Function at 0x440536
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x48
mov eax, 0x66f4f1
call fcn.0062921c
sub esp, 0xa44
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp + 0x44], ebx
call fcn.004b4f9d
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], ebx
push dword [ebp + 0x58]
call fcn.004b5010
push str.INSTALLCHECK
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov edx, eax
test edx, edx
je 0x4405a3
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x4405a3
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.004342c6
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
xor eax, eax
mov dword [ebp - 0x10c], ebx
inc eax
mov dword [ebp - 0x108], ebx
mov ecx, 0x68e888
mov dword [ebp - 0x104], str.uT_Core_Based_Thing
mov dword [ebp - 0x100], str.uTCBT
mov dword [ebp - 0xfc], str.client.exe
mov dword [ebp - 0xf8], str.uTCBTWebClient
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], 0x695d78
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0xe0], bl
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xc4], 0xf
mov dword [ebp - 0xc8], ebx
mov byte [ebp - 0xd8], bl
mov dword [ebp - 0xc0], 0x695d7c
mov byte [ebp - 0xbc], bl
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xb4], ecx
mov byte [ebp - 0xb0], bl
push str.logfile
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], al
call fcn.004b5237
mov esi, eax
mov edi, ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp + 0x44], edi
test esi, esi
je 0x440687
push 2
pop edx
cmp dword [esi + 8], edx
jl 0x440679
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
mov dword [esi + 0x14], edx
jmp 0x44067e
mov edi, str.bt.log
mov dword [ebp + 0x44], edi
mov dword [ebp - 0x108], edi
push 0x753910
call fcn.0046e649
push 3
pop eax
push 5
mov dword [ebp + 0x38], eax
mov dword [ebp - 0xec], eax
pop eax
push 0x762f08
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0xe0], 1
mov dword [ebp - 0xf4], 0xafc2
mov dword [ebp - 0xf0], 0x696184
mov dword [ebp - 0xc0], 0x695d7c
mov dword [ebp - 0x104], 0x6961ac
mov dword [ebp - 0x100], 0x6957f8
mov dword [ebp - 0xf8], 0x6961a0
mov dword [ebp - 0xfc], 0x68f354
call fcn.0046e649
push str.TORRENTPANE
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
call fcn.0042dc2f
test al, al
jne 0x44071f
test esi, esi
je 0x44072a
push ebx
push 0x762f08
call fcn.0046db65
call fcn.00597d45
push str.PORTABLE
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x10c], eax
mov byte [ebp - 0x4c], bl
call fcn.004b5237
test eax, eax
je 0x440757
mov byte [ebp - 0x4c], 1
mov dword [0x76d2f8], 0x10
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x138], eax
mov esi, str.http:__pr.apps.bittorrent.com_client_webui__s_client_webui.json
mov byte [ebp - 4], 2
push esi
call fcn.0040a79e
pop ecx
push eax
push esi
lea ecx, [ebp - 0xd8]
call fcn.0040a517
lea eax, [ebp + 0x3c]
mov dword [ebp - 0xdc], 0x74de54
push eax
mov ecx, 0x773bc8
mov dword [ebp + 0x3c], 0x4beb73
call fcn.004b44c9
lea eax, [ebp - 0x10c]
push eax
call fcn.004b5464
push str.CAMPAIGN
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov edx, eax
test edx, edx
je 0x4407e6
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x4407e6
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.00639b08
pop ecx
push eax
mov ecx, 0x76c820
call fcn.0046e0cc
push str.BROWSER
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov edx, eax
test edx, edx
je 0x44082c
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x44082c
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp]
push eax
call fcn.004249d0
push eax
mov ecx, 0x76d6c0
call fcn.004232e6
push ebx
push 1
lea ecx, [ebp]
call fcn.0042386b
mov ecx, 0x76c820
call fcn.0046da05
push eax
push fcn.0058de8e
call fcn.0059a5b8
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x440863
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x77114c], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp - 0x34]
call fcn.004b5237
xor ecx, ecx
mov dword [ebp + 0x3c], eax
mov dword [ebp - 0x140], 7
mov dword [ebp - 0x144], ebx
mov word [ebp - 0x154], cx
mov byte [ebp - 4], 3
test eax, eax
je 0x4408d9
cmp dword [eax + 8], 2
jl 0x4408d9
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00423ad9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x154]
call fcn.004340c0
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp - 0x154]
push 0x696280
mov dword [eax + 0x14], 2
call fcn.0043429b
neg eax
sbb eax, eax
neg eax
jmp 0x4408de
call fcn.00467580
push eax
call fcn.0058c2ed
push ebx
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x11c], 1
push eax
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x118], ebx
push eax
