Function at 0x4415f7
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x64
mov eax, 0x6a9288
call fcn.00664608
sub esp, 0xbf8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov eax, ebx
mov dword [ebp + 0x5c], eax
mov edi, dword [ebp + 0x78]
mov esi, dword [ebp + 0x74]
push edi
push esi
mov dword [ebp + 0x58], eax
call fcn.00440ad0
push ebx
test al, al
je 0x441633
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
push ebx
lea ecx, [ebp + 4]
call fcn.004b077a
push edi
push esi
lea ecx, [ebp + 4]
mov dword [ebp - 4], ebx
call fcn.004b07e8
push str.INSTALLCHECK
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x44167d
cmp dword [esi + 8], 2
jl 0x44167d
push 2
mov ecx, esi
call fcn.00443f4d
push 1
mov ecx, esi
call fcn.004409d0
push eax
call fcn.004378c6
push ebx
jmp 0x44162d
lea ecx, [ebp - 0x1bc]
call fcn.004b0a52
push str.logfile
lea ecx, [ebp + 4]
mov byte [ebp - 4], 1
call fcn.004b09f8
mov edi, eax
mov dword [ebp + 0x34], ebx
mov dword [ebp - 0x2c], edi
test edi, edi
je 0x4416c9
push 2
pop eax
cmp dword [edi + 8], eax
jl 0x4416bb
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
mov dword [edi + 0x14], eax
jmp 0x4416c0
mov esi, str.bt.log
mov dword [ebp + 0x34], esi
mov dword [ebp - 0x1b8], esi
push 0x6d4370
lea ecx, [ebp + 4]
call fcn.004b09f8
mov dword [ebp + 0x30], eax
test eax, eax
je 0x4416e6
mov byte [0x798d30], 1
jmp 0x4416f8
cmp byte [0x7c5164], 0
sete al
dec al
and byte [0x798d30], al
push str.LOGREMOTEFRAME
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x441710
or dword [0x7c5544], 0xffffffff
push 0x798ba4
call fcn.00466f2c
push 5
pop eax
mov edi, 0x7ab584
mov dword [ebp - 0x19c], 3
push edi
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov byte [ebp - 0x190], 1
mov dword [ebp - 0x1a4], 0xb5d8
mov dword [ebp - 0x1a0], str.2012_12_04_23:04:37__0800
mov dword [ebp - 0x170], 0x6d43b4
mov dword [ebp - 0x1b4], 0x6d43c4
mov dword [ebp - 0x1b0], 0x6d2890
mov dword [ebp - 0x1a8], str.BTWebClient
mov dword [ebp - 0x1ac], 0x6ce944
call fcn.00466f2c
push str.TORRENTPANE
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
call fcn.00431d5f
test al, al
jne 0x4417a7
test esi, esi
je 0x4417ae
push ebx
push edi
call fcn.00466160
call fcn.005bf52a
push str.PORTABLE
lea ecx, [ebp + 4]
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 0x34], bl
call fcn.004b09f8
test eax, eax
je 0x4417db
mov byte [ebp - 0x34], 1
mov dword [0x7b6968], 0x10
push 0x6d4404
lea ecx, [ebp + 4]
mov byte [0x7ed4f8], bl
call fcn.004b09f8
test eax, eax
je 0x4417f9
mov byte [0x7ed4f8], 1
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x128], eax
push 0x3f
push str.http:__pr.apps.bittorrent.com_client_webui__s_client_webui.json
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 2
call fcn.00410407
lea eax, [ebp]
mov dword [ebp - 0x18c], 0x792b64
push eax
mov ecx, 0x7bd378
mov dword [ebp], 0x4ba813
call fcn.004406a3
lea eax, [ebp - 0x1bc]
push eax
call fcn.004b0ccc
push str.CAMPAIGN
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x44187f
push 2
pop ecx
cmp dword [eax + 8], ecx
jl 0x44187f
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push dword [eax + ecx*4 + 4]
call fcn.00674ab3
pop ecx
push eax
mov ecx, 0x7b5e48
call fcn.0046681f
push str.BROWSER
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x441923
push 2
pop ecx
cmp dword [eax + 8], ecx
jl 0x441923
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov eax, dword [eax + ecx*4 + 4]
mov ecx, dword [ebp + 0x58]
or ecx, 4
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
test eax, eax
je 0x4418d1
push eax
lea ecx, [ebp + 0x40]
call fcn.00427ba3
jmp 0x4418d4
mov dword [ebp + 0x58], ecx
mov byte [ebp], bl
lea eax, [ebp + 0x40]
push dword [ebp]
mov ecx, 0x7b6d50
push eax
call fcn.00427ad3
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x441923
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x38], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x44191a
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
mov ecx, 0x7b5e48
call fcn.0046600b
push eax
push fcn.005afe29
call fcn.005c56fd
push str.CRASH
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x44195a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ba6a0], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp + 4]
call fcn.004b09f8
push 7
mov esi, eax
mov dword [ebp - 0xa4], ebx
pop edi
xor eax, eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], edi
mov word [ebp - 0xa4], ax
mov byte [ebp - 4], 3
test esi, esi
je 0x4419c8
cmp dword [esi + 8], 2
jl 0x4419c8
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0xa4]
call fcn.00427ba3
push 0x6d44a0
lea ecx, [ebp - 0xa4]
mov dword [esi + 0x14], 2
call fcn.00436e07
movzx eax, al
xor eax, 1
jmp 0x4419cd
call fcn.0045f33e
push eax
call fcn.005ae100
push ebx
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xf0], 1
push eax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xec], ebx
push eax
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp], eax
call fcn.005619ef
push 2
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push 0x6d44a8
mov esi, eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00410407
lea ecx, [esi + 0xe0]
mov byte [ebp - 4], 4
lea eax, [ebp + 0x40]
cmp ecx, eax
je 0x441a4f
cmp dword [ebp + 0x54], 0x10
jb 0x441a46
mov eax, dword [ebp + 0x40]
push dword [ebp + 0x50]
