Function at 0x4343ea
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
lea ebp, [esp - 0xf08]
sub esp, 0xf80
mov eax, dword [0x4b7f10]
xor eax, ebp
mov dword [ebp + 0xf04], eax
push ebx
push esi
push edi
mov dword [ebp - 0x3c], ecx
call fcn.0041e409
call fcn.004341a8
lea eax, [ebp - 0x33]
xor ebx, ebx
push eax
mov byte [ebp - 0x33], bl
call fcn.00404069
mov ecx, eax
call fcn.0040410d
lea eax, [ebp - 0x32]
push eax
mov byte [ebp - 0x32], bl
call fcn.00404069
mov ecx, eax
call fcn.0040414f
cmp byte [ebp - 0x32], bl
je 0x434460
cmp byte [ebp - 0x33], bl
je 0x434460
cmp dword [ebp + 0xf10], ebx
je 0x434460
push 0x264
call fcn.0043cb31
mov ecx, eax
call fcn.0043cdd1
call fcn.0040a6bc
mov edi, 0x208
mov esi, closesocket
test eax, eax
je 0x43450e
push edi
lea eax, [ebp + 0xcfc]
push ebx
push eax
call fcn.0046cbb0
add esp, 0xc
push 0x104
lea eax, [ebp + 0xcfc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 1
lea eax, [ebp + 0xcfc]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040963e
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp + 0xcfc]
push eax
call fcn.004036a1
push edi
lea eax, [ebp + 0xaf4]
push ebx
push eax
call fcn.0046cbb0
add esp, 0x24
lea eax, [ebp + 0xcfc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push dword [ebp - 0x38]
lea eax, [ebp + 0xaf4]
push str.SIGN.IE0_x__s
push 0x104
push eax
call fcn.0046d47d
push 1
lea eax, [ebp + 0xaf4]
push eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsCompatibility_AssistantPersisted
push esi
call fcn.0040963e
add esp, 0x24
cmp dword [ebp + 0xf10], ebx
je 0x43455c
push ebx
lea eax, [ebp - 0x38]
push eax
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.004095a3
add esp, 0x14
test eax, eax
jne 0x434548
push 0xffffffffffffffff
push ebx
push 0x2ea
call fcn.0043cb31
mov ecx, eax
call fcn.0043cef6
jmp 0x43455c
push ebx
push str.Install
push str.SoftwareThunder_NetworkRecordThunder
push esi
call fcn.0040963e
add esp, 0x10
push 0x49cbc8
lea ecx, [ebp + 0x40]
call fcn.004018f6
lea eax, [ebp + 8]
push eax
call fcn.0040b2d8
mov ecx, eax
call fcn.0040b3ed
push 0x49cb78
lea ecx, [ebp + 8]
call fcn.0040197d
cmp dword [ebp + 0x58], 8
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x40], ebx
jae 0x434595
lea eax, [ebp + 0x44]
lea ecx, [ebp - 0x40]
push ecx
push eax
call fcn.00403721
pop ecx
pop ecx
cmp dword [ebp - 0x40], ebx
je 0x4345d8
cmp dword [ebp + 0x58], 8
mov eax, dword [ebp + 0x44]
jae 0x4345b2
lea eax, [ebp + 0x44]
push 1
push ebx
push ebx
push eax
call fcn.00403c2b
mov eax, dword [ebp + 0xc]
add esp, 0x10
cmp dword [ebp + 0x20], 8
jae 0x4345cb
lea eax, [ebp + 0xc]
push 1
push ebx
push ebx
push eax
call fcn.00403c2b
add esp, 0x10
mov esi, 0x4a7ca0
push esi
lea ecx, [ebp + 0xb0]
call fcn.004018f6
cmp dword [ebp + 0xf10], ebx
je 0x43497e
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x44], ebx
jne 0x434916
push esi
lea ecx, [ebp + 0x5c]
call fcn.004018f6
lea eax, [ebp + 0x5c]
push eax
call fcn.00404069
mov ecx, eax
call fcn.00404094
mov eax, dword [ebp - 0x3c]
cmp byte [eax + 0x4c], bl
je 0x434825
xor eax, eax
push 0x206
mov word [ebp + 0xcfc], ax
lea eax, [ebp + 0xcfe]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0xcfc]
push ebx
push eax
call fcn.0046cbb0
mov eax, dword [ebp + 0x60]
add esp, 0x18
cmp dword [ebp + 0x74], 8
jae 0x43465e
lea eax, [ebp + 0x60]
push 0x49cb50
push eax
lea eax, [ebp + 0xcfc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov esi, 0x49cb4c
push esi
lea ecx, [ebp + 0x94]
call fcn.004018f6
push esi
lea eax, [ebp + 0xcfc]
push eax