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x40], eax
call fcn.0055f274
mov esi, eax
lea ecx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x40]
push str.utorrent
mov dword [esi + 0x28], eax
call fcn.0040a58f
lea ecx, [esi + 0x2c]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x1c0]
cmp ecx, eax
je 0x44094e
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040aaae
push ebx
push 1
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 3
call fcn.0040abbf
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b4
call fcn.0055ed52
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf9
call fcn.0055ed52
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b5
call fcn.0055ed52
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf8
call fcn.0055ed52
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b6
call fcn.0055ed52
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ec74
call fcn.0055ed52
lea ecx, [esi + 4]
mov eax, 0x7482a4
cmp ecx, eax
je 0x4409ff
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040aaae
cmp dword [ebp - 0x40], 0
jne 0x440a11
mov eax, str.loaded
mov ecx, str.enabled
jmp 0x440a1b
mov eax, str.failed_to_load
mov ecx, 0x6962d4
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.00409944
add esp, 0xc
push str.Process_started
call fcn.00409616
mov esi, ebx
cmp dword [ebp + 0x58], esi
je 0x440a51
mov edi, dword [ebp + 0x5c]
push dword [edi + esi*4]
call fcn.00409616
inc esi
cmp esi, dword [ebp + 0x58]
jne 0x440a3e
mov edi, dword [ebp + 0x44]
xor ebx, ebx
push str.End_Args
call fcn.00409616
mov ecx, 0x771b24
call fcn.0044275d
mov ecx, 0x771b4c
call fcn.0046ba05
mov ecx, 0x771b38
call fcn.0044270e
call fcn.004b758e
call fcn.00595805
push 0x7a13a8
call fcn.004989fa
mov dword [ebp - 0x44], 0x695d80
mov byte [ebp - 4], 5
call fcn.0056bbb0
lea eax, [ebp - 0x44]
push eax
push 0x696338
call fcn.004bfcd8
push str.SetDllDirectoryA
push 0x68e74c
call fcn.0045f0a1
test eax, eax
je 0x440ac5
push 0x70ed3c
call eax
call fcn.00409944
call fcn.0042dbb1
test al, al
je 0x440b83
call fcn.0045e88d
test al, al
je 0x440b83
mov byte [0x7a068c], 1
call fcn.0042e43f
test al, al
je 0x440b7a
mov byte [0x7a068e], 1
call fcn.0058feaa
call fcn.0046f078
mov al, byte [0x76c7f2]
mov byte [ebp + 0x4b], al
mov byte [0x76c7f2], 1
call fcn.0046fc62
push 1
push ebx
call fcn.0058b7bf
test al, al
je 0x440b70
push ebx
push 1
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x44], 0x6a6520
call fcn.0042386b
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0xd8]
call fcn.0040abbf
lea ecx, [ebp - 0x34]
call fcn.004b4fff
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x4c]
pop ebp
ret 0xc
mov al, byte [ebp + 0x4b]
mov byte [0x76c7f2], al
jmp 0x440b8d
mov word [0x7a068d], 1
call fcn.0058feaa
call fcn.0046f078
push str.NOTIFYUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440bc4
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x440bbf
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x76c9ce], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440bfb
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x440bf6
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x76c9cd], al
push 0x76c5e8
push str.Settings_path:___s__n
call fcn.00409944
add esp, 8
lea ecx, [ebp - 0x34]
push str.AUTOUPDATE
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440cbd
mov eax, dword [esi + 8]
mov byte [ebp + 0x58], 1
mov dword [ebp + 0x5c], eax
cmp eax, 2
jl 0x440c3e
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
jmp 0x440c40
mov edi, ebx
test edi, edi
je 0x440c49
cmp word [edi], bx
jne 0x440c54
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.00409651
pop ecx
push str.NORUN
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x440c6d
mov byte [ebp + 0x58], bl
call fcn.0057eaae
mov eax, dword [ebp + 0x5c]
cmp eax, 3
jl 0x440c86
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 8]
call fcn.00639b08
pop ecx
jmp 0x440c8c
push 0x1a
mov dword [ebp + 0x38], eax
pop eax
mov ecx, dword [ebp + 0x38]
mov dword [esi + 0x14], ecx
test edi, edi
je 0x44059c
cmp word [edi], bx
je 0x44059c
push eax
push dword [ebp + 0x58]
push edi
call fcn.0058ab20
test al, al
je 0x44059c
xor ebx, ebx
inc ebx
jmp 0x44059c
cmp dword [ebp - 0x3c], 0
je 0x440cea
test edi, edi
je 0x440cd7
push edi
push str.Setting_log_file_to__s
call fcn.00409944
add esp, 8
jmp 0x440cdc
mov edi, str.stdout
push edi
push str.Log_file_set_to_path:__s__n
call fcn.00409944
add esp, 8
push str.AUTOMATION
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440d31
push 1
call fcn.00572d3a
cmp dword [esi + 8], 2
jl 0x440d37
push 0x75
pop eax
mov word [0x7545ec], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x7545fc