push eax
call fcn.00410407
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 3
cmp eax, 0x10
jb 0x441a88
mov ecx, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x38], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x441a7f
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b4
call fcn.005612b1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ecf9
call fcn.005612b1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b5
call fcn.005612b1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ecf8
call fcn.005612b1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b6
call fcn.005612b1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ec74
call fcn.005612b1
push 0x78cb18
push ebx
mov ecx, esi
call fcn.00563f68
push 0x78cb78
push 1
mov ecx, esi
call fcn.00563f68
cmp dword [ebp], 0
jne 0x441b3f
mov eax, str.loaded
mov ecx, 0x6d44dc
jmp 0x441b49
mov eax, str.failed_to_load
mov ecx, 0x6d44ec
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.00427b28
add esp, 0xc
push str.Process_started
call fcn.0040fa0d
mov esi, ebx
cmp dword [ebp + 0x74], esi
je 0x441b7c
mov ebx, dword [ebp + 0x78]
push dword [ebx + esi*4]
call fcn.0040fa0d
inc esi
cmp esi, dword [ebp + 0x74]
jne 0x441b6c
xor ebx, ebx
push str.End_Args
call fcn.0040fa0d
mov ecx, 0x7bb2b4
call fcn.00443ead
mov ecx, 0x7bb2dc
call fcn.00443db3
mov ecx, 0x7bb2c8
call fcn.00443e0b
call fcn.004b3154
call fcn.005bc6a2
push 0x7ed54c
call fcn.00492a22
mov dword [ebp - 0x30], 0x6d3f64
mov byte [ebp - 4], 5
call fcn.005873bb
lea eax, [ebp - 0x30]
push eax
push 0x6d4550
call fcn.004bba63
push str.SetDllDirectoryA
push 0x6cdffc
call fcn.00455fd1
test eax, eax
je 0x441bf0
push 0x7526ce
call eax
call fcn.00427b28
call fcn.00431cea
test al, al
je 0x441d02
call fcn.00455710
test al, al
je 0x441d02
mov byte [0x7ec648], 1
call fcn.00432556
test al, al
je 0x441cf9
mov byte [0x7ec64a], 1
call fcn.005b27f0
call fcn.004679a9
mov al, byte [0x7b5c0a]
mov byte [ebp + 0x67], al
mov byte [0x7b5c0a], 1
call fcn.00468768
push 1
push ebx
call fcn.005abb51
test al, al
je 0x441cef
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x30], 0x6d3f5c
cmp eax, 8
jb 0x441ca0
mov ecx, dword [ebp - 0xa4]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x74], eax
mov dword [ebp + 0x78], ecx
cmp eax, 0x1000
jb 0x441c97
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x78]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], edi
mov word [ebp - 0xa4], ax
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x15c]
call fcn.00443d95
lea ecx, [ebp - 0x188]
call fcn.00410858
lea ecx, [ebp + 4]
call fcn.004b07d7
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x68
leave
ret 0xc
mov al, byte [ebp + 0x67]
mov byte [0x7b5c0a], al
jmp 0x441d0c
mov word [0x7ec649], 1
call fcn.005b27f0
call fcn.004679a9
push str.NOTIFYUPDATE
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
push 0x30
pop edi
test esi, esi
je 0x441d45
cmp dword [esi + 8], 2
mov al, 1
jl 0x441d40
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [ecx + edx*4 + 4]
cmp word [eax], di
mov dword [esi + 0x14], 2
setne al
mov byte [0x7b6002], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp + 4]
call fcn.004b09f8
mov edx, eax
test edx, edx
je 0x441d7b
cmp dword [edx + 8], 2
mov al, 1
jl 0x441d76
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov eax, dword [ecx + eax*4 + 4]
cmp word [eax], di
mov dword [edx + 0x14], 2
setne al
mov byte [0x7b6001], al
push 0x7b5c10
push str.Settings_path:___s__n
call fcn.00427b28
add esp, 8
lea ecx, [ebp + 4]
push str.AUTOUPDATE
call fcn.004b09f8
mov edi, eax
test edi, edi
je 0x441e54
mov ecx, edi
mov byte [ebp + 0x70], 1
mov dword [ebp + 0x78], 0x1a
call fcn.00443f49
mov dword [ebp + 0x74], eax
cmp eax, 2
jl 0x441dd4
push 1
mov ecx, edi
call fcn.004409d0
mov esi, eax
test eax, eax
je 0x441dd6
cmp word [eax], bx
jne 0x441de1
jmp 0x441dd6
mov esi, ebx
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.0040fa51
pop ecx
push str.NORUN
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x441dfa
mov byte [ebp + 0x70], bl
call fcn.0059c72e
mov eax, dword [ebp + 0x74]
cmp eax, 3
jl 0x441e17
push 2
mov ecx, edi
call fcn.004409d0
push eax
call fcn.00443fe3
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x74]
push 3
push eax
call fcn.0044073a
push eax
mov ecx, edi
call fcn.00443f4d
test esi, esi
je 0x44167a
cmp word [esi], bx
je 0x44167a
push dword [ebp + 0x78]
push dword [ebp + 0x70]
push esi
call fcn.005aac3a
test al, al
je 0x44167a
xor ebx, ebx
inc ebx
jmp 0x44167a
cmp dword [ebp - 0x2c], 0
je 0x441e84
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x441e71
push eax
push str.Setting_log_file_to__s
call fcn.00427b28
add esp, 8
jmp 0x441e76
mov eax, str.stdout
push eax
push str.Log_file_set_to_path:__s__n
call fcn.00427b28
add esp, 8
push str.AUTOMATION
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x441ecb
push 1
call fcn.0058eb49
cmp dword [esi + 8], 2
jl 0x441ed1
push 0x75
pop eax
mov word [0x79a63c], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x79a64c
call fcn.00428ea2
mov dword [esi + 0x14], 2
jmp 0x441ed1
push ebx
call fcn.0058eb49
push str.MINIMIZED
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x441ee9
mov byte [0x7c8ad1], 1
push str.NOTFAREA
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x441f01
