Function at 0x445102
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x48
mov eax, 0x69d8f3
call fcn.00640244
sub esp, 0xb8c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp + 0x44], ebx
call fcn.004bc939
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], ebx
push dword [ebp + 0x58]
call fcn.004bc9ac
push str.INSTALLCHECK
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x44516f
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x44516f
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.00438edd
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
lea ecx, [ebp - 0x200]
call fcn.004bcc31
push str.logfile
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.004bcbd3
mov esi, eax
mov edi, ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp + 0x44], edi
test esi, esi
je 0x4451bd
push 2
pop edx
cmp dword [esi + 8], edx
jl 0x4451af
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
mov dword [esi + 0x14], edx
jmp 0x4451b4
mov edi, str.bt.log
mov dword [ebp + 0x44], edi
mov dword [ebp - 0x1fc], edi
push 0x790c9c
call fcn.00473bf6
push 3
pop eax
push 5
mov dword [ebp + 0x38], eax
mov dword [ebp - 0x1e0], eax
pop eax
push 0x7a07e4
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 0x1d4], 1
mov dword [ebp - 0x1e8], 0xb1a3
mov dword [ebp - 0x1e4], 0x6c8914
mov dword [ebp - 0x1b4], 0x6c8930
mov dword [ebp - 0x1f8], 0x6c8940
mov dword [ebp - 0x1f4], 0x6c7e2c
mov dword [ebp - 0x1ec], 0x6c8934
mov dword [ebp - 0x1f0], 0x6c18f4
call fcn.00473bf6
push str.TORRENTPANE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
call fcn.004326e5
test al, al
jne 0x445255
test esi, esi
je 0x445260
push ebx
push 0x7a07e4
call fcn.004730f9
call fcn.005aa2e1
push str.PORTABLE
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x4c], bl
call fcn.004bcbd3
test eax, eax
je 0x44528d
mov byte [ebp - 0x4c], 1
mov dword [0x7acfb4], 0x10
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0xd8], eax
mov esi, str.http:__pr.apps.bittorrent.com_client_webui__s_client_webui.json
mov byte [ebp - 4], 2
push esi
call fcn.0040f10e
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1cc]
call fcn.0040ee87
lea eax, [ebp + 0x3c]
mov dword [ebp - 0x1d0], 0x78a8b4
push eax
mov ecx, 0x7b3970
mov dword [ebp + 0x3c], 0x4c652e
call fcn.00521c59
lea eax, [ebp - 0x200]
push eax
call fcn.004bce7e
push str.CAMPAIGN
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x44531c
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x44531c
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.00666be8
pop ecx
push eax
mov ecx, 0x7ac4a8
call fcn.00473679
push str.BROWSER
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x445362
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x445362
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp]
push eax
call fcn.00429352
push eax
mov ecx, 0x7ad37c
call fcn.00427c6d
push ebx
push 1
lea ecx, [ebp]
call fcn.004281f2
mov ecx, 0x7ac4a8
call fcn.00472f99
push eax
push fcn.0059fdcf
call fcn.005aea63
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445399
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7b0cc8], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
xor ecx, ecx
mov dword [ebp + 0x3c], eax
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], cx
mov byte [ebp - 4], 3
test eax, eax
je 0x44540f
cmp dword [eax + 8], 2
jl 0x44540f
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00428460
pop ecx
push eax
push esi
lea ecx, [ebp - 0xf4]
call fcn.00438cfb
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp - 0xf4]
push 0x6c8a10
mov dword [eax + 0x14], 2
call fcn.00438eb2
neg eax
sbb eax, eax
neg eax
jmp 0x445414
call fcn.0046cb23
push eax
call fcn.0059e36c
push ebx
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xb8], ebx
push eax
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x40], eax
call fcn.0056fcff
mov esi, eax
lea ecx, [ebp - 0x178]
mov eax, dword [ebp - 0x40]
push str.utorrent
mov dword [esi + 0x28], eax
call fcn.0040eeff
lea ecx, [esi + 0x2c]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x178]
cmp ecx, eax
je 0x445484
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040f41e
push ebx
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 3
call fcn.0040f52f
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b4
call fcn.0056f7dd
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf9
call fcn.0056f7dd
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b5
call fcn.0056f7dd
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf8
call fcn.0056f7dd
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b6
