Function at 0x4436d8
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x48
mov eax, 0x694a6c
call fcn.006375a8
sub esp, 0xa98
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp + 0x44], ebx
call fcn.004b927a
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], ebx
push dword [ebp + 0x58]
call fcn.004b92ed
push str.INSTALLCHECK
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x443745
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x443745
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.0043749c
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
lea ecx, [ebp - 0x200]
call fcn.004b95b0
push str.logfile
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.004b9514
mov esi, eax
mov edi, ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp + 0x44], edi
test esi, esi
je 0x443793
push 2
pop edx
cmp dword [esi + 8], edx
jl 0x443785
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
mov dword [esi + 0x14], edx
jmp 0x44378a
mov edi, str.bt.log
mov dword [ebp + 0x44], edi
mov dword [ebp - 0x1fc], edi
push 0x7845d0
call fcn.0047138c
push 3
pop eax
push 5
mov dword [ebp + 0x38], eax
mov dword [ebp - 0x1e0], eax
pop eax
push 0x795098
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 0x1d4], 1
mov dword [ebp - 0x1e8], 0xb0eb
mov dword [ebp - 0x1e4], 0x6be4cc
mov dword [ebp - 0x1b4], 0x6be4e8
mov dword [ebp - 0x1f8], 0x6be4f8
mov dword [ebp - 0x1f4], 0x6bdb84
mov dword [ebp - 0x1ec], 0x6be4ec
mov dword [ebp - 0x1f0], 0x6b764c
call fcn.0047138c
push str.TORRENTPANE
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
call fcn.00430cbf
test al, al
jne 0x44382b
test esi, esi
je 0x443836
push ebx
push 0x795098
call fcn.004708a8
call fcn.005a54f6
push str.PORTABLE
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x200], eax
mov byte [ebp - 0x4c], bl
call fcn.004b9514
test eax, eax
je 0x443863
mov byte [ebp - 0x4c], 1
mov dword [0x79fc80], 0x10
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0xd8], eax
mov esi, str.http:__pr.apps.bittorrent.com_client_webui__s_client_webui.json
mov byte [ebp - 4], 2
push esi
call fcn.0040d6de
pop ecx
push eax
push esi
lea ecx, [ebp - 0x1cc]
call fcn.0040d457
lea eax, [ebp + 0x3c]
mov dword [ebp - 0x1d0], 0x77e6a4
push eax
mov ecx, 0x7a65f0
mov dword [ebp + 0x3c], 0x4c2ffc
call fcn.00527483
lea eax, [ebp - 0x200]
push eax
call fcn.004b97fd
push str.CAMPAIGN
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x4438f2
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x4438f2
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.0065df48
pop ecx
push eax
mov ecx, 0x79f188
call fcn.00470e0f
push str.BROWSER
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x443938
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x443938
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp]
push eax
call fcn.00427922
push eax
mov ecx, 0x7a0048
call fcn.0042623d
push ebx
push 1
lea ecx, [ebp]
call fcn.004267c2
mov ecx, 0x79f188
call fcn.00470748
push eax
push fcn.0059b6ee
call fcn.005a7c43
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x44396f
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7a3ad4], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp - 0x34]
call fcn.004b9514
xor ecx, ecx
mov dword [ebp + 0x3c], eax
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], ebx
mov word [ebp - 0xf4], cx
mov byte [ebp - 4], 3
test eax, eax
je 0x4439e5
cmp dword [eax + 8], 2
jl 0x4439e5
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00426a30
pop ecx
push eax
push esi
lea ecx, [ebp - 0xf4]
call fcn.004372ba
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp - 0xf4]
push 0x6be5c8
mov dword [eax + 0x14], 2
call fcn.00437471
neg eax
sbb eax, eax
neg eax
jmp 0x4439ea
call fcn.0046a867
push eax
call fcn.00599ae5
push ebx
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push eax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xb8], ebx
push eax
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x40], eax
call fcn.0056c128
mov esi, eax
lea ecx, [ebp - 0x178]
mov eax, dword [ebp - 0x40]
push str.utorrent
mov dword [esi + 0x28], eax
call fcn.0040d4cf
lea ecx, [esi + 0x2c]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x178]
cmp ecx, eax
je 0x443a5a
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040d9ee
push ebx
push 1
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 3
call fcn.0040daff
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b4
call fcn.0056bc06
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf9
call fcn.0056bc06
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b5
call fcn.0056bc06