call fcn.00424a07
mov dword [esi + 0x14], 2
jmp 0x440d37
push ebx
call fcn.00572d3a
push str.MINIMIZED
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x440d4f
mov byte [0x77dca5], 1
push str.NOTFAREA
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x440d67
mov byte [0x77dca6], 1
push str.AUTORESTARTTIME
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440d9a
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.00639b08
mov dword [0x764128], eax
mov dword [0x76412c], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x79fad4
call fcn.00465f19
push dword [ebp + 0x54]
mov ecx, 0x79fb18
call fcn.0057deb2
call fcn.0048e151
push str.recover
lea ecx, [ebp - 0x34]
mov dword [0x79fb1c], eax
mov byte [ebp - 0x38], bl
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x440e42
mov byte [ebp - 0x38], 1
mov byte [0x7a013c], 1
mov dword [ebp + 0x30], 0xf
mov dword [ebp + 0x2c], ebx
mov byte [ebp + 0x1c], bl
push 1
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp]
push eax
call fcn.005991dd
push ebx
push 1
lea ecx, [ebp]
call fcn.0040abbf
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x440e33
cmp dword [ebp + 0x30], 0x10
mov edx, dword [ebp + 0x1c]
mov dword [esi + 0x14], eax
jae 0x440e23
lea edx, [ebp + 0x1c]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.0059aa17
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call fcn.0040abbf
cmp dword [0x76d348], 0
mov al, bl
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
mov byte [ebp + 0x43], al
mov byte [ebp + 0x1b], al
jne 0x440e63
mov dword [0x76d348], 0x6abafc2
call fcn.004c1de8
mov dword [ebp - 0xa8], ebx
mov esi, 0x699c10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], esi
call fcn.0045a53e
push str.dht_feed.dat
lea eax, [ebp]
mov byte [ebp - 4], 8
push eax
call fcn.0046dfa2
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
mov byte [ebp - 4], 9
jae 0x440eaa
lea eax, [ebp]
lea ecx, [ebp - 0xac]
push ecx
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.0046dbe9
mov ecx, eax
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x44], 1
call fcn.0048d56a
test eax, eax
jne 0x440ede
cmp byte [ebp - 0x9c], 4
mov byte [ebp + 0x4a], 1
je 0x440ee1
mov byte [ebp + 0x4a], bl
lea ecx, [ebp + 0x24]
mov dword [ebp - 4], 9
call fcn.0048d081
cmp byte [ebp + 0x4a], 0
mov dword [ebp + 0x44], ebx
je 0x440f10
cmp byte [ebp - 0x9c], 4
lea eax, [ebp - 0xac]
je 0x440f0a
mov eax, ebx
push eax
call fcn.0048c19c
push ebx
push 1
lea ecx, [ebp]
call fcn.0042386b
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xac], esi
call fcn.0045932d
mov byte [ebp - 4], 5
call fcn.0057500e
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x440f5e
mov al, 1
mov dword [0x7a0218], 0xafc2
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
jmp 0x440f61
mov al, byte [ebp + 0x57]
push ebx
push ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x38], eax
call fcn.004423dc
call fcn.0043af54
push str.verifyhta
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x44108d
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x44108d
push 0xffffffffffffffff
mov dword [esi + 0x14], eax
call dword [sym.imp.KERNEL32.DLL_AttachConsole]
test eax, eax
je 0x440fe9
push 1
call fcn.00635567
push eax
push 0x696554
mov edi, 0x696558
push edi
call fcn.0063b429
push 2
call fcn.00635567
push eax
push 0x696554
push edi
call fcn.0063b429
push ebx
call fcn.00635567
push eax
push 0x696560
push str.CONIN_
call fcn.0063b429
add esp, 0x30
push str.Verifying_Embedded_HTA.._r_n
call fcn.00423b53
mov eax, dword [esi]
pop ecx
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0x74]
call fcn.00442ea9
push ebx
push ebx
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x5c], ebx
call fcn.0043ce2f
lea eax, [ebp + 0x5c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp + 0x28]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.00448d92
push 5
pop ecx
push 0x6c
mov byte [ebp + 0x5b], al
lea edi, [ebp - 0x268]
lea eax, [ebp - 0x254]
mov esi, str.VerifyHTA_Success_r_n
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0062e010
mov bl, byte [ebp + 0x5b]
add esp, 0xc
test bl, bl
jne 0x441073
push dword [ebp + 0x5c]
lea eax, [ebp - 0x268]
push str.VerifyHTA_Failed_with_error:__u_r_n
push 0x80
push eax
call fcn.0043fa64
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call fcn.00423b53
xor eax, eax
test bl, bl
pop ecx
sete al
push eax
jmp 0x44059d
cmp dword [0x76d1d0], 0
je 0x4410a7
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x4410ae
mov byte [0x76d6b1], 1
push str.LAUNCHED
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
lea ecx, [ebp - 0x34]
mov esi, 0x6965f4
push esi
setne byte [ebp + 0x34]
