Function at 0x441b1c
Capabilities:
Delete file
Terminate process

Disassembly:
push ebp
sub esp, 0x48
mov eax, 0x66a4f5
call fcn.006313fc
sub esp, 0x82c
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
push ebx
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp + 0x44], ebx
call fcn.004b7d8a
push dword [ebp + 0x5c]
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], ebx
push dword [ebp + 0x58]
call fcn.004b7e06
push str.INSTALLCHECK
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x441b89
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x441b89
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.00434c41
push ebx
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
lea ecx, [ebp - 0x180]
call fcn.004410fe
push str.logfile
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
call fcn.004b8012
mov esi, eax
mov edi, ebx
mov dword [ebp], esi
mov dword [ebp + 0x44], edi
test esi, esi
je 0x441bd7
push 2
pop edx
cmp dword [esi + 8], edx
jl 0x441bc9
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
mov dword [esi + 0x14], edx
jmp 0x441bce
mov edi, str.bt.log
mov dword [ebp + 0x44], edi
mov dword [ebp - 0x17c], edi
push 0x746618
call fcn.0046ef89
push 3
pop eax
push 0x755080
mov dword [ebp + 0x3c], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], 4
mov dword [ebp - 0x158], 6
mov byte [ebp - 0x154], 1
mov dword [ebp - 0x168], 0xa4c2
mov dword [ebp - 0x164], 0x6913ec
mov dword [ebp - 0x134], 0x690fe4
mov dword [ebp - 0x178], 0x691414
mov dword [ebp - 0x174], 0x690a4c
mov dword [ebp - 0x16c], 0x691408
mov dword [ebp - 0x170], 0x68a2c4
call fcn.0046ef89
push str.TORRENTPANE
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
call fcn.0042ded2
test al, al
jne 0x441c74
test esi, esi
je 0x441c7f
push ebx
push 0x755080
call fcn.0046e3d0
call fcn.0059f7dc
push str.PORTABLE
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x180], eax
mov byte [ebp - 0x48], bl
call fcn.004b8012
test eax, eax
je 0x441cac
mov byte [ebp - 0x48], 1
mov dword [0x75faa8], 0x10
push 2
push ebx
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0xf4], eax
mov esi, str.http:__apps.bittorrent.com_webui_version.json
mov byte [ebp - 4], 2
push esi
call fcn.00409db4
pop ecx
push eax
push esi
lea ecx, [ebp - 0x14c]
call fcn.00409b2f
lea eax, [ebp - 0x180]
mov dword [ebp - 0x150], 0x756008
push eax
call fcn.004b822a
push str.CAMPAIGN
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x441d26
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x441d26
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
call fcn.00632ce9
pop ecx
push eax
mov ecx, 0x75efd8
call fcn.0046e9ad
push str.BROWSER
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x441d6c
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x441d6c
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp + 4]
push eax
call fcn.004243aa
push eax
mov ecx, 0x75fe70
call fcn.0044dbe6
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.0042341c
mov ecx, 0x75efd8
call fcn.0046e26e
push eax
push fcn.0059849e
call fcn.005a22a8
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x441da3
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7637b0], eax
mov dword [0], ebx
push str.SET_UPDATE_HOST
lea ecx, [ebp - 0x34]
call fcn.004b8012
xor ecx, ecx
mov dword [ebp + 0x38], eax
mov dword [ebp - 0xd8], 7
mov dword [ebp - 0xdc], ebx
mov word [ebp - 0xec], cx
mov byte [ebp - 4], 3
test eax, eax
je 0x441e29
cmp dword [eax + 8], 2
jl 0x441e29
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [ebp - 0xec]
call fcn.00434a57
mov eax, dword [ebp + 0x38]
mov esi, 0x6914d4
push esi
mov dword [eax + 0x14], 2
call fcn.004236bc
pop ecx
push eax
push esi
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xec]
push ebx
call fcn.00434bba
neg eax
sbb eax, eax
neg eax
jmp 0x441e2e
call fcn.0046818d
push eax
call fcn.005939b9
push ebx
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 1
push eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0xd0], ebx
push eax
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
call sub.gdiplus.dll_GdiplusStartup
mov dword [ebp - 0x40], eax
call fcn.00565834
mov esi, eax
lea ecx, [ebp - 0x198]
mov eax, dword [ebp - 0x40]
push str.utorrent
mov dword [esi + 0x28], eax
call fcn.00409ba7
lea ecx, [esi + 0x2c]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x198]
cmp ecx, eax
je 0x441e9e
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040a034
push ebx
push 1
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 3
call fcn.0040a0e9
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b4
call fcn.0056531c
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf9
call fcn.0056531c
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b5
call fcn.0056531c
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ecf8