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf8
call fcn.0056bc06
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b6
call fcn.0056bc06
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ec74
call fcn.0056bc06
lea ecx, [esi + 4]
mov eax, 0x778960
cmp ecx, eax
je 0x443b0b
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040d9ee
cmp dword [ebp - 0x40], 0
jne 0x443b1d
mov eax, str.loaded
mov ecx, str.enabled
jmp 0x443b27
mov eax, str.failed_to_load
mov ecx, 0x6be61c
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.0040c884
add esp, 0xc
push str.Process_started
call fcn.0040c556
mov esi, ebx
cmp dword [ebp + 0x58], esi
je 0x443b5d
mov edi, dword [ebp + 0x5c]
push dword [edi + esi*4]
call fcn.0040c556
inc esi
cmp esi, dword [ebp + 0x58]
jne 0x443b4a
mov edi, dword [ebp + 0x44]
xor ebx, ebx
push str.End_Args
call fcn.0040c556
mov ecx, 0x7a45a0
call fcn.004458d0
mov ecx, 0x7a45c8
call fcn.004ea1a2
mov ecx, 0x7a45b4
call fcn.00445881
call fcn.004bb922
call fcn.005a3025
push 0x7d3ff8
call fcn.0049c1ba
mov dword [ebp - 0x44], 0x6be0cc
mov byte [ebp - 4], 5
call fcn.005788c3
lea eax, [ebp - 0x44]
push eax
push 0x6be680
call fcn.004c41f3
push str.SetDllDirectoryA
push 0x6b69f4
call fcn.00462194
test eax, eax
je 0x443bd1
push 0x73938c
call eax
call fcn.0040c884
call fcn.00430c41
test al, al
je 0x443c9a
call fcn.00461980
test al, al
je 0x443c9a
mov byte [0x7d323c], 1
call fcn.004314cf
test al, al
je 0x443c91
mov byte [0x7d323e], 1
call fcn.0059d737
call fcn.00471dbb
mov al, byte [0x79ef6a]
mov byte [ebp + 0x4b], al
mov byte [0x79ef6a], 1
call fcn.004729a5
push 1
push ebx
call fcn.00598851
test al, al
je 0x443c87
push ebx
push 1
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x44], 0x6ce978
call fcn.004267c2
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x1a0]
call fcn.004b6ad8
push ebx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.0040daff
lea ecx, [ebp - 0x34]
call fcn.004b92dc
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x4c]
pop ebp
ret 0xc
mov al, byte [ebp + 0x4b]
mov byte [0x79ef6a], al
jmp 0x443ca4
mov word [0x7d323d], 1
call fcn.0059d737
call fcn.00471dbb
push str.NOTIFYUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443cdb
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x443cd6
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x79f336], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443d12
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x443d0d
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x79f335], al
push 0x79ef80
push str.Settings_path:___s__n
call fcn.0040c884
add esp, 8
lea ecx, [ebp - 0x34]
push str.AUTOUPDATE
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443dd4
mov eax, dword [esi + 8]
mov byte [ebp + 0x58], 1
mov dword [ebp + 0x5c], eax
cmp eax, 2
jl 0x443d55
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
jmp 0x443d57
mov edi, ebx
test edi, edi
je 0x443d60
cmp word [edi], bx
jne 0x443d6b
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.0040c591
pop ecx
push str.NORUN
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x443d84
mov byte [ebp + 0x58], bl
call fcn.0058baed
mov eax, dword [ebp + 0x5c]
cmp eax, 3
jl 0x443d9d
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 8]
call fcn.0065df48
pop ecx
jmp 0x443da3
push 0x1a
mov dword [ebp + 0x38], eax
pop eax
mov ecx, dword [ebp + 0x38]
mov dword [esi + 0x14], ecx
test edi, edi
je 0x44373e
cmp word [edi], bx
je 0x44373e
push eax
push dword [ebp + 0x58]
push edi
call fcn.00597b2c
test al, al
je 0x44373e
xor ebx, ebx
inc ebx
jmp 0x44373e
cmp dword [ebp - 0x3c], 0
je 0x443e01
test edi, edi
je 0x443dee
push edi
push str.Setting_log_file_to__s
call fcn.0040c884
add esp, 8
jmp 0x443df3
mov edi, str.stdout
push edi
push str.Log_file_set_to_path:__s__n
call fcn.0040c884
add esp, 8
push str.AUTOMATION
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443e48
push 1
call fcn.0057fc3a
cmp dword [esi + 8], 2
jl 0x443e4e
push 0x75
pop eax
mov word [0x785564], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x785574
call fcn.00427959
mov dword [esi + 0x14], 2
jmp 0x443e4e
push ebx
call fcn.0057fc3a
push str.MINIMIZED
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x443e66
mov byte [0x7b0855], 1
push str.NOTFAREA
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x443e7e
mov byte [0x7b0856], 1
push str.AUTORESTARTTIME
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443eb1
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.0065df48
mov dword [0x7950d8], eax
mov dword [0x7950dc], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x7d2628