mov byte [0x7c8ad2], 1
push str.AUTORESTARTTIME
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x441f34
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.00674ab3
mov dword [0x7ab750], eax
mov dword [0x7ab754], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x7ebda8
call fcn.0045d875
push dword [ebp + 0x70]
mov ecx, 0x7ebde0
call fcn.0059b717
call fcn.00487f23
push str.recover
lea ecx, [ebp + 4]
mov dword [0x7ebde4], eax
mov byte [ebp + 0x2c], bl
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x44200a
mov dword [ebp + 0x40], ebx
mov byte [ebp + 0x2c], 1
mov byte [0x7ec0c0], 1
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
push 1
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.005c0a06
lea ecx, [ebp - 0x28]
call fcn.00410858
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x441fd1
cmp dword [ebp + 0x54], 0x10
lea edx, [ebp + 0x40]
mov dword [esi + 0x14], eax
jb 0x441fc1
mov edx, dword [ebp + 0x40]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.005c5b74
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 5
cmp eax, 0x10
jb 0x44200a
mov ecx, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x38], ecx
cmp eax, 0x1000
jb 0x442001
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x38]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
cmp dword [0x7b69bc], 0
mov al, bl
mov byte [ebp + 0x73], al
mov byte [ebp + 0x67], al
mov byte [ebp + 0x3f], al
mov byte [ebp + 0x3e], al
jne 0x44202b
mov dword [0x7b69bc], 0x6abb5d8
push str.WSA_LOG
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
setne byte [0x7b675c]
call fcn.004bdb0c
mov dword [ebp - 0xc4], ebx
mov esi, 0x6ce098
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], esi
call fcn.004504d5
push str.dht_feed.dat
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 8
push eax
call fcn.0046665e
cmp dword [ebp + 0x54], 8
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 9
jb 0x442088
mov eax, dword [ebp + 0x40]
lea ecx, [ebp - 0xc8]
push ecx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.004661fd
mov ecx, dword [ebp + 0x58]
or ecx, 1
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x5c], ecx
mov ecx, eax
call fcn.00443f89
test eax, eax
jne 0x4420c1
cmp byte [ebp - 0xb8], 4
mov byte [ebp + 0x66], 1
je 0x4420c4
mov byte [ebp + 0x66], bl
mov eax, dword [ebp + 0x58]
mov dword [ebp - 4], 9
test al, 1
je 0x4420e3
and eax, 0xfffffffe
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], eax
call fcn.0048777a
cmp byte [ebp + 0x66], 0
je 0x442100
cmp byte [ebp - 0xb8], 4
lea eax, [ebp - 0xc8]
je 0x4420fa
mov eax, ebx
push eax
call fcn.00486b57
lea ecx, [ebp + 0x40]
call fcn.00427afc
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xc8], esi
call fcn.0044f20c
mov byte [ebp - 4], 5
call fcn.005912b5
push str.NOINSTALL
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x44214b
mov al, 1
mov dword [0x7ec0e8], 0xb5d8
mov byte [ebp + 0x73], al
mov byte [ebp + 0x67], al
jmp 0x44214e
mov al, byte [ebp + 0x73]
push ebx
push ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp + 0x28], eax
call fcn.004438b8
call fcn.0043aebd
push str.verifyhta
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x44227f
cmp dword [esi + 8], 2
jl 0x44227f
push 2
mov ecx, esi
call fcn.00443f4d
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.DLL_AttachConsole]
test eax, eax
je 0x4421da
push 1
call fcn.0067087f
push eax
push 0x6d477c
mov edi, 0x6d4780
push edi
call fcn.0067647a
push 2
call fcn.0067087f
push eax
push 0x6d477c
push edi
call fcn.0067647a
push ebx
call fcn.0067087f
push eax
push 0x6d4788
push str.CONIN_
call fcn.0067647a
add esp, 0x30
push str.Verifying_Embedded_HTA.._r_n
call fcn.00427c3f
pop ecx
push 1
mov ecx, esi
call fcn.004409d0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00444556
push ebx
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x78], ebx
call fcn.0043cd22
lea eax, [ebp + 0x78]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004483c0
push 5
pop ecx
push 0x6c
mov byte [ebp + 0x77], al
lea edi, [ebp - 0x264]
lea eax, [ebp - 0x250]
mov esi, str.VerifyHTA_Success_r_n
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.006678b0
mov bl, byte [ebp + 0x77]
add esp, 0xc
test bl, bl
jne 0x442265
push dword [ebp + 0x78]
lea eax, [ebp - 0x264]
push str.VerifyHTA_Failed_with_error:__u_r_n
push 0x80
push eax
call fcn.004401b5
add esp, 0x10
lea eax, [ebp - 0x264]
push eax
call fcn.00427c3f
xor eax, eax
test bl, bl
pop ecx
sete al
push eax
jmp 0x44162d
cmp dword [0x7b683c], 0
je 0x442299
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x4422a0
mov byte [0x7b6d41], 1
push str.LAUNCHED
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
lea ecx, [ebp + 4]
push 0x6d481c
setne byte [ebp + 0x34]
call fcn.004b09f8
test eax, eax
lea ecx, [ebp - 0xb0]
setne byte [ebp + 0x60]
push dword [ebp + 0x60]
push dword [ebp + 0x34]
call fcn.0043cd22
cmp dword [0x7b6978], 0
mov byte [ebp - 4], 0xe
jne 0x44232d
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xb0]
call fcn.0043d8e6
add eax, 4
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.0043bb7d
mov ecx, 0x7b69c0
cmp eax, ecx
je 0x442319
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.004100a8
lea ecx, [ebp + 0x40]
call fcn.00410858
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xe
call fcn.004445f4
mov esi, dword [ebp + 0xc]
