Function at 0x4584e3
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
inc dword [0x4c99e4]
push esi
push edi
mov dword [ebp - 0x10], edx
mov esi, ecx
call fcn.00457716
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x458510
xor eax, eax
cmp word [edi], ax
sete al
test al, al
je 0x458517
mov ecx, edi
jmp 0x458762
mov ecx, esi
call fcn.0043aff3
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 1
call fcn.004019ad
dec eax
cmp eax, 0x3ff
jb 0x45853f
mov ecx, dword [ebp - 0x20]
call fcn.004444cc
jmp 0x458510
and dword [ebp - 0x18], 0
push ebx
mov edx, 0x49c6f8
mov ecx, edi
mov byte [ebp - 0x14], 1
call fcn.0043a992
mov ecx, edi
test al, al
je 0x458631
call fcn.0043b2f1
mov edi, eax
push 0x2f
push edi
call sub.MSVCRT.dll_strrchr
push 0x3f
push edi
mov ebx, eax
call sub.MSVCRT.dll_strrchr
add esp, 0x10
mov esi, eax
push edi
cmp esi, ebx
jbe 0x458637
push 0x49c6f4
mov byte [esi], 0
call fcn.0043c7d5
inc esi
pop ecx
pop ecx
mov ebx, eax
je 0x45862e
cmp byte [esi], 0
je 0x45862e
mov dl, 0x26
mov ecx, esi
call fcn.0043ab8c
mov dl, 0x3d
mov ecx, esi
mov dword [ebp - 8], eax
call fcn.0043ab8c
push 0x49c6ec
push esi
mov edi, eax
call sub.MSVCRT.dll__stricmp
pop ecx
pop ecx
test eax, eax
jne 0x4585dd
push ebx
push str._sclient__v
call fcn.0043c7d5
pop ecx
pop ecx
jmp 0x45860c
push esi
push ebx
push 0x49c6d4
call fcn.0043c7d5
add esp, 0xc
mov ebx, eax
test edi, edi
je 0x45860e
mov esi, dword [ebp - 8]
cmp edi, esi
jb 0x4585fd
test esi, esi
jne 0x458615
push edi
push ebx
push 0x49c6cc
call fcn.0043c7d5
add esp, 0xc
mov ebx, eax
mov esi, dword [ebp - 8]
test esi, esi
je 0x458624
push ebx
push 0x49c6c8
call fcn.0043c7d5
pop ecx
pop ecx
mov ebx, eax
cmp dword [ebp - 8], 0
jne 0x45859d
push ebx
jmp 0x458637
call fcn.0043b2f1
push eax
lea ecx, [ebp - 0x18]
call fcn.00410d4d
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x45864b
mov ecx, 0x4945b8
xor edx, edx
call fcn.00445aed
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x458657
sub edx, esi
mov ecx, eax
call fcn.0043b276
mov edi, dword [ebp - 0x18]
mov esi, 0x49013b
mov dword [ebp - 0xc], eax
mov eax, esi
test edi, edi
jne 0x45867a
mov edi, esi
mov byte [ebp - 1], 0
mov ebx, str._s_U
jmp 0x4586eb
cmp cl, 0x25
jne 0x4586d8
inc edi
mov cl, byte [edi]
cmp cl, 0x73
je 0x4586ae
push eax
cmp cl, 0x76
je 0x4586a7
push str._s__
call fcn.0043c7d5
pop ecx
pop ecx
dec edi
jmp 0x4586ea
push str._sutorrent2210
jmp 0x4586cf
cmp byte [0x4c9368], 0
mov byte [ebp - 1], 1
je 0x4586c9
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4586c4
mov ecx, esi
push ecx
push eax
push ebx
jmp 0x4586e2
push eax
push 0x49c6a0
call fcn.0043c7d5
pop ecx
pop ecx
jmp 0x4586ea
movzx ecx, cl
push ecx
push eax
push str._s_c
call fcn.0043c7d5
add esp, 0xc
inc edi
mov cl, byte [edi]
test cl, cl
jne 0x458685
cmp byte [0x4c9368], cl
je 0x458714
cmp byte [ebp - 1], cl
jne 0x45872f
cmp dword [ebp - 0xc], 0
je 0x458707
mov esi, dword [ebp - 0xc]
push esi
push eax
push ebx
call fcn.0043c7d5
add esp, 0xc
jmp 0x45872f
cmp dword [ebp - 0xc], 0
je 0x45871d
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
push eax
push esi
push str.http:__search.utorrent.com_search.php_q_Ue_Uu1source_U
call fcn.0043c7d5
add esp, 0x10
push 1
xor ecx, ecx
push ecx
push ecx
push eax
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
call fcn.004444cc
cmp byte [ebp - 0x14], 0
pop ebx
je 0x458757
mov ecx, dword [ebp - 0x18]
call fcn.004444cc
mov ecx, dword [ebp - 0x20]
call fcn.004444cc
mov ecx, dword [ebp - 0x28]
call fcn.004444cc
pop edi
pop esi
leave
ret 4