Function at 0x439df5
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xf04]
sub esp, 0xf80
mov eax, dword [0x4c3a60]
xor eax, ebp
mov dword [ebp + 0xf00], eax
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x54], esi
call fcn.00423229
call fcn.00439bb3
xor ebx, ebx
cmp dword [eax + 0x148], ebx
je 0x43a251
cmp dword [ebp + 0xf0c], ebx
je 0x439e49
push 0x265
call fcn.004446a8
mov ecx, eax
call fcn.00444948
cmp byte [esi + 0x50], bl
je 0x43a232
cmp dword [ebp + 0xf0c], ebx
je 0x43a232
cmp dword [esi + 0x48], ebx
jne 0x43a232
push 0x4b3140
lea ecx, [ebp + 0x74]
call fcn.004018f6
lea eax, [ebp + 0x74]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403cf9
cmp byte [esi + 0x50], bl
je 0x43a227
xor eax, eax
push 0x206
mov word [ebp + 0xaf0], ax
lea eax, [ebp + 0xaf2]
push ebx
push eax
call fcn.00476cc0
mov edi, 0x208
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x439ecd
lea eax, [ebp + 0x78]
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4a6eb0
push eax
lea eax, [ebp + 0xaf0]
push eax
call esi
xor eax, eax
push 0x206
mov word [ebp + 0xcf8], ax
lea eax, [ebp + 0xcfa]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x439f1d
lea eax, [ebp + 0x78]
push 0x4a6e78
push eax
lea eax, [ebp + 0xcf8]
push eax
call esi
mov esi, 0x4a6e74
push esi
lea ecx, [ebp + 0x90]
call fcn.004018f6
push esi
lea ecx, [ebp + 0x58]
call fcn.004018f6
push esi
lea eax, [ebp + 0xaf0]
push eax
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.004135ef
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x90]
call fcn.00401a1c
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp + 4]
call fcn.00401ad3
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401ad3
push esi
lea eax, [ebp + 0xcf8]
push eax
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.004135ef
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.00401a1c
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401ad3
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401ad3
mov esi, dword [ebp - 0x54]
mov ecx, dword [esi + 0x38]
push 0x1252
push 0x11
push 9
push 7
call fcn.0044ae27
mov dword [ebp - 0x5c], eax
call fcn.0044ed94
mov ecx, eax
call fcn.0044ea99
test eax, eax
je 0x43a1ee
mov eax, dword [esi + 0x184]
sub eax, dword [esi + 0x180]
add esi, 0x174
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x43a1ee
lea ecx, [ebp + 0xac]
cmp dword [ebp - 0x5c], edi
jne 0x43a120
push str.__NoInterfaceUrl:
call fcn.004018f6
push ebx
mov ecx, esi
call fcn.00429b97
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401b1e
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x54], edi
cmp eax, edi
jbe 0x43a0d0
push dword [ebp - 0x54]
mov ecx, esi
call fcn.00429b97
push eax
push 0x4b2d1c
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.0042c029
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401a1c
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401ad3
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401ad3
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jb 0x43a069
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x43a0e5
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0x70], 8
mov eax, dword [ebp + 0x5c]
jae 0x43a0f1
lea eax, [ebp + 0x5c]
push ecx
push eax
call fcn.0040f2d9
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.004446a8
mov ecx, eax
call fcn.00444a6d
push ebx
push edi
lea ecx, [ebp + 0xac]
call fcn.00401ad3
jmp 0x43a210
push str._StartType:Install__url:
call fcn.004018f6
push ebx
mov ecx, esi
call fcn.00429b97
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401b1e
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x54], edi