mov byte [ebp + 0x38], bl
mov byte [ebp + 0x66], bl
test esi, esi
je 0x44237e
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x44237e
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push 0x6d4824
push dword [eax + ecx*4]
call fcn.00471afd
test al, al
jne 0x44237a
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push 0x6ce9a4
push dword [eax + ecx*4]
call fcn.00471b86
test al, al
jne 0x44237a
inc edi
cmp edi, dword [esi + 8]
jl 0x442342
jmp 0x44237e
mov byte [ebp + 0x66], 1
mov edi, 0x6d4834
lea ecx, [ebp + 4]
push edi
call fcn.004b09f8
test eax, eax
jne 0x442466
push 0x6d4838
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x442466
push str.NOINSTALL
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x442466
cmp byte [ebp + 0x34], al
je 0x4423d8
push 0x6d481c
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442466
push str.RELOCATED
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x442466
push str.FEATURE
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x442466
push str.HYDRA_EXCEPTION
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x442466
cmp dword [0x7a9f60], eax
jne 0x442466
cmp byte [ebp + 0x34], al
je 0x44241d
cmp byte [ebp + 0x66], al
jne 0x442466
cmp dword [0x7b683c], 0
mov byte [ebp - 4], 0x10
jne 0x44245b
cmp byte [0x7b6d41], 0
je 0x44245b
push str.LANG
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
call fcn.004679a9
push ebx
push ebx
push esi
call fcn.005b2a04
mov byte [0x7b5c0a], 1
call fcn.00468768
mov byte [ebp + 0x38], 1
mov dword [ebp - 4], 0xe
mov eax, dword [0x7b683c]
test eax, eax
je 0x4424ad
cmp eax, 0x6abb5d8
je 0x4424ad
call fcn.004692c5
call fcn.0058e2ce
jmp 0x4424b4
mov byte [0x7b5c0a], 1
push edi
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x4424e1
push 0x6d4838
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
jne 0x4424e1
lea ecx, [ebp - 0xb0]
call fcn.0044552a
test al, al
jne 0x4424eb
mov dword [0x7b683c], 0x6abb5d8
push 3
pop eax
push str.UNINSTALL
lea ecx, [ebp + 4]
mov byte [ebp + 0x66], bl
mov dword [ebp + 0x28], eax
call fcn.004b09f8
lea ecx, [ebp + 4]
test eax, eax
je 0x442541
push edi
mov byte [ebp + 0x78], bl
mov byte [ebp + 0x74], bl
call fcn.004b09f8
test eax, eax
je 0x44251c
mov byte [ebp + 0x78], 1
push str.REMSETTINGS
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442531
mov byte [ebp + 0x74], 1
push dword [ebp + 0x74]
push dword [ebp + 0x78]
call fcn.00435e57
jmp 0x44167a
push str.BIGDUMP
call fcn.004b09f8
test eax, eax
je 0x442556
mov byte [0x7ba6a5], 1
xor eax, eax
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], 7
mov word [ebp - 0xe0], ax
push str.PAIR
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x12
call fcn.004b09f8
test eax, eax
je 0x4425ab
cmp dword [eax + 8], 1
jle 0x4425ab
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0xe0]
call fcn.00427ba3
push str.DIRECTORY
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x4425d8
cmp dword [eax + 8], 1
jle 0x4425d8
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov ecx, dword [ecx + edx*4 + 4]
mov dword [0x7c8ad4], ecx
mov dword [eax + 0x14], 2
push str.HIDE
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x4425f0
mov byte [0x7ebde9], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], eax
mov word [ebp - 0x124], cx
mov dword [ebp - 0xf8], eax
xor eax, eax
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], ax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x15
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x44266a
cmp dword [esi + 8], 1
jle 0x44266a
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x124]
call fcn.00427ba3
mov dword [esi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x44269e
cmp dword [esi + 8], 1
jle 0x44269e
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x10c]
call fcn.00427ba3
mov dword [esi + 0x14], 2
push ebx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.005b1059
mov eax, dword [ebp - 0x3c]
mov edi, ebx
mov ecx, dword [ebp - 0x40]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x4426ec
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.005b0422
mov eax, dword [ebp - 0x3c]
inc edi
mov ecx, dword [ebp - 0x40]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x4426cf
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp + 4]
call fcn.004b09f8
mov edx, eax
test edx, edx
je 0x442868
xor eax, eax
mov dword [ebp - 0x8c], ebx
push 7
inc eax
mov dword [ebp - 0x7c], ebx
pop esi
xor ecx, ecx
mov byte [0x7b6838], al
mov dword [ebp - 0x78], esi
mov word [ebp - 0x8c], cx
mov byte [ebp - 4], 0x16
cmp dword [edx + 8], eax
jle 0x442749
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [edx + 0x14], 2
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0x8c]
call fcn.00427ba3
jmp 0x442778
mov dword [edx + 0x14], eax
lea eax, [ebp + 0x40]
push 0x6d495c
push eax
call fcn.00471937
lea ecx, [ebp - 0x8c]
cmp ecx, eax
je 0x442770
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.00427ad3
lea ecx, [ebp + 0x40]
call fcn.00427afc
cmp dword [ebp - 0x78], 8
lea eax, [ebp - 0x8c]
jb 0x44278a
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
mov dword [ebp + 0x40], ebx
mov word [ebp + 0x40], cx
lea ecx, [ebp + 0x40]
push eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], esi
call fcn.00427ba3
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0048a0fe