call fcn.004b5237
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x3c]
push dword [ebp + 0x3c]
push dword [ebp + 0x34]
call fcn.0043ce2f
cmp dword [0x76d304], 0
mov byte [ebp - 4], 0xe
jne 0x44113d
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x98]
call fcn.0043d787
mov byte [ebp - 4], 0xf
test eax, eax
je 0x44110f
add eax, 4
jmp 0x441111
mov eax, ebx
push eax
lea eax, [ebp]
push eax
call fcn.0043bead
push eax
mov ecx, 0x76d34c
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp]
call fcn.0040abbf
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xe
call fcn.00442f2e
mov edi, 0x6965fc
mov byte [ebp - 0x48], bl
push edi
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
push 0x696600
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
push str.NOINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
cmp byte [ebp + 0x34], al
je 0x441196
push esi
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x441269
push str.RELOCATED
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
push str.HYDRA_EXCEPTION
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x441269
mov byte [ebp - 4], 0x10
cmp dword [0x76d1d0], eax
jne 0x441211
cmp byte [0x76d6b1], al
je 0x441211
push 0x696660
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
call fcn.0046f078
push ebx
push ebx
push esi
call fcn.00590088
mov byte [0x76c7f2], 1
call fcn.0046fc62
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x380]
call fcn.0044790e
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x11
call fcn.00451277
lea ecx, [ebp - 0x380]
call fcn.00447cf4
jmp 0x441262
mov dword [ebp - 4], 0xe
mov eax, dword [0x76d1d0]
test eax, eax
je 0x441285
cmp eax, 0x6abafc2
je 0x441285
call fcn.004705e6
call fcn.005724cd
jmp 0x44128c
mov byte [0x76c7f2], 1
push edi
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x4412b9
push 0x696600
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
jne 0x4412b9
lea ecx, [ebp - 0x98]
call fcn.00443fcf
test al, al
jne 0x4412c3
mov dword [0x76d1d0], 0x6abafc2
push str.UNINSTALL
lea ecx, [ebp - 0x34]
mov byte [ebp + 0x4a], bl
mov dword [ebp + 0x38], 3
call fcn.004b5237
lea ecx, [ebp - 0x34]
test eax, eax
je 0x44131a
push edi
mov byte [ebp + 0x5c], bl
mov byte [ebp + 0x58], bl
call fcn.004b5237
test eax, eax
je 0x4412f5
mov byte [ebp + 0x5c], 1
push str.REMSETTINGS
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x44130a
mov byte [ebp + 0x58], 1
push dword [ebp + 0x58]
push dword [ebp + 0x5c]
call fcn.00432a6b
jmp 0x44059c
push str.BIGDUMP
call fcn.004b5237
test eax, eax
je 0x44132f
mov byte [0x771001], 1
xor eax, eax
mov dword [ebp - 0x120], 7
mov dword [ebp - 0x124], ebx
mov word [ebp - 0x134], ax
push str.PAIR
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x13
call fcn.004b5237
test eax, eax
je 0x441387
cmp dword [eax + 8], 1
jle 0x441387
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.00423ad9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x134]
call fcn.004340c0
push str.DIRECTORY
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov edx, eax
test edx, edx
je 0x4413b5
cmp dword [edx + 8], 1
jle 0x4413b5
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov eax, dword [ecx + eax*4 + 4]
mov dword [0x77dca8], eax
mov dword [edx + 0x14], 2
push str.HIDE
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x4413cd
mov byte [0x79fb21], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x174], ebx
mov word [ebp - 0x184], cx
mov dword [ebp - 0x158], eax
xor eax, eax
mov dword [ebp - 0x15c], ebx
mov word [ebp - 0x16c], ax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x16
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x44143b
cmp dword [esi + 8], 1
jle 0x44143b
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x184]
call fcn.00425bc4
mov dword [esi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x44146f
cmp dword [esi + 8], 1
jle 0x44146f
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x16c]
call fcn.00425bc4
mov dword [esi + 0x14], 2
push ebx
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0058e9b2
mov eax, dword [ebp - 0x54]
mov edi, ebx
mov ecx, dword [ebp - 0x58]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x4414bd
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.0058e375
mov eax, dword [ebp - 0x54]
inc edi
mov ecx, dword [ebp - 0x58]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x4414a0
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x4415b0
push ebx
push ebx
lea ecx, [ebp + 0x1c]
mov byte [0x76d1cc], 1
mov dword [ebp + 0x2c], ebx
mov dword [ebp + 0x30], ebx
call fcn.0042386b
xor eax, eax
mov byte [ebp - 4], 0x17
inc eax
cmp dword [esi + 8], eax
jle 0x441511