call fcn.0056531c
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], 1
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x615b6
call fcn.0056531c
lea eax, [ebp + 0x2c]
mov dword [ebp + 0x2c], ebx
push eax
mov ecx, esi
mov dword [ebp + 0x30], 0x6ec74
call fcn.0056531c
lea ecx, [esi + 4]
mov eax, 0x73b2b4
cmp ecx, eax
je 0x441f4f
push 0xffffffffffffffff
push ebx
push eax
call fcn.0040a034
cmp dword [ebp - 0x40], 0
jne 0x441f61
mov eax, str.loaded
mov ecx, str.enabled
jmp 0x441f6b
mov eax, str.failed_to_load
mov ecx, 0x691528
push eax
push ecx
push str.Ads__s____GdiPlus.dll__s_n
call fcn.00409edb
add esp, 0xc
push str.Process_started
call fcn.00408ca6
mov esi, ebx
cmp dword [ebp + 0x58], esi
je 0x441fa1
mov edi, dword [ebp + 0x5c]
push dword [edi + esi*4]
call fcn.00408ca6
inc esi
cmp esi, dword [ebp + 0x58]
jne 0x441f8e
mov edi, dword [ebp + 0x44]
xor ebx, ebx
push str.End_Args
call fcn.00408ca6
mov ecx, 0x764284
call fcn.0041fd99
mov ecx, 0x7642ac
call fcn.0041fd99
mov ecx, 0x764298
call fcn.00443c14
call fcn.004bae4d
call fcn.00595e43
push 0x79283c
call fcn.0049b484
mov dword [ebp - 0x44], 0x690fe8
mov byte [ebp - 4], 5
call fcn.005724f6
lea eax, [ebp - 0x44]
push eax
push 0x69158c
call fcn.004c34b3
push str.SetDllDirectoryA
push 0x68986c
call fcn.004617d7
test eax, eax
je 0x442015
push 0x70522c
call eax
call fcn.00409edb
call fcn.0042de55
test al, al
je 0x4420d7
call fcn.00460fac
test al, al
je 0x4420d7
mov byte [0x791ca8], 1
call fcn.0042e721
test al, al
je 0x4420ce
mov byte [0x791caa], 1
call fcn.0059a520
call fcn.0046f772
mov al, byte [0x75ed94]
mov byte [ebp + 0x4b], al
mov byte [0x75ed94], 1
call fcn.004703fb
push 1
push ebx
call fcn.00592e7b
test al, al
je 0x4420c4
push ebx
push 1
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x44], 0x69fd00
call fcn.0042341c
call dword [sym.imp.ole32.dll_CoUninitialize]
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.0040a0e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.004b7de7
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x4c]
pop ebp
ret 0xc
mov al, byte [ebp + 0x4b]
mov byte [0x75ed94], al
jmp 0x4420e1
mov word [0x791ca9], 1
call fcn.0059a520
call fcn.0046f772
push str.NOTIFYUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442118
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x442113
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x75f182], al
push str.AUTOCHECKUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x44214f
push 2
pop edx
mov al, 1
cmp dword [esi + 8], edx
jl 0x44214a
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x30
mov eax, dword [eax + ecx*4 + 4]
pop ecx
cmp word [eax], cx
mov dword [esi + 0x14], edx
setne al
mov byte [0x75f181], al
push 0x75edc0
push str.Settings_path:___s__n
call fcn.00409edb
add esp, 8
lea ecx, [ebp - 0x34]
push str.AUTOUPDATE
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442211
mov eax, dword [esi + 8]
mov byte [ebp + 0x58], 1
mov dword [ebp + 0x5c], eax
cmp eax, 2
jl 0x442192
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 4]
jmp 0x442194
mov edi, ebx
test edi, edi
je 0x44219d
cmp word [edi], bx
jne 0x4421a8
push str.AUTOUPDATE_flag_requires_a_parameter._n
call fcn.00408ce1
pop ecx
push str.NORUN
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4421c1
mov byte [ebp + 0x58], bl
call fcn.00585781
mov eax, dword [ebp + 0x5c]
cmp eax, 3
jl 0x4421da
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 8]
call fcn.00632ce9
pop ecx
jmp 0x4421e0
push 0x1a
mov dword [ebp + 0x3c], eax
pop eax
mov ecx, dword [ebp + 0x3c]
mov dword [esi + 0x14], ecx
test edi, edi
je 0x441b82
cmp word [edi], bx
je 0x441b82
push eax
push dword [ebp + 0x58]
push edi
call fcn.0059215f
test al, al
je 0x441b82
xor ebx, ebx
inc ebx
jmp 0x441b82
cmp dword [ebp], 0
je 0x44223e
test edi, edi
je 0x44222b
push edi
push str.Setting_log_file_to__s
call fcn.00409edb
add esp, 8
jmp 0x442230
mov edi, str.stdout
push edi
push str.Log_file_set_to_path:__s__n
call fcn.00409edb
add esp, 8
push str.AUTOMATION
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442285
push 1
call fcn.005798e0
cmp dword [esi + 8], 2
jl 0x44228b
push 0x75
pop eax
mov word [0x746e74], ax
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0xd
push dword [eax + ecx*4 + 4]
push 0x746e84
call fcn.004243e1
mov dword [esi + 0x14], 2
jmp 0x44228b
push ebx
call fcn.005798e0
push str.MINIMIZED
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4422a3
mov byte [0x770495], 1
push str.NOTFAREA
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4422bb
mov byte [0x770496], 1
push str.AUTORESTARTTIME
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x4422ee
mov edx, dword [esi + 4]
mov ecx, dword [esi]
push dword [ecx + edx*4 + 4]
call fcn.00632ce9
mov dword [0x755d44], eax
