx
pop edx
movzx eax, byte [ebx + ecx + 3]
mov word [ebp + ecx*2 - 0x18], ax
add eax, 0xffffffd0
cmp ax, dx
ja 0x462e8c
mov word [ebp + ecx*2 - 0x18], ax
inc ecx
cmp ecx, 4
jl 0x462e75
movzx eax, word [ebp - 0x12]
push eax
movzx eax, word [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0x18]
push eax
push str.FoxTorrent
push str._s__d._d_d_d
push dword [ebp + 8]
call fcn.004577f2
add esp, 0x1c
jmp 0x46361f
sub eax, 0x4845
je 0x462f1b
sub eax, 7
je 0x462f11
dec eax
sub eax, 1
je 0x462f07
sub eax, 0x306
je 0x462efd
sub eax, 0xfc
je 0x462ef3
sub eax, 4
jne 0x46316e
mov esi, str.libtorrent
jmp 0x4631b0
mov esi, str.Lphant
jmp 0x4631b0
mov esi, str.KTorrent
jmp 0x4631b0
mov esi, str.Hydranode
jmp 0x4631b0
mov esi, str.Halite
jmp 0x4631b0
mov esi, str.Helix
jmp 0x4631b0
mov esi, str.LimeWire
jmp 0x4631b0
mov ecx, 0x5453
cmp eax, ecx
ja 0x463023
je 0x463019
mov ecx, 0x5344
cmp eax, ecx
ja 0x462fb7
je 0x4631ab
sub eax, 0x4d50
je 0x462fad
dec eax
sub eax, 1
je 0x462fa3
dec eax
sub eax, 1
je 0x462f99
sub eax, 0x3f0
je 0x462f8f
sub eax, 0x10
je 0x462f85
sub eax, 0x100
jne 0x46316e
mov esi, str.Retriever
jmp 0x4631b0
mov esi, str.Qt_4_Torrent_Example
jmp 0x4631b0
mov esi, str.QQDownload
jmp 0x4631b0
mov esi, str.MoonlightTorrent
jmp 0x4631b0
mov esi, str.Miro
jmp 0x4631b0
mov esi, str.MooPolice
jmp 0x4631b0
sub eax, 0x5347
je 0x46300f
sub eax, 0xc
je 0x463005
sub eax, 7
je 0x462ffb
sub eax, 0x24
je 0x462ff1
sub eax, 0xd0
je 0x462fe7
sub eax, 4
jne 0x46316e
mov esi, str.Transmission
jmp 0x4631b0
mov esi, str.Torrent_.NET
jmp 0x4631b0
mov esi, str.Shareaza_alpha_beta
jmp 0x4631b0
mov esi, str.Shareaza
jmp 0x4631b0
mov esi, str.SwarmScope
jmp 0x4631b0
mov esi, str.SG_Torrent
jmp 0x4631b0
mov esi, str.TorrentStorm
jmp 0x4631b0
mov ecx, 0x5759
cmp eax, ecx
ja 0x463148
je 0x463141
sub eax, 0x5454
je 0x46313a
sub eax, 0xf1
je 0x463133
push 7
pop ecx
sub eax, ecx
je 0x46312c
sub eax, 1
je 0x463122
sub eax, ecx
je 0x463079
sub eax, 0xf3
jne 0x46316e
mov esi, str.Vagaa
jmp 0x4631b0
cmp dword [ebx + 0x10], 0x30504455
jne 0x4630a7
mov esi, dword [ebp + 8]
push str._FAKE__BitSpirit
mov dword [esi + 0x14], ecx
xor edi, edi
xor eax, eax
mov dword [esi], edi
mov ecx, esi
mov dword [esi + 0x10], edi
mov word [esi], ax
call fcn.00427ba3
mov eax, esi
jmp 0x463622
movzx ecx, byte [ebx + 3]
mov esi, 0x6cf2dc
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
mov dword [ebp + 0xc], esi
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x313330
cmp ecx, eax
jb 0x4630de
cmp byte [ebp + 0x10], 0
je 0x4630de
mov esi, 0x6d88f0
jmp 0x4631b0
cmp ecx, 0x313332
jb 0x4630fe
push ebx
call fcn.00463abc
test al, al
jne 0x4631b3
mov esi, str._FAKE__uTorrent
jmp 0x4631b0
cmp ecx, eax
jb 0x4631b3
mov ax, word [ebx + 8]
mov ecx, 0x3fff
and ax, cx
mov ecx, 0x1f4
cmp ax, cx
jbe 0x4631b3
jmp 0x4630d4
mov esi, str.uTorrent_Mac
jmp 0x4631b0
mov esi, str.uLeecher
jmp 0x4631b0
mov esi, str.uTorrent_Embedded
jmp 0x4631b0
mov esi, str.TuoTu
jmp 0x4631b0
mov esi, str.Wyzo
jmp 0x4631b0
sub eax, 0x584c
je 0x4631ab
sub eax, 8
je 0x4631a4
sub eax, 4
je 0x46319d
sub eax, 0x1fc
je 0x463196
sub eax, 0x1220
