Function at 0x45f6c5
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x64
mov eax, 0x6d159f
call fcn.006899cc
sub esp, 0xc54
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov eax, ebx
lea ecx, [ebp + 4]
push ebx
push ebx
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], eax
call fcn.004cfeec
push dword [ebp + 0x78]
lea ecx, [ebp + 4]
mov dword [ebp - 4], ebx
push dword [ebp + 0x74]
call fcn.004cff5a
push str.INSTALLCHECK
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x45f73c
cmp dword [esi + 8], 2
jl 0x45f73c
push 2
mov ecx, esi
call fcn.00461fb2
push 1
mov ecx, esi
call fcn.0045eccc
push eax
call fcn.00457a94
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
lea ecx, [ebp - 0x1c0]
call fcn.004d01cb
push str.logfile
lea ecx, [ebp + 4]
mov byte [ebp - 4], 1
call fcn.004d0171
mov edi, eax
mov dword [ebp + 0x34], ebx
mov dword [ebp - 0x30], edi
test edi, edi
je 0x45f788
push 2
pop eax
cmp dword [edi + 8], eax
jl 0x45f77a
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
mov dword [edi + 0x14], eax
jmp 0x45f77f
mov esi, str.bt.log
mov dword [ebp + 0x34], esi
mov dword [ebp - 0x1bc], esi
push 0x6fc278
lea ecx, [ebp + 4]
call fcn.004d0171
mov dword [ebp + 0x30], eax
test eax, eax
je 0x45f7a5
mov byte [0x7c7de0], 1
jmp 0x45f7b7
cmp byte [0x7f4bdc], 0
sete al
dec al
and byte [0x7c7de0], al
push str.LOGREMOTEFRAME
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45f7cf
or dword [0x7f4fbc], 0xffffffff
push 0x7c7c54
call fcn.0048519c
mov edi, 0x7da6f8
mov dword [ebp - 0x1a0], 3
push edi
mov dword [ebp - 0x19c], 6
mov dword [ebp - 0x198], ebx
mov byte [ebp - 0x194], 1
mov dword [ebp - 0x1a8], 0xb788
mov dword [ebp - 0x1a4], 0x6fc2a0
mov dword [ebp - 0x174], 0x6fc2bc
mov dword [ebp - 0x1b8], 0x6fc2cc
mov dword [ebp - 0x1b4], 0x6fa7d0
mov dword [ebp - 0x1ac], 0x6fc2c0
mov dword [ebp - 0x1b0], 0x6f689c
call fcn.0048519c
push str.TORRENTPANE
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
call fcn.004520a6
test al, al
jne 0x45f867
test esi, esi
je 0x45f86e
push ebx
push edi
call fcn.004843d0
call fcn.005de3bf
push str.PORTABLE
lea ecx, [ebp + 4]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x38], bl
call fcn.004d0171
test eax, eax
je 0x45f89b
mov byte [ebp - 0x38], 1
mov dword [0x7e6388], 0x10
push 0x6fc30c
lea ecx, [ebp + 4]
mov byte [0x81d240], bl
call fcn.004d0171
test eax, eax
je 0x45f8b9
mov byte [0x81d240], 1
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x12c], eax
push 0x3f
push str.http:__pr.apps.bittorrent.com_client_webui__s_client_webui.json
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 2
call fcn.00414b60
lea eax, [ebp]
mov dword [ebp - 0x190], 0x7c1c04
push eax
mov ecx, 0x7ecdf0
mov dword [ebp], 0x4d9f7e
call fcn.0045ea13
lea eax, [ebp - 0x1c0]
push eax
call fcn.004d0449
push str.CAMPAIGN
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45f93f
push 2
pop ecx
cmp dword [eax + 8], ecx
jl 0x45f93f
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax]
push dword [eax + ecx*4 + 4]
call fcn.00699ec3
pop ecx
push eax
mov ecx, 0x7e5850
call fcn.00484a8f
push str.BROWSER
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45f9e3
push 2
pop ecx
cmp dword [eax + 8], ecx
jl 0x45f9e3
mov dword [eax + 0x14], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov eax, dword [eax + ecx*4 + 4]
mov ecx, dword [ebp + 0x58]
or ecx, 4
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
test eax, eax
je 0x45f991
push eax
lea ecx, [ebp + 0x40]
call fcn.004482e2
jmp 0x45f994
mov dword [ebp + 0x58], ecx
mov byte [ebp], bl
lea eax, [ebp + 0x40]
push dword [ebp]
mov ecx, 0x7e6770
push eax
call fcn.00448215
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x45f9e3
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x38], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x45f9da
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov ecx, 0x7e5850
call fcn.0048427b
push eax
push fcn.005d1a55
call fcn.005e4570
push str.CRASH
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45fa1a
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ea0c0], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp + 4]
call fcn.004d0171
push 7
mov esi, eax
mov dword [ebp - 0xa8], ebx
pop edi
xor eax, eax
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], edi
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 3
test esi, esi
je 0x45fa88
cmp dword [esi + 8], 2
jl 0x45fa88
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0xa8]
call fcn.004482e2
push 0x6fc3a8
lea ecx, [ebp - 0xa8]
mov dword [esi + 0x14], 2
call fcn.00457121
movzx eax, al
xor eax, 1
jmp 0x45fa8d
call fcn.0047d47c
push eax
call fcn.005cfbd6
push ebx
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 1
push eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0xf0], ebx
push eax
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp], eax
call fcn.005835ef
push 2
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push 0x6fc3b0
mov esi, eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00414b60
lea ecx, [esi + 0xe0]
mov byte [ebp - 4], 4
lea eax, [ebp + 0x40]
cmp ecx, eax
je 0x45fb0f
cmp dword [ebp + 0x54], 0x10
jb 0x45fb06
mov eax, dword [ebp + 0x40]
push dword [ebp + 0x50]
push eax
call fcn.00414b60
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 3
cmp eax, 0x10
jb 0x45fb48