lea eax, [ebp + 0x94]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0040f161
add esp, 0xc
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0040f161
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x94]
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp + 0x78]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00401a58
call fcn.00445dbc
mov ecx, eax
call fcn.00445abc
test eax, eax
je 0x4347f0
mov esi, dword [ebp - 0x3c]
mov eax, dword [esi + 0x180]
sub eax, dword [esi + 0x17c]
add esi, 0x170
push 0x1c
cdq
pop ecx
idiv ecx
test eax, eax
je 0x4347f0
push str._StartType:Install__url:
lea ecx, [ebp + 0x78]
call fcn.004018f6
push ebx
mov ecx, esi
call fcn.0040d9b6
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x78]
call fcn.00401aa3
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0x38], 1
cmp eax, 1
jbe 0x4347a2
push dword [ebp - 0x38]
mov ecx, esi
call fcn.0040d9b6
push eax
push 0x4a7854
lea eax, [ebp + 0x78]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0040f161
add esp, 0xc
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00426e2e
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x78]
call fcn.004019a1
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.00401a58
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
push 0x1c
cdq
pop ecx
idiv ecx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jb 0x43473f
cmp dword [ebp + 0x90], 8
mov ecx, dword [ebp + 0x7c]
jae 0x4347b1
lea ecx, [ebp + 0x7c]
cmp dword [ebp + 0xac], 8
mov eax, dword [ebp + 0x98]
jae 0x4347c6
lea eax, [ebp + 0x98]
push ecx
push eax
call fcn.0040a98a
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push 0x2e9
call fcn.0043cb31
mov ecx, eax
call fcn.0043cef6
push ebx
push 1
lea ecx, [ebp + 0x78]
call fcn.00401a58
jmp 0x434812
cmp dword [ebp + 0xac], 8
mov eax, dword [ebp + 0x98]
jae 0x434805
lea eax, [ebp + 0x98]
push str._StartType:Install
push eax
call fcn.0040a98a
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp + 0x94]
call fcn.00401a58
mov esi, 0x4a7ca0
push esi
lea ecx, [ebp - 0x30]
call fcn.004018f6
push ebx
lea ecx, [ebp - 0x14]
mov dword [ebp + 4], 7
call fcn.00401cdf
lea eax, [ebp - 0x14]
push eax
call fcn.004341a8
mov ecx, eax
call fcn.00432547
xor eax, eax
mov esi, 0x206
push esi
mov word [ebp + 0xaf4], ax
lea eax, [ebp + 0xaf6]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0xaf4]
push ebx
push eax
call fcn.0046cbb0
mov eax, dword [ebp + 0x60]
add esp, 0x18
cmp dword [ebp + 0x74], 8
jae 0x434887
lea eax, [ebp + 0x60]
push 0x49cb50
push eax
lea eax, [ebp + 0xaf4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
push 0x4a7ca0
lea ecx, [ebp + 0x24]
call fcn.004018f6
lea eax, [ebp + 0x5c]
push eax
call fcn.00404069
mov ecx, eax
call fcn.00404094
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x50], ebx
je 0x4348cf
lea eax, [ebp + 0x24]
push eax
call fcn.00404069
mov ecx, eax
call fcn.004040cc
cmp dword [ebp + 0x3c], 8
mov eax, dword [ebp + 0x28]
jae 0x4348db
lea eax, [ebp + 0x28]
push eax
call fcn.00404069
mov ecx, eax
call fcn.004040e2
push ebx
push 1
lea ecx, [ebp + 0x24]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp - 0x14]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp - 0x30]
call fcn.00401a58
push ebx
push 1
lea ecx, [ebp + 0x5c]
call fcn.00401a58
jmp 0x43491b
mov esi, 0x206
push 0xffffffffffffffff
push ebx
push 2
call fcn.0043cb31
mov ecx, eax
call fcn.0043cef6
call fcn.0043cb31
mov ecx, eax
call fcn.0043d9b1
call fcn.0043cb31
mov ecx, eax
call fcn.0043dc74
