Function at 0x433360
Capabilities:
Get common file path
Get startup folder
Persist via run registry key
Query environment variable
Set file attributes
Terminate process

Disassembly:
mov eax, 0x669885
call fcn.006313fc
sub esp, 0xbb4
push ebx
push ebp
push esi
push edi
push str.classic_uninstall
lea ecx, [esp + 0x58]
call fcn.00409ba7
sub esp, 0x18
lea eax, [esp + 0x6c]
mov dword [esp + 0x2c], esp
mov ecx, esp
xor ebx, ebx
mov dword [esp + 0xbe4], ebx
push eax
call fcn.0040a0c6
xor eax, eax
lea ecx, [esp + 0x2b]
inc eax
mov byte [esp + 0xbe4], al
call fcn.0059af4a
push eax
lea ecx, [esp + 0x2f]
mov byte [esp + 0xbe8], bl
call fcn.0059b047
or dword [esp + 0xbcc], 0xffffffff
lea ecx, [esp + 0x54]
xor ebp, ebp
push ebx
inc ebp
push ebp
call fcn.0040a0e9
mov edi, 0x104
lea eax, [esp + 0x7b4]
push edi
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
call fcn.00460700
test al, al
jne 0x4334a8
cmp byte [0x75dcc0], 6
jb 0x4334a8
push str._UNINSTALL
lea ecx, [esp + 0x1c]
call fcn.004249e7
mov dword [esp + 0xbcc], 2
cmp byte [esp + 0xbd8], bl
je 0x433440
mov esi, 0x68a200
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [esp + 0x20]
call fcn.004234f9
cmp byte [esp + 0xbdc], 0
je 0x433461
mov esi, str.__REMSETTINGS
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [esp + 0x20]
call fcn.004234f9
xor eax, eax
mov dword [esp + 0x68], 7
mov dword [esp + 0x64], ebx
mov word [esp + 0x54], ax
cmp dword [esp + 0x2c], 8
mov eax, dword [esp + 0x18]
mov byte [esp + 0xbcc], 3
jae 0x43348b
lea eax, [esp + 0x18]
push ebx
push ebp
push ebx
lea ecx, [esp + 0x60]
push ecx
push eax
lea eax, [esp + 0x7c8]
push eax
call fcn.0042fa11
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov bl, byte [esp + 0xbd8]
test bl, bl
jne 0x43351b
lea ecx, [esp + 0xb4]
call fcn.00584133
mov dword [esp + 0xb4], 0x689fec
lea eax, [esp + 0xbdc]
mov dword [esp + 0xbcc], 4
push eax
push 0xfe
call fcn.005834b1
push eax
lea ecx, [esp + 0xc0]
call fcn.00584db5
or dword [esp + 0xbcc], 0xffffffff
lea ecx, [esp + 0xb4]
cmp byte [esp + 0xe8], bl
jne 0x433516
call fcn.005841a5
jmp 0x433b63
call fcn.005841a5
call fcn.00433184
test al, al
jne 0x43354e
test bl, bl
jne 0x43354e
push 0x10
push 0x7c8
call fcn.00582370
push eax
push 0x7c9
call fcn.00582370
push eax
xor edi, edi
push edi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x433b63
push dword [esp + 0xbdc]
call fcn.004814fd
xor ebx, ebx
mov dword [0x791908], ebx
mov dword [0x791900], ebx
mov dword [0x791904], ebx
call fcn.004703fb
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 8
call fcn.0042ec39
lea ecx, [esp + 0x30c]
call fcn.0058f700
push 8
push 0x75f8d8
lea ecx, [esp + 0x314]
mov dword [esp + 0xbd4], 5
call fcn.0059003c
push edi
lea eax, [esp + 0x9c0]
mov esi, reloc.WS2_32.dll_accept
push eax
push str.InstallLocation
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalluTorrent
push esi
call fcn.00481e0a
test al, al
je 0x433884
push edi
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0x9c4]
push eax
call dword [sym.imp.KERNEL32.DLL_ExpandEnvironmentStringsW]
push ebp
lea eax, [esp + 0x7b8]
push eax
call fcn.0045dcfa
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.004243aa
push eax
sub esp, 0x18
mov byte [esp + 0xbec], 6