mov dword [0x755d48], eax
pop ecx
mov dword [esi + 0x14], 2
push str.MessageBoxThreadMapCS
push 0x7910b4
call fcn.00466fdc
push dword [ebp + 0x54]
mov ecx, 0x791130
call fcn.00584bee
call fcn.00490a5f
push str.recover
lea ecx, [ebp - 0x34]
mov dword [0x791134], eax
mov byte [ebp - 0x38], bl
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442396
mov byte [ebp - 0x38], 1
mov byte [0x791810], 1
mov dword [ebp + 0x30], 0xf
mov dword [ebp + 0x2c], ebx
mov byte [ebp + 0x1c], bl
push 1
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp + 4]
push eax
call fcn.005a0cc6
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.0040a0e9
push 2
pop eax
cmp dword [esi + 8], eax
jl 0x442387
cmp dword [ebp + 0x30], 0x10
mov edx, dword [ebp + 0x1c]
mov dword [esi + 0x14], eax
jae 0x442377
lea edx, [ebp + 0x1c]
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push ebx
push edx
push dword [eax + ecx*4 + 4]
call fcn.005a2708
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call fcn.0040a0e9
cmp dword [0x75faf8], 0
mov al, bl
mov byte [ebp + 0x57], bl
mov byte [ebp + 0x4b], bl
mov byte [ebp + 0x43], al
mov byte [ebp + 0x37], al
jne 0x4423b7
mov dword [0x75faf8], 0x68da4c2
call fcn.004c59ee
mov dword [ebp - 0xa8], ebx
mov esi, 0x689888
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], esi
call fcn.0045ca92
push str.dht_feed.dat
lea eax, [ebp + 4]
mov byte [ebp - 4], 8
push eax
call fcn.0046e883
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
mov byte [ebp - 4], 9
jae 0x4423fe
lea eax, [ebp + 4]
lea ecx, [ebp - 0xac]
push ecx
push eax
lea eax, [ebp + 0x24]
push eax
call fcn.0046e44f
mov ecx, eax
mov byte [ebp - 4], 0xa
mov dword [ebp + 0x44], 1
call fcn.0050eccc
test eax, eax
jne 0x442432
cmp byte [ebp - 0x9c], 4
mov byte [ebp + 0x4a], 1
je 0x442435
mov byte [ebp + 0x4a], bl
lea ecx, [ebp + 0x24]
mov dword [ebp - 4], 9
mov dword [ebp + 0x44], ebx
call fcn.0048f8e2
cmp byte [ebp + 0x4a], 0
je 0x442464
cmp byte [ebp - 0x9c], 4
lea eax, [ebp - 0xac]
je 0x44245e
mov eax, ebx
push eax
call fcn.0048f0b4
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.0042341c
mov dword [ebp - 0xac], esi
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.0045b86a
mov byte [ebp - 4], 5
call fcn.0057be98
mov esi, str.NOINSTALL
mov byte [ebp], bl
push esi
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4424b8
mov al, 1
mov byte [ebp], 1
mov dword [0x791908], 0xa4c2
mov byte [ebp + 0x57], al
mov byte [ebp + 0x4b], al
push ebx
push ebx
call fcn.0044388a
call fcn.0043c3f8
cmp dword [0x75f984], 0
je 0x4424de
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4424e5
mov byte [0x75fe61], 1
push str.LAUNCHED
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
lea ecx, [ebp - 0x34]
push 0x6917c8
setne byte [ebp + 0x3c]
call fcn.004b8012
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x38]
push dword [ebp + 0x38]
push dword [ebp + 0x3c]
call fcn.0043df86
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x98]
call fcn.0043e8de
mov byte [ebp - 4], 0xd
test eax, eax
je 0x44253c
add eax, 4
jmp 0x44253e
mov eax, ebx
push eax
lea eax, [ebp + 4]
push eax
call fcn.0043d091
push eax
mov ecx, 0x75fafc
call fcn.00409822
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.0040a0e9
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xc
call fcn.00444328
mov edi, 0x6917d0
mov byte [ebp - 0x4c], bl
push edi
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
push 0x6917d4
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
push esi
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
cmp byte [ebp + 0x3c], al
je 0x4425c3
push 0x6917c8
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442694
push str.RELOCATED
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
push str.HYDRA_EXCEPTION
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x442694
mov byte [ebp - 4], 0xe
cmp dword [0x75f984], eax
jne 0x44263e
cmp byte [0x75fe61], al
je 0x44263e
push 0x691834
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
call fcn.0046f772
push ebx
push ebx
push esi
call fcn.0059a702
mov byte [0x75ed94], 1
call fcn.004703fb
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.0044925d
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0xf
call fcn.00453306
lea ecx, [ebp - 0x2fc]
mov byte [ebp - 4], 0xe
call fcn.004496f3
jmp 0x44268d
mov dword [ebp - 4], 0xc
mov eax, dword [0x75f984]
test eax, eax
je 0x4426b0
cmp eax, 0x68da4c2
je 0x4426b0
call fcn.00470e96
call fcn.0057909f
jmp 0x4426b7
mov byte [0x75ed94], 1
push edi
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x4426e4
push 0x6917d4
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
jne 0x4426e4
lea ecx, [ebp - 0x98]
call fcn.00445477
test al, al
jne 0x4426ee
mov dword [0x75f984], 0x68da4c2
push 3
pop eax
push str.UNINSTALL
