Function at 0x434c64
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xf04]
sub esp, 0xf7c
mov eax, dword [0x4b7f60]
xor eax, ebp
mov dword [ebp + 0xf00], eax
push ebx
push esi
push edi
mov dword [ebp - 0x40], ecx
call fcn.0041e223
call fcn.00434a22
lea eax, [ebp - 0x35]
xor ebx, ebx
push eax
mov byte [ebp - 0x35], bl
call fcn.0040402d
mov ecx, eax
call fcn.004040e7
lea eax, [ebp - 0x37]
push eax
mov byte [ebp - 0x37], bl
call fcn.0040402d
mov ecx, eax
call fcn.00404129
cmp byte [ebp - 0x37], bl
je 0x434cda
cmp byte [ebp - 0x35], bl
je 0x434cda
cmp dword [ebp + 0xf0c], ebx
je 0x434cda
push 0x264
call fcn.0043d04e
mov ecx, eax
call fcn.0043d2ee
call fcn.0040a746
mov edi, 0x208
mov esi, closesocket
test eax, eax
je 0x434d88
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.0046d720
add esp, 0xc
push 0x104
lea eax, [ebp + 0xcf8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 1
lea eax, [ebp + 0xcf8]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.00409666
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp + 0xcf8]
push eax
call fcn.00403697
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.0046d720
add esp, 0x24
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push dword [ebp - 0x3c]
lea eax, [ebp + 0xaf0]
push str.SIGN.IE0_x__s
push 0x104
push eax
call fcn.0046dfed
push 1
lea eax, [ebp + 0xaf0]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.00409666
add esp, 0x24
cmp dword [ebp + 0xf0c], ebx
je 0x434dd6
push ebx
lea eax, [ebp - 0x3c]
push eax
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.004095cb
add esp, 0x14
test eax, eax
jne 0x434dc2
push 0xffffffffffffffff
push ebx
push 0x2ea
call fcn.0043d04e
mov ecx, eax
call fcn.0043d413
jmp 0x434dd6
push ebx
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.00409666
add esp, 0x10
push 0x49cc98
lea ecx, [ebp + 4]
call fcn.004018ba
lea eax, [ebp + 0x20]
push eax
call fcn.0040b362
mov ecx, eax
call fcn.0040b477
push 0x49cc48
lea ecx, [ebp + 0x20]
call fcn.00401941
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x434e0c
lea eax, [ebp + 8]
push 1
push ebx
push ebx
push eax
call fcn.00403c21
mov eax, dword [ebp + 0x24]
add esp, 0x10
cmp dword [ebp + 0x38], 8
jae 0x434e25
lea eax, [ebp + 0x24]
push 1
push ebx
push ebx
push eax
call fcn.00403c21
add esp, 0x10
mov esi, 0x4a7dd0
push esi
lea ecx, [ebp + 0xac]
call fcn.004018ba
cmp dword [ebp + 0xf0c], ebx
je 0x4351d8
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x44], ebx
jne 0x435170
push esi
lea ecx, [ebp + 0x58]
call fcn.004018ba
lea eax, [ebp + 0x58]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.00404058
mov eax, dword [ebp - 0x40]
cmp byte [eax + 0x4c], bl
je 0x43507f
xor eax, eax
push 0x206
mov word [ebp + 0xcf8], ax
lea eax, [ebp + 0xcfa]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0xcf8]
push ebx
push eax
call fcn.0046d720
mov eax, dword [ebp + 0x5c]
add esp, 0x18
cmp dword [ebp + 0x70], 8
jae 0x434eb8
lea eax, [ebp + 0x5c]
push 0x49cc1c
push eax
lea eax, [ebp + 0xcf8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov esi, 0x49cc18
push esi
lea ecx, [ebp + 0x90]
call fcn.004018ba
push esi
lea eax, [ebp + 0xcf8]
push eax
lea eax, [ebp + 0x90]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040f2de
add esp, 0xc
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.0040f2de