mov ecx, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x38], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x45fb3f
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x38]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b4
call fcn.00582eb1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ecf9
call fcn.00582eb1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b5
call fcn.00582eb1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ecf8
call fcn.00582eb1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x615b6
call fcn.00582eb1
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], ebx
push eax
mov ecx, esi
mov dword [ebp - 0x14], 0x6ec74
call fcn.00582eb1
push 0x7bbb18
push ebx
mov ecx, esi
call fcn.00585b96
push 0x7bbb78
push 1
mov ecx, esi
call fcn.00585b96
cmp dword [ebp], 0
jne 0x45fbff
mov eax, str.loaded
mov ecx, 0x6fc3e4
jmp 0x45fc09
mov eax, str.failed_to_load
mov ecx, 0x6fc3f4
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.0040f570
add esp, 0xc
push str.Process_started
call fcn.00412ae0
mov esi, ebx
cmp dword [ebp + 0x74], esi
je 0x45fc3c
mov eax, dword [ebp + 0x78]
push dword [eax + esi*4]
call fcn.00412ae0
inc esi
cmp esi, dword [ebp + 0x74]
jne 0x45fc29
xor ebx, ebx
push str.End_Args
call fcn.00412ae0
mov ecx, 0x7eace0
call fcn.00461f16
mov ecx, 0x7ead08
call fcn.00461e1c
mov ecx, 0x7eacf4
call fcn.00461e74
call fcn.004d28c6
call fcn.005db537
push 0x81d294
call fcn.004b11c6
mov dword [ebp - 0x34], 0x6fbe64
mov byte [ebp - 4], 5
call fcn.005a8a9b
lea eax, [ebp - 0x34]
push eax
push 0x6fc458
call fcn.004db1c9
push str.SetDllDirectoryA
push 0x6f60d8
call fcn.00473e2b
test eax, eax
je 0x45fcb0
push 0x77a89f
call eax
call fcn.0040f570
call fcn.00452031
test al, al
je 0x45fdc2
call fcn.00473537
test al, al
je 0x45fdc2
mov byte [0x81c390], 1
call fcn.0045289d
test al, al
je 0x45fdb9
mov byte [0x81c392], 1
call fcn.005d441c
call fcn.00485bf1
mov al, byte [0x7e5612]
mov byte [ebp + 0x67], al
mov byte [0x7e5612], 1
call fcn.00486993
push 1
push ebx
call fcn.005cd627
test al, al
je 0x45fdaf
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], 0x6fbe5c
cmp eax, 8
jb 0x45fd60
mov ecx, dword [ebp - 0xa8]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x74], eax
mov dword [ebp + 0x78], ecx
cmp eax, 0x1000
jb 0x45fd57
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x78]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], edi
mov word [ebp - 0xa8], ax
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x160]
call fcn.00461dfe
lea ecx, [ebp - 0x18c]
call fcn.0040fad0
lea ecx, [ebp + 4]
call fcn.004cff49
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add ebp, 0x68
leave
ret 0xc
mov al, byte [ebp + 0x67]
mov byte [0x7e5612], al
jmp 0x45fdcc
mov word [0x81c391], 1
call fcn.005d441c
call fcn.00485bf1
push str.NOTIFYUPDATE
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
push 0x30
pop edi
test esi, esi
je 0x45fe05
cmp dword [esi + 8], 2
mov al, 1
jl 0x45fe00
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [ecx + edx*4 + 4]
cmp word [eax], di
mov dword [esi + 0x14], 2
setne al
mov byte [0x7e5a0e], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x45fe39
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x45fe34
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov eax, dword [ecx + eax*4 + 4]
cmp word [eax], di
mov dword [esi + 0x14], edx
setne al
mov byte [0x7e5a0d], al
push 0x7e5618
push str.Settings_path:___s__n
call fcn.0040f570
add esp, 8
lea ecx, [ebp + 4]
push str.AUTOUPDATE
call fcn.004d0171
mov edi, eax
test edi, edi
je 0x45ff12
mov ecx, edi
mov byte [ebp + 0x70], 1
mov dword [ebp + 0x78], 0x1a
call fcn.004308f0
mov dword [ebp + 0x74], eax
cmp eax, 2
jl 0x45fe92
push 1
mov ecx, edi
call fcn.0045eccc
mov esi, eax
test eax, eax
je 0x45fe94
cmp word [eax], bx
jne 0x45fe9f
jmp 0x45fe94
mov esi, ebx
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.00412af0
pop ecx
push str.NORUN
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45feb8
mov byte [ebp + 0x70], bl
call fcn.005bdfc7
mov eax, dword [ebp + 0x74]
cmp eax, 3
jl 0x45fed5
push 2
mov ecx, edi
call fcn.0045eccc
push eax
call fcn.0046201a
mov dword [ebp + 0x78], eax
mov eax, dword [ebp + 0x74]
push 3
push eax
call fcn.0045ea36
push eax
mov ecx, edi
call fcn.00461fb2
test esi, esi
je 0x45f735
cmp word [esi], bx
je 0x45f735
push dword [ebp + 0x78]
push dword [ebp + 0x70]
push esi
call fcn.005cc710
test al, al
je 0x45f735
xor ebx, ebx
inc ebx
jmp 0x45f735
cmp dword [ebp - 0x30], 0
je 0x45ff42
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x45ff2f
push eax
push str.Setting_log_file_to__s
call fcn.0040f570
add esp, 8
jmp 0x45ff34
mov eax, str.stdout
push eax
push str.Log_file_set_to_path:__s__n
call fcn.0040f570
add esp, 8
push str.AUTOMATION
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x45ff89
push 1
call fcn.005b0331
cmp dword [esi + 8], 2
jl 0x45ff8f
push 0x75
pop eax
mov word [0x7c96ec], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x7c96fc
call fcn.00449524
mov dword [esi + 0x14], 2
jmp 0x45ff8f
push ebx
call fcn.005b0331
push str.MINIMIZED
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45ffa7
mov byte [0x7f8549], 1
push str.NOTFAREA
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x45ffbf
mov byte [0x7f854a], 1
push str.AUTORESTARTTIME
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x45fff2