call fcn.0056f7dd
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ec74
call fcn.0056f7dd
lea ecx, [esi + 4]
mov eax, 0x7849d8
cmp ecx, eax
je 0x445535
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040f41e
cmp dword [ebp - 0x40], 0
jne 0x445547
mov eax, str.loaded
mov ecx, str.enabled
jmp 0x445551
mov eax, str.failed_to_load
mov ecx, 0x6c8a64
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.0040e2b4
add esp, 0xc
push str.Process_started
call fcn.0040df86
mov esi, ebx
cmp dword [ebp + 0x58], esi
je 0x445587
mov edi, dword [ebp + 0x5c]
push dword [edi + esi*4]
call fcn.0040df86
inc esi
cmp esi, dword [ebp + 0x58]
jne 0x445574
mov edi, dword [ebp + 0x44]
xor ebx, ebx
push str.End_Args
call fcn.0040df86
mov ecx, 0x7b1918
call fcn.0044732f
mov ecx, 0x7b1940
call fcn.00470ce1
mov ecx, 0x7b192c
call fcn.004472e0
call fcn.004bef78
call fcn.005a7a6c
push 0x7e27a8
call fcn.0049f4f4
mov dword [ebp - 0x44], 0x6c8514
mov byte [ebp - 4], 5
call fcn.0057c768
lea eax, [ebp - 0x44]
push eax
push 0x6c8ac8
call fcn.004c7703
push str.SetDllDirectoryA
push 0x6c0ff0
call fcn.00463d8e
test eax, eax
je 0x4455fb
push 0x74471c
call eax
call fcn.0040e2b4
call fcn.00432667
test al, al
je 0x4456c4
call fcn.0046357a
test al, al
je 0x4456c4
mov byte [0x7e15bc], 1
call fcn.00432ef5
test al, al
je 0x4456bb
mov byte [0x7e15be], 1
call fcn.005a1de4
call fcn.00474861
mov al, byte [0x7ac242]
mov byte [ebp + 0x4b], al
mov byte [0x7ac242], 1
call fcn.0047544b
push 1
push ebx
call fcn.0059cfd6
test al, al
je 0x4456b1
push ebx
push 1
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x44], 0x6d9128
call fcn.004281f2
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x1a0]
call fcn.00485ffa
push ebx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.0040f52f
lea ecx, [ebp - 0x34]
call fcn.004bc99b
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x4c]
pop ebp
ret 0xc
mov al, byte [ebp + 0x4b]
mov byte [0x7ac242], al
jmp 0x4456ce
mov word [0x7e15bd], 1
call fcn.005a1de4
call fcn.00474861
push str.NOTIFYUPDATE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x445705
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x445700
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x7ac65e], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x44573c
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x445737
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x7ac65d], al
push 0x7ac270
push str.Settings_path:___s__n
call fcn.0040e2b4
add esp, 8
lea ecx, [ebp - 0x34]
push str.AUTOUPDATE
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x4457fe
mov eax, dword [esi + 8]
mov byte [ebp + 0x58], 1
mov dword [ebp + 0x5c], eax
cmp eax, 2
jl 0x44577f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
jmp 0x445781
mov edi, ebx
test edi, edi
je 0x44578a
cmp word [edi], bx
jne 0x445795
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.0040dfc1
pop ecx
push str.NORUN
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x4457ae
mov byte [ebp + 0x58], bl
call fcn.0058ff08
mov eax, dword [ebp + 0x5c]
cmp eax, 3
jl 0x4457c7
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 8]
call fcn.00666be8
pop ecx
jmp 0x4457cd
push 0x1a
mov dword [ebp + 0x38], eax
pop eax
mov ecx, dword [ebp + 0x38]
mov dword [esi + 0x14], ecx
test edi, edi
je 0x445168
cmp word [edi], bx
je 0x445168
push eax
push dword [ebp + 0x58]
push edi
call fcn.0059c245
test al, al
je 0x445168
xor ebx, ebx
inc ebx
jmp 0x445168
cmp dword [ebp - 0x3c], 0
je 0x44582b
test edi, edi
je 0x445818
push edi
push str.Setting_log_file_to__s
call fcn.0040e2b4
add esp, 8
jmp 0x44581d
mov edi, str.stdout
push edi
push str.Log_file_set_to_path:__s__n
call fcn.0040e2b4
add esp, 8
push str.AUTOMATION
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x445872
push 1
call fcn.005839f6
cmp dword [esi + 8], 2
jl 0x445878
push 0x75
pop eax
mov word [0x791824], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x791834
call fcn.00429389
mov dword [esi + 0x14], 2
jmp 0x445878
push ebx
call fcn.005839f6
push str.MINIMIZED
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445890
mov byte [0x7bdc1d], 1
push str.NOTFAREA
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x4458a8
mov byte [0x7bdc1e], 1
push str.AUTORESTARTTIME
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x4458db
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.00666be8
mov dword [0x7a1c44], eax
mov dword [0x7a1c48], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x7e0938
call fcn.0046b3a5
push dword [ebp + 0x54]
mov ecx, 0x7e097c