call fcn.00469208
push dword [ebp + 0x54]
mov ecx, 0x7d26a4
call fcn.0058aef1
call fcn.00491803
push str.recover
lea ecx, [ebp - 0x34]
mov dword [0x7d26a8], eax
mov byte [ebp - 0x38], bl
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x443f59
mov byte [ebp - 0x38], 1
mov byte [0x7d2ccc], 1
mov dword [ebp + 0x30], 0xf
mov dword [ebp + 0x2c], ebx
mov byte [ebp + 0x1c], bl
push 1
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp]
push eax
call fcn.005a6976
push ebx
push 1
lea ecx, [ebp]
call fcn.0040daff
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x443f4a
cmp dword [ebp + 0x30], 0x10
mov edx, dword [ebp + 0x1c]
mov dword [esi + 0x14], eax
jae 0x443f3a
lea edx, [ebp + 0x1c]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.005a80a2
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call fcn.0040daff
cmp dword [0x79fcd0], 0
mov al, bl
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
mov byte [ebp + 0x43], al
mov byte [ebp + 0x1b], al
jne 0x443f7a
mov dword [0x79fcd0], 0x6abb0eb
push str.WSA_LOG
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
setne byte [0x79fa84]
call fcn.004c660e
mov dword [ebp - 0xa8], ebx
mov esi, 0x6b6d70
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], esi
call fcn.0045d59e
push str.dht_feed.dat
lea eax, [ebp]
mov byte [ebp - 4], 8
push eax
call fcn.00470ce5
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
mov byte [ebp - 4], 9
jae 0x443fd7
lea eax, [ebp]
lea ecx, [ebp - 0xac]
push ecx
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.0047092c
mov ecx, eax
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x44], 1
call fcn.0051563a
test eax, eax
jne 0x44400b
cmp byte [ebp - 0x9c], 4
mov byte [ebp + 0x4a], 1
je 0x44400e
mov byte [ebp + 0x4a], bl
lea ecx, [ebp + 0x24]
mov dword [ebp - 4], 9
call fcn.004906e8
cmp byte [ebp + 0x4a], 0
mov dword [ebp + 0x44], ebx
je 0x44403d
cmp byte [ebp - 0x9c], 4
lea eax, [ebp - 0xac]
je 0x444037
mov eax, ebx
push eax
call fcn.0048f803
push ebx
push 1
lea ecx, [ebp]
call fcn.004267c2
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xac], esi
call fcn.0045c38d
mov byte [ebp - 4], 5
call fcn.00581f0d
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x44408b
mov al, 1
mov dword [0x7d2da8], 0xb0eb
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
jmp 0x44408e
mov al, byte [ebp + 0x57]
push ebx
push ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x38], eax
call fcn.0044554f
call fcn.0043de61
push str.verifyhta
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x4441ba
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x4441ba
push 0xffffffffffffffff
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.DLL_AttachConsole]
test eax, eax
je 0x444116
push 1
call fcn.006599a8
push eax
push 0x6be8ac
mov edi, 0x6be8b0
push edi
call fcn.0065f895
push 2
call fcn.006599a8
push eax
push 0x6be8ac
push edi
call fcn.0065f895
push ebx
call fcn.006599a8
push eax
push 0x6be8b8
push str.CONIN_
call fcn.0065f895
add esp, 0x30
push str.Verifying_Embedded_HTA.._r_n
call fcn.00426aaa
mov eax, dword [esi]
pop ecx
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0x74]
call fcn.00446021
push ebx
push ebx
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], ebx
call fcn.0043fdfe
lea eax, [ebp + 0x5c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp + 0x28]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0044bf21
push 5
pop ecx
push 0x6c
mov byte [ebp + 0x5b], al
lea edi, [ebp - 0x290]
lea eax, [ebp - 0x27c]
mov esi, str.VerifyHTA_Success_r_n
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00651ed0
mov bl, byte [ebp + 0x5b]
add esp, 0xc
test bl, bl
jne 0x4441a0
push dword [ebp + 0x5c]
lea eax, [ebp - 0x290]
push str.VerifyHTA_Failed_with_error:__u_r_n
push 0x80
push eax
call fcn.00442be3
add esp, 0x10
lea eax, [ebp - 0x290]
push eax
call fcn.00426aaa
xor eax, eax
test bl, bl
pop ecx
sete al
push eax
jmp 0x44373f
cmp dword [0x79fb58], 0
je 0x4441d4
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x4441db
mov byte [0x7a0039], 1
push str.LAUNCHED
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
lea ecx, [ebp - 0x34]
mov esi, 0x6be94c
push esi
setne byte [ebp + 0x34]
call fcn.004b9514
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x3c]
push dword [ebp + 0x3c]
push dword [ebp + 0x34]
call fcn.0043fdfe
cmp dword [0x79fc8c], 0
mov byte [ebp - 4], 0xe
jne 0x44426a
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x98]
call fcn.00440756
mov byte [ebp - 4], 0xf
test eax, eax
je 0x44423c
add eax, 4
jmp 0x44423e
mov eax, ebx
push eax