lea ecx, [ebp - 0x34]
mov byte [ebp + 0x4a], bl
mov dword [ebp - 0x3c], eax
call fcn.004b8012
lea ecx, [ebp - 0x34]
test eax, eax
je 0x442744
push edi
mov byte [ebp + 0x5c], bl
mov byte [ebp + 0x58], bl
call fcn.004b8012
test eax, eax
je 0x44271f
mov byte [ebp + 0x5c], 1
push str.REMSETTINGS
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442734
mov byte [ebp + 0x58], 1
push dword [ebp + 0x58]
push dword [ebp + 0x5c]
call fcn.00433360
jmp 0x441b82
push str.BIGDUMP
call fcn.004b8012
test eax, eax
je 0x442759
mov byte [0x7637b5], 1
xor eax, eax
mov dword [ebp - 0xb0], 7
mov dword [ebp - 0xb4], ebx
mov word [ebp - 0xc4], ax
push str.PAIR
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x11
call fcn.004b8012
test eax, eax
je 0x4427b1
cmp dword [eax + 8], 1
jle 0x4427b1
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
mov esi, dword [eax + ecx*4 + 4]
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [ebp - 0xc4]
call fcn.00434a57
push str.DIRECTORY
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x4427df
cmp dword [edx + 8], 1
jle 0x4427df
mov eax, dword [edx + 4]
mov ecx, dword [edx]
mov eax, dword [ecx + eax*4 + 4]
mov dword [0x770498], eax
mov dword [edx + 0x14], 2
push str.HIDE
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x4427f7
mov byte [0x791139], 1
push 7
pop eax
xor ecx, ecx
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xfc], ebx
mov word [ebp - 0x10c], cx
mov dword [ebp - 0x110], eax
xor eax, eax
mov dword [ebp - 0x114], ebx
mov word [ebp - 0x124], ax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
push str.LAUNCHBUNDLEDURL
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x14
call fcn.004b8012
mov edi, eax
test edi, edi
je 0x44286e
cmp dword [edi + 8], 1
jle 0x44286e
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [ebp - 0x10c]
call fcn.00434a57
mov dword [edi + 0x14], 2
push str.LAUNCHBUNDLEDURLTYPE
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edi, eax
test edi, edi
je 0x4428ab
cmp dword [edi + 8], 1
jle 0x4428ab
mov edx, dword [edi + 4]
mov ecx, dword [edi]
mov esi, dword [ecx + edx*4 + 4]
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [ebp - 0x124]
call fcn.00434a57
mov dword [edi + 0x14], 2
push ebx
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00598fb5
mov eax, dword [ebp - 0x54]
mov edi, ebx
mov ecx, dword [ebp - 0x58]
sub eax, ecx
push 0x34
cdq
pop esi
idiv esi
test eax, eax
je 0x4428f9
push 0x34
mov esi, ebx
pop ebx
lea eax, [ecx + esi]
push eax
call fcn.0059894b
mov eax, dword [ebp - 0x54]
inc edi
mov ecx, dword [ebp - 0x58]
add esi, ebx
sub eax, ecx
cdq
idiv ebx
cmp edi, eax
jb 0x4428dc
xor ebx, ebx
push str.FEATURE
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x4429d6
xor eax, eax
mov dword [ebp + 0x30], 7
inc eax
mov dword [ebp + 0x2c], ebx
xor ecx, ecx
mov byte [0x75f980], al
mov word [ebp + 0x1c], cx
mov byte [ebp - 4], 0x15
cmp dword [edx + 8], eax
jle 0x442943
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [edx + 0x14], 2
mov esi, dword [eax + ecx*4 + 4]
jmp 0x44294b
mov dword [edx + 0x14], eax
mov esi, str.http:__bundles.bittorrent.com_inclient_yes
push esi
call fcn.004236bc
pop ecx
push eax
push esi
lea ecx, [ebp + 0x1c]
call fcn.00434a57
cmp dword [ebp + 0x30], 8
mov eax, dword [ebp + 0x1c]
jae 0x442968
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp + 4]
call fcn.004249e7
lea eax, [ebp + 4]
mov byte [ebp - 4], 0x16
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0049262c
push eax
push str.http:__apps.bittorrent.com_featuredcontent_featuredcontent.btapp_offer
lea eax, [ebp - 0x1c8]
mov byte [ebp - 4], 0x17
push eax
call fcn.0043dbe9
push eax
mov ecx, 0x75fd4c
call fcn.0044dbe6
push ebx
push 1
lea ecx, [ebp - 0x1c8]
call fcn.0042341c
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0042341c
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.0042341c
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x14
call fcn.0042341c
push str.DOWNLOADINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442bbb
push str.Starting_toolbar_download__called_with__DOWNLOADINSTALL_
call fcn.00408ca6
mov edx, dword [esi + 4]
mov ecx, dword [esi]
mov dword [esi + 0x14], 5
push dword [ecx + edx*4 + 8]
mov edi, dword [ecx + edx*4 + 4]
call fcn.00632ce9
mov edx, dword [esi + 4]
pop ecx
mov ecx, dword [esi]
mov dword [ebp + 0x38], eax
lea eax, [ebp - 0x70]
push dword [ecx + edx*4 + 0xc]
push eax
call fcn.004243aa
push eax
mov ecx, 0x73b1ac
call fcn.0044dbe6
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0042341c
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 0x10]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
push eax
mov ecx, 0x73b194
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
test edi, edi
je 0x442a96
cmp word [edi], bx
je 0x442a96