lea eax, [esp + 0x124]
mov ecx, esp
push eax
call fcn.004249e7
lea eax, [esp + 0x38]
push eax
call fcn.0045dbfb
push ebx
push ebp
lea ecx, [esp + 0xa4]
mov byte [esp + 0xbd4], 8
call fcn.0042341c
push ebp
lea eax, [esp + 0x7b8]
push eax
call fcn.0045dcfa
push eax
lea eax, [esp + 0xf4]
push eax
call fcn.004243aa
push eax
sub esp, 0x18
mov byte [esp + 0xbec], 9
lea eax, [esp + 0x9dc]
mov ecx, esp
push eax
call fcn.004249e7
lea eax, [esp + 0x8c]
push eax
call fcn.0045dbfb
push ebx
push ebp
lea ecx, [esp + 0xf4]
mov byte [esp + 0xbd4], 0xb
call fcn.0042341c
cmp dword [esp + 0x2c], 8
mov eax, dword [esp + 0x18]
jae 0x4336a7
lea eax, [esp + 0x18]
push eax
call fcn.00477c1e
cmp dword [esp + 0x80], 8
mov eax, dword [esp + 0x6c]
jae 0x4336bf
lea eax, [esp + 0x6c]
push eax
call fcn.00477c1e
cmp dword [esp + 0x2c], 8
mov eax, dword [esp + 0x18]
jae 0x4336d4
lea eax, [esp + 0x18]
push eax
call fcn.00433b79
cmp dword [esp + 0x80], 8
mov eax, dword [esp + 0x6c]
jae 0x4336ec
lea eax, [esp + 0x6c]
push eax
call fcn.00433b79
push ebp
push 0x28
lea eax, [esp + 0x3ac]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x18
pop edi
test eax, eax
je 0x433821
lea ecx, [esp + 0x3a4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x433719
sub ecx, edx
lea eax, [esp + 0x3a4]
sar ecx, 1
push ecx
push eax
lea eax, [esp + 0x10c]
push eax
call fcn.00632b09
add esp, 0xc
test eax, eax
jne 0x433821
lea eax, [esp + 0x5ac]
push eax
call fcn.0042a186
lea eax, [esp + 0x5ac]
push eax
lea ecx, [esp + 0xa0]
call fcn.004249e7
push ebp
lea eax, [esp + 0xa0]
mov byte [esp + 0xbd0], 0xc
push eax
sub esp, 0x18
lea eax, [esp + 0x3c4]
mov ecx, esp
push eax
call fcn.004249e7
lea eax, [esp + 0x74]
push eax
call fcn.0045dbfb
push ebx
push ebp
lea ecx, [esp + 0xa4]
call fcn.0042341c
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
cmp dword [esp + 0x68], 8
mov eax, dword [esp + 0x54]
mov byte [esp + 0xbcc], 0xf
jae 0x4337c8
lea eax, [esp + 0x54]
push ebx
push eax
lea eax, [esp + 0x50]
push eax
call fcn.0045ea15
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
sub eax, ecx
cdq
idiv edi
cmp eax, ebp
jne 0x43380d
push 0x689bac
call fcn.00434c1f
test eax, eax
jne 0x43380d
mov ecx, ebx
movzx eax, word [esp + ecx + 0x3a4]
lea ecx, [ecx + 2]
mov word [esp + ecx + 0x102], ax
test ax, ax
jne 0x4337f5
lea ecx, [esp + 0x48]
call fcn.00434945
push ebx
push ebp
lea ecx, [esp + 0x5c]
call fcn.0042341c
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
push ebx
lea eax, [esp + 0x108]
mov byte [esp + 0xbd0], 0x10
push eax
lea eax, [esp + 0x38]
push eax
call fcn.0045ea15
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x30]
sub eax, dword [esp + 0x30]
cdq
idiv edi
cmp ebp, eax
sbb bl, bl
inc bl
call fcn.00434945
xor edi, edi
lea ecx, [esp + 0x6c]
push edi
push ebp
call fcn.0042341c
push edi
push ebp
lea ecx, [esp + 0x20]
mov byte [esp + 0xbd4], 5
call fcn.0042341c
jmp 0x433886
xor edi, edi
push 0x689954
lea eax, [esp + 0x88]
push eax
call fcn.0046e883
cmp byte [esp + 0xbdc], 0
mov byte [esp + 0xbcc], 0x11
je 0x433955
cmp dword [esp + 0x94], 0
je 0x433955
cmp dword [esp + 0x98], 8
mov eax, dword [esp + 0x84]
jae 0x4338d4
lea eax, [esp + 0x84]
push eax
call fcn.0045e704
push 0x68a2c4
push 0x68a2e0