lea eax, [ebp]
push eax
call fcn.0043edf3
push eax
mov ecx, 0x79fcd4
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp]
call fcn.0040daff
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xe
call fcn.004460a6
mov edi, 0x6be954
mov byte [ebp - 0x48], bl
push edi
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
push 0x6be958
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
cmp byte [ebp + 0x34], al
je 0x4442c3
push esi
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444396
push str.RELOCATED
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
push str.HYDRA_EXCEPTION
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x444396
mov byte [ebp - 4], 0x10
cmp dword [0x79fb58], eax
jne 0x44433e
cmp byte [0x7a0039], al
je 0x44433e
push 0x6be9b8
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
call fcn.00471dbb
push ebx
push ebx
push esi
call fcn.0059d915
mov byte [0x79ef6a], 1
call fcn.004729a5
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.0044aa5a
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x11
call fcn.004543bb
lea ecx, [ebp - 0x3a8]
call fcn.0044ae83
jmp 0x44438f
mov dword [ebp - 4], 0xe
mov eax, dword [0x79fb58]
test eax, eax
je 0x4443b2
cmp eax, 0x6abb0eb
je 0x4443b2
call fcn.00473316
call fcn.0057f3cd
jmp 0x4443b9
mov byte [0x79ef6a], 1
push edi
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x4443e6
push 0x6be958
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
jne 0x4443e6
lea ecx, [ebp - 0x98]
call fcn.00447115
test al, al
jne 0x4443f0
mov dword [0x79fb58], 0x6abb0eb
push str.UNINSTALL
lea ecx, [ebp - 0x34]
mov byte [ebp + 0x4a], bl
mov dword [ebp + 0x38], 3
call fcn.004b9514
lea ecx, [ebp - 0x34]
test eax, eax
je 0x444447
push edi
mov byte [ebp + 0x5c], bl
mov byte [ebp + 0x58], bl
call fcn.004b9514
test eax, eax
je 0x444422
mov byte [ebp + 0x5c], 1
push str.REMSETTINGS
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444437
mov byte [ebp + 0x58], 1
push dword [ebp + 0x58]
push dword [ebp + 0x5c]
call fcn.00435b2f
jmp 0x44373e
push str.BIGDUMP
call fcn.004b9514
test eax, eax
je 0x44445c
mov byte [0x7a3989], 1
xor eax, eax
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc4], ebx
mov word [ebp - 0xd4], ax
push str.PAIR
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x13
call fcn.004b9514
test eax, eax
je 0x4444b4
cmp dword [eax + 8], 1
jle 0x4444b4
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00426a30
pop ecx
push eax
push esi
lea ecx, [ebp - 0xd4]
call fcn.004372ba
push str.DIRECTORY
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x4444e2
cmp dword [edx + 8], 1
jle 0x4444e2
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov eax, dword [ecx + eax*4 + 4]
mov dword [0x7b0858], eax
mov dword [edx + 0x14], 2
push str.HIDE
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x4444fa
mov byte [0x7d26ad], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x114], ebx
mov word [ebp - 0x124], cx
mov dword [ebp - 0xf8], eax
xor eax, eax
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], ax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x16
call fcn.004b9514
mov edi, eax
test edi, edi
je 0x444571
cmp dword [edi + 8], 1
jle 0x444571
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.00426a30
pop ecx
push eax
push esi
lea ecx, [ebp - 0x124]
call fcn.004372ba
mov dword [edi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edi, eax
test edi, edi
je 0x4445ae
cmp dword [edi + 8], 1
jle 0x4445ae
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.00426a30
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.004372ba
mov dword [edi + 0x14], 2
push ebx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0059c212
mov eax, dword [ebp - 0x54]
mov edi, ebx
mov ecx, dword [ebp - 0x58]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x4445fc
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.0059bbd5
mov eax, dword [ebp - 0x54]
inc edi
mov ecx, dword [ebp - 0x58]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x4445df
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x4446ed
xor eax, eax
mov dword [ebp + 0x30], 7
inc eax
mov dword [ebp + 0x2c], ebx
xor ecx, ecx
mov byte [0x79fb54], al
mov word [ebp + 0x1c], cx
mov byte [ebp - 4], 0x17
cmp dword [edx + 8], eax
jle 0x44464e
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [edx + 0x14], 2
push dword [eax + ecx*4 + 4]
lea ecx, [ebp + 0x1c]
call fcn.00428adb
jmp 0x444673
mov dword [edx + 0x14], eax
lea eax, [ebp]
push str.http:__now.bt.co_inclient
push eax
call fcn.0047af87
push eax
lea ecx, [ebp + 0x1c]
call fcn.0042623d
push ebx
push 1