push 0x75dcac
push edi
lea eax, [ebp + 0x24]
push eax
call fcn.0046e44f
mov ecx, eax
mov byte [ebp - 4], 0x18
mov dword [ebp + 0x44], 2
call fcn.0050eccc
mov byte [ebp + 0x4b], 1
test eax, eax
je 0x442a99
mov byte [ebp + 0x4b], bl
test byte [ebp + 0x44], 2
mov dword [ebp - 4], 0x14
je 0x442aae
lea ecx, [ebp + 0x24]
call fcn.0048f8e2
cmp byte [ebp + 0x4b], 0
je 0x442bb7
push 0x68962c
push ebx
lea eax, [ebp + 4]
mov dword [0x73b050], 0x75dcac
push eax
call fcn.0045ddbc
push 0x3c
mov byte [ebp - 4], 0x19
call fcn.00630af1
mov esi, eax
pop ecx
mov dword [ebp + 0x30], esi
mov byte [ebp - 4], 0x1a
test esi, esi
je 0x442b1e
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x442af6
lea eax, [ebp + 4]
mov ecx, dword [0x73b050]
push eax
push ebx
push ebx
push 0xffffffffffffffff
push str.offer_urls
call fcn.0045bb6f
mov ecx, eax
call fcn.0045bcde
push eax
mov ecx, esi
call fcn.00424c9f
mov esi, eax
jmp 0x442b20
mov esi, ebx
mov eax, dword [ebp + 0x38]
push 0xc4
mov byte [ebp - 4], 0x19
mov dword [esi], eax
call fcn.00630af1
pop ecx
mov dword [ebp + 0x30], eax
mov byte [ebp - 4], 0x1b
test eax, eax
je 0x442b48
mov ecx, eax
call fcn.00462830
jmp 0x442b4a
mov eax, ebx
mov byte [ebp - 4], 0x19
mov dword [ebp + 0x44], eax
test eax, eax
je 0x442b5e
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp + 0x44]
lea ecx, [esi + 4]
mov byte [ebp - 4], 0x1c
push ecx
lea ecx, [eax + 8]
call fcn.00422f9e
mov eax, dword [ebp + 0x44]
mov dword [eax + 0xc0], 0x42e3e9
lea eax, [ebp + 0x44]
push eax
push 1
push esi
push fcn.004327b3
lea eax, [esi + 0x20]
push eax
call fcn.00599488
push edi
call dword [sym.imp.KERNEL32.DLL_DeleteFileW]
mov eax, dword [ebp + 0x44]
mov byte [ebp - 4], 0x19
test eax, eax
je 0x442ba8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x14
call fcn.0042341c
mov byte [ebp + 0x4a], 1
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
push 0x58
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push 0x60
pop ecx
mov dword [0x77053c], eax
cmp eax, ecx
jg 0x442bdf
mov dword [0x77053c], ecx
push esi
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
call fcn.005766cd
call fcn.0058669b
push 0x6917d4
lea ecx, [ebp - 0x34]
call fcn.004b8012
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
mov dword [ebp + 0x44], eax
call fcn.004b8012
mov esi, eax
mov eax, dword [ebp + 0x44]
test eax, eax
je 0x442d2d
test esi, esi
je 0x442c33
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7637b0], eax
mov eax, dword [ebp + 0x44]
mov dword [0], ebx
xor edx, edx
mov edi, ebx
inc edx
cmp dword [eax + 8], edx
jne 0x442c47
mov dword [eax + 0x14], edx
mov edi, 0xe53e
jmp 0x442c9e
mov ecx, dword [eax + 4]
mov dword [eax + 0x14], 2
mov eax, dword [eax]
mov eax, dword [eax + ecx*4 + 4]
mov esi, eax
mov dword [ebp + 0x38], eax
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, bx
jne 0x442c5f
sub esi, ecx
mov eax, ebx
sar esi, 1
mov dword [ebp], esi
mov dword [ebp + 0x54], eax
je 0x442c9e
mov ebx, dword [ebp + 0x38]
lea ecx, [esi - 1]
push 0x30
pop esi
cmp word [ebx + eax*2], si
mov esi, dword [ebp]
je 0x442c93
mov eax, edx
shl eax, cl
or edi, eax
mov eax, dword [ebp + 0x54]
inc eax
dec ecx
mov dword [ebp + 0x54], eax
cmp eax, esi
jb 0x442c7e
xor ebx, ebx
and edi, 0xfffef57f
mov dword [ebp + 0x18], 0xf
or edi, 0x20000
mov dword [ebp + 0x14], ebx
mov byte [ebp + 4], bl
push 0x691834
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x1d
call fcn.004b8012
mov edx, eax
test edx, edx
je 0x442d07
push 2
pop eax
cmp dword [edx + 8], eax
jl 0x442d07
mov ecx, dword [edx + 4]
mov dword [edx + 0x14], eax
mov eax, dword [edx]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push 0x69076c
push eax
call fcn.00472228
add esp, 0xc
lea ecx, [ebp + 4]
push eax
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
push ebx
push ebx
sub esp, 0x18
lea eax, [ebp + 4]
mov ecx, esp
push eax
call fcn.0040a0c6
push ebx
push edi
push dword [ebp - 0x38]
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042afa1
push eax
jmp 0x441b83
test esi, esi
je 0x442ded
cmp dword [esi + 8], 2
jl 0x442d4f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00632ce9
pop ecx
mov dword [ebp + 0x44], eax
jmp 0x442d56
mov dword [ebp + 0x44], 0x100
cmp dword [esi + 8], 3
jl 0x442d67
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edi, dword [eax + ecx*4 + 8]
jmp 0x442d69
mov edi, ebx
cmp dword [esi + 8], 4
jl 0x442d8f
cmp byte [0x770494], 0
je 0x442d8f
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 0xc]
call fcn.00632cf2
pop ecx
push eax
push 1
call fcn.0044388a
mov eax, dword [esi + 8]
cmp eax, 4
jle 0x442d9a
push 4
pop eax
mov dword [esi + 0x14], eax
mov eax, edi
test edi, edi
jne 0x442da8
mov eax, 0x689954
mov ecx, dword [ebp + 0x44]
push eax
push ecx
push str.INSTALLDEBUG:__PERFORMINSTALL_with_flags___d__and_path___s__n