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0x24]
push 0x68a2e4
push eax
call fcn.0047224d
add esp, 0x14
cmp dword [esp + 0x2c], 8
mov eax, dword [esp + 0x18]
mov byte [esp + 0xbcc], 0x12
jae 0x433915
lea eax, [esp + 0x18]
push eax
call fcn.0046e3bf
test eax, eax
je 0x43393a
cmp dword [esp + 0x2c], 8
mov eax, dword [esp + 0x18]
jae 0x43392e
lea eax, [esp + 0x18]
push 0x80
push eax
call dword [sym.imp.KERNEL32.DLL_SetFileAttributesW]
xor eax, eax
mov byte [esp + 0xbcc], 0x11
inc eax
lea ecx, [esp + 0x18]
push edi
push eax
mov bl, al
call fcn.0042341c
xor ebp, ebp
inc ebp
call fcn.0042dca4
test al, al
je 0x43396e
push 0x689bac
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push esi
call fcn.00481b85
push 0x68a2f4
push 0x68a328
call fcn.0042e9a7
push str.application_x_bittorrentsearchdescriptionxml
push 0x68a39c
call fcn.0042e9a7
push str.application_x_bittorrent_skin
push 0x68a3ec
call fcn.0042e9a7
push str.application_x_bittorrent_key
push 0x68a438
call fcn.0042e9a7
push str.application_x_bittorrent_app
push 0x68a484
call fcn.0042e9a7
push str.application_x_bittorrent_appinst
push 0x68a4dc
call fcn.0042e9a7
push str.Magnet
call fcn.0042ebab
push str.bittorrent
call fcn.0042ebab
push 0x68a486
call fcn.0042ebab
push 0x68a4de
call fcn.0042ebab
push 0x68a3ee
call fcn.0042ebab
push 0x68a43a
call fcn.0042ebab
movzx eax, byte [0x75dcc0]
cmp eax, 5
push str.SoftwareClassesuTorrent
sbb esi, esi
neg esi
add esi, reloc.WS2_32.dll_accept
push esi
call fcn.004817ec
push str.SoftwareClassesApplicationsuTorrent.exe
push esi
call fcn.004817ec
push str.SoftwareBitTorrent
mov esi, reloc.WS2_32.dll_accept
push esi
call fcn.004817ec
push str.SoftwareBitTorrentuTorrent
push esi
call fcn.004817ec
push str.SoftwareBitTorrentengine
push esi
call fcn.004817ec
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalluTorrent
push esi
call fcn.004817a4
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalluTorrent
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004817a4
test bl, bl
je 0x433b3c
xor eax, eax
mov dword [esp + 0x44], 7
mov dword [esp + 0x40], edi
mov word [esp + 0x30], ax
cmp dword [0x75dcc0], 0x80000000
mov esi, str.rmdir__S__Q
mov byte [esp + 0xbcc], 0x13
jb 0x433aa7
mov esi, str.deltree__Y
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [esp + 0x38]
call fcn.00434a57
mov esi, dword [sym.imp.KERNEL32.DLL_GetShortPathNameW]
lea eax, [esp + 0x104]
push edi
push edi
push eax
call esi
push eax
lea eax, [esp + 0x5b0]
push eax
lea eax, [esp + 0x10c]
push eax
call esi
test eax, eax
jne 0x433afa
lea eax, [esp + 0x104]
push eax
call fcn.004236bc
pop ecx
push eax
lea eax, [esp + 0x108]
jmp 0x433b10
lea eax, [esp + 0x5ac]
push eax
call fcn.004236bc
pop ecx
push eax
lea eax, [esp + 0x5b0]
push eax
lea ecx, [esp + 0x38]
call fcn.004234f9
cmp dword [esp + 0x44], 8
mov eax, dword [esp + 0x30]
jae 0x433b29
lea eax, [esp + 0x30]
push eax
call fcn.00592f4e
push edi
push ebp
lea ecx, [esp + 0x38]
call fcn.0042341c
jmp 0x433b41
call fcn.005931b2
push edi
push ebp
lea ecx, [esp + 0x8c]
call fcn.0042341c
or dword [esp + 0xbcc], 0xffffffff
lea ecx, [esp + 0x30c]
call fcn.004251f2
mov ecx, dword [esp + 0xbc4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
leave
ret 8