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x44], ebx
je 0x434983
lea eax, [ebp - 0x31]
push eax
mov byte [ebp - 0x31], bl
call fcn.00404069
mov ecx, eax
call fcn.0040410d
cmp byte [ebp - 0x31], bl
je 0x434977
push 0x2df
call fcn.0043cb31
mov ecx, eax
call fcn.0043d3d4
jmp 0x434983
push 0x2db
jmp 0x434969
mov esi, 0x206
call fcn.0043cb31
mov ecx, eax
call fcn.0043f22d
lea eax, [ebp + 0xb0]
push eax
call fcn.00404069
mov ecx, eax
call fcn.00404094
xor eax, eax
push esi
mov word [ebp + 0x6e4], ax
lea eax, [ebp + 0x6e6]
push ebx
push eax
call fcn.0046cbb0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x6e4]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp + 0x6e4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov dword [ebp - 0x38], eax
xor eax, eax
push esi
mov word [ebp + 0x8ec], ax
lea eax, [ebp + 0x8ee]
push ebx
push eax
call fcn.0046cbb0
xor eax, eax
push esi
mov word [ebp + 0x2d4], ax
lea eax, [ebp + 0x2d6]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0x8ec]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0x2d4]
push ebx
push eax
call fcn.0046cbb0
mov eax, dword [ebp + 0xb4]
add esp, 0x30
cmp dword [ebp + 0xc8], 8
jae 0x434a41
lea eax, [ebp + 0xb4]
push str.ProfilesBindingConfig.ini
push eax
lea eax, [ebp + 0x8ec]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xc8], 8
mov eax, dword [ebp + 0xb4]
jae 0x434a69
lea eax, [ebp + 0xb4]
push str.ProgramThunderRepair.exe
push eax
lea eax, [ebp + 0x2d4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
cmp dword [ebp + 0xf10], ebx
je 0x434afe
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x44], ebx
je 0x434aa8
push dword [ebp - 0x38]
lea eax, [ebp + 0x8ec]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040a644
add esp, 0x10
push dword [ebp - 0x38]
lea eax, [ebp + 0x8ec]
push str.Name
push str.ThunderInstall
push eax
call fcn.0040a644
push ebx
lea eax, [ebp + 0x2d4]
push eax
lea eax, [ebp + 0x6e4]
push eax
call fcn.00403b71
mov eax, dword [ebp - 0x3c]
add esp, 0x1c
cmp dword [eax + 0x50], ebx
je 0x434afe
push 0x4a7ca0
push str.PatchName
lea eax, [ebp + 0x8ec]
push str.ThunderInstall
push eax
call fcn.0040a644
add esp, 0x10
xor eax, eax
push esi
mov word [ebp + 0x4dc], ax
lea eax, [ebp + 0x4de]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0x4dc]
push ebx
push eax
call fcn.0046cbb0
mov eax, dword [ebp + 0xb4]
add esp, 0x18
cmp dword [ebp + 0xc8], 8
jae 0x434b3b
lea eax, [ebp + 0xb4]
push str.ProfilesConfig.ini
push eax
lea eax, [ebp + 0x4dc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0x4dc]
push eax
call fcn.00409b59
mov ecx, eax
call fcn.00409c48
xor eax, eax
push esi
mov word [ebp + 0xcc], ax
lea eax, [ebp + 0xce]
push ebx
push eax
call fcn.0046cbb0
push edi
lea eax, [ebp + 0xcc]
push ebx
push eax
call fcn.0046cbb0
mov eax, dword [ebp + 0xb4]
add esp, 0x18
cmp dword [ebp + 0xc8], 8
jae 0x434b9e
lea eax, [ebp + 0xb4]
push str.Profiles_newtask.ini
push eax
lea eax, [ebp + 0xcc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [ebp + 0xcc]
push eax
call fcn.00409b59
mov ecx, eax
call fcn.00409c9f
cmp dword [ebp + 0xf10], ebx
je 0x434bdc
mov ecx, dword [ebp - 0x3c]
call fcn.004324c0
mov ecx, dword [ebp - 0x3c]
call fcn.0042d2e7
mov esi, dword [ebp - 0x3c]
mov ecx, esi
call fcn.00432977
call fcn.0043cb31
mov ecx, eax
call fcn.0043cb86
cmp dword [esi + 0x194], 1
jne 0x434c12
push 1
push ebx
push ebx
lea eax, [ebp + 0x6e4]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp + 0xf10], ebx
je 0x434c21
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 1
jmp 0x434c1b