lea ecx, [ebp]
call fcn.004267c2
cmp dword [ebp + 0x30], 8
mov eax, dword [ebp + 0x1c]
jae 0x44467f
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp]
call fcn.00427f43
lea eax, [ebp]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004935b1
push eax
push str.http:__apps.bittorrent.com_featuredcontent_featuredcontent.btapp_offer
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0x19
push eax
call fcn.0043fa05
push eax
mov ecx, 0x79ff24
call fcn.0042623d
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.004267c2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.004267c2
push ebx
push 1
lea ecx, [ebp]
call fcn.004267c2
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x16
call fcn.004267c2
push str.DOWNLOADINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x4448c9
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.0040c556
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.0065df48
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp + 0x3c], eax
lea eax, [ebp - 0x70]
push dword [ecx + edx*4 + 0xc]
push eax
call fcn.00427922
push eax
mov ecx, 0x77844c
call fcn.0042623d
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.004267c2
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
push eax
mov ecx, 0x778434
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
test edi, edi
je 0x4447ad
cmp word [edi], bx
je 0x4447ad
push 0x79de70
push edi
lea eax, [ebp + 0x24]
push eax
call fcn.0047092c
mov ecx, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp + 0x44], 2
call fcn.0051563a
mov byte [ebp + 0x4b], 1
test eax, eax
je 0x4447b0
mov byte [ebp + 0x4b], bl
test byte [ebp + 0x44], 2
mov dword [ebp - 4], 0x16
je 0x4447c5
lea ecx, [ebp + 0x24]
call fcn.004906e8
cmp byte [ebp + 0x4b], 0
je 0x4448c5
push 0x6b6994
push ebx
lea eax, [ebp]
mov dword [0x778198], 0x79de70
push eax
call fcn.0045ea02
push 0x3c
mov byte [ebp - 4], 0x1b
call fcn.00637305
mov esi, eax
pop ecx
mov dword [ebp + 0x30], esi
mov byte [ebp - 4], 0x1c
test esi, esi
je 0x444835
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
jae 0x44480d
lea eax, [ebp]
mov ecx, dword [0x778198]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.0045c6a5
mov ecx, eax
call fcn.0045c81a
push eax
mov ecx, esi
call fcn.00428228
mov esi, eax
jmp 0x444837
mov esi, ebx
mov eax, dword [ebp + 0x3c]
push 0xc4
mov byte [ebp - 4], 0x1b
mov dword [esi], eax
call fcn.00637305
pop ecx
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x44485f
mov ecx, eax
call fcn.00464b8a
jmp 0x444861
mov eax, ebx
mov byte [ebp - 4], 0x1b
mov dword [ebp + 0x44], eax
test eax, eax
je 0x444875
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x44]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [eax + 8]
call fcn.00426283
mov eax, dword [ebp + 0x44]
mov dword [eax + 0xc0], 0x4311d3
lea eax, [ebp + 0x44]
push eax
push 1
push esi
push fcn.004350a7
lea eax, [esi + 0x20]
push eax
call fcn.0059c79c
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea ecx, [ebp + 0x44]
call fcn.004261c2
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x16
call fcn.004267c2
mov byte [ebp + 0x4a], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x60
pop ecx
mov dword [0x7b081c], eax
cmp eax, ecx
jg 0x4448ed
mov dword [0x7b081c], ecx
push esi
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.0057ca42
call fcn.0058ca9f
push 0x6be958
lea ecx, [ebp - 0x34]
call fcn.004b9514
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
mov edi, eax
call fcn.004b9514
mov esi, eax
test edi, edi
je 0x444a20
test esi, esi
je 0x44493a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7a3ad4], eax
mov dword [0], ebx
xor eax, eax
mov esi, ebx
inc eax
cmp dword [edi + 8], eax
jne 0x44494e
mov dword [edi + 0x14], eax
mov esi, 0xe53e
jmp 0x44498f
mov ecx, dword [edi + 4]
mov eax, dword [edi]
push 2
pop edx
mov dword [edi + 0x14], edx
mov edi, dword [eax + ecx*4 + 4]
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp + 0x54], eax
mov ax, word [ecx]
add ecx, edx
cmp ax, bx
jne 0x444965
sub ecx, dword [ebp + 0x54]
mov eax, ebx
sar ecx, 1
je 0x44498f
push 0x30
lea edx, [ecx - 1]
pop ebx
cmp word [edi + eax*2], bx
je 0x444987
bts esi, edx
inc eax
dec edx
cmp eax, ecx
jb 0x44497e
xor ebx, ebx
push ebx
and esi, 0xfffef57f
mov dword [ebp + 0x10], ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x14], ebx
or esi, 0x20000
call fcn.0040daff
push 0x6be9b8
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
call fcn.004b9514
mov edx, eax
test edx, edx
je 0x4449fb
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x4449fb
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push 0x6bd894