call fcn.00409edb
add esp, 0xc
mov byte [ebp + 0x4a], 1
push ebx
push ebx
sub esp, 0x18
mov eax, esp
push edi
push ecx
push dword [ebp - 0x38]
mov dword [eax + 0x14], 0xf
push dword [ebp + 0x5c]
mov dword [eax + 0x10], ebx
push dword [ebp + 0x58]
mov byte [eax], bl
call fcn.0042afa1
mov esi, eax
mov dword [ebp - 0x3c], esi
call fcn.00585781
jmp 0x442df0
mov esi, dword [ebp - 0x3c]
push str.FORCEUPDATE
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442e0b
mov dword [0x746ee4], 0x68da4c1
push str.CRASH
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442e2d
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [0x7637b0], eax
mov dword [0], ebx
push str.SHOWTEXT
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442e45
mov byte [0x770497], 1
push str.BRINGTOFRONT
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
je 0x442e5a
mov byte [ebp + 0x43], 1
cmp byte [ebp + 0x4a], 0
je 0x442e6b
call fcn.00433cb7
push esi
jmp 0x441b83
push 0x691b04
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442eb9
mov byte [0x74663c], 1
cmp dword [esi + 8], 2
jne 0x442ea9
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push dword [eax + ecx*4 + 4]
call fcn.00632ce9
or dword [0x7639c8], eax
pop ecx
mov dword [esi + 0x14], 2
jmp 0x442ecb
or dword [0x7639c8], 0xffffffff
mov dword [esi + 0x14], 1
jmp 0x442ecb
cmp byte [0x76e2ac], 0
sete al
dec al
and byte [0x74663c], al
call fcn.004c183a
push eax
call fcn.0049b484
push str.STARTAPP
lea ecx, [ebp - 0x34]
call fcn.004b8012
mov esi, eax
test esi, esi
je 0x442f55
cmp dword [esi + 8], 2
jl 0x442f55
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 4]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
push eax
mov ecx, 0x791b28
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
cmp dword [esi + 8], 3
jl 0x442f4e
mov eax, dword [esi]
mov ecx, dword [esi + 4]
push dword [eax + ecx*4 + 8]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
push eax
mov ecx, 0x791b40
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
mov dword [esi + 0x14], 3
jmp 0x442f55
mov dword [esi + 0x14], 2
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x442fbc
mov edi, dword [esi + 0x14]
cmp dword [esi + 8], edi
jle 0x442fbc
jmp 0x442fb7
mov ecx, dword [esi + 4]
mov eax, dword [esi]
add ecx, edi
push str.bittorrent:
push dword [eax + ecx*4]
call fcn.0047a370
mov ecx, dword [esi + 4]
add ecx, edi
test al, al
mov eax, dword [esi]
je 0x442fa2
lea edx, [ebp + 0x4b]
mov byte [ebp + 0x4b], bl
push edx
push dword [eax + ecx*4]
call fcn.0046c06d
test al, al
je 0x442fb6
mov al, byte [ebp + 0x4b]
mov byte [0x770495], al
jmp 0x442fb6
mov eax, dword [eax + ecx*4]
mov ecx, 0x770600
mov dword [ebp + 0x38], eax
lea eax, [ebp + 0x38]
push eax
call fcn.005cc413
inc edi
cmp edi, dword [esi + 8]
jl 0x442f66
lea eax, [ebp - 0x1d4]
push eax
call fcn.00575c77
mov esi, dword [ebp + 0x3c]
lea eax, [ebp - 0xc4]
mov edi, dword [ebp - 0x38]
push ebx
push esi
push eax
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x1e
push eax
push edi
call fcn.0057a02b
test al, al
je 0x441b82
push str.___________________________________________
push 0x40
call fcn.00484d2b
pop ecx
pop ecx
push str.PERFORMINSTALL
lea ecx, [ebp - 0x34]
call fcn.004b8012
test eax, eax
lea ecx, [ebp - 0x34]
push str.UNINSTALL
setne byte [ebp + 0x38]
call fcn.004b8012
test eax, eax
lea ecx, [ebp - 0x34]
push str.RELOCATED
setne byte [ebp + 0x44]
call fcn.004b8012
test eax, eax
lea ecx, [ebp - 0x98]
setne byte [ebp + 0x3c]
call fcn.00445473
movzx eax, al
push eax
push dword [ebp + 0x3c]
lea eax, [ebp + 0x3c]
push esi
push dword [ebp + 0x44]
push dword [ebp + 0x38]
push eax
call fcn.0044143c
push 0x691834
lea ecx, [ebp - 0x34]
call fcn.004b8012
cmp byte [ebp + 0x57], 0
mov byte [ebp + 0x44], bl
je 0x44307c
cmp byte [0x75fe61], 0
je 0x44307c
mov byte [ebp + 0x44], 1
push ebx
push dword [ebp + 0x44]
push eax
call fcn.0059a702
call fcn.004608f7
or al, byte [ebp + 0x3c]
or byte [ebp + 0x57], al
call fcn.004703fb
cmp byte [ebp + 0x57], 0
jne 0x4430d5
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x98]
call fcn.00445473
movzx eax, al
push eax
sub esp, 0x18
mov eax, esp
push ebx
push ebx
push edi
push dword [ebp + 0x5c]
mov dword [eax + 0x14], 0xf
push dword [ebp + 0x58]
mov dword [eax + 0x10], ebx
mov byte [eax], bl
call fcn.0042afa1
mov dword [ebp - 0x3c], eax
call fcn.0042e0aa
cmp dword [0x75fd5c], 0
mov byte [ebp + 0x4b], bl
je 0x443265
mov esi, str..btapp_
push esi
call fcn.004236bc
pop ecx
push eax
push ebx
push esi
mov esi, 0x75fd4c
mov ecx, esi
call fcn.00435701
cmp eax, 0xffffffff
je 0x4431ef
push esi
lea eax, [ebp + 4]
mov byte [ebp + 0x57], bl
push eax
call fcn.0043d091
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov eax, esp