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov dword [esi + 0x14], 2
push dword [eax + ecx*4 + 4]
lea ecx, [ebp + 0x1c]
call fcn.00425bc4
jmp 0x441536
mov dword [esi + 0x14], eax
lea eax, [ebp]
push 0x696724
push eax
call fcn.004785a1
push eax
lea ecx, [ebp + 0x1c]
call fcn.004232e6
push ebx
push 1
lea ecx, [ebp]
call fcn.0042386b
cmp dword [ebp + 0x30], 8
mov eax, dword [ebp + 0x1c]
jae 0x441542
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp]
call fcn.00424ff1
lea eax, [ebp]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0048fd8f
push eax
push str.http:__apps.bittorrent.com_featuredcontent_featuredcontent.btapp_offer
lea eax, [ebp - 0x19c]
mov byte [ebp - 4], 0x19
push eax
call fcn.0043ca36
push eax
mov ecx, 0x76d59c
call fcn.004232e6
push ebx
push 1
lea ecx, [ebp - 0x19c]
call fcn.0042386b
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0042386b
push ebx
push 1
lea ecx, [ebp]
call fcn.0042386b
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x16
call fcn.0042386b
push str.DOWNLOADINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x44178c
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.00409616
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.00639b08
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp + 0x3c], eax
lea eax, [ebp - 0x70]
push dword [ecx + edx*4 + 0xc]
push eax
call fcn.004249d0
push eax
mov ecx, 0x748198
call fcn.004232e6
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0042386b
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
push eax
mov ecx, 0x748180
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
test edi, edi
je 0x441670
cmp word [edi], bx
je 0x441670
push 0x76b550
push edi
lea eax, [ebp + 0x24]
push eax
call fcn.0046dbe9
mov ecx, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp + 0x44], 2
call fcn.0048d56a
mov byte [ebp + 0x4b], 1
test eax, eax
je 0x441673
mov byte [ebp + 0x4b], bl
test byte [ebp + 0x44], 2
mov dword [ebp - 4], 0x16
je 0x441688
lea ecx, [ebp + 0x24]
call fcn.0048d081
cmp byte [ebp + 0x4b], 0
je 0x441788
push 0x68e6ec
push ebx
lea eax, [ebp]
mov dword [0x74803c], 0x76b550
push eax
call fcn.0045b92c
push 0x3c
mov byte [ebp - 4], 0x1b
call fcn.006291e1
mov esi, eax
pop ecx
mov dword [ebp + 0x30], esi
mov byte [ebp - 4], 0x1c
test esi, esi
je 0x4416f8
cmp dword [ebp + 0x14], 8
mov eax, dword [ebp]
jae 0x4416d0
lea eax, [ebp]
mov ecx, dword [0x74803c]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.00459645
mov ecx, eax
call fcn.004597ba
push eax
mov ecx, esi
call fcn.004252fa
mov esi, eax
jmp 0x4416fa
mov esi, ebx
mov eax, dword [ebp + 0x3c]
push 0xc4
mov byte [ebp - 4], 0x1b
mov dword [esi], eax
call fcn.006291e1
pop ecx
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0x1d
test eax, eax
je 0x441722
mov ecx, eax
call fcn.004619ed
jmp 0x441724
mov eax, ebx
mov byte [ebp - 4], 0x1b
mov dword [ebp + 0x44], eax
test eax, eax
je 0x441738
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x44]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1e
push ecx
lea ecx, [eax + 8]
call fcn.0042332c
mov eax, dword [ebp + 0x44]
mov dword [eax + 0xc0], 0x42e143
lea eax, [ebp + 0x44]
push eax
push 1
push esi
push fcn.00431fe3
lea eax, [esi + 0x20]
push eax
call fcn.0058ef0f
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
lea ecx, [ebp + 0x44]
call fcn.0042326b
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x16
call fcn.0042386b
mov byte [ebp + 0x4a], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x60
pop ecx
mov dword [0x77ddb0], eax
cmp eax, ecx
jg 0x4417b0
mov dword [0x77ddb0], ecx
push esi
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.0056fb45
call fcn.0057fa60
push 0x696600
lea ecx, [ebp - 0x34]
call fcn.004b5237
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
mov edi, eax
call fcn.004b5237
mov esi, eax
test edi, edi
je 0x4418e3
test esi, esi
je 0x4417fd
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x77114c], eax
mov dword [0], ebx
xor eax, eax
mov esi, ebx
inc eax
cmp dword [edi + 8], eax
jne 0x441811
mov dword [edi + 0x14], eax
mov esi, 0xe53e
jmp 0x441852
mov ecx, dword [edi + 4]
mov eax, dword [edi]
push 2
pop edx
mov dword [edi + 0x14], edx
mov edi, dword [eax + ecx*4 + 4]
mov ecx, edi
lea eax, [ecx + 2]
mov dword [ebp + 0x54], eax
mov ax, word [ecx]
add ecx, edx
cmp ax, bx
jne 0x441828
sub ecx, dword [ebp + 0x54]
mov eax, ebx
sar ecx, 1
je 0x441852
push 0x30
lea edx, [ecx - 1]
pop ebx
cmp word [edi + eax*2], bx
je 0x44184a
bts esi, edx
inc eax
dec edx
cmp eax, ecx
jb 0x441841
xor ebx, ebx
push ebx
and esi, 0xfffef57f
mov dword [ebp + 0x10], ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x14], ebx