push eax
push 0x6d4980
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
call fcn.0043c797
mov ecx, 0x7b6c28
cmp eax, ecx
je 0x4427db
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.00427ad3
lea ecx, [ebp - 0x28]
call fcn.00427afc
lea ecx, [ebp - 0x58]
call fcn.00427afc
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x442826
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x60], ecx
cmp eax, 0x1000
jb 0x44281d
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x60]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
mov eax, dword [ebp - 0x78]
mov byte [ebp - 4], 0x15
cmp eax, 8
jb 0x442868
mov ecx, dword [ebp - 0x8c]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x44285f
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
push str.DOWNLOADINSTALL
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x442ab0
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.0040fa0d
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.00674ab3
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x58]
or eax, 8
mov ecx, dword [ecx + edx*4 + 0xc]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
test ecx, ecx
je 0x4428d4
push ecx
lea ecx, [ebp + 0x40]
call fcn.00427ba3
jmp 0x4428d7
mov dword [ebp + 0x58], eax
mov byte [ebp + 0x60], bl
lea eax, [ebp + 0x40]
push dword [ebp + 0x60]
mov ecx, 0x78c4f8
push eax
call fcn.00427ad3
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x442926
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x44291d
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
mov ecx, 0x78c4e0
cmp eax, ecx
je 0x44294d
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.004100a8
lea ecx, [ebp - 0x58]
call fcn.00410858
test edi, edi
je 0x44298c
cmp word [edi], bx
je 0x44298c
push 0x7b4c68
push edi
lea eax, [ebp + 0x48]
push eax
call fcn.004661fd
mov ecx, dword [ebp + 0x58]
or ecx, 2
mov byte [ebp - 4], 0x19
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x5c], ecx
mov ecx, eax
call fcn.00443f89
mov byte [ebp + 0x67], 1
test eax, eax
je 0x44298f
mov byte [ebp + 0x67], bl
mov ecx, dword [ebp + 0x58]
mov dword [ebp - 4], 0x15
test cl, 2
je 0x4429a6
lea ecx, [ebp + 0x48]
call fcn.0048777a
cmp byte [ebp + 0x67], 0
je 0x442aac
push 0x6cdcdc
push ebx
lea eax, [ebp + 0x40]
mov dword [0x78c1d4], 0x7b4c68
push eax
call fcn.004518bd
push 0x3c
mov byte [ebp - 4], 0x1a
call fcn.00664379
mov esi, eax
pop ecx
mov dword [ebp + 0x60], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x442a16
cmp dword [ebp + 0x54], 8
lea eax, [ebp + 0x40]
jb 0x4429ee
mov eax, dword [ebp + 0x40]
mov ecx, dword [0x78c1d4]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.0044f55b
mov ecx, eax
call fcn.0044f714
push eax
mov ecx, esi
call fcn.0042992e
mov esi, eax
jmp 0x442a18
mov esi, ebx
mov eax, dword [ebp - 0x14]
push 0xc4
mov byte [ebp - 4], 0x1a
mov dword [esi], eax
call fcn.00664379
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x442a40
mov ecx, eax
call fcn.00458c2c
jmp 0x442a42
mov eax, ebx
mov byte [ebp - 4], 0x1a
mov dword [ebp + 0x5c], eax
test eax, eax
je 0x442a56
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x5c]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1d
push ecx
lea ecx, [eax + 8]
call fcn.00427946
mov eax, dword [ebp + 0x5c]
mov dword [eax + 0xc0], 0x432233
lea eax, [ebp + 0x5c]
push eax
push 1
push esi
push fcn.0043552c
lea eax, [esi + 0x20]
push eax
call fcn.005b160f
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [ebp + 0x5c]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x442aa0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x15
call fcn.00427afc
mov byte [ebp + 0x66], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp eax, 0x60
jg 0x442aca
push 0x60
pop eax
push esi
push ebx
mov dword [0x7c8a3c], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.0058b2f8
call fcn.0059e991
push 0x6d4838
lea ecx, [ebp + 4]
call fcn.004b09f8
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
mov edi, eax
call fcn.004b09f8
mov esi, eax
test edi, edi
je 0x442bff
test esi, esi
je 0x442b1c
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ba6a0], eax
mov dword [0], ebx
mov ecx, edi
mov esi, ebx
call fcn.00443f49
mov ecx, edi
cmp eax, 1
jne 0x442b39
push eax
call fcn.00443f4d
mov esi, 0xe53e
jmp 0x442b6e
push 2
call fcn.00443f4d
push 1
mov ecx, edi
call fcn.004409d0
mov edi, eax
push edi
call fcn.00443ff0
mov ecx, ebx
test eax, eax
je 0x442b6e
push 0x30
lea edx, [eax - 1]
pop ebx
cmp word [edi + ecx*2], bx
je 0x442b66
bts esi, edx
inc ecx
dec edx
cmp ecx, eax
jb 0x442b5d
xor ebx, ebx
and esi, 0xfffef57f
lea ecx, [ebp + 0x40]
or esi, 0x20000
call fcn.004101a1
push str.LANG
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x1f
call fcn.004b09f8
mov edi, eax
test edi, edi
je 0x442bda
mov ecx, edi
call fcn.00443f49
cmp eax, 2
jl 0x442bda
push 2
mov ecx, edi
call fcn.00443f4d
push 1
mov ecx, edi
call fcn.004409d0
push eax
lea eax, [ebp - 0x58]
push 0x6d3504
push eax
call fcn.004577d4
add esp, 0xc
lea ecx, [ebp + 0x40]
push eax
call fcn.004100cf
lea ecx, [ebp - 0x58]
call fcn.0041087e
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp + 0x40]
mov ecx, esp
push eax
call fcn.004107ee
push ebx
push esi
push dword [ebp + 0x2c]
push dword [ebp + 0x78]
push dword [ebp + 0x74]
call fcn.0042ea5e
jmp 0x442279
test esi, esi