push eax
call fcn.004638c2
add esp, 0xc
lea ecx, [ebp]
push eax
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp]
mov ecx, esp
push eax
call fcn.0040da7b
push ebx
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042dff3
jmp 0x4441b4
test esi, esi
je 0x444ae1
cmp dword [esi + 8], 2
jl 0x444a42
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.0065df48
pop ecx
mov dword [ebp + 0x38], eax
jmp 0x444a49
mov dword [ebp + 0x38], 0x100
cmp dword [esi + 8], 3
jl 0x444a5a
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 8]
jmp 0x444a5c
mov edi, ebx
cmp dword [esi + 8], 4
jl 0x444a82
cmp byte [0x7b0854], 0
je 0x444a82
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.0065df48
pop ecx
push eax
push 1
call fcn.0044554f
mov eax, dword [esi + 8]
cmp eax, 4
jle 0x444a8d
push 4
pop eax
mov dword [esi + 0x14], eax
mov eax, edi
test edi, edi
jne 0x444a9b
mov eax, 0x6b6e68
mov esi, dword [ebp + 0x38]
push eax
push esi
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.0040c884
add esp, 0xc
mov byte [ebp + 0x4a], 1
push ebx
push ebx
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040daff
push edi
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042dff3
mov esi, eax
mov dword [ebp + 0x38], esi
call fcn.0058baed
jmp 0x444ae4
mov esi, dword [ebp + 0x38]
push str.FORCEUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444aff
mov dword [0x785594], 0x6abb0ea
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444b21
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7a3ad4], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444b39
mov byte [0x7b0857], 1
push str.BRINGTOFRONT
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x444b4e
mov byte [ebp + 0x43], 1
cmp byte [ebp + 0x4a], 0
je 0x444b5f
call fcn.004363c4
push esi
jmp 0x44373f
push 0x6bec4c
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x444bad
mov byte [0x784a74], 1
cmp dword [esi + 8], 2
jne 0x444b9d
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.0065df48
or dword [0x7a3c08], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x444bbf
or dword [0x7a3c08], 0xffffffff
mov dword [esi + 0x14], 1
jmp 0x444bbf
cmp byte [0x7ae64c], 0
sete al
dec al
and byte [0x784a74], al
call fcn.004c1e01
push eax
call fcn.0049c1ba
push str.STARTAPP
lea ecx, [ebp - 0x34]
call fcn.004b9514
mov esi, eax
test esi, esi
je 0x444c49
cmp dword [esi + 8], 2
jl 0x444c49
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
push eax
mov ecx, 0x7d2fc8
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
cmp dword [esi + 8], 3
jl 0x444c42
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
push eax
mov ecx, 0x7d2fe0
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
mov dword [esi + 0x14], 3
jmp 0x444c49
mov dword [esi + 0x14], 2
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x444cb0
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x444cb0
jmp 0x444cab
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.0047b116
mov ecx, dword [esi + 4]
add ecx, edi
test al, al
mov eax, dword [esi]
je 0x444c96
lea edx, [ebp + 0x4b]
mov byte [ebp + 0x4b], bl
push edx
push dword [eax + ecx*4]
call fcn.0046e9a6
test al, al
je 0x444caa
mov al, byte [ebp + 0x4b]
mov byte [0x7b0855], al
jmp 0x444caa
mov eax, dword [eax + ecx*4]
mov ecx, 0x7b09b0
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004b8702
inc edi
cmp edi, dword [esi + 8]
jl 0x444c5a
lea eax, [ebp - 0x160]
push eax
call fcn.0057bfd0
mov edi, dword [ebp + 0x34]
lea eax, [ebp - 0xd4]
mov esi, dword [ebp - 0x38]
push ebx
push edi
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x20
push eax
push esi
call fcn.00580371
test al, al
je 0x44373e
push str.___________________________________________
push 0x40
call fcn.00485eae
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
lea ecx, [ebp - 0x34]
push str.UNINSTALL
setne byte [ebp + 0x3c]
call fcn.004b9514
test eax, eax
lea ecx, [ebp - 0x34]
push str.RELOCATED
setne byte [ebp + 0x44]
call fcn.004b9514
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x34]
call fcn.00447111
movzx eax, al
push eax
push dword [ebp + 0x34]
lea eax, [ebp + 0x34]
push edi
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push eax
call fcn.00443029
push 0x6be9b8
lea ecx, [ebp - 0x34]
call fcn.004b9514
cmp byte [ebp + 0x57], 0
mov byte [ebp + 0x44], bl
je 0x444d70
cmp byte [0x7a0039], 0
je 0x444d70
mov byte [ebp + 0x44], 1
push ebx
push dword [ebp + 0x44]
push eax
call fcn.0059d915
push str.STAGE_URL
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
setne byte [0x79fa83]
call fcn.004612e8
