Function at 0x439847
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xf04]
sub esp, 0xf80
mov eax, dword [0x4c2f90]
xor eax, ebp
mov dword [ebp + 0xf00], eax
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x54], esi
call fcn.00422e32
call fcn.00439605
xor ebx, ebx
cmp dword [eax + 0x148], ebx
je 0x439ca3
cmp dword [ebp + 0xf0c], ebx
je 0x43989b
push 0x265
call fcn.004442e3
mov ecx, eax
call fcn.00444583
cmp byte [esi + 0x50], bl
je 0x439c84
cmp dword [ebp + 0xf0c], ebx
je 0x439c84
cmp dword [esi + 0x48], ebx
jne 0x439c84
push 0x4b28f8
lea ecx, [ebp + 0x74]
call fcn.00401903
lea eax, [ebp + 0x74]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403c47
cmp byte [esi + 0x50], bl
je 0x439c79
xor eax, eax
push 0x206
mov word [ebp + 0xaf0], ax
lea eax, [ebp + 0xaf2]
push ebx
push eax
call fcn.004764d0
mov edi, 0x208
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x43991f
lea eax, [ebp + 0x78]
mov esi, dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4a6eb8
push eax
lea eax, [ebp + 0xaf0]
push eax
call esi
xor eax, eax
push 0x206
mov word [ebp + 0xcf8], ax
lea eax, [ebp + 0xcfa]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x43996f
lea eax, [ebp + 0x78]
push 0x4a6e80
push eax
lea eax, [ebp + 0xcf8]
push eax
call esi
mov esi, 0x4a6e7c
push esi
lea ecx, [ebp + 0x90]
call fcn.00401903
push esi
lea ecx, [ebp + 0x58]
call fcn.00401903
push esi
lea eax, [ebp + 0xaf0]
push eax
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.00413270
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x90]
call fcn.004019ae
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp + 4]
call fcn.00401a65
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401a65
push esi
lea eax, [ebp + 0xcf8]
push eax
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.00413270
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.004019ae
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401a65
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401a65
mov esi, dword [ebp - 0x54]
mov ecx, dword [esi + 0x38]
push 0x1252
push 0x11
push 9
push 7
call fcn.0044a74d
mov dword [ebp - 0x5c], eax
call fcn.0044e6cc
mov ecx, eax
call fcn.0044e3d1
test eax, eax
je 0x439c40
mov eax, dword [esi + 0x184]
sub eax, dword [esi + 0x180]
add esi, 0x174
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x439c40
lea ecx, [ebp + 0xac]
cmp dword [ebp - 0x5c], edi
jne 0x439b72
push str.__NoInterfaceUrl:
call fcn.00401903
push ebx
mov ecx, esi
call fcn.00411e4e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401ad0
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x54], edi
cmp eax, edi
jbe 0x439b22
push dword [ebp - 0x54]
mov ecx, esi
call fcn.00411e4e
push eax
push 0x4b24d4
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.0042ba05
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.004019ae
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401a65
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401a65
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jb 0x439abb
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x439b37
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0x70], 8
mov eax, dword [ebp + 0x5c]
jae 0x439b43
lea eax, [ebp + 0x5c]
push ecx
push eax
call fcn.0040ef00
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.004442e3
mov ecx, eax
call fcn.004446a8
push ebx
push edi
lea ecx, [ebp + 0xac]
call fcn.00401a65
jmp 0x439c62
push str._StartType:Install__url:
call fcn.00401903
push ebx
mov ecx, esi
call fcn.00411e4e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401ad0
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x54], edi
cmp eax, edi
jbe 0x439c0d
push dword [ebp - 0x54]
mov ecx, esi
call fcn.00411e4e