je 0x442cc6
mov eax, dword [esi + 8]
cmp eax, 2
jl 0x442c6f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00674ab3
mov edi, eax
mov eax, dword [esi + 8]
pop ecx
mov ecx, edi
cmp eax, 3
jl 0x442c74
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, edi
mov dword [ebp - 0x14], edx
cmp eax, 4
jl 0x442c76
cmp byte [0x7c8ad0], 0
je 0x442c65
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.00674ab3
pop ecx
push eax
push 1
call fcn.004438b8
mov eax, dword [esi + 8]
mov ecx, edi
mov edx, dword [ebp - 0x14]
cmp eax, 4
jle 0x442c76
push 4
pop eax
jmp 0x442c76
mov ecx, 0x100
mov edx, ebx
mov dword [esi + 0x14], eax
mov eax, edx
test edx, edx
jne 0x442c84
mov eax, 0x6ce190
push eax
push ecx
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.00427b28
add esp, 0xc
mov byte [ebp + 0x66], 1
push ebx
push ebx
sub esp, 0x18
mov eax, esp
push edx
push ecx
push dword [ebp + 0x2c]
mov dword [eax], ebx
push dword [ebp + 0x78]
mov dword [eax + 0x10], ebx
push dword [ebp + 0x74]
mov dword [eax + 0x14], 0xf
call fcn.0042ea5e
mov esi, eax
mov dword [ebp + 0x28], esi
call fcn.0059c72e
jmp 0x442cc9
mov esi, dword [ebp + 0x28]
push str.FORCEUPDATE
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442ce4
mov dword [0x79a638], 0x6abb5d7
push str.CRASH
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442d06
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ba6a0], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442d1e
mov byte [0x7c8ad3], 1
push str.BRINGTOFRONT
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x442d33
mov byte [ebp + 0x3f], 1
cmp byte [ebp + 0x66], 0
je 0x442d44
call fcn.00436b1a
push esi
jmp 0x44162d
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x442d7d
cmp dword [esi + 8], 2
jne 0x442d6f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00674ab3
or dword [0x7ba8dc], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x442d7d
or dword [0x7ba8dc], 0xffffffff
mov dword [esi + 0x14], 1
call fcn.004b9670
push eax
call fcn.00492a22
push str.STARTAPP
lea ecx, [ebp + 4]
call fcn.004b09f8
mov esi, eax
test esi, esi
je 0x442e1a
cmp dword [esi + 8], 2
jl 0x442e1a
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
mov edi, 0x7ec310
cmp eax, edi
je 0x442dca
mov byte [ebp + 0x30], bl
mov ecx, edi
push dword [ebp + 0x30]
push eax
call fcn.004100a8
lea ecx, [ebp - 0x58]
call fcn.00410858
cmp dword [esi + 8], 3
jl 0x442e13
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
cmp eax, 0x7ec328
je 0x442e02
mov byte [ebp + 0x30], bl
mov ecx, 0x7ec328
push dword [ebp + 0x30]
push eax
call fcn.004100a8
lea ecx, [ebp - 0x58]
call fcn.00410858
mov dword [esi + 0x14], 3
jmp 0x442e1a
mov dword [esi + 0x14], 2
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x442f14
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x442f14
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.00471afd
mov ecx, dword [esi + 4]
mov edx, dword [esi]
add ecx, edi
test al, al
je 0x442e74
lea eax, [ebp + 0x67]
mov byte [ebp + 0x67], bl
push eax
push dword [edx + ecx*4]
call fcn.00463b96
test al, al
je 0x442f0a
mov al, byte [ebp + 0x67]
mov byte [0x7c8ad1], al
jmp 0x442f0a
mov eax, dword [edx + ecx*4]
xor ecx, ecx
mov dword [ebp + 0x40], ebx
mov word [ebp + 0x40], cx
lea ecx, [ebp + 0x40]
push eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
call fcn.00427ba3
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x20
push eax
call fcn.005b4f05
mov ecx, dword [ebp + 0x54]
neg al
mov byte [ebp - 4], 0x15
sbb al, al
inc al
mov byte [ebp + 0x3e], al
cmp ecx, 8
jb 0x442eeb
lea eax, [ecx*2 + 2]
mov ecx, dword [ebp + 0x40]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x442edf
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.006643a9
mov al, byte [ebp + 0x3e]
pop ecx
pop ecx
test al, al
je 0x442f0a
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
mov eax, dword [eax + ecx*4]
mov ecx, 0x7c8b94
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.00440267
inc edi
cmp edi, dword [esi + 8]
jl 0x442e31
lea eax, [ebp - 0x134]
push eax
call fcn.0058a81d
mov esi, dword [ebp + 0x34]
lea eax, [ebp - 0xe0]
mov edi, dword [ebp + 0x2c]
push ebx
push esi
push eax
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x21
push eax
push edi
call fcn.0058f28f
test al, al
je 0x44167a
push str.___________________________________________
push 0x40
call fcn.0047d9cc
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
lea ecx, [ebp + 4]
push str.UNINSTALL
setne byte [ebp + 0x58]
call fcn.004b09f8
test eax, eax
lea ecx, [ebp + 4]
push str.RELOCATED
setne byte [ebp - 0x14]
call fcn.004b09f8
test eax, eax
lea ecx, [ebp - 0xb0]
setne byte [ebp + 0x30]
call fcn.00445526
movzx eax, al
push eax
push dword [ebp + 0x30]
lea eax, [ebp + 0x34]
push esi
push dword [ebp - 0x14]
push dword [ebp + 0x58]
push eax
call fcn.00440bee
push str.LANG
lea ecx, [ebp + 4]
call fcn.004b09f8
cmp byte [ebp + 0x73], 0
mov byte [ebp + 0x60], bl
je 0x442fd4
cmp byte [0x7b6d41], 0
je 0x442fd4
mov byte [ebp + 0x60], 1
push ebx
push dword [ebp + 0x60]
push eax
call fcn.005b2a04
push str.STAGE_URL
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
setne byte [0x7b675b]
call fcn.00454fe8
or al, byte [ebp + 0x34]
or byte [ebp + 0x73], al
call fcn.00468768
cmp byte [ebp + 0x73], 0
jne 0x443043
push dword [ebp + 0x38]
lea ecx, [ebp - 0xb0]
