Function at 0x4584d0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
inc dword [0x4c99c4]
push esi
push edi
mov dword [ebp - 0x10], edx
mov esi, ecx
call fcn.00457703
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x4584fd
xor eax, eax
cmp word [edi], ax
sete al
test al, al
je 0x458504
mov ecx, edi
jmp 0x45874f
mov ecx, esi
call fcn.0043b014
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 1
call fcn.004019ad
dec eax
cmp eax, 0x3ff
jb 0x45852c
mov ecx, dword [ebp - 0x20]
call fcn.004444fe
jmp 0x4584fd
and dword [ebp - 0x18], 0
push ebx
mov edx, 0x49c6f0
mov ecx, edi
mov byte [ebp - 0x14], 1
call fcn.0043a9b3
mov ecx, edi
test al, al
je 0x45861e
call fcn.0043b312
mov edi, eax
push 0x2f
push edi
call sub.MSVCRT.dll_strrchr
push 0x3f
push edi
mov ebx, eax
call sub.MSVCRT.dll_strrchr
add esp, 0x10
mov esi, eax
push edi
cmp esi, ebx
jbe 0x458624
push 0x49c6ec
mov byte [esi], 0
call fcn.0043c7f6
inc esi
pop ecx
pop ecx
mov ebx, eax
je 0x45861b
cmp byte [esi], 0
je 0x45861b
mov dl, 0x26
mov ecx, esi
call fcn.0043abad
mov dl, 0x3d
mov ecx, esi
mov dword [ebp - 8], eax
call fcn.0043abad
push 0x49c6e4
push esi
mov edi, eax
call sub.MSVCRT.dll__stricmp
pop ecx
pop ecx
test eax, eax
jne 0x4585ca
push ebx
push str._sclient__v
call fcn.0043c7f6
pop ecx
pop ecx
jmp 0x4585f9
push esi
push ebx
push 0x49c6cc
call fcn.0043c7f6
add esp, 0xc
mov ebx, eax
test edi, edi
je 0x4585fb
mov esi, dword [ebp - 8]
cmp edi, esi
jb 0x4585ea
test esi, esi
jne 0x458602
push edi
push ebx
push 0x49c6c4
call fcn.0043c7f6
add esp, 0xc
mov ebx, eax
mov esi, dword [ebp - 8]
test esi, esi
je 0x458611
push ebx
push 0x49c6c0
call fcn.0043c7f6
pop ecx
pop ecx
mov ebx, eax
cmp dword [ebp - 8], 0
jne 0x45858a
push ebx
jmp 0x458624
call fcn.0043b312
push eax
lea ecx, [ebp - 0x18]
call fcn.00410da6
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x458638
mov ecx, 0x48f94c
xor edx, edx
call fcn.00445b1f
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x458644
sub edx, esi
mov ecx, eax
call fcn.0043b297
mov edi, dword [ebp - 0x18]
mov esi, 0x49013b
mov dword [ebp - 0xc], eax
mov eax, esi
test edi, edi
jne 0x458667
mov edi, esi
mov byte [ebp - 1], 0
mov ebx, str._s_U
jmp 0x4586d8
cmp cl, 0x25
jne 0x4586c5
inc edi
mov cl, byte [edi]
cmp cl, 0x73
je 0x45869b
push eax
cmp cl, 0x76
je 0x458694
push str._s__
call fcn.0043c7f6
pop ecx
pop ecx
dec edi
jmp 0x4586d7
push str._sutorrent0000
jmp 0x4586bc
cmp byte [0x4c9348], 0
mov byte [ebp - 1], 1
je 0x4586b6
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4586b1
mov ecx, esi
push ecx
push eax
push ebx
jmp 0x4586cf
push eax
push 0x49c698
call fcn.0043c7f6
pop ecx
pop ecx
jmp 0x4586d7
movzx ecx, cl
push ecx
push eax
push str._s_c
call fcn.0043c7f6
add esp, 0xc
inc edi
mov cl, byte [edi]
test cl, cl
jne 0x458672
cmp byte [0x4c9348], cl
je 0x458701
cmp byte [ebp - 1], cl
jne 0x45871c
cmp dword [ebp - 0xc], 0
je 0x4586f4
mov esi, dword [ebp - 0xc]
push esi
push eax
push ebx
call fcn.0043c7f6
add esp, 0xc
jmp 0x45871c
cmp dword [ebp - 0xc], 0
je 0x45870a
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
push eax
push esi
push str.https:__thepiratebay.org_search.php_q_U
call fcn.0043c7f6
add esp, 0x10
push 1
xor ecx, ecx
push ecx
push ecx
push eax
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
call fcn.004444fe
cmp byte [ebp - 0x14], 0
pop ebx
je 0x458744
mov ecx, dword [ebp - 0x18]
call fcn.004444fe
mov ecx, dword [ebp - 0x20]
call fcn.004444fe
mov ecx, dword [ebp - 0x28]
call fcn.004444fe
pop edi
pop esi
leave
ret 4