push eax
push 0x4b24d4
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp + 0x3c]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 4]
push eax
call fcn.0042ba05
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.004019ae
push ebx
push edi
lea ecx, [ebp + 4]
call fcn.00401a65
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.00401a65
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jb 0x439ba6
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x439c22
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x439b43
lea eax, [ebp + 0x94]
jmp 0x439b43
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x439c55
lea eax, [ebp + 0x94]
push str._StartType:Install
push eax
call fcn.0040ef00
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp + 0x58]
call fcn.00401a65
push ebx
push edi
lea ecx, [ebp + 0x90]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401a65
call fcn.004442e3
mov ecx, eax
call fcn.00444338
cmp dword [ebp + 0xf0c], ebx
je 0x439c9f
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 1
jmp 0x439c99
cmp dword [ebp + 0xf0c], ebx
je 0x439cae
push ebx
jmp 0x439cbc
cmp dword [esi + 0x108], ebx
je 0x439cba
push 1
jmp 0x439cbc
push 2
call fcn.004442e3
mov ecx, eax
call fcn.00444a5e
lea eax, [ebp - 0x56]
push eax
mov byte [ebp - 0x56], bl
call fcn.00403c1c
mov ecx, eax
call fcn.00403cd6
lea eax, [ebp - 0x5d]
push eax
mov byte [ebp - 0x5d], bl
call fcn.00403c1c
mov ecx, eax
call fcn.00403d18
cmp byte [ebp - 0x5d], bl
je 0x439d11
cmp byte [ebp - 0x56], bl
je 0x439d11
cmp dword [ebp + 0xf0c], ebx
je 0x439d11
push 0x264
call fcn.004442e3
mov ecx, eax
call fcn.00444583
call fcn.0040ede8
mov edi, 0x208
mov esi, closesocket
test eax, eax
je 0x439dbf
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.004764d0
add esp, 0xc
push 0x104
lea eax, [ebp + 0xcf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 1
lea eax, [ebp + 0xcf8]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040b4ec
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp + 0xcf8]
push eax
call fcn.00403281
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.004764d0
add esp, 0x24
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push dword [ebp - 0x5c]
lea eax, [ebp + 0xaf0]
push str.SIGN.IE0_x__s
push 0x104
push eax
call fcn.00476d9d
push 1
lea eax, [ebp + 0xaf0]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040b4ec
add esp, 0x24
cmp dword [ebp + 0xf0c], ebx
je 0x439e0d
push ebx
lea eax, [ebp - 0x5c]
push eax
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.0040b451
add esp, 0x14
test eax, eax
jne 0x439df9
push 0xffffffffffffffff
push ebx
push 0x2ea
call fcn.004442e3
mov ecx, eax
call fcn.004446a8
jmp 0x439e0d
push ebx
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.0040b4ec
add esp, 0x10
push 0x4a6c70
lea ecx, [ebp - 0x34]
call fcn.00401903
lea eax, [ebp - 0x18]
push eax
call fcn.0040eb79
mov ecx, eax
call fcn.0040ec8e
push 0x4a6c20
lea ecx, [ebp - 0x18]
call fcn.0040198a
cmp dword [ebp - 0x1c], 8
mov eax, dword [ebp - 0x30]
jae 0x439e43
lea eax, [ebp - 0x30]
push 1
push ebx
push ebx
push eax
call fcn.0040380b
mov eax, dword [ebp - 0x14]
add esp, 0x10
cmp dword [ebp], 8
jae 0x439e5c
lea eax, [ebp - 0x14]
push 1
push ebx
push ebx
push eax
call fcn.0040380b
add esp, 0x10
push 0x4b28f8
lea ecx, [ebp + 0x20]
call fcn.00401903
mov esi, 0x206
cmp dword [ebp + 0xf0c], ebx
je 0x43a2ad
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
jne 0x43a24c
push 0x4b28f8
lea ecx, [ebp + 0x74]
call fcn.00401903
lea eax, [ebp + 0x74]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403c47
mov eax, dword [ebp - 0x54]
cmp byte [eax + 0x50], bl
je 0x43a14f
xor eax, eax
push esi
mov word [ebp + 0xcf8], ax
lea eax, [ebp + 0xcfa]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x439ef3
lea eax, [ebp + 0x78]
push 0x4a6eb8
push eax
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov esi, 0x4a6e7c
push esi
lea ecx, [ebp + 0x90]
call fcn.00401903
push esi
lea eax, [ebp + 0xcf8]
push eax
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp + 0xac]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.00413270
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x90]
call fcn.004019ae
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp + 0xac]
call fcn.00401a65
call fcn.0044e6cc
mov ecx, eax
call fcn.0044e3d1
mov ecx, dword [ebp - 0x54]
test eax, eax
je 0x439f93
mov eax, dword [ecx + 0x184]
sub eax, dword [ecx + 0x180]
push 0x1c
cdq
pop esi
idiv esi
test eax, eax
jne 0x439fc2
cmp dword [ecx + 0x19c], ebx
jne 0x439fca
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x439fb0
lea eax, [ebp + 0x94]
push str._StartType:Install
push eax
call fcn.0040ef00
pop ecx
pop ecx
jmp 0x43a13c
cmp dword [ecx + 0x19c], ebx
je 0x43a036
push str._StartType:Install__Feature:
lea ecx, [ebp + 0x58]
call fcn.00401903
lea eax, [ebp + 0xac]
push eax
call fcn.0040d437
mov ecx, eax
call fcn.0040d4e5
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.00401ad0
push ebx
push 1
lea ecx, [ebp + 0xac]
call fcn.00401a65
cmp dword [ebp + 0x70], 8
mov ecx, dword [ebp + 0x5c]
jae 0x43a010
lea ecx, [ebp + 0x5c]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a025
lea eax, [ebp + 0x94]
push ecx
push eax
call fcn.0040ef00
pop ecx
pop ecx
lea ecx, [ebp + 0x58]
jmp 0x43a134
push str._StartType:Install__url:
lea ecx, [ebp + 0xac]
call fcn.00401903
mov esi, dword [ebp - 0x54]
add esi, 0x174
push ebx
mov ecx, esi
call fcn.00411e4e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.00401ad0
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x5c], 1
cmp eax, 1
jbe 0x43a0e7
push dword [ebp - 0x5c]
mov ecx, esi
call fcn.00411e4e
push eax
push 0x4b24d4
lea eax, [ebp + 0xac]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.00413270
add esp, 0xc
push eax
lea eax, [ebp + 0x58]
push eax
call fcn.0042ba05
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0xac]
call fcn.004019ae
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp - 0x7c]
call fcn.00401a65
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jb 0x43a07e
cmp dword [ebp + 0xc4], 8
mov ecx, dword [ebp + 0xb0]
jae 0x43a0fc
lea ecx, [ebp + 0xb0]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43a111
lea eax, [ebp + 0x94]
push ecx
push eax
call fcn.0040ef00
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.004442e3
mov ecx, eax
call fcn.004446a8
lea ecx, [ebp + 0xac]
push ebx
push 1
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp + 0x90]
call fcn.00401a65
mov esi, 0x206
call fcn.0043c372
mov ecx, eax
call fcn.0043d305
push 0x4b28f8
lea ecx, [ebp - 0x50]
call fcn.00401903
push ebx
lea ecx, [ebp + 4]
mov dword [ebp + 0x1c], 7
call fcn.00401d0c
lea eax, [ebp + 4]
push eax
call fcn.00439605
mov ecx, eax
call fcn.0043793f
xor eax, eax
push esi
mov word [ebp + 0xaf0], ax
lea eax, [ebp + 0xaf2]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x78]
add esp, 0x18
cmp dword [ebp + 0x8c], 8
jae 0x43a1bf
lea eax, [ebp + 0x78]
push 0x4a6eb8
push eax
lea eax, [ebp + 0xaf0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4b28f8
lea ecx, [ebp + 0x3c]
call fcn.00401903
lea eax, [ebp + 0x74]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403c47
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x54], ebx
je 0x43a207
lea eax, [ebp + 0x3c]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403c95
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x43a213
lea eax, [ebp + 0x40]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403cab
push ebx
push 1
lea ecx, [ebp + 0x3c]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp - 0x50]
call fcn.00401a65
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401a65
push 0xffffffffffffffff
push ebx
push 2
call fcn.004442e3
mov ecx, eax
call fcn.004446a8
call fcn.004442e3
mov ecx, eax
call fcn.0044546b
call fcn.004442e3
mov ecx, eax
call fcn.0044572e
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
je 0x43a2ad
lea eax, [ebp - 0x55]
push eax
mov byte [ebp - 0x55], bl
call fcn.00403c1c
mov ecx, eax
call fcn.00403cd6
cmp byte [ebp - 0x55], bl
je 0x43a29c
push 0x2df
jmp 0x43a2a1
push 0x2db
call fcn.004442e3
mov ecx, eax
call fcn.00444e8c
call fcn.004442e3
mov ecx, eax
call fcn.00446cf6
lea eax, [ebp + 0x20]
push eax
call fcn.00403c1c
mov ecx, eax
call fcn.00403c47
xor eax, eax
push esi
mov word [ebp + 0x6e0], ax
lea eax, [ebp + 0x6e2]
push ebx
push eax
call fcn.004764d0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x6e0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x6e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0x5c], eax
xor eax, eax
push esi
mov word [ebp + 0x8e8], ax
lea eax, [ebp + 0x8ea]
push ebx
push eax
call fcn.004764d0
xor eax, eax
push esi
mov word [ebp + 0x2d0], ax
lea eax, [ebp + 0x2d2]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0x8e8]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0x2d0]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x24]
add esp, 0x30
cmp dword [ebp + 0x38], 8
jae 0x43a35f
lea eax, [ebp + 0x24]
push str.ProfilesBindingConfig.ini
push eax
lea eax, [ebp + 0x8e8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0x38], 8
mov eax, dword [ebp + 0x24]
jae 0x43a37e
lea eax, [ebp + 0x24]
push str.ProgramThunderRepair.exe
push eax
lea eax, [ebp + 0x2d0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xf0c], ebx
je 0x43a3fa
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x48], ebx
je 0x43a3bd
push dword [ebp - 0x5c]
lea eax, [ebp + 0x8e8]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040c4ca
add esp, 0x10
push ebx
lea eax, [ebp + 0x2d0]
push eax
lea eax, [ebp + 0x6e0]
push eax
call fcn.00403751
mov eax, dword [ebp - 0x54]
add esp, 0xc
cmp dword [eax + 0x54], ebx
je 0x43a3fa
push 0x4b28f8
push str.PatchName
lea eax, [ebp + 0x8e8]
push str.ThunderInstall
push eax
call fcn.0040c4ca
add esp, 0x10
xor eax, eax
push esi
mov word [ebp + 0xc8], ax
lea eax, [ebp + 0xca]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0xc8]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x24]
add esp, 0x18
cmp dword [ebp + 0x38], 8
jae 0x43a42e
lea eax, [ebp + 0x24]
push str.ProfilesConfig.ini
push eax
lea eax, [ebp + 0xc8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0xc8]
push eax
call fcn.0040b9d4
mov ecx, eax
call fcn.0040bac3
xor eax, eax
push esi
mov word [ebp + 0x4d8], ax
lea eax, [ebp + 0x4da]
push ebx
push eax
call fcn.004764d0
push edi
lea eax, [ebp + 0x4d8]
push ebx
push eax
call fcn.004764d0
mov eax, dword [ebp + 0x24]
add esp, 0x18
cmp dword [ebp + 0x38], 8
jae 0x43a488
lea eax, [ebp + 0x24]
push str.Profiles_newtask.ini
push eax
lea eax, [ebp + 0x4d8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0x4d8]
push eax
call fcn.0040b9d4
mov ecx, eax
call fcn.0040bb1a
cmp dword [ebp + 0xf0c], ebx
je 0x43a4c6
mov ecx, dword [ebp - 0x54]
call fcn.004378a1
mov ecx, dword [ebp - 0x54]
call fcn.00431efa
mov esi, dword [ebp - 0x54]
mov ecx, esi
call fcn.00437d6f
call fcn.004442e3
mov ecx, eax
call fcn.00444338
cmp dword [esi + 0x198], 1
jne 0x43a4fc
push 1
push ebx
push ebx
lea eax, [ebp + 0x6e0]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0xf0c], ebx
je 0x439c9f
jmp 0x439c98