or al, byte [ebp + 0x34]
or byte [ebp + 0x57], al
call fcn.004729a5
cmp byte [ebp + 0x57], 0
jne 0x444de1
push dword [ebp - 0x48]
lea ecx, [ebp - 0x98]
call fcn.00447111
movzx eax, al
push eax
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040daff
push ebx
push ebx
push esi
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042dff3
mov edi, eax
call fcn.00430e97
jmp 0x444de4
mov edi, dword [ebp + 0x38]
cmp dword [0x79ff34], 0
mov byte [ebp + 0x4b], bl
je 0x444f4f
mov esi, str..btapp_
push esi
call fcn.00426a30
pop ecx
push eax
push ebx
push esi
mov esi, 0x79ff24
mov ecx, esi
call fcn.00437de3
cmp eax, 0xffffffff
je 0x444eed
push esi
lea eax, [ebp]
mov byte [ebp + 0x57], bl
push eax
call fcn.0043edf3
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040daff
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
jae 0x444e47
lea eax, [ebp]
lea ecx, [ebp + 0x57]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x3b8]
call fcn.00442ccb
push str.offer
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
call fcn.0040d4cf
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x3b8]
call fcn.00492eec
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
mov esi, eax
call fcn.0040daff
cmp byte [ebp + 0x57], 0
je 0x444ecc
test esi, esi
je 0x444ecc
push esi
mov esi, 0x7d2dac
mov ecx, esi
call fcn.00442f07
lea eax, [ebp - 0x370]
mov ecx, 0x7d2fc8
push eax
call fcn.00426221
lea eax, [ebp - 0x328]
mov ecx, 0x7d2fe0
push eax
call fcn.00426221
mov byte [ebp + 0x4b], 1
jmp 0x444ed1
mov esi, 0x7d2dac
lea ecx, [ebp - 0x3b8]
call fcn.00442e48
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.0040daff
jmp 0x444f3d
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.004267c2
push ebx
push 1
lea eax, [ebp]
mov byte [ebp - 4], 0x24
push eax
push esi
lea ecx, [ebp - 0x8c]
call fcn.0059b9d5
push eax
mov byte [ebp - 4], 0x25
call fcn.0059bbd5
lea ecx, [ebp - 0x8c]
call fcn.005ea5fd
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.004267c2
mov esi, 0x7d2dac
mov ecx, 0x79ff24
call fcn.00445921
mov byte [0x79ff54], bl
jmp 0x444f54
mov esi, 0x7d2dac
call fcn.004918a9
test eax, eax
setne al
cmp dword [0x7d2dbc], 0
mov byte [ebp + 0x57], al
jne 0x444f83
test al, al
mov eax, str.http:__now.bt.co_inclient
jne 0x444f78
mov eax, 0x6becd8
push eax
mov ecx, esi
call fcn.00442f07
mov al, byte [ebp + 0x57]
test al, al
jne 0x444ff4
push ebx
push 0x6becf8
mov ecx, esi
call fcn.00445964
cmp eax, 0xffffffff
jne 0x444ff4
push ebx
push 0x6bed08
mov ecx, esi
call fcn.00445964
cmp eax, 0xffffffff
je 0x444ff4
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x154]
mov ecx, esi
push eax
call fcn.0043ed77
push eax
push 0x6bed14
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x26
push eax
call fcn.00426f87
push eax
mov ecx, esi
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
push ebx
push 1
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x20
call fcn.0040daff
cmp byte [ebp + 0x37], 0
je 0x445011
cmp edi, 4
jge 0x445011
call fcn.005a0167
push dword [0x785594]
mov ecx, eax
call fcn.005a18d3
test edi, edi
je 0x44373e
cmp edi, 1
je 0x44553d
cmp edi, 2
je 0x445524
cmp edi, 4
je 0x4454ed
cmp edi, 6
jle 0x445065
cmp edi, 9
jle 0x44505f
cmp edi, 0xc
jne 0x445065
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x6bed24
call fcn.00431475
push edi
jmp 0x44373f
push edi
jmp 0x44373f
push str.temp
lea eax, [ebp - 0x13c]
push eax
call fcn.00470d99
cmp dword [ebp - 0x128], 8
mov eax, dword [ebp - 0x13c]
mov byte [ebp - 4], 0x27
jae 0x44508f
lea eax, [ebp - 0x13c]
push eax
call fcn.004b9d05
mov al, byte [0x7a398a]
test al, al
jne 0x4450c7
push 0x104
lea eax, [ebp - 0x5c0]
push eax
push dword [0x7d26a4]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x5c0]
push eax
call fcn.0042b295
mov al, byte [0x7a398a]
movzx eax, al
push eax
call fcn.0057ff43
mov eax, 0x7b08d0
push eax
push str.Version:__s
call fcn.0040c884
add esp, 8
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
cmp dword [eax + 0x14], 0x10
jb 0x4450f5
mov eax, dword [eax]
push eax
push 0x6b6d50
call fcn.0040c884
add esp, 8
lea ecx, [ebp - 0x70]
push ebx
push 1
call fcn.0040daff
push str.HELPERLOG
lea ecx, [ebp - 0x34]
call fcn.004b9514
test eax, eax
je 0x445129
mov dword [0x7a4408], 1
push dword [ebp - 0x4c]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
call fcn.00581f14
lea ecx, [ebp - 0x34]
call fcn.004b953f
call fcn.004610b3
cmp byte [0x79f377], 0
mov byte [0x7a3988], al
je 0x44516d
push ebx
push ebx
call fcn.00478b4f
test eax, eax
je 0x44516d
call fcn.00460941
mov dword [0x7b0820], eax
mov dword [0x7b0824], edx
cmp byte [0x79f460], 0