cmp eax, edi
jbe 0x43a1bb
push dword [ebp - 0x54]
mov ecx, esi
call fcn.00429b97
push eax
push 0x4b2d1c
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.0042c029
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401a1c
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401ad3
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401ad3
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jb 0x43a154
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x43a1d0
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a0f1
lea eax, [ebp + 0x94]
jmp 0x43a0f1
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a203
lea eax, [ebp + 0x94]
push str._StartType:Install
push eax
call fcn.0040f2d9
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.00401ad3
push ebx
push edi
lea ecx, [ebp + 0x90]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401ad3
call fcn.004446a8
mov ecx, eax
call fcn.004446fd
cmp dword [ebp + 0xf0c], ebx
je 0x43a24d
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 1
jmp 0x43a247
cmp dword [ebp + 0xf0c], ebx
je 0x43a25c
push ebx
jmp 0x43a26a
cmp dword [esi + 0x108], ebx
je 0x43a268
push 1
jmp 0x43a26a
push 2
call fcn.004446a8
mov ecx, eax
call fcn.00444e23
lea eax, [ebp - 0x56]
push eax
mov byte [ebp - 0x56], bl
call fcn.00403cce
mov ecx, eax
call fcn.00403d88
lea eax, [ebp - 0x5d]
push eax
mov byte [ebp - 0x5d], bl
call fcn.00403cce
mov ecx, eax
call fcn.00403dca
cmp byte [ebp - 0x5d], bl
je 0x43a2bf
cmp byte [ebp - 0x56], bl
je 0x43a2bf
cmp dword [ebp + 0xf0c], ebx
je 0x43a2bf
push 0x264
call fcn.004446a8
mov ecx, eax
call fcn.00444948
call fcn.0040f1c1
mov edi, 0x208
mov esi, connect
test eax, eax
je 0x43a36d
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.00476cc0
add esp, 0xc
push 0x104
lea eax, [ebp + 0xcf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 1
lea eax, [ebp + 0xcf8]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040b5eb
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0xcf8]
push eax
call fcn.0040330c
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.00476cc0
add esp, 0x24
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push dword [ebp - 0x5c]
lea eax, [ebp + 0xaf0]
push str.SIGN.IE0_x__s
push 0x104
push eax
call fcn.0047758d
push 1
lea eax, [ebp + 0xaf0]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040b5eb
add esp, 0x24
cmp dword [ebp + 0xf0c], ebx
je 0x43a3bb
push ebx
lea eax, [ebp - 0x5c]
push eax
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.0040b550
add esp, 0x14
test eax, eax
jne 0x43a3a7
push 0xffffffffffffffff
push ebx
push 0x2ea
call fcn.004446a8
mov ecx, eax
call fcn.00444a6d
jmp 0x43a3bb
push ebx
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.0040b5eb
add esp, 0x10
push 0x4a6c68
lea ecx, [ebp - 0x34]
call fcn.004018f6
lea eax, [ebp - 0x18]
push eax
call fcn.0040ef52
mov ecx, eax
call fcn.0040f067
push 0x4a6c18
lea ecx, [ebp - 0x18]
call fcn.004019f8
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x43a3f1
lea eax, [ebp - 0x30]
push 1
push ebx
push ebx
push eax
call fcn.00403896
mov eax, dword [ebp - 0x14]
add esp, 0x10
cmp dword [ebp], 8
jae 0x43a40a
lea eax, [ebp - 0x14]
push 1
push ebx
push ebx
push eax
call fcn.00403896
add esp, 0x10
push 0x4b3140
lea ecx, [ebp + 0x20]
call fcn.004018f6
mov esi, 0x206
cmp dword [ebp + 0xf0c], ebx
je 0x43a85b
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
jne 0x43a7fa
push 0x4b3140
lea ecx, [ebp + 0x74]
call fcn.004018f6
lea eax, [ebp + 0x74]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403cf9
mov eax, dword [ebp - 0x54]
cmp byte [eax + 0x50], bl
je 0x43a6fd
xor eax, eax
push esi
mov word [ebp + 0xcf8], ax
lea eax, [ebp + 0xcfa]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x43a4a1
lea eax, [ebp + 0x78]
push 0x4a6eb0
push eax
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov esi, 0x4a6e74
push esi
lea ecx, [ebp + 0x90]
call fcn.004018f6
push esi
lea eax, [ebp + 0xcf8]
push eax
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp + 0xac]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.004135ef
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x90]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp + 0xac]
call fcn.00401ad3
call fcn.0044ed94
mov ecx, eax
call fcn.0044ea99
mov ecx, dword [ebp - 0x54]
test eax, eax
je 0x43a541
mov eax, dword [ecx + 0x184]
sub eax, dword [ecx + 0x180]
push 0x1c
cdq
pop esi
idiv esi
test eax, eax
jne 0x43a570
cmp dword [ecx + 0x19c], ebx
jne 0x43a578
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a55e
lea eax, [ebp + 0x94]
push str._StartType:Install
push eax
call fcn.0040f2d9
pop ecx
pop ecx
jmp 0x43a6ea
cmp dword [ecx + 0x19c], ebx
je 0x43a5e4
push str._StartType:Install__Feature:
lea ecx, [ebp + 0x58]
call fcn.004018f6
lea eax, [ebp + 0xac]
push eax
call fcn.0040d797
mov ecx, eax
call fcn.0040d845
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.00401b1e
push ebx
push 1
lea ecx, [ebp + 0xac]
call fcn.00401ad3
cmp dword [ebp + 0x70], 8
mov ecx, dword [ebp + 0x5c]
jae 0x43a5be
lea ecx, [ebp + 0x5c]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a5d3
lea eax, [ebp + 0x94]
push ecx
push eax
call fcn.0040f2d9
pop ecx
pop ecx
lea ecx, [ebp + 0x58]
jmp 0x43a6e2
push str._StartType:Install__url:
lea ecx, [ebp + 0xac]
call fcn.004018f6
mov esi, dword [ebp - 0x54]
add esi, 0x174
push ebx
mov ecx, esi
call fcn.00429b97
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401b1e
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x5c], 1
cmp eax, 1
jbe 0x43a695
push dword [ebp - 0x5c]
mov ecx, esi
call fcn.00429b97
push eax
push 0x4b2d1c
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.004135ef
add esp, 0xc
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.0042c029
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp - 0x7c]
call fcn.00401ad3
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jb 0x43a62c
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x43a6aa
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a6bf
lea eax, [ebp + 0x94]
push ecx
push eax
call fcn.0040f2d9
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.004446a8
mov ecx, eax
call fcn.00444a6d
lea ecx, [ebp + 0xac]
push ebx
push 1
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp + 0x90]
call fcn.00401ad3
mov esi, 0x206
call fcn.0043c920
mov ecx, eax
call fcn.0043d8b3
push 0x4b3140
lea ecx, [ebp - 0x50]
call fcn.004018f6
push ebx
lea ecx, [ebp + 4]
mov dword [ebp + 0x1c], 7
call fcn.00401d5a
lea eax, [ebp + 4]
push eax
call fcn.00439bb3
mov ecx, eax
call fcn.00437eed
xor eax, eax
push esi
mov word [ebp + 0xaf0], ax
lea eax, [ebp + 0xaf2]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x43a76d
lea eax, [ebp + 0x78]
push 0x4a6eb0
push eax
lea eax, [ebp + 0xaf0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b3140
lea ecx, [ebp + 0x3c]
call fcn.004018f6
lea eax, [ebp + 0x74]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403cf9
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x54], ebx
je 0x43a7b5
lea eax, [ebp + 0x3c]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403d47
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x43a7c1
lea eax, [ebp + 0x40]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403d5d
push ebx
push 1
lea ecx, [ebp + 0x3c]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp - 0x50]
call fcn.00401ad3
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401ad3
push 0xffffffffffffffff
push ebx
push 2
call fcn.004446a8
mov ecx, eax
call fcn.00444a6d
call fcn.004446a8
mov ecx, eax
call fcn.00445830
call fcn.004446a8
mov ecx, eax
call fcn.00445af3
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
je 0x43a85b
lea eax, [ebp - 0x55]
push eax
mov byte [ebp - 0x55], bl
call fcn.00403cce
mov ecx, eax
call fcn.00403d88
cmp byte [ebp - 0x55], bl
je 0x43a84a
push 0x2df
jmp 0x43a84f
push 0x2db
call fcn.004446a8
mov ecx, eax
call fcn.00445251
call fcn.004446a8
mov ecx, eax
call fcn.004470bb
lea eax, [ebp + 0x20]
push eax
call fcn.00403cce
mov ecx, eax
call fcn.00403cf9
xor eax, eax
push esi
mov word [ebp + 0x6e0], ax
lea eax, [ebp + 0x6e2]
push ebx
push eax
call fcn.00476cc0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x6e0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x6e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0x5c], eax
xor eax, eax
push esi
mov word [ebp + 0x8e8], ax
lea eax, [ebp + 0x8ea]
push ebx
push eax
call fcn.00476cc0
xor eax, eax
push esi
mov word [ebp + 0x2d0], ax
lea eax, [ebp + 0x2d2]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0x8e8]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0x2d0]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x24]
add esp, 0x30
cmp dword [ebp + 0x38], 8
jae 0x43a90d
lea eax, [ebp + 0x24]
push str.ProfilesBindingConfig.ini
push eax
lea eax, [ebp + 0x8e8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0x38], 8
mov eax, dword [ebp + 0x24]
jae 0x43a92c
lea eax, [ebp + 0x24]
push str.ProgramThunderRepair.exe
push eax
lea eax, [ebp + 0x2d0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xf0c], ebx
je 0x43a9a8
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
je 0x43a96b
push dword [ebp - 0x5c]
lea eax, [ebp + 0x8e8]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040c82a
add esp, 0x10
push ebx
lea eax, [ebp + 0x2d0]
push eax
lea eax, [ebp + 0x6e0]
push eax
call fcn.004037dc
mov eax, dword [ebp - 0x54]
add esp, 0xc
cmp dword [eax + 0x54], ebx
je 0x43a9a8
push 0x4b3140
push str.PatchName
lea eax, [ebp + 0x8e8]
push str.ThunderInstall
push eax
call fcn.0040c82a
add esp, 0x10
xor eax, eax
push esi
mov word [ebp + 0xc8], ax
lea eax, [ebp + 0xca]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0xc8]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x24]
add esp, 0x18
cmp dword [ebp + 0x38], 8
jae 0x43a9dc
lea eax, [ebp + 0x24]
push str.ProfilesConfig.ini
push eax
lea eax, [ebp + 0xc8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0xc8]
push eax
call fcn.0040bd34
mov ecx, eax
call fcn.0040be23
xor eax, eax
push esi
mov word [ebp + 0x4d8], ax
lea eax, [ebp + 0x4da]
push ebx
push eax
call fcn.00476cc0
push edi
lea eax, [ebp + 0x4d8]
push ebx
push eax
call fcn.00476cc0
mov eax, dword [ebp + 0x24]
add esp, 0x18
cmp dword [ebp + 0x38], 8
jae 0x43aa36
lea eax, [ebp + 0x24]
push str.Profiles_newtask.ini
push eax
lea eax, [ebp + 0x4d8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0x4d8]
push eax
call fcn.0040bd34
mov ecx, eax
call fcn.0040be7a
cmp dword [ebp + 0xf0c], ebx
je 0x43aa74
mov ecx, dword [ebp - 0x54]
call fcn.00437e4f
mov ecx, dword [ebp - 0x54]
call fcn.0043249c
mov esi, dword [ebp - 0x54]
mov ecx, esi
call fcn.0043831d
call fcn.004446a8
mov ecx, eax
call fcn.004446fd
cmp dword [esi + 0x198], 1
jne 0x43aaaa
push 1
push ebx
push ebx
lea eax, [ebp + 0x6e0]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0xf0c], ebx
je 0x43a24d
jmp 0x43a246