Function at 0x4584bf
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
inc dword [0x4c89a4]
push esi
push edi
mov dword [ebp - 0x10], edx
mov esi, ecx
call fcn.0045772b
mov edi, eax
mov dword [ebp - 0x28], edi
test edi, edi
je 0x4584ec
xor eax, eax
cmp word [edi], ax
sete al
test al, al
je 0x4584f3
mov ecx, edi
jmp 0x45873e
mov ecx, esi
call fcn.0043afd2
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x1c], 1
call fcn.004019ad
dec eax
cmp eax, 0x3ff
jb 0x45851b
mov ecx, dword [ebp - 0x20]
call fcn.00444521
jmp 0x4584ec
and dword [ebp - 0x18], 0
push ebx
mov edx, 0x49b6f0
mov ecx, edi
mov byte [ebp - 0x14], 1
call fcn.0043a971
mov ecx, edi
test al, al
je 0x45860d
call fcn.0043b2d0
mov edi, eax
push 0x2f
push edi
call sub.MSVCRT.dll_strrchr
push 0x3f
push edi
mov ebx, eax
call sub.MSVCRT.dll_strrchr
add esp, 0x10
mov esi, eax
push edi
cmp esi, ebx
jbe 0x458613
push 0x49b6ec
mov byte [esi], 0
call fcn.0043c7b4
inc esi
pop ecx
pop ecx
mov ebx, eax
je 0x45860a
cmp byte [esi], 0
je 0x45860a
mov dl, 0x26
mov ecx, esi
call fcn.0043ab6b
mov dl, 0x3d
mov ecx, esi
mov dword [ebp - 8], eax
call fcn.0043ab6b
push 0x49b6e4
push esi
mov edi, eax
call sub.MSVCRT.dll__stricmp
pop ecx
pop ecx
test eax, eax
jne 0x4585b9
push ebx
push str._sclient__v
call fcn.0043c7b4
pop ecx
pop ecx
jmp 0x4585e8
push esi
push ebx
push 0x49b6cc
call fcn.0043c7b4
add esp, 0xc
mov ebx, eax
test edi, edi
je 0x4585ea
mov esi, dword [ebp - 8]
cmp edi, esi
jb 0x4585d9
test esi, esi
jne 0x4585f1
push edi
push ebx
push 0x49b6c4
call fcn.0043c7b4
add esp, 0xc
mov ebx, eax
mov esi, dword [ebp - 8]
test esi, esi
je 0x458600
push ebx
push 0x49b6c0
call fcn.0043c7b4
pop ecx
pop ecx
mov ebx, eax
cmp dword [ebp - 8], 0
jne 0x458579
push ebx
jmp 0x458613
call fcn.0043b2d0
push eax
lea ecx, [ebp - 0x18]
call fcn.00410d67
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x458627
mov ecx, 0x48e94c
xor edx, edx
call fcn.00445b42
mov edx, eax
lea esi, [edx + 1]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x458633
sub edx, esi
mov ecx, eax
call fcn.0043b255
mov edi, dword [ebp - 0x18]
mov esi, 0x48f13b
mov dword [ebp - 0xc], eax
mov eax, esi
test edi, edi
jne 0x458656
mov edi, esi
mov byte [ebp - 1], 0
mov ebx, str._s_U
jmp 0x4586c7
cmp cl, 0x25
jne 0x4586b4
inc edi
mov cl, byte [edi]
cmp cl, 0x73
je 0x45868a
push eax
cmp cl, 0x76
je 0x458683
push str._s__
call fcn.0043c7b4
pop ecx
pop ecx
dec edi
jmp 0x4586c6
push str._sutorrent2210
jmp 0x4586ab
cmp byte [0x4c8328], 0
mov byte [ebp - 1], 1
je 0x4586a5
mov ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x4586a0
mov ecx, esi
push ecx
push eax
push ebx
jmp 0x4586be
push eax
push 0x49b698
call fcn.0043c7b4
pop ecx
pop ecx
jmp 0x4586c6
movzx ecx, cl
push ecx
push eax
push str._s_c
call fcn.0043c7b4
add esp, 0xc
inc edi
mov cl, byte [edi]
test cl, cl
jne 0x458661
cmp byte [0x4c8328], cl
je 0x4586f0
cmp byte [ebp - 1], cl
jne 0x45870b
cmp dword [ebp - 0xc], 0
je 0x4586e3
mov esi, dword [ebp - 0xc]
push esi
push eax
push ebx
call fcn.0043c7b4
add esp, 0xc
jmp 0x45870b
cmp dword [ebp - 0xc], 0
je 0x4586f9
mov esi, dword [ebp - 0xc]
push dword [ebp + 8]
push eax
push esi
push str.http:__search.utorrent.com_search.php_q_Ue_Uu1source_U
call fcn.0043c7b4
add esp, 0x10
push 1
xor ecx, ecx
push ecx
push ecx
push eax
push ecx
push dword [ebp - 0x10]
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
call fcn.00444521
cmp byte [ebp - 0x14], 0
pop ebx
je 0x458733
mov ecx, dword [ebp - 0x18]
call fcn.00444521
mov ecx, dword [ebp - 0x20]
call fcn.00444521
mov ecx, dword [ebp - 0x28]
call fcn.00444521
pop edi
pop esi
leave
ret 4