je 0x44517c
mov dword [0x79f1e8], ebx
call fcn.00470537
mov byte [0x79ef6b], al
call fcn.004b9cf7
and dword [0x7a396c], 0xbfffffff
call fcn.0048ac20
lea eax, [ebp + 0x58]
mov ecx, 0x7a46ac
push eax
call fcn.00428af8
mov ecx, dword [ebp + 0x58]
call fcn.004862fd
call fcn.0042f072
call fcn.0057c1b6
cmp eax, 1
je 0x4451fb
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.0040daff
push ebx
lea eax, [ebp]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a6976
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x27
call fcn.0040daff
call fcn.005a68f8
lea ecx, [ebp - 0xaa4]
call fcn.00579c03
push dword [ebp - 0x40]
lea ecx, [ebp - 0xaa4]
mov byte [ebp - 4], 0x29
call fcn.0057ae88
mov eax, dword [0x7d3ef4]
test eax, eax
je 0x44522c
mov cl, byte [ebp + 0x4b]
mov byte [eax + 0x4d], cl
call fcn.004bd920
call fcn.004713e8
cmp dword [ebp - 0xc4], 0
je 0x445293
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp]
push eax
call fcn.0043edf3
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
mov byte [ebp - 4], 0x2a
jae 0x44525f
lea eax, [ebp]
push 1
push 0x28
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.0046eaa0
test al, al
je 0x445284
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6b6e68
lea eax, [ebp + 0x20]
push eax
call fcn.0047badf
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x29
call fcn.0040daff
push 0x57a4c7
call fcn.005a4a88
call fcn.005a42b0
cmp eax, 7
jne 0x4452ac
call fcn.005a47b2
call fcn.005a44eb
call fcn.005a529a
cmp dword [0x79fa44], 0
jne 0x4452ee
call fcn.005a7376
test al, al
jne 0x4452de
push dword [0x6bdd40]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
mov ecx, 0x79fa34
jmp 0x445327
cmp dword [0x79fa44], 0
jne 0x4452ee
mov esi, 0x79fa34
jmp 0x445316
mov esi, 0x79fa34
push esi
call fcn.005a75d1
test al, al
jne 0x445316
push str.uTorrent_Player
mov ecx, esi
call fcn.0043741c
test eax, eax
jne 0x445338
call fcn.005a7376
test al, al
je 0x445338
push dword [0x6bdd58]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
mov ecx, esi
push eax
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
cmp dword [0x79fa5c], 0
jne 0x445366
push dword [0x6bdd40]
lea eax, [ebp - 0x70]
push eax
call fcn.0047ae8a
push eax
mov ecx, 0x79fa4c
call fcn.0040d122
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040daff
push ebx
push ebx
push 0x48d051
call fcn.0046bb66
call fcn.0059c0b6
cmp eax, 2
jne 0x445381
call fcn.0059c178
push 0xa14
call fcn.00637305
pop ecx
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x4453a6
push dword [0x7b0818]
mov ecx, eax
call fcn.00468fb2
jmp 0x4453a8
mov eax, ebx
cmp dword [0x79fd58], 0
mov byte [ebp - 4], 0x29
mov dword [0x79e190], eax
je 0x4453ee
lea eax, [ebp - 0x70]
push eax
call fcn.00597e56
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x2c
jb 0x4453cf
mov eax, dword [eax]
push 0x79fd48
push 0x79faac
push eax
call fcn.00483a48
push ebx
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.0040daff
cmp byte [ebp + 0x43], 0
je 0x445409
call fcn.0057c1b6
test eax, eax
je 0x445409
push dword [ebp - 0xaa0]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0047f54b
test al, al
je 0x44541d
push str.IPv6_is_installed
call fcn.00479c3c
pop ecx
mov byte [ebp + 0x5b], 1
call fcn.00475cf1
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0x2d
push eax
call fcn.0048cabb
test al, al
je 0x445456
sub esp, 0x10
lea esi, [ebp - 0x210]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00479c3c
add esp, 0x14
mov byte [ebp - 4], 0x2e
call fcn.00475d32
cmp byte [ebp + 0x3c], 0
mov byte [ebp - 4], 0x29
jne 0x44547d
call fcn.005a0167
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.005a1afb
push ebx
push 0x119
call fcn.0048a60f
call fcn.004c2aef
call fcn.005a4d1e
cmp byte [0x7b0855], 0
jne 0x4454a9
cmp byte [0x7d26ad], 0
jne 0x4454a9
call fcn.00587e0f
call fcn.004a3ee5
mov edi, dword [eax + 4]
mov esi, dword [edi]
jmp 0x4454bf
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esi]
cmp esi, edi
jne 0x4454b5
mov ecx, 0x7d26a4
call fcn.0058af80
call fcn.004b9779
call fcn.005a0167
mov ecx, eax
call fcn.005a1f75
call fcn.005789b4
call fcn.0040c884
jmp 0x44373e
call fcn.005a0167
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.00485eae
cmp byte [ebp + 0x35], 0
pop ecx
pop ecx
jne 0x44551d
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.00485eae
pop ecx
pop ecx
mov ecx, esi
call fcn.005a1a71
push 4
jmp 0x44373f
push dword [ebp + 0x5c]
mov byte [0x7b0855], 1
push dword [ebp + 0x58]
call fcn.00431475
push 2
jmp 0x44373f
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.00431475
push 1
jmp 0x44373f