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.00699ec3
mov dword [0x7da8c4], eax
mov dword [0x7da8c8], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x81bad4
call fcn.0047b95a
push dword [ebp + 0x70]
mov ecx, 0x81bb0c
call fcn.005bcfb0
call fcn.004a64cf
push str.recover
lea ecx, [ebp + 4]
mov dword [0x81bb10], eax
mov byte [ebp - 0x2c], bl
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x4600c8
mov dword [ebp + 0x40], ebx
mov byte [ebp - 0x2c], 1
mov byte [0x81bdf0], 1
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
push 1
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.005df89b
lea ecx, [ebp - 0x28]
call fcn.0040fad0
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x46008f
cmp dword [ebp + 0x54], 0x10
lea edx, [ebp + 0x40]
mov dword [esi + 0x14], eax
jb 0x46007f
mov edx, dword [ebp + 0x40]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.005e49e7
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 5
cmp eax, 0x10
jb 0x4600c8
mov ecx, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x38], ecx
cmp eax, 0x1000
jb 0x4600bf
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x38]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
cmp dword [0x7e63dc], 0
mov al, bl
mov byte [ebp + 0x73], al
mov byte [ebp + 0x67], al
mov byte [ebp + 0x3f], al
mov byte [ebp + 0x2f], al
jne 0x4600e9
mov dword [0x7e63dc], 0x6c1b788
push str.WSA_LOG
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
setne byte [0x7e6180]
call fcn.004dd2b8
mov dword [ebp - 0xc8], ebx
mov esi, 0x6f6108
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], esi
call fcn.0046e316
push str.dht_feed.dat
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 8
push eax
call fcn.004848ce
cmp dword [ebp + 0x54], 8
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 9
jb 0x460146
mov eax, dword [ebp + 0x40]
lea ecx, [ebp - 0xcc]
push ecx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0048446d
mov ecx, dword [ebp + 0x58]
or ecx, 1
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x5c], ecx
mov ecx, eax
call fcn.00461fc0
test eax, eax
jne 0x46017f
cmp byte [ebp - 0xbc], 4
mov byte [ebp + 0x66], 1
je 0x460182
mov byte [ebp + 0x66], bl
mov eax, dword [ebp + 0x58]
mov dword [ebp - 4], 9
test al, 1
je 0x4601a1
and eax, 0xfffffffe
lea ecx, [ebp - 0x20]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x5c], eax
call fcn.004a5d2b
cmp byte [ebp + 0x66], 0
je 0x4601be
cmp byte [ebp - 0xbc], 4
lea eax, [ebp - 0xcc]
je 0x4601b8
mov eax, ebx
push eax
call fcn.004a5113
lea ecx, [ebp + 0x40]
call fcn.0044823e
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xcc], esi
call fcn.0046d04d
mov byte [ebp - 4], 5
call fcn.005b2aac
push str.NOINSTALL
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460209
mov al, 1
mov dword [0x81be18], 0xb788
mov byte [ebp + 0x73], al
mov byte [ebp + 0x67], al
jmp 0x46020c
mov al, byte [ebp + 0x73]
push ebx
push ebx
mov dword [ebp - 0x30], eax
mov dword [ebp + 0x28], eax
call fcn.00461921
call fcn.0045aee6
push str.verifyhta
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x46033d
cmp dword [esi + 8], 2
jl 0x46033d
push 2
mov ecx, esi
call fcn.00461fb2
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.DLL_AttachConsole]
test eax, eax
je 0x460298
push 1
call fcn.00695c8f
push eax
push 0x6fc684
mov edi, 0x6fc688
push edi
call fcn.0069b87a
push 2
call fcn.00695c8f
push eax
push 0x6fc684
push edi
call fcn.0069b87a
push ebx
call fcn.00695c8f
push eax
push 0x6fc690
push str.CONIN_
call fcn.0069b87a
add esp, 0x30
push str.Verifying_Embedded_HTA.._r_n
call fcn.00448378
pop ecx
push 1
mov ecx, esi
call fcn.0045eccc
push eax
lea ecx, [ebp - 0x60]
call fcn.00462532
push ebx
push ebx
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
mov dword [ebp + 0x78], ebx
call fcn.0045c56c
lea eax, [ebp + 0x78]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0046611f
push 5
pop ecx
push 0x6c
mov byte [ebp + 0x77], al
lea edi, [ebp - 0x268]
lea eax, [ebp - 0x254]
mov esi, str.VerifyHTA_Success_r_n
push ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0068ccc0
mov bl, byte [ebp + 0x77]
add esp, 0xc
test bl, bl
jne 0x460323
push dword [ebp + 0x78]
lea eax, [ebp - 0x268]
push str.VerifyHTA_Failed_with_error:__u_r_n
push 0x80
push eax
call fcn.00410dc0
add esp, 0x10
lea eax, [ebp - 0x268]
push eax
call fcn.00448378
xor eax, eax
test bl, bl
pop ecx
sete al
push eax
jmp 0x45f736
cmp dword [0x7e625c], 0
je 0x460357
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x46035e
mov byte [0x7e6761], 1
push str.LAUNCHED
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
lea ecx, [ebp + 4]
push 0x6fc724
setne byte [ebp + 0x34]
call fcn.004d0171
test eax, eax
lea ecx, [ebp - 0xb4]
setne byte [ebp + 0x60]
push dword [ebp + 0x60]
push dword [ebp + 0x34]
call fcn.0045c56c
cmp dword [0x7e6398], 0
mov byte [ebp - 4], 0xe
jne 0x4603eb
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045cdeb
add eax, 4
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.0045b928
mov ecx, 0x7e63e0
cmp eax, ecx
je 0x4603d7
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.00416240
lea ecx, [ebp + 0x40]
call fcn.0040fad0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xe
call fcn.00462599
mov esi, dword [ebp + 0xc]
mov byte [ebp + 0x38], bl
mov byte [ebp + 0x66], bl
test esi, esi
je 0x46043c