je 0x46318f
sub eax, 0x4ce
je 0x463188
push esi
push edx
push str.Unknown__c_c
lea eax, [ebp - 0x40]
push 0x14
push eax
call fcn.00456c1c
add esp, 0x14
lea esi, [ebp - 0x40]
jmp 0x4631b0
mov esi, str.qBittorrent
jmp 0x4631b0
mov esi, str.libTorrent
jmp 0x4631b0
mov esi, str.ZipTorrent
jmp 0x4631b0
mov esi, str.Xtorrent
jmp 0x4631b0
mov esi, str.XanTorrent
jmp 0x4631b0
mov esi, str.Xunlei
mov dword [ebp + 0xc], esi
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
lea esi, [ebx + 3]
push 0xfffffffffffffffd
stosd dword es:[edi], eax
stosw word es:[edi], ax
pop eax
sub eax, ebx
lea edi, [ebp - 0x18]
push 9
mov dword [ebp + 0x10], eax
pop ebx
movzx eax, byte [esi]
push eax
call fcn.0067da09
pop ecx
test eax, eax
je 0x463215
movzx ecx, byte [esi]
mov word [edi], cx
lea eax, [ecx - 0x30]
cmp ax, bx
jbe 0x463204
push 0x19
lea eax, [ecx - 0x41]
pop edx
cmp ax, dx
ja 0x4631f9
lea eax, [ecx - 0x37]
jmp 0x463204
lea eax, [ecx - 0x61]
cmp ax, dx
ja 0x463207
lea eax, [ecx - 0x70]
mov word [edi], ax
mov eax, dword [ebp + 0x10]
inc esi
add eax, esi
add edi, 2
cmp eax, 4
jl 0x4631cd
movzx eax, word [ebp - 0x12]
mov esi, dword [ebp + 0xc]
push eax
movzx eax, word [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0x18]
push eax
push esi
push str._s__d._d._d._d
jmp 0x462eb0
mov ch, byte [ebx + 4]
cmp ch, dl
jne 0x4632e1
cmp byte [ebx + 5], dl
jne 0x4632e1
movzx ecx, al
mov eax, ecx
sub eax, 0x41
je 0x4632aa
sub eax, 0xe
je 0x4632a3
sub eax, 3
je 0x46329c
sub eax, 1
je 0x463295
sub eax, 1
je 0x46328e
sub eax, 1
je 0x463287
push ecx
push str.Unknown__c
lea eax, [ebp - 0x40]
push 0x14
push eax
call fcn.00456c1c
add esp, 0x10
lea ecx, [ebp - 0x40]
jmp 0x4632af
mov ecx, 0x6d8a3c
jmp 0x4632af
mov ecx, str.BitTornado
jmp 0x4632af
mov ecx, str.Shadow
jmp 0x4632af
mov ecx, str.Tribler
jmp 0x4632af
mov ecx, str.Osprey_Permaseed
jmp 0x4632af
mov ecx, 0x6d89d8
xor edx, edx
movzx eax, byte [ebx + edx + 1]
mov word [ebp + edx*2 - 0x18], ax
inc edx
cmp edx, 4
jl 0x4632b1
xor eax, eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x18]
push eax
push ecx
push 0x6d8a60
push dword [ebp + 8]
call fcn.004577f2
add esp, 0x10
jmp 0x46361f
cmp al, 0x4d
jne 0x463347
cmp byte [ebx + 2], dl
jne 0x463393
cmp ch, dl
jne 0x463315
cmp byte [ebx + 6], dl
jne 0x463315
cmp byte [ebx + 7], dl
jne 0x463315
movzx eax, byte [ebx + 5]
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, byte [ebx + 1]
push eax
push str.BitTorrent__c._c._c
jmp 0x462db9
cmp byte [ebx + 5], dl
jne 0x463393
cmp byte [ebx + 7], dl
jne 0x463393
movzx eax, byte [ebx + 6]
push eax
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, byte [ebx + 1]
push eax
push str.BitTorrent__c._c_c._c
push dword [ebp + 8]
call fcn.004577f2
add esp, 0x18
jmp 0x46361f
cmp al, 0x65
jne 0x463393
cmp byte [ebx + 1], 0x78
jne 0x463393
cmp byte [ebx + 2], 0x62
jne 0x463393
cmp byte [ebx + 3], 0x63
jne 0x463393
cmp byte [ebx + 6], 0x4c
jne 0x46337a
cmp byte [ebx + 7], 0x4f
jne 0x46337a
cmp byte [ebx + 8], 0x52
jne 0x46337a
cmp byte [ebx + 9], 0x44
mov edx, str.BitLord
je 0x46337f
mov edx, str.BitComet
movzx eax, byte [ebx + 5]
push eax
movzx eax, ch