call fcn.00445526
movzx eax, al
push eax
sub esp, 0x18
mov eax, esp
push ebx
push ebx
push edi
push dword [ebp + 0x78]
mov dword [eax], ebx
push dword [ebp + 0x74]
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
call fcn.0042ea5e
mov dword [ebp + 0x28], eax
call fcn.00431efc
cmp dword [0x7b6c38], 0
mov byte [ebp + 0x5c], bl
je 0x443253
push ebx
mov esi, 0x7b6c28
push 0x6d4ba0
mov ecx, esi
call fcn.00437ff5
cmp eax, 0xffffffff
je 0x4431b3
cmp dword [0x7b6c3c], 8
mov eax, esi
mov byte [ebp + 0x73], bl
jb 0x443081
mov eax, dword [0x7b6c28]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0047181f
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
jb 0x4430ac
mov eax, dword [ebp - 0x28]
lea ecx, [ebp + 0x73]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x38c]
call fcn.0044078b
push 5
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push str.offer
mov byte [ebp - 4], 0x23
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00410407
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x38c]
call fcn.0048983b
mov ecx, dword [ebp + 0x54]
mov esi, eax
mov byte [ebp - 4], 0x23
cmp ecx, 0x10
jb 0x44312f
mov edx, dword [ebp + 0x40]
inc ecx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x38], edx
cmp ecx, 0x1000
jb 0x443126
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.004279ae
mov ecx, dword [ebp + 0x60]
mov edx, dword [ebp + 0x38]
push ecx
push edx
call fcn.006643a9
pop ecx
pop ecx
cmp byte [ebp + 0x73], 0
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
je 0x443192
test esi, esi
je 0x443192
mov edx, esi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x44314b
sub edx, ecx
mov ecx, 0x7ec0ec
push edx
push esi
call fcn.00410407
mov byte [ebp + 0x70], bl
lea eax, [ebp - 0x344]
push dword [ebp + 0x70]
mov ecx, 0x7ec310
push eax
call fcn.00427a9f
mov byte [ebp + 0x70], bl
lea eax, [ebp - 0x2fc]
push dword [ebp + 0x70]
mov ecx, 0x7ec328
push eax
call fcn.00427a9f
mov byte [ebp + 0x5c], 1
lea ecx, [ebp - 0x38c]
call fcn.004408fb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x21
call fcn.00410858
mov esi, 0x7b6c28
jmp 0x443233
xor eax, eax
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
mov word [ebp + 0x40], ax
push ebx
push 1
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x25
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.005b0332
push eax
mov byte [ebp - 4], 0x26
call fcn.005b0422
lea ecx, [ebp - 0x5c]
call fcn.00427afc
lea ecx, [ebp - 0x74]
call fcn.00427afc
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 0x21
cmp eax, 8
jb 0x443233
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x60], ecx
cmp eax, 0x1000
jb 0x44322a
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004279ae
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
push eax
push ecx
call fcn.006643a9
pop ecx
pop ecx
cmp dword [0x7b6c3c], 8
mov dword [0x7b6c38], ebx
jb 0x443248
mov esi, dword [0x7b6c28]
xor eax, eax
mov word [esi], ax
mov byte [0x7b6c58], bl
call fcn.00487fcf
mov esi, dword [0x7ec0fc]
test eax, eax
setne al
mov byte [ebp + 0x73], al
test esi, esi
jne 0x443284
push 0x1f
push 0x6d495c
mov ecx, 0x7ec0ec
call fcn.00410407
mov esi, dword [0x7ec0fc]
mov al, byte [ebp + 0x73]
test al, al
jne 0x443332
cmp dword [0x7ec100], 0x10
mov eax, 0x7ec0ec
mov edi, dword [0x7ec0ec]
jb 0x4432a2
mov eax, edi
push 0xa
push 0x6d4bb8
push ebx
push esi
push eax
call fcn.0044057b
cmp eax, 0xffffffff
jne 0x44332f
cmp dword [0x7ec100], 0x10
mov eax, 0x7ec0ec
jb 0x4432c6
mov eax, edi
push 0xa
push 0x6d4bb8
push ebx
push esi
push eax
call fcn.0044057b
cmp eax, 0xffffffff
je 0x44332f
push 0xffffffffffffffff
push eax
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push 0x7ec0ec
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00437739
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x27
push eax
push 0x6d4bc4
lea eax, [ebp - 0x58]
push eax
call fcn.00428032
push eax
mov ecx, 0x7ec0ec
call fcn.004100cf
lea ecx, [ebp - 0x58]
call fcn.00410858
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x21
call fcn.00410858
mov edi, dword [ebp + 0x2c]
cmp byte [ebp + 0x37], 0
mov esi, dword [ebp + 0x28]
je 0x443354
cmp esi, 4
jge 0x443354
call fcn.005b8757
push dword [0x79a638]
mov ecx, eax
call fcn.005ba63c
jmp 0x443363
cmp esi, 7
jg 0x4433dd
je 0x442d3e
sub esi, ebx
je 0x44167a
sub esi, 1
je 0x4433cb
sub esi, 1
je 0x4433b2
dec esi
sub esi, 1
jne 0x4433fa
call fcn.005b8757
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.0047d9cc
cmp byte [ebp + 0x35], 0
pop ecx
pop ecx
jne 0x4433ab
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.0047d9cc
pop ecx
pop ecx
mov ecx, esi
call fcn.005ba7ca
push 4
jmp 0x44162d
push dword [ebp + 0x78]
mov byte [0x7c8ad1], 1
push dword [ebp + 0x74]
call fcn.004324fd
push 2
jmp 0x44162d
push dword [ebp + 0x78]
push dword [ebp + 0x74]
call fcn.004324fd
push 1
jmp 0x44162d
mov eax, esi
sub eax, 8
je 0x442d3e
sub eax, 1
je 0x442d3e
sub eax, 3
je 0x44389b
push str.temp
lea eax, [ebp - 0x1e4]
push eax
call fcn.00466765
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x28
call fcn.004377a9
push eax
call fcn.004b11bf
mov al, byte [0x7ba6a6]
test al, al
jne 0x443457
push 0x104
lea eax, [ebp - 0x594]
mov ecx, 0x7ebde0
push eax
call fcn.00443f89
push eax
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x594]
push eax
call fcn.0042c4f2
mov al, byte [0x7ba6a6]
movzx eax, al
push eax
call fcn.0058ee26
mov eax, 0x7c8a40
push eax
push str.Version:__s
call fcn.00427b28
add esp, 8
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
mov ecx, eax
call fcn.00410659
push eax
push 0x6ce068
call fcn.00427b28
add esp, 8
lea ecx, [ebp - 0x58]
call fcn.0041087e
push str.HELPERLOG
lea ecx, [ebp + 4]
call fcn.004b09f8
test eax, eax
je 0x4434b9
push 1
call fcn.00440aca
mov ecx, eax
call fcn.004415ed
push dword [ebp - 0x34]
push dword [ebp - 0x2c]
push edi
call fcn.005912bc
lea ecx, [ebp + 4]
call fcn.004b0a23
call fcn.00454daf
cmp byte [0x7b6043], 0
mov byte [0x7ba6a4], al
je 0x4434fb
push ebx
push ebx
call fcn.0046f2a6
test eax, eax
je 0x4434fb
call fcn.004541ba
mov dword [0x7c8a30], eax
mov dword [0x7c8a34], edx
cmp byte [0x7b6131], 0
je 0x44350a
mov dword [0x7b5eac], ebx
call fcn.00465b7c
mov byte [0x7b5c0b], al
call fcn.004b11b1
and dword [0x7ba674], 0xbfffffff
call fcn.0048247a
mov ecx, 0x7bb3c8
call fcn.004409df
mov ecx, eax
call fcn.0047de40
call fcn.0042ff83
call fcn.0058aa1d
cmp eax, 1
je 0x443576
lea ecx, [ebp + 0x40]
call fcn.004101a1
push ebx
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.005c0a06
lea ecx, [ebp - 0x58]
call fcn.0041087e
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x28
call fcn.0041087e
call fcn.005c098a
lea ecx, [ebp - 0xc04]
call fcn.005880e8
push dword [ebp]
lea ecx, [ebp - 0xc04]
mov byte [ebp - 4], 0x2a
call fcn.005893ea
mov ecx, dword [0x7ed4fc]
test ecx, ecx
je 0x4435aa
push dword [ebp + 0x5c]
call fcn.004415c2
call fcn.004b53cd
call fcn.00466f88
lea ecx, [ebp - 0xe0]
call fcn.0040f47a
test al, al
jne 0x443610
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0043bb7d
push 1
push 0x28
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2b
call fcn.00410659
push eax
lea eax, [ebp + 0x44]
push eax
call fcn.00463cfa
test al, al
je 0x443604
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6ce190
lea eax, [ebp + 0x44]
push eax
call fcn.0047547d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
call fcn.0041087e
push 0x58890c
call fcn.005be524
call fcn.005bda8d
cmp eax, 7
jne 0x443629
call fcn.005be1a4
call fcn.005bdd94
call fcn.005c2ac8
test al, al
je 0x443645
call fcn.005c373d
test al, al
je 0x443645
call fcn.005c3e6c
mov esi, 0x7b670c
mov ecx, esi
call fcn.0040f47a
test al, al
je 0x443665
call fcn.005c1423
test al, al
jne 0x443665
push 0x6d3ca4
jmp 0x443697
mov ecx, esi
call fcn.0040f47a
test al, al
jne 0x443692
push esi
call fcn.005c1604
test al, al
jne 0x443692
push str.uTorrent_Player
push esi
call fcn.004401d1
test al, al
je 0x4436b0
call fcn.005c1423
test al, al
je 0x4436b0
push str.Default_Media_Player
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
push eax
mov ecx, esi
call fcn.004100cf
lea ecx, [ebp - 0x58]
call fcn.0041087e
mov esi, 0x7b6724
mov ecx, esi
call fcn.0040f47a
test al, al
je 0x4436de
push 0x6d3ca4
lea eax, [ebp - 0x58]
push eax
call fcn.0047181f
push eax
mov ecx, esi
call fcn.004100cf
lea ecx, [ebp - 0x58]
call fcn.0041087e
push ebx
push ebx
push 0x4848a3
call fcn.004604e2
call fcn.005b0e9f
cmp eax, 2
jne 0x4436f9
call fcn.005b0fc5
push 0xa14
call fcn.00664379
pop ecx
mov dword [ebp + 0x74], eax
mov byte [ebp - 4], 0x2c
test eax, eax
je 0x44371e
push dword [0x7c8a28]
mov ecx, eax
call fcn.0045d3e1
jmp 0x443720
mov eax, ebx
mov esi, 0x7b6a38
mov byte [ebp - 4], 0x2a
mov ecx, esi
mov dword [0x7b4e34], eax
call fcn.0040f47a
test al, al
jne 0x443765
lea eax, [ebp - 0x58]
push eax
call fcn.005aaf51
push esi
push 0x7b6790
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00410659
push eax
call fcn.0047c4e3
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x2a
call fcn.0041087e
cmp byte [ebp + 0x3f], 0
je 0x443786
call fcn.0058aa1d
test eax, eax
je 0x443786
lea ecx, [ebp - 0xc04]
call fcn.00443f85
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.004792cf
test al, al
je 0x44379a
push str.IPv6_is_installed
call fcn.004704f0
pop ecx
push 1
lea ecx, [ebp + 0x77]
call fcn.00440773
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x2e
push eax
call fcn.00484371
test al, al
je 0x4437d4
sub esp, 0x10
lea esi, [ebp - 0x1cc]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004704f0
add esp, 0x14
lea ecx, [ebp + 0x77]
mov byte [ebp - 4], 0x2a
call fcn.0042a089
cmp byte [ebp + 0x58], 0
jne 0x4437fa
call fcn.005b8757
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.005ba8d8
push ebx
push 0x119
call fcn.00481e59
call fcn.004ba306
call fcn.005be918
cmp byte [0x7c8ad1], 0
jne 0x44382b
mov ecx, 0x7ebde0
call fcn.0043fdef
test al, al
jne 0x44382b
call fcn.005985cd
call fcn.0049b651
mov esi, eax
lea eax, [ebp + 0x74]
push eax
mov ecx, esi
call fcn.00443f2f
lea eax, [ebp + 0x78]
mov ecx, esi
push eax
call fcn.00443f3d
jmp 0x443861
lea ecx, [ebp + 0x74]
call fcn.004409f1
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp + 0x74]
call fcn.004409f7
lea eax, [ebp + 0x78]
push eax
lea ecx, [ebp + 0x74]
call fcn.004409c2
test al, al
jne 0x44384a
mov ecx, 0x7ebde0
call fcn.0059b7a2
call fcn.004b0c4a
call fcn.005b8757
mov ecx, eax
call fcn.005baec5
call fcn.005874a3
call fcn.00427b28
jmp 0x44167a
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x78]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x6d4bd4
call fcn.004324fd
push 0xc
jmp 0x44162d