Function at 0x480f07
Capabilities:
Parse pe header

Disassembly:
mov eax, 0x6d356b
call fcn.006899cc
sub esp, 0x34
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
push 0x2d
mov al, byte [ebx]
pop edx
cmp al, dl
jne 0x4814e4
mov cl, byte [ebx + 6]
cmp cl, dl
je 0x480f37
cmp byte [ebx + 7], dl
jne 0x4814e4
movzx edx, byte [ebx + 1]
mov edi, 0x4c57
movzx esi, byte [ebx + 2]
mov eax, edx
shl eax, 8
add eax, esi
cmp eax, edi
ja 0x4811dc
je 0x4811d2
mov edi, 0x4258
cmp eax, edi
ja 0x48109c
je 0x481092
add edi, 0xffffffeb
cmp eax, edi
ja 0x480fe8
je 0x480fde
sub eax, 0x4147
je 0x480fd4
sub eax, 0xb
je 0x480fca
sub eax, 4
je 0x480fc0
dec eax
sub eax, 1
je 0x480fb6
dec eax
sub eax, 1
je 0x480fac
sub eax, 0x24
je 0x480fd4
sub eax, 0xc4
jne 0x48141b
mov esi, str.BitBuddy
jmp 0x48145d
mov esi, str.Azureus
jmp 0x48145d
mov esi, str.BitPump
jmp 0x48145d
mov esi, str.Avicora
jmp 0x48145d
mov esi, str.Arctic
jmp 0x48145d
mov esi, str.Ares
jmp 0x48145d
mov esi, str.BitComet
jmp 0x48145d
sub eax, 0x4245
je 0x481088
sub eax, 1
je 0x48107e
sub eax, 1
je 0x481074
sub eax, 8
je 0x481028
sub eax, 3
je 0x48101e
sub eax, 1
jne 0x48141b
mov esi, str.BitSlave
jmp 0x48145d
mov esi, str.BitRocket
jmp 0x48145d
mov dl, byte [ebx + 4]
cmp dl, 0x41
jne 0x481052
cmp byte [ebx + 5], 0x30
jne 0x481052
movzx eax, cl
sub eax, 0x3d
push eax
push str.Bits_on_Wheels_1.0._d
push dword [ebp + 8]
call fcn.00475719
add esp, 0xc
jmp 0x4818cc
movzx eax, cl
push eax
movzx eax, byte [ebx + 5]
push eax
movzx eax, dl
push eax
push str.Bits_on_Wheels__c_c_c
push dword [ebp + 8]
call fcn.00475719
add esp, 0x14
jmp 0x4818cc
mov esi, 0x7003b8
jmp 0x48145d
mov esi, str.Bitflu
jmp 0x48145d
mov esi, str.BitTorrent_SDK
jmp 0x48145d
mov esi, str.Bittorrent_X
jmp 0x48145d
mov ecx, 0x4845
cmp eax, ecx
ja 0x48116d
je 0x481163
sub eax, 0x4344
je 0x481159
sub eax, 0x10
je 0x48114f
sub eax, 0xf1
je 0x481145
sub eax, 0xfd
je 0x48113b
sub eax, 0x11
je 0x481131
sub eax, 0x101
jne 0x48141b
push 9
xor ecx, ecx
pop edx
movzx eax, byte [ebx + ecx + 3]
mov word [ebp + ecx*2 - 0x18], ax
add eax, 0xffffffd0
cmp ax, dx
ja 0x4810fd
mov word [ebp + ecx*2 - 0x18], ax
inc ecx
cmp ecx, 4
jl 0x4810e6
movzx eax, word [ebp - 0x12]
push eax
movzx eax, word [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0x18]
push eax
push str.FoxTorrent
push str._s__d._d_d_d
push dword [ebp + 8]
call fcn.00475719
add esp, 0x1c
jmp 0x4818cc
mov esi, str.electric_sheep
jmp 0x48145d
mov esi, str.EBit
jmp 0x48145d
mov esi, str.DelugeTorrent
jmp 0x48145d
mov esi, str.CTorrent
jmp 0x48145d
mov esi, str.Enhanced_CTorrent
jmp 0x48145d
mov esi, str.Helix
jmp 0x48145d
sub eax, 0x484c
je 0x4811c8
dec eax
sub eax, 1
je 0x4811be
sub eax, 0x306
je 0x4811b4
sub eax, 0xf5
je 0x4811aa
sub eax, 7
je 0x4811a0
sub eax, 4
jne 0x48141b
mov esi, str.libtorrent
jmp 0x48145d
mov esi, str.Lphant
jmp 0x48145d
mov esi, 0x700554
jmp 0x48145d
mov esi, str.KTorrent