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], ebx
mov byte [eax], bl
cmp dword [ebp + 0x18], 0x10
mov eax, dword [ebp + 4]
jae 0x443137
lea eax, [ebp + 4]
lea ecx, [ebp + 0x57]
push ecx
push ebx
push eax
lea ecx, [ebp - 0x30c]
call fcn.00441162
push str.offer
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x20
call fcn.00409ba7
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x30c]
call fcn.00491fa1
push ebx
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0x20
mov esi, eax
call fcn.0040a0e9
cmp byte [ebp + 0x57], 0
je 0x4431ca
test esi, esi
je 0x4431ca
push esi
call fcn.00409db4
pop ecx
push eax
push esi
mov esi, 0x79190c
mov ecx, esi
call fcn.00409b2f
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2c4]
mov ecx, 0x791b28
push eax
call fcn.0040a034
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x27c]
mov ecx, 0x791b40
push eax
call fcn.0040a034
mov byte [ebp + 0x4b], 1
jmp 0x4431cf
mov esi, 0x79190c
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x1f
call fcn.00441293
push ebx
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x1e
call fcn.0040a0e9
jmp 0x44323f
xor eax, eax
mov dword [ebp + 0x18], 7
mov dword [ebp + 0x14], ebx
mov word [ebp + 4], ax
push ebx
push 1
lea eax, [ebp + 4]
mov byte [ebp - 4], 0x22
push eax
push esi
lea ecx, [ebp - 0x8c]
call fcn.0059875c
push eax
mov byte [ebp - 4], 0x23
call fcn.0059894b
lea ecx, [ebp - 0x8c]
call fcn.0046dc79
push ebx
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x1e
call fcn.0042341c
mov esi, 0x79190c
cmp dword [0x75fd60], 8
mov eax, dword [0x75fd4c]
mov dword [0x75fd5c], ebx
jae 0x443258
mov eax, 0x75fd4c
xor ecx, ecx
mov word [eax], cx
mov byte [0x75fd7c], bl
jmp 0x44326a
mov esi, 0x79190c
call fcn.00490b05
test eax, eax
setne al
cmp dword [0x79191c], 0
mov byte [ebp + 0x57], al
jne 0x4432a4
mov edi, str.http:__bundles.bittorrent.com_onboarding_utorrent_urlhttp_3A_2F_2Fbundles.bittorrent.com_2F
test al, al
jne 0x44328e
mov edi, str.http:__beta.bundles.bittorrent.com_onboarding_utorrent_urlhttp_3A_2F_2Fbeta.bundles.bittorrent.com_2F
push edi
call fcn.00409db4
pop ecx
push eax
push edi
mov ecx, esi
call fcn.00409b2f
mov al, byte [ebp + 0x57]
mov edi, dword [ebp - 0x38]
test al, al
jne 0x443331
push str.beta.bundles.bittorrent.com
call fcn.00409db4
pop ecx
push eax
push ebx
push str.beta.bundles.bittorrent.com
mov ecx, esi
call fcn.00435670
cmp eax, 0xffffffff
jne 0x443331
push str.bundles.bittorrent.com
call fcn.00409db4
pop ecx
push eax
push ebx
push str.bundles.bittorrent.com
mov ecx, esi
call fcn.00435670
cmp eax, 0xffffffff
je 0x443331
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x1c8]
mov ecx, esi
push eax
call fcn.0043d015
push eax
push str.http:__beta.
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x24
push eax
call fcn.0044104d
push eax
mov ecx, esi
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
push ebx
push 1
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x1e
call fcn.0040a0e9
cmp byte [ebp + 0x3f], 0
mov esi, dword [ebp - 0x3c]
je 0x443351
cmp esi, 4
jge 0x443351
call fcn.0059cd85
push dword [0x746ee4]
mov ecx, eax
call fcn.0059e60c
test esi, esi
je 0x441b82
cmp esi, 1
je 0x443878
cmp esi, 2
je 0x44385f
cmp esi, 4
je 0x443828
cmp esi, 6
jle 0x4433a3
cmp esi, 9
jle 0x442e65
cmp esi, 0xc
jne 0x4433a3
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x5c]
inc eax
push ecx
push eax
mov dword [ecx + eax*4 - 4], 0x691c2c
call fcn.0042e6c7
push esi
jmp 0x441b83
push str.temp
lea eax, [ebp - 0x1b0]
push eax
call fcn.0046e937
cmp dword [ebp - 0x19c], 8
mov eax, dword [ebp - 0x1b0]
mov byte [ebp - 4], 0x25
jae 0x4433cd
lea eax, [ebp - 0x1b0]
push eax
call fcn.004b8712
mov al, byte [0x7637b6]
test al, al
jne 0x443405
push 0x104
lea eax, [ebp - 0x514]
push eax
push dword [0x791130]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x514]
push eax
call fcn.00427d1e
mov al, byte [0x7637b6]
movzx eax, al
push eax
call fcn.00579bf8
mov eax, 0x770540
push eax
push str.Version:__s
call fcn.00409edb
add esp, 8
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
cmp dword [eax + 0x14], 0x10
jb 0x443433
mov eax, dword [eax]
push eax
push 0x689848
call fcn.00409edb
add esp, 8
lea ecx, [ebp - 0x70]
push ebx
push 1
call fcn.0040a0e9
push dword [ebp - 0x48]
push dword [ebp]
push edi
call fcn.0057be9f
lea ecx, [ebp - 0x34]
call fcn.004b803d
call fcn.004606c2
cmp byte [0x75f1c3], 0
mov byte [0x7637b4], al
je 0x44348e
push ebx
push ebx
call fcn.00477eef
test eax, eax
je 0x44348e
call fcn.0045fe36
mov dword [0x7705d8], eax
mov dword [0x7705dc], edx
cmp byte [0x75f2ac], 0
je 0x44349d
mov dword [0x75f034], ebx
call fcn.0046e058
mov byte [0x75ed90], al
call fcn.004b8704
and dword [0x763794], 0xbfffffff
call fcn.0048a34f
lea eax, [ebp + 0x58]
mov ecx, 0x764364
push eax
call fcn.00425373