or esi, 0x20000
call fcn.0040abbf
push 0x696660
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1f
call fcn.004b5237
mov edx, eax
test edx, edx
je 0x4418be
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x4418be
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push 0x6954fc
push eax
call fcn.004607cf
add esp, 0xc
lea ecx, [ebp]
push eax
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp]
mov ecx, esp
push eax
call fcn.0040ab3b
push ebx
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042afa8
jmp 0x441087
test esi, esi
je 0x4419a4
cmp dword [esi + 8], 2
jl 0x441905
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00639b08
pop ecx
mov dword [ebp + 0x38], eax
jmp 0x44190c
mov dword [ebp + 0x38], 0x100
cmp dword [esi + 8], 3
jl 0x44191d
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 8]
jmp 0x44191f
mov edi, ebx
cmp dword [esi + 8], 4
jl 0x441945
cmp byte [0x77dca4], 0
je 0x441945
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.00639b08
pop ecx
push eax
push 1
call fcn.004423dc
mov eax, dword [esi + 8]
cmp eax, 4
jle 0x441950
push 4
pop eax
mov dword [esi + 0x14], eax
mov eax, edi
test edi, edi
jne 0x44195e
mov eax, 0x68eb70
mov esi, dword [ebp + 0x38]
push eax
push esi
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.00409944
add esp, 0xc
mov byte [ebp + 0x4a], 1
push ebx
push ebx
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040abbf
push edi
push esi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042afa8
mov esi, eax
mov dword [ebp + 0x38], esi
call fcn.0057eaae
jmp 0x4419a7
mov esi, dword [ebp + 0x38]
push str.FORCEUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x4419c2
mov dword [0x754658], 0x6abafc1
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x4419e4
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x77114c], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x4419fc
mov byte [0x77dca7], 1
push str.BRINGTOFRONT
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
je 0x441a11
mov byte [ebp + 0x43], 1
cmp byte [ebp + 0x4a], 0
je 0x441a22
call fcn.00433300
push esi
jmp 0x44059d
push 0x6968f4
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x441a70
mov byte [0x753db4], 1
cmp dword [esi + 8], 2
jne 0x441a60
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00639b08
or dword [0x771280], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x441a82
or dword [0x771280], 0xffffffff
mov dword [esi + 0x14], 1
jmp 0x441a82
cmp byte [0x77bb24], 0
sete al
dec al
and byte [0x753db4], al
call fcn.004bd955
push eax
call fcn.004989fa
push str.STARTAPP
lea ecx, [ebp - 0x34]
call fcn.004b5237
mov esi, eax
test esi, esi
je 0x441b0c
cmp dword [esi + 8], 2
jl 0x441b0c
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
push eax
mov ecx, 0x7a0438
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
cmp dword [esi + 8], 3
jl 0x441b05
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
push eax
mov ecx, 0x7a0450
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
mov dword [esi + 0x14], 3
jmp 0x441b0c
mov dword [esi + 0x14], 2
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x441b73
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x441b73
jmp 0x441b6e
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.00478730
mov ecx, dword [esi + 4]
add ecx, edi
test al, al
mov eax, dword [esi]
je 0x441b59
lea edx, [ebp + 0x4b]
mov byte [ebp + 0x4b], bl
push edx
push dword [eax + ecx*4]
call fcn.0046ba8f
test al, al
je 0x441b6d
mov al, byte [ebp + 0x4b]
mov byte [0x77dca5], al
jmp 0x441b6d
mov eax, dword [eax + ecx*4]
mov ecx, 0x77ddf8
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004751fa
inc edi
cmp edi, dword [esi + 8]
jl 0x441b1d
lea eax, [ebp - 0x1a8]
push eax
call fcn.0056f0c6
mov edi, dword [ebp + 0x34]
lea eax, [ebp - 0x134]
mov esi, dword [ebp - 0x38]
push ebx
push edi
push eax
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x20
push eax
push esi
call fcn.00573471
test al, al
je 0x44059c
push str.___________________________________________
push 0x40
call fcn.00482bae
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b5237
test eax, eax
lea ecx, [ebp - 0x34]
push str.UNINSTALL
setne byte [ebp + 0x3c]
call fcn.004b5237
test eax, eax
lea ecx, [ebp - 0x34]
push str.RELOCATED
setne byte [ebp + 0x44]
call fcn.004b5237
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x34]
call fcn.00443fcb
movzx eax, al
push eax
push dword [ebp + 0x34]
lea eax, [ebp + 0x34]
push edi
push dword [ebp + 0x44]
push dword [ebp + 0x3c]
push eax
call fcn.0043fe87
push 0x696660
lea ecx, [ebp - 0x34]
call fcn.004b5237
cmp byte [ebp + 0x57], 0
mov byte [ebp + 0x44], bl
je 0x441c33
cmp byte [0x76d6b1], 0
je 0x441c33
mov byte [ebp + 0x44], 1
push ebx
push dword [ebp + 0x44]
push eax
call fcn.00590088
call fcn.0045e1f5
or al, byte [ebp + 0x34]
or byte [ebp + 0x57], al
call fcn.0046fc62
cmp byte [ebp + 0x57], 0
jne 0x441c8e
push dword [ebp - 0x48]
lea ecx, [ebp - 0x98]
call fcn.00443fcb
movzx eax, al
push eax
sub esp, 0x18
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040abbf
push ebx
push ebx
push esi
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042afa8
mov edi, eax
call fcn.0042de07
jmp 0x441c91
mov edi, dword [ebp + 0x38]
cmp dword [0x76d5ac], 0
mov byte [ebp + 0x4b], bl
je 0x441dfc
mov esi, str..btapp_
push esi
call fcn.00423ad9
pop ecx
push eax
push ebx
push esi
mov esi, 0x76d59c
mov ecx, esi
call fcn.00434ede
cmp eax, 0xffffffff
je 0x441d9a
push esi
lea eax, [ebp]
mov byte [ebp + 0x57], bl
push eax
call fcn.0043bead
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
push ebx
push ebx
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.0040abbf
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
jae 0x441cf4
lea eax, [ebp]
lea ecx, [ebp + 0x57]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x390]
call fcn.0043fb4c
push str.offer
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
call fcn.0040a58f
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x390]
call fcn.0048f726
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
mov esi, eax
call fcn.0040abbf
cmp byte [ebp + 0x57], 0
je 0x441d79
test esi, esi
je 0x441d79
push esi
mov esi, 0x7a021c
mov ecx, esi
call fcn.0043fd65
lea eax, [ebp - 0x348]
mov ecx, 0x7a0438
push eax
call fcn.004232ca
lea eax, [ebp - 0x300]
mov ecx, 0x7a0450
push eax
call fcn.004232ca
mov byte [ebp + 0x4b], 1
jmp 0x441d7e
mov esi, 0x7a021c
lea ecx, [ebp - 0x390]
call fcn.0043fca6
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.0040abbf
jmp 0x441dea
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.0042386b
push ebx
push 1
lea eax, [ebp]
mov byte [ebp - 4], 0x24
push eax
push esi
lea ecx, [ebp - 0x8c]
call fcn.0058e175
push eax
mov byte [ebp - 4], 0x25
call fcn.0058e375
lea ecx, [ebp - 0x8c]
call fcn.005dcf6a
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x20
call fcn.0042386b
mov esi, 0x7a021c
mov ecx, 0x76d59c
call fcn.004427d6
mov byte [0x76d5cc], bl
jmp 0x441e01
mov esi, 0x7a021c
call fcn.0048e1f7
test eax, eax
setne al
cmp dword [0x7a022c], 0
mov byte [ebp + 0x57], al
jne 0x441e30
test al, al
mov eax, 0x696724
jne 0x441e25
mov eax, 0x69696c
push eax
mov ecx, esi
call fcn.0043fd65
mov al, byte [ebp + 0x57]
test al, al
jne 0x441ea1
push ebx
push 0x69698c
mov ecx, esi
call fcn.00442819
cmp eax, 0xffffffff
jne 0x441ea1
push ebx
push 0x69699c
mov ecx, esi
call fcn.00442819
cmp eax, 0xffffffff
je 0x441ea1
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x19c]
mov ecx, esi
push eax
call fcn.0043be31
push eax
push 0x6969a8
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x26
push eax
call fcn.00424030
push eax
mov ecx, esi
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
push ebx
push 1
lea ecx, [ebp - 0x19c]
mov byte [ebp - 4], 0x20
call fcn.0040abbf
cmp byte [ebp + 0x37], 0
je 0x441ebe
cmp edi, 4
jge 0x441ebe
call fcn.005928a8
push dword [0x754658]
mov ecx, eax
call fcn.00594014
test edi, edi
je 0x44059c
cmp edi, 1
je 0x4423ca
cmp edi, 2
je 0x4423b1
cmp edi, 4
je 0x44237a
cmp edi, 6
jle 0x441f12
cmp edi, 9
jle 0x441f0c
cmp edi, 0xc
jne 0x441f12
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x6969b8
call fcn.0042e3e5
push edi
jmp 0x44059d
push edi
jmp 0x44059d
push str.temp
lea eax, [ebp - 0x1d8]
push eax
call fcn.0046e056
cmp dword [ebp - 0x1c4], 8
mov eax, dword [ebp - 0x1d8]
mov byte [ebp - 4], 0x27
jae 0x441f3c
lea eax, [ebp - 0x1d8]
push eax
call fcn.004b5959
mov al, byte [0x771002]
test al, al
jne 0x441f74
push 0x104
lea eax, [ebp - 0x598]
push eax
push dword [0x79fb18]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x598]
push eax
call fcn.0042838c
mov al, byte [0x771002]
movzx eax, al
push eax
call fcn.00573043
mov eax, 0x77dd30
push eax
push str.Version:__s
call fcn.00409944
add esp, 8
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
cmp dword [eax + 0x14], 0x10
jb 0x441fa2
mov eax, dword [eax]
push eax
push 0x68ea6c
call fcn.00409944
add esp, 8
lea ecx, [ebp - 0x70]
push ebx
push 1
call fcn.0040abbf
push dword [ebp - 0x4c]
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
call fcn.00575015
lea ecx, [ebp - 0x34]
call fcn.004b5262
call fcn.0045dfc0
cmp byte [0x76ca0f], 0
mov byte [0x771000], al
je 0x441fff
push ebx
push ebx
call fcn.0047613c
test eax, eax
je 0x441fff
call fcn.0045d84e
mov dword [0x77ddd8], eax
mov dword [0x77dddc], edx
cmp byte [0x76caf8], 0
je 0x44200e
mov dword [0x76c880], ebx
call fcn.0046d7f4
mov byte [0x76c7f3], al
call fcn.004b594b
and dword [0x770fe4], 0xbfffffff
call fcn.004877fd
lea eax, [ebp + 0x58]
mov ecx, 0x771bbc
push eax
call fcn.00425c17
mov ecx, dword [ebp + 0x58]
call fcn.00482ffd
call fcn.0042bfd5
call fcn.0056f2ac
cmp eax, 1
je 0x44208d
push ebx
push ebx
lea ecx, [ebp]
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0x14], ebx
call fcn.0040abbf
push ebx
lea eax, [ebp]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005991dd
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x27
call fcn.0040abbf
call fcn.0059915f
lea ecx, [ebp - 0xa50]
call fcn.0056ce5a
push dword [ebp - 0x40]
lea ecx, [ebp - 0xa50]
mov byte [ebp - 4], 0x29
call fcn.0056e09a
mov eax, dword [0x7a12e4]
test eax, eax
je 0x4420be
mov cl, byte [ebp + 0x4b]
mov byte [eax + 0x4d], cl
call fcn.004b958c
call fcn.0046e6a5
cmp dword [ebp - 0x124], 0
je 0x442125
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp]
push eax
call fcn.0043bead
cmp dword [ebp + 0x14], 0x10
mov eax, dword [ebp]
mov byte [ebp - 4], 0x2a
jae 0x4420f1
lea eax, [ebp]
push 1
push 0x28
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.0046bb89
test al, al
je 0x442116
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x68eb70
lea eax, [ebp + 0x20]
push eax
call fcn.004790ec
push ebx
push 1
lea ecx, [ebp]
mov byte [ebp - 4], 0x29
call fcn.0040abbf
push 0x56d6d9
call fcn.0059731c
call fcn.00596b44
cmp eax, 7
jne 0x44213e
call fcn.00597046
call fcn.00596d7f
cmp dword [0x76d0dc], 0
jne 0x44217b
call fcn.00599bb3
test al, al
jne 0x44216b
push dword [0x6959b8]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
mov ecx, 0x76d0cc
jmp 0x4421b4
cmp dword [0x76d0dc], 0
jne 0x44217b
mov esi, 0x76d0cc
jmp 0x4421a3
mov esi, 0x76d0cc
push esi
call fcn.00599e0e
test al, al
jne 0x4421a3
push str.uTorrent_Player
mov ecx, esi
call fcn.00434246
test eax, eax
jne 0x4421c5
call fcn.00599bb3
test al, al
je 0x4421c5
push dword [0x6959d0]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
mov ecx, esi
push eax
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
cmp dword [0x76d0f4], 0
jne 0x4421f3
push dword [0x6959b8]
lea eax, [ebp - 0x70]
push eax
call fcn.004784a4
push eax
mov ecx, 0x76d0e4
call fcn.0040a1e2
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040abbf
push ebx
push ebx
push 0x489b84
call fcn.0046887f
call fcn.0058e856
cmp eax, 2
jne 0x44220e
call fcn.0058e918
push 0xa14
call fcn.006291e1
pop ecx
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x442233
push dword [0x77ddd4]
mov ecx, eax
call fcn.00465cc3
jmp 0x442235
mov eax, ebx
cmp dword [0x76d3d0], 0
mov byte [ebp - 4], 0x29
mov dword [0x76b828], eax
je 0x44227b
lea eax, [ebp - 0x70]
push eax
call fcn.0058ae4a
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x2c
jb 0x44225c
mov eax, dword [eax]
push 0x76d3c0
push 0x76d124
push eax
call fcn.00480748
push ebx
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x29
call fcn.0040abbf
cmp byte [ebp + 0x43], 0
je 0x442296
call fcn.0056f2ac
test eax, eax
je 0x442296
push dword [ebp - 0xa4c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0047ca3c
test al, al
je 0x4422aa
push str.IPv6_is_installed
call fcn.00477256
pop ecx
mov byte [ebp + 0x5b], 1
call fcn.00472fb7
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 0x2d
push eax
call fcn.0048963b
test al, al
je 0x4422e3
sub esp, 0x10
lea esi, [ebp - 0x1e8]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00477256
add esp, 0x14
mov byte [ebp - 4], 0x2e
call fcn.00472ff8
cmp byte [ebp + 0x3c], 0
mov byte [ebp - 4], 0x29
jne 0x44230a
call fcn.005928a8
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.0059423c
push ebx
push 0x119
call fcn.004871ec
call fcn.004be666
call fcn.005975b2
cmp byte [0x77dca5], 0
jne 0x442336
cmp byte [0x79fb21], 0
jne 0x442336
call fcn.0057ae1f
call fcn.0049fe92
mov edi, dword [eax + 4]
mov esi, dword [edi]
jmp 0x44234c
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esi]
cmp esi, edi
jne 0x442342
mov ecx, 0x79fb18
call fcn.0057df41
call fcn.004b53e0
call fcn.005928a8
mov ecx, eax
call fcn.005946b6
call fcn.0056bca1
call fcn.00409944
jmp 0x44059c
call fcn.005928a8
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.00482bae
cmp byte [ebp + 0x35], 0
pop ecx
pop ecx
jne 0x4423aa
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.00482bae
pop ecx
pop ecx
mov ecx, esi
call fcn.005941b2
push 4
jmp 0x44059d
push dword [ebp + 0x5c]
mov byte [0x77dca5], 1
push dword [ebp + 0x58]
call fcn.0042e3e5
push 2
jmp 0x44059d
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042e3e5
push 1
jmp 0x44059d