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x46043c
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push 0x6fc72c
push dword [eax + ecx*4]
call fcn.0048ff8f
test al, al
jne 0x460438
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push 0x6f6900
push dword [eax + ecx*4]
call fcn.00490018
test al, al
jne 0x460438
inc edi
cmp edi, dword [esi + 8]
jl 0x460400
jmp 0x46043c
mov byte [ebp + 0x66], 1
mov edi, 0x6fc73c
lea ecx, [ebp + 4]
push edi
call fcn.004d0171
test eax, eax
jne 0x460524
push 0x6fc740
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x460524
push str.NOINSTALL
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x460524
cmp byte [ebp + 0x34], al
je 0x460496
push 0x6fc724
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460524
push str.RELOCATED
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x460524
push str.FEATURE
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x460524
push str.HYDRA_EXCEPTION
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x460524
cmp dword [0x7dafa4], eax
jne 0x460524
cmp byte [ebp + 0x34], al
je 0x4604db
cmp byte [ebp + 0x66], al
jne 0x460524
cmp dword [0x7e625c], 0
mov byte [ebp - 4], 0x10
jne 0x460519
cmp byte [0x7e6761], 0
je 0x460519
push str.LANG
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
call fcn.00485bf1
push ebx
push ebx
push esi
call fcn.005d4630
mov byte [0x7e5612], 1
call fcn.00486993
mov byte [ebp + 0x38], 1
mov dword [ebp - 4], 0xe
mov eax, dword [0x7e625c]
test eax, eax
je 0x46056b
cmp eax, 0x6c1b788
je 0x46056b
call fcn.004874f8
call fcn.005afab6
jmp 0x460572
mov byte [0x7e5612], 1
push edi
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x46059f
push 0x6fc740
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
jne 0x46059f
lea ecx, [ebp - 0xb4]
call fcn.0046347b
test al, al
jne 0x4605a9
mov dword [0x7e625c], 0x6c1b788
push 3
pop eax
push str.UNINSTALL
lea ecx, [ebp + 4]
mov byte [ebp + 0x66], bl
mov dword [ebp + 0x28], eax
call fcn.004d0171
lea ecx, [ebp + 4]
test eax, eax
je 0x4605ff
push edi
mov byte [ebp + 0x78], bl
mov byte [ebp + 0x74], bl
call fcn.004d0171
test eax, eax
je 0x4605da
mov byte [ebp + 0x78], 1
push str.REMSETTINGS
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x4605ef
mov byte [ebp + 0x74], 1
push dword [ebp + 0x74]
push dword [ebp + 0x78]
call fcn.0045619e
jmp 0x45f735
push str.BIGDUMP
call fcn.004d0171
test eax, eax
je 0x460614
mov byte [0x7ea0c5], 1
xor eax, eax
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], 7
mov word [ebp - 0xe4], ax
push str.PAIR
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x12
call fcn.004d0171
test eax, eax
je 0x460669
cmp dword [eax + 8], 1
jle 0x460669
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0xe4]
call fcn.004482e2
push str.DIRECTORY
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460696
cmp dword [eax + 8], 1
jle 0x460696
mov edx, dword [eax + 4]
mov ecx, dword [eax]
mov ecx, dword [ecx + edx*4 + 4]
mov dword [0x7f854c], ecx
mov dword [eax + 0x14], 2
push str.HIDE
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x4606ae
mov byte [0x81bb15], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], eax
mov word [ebp - 0x128], cx
mov dword [ebp - 0xfc], eax
xor eax, eax
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x100], ebx
mov word [ebp - 0x110], ax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x15
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x460728
cmp dword [esi + 8], 1
jle 0x460728
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x128]
call fcn.004482e2
mov dword [esi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x46075c
cmp dword [esi + 8], 1
jle 0x46075c
mov ecx, dword [esi]
mov edx, dword [esi + 4]
push dword [ecx + edx*4 + 4]
lea ecx, [ebp - 0x110]
call fcn.004482e2
mov dword [esi + 0x14], 2
push ebx
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.005d2c85
mov eax, dword [ebp - 0x40]
mov edi, ebx
mov ecx, dword [ebp - 0x44]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x4607aa
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.005d204e
mov eax, dword [ebp - 0x40]
inc edi
mov ecx, dword [ebp - 0x44]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x46078d
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp + 4]
call fcn.004d0171
mov edx, eax
test edx, edx
je 0x460928
xor eax, eax
mov dword [ebp - 0x90], ebx
push 7
inc eax
mov dword [ebp - 0x80], ebx
pop esi
xor ecx, ecx
mov byte [0x7e6258], al
mov dword [ebp - 0x7c], esi
mov word [ebp - 0x90], cx
mov byte [ebp - 4], 0x16
cmp dword [edx + 8], eax
jle 0x460807
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [edx + 0x14], 2
push dword [eax + ecx*4 + 4]
lea ecx, [ebp - 0x90]
call fcn.004482e2
jmp 0x460836
mov dword [edx + 0x14], eax
lea eax, [ebp + 0x40]
push str.http:__www.rainberrytv.com_
push eax
call fcn.0048fdc9
lea ecx, [ebp - 0x90]
cmp ecx, eax
je 0x46082e
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.00448215
lea ecx, [ebp + 0x40]
call fcn.0044823e
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
jb 0x460848
mov eax, dword [ebp - 0x90]
xor ecx, ecx
mov dword [ebp + 0x40], ebx
mov word [ebp + 0x40], cx
lea ecx, [ebp + 0x40]
push eax
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], esi
call fcn.004482e2
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004a86a7
push eax