mov ecx, dword [ebp + 0x58]
call fcn.0048515d
call fcn.0042c062
call fcn.00575e71
cmp eax, 1
je 0x443519
mov dword [ebp + 0x18], 0xf
mov dword [ebp + 0x14], ebx
mov byte [ebp + 4], bl
push ebx
lea eax, [ebp + 4]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.005a0cc6
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
push ebx
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x25
call fcn.0040a0e9
call fcn.005a0c48
lea ecx, [ebp - 0x838]
call fcn.005734a3
push dword [ebp - 0x40]
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0x27
call fcn.00574806
mov eax, dword [0x7927e8]
test eax, eax
je 0x44354a
mov cl, byte [ebp + 0x4b]
mov byte [eax + 0x4d], cl
call fcn.004bcea7
call fcn.0046efe5
cmp dword [ebp - 0xb4], 0
je 0x4435c8
cmp dword [ebp - 0xb0], 8
mov eax, dword [ebp - 0xc4]
jae 0x443572
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp + 4]
push 0x69076c
push eax
call fcn.00472228
add esp, 0xc
cmp dword [ebp + 0x18], 0x10
mov eax, dword [ebp + 4]
mov byte [ebp - 4], 0x28
jae 0x443594
lea eax, [ebp + 4]
push 1
push 0x28
push eax
lea eax, [ebp + 0x20]
push eax
call fcn.0046c175
test al, al
je 0x4435b9
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x689954
lea eax, [ebp + 0x20]
push eax
call fcn.0047abfb
push ebx
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0x27
call fcn.0040a0e9
push 0x573bba
call fcn.00597946
call fcn.00597126
cmp eax, 7
jne 0x4435e1
call fcn.00597652
call fcn.00597377
cmp dword [0x75f890], 0
jne 0x44361e
call fcn.005a19c6
test al, al
jne 0x44360e
push dword [0x690c20]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
mov ecx, 0x75f880
jmp 0x443667
cmp dword [0x75f890], 0
jne 0x44361e
mov esi, 0x75f880
jmp 0x443656
mov esi, 0x75f880
push esi
call fcn.005a1bf8
test al, al
jne 0x443656
mov edi, str.uTorrent_Player
push edi
call fcn.00409db4
pop ecx
push eax
push edi
push dword [0x75f890]
mov ecx, esi
push ebx
call fcn.0040ab56
test eax, eax
jne 0x443678
call fcn.005a19c6
test al, al
je 0x443678
push dword [0x690c38]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
mov ecx, esi
push eax
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
cmp dword [0x75f8a8], 0
jne 0x4436a6
push dword [0x690c20]
lea eax, [ebp - 0x70]
push eax
call fcn.0047a0e4
push eax
mov ecx, 0x75f898
call fcn.00409822
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.0040a0e9
push ebx
push ebx
push 0x48c87f
call fcn.00468f9e
call fcn.00598955
cmp eax, 2
jne 0x4436c1
call fcn.00598f17
push 0xa14
call fcn.00630af1
pop ecx
mov dword [ebp + 0x58], eax
mov byte [ebp - 4], 0x29
test eax, eax
je 0x4436e6
push dword [0x7705d4]
mov ecx, eax
call fcn.00466da6
jmp 0x4436e8
mov eax, ebx
cmp dword [0x75fb80], 0
mov byte [ebp - 4], 0x27
mov dword [0x75df74], eax
je 0x44372e
lea eax, [ebp - 0x70]
push eax
call fcn.005924be
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x2a
jb 0x44370f
mov eax, dword [eax]
push 0x75fb70
push 0x75f8d8
push eax
call fcn.004823b6
push ebx
push 1
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x27
call fcn.0040a0e9
cmp byte [ebp + 0x43], 0
je 0x443749
call fcn.00575e71
test eax, eax
je 0x443749
push dword [ebp - 0x834]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
call fcn.0047e33a
test al, al
je 0x44375d
push str.IPv6_is_installed
call fcn.004790ad
pop ecx
mov byte [ebp + 0x5b], 1
call fcn.00475044
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0x2b
push eax
call fcn.0048c358
test al, al
je 0x443796
sub esp, 0x10
lea esi, [ebp - 0x1e4]
mov edi, esp
push str.Got_Teredo_Address:__V
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.004790ad
add esp, 0x14
mov byte [ebp - 4], 0x27
call fcn.00475085
cmp byte [ebp + 0x38], 0
jne 0x4437b9
call fcn.0059cd85
mov esi, eax
mov ecx, esi
mov edx, dword [esi]
call dword [edx]
mov ecx, esi
call fcn.0059e841
push ebx
push 0x119
call fcn.00489603
call fcn.004c28e0
call fcn.00597c35
cmp byte [0x770495], 0
jne 0x4437e5
cmp byte [0x791139], 0
jne 0x4437e5
call fcn.005819dd
call fcn.004a2684
mov edi, dword [eax]
mov esi, dword [edi]
jmp 0x4437fa
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esi]
cmp esi, edi
jne 0x4437f0
mov ecx, 0x791130
call fcn.00584c83
call fcn.004b81a6
call fcn.0059cd85
mov ecx, eax
call fcn.0059eca7
call fcn.005725e7
call fcn.00409edb
jmp 0x441b82
call fcn.0059cd85
push str.INSTALL_FAIL_USER_CANCEL
push 0x40
mov esi, eax
call fcn.00484d2b
cmp byte [ebp + 0x3d], 0
pop ecx
pop ecx
jne 0x443858
push str.INSTALL_FAIL_USER_CANCEL____cvm.RemoveRunningVersion
push 0x40
call fcn.00484d2b
pop ecx
pop ecx
mov ecx, esi
call fcn.0059e7b7
push 4
jmp 0x441b83
push dword [ebp + 0x5c]
mov byte [0x770495], 1
push dword [ebp + 0x58]
call fcn.0042e6c7
push 2
jmp 0x441b83
push dword [ebp + 0x5c]
push dword [ebp + 0x58]
call fcn.0042e6c7
push 1
jmp 0x441b83