jmp 0x48145d
mov esi, str.Hydranode
jmp 0x48145d
mov esi, str.Halite
jmp 0x48145d
mov esi, str.LimeWire
jmp 0x48145d
mov ecx, 0x5453
cmp eax, ecx
ja 0x4812d0
je 0x4812c6
mov ecx, 0x5344
cmp eax, ecx
ja 0x481264
je 0x481458
sub eax, 0x4d50
je 0x48125a
dec eax
sub eax, 1
je 0x481250
dec eax
sub eax, 1
je 0x481246
sub eax, 0x3f0
je 0x48123c
sub eax, 0x10
je 0x481232
sub eax, 0x100
jne 0x48141b
mov esi, str.Retriever
jmp 0x48145d
mov esi, str.Qt_4_Torrent_Example
jmp 0x48145d
mov esi, str.QQDownload
jmp 0x48145d
mov esi, str.MoonlightTorrent
jmp 0x48145d
mov esi, str.Miro
jmp 0x48145d
mov esi, str.MooPolice
jmp 0x48145d
sub eax, 0x5347
je 0x4812bc
sub eax, 0xc
je 0x4812b2
sub eax, 7
je 0x4812a8
sub eax, 0x24
je 0x48129e
sub eax, 0xd0
je 0x481294
sub eax, 4
jne 0x48141b
mov esi, str.Transmission
jmp 0x48145d
mov esi, str.Torrent_.NET
jmp 0x48145d
mov esi, str.Shareaza_alpha_beta
jmp 0x48145d
mov esi, str.Shareaza
jmp 0x48145d
mov esi, str.SwarmScope
jmp 0x48145d
mov esi, str.SG_Torrent
jmp 0x48145d
mov esi, str.TorrentStorm
jmp 0x48145d
mov ecx, 0x5759
cmp eax, ecx
ja 0x4813f5
je 0x4813ee
sub eax, 0x5454
je 0x4813e7
sub eax, 0xf1
je 0x4813e0
push 7
pop ecx
sub eax, ecx
je 0x4813d9
sub eax, 1
je 0x4813cf
sub eax, ecx
je 0x481326
sub eax, 0xf3
jne 0x48141b
mov esi, str.Vagaa
jmp 0x48145d
cmp dword [ebx + 0x10], 0x30504455
jne 0x481354
mov esi, dword [ebp + 8]
push str._FAKE__BitSpirit
mov dword [esi + 0x14], ecx
xor edi, edi
xor eax, eax
mov dword [esi], edi
mov ecx, esi
mov dword [esi + 0x10], edi
mov word [esi], ax
call fcn.004482e2
mov eax, esi
jmp 0x4818cf
movzx ecx, byte [ebx + 3]
mov esi, 0x6f723c
movzx eax, byte [ebx + 4]
shl ecx, 8
or ecx, eax
mov dword [ebp + 0xc], esi
movzx eax, byte [ebx + 5]
shl ecx, 8
or ecx, eax
mov eax, 0x313330
cmp ecx, eax
jb 0x48138b
cmp byte [ebp + 0x10], 0
je 0x48138b
mov esi, 0x7007bc
jmp 0x48145d
cmp ecx, 0x313332
jb 0x4813ab
push ebx
call fcn.00481d6a
test al, al
jne 0x481460
mov esi, str._FAKE__uTorrent
jmp 0x48145d
cmp ecx, eax
jb 0x481460
mov ax, word [ebx + 8]
mov ecx, 0x3fff
and ax, cx
mov ecx, 0x1f4
cmp ax, cx
jbe 0x481460
jmp 0x481381
mov esi, str.uTorrent_Mac
jmp 0x48145d
mov esi, str.uLeecher
jmp 0x48145d
mov esi, str.uTorrent_Embedded
jmp 0x48145d
mov esi, str.TuoTu
jmp 0x48145d
mov esi, str.Wyzo
jmp 0x48145d
sub eax, 0x584c
je 0x481458
sub eax, 8
je 0x481451
sub eax, 4
je 0x48144a
sub eax, 0x1fc
je 0x481443
sub eax, 0x1220
je 0x48143c
sub eax, 0x4ce
je 0x481435
push esi
push edx
push str.Unknown__c_c
lea eax, [ebp - 0x40]
push 0x14
push eax
call fcn.00474b43
add esp, 0x14
lea esi, [ebp - 0x40]
jmp 0x48145d
mov esi, str.qBittorrent
jmp 0x48145d
mov esi, str.libTorrent
jmp 0x48145d
mov esi, str.ZipTorrent
jmp 0x48145d
mov esi, str.Xtorrent
jmp 0x48145d
mov esi, str.XanTorrent
jmp 0x48145d
mov esi, str.Xunlei
mov dword [ebp + 0xc], esi
xor eax, eax
lea edi, [ebp - 0x18]
stosd dword es:[edi], eax