push str.http:__apps.bittorrent.com_featuredcontent_featuredcontent.btapp_offer
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x18
push eax
call fcn.0045c271
mov edi, 0x7e6648
cmp eax, edi
je 0x46089b
mov byte [ebp + 0x60], bl
mov ecx, edi
push dword [ebp + 0x60]
push eax
call fcn.00448215
lea ecx, [ebp - 0x28]
call fcn.0044823e
lea ecx, [ebp - 0x5c]
call fcn.0044823e
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x4608e6
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x60], ecx
cmp eax, 0x1000
jb 0x4608dd
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x5c]
mov ecx, dword [ebp + 0x60]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 0x15
cmp eax, 8
jb 0x460928
mov ecx, dword [ebp - 0x90]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x46091f
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
push str.DOWNLOADINSTALL
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x460b70
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.00412ae0
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.00699ec3
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x58]
or eax, 8
mov ecx, dword [ecx + edx*4 + 0xc]
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
test ecx, ecx
je 0x460994
push ecx
lea ecx, [ebp + 0x40]
call fcn.004482e2
jmp 0x460997
mov dword [ebp + 0x58], eax
mov byte [ebp + 0x60], bl
lea eax, [ebp + 0x40]
push dword [ebp + 0x60]
mov ecx, 0x7bb4f8
push eax
call fcn.00448215
mov eax, dword [ebp + 0x54]
cmp eax, 8
jb 0x4609e6
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x5c], ecx
cmp eax, 0x1000
jb 0x4609dd
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x60]
mov ecx, dword [ebp + 0x5c]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
mov ecx, 0x7bb4e0
cmp eax, ecx
je 0x460a0d
mov byte [ebp + 0x60], bl
push dword [ebp + 0x60]
push eax
call fcn.00416240
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
test edi, edi
je 0x460a4c
cmp word [edi], bx
je 0x460a4c
push 0x7e4678
push edi
lea eax, [ebp + 0x48]
push eax
call fcn.0048446d
mov ecx, dword [ebp + 0x58]
or ecx, 2
mov byte [ebp - 4], 0x19
mov dword [ebp + 0x58], ecx
mov dword [ebp + 0x5c], ecx
mov ecx, eax
call fcn.00461fc0
mov byte [ebp + 0x67], 1
test eax, eax
je 0x460a4f
mov byte [ebp + 0x67], bl
mov ecx, dword [ebp + 0x58]
mov dword [ebp - 4], 0x15
test cl, 2
je 0x460a66
lea ecx, [ebp + 0x48]
call fcn.004a5d2b
cmp byte [ebp + 0x67], 0
je 0x460b6c
push 0x6f5d5c
push ebx
lea eax, [ebp + 0x40]
mov dword [0x7bb1d4], 0x7e4678
push eax
call fcn.0046f6b4
push 0x3c
mov byte [ebp - 4], 0x1a
call fcn.0068973d
mov esi, eax
pop ecx
mov dword [ebp + 0x60], esi
mov byte [ebp - 4], 0x1b
test esi, esi
je 0x460ad6
cmp dword [ebp + 0x54], 8
lea eax, [ebp + 0x40]
jb 0x460aae
mov eax, dword [ebp + 0x40]
mov ecx, dword [0x7bb1d4]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.0046d39c
mov ecx, eax
call fcn.0046d555
push eax
mov ecx, esi
call fcn.00449edc
mov esi, eax
jmp 0x460ad8
mov esi, ebx
mov eax, dword [ebp - 0x14]
push 0xc4
mov byte [ebp - 4], 0x1a
mov dword [esi], eax
call fcn.0068973d
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1c
test eax, eax
je 0x460b00
mov ecx, eax
call fcn.00476b67
jmp 0x460b02
mov eax, ebx
mov byte [ebp - 4], 0x1a
mov dword [ebp + 0x5c], eax
test eax, eax
je 0x460b16
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x5c]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1d
push ecx
lea ecx, [eax + 8]
call fcn.004480a2
mov eax, dword [ebp + 0x5c]
mov dword [eax + 0xc0], 0x45257a
lea eax, [ebp + 0x5c]
push eax
push 1
push esi
push fcn.00455873
lea eax, [esi + 0x20]
push eax
call fcn.005d323b
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [ebp + 0x5c]
mov byte [ebp - 4], 0x1e
test eax, eax
je 0x460b60
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x15
call fcn.0044823e
mov byte [ebp + 0x66], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp eax, 0x60
jg 0x460b8a
push 0x60
pop eax
push esi
push ebx
mov dword [0x7f84b4], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.005acacf
call fcn.005c022a
push 0x6fc740
lea ecx, [ebp + 4]
call fcn.004d0171
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
mov edi, eax
call fcn.004d0171
mov esi, eax
test edi, edi
je 0x460cbf
test esi, esi
je 0x460bdc
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ea0c0], eax
mov dword [0], ebx
mov ecx, edi
mov esi, ebx
call fcn.004308f0
mov ecx, edi
cmp eax, 1
jne 0x460bf9
push eax
call fcn.00461fb2
mov esi, 0xe53e
jmp 0x460c2e
push 2
call fcn.00461fb2
push 1
mov ecx, edi
call fcn.0045eccc
mov edi, eax
push edi
call fcn.00462027
mov ecx, ebx
test eax, eax
je 0x460c2e
push 0x30
lea edx, [eax - 1]
pop ebx
cmp word [edi + ecx*2], bx
je 0x460c26
bts esi, edx
inc ecx
dec edx
cmp ecx, eax
jb 0x460c1d
xor ebx, ebx
and esi, 0xfffef57f
lea ecx, [ebp + 0x40]
or esi, 0x20000
call fcn.0040fb70
push str.LANG
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x1f
call fcn.004d0171
mov edi, eax
test edi, edi
je 0x460c9a
mov ecx, edi
call fcn.004308f0
cmp eax, 2
jl 0x460c9a
push 2
mov ecx, edi
call fcn.00461fb2
push 1
mov ecx, edi
call fcn.0045eccc
push eax
lea eax, [ebp - 0x5c]
push 0x6fb444
push eax
call fcn.004756fb
add esp, 0xc
lea ecx, [ebp + 0x40]
push eax
call fcn.00415dd0
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp + 0x40]
mov ecx, esp
push eax
call fcn.0040fb90
push ebx
push esi
push dword [ebp - 0x2c]
push dword [ebp + 0x78]
push dword [ebp + 0x74]
call fcn.0044edaa
jmp 0x460337
test esi, esi
je 0x460d86
mov eax, dword [esi + 8]
cmp eax, 2
jl 0x460d2f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00699ec3
mov edi, eax
mov eax, dword [esi + 8]
pop ecx
mov ecx, edi
cmp eax, 3
jl 0x460d34
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, edi
mov dword [ebp - 0x14], edx
cmp eax, 4
jl 0x460d36
cmp byte [0x7f8548], 0
je 0x460d25
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.00699ec3
pop ecx
push eax
push 1
call fcn.00461921
mov eax, dword [esi + 8]
mov ecx, edi
mov edx, dword [ebp - 0x14]
cmp eax, 4
jle 0x460d36
push 4
pop eax
jmp 0x460d36
mov ecx, 0x100
mov edx, ebx
mov dword [esi + 0x14], eax
mov eax, edx
test edx, edx
jne 0x460d44
mov eax, 0x6f6210
push eax
push ecx
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.0040f570
add esp, 0xc
mov byte [ebp + 0x66], 1
push ebx
push ebx
sub esp, 0x18
mov eax, esp
push edx
push ecx
push dword [ebp - 0x2c]
mov dword [eax], ebx
push dword [ebp + 0x78]
mov dword [eax + 0x10], ebx
push dword [ebp + 0x74]
mov dword [eax + 0x14], 0xf
call fcn.0044edaa
mov esi, eax
mov dword [ebp + 0x28], esi
call fcn.005bdfc7
jmp 0x460d89
mov esi, dword [ebp + 0x28]
push str.FORCEUPDATE
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460da4
mov dword [0x7c96e8], 0x6c1b787
push str.CRASH
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460dc6
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7ea0c0], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460dde
mov byte [0x7f854b], 1
push str.BRINGTOFRONT
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x460df3
mov byte [ebp + 0x3f], 1
cmp byte [ebp + 0x66], 0
je 0x460e04
call fcn.00456e61
push esi
jmp 0x45f736
mov esi, dword [ebp + 0x30]
test esi, esi
je 0x460e3d
cmp dword [esi + 8], 2
jne 0x460e2f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00699ec3
or dword [0x7ea2fc], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x460e3d
or dword [0x7ea2fc], 0xffffffff
mov dword [esi + 0x14], 1
call fcn.004d8db9
push eax
call fcn.004b11c6
push str.STARTAPP
lea ecx, [ebp + 4]
call fcn.004d0171
mov esi, eax
test esi, esi
je 0x460eda
cmp dword [esi + 8], 2
jl 0x460eda
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
mov edi, 0x81c040
cmp eax, edi
je 0x460e8a
mov byte [ebp + 0x30], bl
mov ecx, edi
push dword [ebp + 0x30]
push eax
call fcn.00416240
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
cmp dword [esi + 8], 3
jl 0x460ed3
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
cmp eax, 0x81c058
je 0x460ec2
mov byte [ebp + 0x30], bl
mov ecx, 0x81c058
push dword [ebp + 0x30]
push eax
call fcn.00416240
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
mov dword [esi + 0x14], 3
jmp 0x460eda
mov dword [esi + 0x14], 2
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x460f3f
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x460f3f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.0048ff8f
mov ecx, dword [esi + 4]
mov edx, dword [esi]
add ecx, edi
test al, al
je 0x460f25
lea eax, [ebp + 0x67]
mov byte [ebp + 0x67], bl
push eax
push dword [edx + ecx*4]
call fcn.00481dc8
test al, al
je 0x460f39
mov al, byte [ebp + 0x67]
mov byte [0x7f8549], al
jmp 0x460f39
mov eax, dword [edx + ecx*4]
mov ecx, 0x7f860c
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
call fcn.0045e5d7
inc edi
cmp edi, dword [esi + 8]
jl 0x460ee9
lea eax, [ebp - 0x138]
push eax
call fcn.005abff4
mov edi, dword [ebp + 0x34]
lea eax, [ebp - 0xe4]
mov esi, dword [ebp - 0x2c]
push ebx
push edi
push eax
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x20
push eax
push esi
call fcn.005b0a86
test al, al
je 0x45f735
push str.___________________________________________
push 0x40
call fcn.0049be8f
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
lea ecx, [ebp + 4]
push str.UNINSTALL
setne byte [ebp + 0x58]
call fcn.004d0171
test eax, eax
lea ecx, [ebp + 4]
push str.RELOCATED
setne byte [ebp - 0x14]
call fcn.004d0171
test eax, eax
lea ecx, [ebp - 0xb4]
setne byte [ebp + 0x30]
call fcn.00463477
movzx eax, al
push eax
push dword [ebp + 0x30]
lea eax, [ebp + 0x34]
push edi
push dword [ebp - 0x14]
push dword [ebp + 0x58]
push eax
call fcn.0045edcc
push str.LANG
lea ecx, [ebp + 4]
call fcn.004d0171
cmp byte [ebp + 0x73], 0
mov byte [ebp + 0x60], bl
je 0x460fff
cmp byte [0x7e6761], 0
je 0x460fff
mov byte [ebp + 0x60], 1
push ebx
push dword [ebp + 0x60]
push eax
call fcn.005d4630
push str.STAGE_URL
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
setne byte [0x7e617f]
call fcn.00472e10
or al, byte [ebp + 0x34]
or byte [ebp + 0x73], al
call fcn.00486993
cmp byte [ebp + 0x73], 0
jne 0x46106e
push dword [ebp + 0x38]
lea ecx, [ebp - 0xb4]
call fcn.00463477
movzx eax, al
push eax
sub esp, 0x18
mov eax, esp
push ebx
push ebx
push esi
push dword [ebp + 0x78]
mov dword [eax], ebx
push dword [ebp + 0x74]
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
call fcn.0044edaa
mov dword [ebp + 0x28], eax
call fcn.00452243
cmp dword [0x7e6658], 0
mov byte [ebp + 0x5c], bl
je 0x461289
push ebx
mov edi, 0x7e6648
push str..btapp_
mov ecx, edi
call fcn.004581f1
cmp eax, 0xffffffff
je 0x4611e2
cmp dword [0x7e665c], 8
mov eax, edi
mov byte [ebp + 0x73], bl
jb 0x4610ac