push eax
push edx
push str._s__i._i
jmp 0x462db9
mov cl, byte [ebx + 2]
cmp cl, 0x42
jne 0x4633f7
cmp byte [ebx + 3], 0x53
jne 0x4633f7
cmp dword [ebx + 0x10], 0x30504455
jne 0x4633be
mov esi, dword [ebp + 8]
push str.BitSpirit_v2_UDP0
mov dword [esi + 0x14], 7
jmp 0x46308d
cmp dword [ebx + 0xe], 0x50545448
jne 0x4633e3
cmp word [ebx + 0x12], 0x5442
jne 0x4633e3
mov esi, dword [ebp + 8]
push str.BitSpirit_v2_HTTPBT
mov dword [esi + 0x14], 7
jmp 0x46308d
mov esi, dword [ebp + 8]
push str.Unknown_BitSpirit
mov dword [esi + 0x14], 7
jmp 0x46308d
mov dl, byte [ebx + 1]
cmp dl, 0x45
jne 0x46341e
cmp cl, 0x52
jne 0x46341e
cmp byte [ebx + 3], 0x53
jne 0x46341e
mov esi, dword [ebp + 8]
push str.ERSAnonymous
mov dword [esi + 0x14], 7
jmp 0x46308d
cmp al, 0x41
jne 0x463478
cmp dl, 0x5a
jne 0x4635a2
cmp cl, 0x32
jne 0x4635a2
cmp byte [ebx + 3], 0x35
jne 0x4635a2
cmp ch, 0x30
jne 0x4635a2
cmp byte [ebx + 5], ch
jne 0x4635a2
cmp byte [ebx + 6], 0x42
jne 0x4635a2
cmp byte [ebx + 7], 0x54
jne 0x4635a2
mov esi, dword [ebp + 8]
push str.BitTyrant
mov dword [esi + 0x14], 7
jmp 0x46308d
cmp al, 0x42
jne 0x4634a1
cmp dl, 0x4c
jne 0x4635a2
cmp cl, 0x5a
jne 0x4635a2
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
push str.Blizzard__d._d
jmp 0x4632d1
cmp al, 0x4d
jne 0x4634e3
cmp dl, 0x62
jne 0x4635a2
cmp cl, 0x72
jne 0x4635a2
cmp byte [ebx + 3], 0x73
jne 0x4635a2
cmp ch, 0x74
jne 0x4635a2
movzx eax, byte [ebx + 9]
push eax
movzx eax, byte [ebx + 7]
push eax
movzx eax, byte [ebx + 5]
push eax
push str.Burst___c._c._c
jmp 0x462db9
cmp al, 0x2d
jne 0x463555
cmp dl, 0x46
jne 0x463510
cmp cl, 0x47
jne 0x4635a2
lea eax, [ebx + 3]
push eax
call fcn.00674add
push 0x64
pop ecx
cdq
idiv ecx
push edx
push eax
push str.FlashGet__u._u
jmp 0x462db9
cmp dl, 0x47
jne 0x463532
cmp cl, 0x33
jne 0x4635a2
mov esi, dword [ebp + 8]
push str.G3_Torrent
mov dword [esi + 0x14], 7
jmp 0x46308d
cmp dl, 0x4d
jne 0x4635a2
cmp cl, 0x4c
jne 0x4635a2
movzx eax, byte [ebx + 7]
push eax
movzx eax, byte [ebx + 5]
push eax
movzx eax, byte [ebx + 3]
push eax
push str.MLdonkey__c._c._c
jmp 0x462db9
cmp al, 0x4f
jne 0x46357a
cmp dl, 0x50
jne 0x4635a2
movzx eax, byte [ebx + 5]
push eax
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, cl
push eax
push str.Opera__c_c_c_c
jmp 0x463337
cmp al, 0x4c
jne 0x4635a2
cmp dl, 0x49
jne 0x4635a2
cmp cl, 0x4d
jne 0x4635a2
cmp byte [ebx + 3], 0x45
jne 0x4635a2
mov esi, dword [ebp + 8]
push str.Limewire
mov dword [esi + 0x14], 7
jmp 0x46308d
xor edi, edi
mov dword [ebp - 0x1c], 7
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], ax
mov dword [ebp - 4], edi
mov al, byte [edi + ebx]
test al, al
je 0x4635c6
movzx eax, al
jmp 0x4635c9
push 0x20
pop eax
push eax
lea ecx, [ebp - 0x30]
call fcn.0043af6f
inc edi
cmp edi, 0x14
jl 0x4635ba
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x30]
push eax
call fcn.004277f3
mov eax, dword [ebp - 0x1c]
cmp eax, 8
jb 0x46361f
mov ecx, dword [ebp - 0x30]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x10], eax
mov dword [ebp + 0xc], ecx
cmp eax, 0x1000
jb 0x463616
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc