Function at 0x4529eb
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
mov ebx, ecx
push edi
mov edi, dword [ebx + 0x40]
mov dword [ebp - 0x14], ebx
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, edi
je 0x452a51
mov esi, dword [0x489058]
xor edx, edx
mov ecx, edi
call fcn.0043d93d
mov ecx, eax
call fcn.0042d7aa
mov ecx, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x452a44
test dx, dx
je 0x452a40
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x452a44
add eax, 4
add ecx, 4
test dx, dx
jne 0x452a1e
xor eax, eax
jmp 0x452a49
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x452ca6
mov ecx, dword [0x484a7c]
call fcn.004350be
mov dword [ebp - 0x10], eax
xor edi, edi
mov byte [ebp - 1], 0
mov ecx, eax
mov esi, eax
call fcn.0042d1cd
cmp word [esi], 0
je 0x452a7d
cmp dword [0x484a80], edi
je 0x452a84
inc edi
test eax, eax
jne 0x452a65
mov esi, dword [ebp - 0x10]
push 0x7c
pop edx
mov ecx, esi
call fcn.0042d160
mov esi, eax
test esi, esi
je 0x452c9e
mov ecx, dword [ebx + 0x40]
xor edx, edx
call fcn.0043d93d
mov ecx, eax
mov dword [ebp - 0xc], eax
call fcn.0042d74b
mov eax, dword [ebp - 0xc]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x452ab2
sub eax, edx
sar eax, 1
dec eax
cmp eax, 0x3ff
jae 0x452c96
mov edx, 0x471cf8
mov ecx, esi
call fcn.0042cf96
mov ecx, esi
test al, al
je 0x452bb6
call fcn.0042d726
mov edi, eax
push 0x2f
push edi
call sub.MSVCRT.dll_strrchr
push 0x3f
push edi
mov ebx, eax
call sub.MSVCRT.dll_strrchr
mov esi, eax
add esp, 0x10
cmp esi, ebx
jbe 0x452bb2
push edi
push 0x471cf4
mov byte [esi], 0
call fcn.0042ea48
inc esi
pop ecx
pop ecx
mov edi, eax
je 0x452bb2
cmp byte [esi], 0
je 0x452bb2
mov dl, 0x26
mov ecx, esi
call fcn.0042d145
mov dl, 0x3d
mov ecx, esi
mov dword [ebp - 8], eax
call fcn.0042d145
push str.client
push esi
mov ebx, eax
call sub.MSVCRT.dll__stricmp
pop ecx
pop ecx
test eax, eax
jne 0x452b61
push edi
push str._sclient__v
call fcn.0042ea48
pop ecx
pop ecx
jmp 0x452b90
push esi
push edi
push 0x4711dc
call fcn.0042ea48
add esp, 0xc
mov edi, eax
test ebx, ebx
je 0x452b92
mov esi, dword [ebp - 8]
cmp ebx, esi
jb 0x452b81
test esi, esi
jne 0x452b99
push ebx
push edi
push str._s_s
call fcn.0042ea48
add esp, 0xc
mov edi, eax
mov esi, dword [ebp - 8]
test esi, esi
je 0x452ba8
push edi
push 0x471cd0
call fcn.0042ea48
pop ecx
pop ecx
mov edi, eax
cmp dword [ebp - 8], 0
jne 0x452b21
mov ecx, edi
jmp 0x452bbd
call fcn.0042d726
mov ecx, eax
call fcn.0043508c
mov ecx, dword [ebp - 0xc]
xor edx, edx
mov ebx, eax
call fcn.00435b76
cmp byte [ebx], 0
mov dword [ebp - 8], eax
mov edi, 0x462087
mov esi, ebx
je 0x452c46
mov al, byte [esi]
cmp al, 0x25
jne 0x452c2c
inc esi
mov al, byte [esi]
cmp al, 0x73
je 0x452c0c
push edi
cmp al, 0x76
je 0x452bfe
push str._s__
call fcn.0042ea48
pop ecx
pop ecx
dec esi
jmp 0x452c3e
push str._sutorrent1850
call fcn.0042ea48
pop ecx
pop ecx
jmp 0x452c3e
cmp byte [0x484a68], 0
mov byte [ebp - 1], 1
je 0x452c24
push dword [ebp - 8]
push edi
push str._s_U
jmp 0x452c36
push edi
push str._s__s
jmp 0x452c03
movzx eax, al
push eax
push edi
push str._s_c
call fcn.0042ea48
add esp, 0xc
inc esi
cmp byte [esi], 0
mov edi, eax
jne 0x452bdd
mov ecx, ebx
call fcn.0043492c
cmp byte [0x484a68], 0
je 0x452c67
cmp byte [ebp - 1], 0
jne 0x452c7a
push dword [ebp - 8]
push edi
push str._s_U
jmp 0x452c70
push edi
push dword [ebp - 8]
push str.http:__search.utorrent.com_search.php_q_Ue_Uu1
call fcn.0042ea48
mov edi, eax
add esp, 0xc
mov ecx, dword [ebp - 8]
call fcn.0043492c
push 1
xor eax, eax
push eax
push eax
push edi
push eax
mov eax, dword [ebp - 0x14]
push dword [eax + 4]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
call fcn.0043492c
mov ecx, dword [ebp - 0x10]
call fcn.0043492c
pop edi
pop esi
pop ebx
leave
ret