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x90]
call fcn.00401965
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00401a1c
call fcn.004462ec
mov ecx, eax
call fcn.00446007
test eax, eax
je 0x43504a
mov esi, dword [ebp - 0x40]
mov eax, dword [esi + 0x180]
sub eax, dword [esi + 0x17c]
add esi, 0x170
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x43504a
push str._StartType:Install__url:
lea ecx, [ebp + 0x74]
call fcn.004018ba
push ebx
mov ecx, esi
call fcn.00424c2e
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x74]
call fcn.00401a67
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x3c], 1
cmp eax, 1
jbe 0x434ffc
push dword [ebp - 0x3c]
mov ecx, esi
call fcn.00424c2e
push eax
push 0x4a7984
lea eax, [ebp + 0x74]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0040f2de
add esp, 0xc
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004271fc
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x74]
call fcn.00401965
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.00401a1c
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jb 0x434f99
cmp dword [ebp + 0x8c], 8
mov ecx, dword [ebp + 0x78]
jae 0x43500b
lea ecx, [ebp + 0x78]
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x435020
lea eax, [ebp + 0x94]
push ecx
push eax
call fcn.0040aa14
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.0043d04e
mov ecx, eax
call fcn.0043d413
push ebx
push 1
lea ecx, [ebp + 0x74]
call fcn.00401a1c
jmp 0x43506c
cmp dword [ebp + 0xa8], 8
mov eax, dword [ebp + 0x94]
jae 0x43505f
lea eax, [ebp + 0x94]
push str._StartType:Install
push eax
call fcn.0040aa14
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp + 0x90]
call fcn.00401a1c
mov esi, 0x4a7dd0
push esi
lea ecx, [ebp - 0x34]
call fcn.004018ba
push ebx
lea ecx, [ebp - 0x18]
mov dword [ebp], 7
call fcn.00401ca3
lea eax, [ebp - 0x18]
push eax
call fcn.00434a22
mov ecx, eax
call fcn.004329c5
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp + 0xaf0], ax
lea eax, [ebp + 0xaf2]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0xaf0]
push ebx
push eax
call fcn.0046d720
mov eax, dword [ebp + 0x5c]
add esp, 0x18
cmp dword [ebp + 0x70], 8
jae 0x4350e1
lea eax, [ebp + 0x5c]
push 0x49cc1c
push eax
lea eax, [ebp + 0xaf0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4a7dd0
lea ecx, [ebp + 0x3c]
call fcn.004018ba
lea eax, [ebp + 0x58]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.00404058
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x50], ebx
je 0x435129
lea eax, [ebp + 0x3c]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.004040a6
cmp dword [ebp + 0x54], 8
mov eax, dword [ebp + 0x40]
jae 0x435135
lea eax, [ebp + 0x40]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.004040bc
push ebx
push 1
lea ecx, [ebp + 0x3c]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 0x18]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp - 0x34]
call fcn.00401a1c
push ebx
push 1
lea ecx, [ebp + 0x58]
call fcn.00401a1c
jmp 0x435175
mov esi, 0x206
push 0xffffffffffffffff
push ebx
push 2
call fcn.0043d04e
mov ecx, eax
call fcn.0043d413
call fcn.0043d04e
mov ecx, eax
call fcn.0043dece
call fcn.0043d04e
mov ecx, eax
call fcn.0043e191
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x44], ebx
je 0x4351dd
lea eax, [ebp - 0x36]
push eax
mov byte [ebp - 0x36], bl
call fcn.0040402d
mov ecx, eax
call fcn.004040e7
cmp byte [ebp - 0x36], bl
je 0x4351d1
push 0x2df
call fcn.0043d04e
mov ecx, eax
call fcn.0043d8f1
jmp 0x4351dd
push 0x2db
jmp 0x4351c3
mov esi, 0x206
call fcn.0043d04e
mov ecx, eax
call fcn.0043f74a
lea eax, [ebp + 0xac]
push eax
call fcn.0040402d
mov ecx, eax
call fcn.00404058
xor eax, eax
push esi
mov word [ebp + 0x6e0], ax
lea eax, [ebp + 0x6e2]
push ebx
push eax
call fcn.0046d720
add esp, 0xc
push 0x104
lea eax, [ebp + 0x6e0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x6e0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0x3c], eax
xor eax, eax
push esi
mov word [ebp + 0x8e8], ax
lea eax, [ebp + 0x8ea]
push ebx
push eax
call fcn.0046d720
xor eax, eax
push esi
mov word [ebp + 0xc8], ax
lea eax, [ebp + 0xca]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0x8e8]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0xc8]
push ebx
push eax
call fcn.0046d720
mov eax, dword [ebp + 0xb0]
add esp, 0x30
cmp dword [ebp + 0xc4], 8
jae 0x43529b
lea eax, [ebp + 0xb0]
push str.ProfilesBindingConfig.ini
push eax
lea eax, [ebp + 0x8e8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xc4], 8
mov eax, dword [ebp + 0xb0]
jae 0x4352c3
lea eax, [ebp + 0xb0]
push str.ProgramThunderRepair.exe
push eax
lea eax, [ebp + 0xc8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xf0c], ebx
je 0x435358
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x44], ebx
je 0x435302
push dword [ebp - 0x3c]
lea eax, [ebp + 0x8e8]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040a6ce
add esp, 0x10
push dword [ebp - 0x3c]
lea eax, [ebp + 0x8e8]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040a6ce
push ebx
lea eax, [ebp + 0xc8]
push eax
lea eax, [ebp + 0x6e0]
push eax
call fcn.00403b67
mov eax, dword [ebp - 0x40]
add esp, 0x1c
cmp dword [eax + 0x50], ebx
je 0x435358
push 0x4a7dd0
push str.PatchName
lea eax, [ebp + 0x8e8]
push str.ThunderInstall
push eax
call fcn.0040a6ce
add esp, 0x10
xor eax, eax
push esi
mov word [ebp + 0x2d0], ax
lea eax, [ebp + 0x2d2]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0x2d0]
push ebx
push eax
call fcn.0046d720
mov eax, dword [ebp + 0xb0]
add esp, 0x18
cmp dword [ebp + 0xc4], 8
jae 0x435395
lea eax, [ebp + 0xb0]
push str.ProfilesConfig.ini
push eax
lea eax, [ebp + 0x2d0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0x2d0]
push eax
call fcn.00409be3
mov ecx, eax
call fcn.00409cd2
xor eax, eax
push esi
mov word [ebp + 0x4d8], ax
lea eax, [ebp + 0x4da]
push ebx
push eax
call fcn.0046d720
push edi
lea eax, [ebp + 0x4d8]
push ebx
push eax
call fcn.0046d720
mov eax, dword [ebp + 0xb0]
add esp, 0x18
cmp dword [ebp + 0xc4], 8
jae 0x4353f8
lea eax, [ebp + 0xb0]
push str.Profiles_newtask.ini
push eax
lea eax, [ebp + 0x4d8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0x4d8]
push eax
call fcn.00409be3
mov ecx, eax
call fcn.00409d29
cmp dword [ebp + 0xf0c], ebx
je 0x435436
mov ecx, dword [ebp - 0x40]
call fcn.0043293e
mov ecx, dword [ebp - 0x40]
call fcn.0042d707
mov esi, dword [ebp - 0x40]
mov ecx, esi
call fcn.00433123
call fcn.0043d04e
mov ecx, eax
call fcn.0043d0a3
cmp dword [esi + 0x194], 1
jne 0x43546c
push 1
push ebx
push ebx
lea eax, [ebp + 0x6e0]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0xf0c], ebx
je 0x43547b
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 1
jmp 0x435475