Function at 0x4571f6
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
inc dword [0x4c687c]
push esi
push edi
mov dword [ebp - 0x10], edx
mov esi, ecx
call fcn.0045642b
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x457223
xor eax, eax
cmp word [edi], ax
sete al
test al, al
je 0x45722a
mov ecx, edi
jmp 0x457475
mov ecx, esi
call fcn.00439f5a
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 1
call fcn.00401b32
dec eax
cmp eax, 0x3ff
jb 0x457252
mov ecx, dword [ebp - 0x20]
call fcn.004433ab
jmp 0x457223
and dword [ebp - 0x18], 0
push ebx
mov edx, 0x49a628
mov ecx, edi
mov byte [ebp - 0x14], 1
call fcn.004398fc
mov ecx, edi
test al, al
je 0x457344
call fcn.0043a258
mov edi, eax
push 0x2f
push edi
call sub.MSVCRT.dll_strrchr
push 0x3f
push edi
mov ebx, eax
call sub.MSVCRT.dll_strrchr
add esp, 0x10
mov esi, eax
push edi
cmp esi, ebx
jbe 0x45734a
push 0x49a624
mov byte [esi], 0
call fcn.0043b73c
inc esi
pop ecx
pop ecx
mov ebx, eax
je 0x457341
cmp byte [esi], 0
je 0x457341
mov dl, 0x26
mov ecx, esi
call fcn.00439af6
mov dl, 0x3d
mov ecx, esi
mov dword [ebp - 8], eax
call fcn.00439af6
push 0x49a61c
push esi
mov edi, eax
call sub.MSVCRT.dll__stricmp
pop ecx
pop ecx
test eax, eax
jne 0x4572f0
push ebx
push str._sclient__v
call fcn.0043b73c
pop ecx
pop ecx
jmp 0x45731f
push esi
push ebx
push 0x49a604
call fcn.0043b73c
add esp, 0xc
mov ebx, eax
test edi, edi
je 0x457321
mov esi, dword [ebp - 8]
cmp edi, esi
jb 0x457310
test esi, esi
jne 0x457328
push edi
push ebx
push 0x49a5fc
call fcn.0043b73c
add esp, 0xc
mov ebx, eax
mov esi, dword [ebp - 8]
test esi, esi
je 0x457337
push ebx
push 0x49a5f8
call fcn.0043b73c
pop ecx
pop ecx
mov ebx, eax
cmp dword [ebp - 8], 0
jne 0x4572b0
push ebx
jmp 0x45734a
call fcn.0043a258
push eax
lea ecx, [ebp - 0x18]
call fcn.00410a4c
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x45735e
mov ecx, 0x492538
xor edx, edx
call fcn.004449dd
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x45736a
sub edx, esi
mov ecx, eax
call fcn.0043a1dd
mov edi, dword [ebp - 0x18]
mov esi, 0x48e143
mov dword [ebp - 0xc], eax
mov eax, esi
test edi, edi
jne 0x45738d
mov edi, esi
mov byte [ebp - 1], 0
mov ebx, str._s_U
jmp 0x4573fe
cmp cl, 0x25
jne 0x4573eb
inc edi
mov cl, byte [edi]
cmp cl, 0x73
je 0x4573c1
push eax
cmp cl, 0x76
je 0x4573ba
push str._s__
call fcn.0043b73c
pop ecx
pop ecx
dec edi
jmp 0x4573fd
push str._sutorrent2200
jmp 0x4573e2
cmp byte [0x4c6200], 0
mov byte [ebp - 1], 1
je 0x4573dc
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4573d7
mov ecx, esi
push ecx
push eax
push ebx
jmp 0x4573f5
push eax
push 0x49a5d0
call fcn.0043b73c
pop ecx
pop ecx
jmp 0x4573fd
movzx ecx, cl
push ecx
push eax
push str._s_c
call fcn.0043b73c
add esp, 0xc
inc edi
mov cl, byte [edi]
test cl, cl
jne 0x457398
cmp byte [0x4c6200], cl
je 0x457427
cmp byte [ebp - 1], cl
jne 0x457442
cmp dword [ebp - 0xc], 0
je 0x45741a
mov esi, dword [ebp - 0xc]
push esi
push eax
push ebx
call fcn.0043b73c
add esp, 0xc
jmp 0x457442
cmp dword [ebp - 0xc], 0
je 0x457430
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
push eax
push esi
push str.http:__search.utorrent.com_search.php_q_Ue_Uu1source_U
call fcn.0043b73c
add esp, 0x10
push 1
xor ecx, ecx
push ecx
push ecx
push eax
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
call fcn.004433ab
cmp byte [ebp - 0x14], 0
pop ebx
je 0x45746a
mov ecx, dword [ebp - 0x18]
call fcn.004433ab
mov ecx, dword [ebp - 0x20]
call fcn.004433ab
mov ecx, dword [ebp - 0x28]
call fcn.004433ab
pop edi
pop esi
leave
ret 4