mov eax, dword [0x7e6648]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0048fcb1
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xf
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
jb 0x4610d7
mov eax, dword [ebp - 0x28]
lea ecx, [ebp + 0x73]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x390]
call fcn.0045ea87
push 5
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push str.offer
mov byte [ebp - 4], 0x22
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00414b60
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x390]
call fcn.004a7e00
mov ecx, dword [ebp + 0x54]
mov esi, eax
mov byte [ebp - 4], 0x22
cmp ecx, 0x10
jb 0x46115a
mov edx, dword [ebp + 0x40]
inc ecx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x38], edx
cmp ecx, 0x1000
jb 0x461151
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x38]
push eax
call fcn.0044810a
mov ecx, dword [ebp + 0x60]
mov edx, dword [ebp + 0x38]
push ecx
push edx
call fcn.0068976d
pop ecx
pop ecx
cmp byte [ebp + 0x73], 0
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
je 0x4611c1
test esi, esi
je 0x4611c1
mov edx, esi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x461176
sub edx, ecx
push edx
push esi
mov esi, 0x81be1c
mov ecx, esi
call fcn.00414b60
mov byte [ebp + 0x70], bl
lea eax, [ebp - 0x348]
push dword [ebp + 0x70]
mov ecx, 0x81c040
push eax
call fcn.00430890
mov byte [ebp + 0x70], bl
lea eax, [ebp - 0x300]
push dword [ebp + 0x70]
mov ecx, 0x81c058
push eax
call fcn.00430890
mov byte [ebp + 0x5c], 1
jmp 0x4611c6
mov esi, 0x81be1c
lea ecx, [ebp - 0x390]
call fcn.0045ebf7
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x20
call fcn.0040fad0
jmp 0x461267
xor eax, eax
mov dword [ebp + 0x40], ebx
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 7
mov word [ebp + 0x40], ax
push ebx
push 1
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x24
push eax
push edi
lea ecx, [ebp - 0x78]
call fcn.005d1f5e
push eax
mov byte [ebp - 4], 0x25
call fcn.005d204e
lea ecx, [ebp - 0x60]
call fcn.0044823e
lea ecx, [ebp - 0x78]
call fcn.0044823e
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 0x20
cmp eax, 8
jb 0x461262
mov ecx, dword [ebp + 0x40]
lea eax, [eax*2 + 2]
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x60], ecx
cmp eax, 0x1000
jb 0x461259
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
mov esi, 0x81be1c
cmp dword [0x7e665c], 8
mov dword [0x7e6658], ebx
jb 0x46127c
mov edi, dword [0x7e6648]
xor eax, eax
mov word [edi], ax
mov byte [0x7e6678], bl
jmp 0x46128e
mov esi, 0x81be1c
call fcn.004a657b
mov edi, dword [0x81be2c]
test eax, eax
setne al
mov byte [ebp + 0x73], al
test edi, edi
jne 0x4612bc
push 0x1b
push str.http:__www.rainberrytv.com_
mov ecx, esi
call fcn.00414b60
mov edi, dword [0x81be2c]
mov al, byte [ebp + 0x73]
test al, al
jne 0x461399
cmp dword [0x81be30], 0x10
mov eax, esi
jb 0x4612d4
mov eax, dword [0x81be1c]
push 0xf
push str.rainberrytv.com
push ebx
push edi
push eax
call fcn.0045e8eb
cmp eax, 0xffffffff
jne 0x461399
cmp dword [0x81be30], 0x10
mov eax, esi
jb 0x4612fc
mov eax, dword [0x81be1c]
push 0xf
push str.rainberrytv.com
push ebx
push edi
push eax
call fcn.0045e8eb
cmp eax, 0xffffffff
je 0x461399
push 0xffffffffffffffff
push eax
mov dword [ebp + 0x40], ebx
lea ecx, [ebp + 0x40]
push esi
mov dword [ebp + 0x50], ebx
mov dword [ebp + 0x54], 0xf
mov byte [ebp + 0x40], bl
call fcn.00457907
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x26
push eax
push 0x6fcac0
lea eax, [ebp - 0x5c]
push eax
call fcn.0044876b
cmp eax, esi
je 0x461358
mov byte [ebp + 0x70], bl
mov ecx, esi
push dword [ebp + 0x70]
push eax
call fcn.00416240
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
mov eax, dword [ebp + 0x54]
mov byte [ebp - 4], 0x20
cmp eax, 0x10
jb 0x461399
mov ecx, dword [ebp + 0x40]
inc eax
mov dword [ebp + 0x70], eax
mov dword [ebp + 0x60], ecx
cmp eax, 0x1000
jb 0x461390
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.0044810a
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
push eax
push ecx
call fcn.0068976d
pop ecx
pop ecx
cmp byte [ebp + 0x37], 0
mov esi, dword [ebp + 0x28]
je 0x4613bb
cmp esi, 4
jge 0x4613bb
call fcn.005d73e1
push dword [0x7c96e8]
mov ecx, eax
call fcn.005d94d1
jmp 0x4613ca
cmp esi, 7
jg 0x461444
je 0x460dfe
sub esi, ebx
je 0x45f735
sub esi, 1
je 0x461432
sub esi, 1
je 0x461419
dec esi
sub esi, 1
jne 0x461461
call fcn.005d73e1
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.0049be8f
cmp byte [ebp + 0x35], 0
pop ecx
pop ecx
jne 0x461412
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.0049be8f
pop ecx
pop ecx
mov ecx, esi
call fcn.005d965f
push 4
jmp 0x45f736
push dword [ebp + 0x78]
mov byte [0x7f8549], 1
push dword [ebp + 0x74]
call fcn.00452844
push 2
jmp 0x45f736
push dword [ebp + 0x78]
push dword [ebp + 0x74]
call fcn.00452844
push 1
jmp 0x45f736
mov eax, esi
sub eax, 8
je 0x460dfe
sub eax, 1
je 0x460dfe
sub eax, 3
je 0x461904
push str.temp
lea eax, [ebp - 0x1e8]
push eax
call fcn.004849d5
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x27
call fcn.00457977
push eax
call fcn.004d0934
mov al, byte [0x7ea0c6]
test al, al
jne 0x4614be
push 0x104
lea eax, [ebp - 0x598]
mov ecx, 0x81bb0c
push eax
call fcn.00461fc0
push eax
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x598]
push eax
call fcn.0044c8ea
mov al, byte [0x7ea0c6]
movzx eax, al
push eax
call fcn.005b060e
mov eax, 0x7f84b8
push eax
push str.Version:__s
call fcn.0040f570
add esp, 8
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
mov ecx, eax
call fcn.0040fac0
push eax
push 0x6f60e8
call fcn.0040f570
add esp, 8
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
push str.HELPERLOG
lea ecx, [ebp + 4]
call fcn.004d0171
test eax, eax
je 0x461520
push 1
call fcn.0045edc6
mov ecx, eax
call fcn.0045f6bb
push dword [ebp - 0x38]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
call fcn.005b2ab3
lea ecx, [ebp + 4]
call fcn.004d019c
call fcn.00472bcf
cmp byte [0x7e5a4f], 0
mov byte [0x7ea0c4], al
je 0x461564
push ebx
push ebx
call fcn.0048d6e0
test eax, eax
je 0x461564
call fcn.00471fe8
mov dword [0x7f84a8], eax
mov dword [0x7f84ac], edx
cmp byte [0x7e5b39], 0
je 0x461573
mov dword [0x7e58b8], ebx
call fcn.00483de9
mov byte [0x7e5613], al
call fcn.004d0926
and dword [0x7ea094], 0xbfffffff
call fcn.004a0a24
mov ecx, 0x7ead1c
call fcn.0045ecdb
mov ecx, eax
call fcn.0049c2fb
call fcn.004502cf
call fcn.005ac1f4
cmp eax, 1
je 0x4615df
lea ecx, [ebp + 0x40]
call fcn.0040fb70
push ebx
lea eax, [ebp + 0x40]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.005df89b
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
lea ecx, [ebp + 0x40]
mov byte [ebp - 4], 0x27
call fcn.0040fad0
call fcn.005df81f
lea ecx, [ebp - 0xc60]
call fcn.005a989a
push dword [ebp]
lea ecx, [ebp - 0xc60]
mov byte [ebp - 4], 0x29
call fcn.005aabc1
mov ecx, dword [0x81d244]
test ecx, ecx
je 0x461613
push dword [ebp + 0x5c]
call fcn.0045f6b1
call fcn.004d4b05
call fcn.004851f8
lea ecx, [ebp - 0xe4]
call fcn.0040fab0
test al, al
jne 0x461679
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0045b928
push 1
push 0x28
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x2a
call fcn.0040fac0
push eax
lea eax, [ebp + 0x44]
push eax
call fcn.00481f2c
test al, al
je 0x46166d
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6f6210
lea eax, [ebp + 0x44]
push eax
call fcn.00493947
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x29
call fcn.0040fad0
push 0x5aa0e3
call fcn.005dd3b9
call fcn.005dc922
cmp eax, 7
jne 0x461692
call fcn.005dd039
call fcn.005dcc29
call fcn.005e193b
test al, al
je 0x4616ae
call fcn.005e25b0
test al, al
je 0x4616ae
call fcn.005e2cdf
mov esi, 0x7e6130
mov ecx, esi
call fcn.0040fab0
test al, al
je 0x4616ce
call fcn.005e02b8
test al, al
jne 0x4616ce
push 0x6fbba4
jmp 0x461700
mov ecx, esi
call fcn.0040fab0
test al, al
jne 0x4616fb
push esi
call fcn.005e0499
test al, al
jne 0x4616fb
push str.uTorrent_Player
push esi
call fcn.0045e541
test al, al
je 0x461719
call fcn.005e02b8
test al, al
je 0x461719
push str.Default_Media_Player
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
push eax
mov ecx, esi
call fcn.00415dd0
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
mov esi, 0x7e6148
mov ecx, esi
call fcn.0040fab0
test al, al
je 0x461747
push 0x6fbba4
lea eax, [ebp - 0x5c]
push eax
call fcn.0048fcb1
push eax
mov ecx, esi
call fcn.00415dd0
lea ecx, [ebp - 0x5c]
call fcn.0040fad0
push ebx
push ebx
push 0x4a2e50
call fcn.0047e622
call fcn.005d2acb
cmp eax, 2
jne 0x461762
call fcn.005d2bf1
push 0xa14
call fcn.0068973d
pop ecx
mov dword [ebp + 0x74], eax
mov byte [ebp - 4], 0x2b
test eax, eax
je 0x461787
push dword [0x7f84a0]
mov ecx, eax
call fcn.0047b4b9
jmp 0x461789
mov eax, ebx
mov esi, 0x7e6458
mov byte [ebp - 4], 0x29
mov ecx, esi
mov dword [0x7e483c], eax
call fcn.0040fab0
test al, al
jne 0x4617ce
lea eax, [ebp - 0x5c]
push eax
call fcn.005cca27
push esi
push 0x7e61b0
mov ecx, eax
mov byte [ebp - 4], 0x2c
call fcn.0040fac0
push eax
call fcn.0049a9df
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x29
call fcn.0040fad0
cmp byte [ebp + 0x3f], 0
je 0x4617ef
call fcn.005ac1f4
test eax, eax
je 0x4617ef
lea ecx, [ebp - 0xc60]
call fcn.00461fbc
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.004977d6
test al, al
je 0x461803
push str.IPv6_is_installed
call fcn.0048e961
pop ecx
push 1
lea ecx, [ebp + 0x77]
call fcn.0045ea6f
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 0x2d
push eax
call fcn.004a2911
test al, al
je 0x46183d
sub esp, 0x10
lea esi, [ebp - 0x1d0]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0048e961
add esp, 0x14
lea ecx, [ebp + 0x77]
mov byte [ebp - 4], 0x29
call fcn.0044a605
cmp byte [ebp + 0x58], 0
jne 0x461863
call fcn.005d73e1
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.005d976d
push ebx
push 0x119
call fcn.004a03ff
call fcn.004d9a71
call fcn.005dd7ad
cmp byte [0x7f8549], 0
jne 0x461894
mov ecx, 0x81bb0c
call fcn.0045e276
test al, al
jne 0x461894
call fcn.005b9e66
call fcn.004bac86
mov esi, eax
lea eax, [ebp + 0x74]
push eax
mov ecx, esi
call fcn.00461f98
lea eax, [ebp + 0x78]
mov ecx, esi
push eax
call fcn.00461fa6
jmp 0x4618ca
lea ecx, [ebp + 0x74]
call fcn.0045eced
mov ecx, dword [eax]
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp + 0x74]
call fcn.0045ecf3
lea eax, [ebp + 0x78]
push eax
lea ecx, [ebp + 0x74]
call fcn.0045ecbe
test al, al
jne 0x4618b3
mov ecx, 0x81bb0c
call fcn.005bd03b
call fcn.004d03c7
call fcn.005d73e1
mov ecx, eax
call fcn.005d9d5a
call fcn.005a8b83
call fcn.0040f570
jmp 0x45f735
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x78]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x6fcad0
call fcn.00452844
push 0xc
jmp 0x45f736