call fcn.0058f309
call fcn.00494723
push str.recover
lea ecx, [ebp - 0x34]
mov dword [0x7e0980], eax
mov byte [ebp - 0x38], bl
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x445983
mov byte [ebp - 0x38], 1
mov byte [0x7e0fc4], 1
mov dword [ebp + 0x30], 0xf
mov dword [ebp + 0x2c], ebx
mov byte [ebp + 0x1c], bl
push 1
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp]
push eax
call fcn.005ab77f
push ebx
push 1
lea ecx, [ebp]
call fcn.0040f52f
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x445974
cmp dword [ebp + 0x30], 0x10
mov edx, dword [ebp + 0x1c]
mov dword [esi + 0x14], eax
jae 0x445964
lea edx, [ebp + 0x1c]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.005aeec4
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call fcn.0040f52f
cmp dword [0x7ad004], 0
mov al, bl
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
mov byte [ebp + 0x43], al
mov byte [ebp + 0x1b], al
jne 0x4459a4
mov dword [0x7ad004], 0x6abb1a3
push str.WSA_LOG
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
setne byte [0x7acdb0]
call fcn.004c9878
mov dword [ebp - 0xa8], ebx
mov esi, 0x6cc3c8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], esi
call fcn.0045f1eb
push str.dht_feed.dat
lea eax, [ebp]
mov byte [ebp - 4], 8
push eax
call fcn.0047354f
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
mov byte [ebp - 4], 9
jae 0x445a01
lea eax, [ebp]
lea ecx, [ebp - 0xac]
push ecx
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.00473196
mov ecx, eax
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x44], 1
call fcn.00493b0a
test eax, eax
jne 0x445a35
cmp byte [ebp - 0x9c], 4
mov byte [ebp + 0x4a], 1
je 0x445a38
mov byte [ebp + 0x4a], bl
lea ecx, [ebp + 0x24]
mov dword [ebp - 4], 9
call fcn.00493621
cmp byte [ebp + 0x4a], 0
mov dword [ebp + 0x44], ebx
je 0x445a67
cmp byte [ebp - 0x9c], 4
lea eax, [ebp - 0xac]
je 0x445a61
mov eax, ebx
push eax
call fcn.004926dc
push ebx
push 1
lea ecx, [ebp]
call fcn.004281f2
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xac], esi
call fcn.0045dfda
mov byte [ebp - 4], 5
call fcn.00585cc9
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445ab5
mov al, 1
mov dword [0x7e10a8], 0xb1a3
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
jmp 0x445ab8
mov al, byte [ebp + 0x57]
push ebx
push ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x38], eax
call fcn.00446f81
call fcn.0043f8bf
push str.verifyhta
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x445be4
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x445be4
push 0xffffffffffffffff
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.DLL_AttachConsole]
test eax, eax
je 0x445b40
push 1
call fcn.0066264b
push eax
push 0x6c8cf4
mov edi, 0x6c8cf8
push edi
call fcn.00668535
push 2
call fcn.0066264b
push eax
push 0x6c8cf4
push edi
call fcn.00668535
push ebx
call fcn.0066264b
push eax
push 0x6c8d00
push str.CONIN_
call fcn.00668535
add esp, 0x30
push str.Verifying_Embedded_HTA.._r_n
call fcn.004284da
mov eax, dword [esi]
pop ecx
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0x74]
call fcn.00447aa9
push ebx
push ebx
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], ebx
call fcn.004417d8
lea eax, [ebp + 0x5c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp + 0x28]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0044da21
push 5
pop ecx
push 0x6c
mov byte [ebp + 0x5b], al
lea edi, [ebp - 0x290]
lea eax, [ebp - 0x27c]
mov esi, str.VerifyHTA_Success_r_n
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0065ab80
mov bl, byte [ebp + 0x5b]
add esp, 0xc
test bl, bl
jne 0x445bca
push dword [ebp + 0x5c]
lea eax, [ebp - 0x290]
push str.VerifyHTA_Failed_with_error:__u_r_n
push 0x80
push eax
call fcn.00444597
add esp, 0x10
lea eax, [ebp - 0x290]
push eax
call fcn.004284da
xor eax, eax
test bl, bl
pop ecx
sete al
push eax
jmp 0x445169
cmp dword [0x7ace8c], 0
je 0x445bfe
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445c05
mov byte [0x7ad36d], 1
push str.LAUNCHED
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
lea ecx, [ebp - 0x34]
mov esi, 0x6c8d94
push esi
setne byte [ebp + 0x34]
call fcn.004bcbd3
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x3c]
push dword [ebp + 0x3c]
push dword [ebp + 0x34]
call fcn.004417d8
cmp dword [0x7acfc0], 0
mov byte [ebp - 4], 0xe
jne 0x445c94
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x98]
call fcn.00442182
mov byte [ebp - 4], 0xf
test eax, eax
je 0x445c66
add eax, 4
jmp 0x445c68
mov eax, ebx
push eax
lea eax, [ebp]
push eax
call fcn.00440856
push eax
mov ecx, 0x7ad008
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp]
call fcn.0040f52f
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xe
call fcn.00447b2e
mov edi, 0x6c8d9c
mov byte [ebp - 0x48], bl
push edi
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
push 0x6c8da0
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
cmp byte [ebp + 0x34], al
je 0x445ced
push esi
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445dc0
push str.RELOCATED
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
push str.HYDRA_EXCEPTION
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445dc0
mov byte [ebp - 4], 0x10
cmp dword [0x7ace8c], eax
jne 0x445d68
cmp byte [0x7ad36d], al
je 0x445d68
push 0x6c8e00
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
call fcn.00474861
push ebx
push ebx
push esi
call fcn.005a2015
mov byte [0x7ac242], 1
call fcn.0047544b
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044c54d
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x11
call fcn.00455f59
lea ecx, [ebp - 0x3a8]
call fcn.0044c980
jmp 0x445db9
mov dword [ebp - 4], 0xe
mov eax, dword [0x7ace8c]
test eax, eax
je 0x445ddc
cmp eax, 0x6abb1a3
je 0x445ddc
call fcn.00475dbc
call fcn.0058316e
jmp 0x445de3
mov byte [0x7ac242], 1
push edi
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445e10
push 0x6c8da0
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
jne 0x445e10
lea ecx, [ebp - 0x98]
call fcn.00448b93
test al, al
jne 0x445e1a
mov dword [0x7ace8c], 0x6abb1a3
push str.UNINSTALL
lea ecx, [ebp - 0x34]
mov byte [ebp + 0x4a], bl
mov dword [ebp + 0x38], 3
call fcn.004bcbd3
lea ecx, [ebp - 0x34]
test eax, eax
je 0x445e71
push edi
mov byte [ebp + 0x5c], bl
mov byte [ebp + 0x58], bl
call fcn.004bcbd3
test eax, eax
je 0x445e4c
mov byte [ebp + 0x5c], 1
push str.REMSETTINGS
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445e61
mov byte [ebp + 0x58], 1
push dword [ebp + 0x58]
push dword [ebp + 0x5c]
call fcn.004375d7
jmp 0x445168
push str.BIGDUMP
call fcn.004bcbd3
test eax, eax
je 0x445e86
mov byte [0x7b0ccd], 1
xor eax, eax
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc4], ebx
mov word [ebp - 0xd4], ax
push str.PAIR
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x13
call fcn.004bcbd3
test eax, eax
je 0x445ede
cmp dword [eax + 8], 1
jle 0x445ede
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00428460
pop ecx
push eax
push esi
lea ecx, [ebp - 0xd4]
call fcn.00438cfb
push str.DIRECTORY
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x445f0c
cmp dword [edx + 8], 1
jle 0x445f0c
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov eax, dword [ecx + eax*4 + 4]
mov dword [0x7bdc20], eax
mov dword [edx + 0x14], 2
push str.HIDE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x445f24
mov byte [0x7e0985], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x114], ebx
mov word [ebp - 0x124], cx
mov dword [ebp - 0xf8], eax
xor eax, eax
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], ax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x16
call fcn.004bcbd3
mov edi, eax
test edi, edi
je 0x445f9b
cmp dword [edi + 8], 1
jle 0x445f9b
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.00428460
pop ecx
push eax
push esi
lea ecx, [ebp - 0x124]
call fcn.00438cfb
mov dword [edi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edi, eax
test edi, edi
je 0x445fd8
cmp dword [edi + 8], 1
jle 0x445fd8
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.00428460
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.00438cfb
mov dword [edi + 0x14], 2
push ebx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.005a08f3
mov eax, dword [ebp - 0x54]
mov edi, ebx
mov ecx, dword [ebp - 0x58]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x446026
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.005a02b6
mov eax, dword [ebp - 0x54]
inc edi
mov ecx, dword [ebp - 0x58]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x446009
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x446117
xor eax, eax
mov dword [ebp + 0x30], 7
inc eax
mov dword [ebp + 0x2c], ebx
xor ecx, ecx
mov byte [0x7ace88], al
mov word [ebp + 0x1c], cx
mov byte [ebp - 4], 0x17
cmp dword [edx + 8], eax
jle 0x446078
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [edx + 0x14], 2
push dword [eax + ecx*4 + 4]
lea ecx, [ebp + 0x1c]
call fcn.0042a56b
jmp 0x44609d
mov dword [edx + 0x14], eax
lea eax, [ebp]
push str.http:__trontv.com____pclassic
push eax
call fcn.0047dfcb
push eax
lea ecx, [ebp + 0x1c]
call fcn.00427c6d
push ebx
push 1
lea ecx, [ebp]
call fcn.004281f2
cmp dword [ebp + 0x30], 8
mov eax, dword [ebp + 0x1c]
jae 0x4460a9
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp]
call fcn.00429973
lea eax, [ebp]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004963dc
push eax
push str.http:__apps.bittorrent.com_featuredcontent_featuredcontent.btapp_offer
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x19
push eax
call fcn.004413df
push eax
mov ecx, 0x7ad258
call fcn.00427c6d
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp]
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x16
call fcn.004281f2
push str.DOWNLOADINSTALL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x4462f3
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.0040df86
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.00666be8
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp + 0x3c], eax
lea eax, [ebp - 0x70]
push dword [ecx + edx*4 + 0xc]
push eax
call fcn.00429352
push eax
mov ecx, 0x784478
call fcn.00427c6d
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.004281f2
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
push eax
mov ecx, 0x784460
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
test edi, edi
je 0x4461d7
cmp word [edi], bx
je 0x4461d7
push 0x7aafb0
push edi
lea eax, [ebp + 0x24]
push eax
call fcn.00473196
mov ecx, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp + 0x44], 2
call fcn.00493b0a
mov byte [ebp + 0x4b], 1
test eax, eax
je 0x4461da
mov byte [ebp + 0x4b], bl
test byte [ebp + 0x44], 2
mov dword [ebp - 4], 0x16
je 0x4461ef
lea ecx, [ebp + 0x24]
call fcn.00493621
cmp byte [ebp + 0x4b], 0
je 0x4462ef
push 0x6c0c54
push ebx
lea eax, [ebp]
mov dword [0x7841ac], 0x7aafb0
push eax
call fcn.0046059a
push 0x3c
mov byte [ebp - 4], 0x1b
call fcn.0063ffa4
mov esi, eax
pop ecx
mov dword [ebp + 0x30], esi
mov byte [ebp - 4], 0x1c
test esi, esi
je 0x44625f
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
jae 0x446237
lea eax, [ebp]
mov ecx, dword [0x7841ac]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.0045e2f2
mov ecx, eax
call fcn.0045e467
push eax
mov ecx, esi
call fcn.00429c58
mov esi, eax
jmp 0x446261
mov esi, ebx
mov eax, dword [ebp + 0x3c]
push 0xc4
mov byte [ebp - 4], 0x1b
mov dword [esi], eax
call fcn.0063ffa4
pop ecx
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x446289
mov ecx, eax
call fcn.004666da
jmp 0x44628b
mov eax, ebx
mov byte [ebp - 4], 0x1b
mov dword [ebp + 0x44], eax
test eax, eax
je 0x44629f
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x44]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [eax + 8]
call fcn.00427cb3
mov eax, dword [ebp + 0x44]
mov dword [eax + 0xc0], 0x432bf9
lea eax, [ebp + 0x44]
push eax
push 1
push esi
push fcn.00436b4f
lea eax, [esi + 0x20]
push eax
call fcn.005a0e50
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea ecx, [ebp + 0x44]
call fcn.00427bf2
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x16
call fcn.004281f2
mov byte [ebp + 0x4a], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x60
pop ecx
mov dword [0x7bdc98], eax
cmp eax, ecx
jg 0x446317
mov dword [0x7bdc98], ecx
push esi
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.0058086c
call fcn.00590f0f
push 0x6c8da0
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
mov edi, eax
call fcn.004bcbd3
mov esi, eax
test edi, edi
je 0x44644a
test esi, esi
je 0x446364
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7b0cc8], eax
mov dword [0], ebx
xor eax, eax
mov esi, ebx
inc eax
cmp dword [edi + 8], eax
jne 0x446378
mov dword [edi + 0x14], eax
mov esi, 0xe53e
jmp 0x4463b9
mov ecx, dword [edi + 4]
mov eax, dword [edi]
push 2
pop edx
mov dword [edi + 0x14], edx
mov edi, dword [eax + ecx*4 + 4]
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp + 0x54], eax
mov ax, word [ecx]
add ecx, edx
cmp ax, bx
jne 0x44638f
sub ecx, dword [ebp + 0x54]
mov eax, ebx
sar ecx, 1
je 0x4463b9
push 0x30
lea edx, [ecx - 1]
pop ebx
cmp word [edi + eax*2], bx
je 0x4463b1
bts esi, edx
inc eax
dec edx
cmp eax, ecx
jb 0x4463a8
xor ebx, ebx
push ebx
and esi, 0xfffef57f
mov dword [ebp + 0x10], ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x14], ebx
or esi, 0x20000
call fcn.0040f52f
push 0x6c8e00
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
call fcn.004bcbd3
mov edx, eax
test edx, edx
je 0x446425
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x446425
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push 0x6c7b3c
push eax
call fcn.004654bc
add esp, 0xc
lea ecx, [ebp]
push eax
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp]
mov ecx, esp
push eax
call fcn.0040f4ab
push ebx
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042fa99
jmp 0x445bde
test esi, esi
je 0x44650b
cmp dword [esi + 8], 2
jl 0x44646c
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00666be8
pop ecx
mov dword [ebp + 0x38], eax
jmp 0x446473
mov dword [ebp + 0x38], 0x100
cmp dword [esi + 8], 3
jl 0x446484
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 8]
jmp 0x446486
mov edi, ebx
cmp dword [esi + 8], 4
jl 0x4464ac
cmp byte [0x7bdc1c], 0
je 0x4464ac
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.00666be8
pop ecx
push eax
push 1
call fcn.00446f81
mov eax, dword [esi + 8]
cmp eax, 4
jle 0x4464b7
push 4
pop eax
mov dword [esi + 0x14], eax
mov eax, edi
test edi, edi
jne 0x4464c5
mov eax, 0x6c111c
mov esi, dword [ebp + 0x38]
push eax
push esi
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.0040e2b4
add esp, 0xc
mov byte [ebp + 0x4a], 1
push ebx
push ebx
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040f52f
push edi
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042fa99
mov esi, eax
mov dword [ebp + 0x38], esi
call fcn.0058ff08
jmp 0x44650e
mov esi, dword [ebp + 0x38]
push str.FORCEUPDATE
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x446529
mov dword [0x7917e0], 0x6abb1a2
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x44654b
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7b0cc8], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x446563
mov byte [0x7bdc1f], 1
push str.BRINGTOFRONT
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x446578
mov byte [ebp + 0x43], 1
cmp byte [ebp + 0x4a], 0
je 0x446589
call fcn.00437e6c
push esi
jmp 0x445169
push 0x6c909c
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x4465d7
mov byte [0x790cc0], 1
cmp dword [esi + 8], 2
jne 0x4465c7
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00666be8
or dword [0x7b0f78], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x4465e9
or dword [0x7b0f78], 0xffffffff
mov dword [esi + 0x14], 1
jmp 0x4465e9
cmp byte [0x7bb994], 0
sete al
dec al
and byte [0x790cc0], al
call fcn.004c5366
push eax
call fcn.0049f4f4
push str.STARTAPP
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
mov esi, eax
test esi, esi
je 0x446673
cmp dword [esi + 8], 2
jl 0x446673
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
push eax
mov ecx, 0x7e12c8
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
cmp dword [esi + 8], 3
jl 0x44666c
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
push eax
mov ecx, 0x7e12e0
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
mov dword [esi + 0x14], 3
jmp 0x446673
mov dword [esi + 0x14], 2
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x4466da
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x4466da
jmp 0x4466d5
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.0047e15a
mov ecx, dword [esi + 4]
add ecx, edi
test al, al
mov eax, dword [esi]
je 0x4466c0
lea edx, [ebp + 0x4b]
mov byte [ebp + 0x4b], bl
push edx
push dword [eax + ecx*4]
call fcn.00470d6b
test al, al
je 0x4466d4
mov al, byte [ebp + 0x4b]
mov byte [0x7bdc1d], al
jmp 0x4466d4
mov eax, dword [eax + ecx*4]
mov ecx, 0x7bde30
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
call fcn.005dbe21
inc edi
cmp edi, dword [esi + 8]
jl 0x446684
lea eax, [ebp - 0x160]
push eax
call fcn.0057fdfa
mov edi, dword [ebp + 0x34]
lea eax, [ebp - 0xd4]
mov esi, dword [ebp - 0x38]
push ebx
push edi
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x20
push eax
push esi
call fcn.0058412d
test al, al
je 0x445168
push str.___________________________________________
push 0x40
call fcn.0048912b
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
lea ecx, [ebp - 0x34]
push str.UNINSTALL
setne byte [ebp + 0x3c]
call fcn.004bcbd3
test eax, eax
lea ecx, [ebp - 0x34]
push str.RELOCATED
setne byte [ebp + 0x44]
call fcn.004bcbd3
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x34]
call fcn.00448b8f
movzx eax, al
push eax
push dword [ebp + 0x34]
lea eax, [ebp + 0x34]
push edi
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push eax
call fcn.00444a53
push 0x6c8e00
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
cmp byte [ebp + 0x57], 0
mov byte [ebp + 0x44], bl
je 0x44679a
cmp byte [0x7ad36d], 0
je 0x44679a
mov byte [ebp + 0x44], 1
push ebx
push dword [ebp + 0x44]
push eax
call fcn.005a2015
push str.STAGE_URL
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
setne byte [0x7acdaf]
call fcn.00462ee2
or al, byte [ebp + 0x34]
or byte [ebp + 0x57], al
call fcn.0047544b
cmp byte [ebp + 0x57], 0
jne 0x44680b
push dword [ebp - 0x48]
lea ecx, [ebp - 0x98]
call fcn.00448b8f
movzx eax, al
push eax
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040f52f
push ebx
push ebx
push esi
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042fa99
mov edi, eax
call fcn.004328bd
jmp 0x44680e
mov edi, dword [ebp + 0x38]
cmp dword [0x7ad268], 0
mov byte [ebp + 0x4b], bl
je 0x446979
mov esi, str..btapp_
push esi
call fcn.00428460
pop ecx
push eax
push ebx
push esi
mov esi, 0x7ad258
mov ecx, esi
call fcn.0043983f
cmp eax, 0xffffffff
je 0x446917
push esi
lea eax, [ebp]
mov byte [ebp + 0x57], bl
push eax
call fcn.00440856
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040f52f
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
jae 0x446871
lea eax, [ebp]
lea ecx, [ebp + 0x57]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x3b8]
call fcn.004446f4
push str.offer
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
call fcn.0040eeff
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x3b8]
call fcn.00495d17
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
mov esi, eax
call fcn.0040f52f
cmp byte [ebp + 0x57], 0
je 0x4468f6
test esi, esi
je 0x4468f6
push esi
mov esi, 0x7e10ac
mov ecx, esi
call fcn.00444935
lea eax, [ebp - 0x370]
mov ecx, 0x7e12c8
push eax
call fcn.00427c51
lea eax, [ebp - 0x328]
mov ecx, 0x7e12e0
push eax
call fcn.00427c51
mov byte [ebp + 0x4b], 1
jmp 0x4468fb
mov esi, 0x7e10ac
lea ecx, [ebp - 0x3b8]
call fcn.00444876
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.0040f52f
jmp 0x446967
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.004281f2
push ebx
push 1
lea eax, [ebp]
mov byte [ebp - 4], 0x24
push eax
push esi
lea ecx, [ebp - 0x8c]
call fcn.005a00b6
push eax
mov byte [ebp - 4], 0x25
call fcn.005a02b6
lea ecx, [ebp - 0x8c]
call fcn.0042a3a1
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.004281f2
mov esi, 0x7e10ac
mov ecx, 0x7ad258
call fcn.004473a8
mov byte [0x7ad288], bl
jmp 0x44697e
mov esi, 0x7e10ac
call fcn.004947c9
test eax, eax
setne al
cmp dword [0x7e10bc], 0
mov byte [ebp + 0x57], al
jne 0x4469a3
push str.http:__trontv.com____pclassic
mov ecx, esi
call fcn.00444935
mov al, byte [ebp + 0x57]
test al, al
jne 0x446a14
push ebx
push str.trontv.com
mov ecx, esi
call fcn.004473eb
cmp eax, 0xffffffff
jne 0x446a14
push ebx
push str.trontv.com
mov ecx, esi
call fcn.004473eb
cmp eax, 0xffffffff
je 0x446a14
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x154]
mov ecx, esi
push eax
call fcn.004407da
push eax
push str.http:__beta.
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x26
push eax
call fcn.004289b7
push eax
mov ecx, esi
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
push ebx
push 1
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x20
call fcn.0040f52f
cmp byte [ebp + 0x37], 0
je 0x446a31
cmp edi, 4
jge 0x446a31
call fcn.005a4a38
push dword [0x7917e0]
mov ecx, eax
call fcn.005a61a4
test edi, edi
je 0x445168
cmp edi, 1
je 0x446f6f
cmp edi, 2
je 0x446f56
cmp edi, 4
je 0x446f1f
cmp edi, 6
jle 0x446a85
cmp edi, 9
jle 0x446a7f
cmp edi, 0xc
jne 0x446a85
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x6c9144
call fcn.00432e9b
push edi
jmp 0x445169
push edi
jmp 0x445169
push str.temp
lea eax, [ebp - 0x13c]
push eax
call fcn.00473603
cmp dword [ebp - 0x128], 8
mov eax, dword [ebp - 0x13c]
mov byte [ebp - 4], 0x27
jae 0x446aaf
lea eax, [ebp - 0x13c]
push eax
call fcn.004bd386
mov al, byte [0x7b0cce]
test al, al
jne 0x446ae7
push 0x104
lea eax, [ebp - 0x5c0]
push eax
push dword [0x7e097c]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x5c0]
push eax
call fcn.0042cd3b
mov al, byte [0x7b0cce]
movzx eax, al
push eax
call fcn.00583cff
mov eax, 0x7bdb80
push eax
push str.Version:__s
call fcn.0040e2b4
add esp, 8
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
cmp dword [eax + 0x14], 0x10
jb 0x446b15
mov eax, dword [eax]
push eax
push 0x6c1010
call fcn.0040e2b4
add esp, 8
lea ecx, [ebp - 0x70]
push ebx
push 1
call fcn.0040f52f
push str.HELPERLOG
lea ecx, [ebp - 0x34]
call fcn.004bcbd3
test eax, eax
je 0x446b49
mov dword [0x7b1780], 1
push dword [ebp - 0x4c]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
call fcn.00585cd0
lea ecx, [ebp - 0x34]
call fcn.004bcbfe
call fcn.00462cad
cmp byte [0x7ac69f], 0
mov byte [0x7b0ccc], al
je 0x446b8d
push ebx
push ebx
call fcn.0047bb66
test eax, eax
je 0x446b8d
call fcn.0046253b
mov dword [0x7bdca0], eax
mov dword [0x7bdca4], edx
cmp byte [0x7ac788], 0
je 0x446b9c
mov dword [0x7ac508], ebx
call fcn.00472baa
mov byte [0x7ac243], al
call fcn.004bd378
and dword [0x7b0cac], 0xbfffffff
call fcn.0048dcad
lea eax, [ebp + 0x58]
mov ecx, 0x7b1a24
push eax
call fcn.0042a5be
mov ecx, dword [ebp + 0x58]
call fcn.0048957a
call fcn.00430b18
call fcn.0057ffe0
cmp eax, 1
je 0x446c1b
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.0040f52f
push ebx
lea eax, [ebp]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005ab77f
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x27
call fcn.0040f52f
call fcn.005ab701
lea ecx, [ebp - 0xb98]
call fcn.0057d9b6
push dword [ebp - 0x40]
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x29
call fcn.0057ecb3
mov eax, dword [0x7e256c]
test eax, eax
je 0x446c4c
mov cl, byte [ebp + 0x4b]
mov byte [eax + 0x4d], cl
call fcn.004c0f76
call fcn.00473c52
cmp dword [ebp - 0xc4], 0
je 0x446cb3
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp]
push eax
call fcn.00440856
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
mov byte [ebp - 4], 0x2a
jae 0x446c7f
lea eax, [ebp]
push 1
push 0x28
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.00470e65
test al, al
je 0x446ca4
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6c111c
lea eax, [ebp + 0x20]
push eax
call fcn.0047eb0f
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x29
call fcn.0040f52f
push 0x57e2f2
call fcn.005a960d
call fcn.005a8e35
cmp eax, 7
jne 0x446ccc
call fcn.005a9337
call fcn.005a9070
call fcn.005ace3e
test al, al
je 0x446ce8
call fcn.005ad71f
test al, al
je 0x446ce8
call fcn.005ad9fd
cmp dword [0x7acd70], 0
jne 0x446d20
call fcn.005ac165
test al, al
jne 0x446d10
push dword [0x6c7fe8]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
mov ecx, 0x7acd60
jmp 0x446d59
cmp dword [0x7acd70], 0
jne 0x446d20
mov esi, 0x7acd60
jmp 0x446d48
mov esi, 0x7acd60
push esi
call fcn.005ac3c0
test al, al
jne 0x446d48
push str.uTorrent_Player
mov ecx, esi
call fcn.00438e5d
test eax, eax
jne 0x446d6a
call fcn.005ac165
test al, al
je 0x446d6a
push dword [0x6c8000]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
mov ecx, esi
push eax
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
cmp dword [0x7acd88], 0
jne 0x446d98
push dword [0x6c7fe8]
lea eax, [ebp - 0x70]
push eax
call fcn.0047dece
push eax
mov ecx, 0x7acd78
call fcn.0040eb52
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040f52f
push ebx
push ebx
push 0x490092
call fcn.0046de22
call fcn.005a0797
cmp eax, 2
jne 0x446db3
call fcn.005a0859
push 0xa14
call fcn.0063ffa4
pop ecx
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x446dd8
push dword [0x7bdc9c]
mov ecx, eax
call fcn.0046b148
jmp 0x446dda
mov eax, ebx
cmp dword [0x7ad08c], 0
mov byte [ebp - 4], 0x29
mov dword [0x7ab408], eax
je 0x446e20
lea eax, [ebp - 0x70]
push eax
call fcn.0059c573
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x2c
jb 0x446e01
mov eax, dword [eax]
push 0x7ad07c
push 0x7acde0
push eax
call fcn.00486cc0
push ebx
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.0040f52f
cmp byte [ebp + 0x43], 0
je 0x446e3b
call fcn.0057ffe0
test eax, eax
je 0x446e3b
push dword [ebp - 0xb94]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0048240e
test al, al
je 0x446e4f
push str.IPv6_is_installed
call fcn.0047cc80
pop ecx
mov byte [ebp + 0x5b], 1
call fcn.00478821
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0x2d
push eax
call fcn.0048fb49
test al, al
je 0x446e88
sub esp, 0x10
lea esi, [ebp - 0x210]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0047cc80
add esp, 0x14
mov byte [ebp - 4], 0x2e
call fcn.00478862
cmp byte [ebp + 0x3c], 0
mov byte [ebp - 4], 0x29
jne 0x446eaf
call fcn.005a4a38
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.005a63cc
push ebx
push 0x119
call fcn.0048d69c
call fcn.004c6051
call fcn.005a98a3
cmp byte [0x7bdc1d], 0
jne 0x446edb
cmp byte [0x7e0985], 0
jne 0x446edb
call fcn.0058be1d
call fcn.004a7313
mov edi, dword [eax + 4]
mov esi, dword [edi]
jmp 0x446ef1
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esi]
cmp esi, edi
jne 0x446ee7
mov ecx, 0x7e097c
call fcn.0058f398
call fcn.004bcdfa
call fcn.005a4a38
mov ecx, eax
call fcn.005a6846
call fcn.0057c859
call fcn.0040e2b4
jmp 0x445168
call fcn.005a4a38
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.0048912b
cmp byte [ebp + 0x35], 0
pop ecx
pop ecx
jne 0x446f4f
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.0048912b
pop ecx
pop ecx
mov ecx, esi
call fcn.005a6342
push 4
jmp 0x445169
push dword [ebp + 0x5c]
mov byte [0x7bdc1d], 1
push dword [ebp + 0x58]
call fcn.00432e9b
push 2
jmp 0x445169
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.00432e9b
push 1
jmp 0x445169