lea esi, [ebx + 3]
push 0xfffffffffffffffd
stosd dword es:[edi], eax
stosw word es:[edi], ax
pop eax
sub eax, ebx
lea edi, [ebp - 0x18]
push 9
mov dword [ebp + 0x10], eax
pop ebx
movzx eax, byte [esi]
push eax
call fcn.0069ba27
pop ecx
test eax, eax
je 0x4814c2
movzx ecx, byte [esi]
mov word [edi], cx
lea eax, [ecx - 0x30]
cmp ax, bx
jbe 0x4814b1
push 0x19
lea eax, [ecx - 0x41]
pop edx
cmp ax, dx
ja 0x4814a6
lea eax, [ecx - 0x37]
jmp 0x4814b1
lea eax, [ecx - 0x61]
cmp ax, dx
ja 0x4814b4
lea eax, [ecx - 0x70]
mov word [edi], ax
mov eax, dword [ebp + 0x10]
inc esi
add eax, esi
add edi, 2
cmp eax, 4
jl 0x48147a
movzx eax, word [ebp - 0x12]
mov esi, dword [ebp + 0xc]
push eax
movzx eax, word [ebp - 0x14]
push eax
movzx eax, word [ebp - 0x16]
push eax
movzx eax, word [ebp - 0x18]
push eax
push esi
push str._s__d._d._d._d
jmp 0x481121
mov ch, byte [ebx + 4]
cmp ch, dl
jne 0x48158e
cmp byte [ebx + 5], dl
jne 0x48158e
movzx ecx, al
mov eax, ecx
sub eax, 0x41
je 0x481557
sub eax, 0xe
je 0x481550
sub eax, 3
je 0x481549
sub eax, 1
je 0x481542
sub eax, 1
je 0x48153b
sub eax, 1
je 0x481534
push ecx
push str.Unknown__c
lea eax, [ebp - 0x40]
push 0x14
push eax
call fcn.00474b43
add esp, 0x10
lea ecx, [ebp - 0x40]
jmp 0x48155c
mov ecx, 0x700908
jmp 0x48155c
mov ecx, str.BitTornado
jmp 0x48155c
mov ecx, str.Shadow
jmp 0x48155c
mov ecx, str.Tribler
jmp 0x48155c
mov ecx, str.Osprey_Permaseed
jmp 0x48155c
mov ecx, 0x7008a4
xor edx, edx
movzx eax, byte [ebx + edx + 1]
mov word [ebp + edx*2 - 0x18], ax
inc edx
cmp edx, 4
jl 0x48155e
xor eax, eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x18]
push eax
push ecx
push 0x70092c
push dword [ebp + 8]
call fcn.00475719
add esp, 0x10
jmp 0x4818cc
cmp al, 0x4d
jne 0x4815f4
cmp byte [ebx + 2], dl
jne 0x481640
cmp ch, dl
jne 0x4815c2
cmp byte [ebx + 6], dl
jne 0x4815c2
cmp byte [ebx + 7], dl
jne 0x4815c2
movzx eax, byte [ebx + 5]
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, byte [ebx + 1]
push eax
push str.BitTorrent__c._c._c
jmp 0x481064
cmp byte [ebx + 5], dl
jne 0x481640
cmp byte [ebx + 7], dl
jne 0x481640
movzx eax, byte [ebx + 6]
push eax
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, byte [ebx + 1]
push eax
push str.BitTorrent__c._c_c._c
push dword [ebp + 8]
call fcn.00475719
add esp, 0x18
jmp 0x4818cc
cmp al, 0x65
jne 0x481640
cmp byte [ebx + 1], 0x78
jne 0x481640
cmp byte [ebx + 2], 0x62
jne 0x481640
cmp byte [ebx + 3], 0x63
jne 0x481640
cmp byte [ebx + 6], 0x4c
jne 0x481627
cmp byte [ebx + 7], 0x4f
jne 0x481627
cmp byte [ebx + 8], 0x52
jne 0x481627
cmp byte [ebx + 9], 0x44
mov edx, str.BitLord
je 0x48162c
mov edx, str.BitComet
movzx eax, byte [ebx + 5]
push eax
movzx eax, ch
push eax
push edx
push str._s__i._i
jmp 0x481064
mov cl, byte [ebx + 2]
cmp cl, 0x42
jne 0x4816a4
cmp byte [ebx + 3], 0x53
jne 0x4816a4
cmp dword [ebx + 0x10], 0x30504455
jne 0x48166b
mov esi, dword [ebp + 8]
push str.BitSpirit_v2_UDP0
mov dword [esi + 0x14], 7
jmp 0x48133a
cmp dword [ebx + 0xe], 0x50545448
jne 0x481690
cmp word [ebx + 0x12], 0x5442
jne 0x481690
mov esi, dword [ebp + 8]
push str.BitSpirit_v2_HTTPBT
mov dword [esi + 0x14], 7
jmp 0x48133a
mov esi, dword [ebp + 8]
push str.Unknown_BitSpirit
mov dword [esi + 0x14], 7
jmp 0x48133a
mov dl, byte [ebx + 1]
cmp dl, 0x45
jne 0x4816cb
cmp cl, 0x52
jne 0x4816cb
cmp byte [ebx + 3], 0x53
jne 0x4816cb
mov esi, dword [ebp + 8]
push str.ERSAnonymous
mov dword [esi + 0x14], 7
jmp 0x48133a
cmp al, 0x41
jne 0x481725
cmp dl, 0x5a
jne 0x48184f
cmp cl, 0x32
jne 0x48184f
cmp byte [ebx + 3], 0x35
jne 0x48184f
cmp ch, 0x30
jne 0x48184f
cmp byte [ebx + 5], ch
jne 0x48184f
cmp byte [ebx + 6], 0x42
jne 0x48184f
cmp byte [ebx + 7], 0x54
jne 0x48184f
mov esi, dword [ebp + 8]
push str.BitTyrant
mov dword [esi + 0x14], 7
jmp 0x48133a
cmp al, 0x42
jne 0x48174e
cmp dl, 0x4c
jne 0x48184f
cmp cl, 0x5a
jne 0x48184f
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
push str.Blizzard__d._d
jmp 0x48157e
cmp al, 0x4d
jne 0x481790
cmp dl, 0x62
jne 0x48184f
cmp cl, 0x72
jne 0x48184f
cmp byte [ebx + 3], 0x73
jne 0x48184f
cmp ch, 0x74
jne 0x48184f
movzx eax, byte [ebx + 9]
push eax
movzx eax, byte [ebx + 7]
push eax
movzx eax, byte [ebx + 5]
push eax
push str.Burst___c._c._c
jmp 0x481064
cmp al, 0x2d
jne 0x481802
cmp dl, 0x46
jne 0x4817bd
cmp cl, 0x47
jne 0x48184f
lea eax, [ebx + 3]
push eax
call fcn.00699eed
push 0x64
pop ecx
cdq
idiv ecx
push edx
push eax
push str.FlashGet__u._u
jmp 0x481064
cmp dl, 0x47
jne 0x4817df
cmp cl, 0x33
jne 0x48184f
mov esi, dword [ebp + 8]
push str.G3_Torrent
mov dword [esi + 0x14], 7
jmp 0x48133a
cmp dl, 0x4d
jne 0x48184f
cmp cl, 0x4c
jne 0x48184f
movzx eax, byte [ebx + 7]
push eax
movzx eax, byte [ebx + 5]
push eax
movzx eax, byte [ebx + 3]
push eax
push str.MLdonkey__c._c._c
jmp 0x481064
cmp al, 0x4f
jne 0x481827
cmp dl, 0x50
jne 0x48184f
movzx eax, byte [ebx + 5]
push eax
movzx eax, ch
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, cl
push eax
push str.Opera__c_c_c_c
jmp 0x4815e4
cmp al, 0x4c
jne 0x48184f
cmp dl, 0x49
jne 0x48184f
cmp cl, 0x4d
jne 0x48184f
cmp byte [ebx + 3], 0x45
jne 0x48184f
mov esi, dword [ebp + 8]
push str.Limewire
mov dword [esi + 0x14], 7
jmp 0x48133a
xor edi, edi
mov dword [ebp - 0x1c], 7
xor eax, eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], ax
mov dword [ebp - 4], edi
mov al, byte [edi + ebx]
test al, al
je 0x481873
movzx eax, al
jmp 0x481876
push 0x20
pop eax
push eax
lea ecx, [ebp - 0x30]
call fcn.0045af98
inc edi
cmp edi, 0x14
jl 0x481867
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x30]
push eax
call fcn.00447f71
mov eax, dword [ebp - 0x1c]
cmp eax, 8
jb 0x4818cc
mov ecx, dword [ebp - 0x30]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x10], eax
mov dword [ebp + 0xc], ecx
cmp eax, 0x1000
jb 0x4818c3
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc