Function at 0x423c9f
Capabilities:
Get graphical window text
Start service

Disassembly:
mov eax, 0x4b6fff
call fcn.004b6988
sub esp, 0x108
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x50], ecx
push 2
pop edi
mov dword [ebp - 0x14], edi
push 3
pop esi
push esi
lea ecx, [ebp - 0x94]
call fcn.00420237
mov dword [ebp - 0x24], 0x1cfd1f2e
mov dword [ebp - 0x68], 0x2624
mov dword [ebp - 0x1c], 0x373d
xor ebx, ebx
cmp dword [ebp - 0x1c], 0x3788
jle 0x423d44
push 0x1b1b
push ebx
push 0xe18
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov esi, eax
mov dword [ebp - 0x28], 0x261f
mov edi, ebx
lea eax, [esi + edi]
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
inc edi
cmp edi, 0x79d8
jl 0x423d11
dec esi
dec dword [ebp - 0x28]
jne 0x423d0f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x6f0d
jl 0x423d06
push 3
pop esi
push 2
pop edi
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x2c]
call fcn.00423139
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x3730
jge 0x423d6d
mov edx, str.zhyosne_znh_gwp_wkpugb_mqkaxylq_duclpj_lvxxfo_rkp_zphrt_jbeurgpr_ksburgkpt_gawdosgem
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x423d99
mov dword [ebp - 0x2c], ebx
jmp 0x423da8
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x58], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x423d9e
mov dword [ebp - 0x2c], ebx
jmp 0x423dc4
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd8], 0x5d9c72
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x423db3
mov dword [ebp - 0x14], 0x10
jmp 0x423ed6
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x1c], ebx
jmp 0x423df2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x20], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x423de8
mov dword [ebp - 0x20], ebx
jmp 0x423eca
mov dword [ebp - 0x28], 0xffff
push 1
lea ecx, [ebp - 0xac]
call fcn.00420237
mov dword [ebp - 0x1c], ebx
jmp 0x423e2c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x423e19
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x94]
cmp dword [eax + ecx*4], 0xc47a
setne dl
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
sete cl
sub ecx, 0x4418
je 0x423e6c
cmp dword [ebp - 0x20], ebx
je 0x423e6c
xor edx, edx
inc edx
jmp 0x423e6e
mov edx, ebx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0xd93c
setne dl
mov eax, dword [ebp - 0xac]
mov dword [eax], edx
lea ecx, [ebp - 0xac]
call fcn.00420309
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x423e00
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
je 0x423dd5
lea ecx, [ebp - 0x94]
call fcn.00420309
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x10], ebx
jne 0x423ef9
xor al, al
jmp 0x42430c
lea ecx, [ebp - 0x48]
call fcn.004234b0
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x14], 0x10
jb 0x423f0e
mov ecx, dword [eax]
jmp 0x423f10
mov ecx, eax
mov dword [ebp - 0x40], ecx
cmp dword [eax + 0x14], 0x10
jb 0x423f1d
mov edx, dword [eax]
jmp 0x423f1f
mov edx, eax
mov eax, dword [eax + 0x10]
add eax, edx
cmp ecx, eax
je 0x4241fe
mov dword [ebp - 0x14], 0x7e2799ac
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x14], ebx
jmp 0x423f68
mov dword [ebp - 0x60], 0x2edc7555
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x78], 0xffff
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x7c], eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x78]
call fcn.00423600
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x12
jle 0x423f3f
mov eax, dword [ebp - 0x40]
mov al, byte [eax]
cmp al, 0x30
jl 0x424122
cmp al, 0x39
jg 0x424122
push 1
lea ecx, [ebp - 0xb8]
call fcn.00420237
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xd8131dda
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x8d08f492
push eax
lea ecx, [ebp - 0xa0]
call fcn.00420237
mov dword [ebp - 0x24], 0xfffffffd
xor edx, edx
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], ebx
jmp 0x423fdf
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x423fcc
mov dword [ebp - 0x18], ebx
jmp 0x423ffa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x108], 0x509978f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x423fe9
mov dword [ebp - 0x18], ebx
jmp 0x424016
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x114], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x424005
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x18]
call fcn.00423883
lea ecx, [ebp - 0xb8]
call fcn.00423a9c
mov dword [ebp - 0x100], 0xfffffff6
mov dword [ebp - 0x28], 1
mov ecx, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
lea ecx, [ebp - 0xa0]
call fcn.00420309
lea ecx, [ebp - 0xb8]
call fcn.00420309
mov dword [ebp - 0x14], 0x73e9
cmp dword [ebp - 0x14], 0x769a
jle 0x4240be
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], 0x39a6
mov eax, esi
mov ecx, ebx
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
add ebx, edi
dec dword [ebp - 0x28]
jne 0x424089
inc edi
cmp edi, 0xce7
push 0
pop ebx
jl 0x42407f
inc esi
cmp esi, 0x7333
jl 0x42407d
push 3
pop esi
push 2
pop edi
lea eax, [ebp - 0x48]
push eax
push ebx
lea eax, [ebp - 0x40]
push eax
call fcn.004264b8
add esp, 0xc
mov dword [ebp - 4], edi
cmp dword [ebp - 0x14], 0x73a5
jge 0x4240ea
mov edx, str.rtu_ixsvvak_xsn_bytlb_otl_fdnvfpyib
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x424116
mov ecx, dword [ebp - 0x40]
inc ecx
mov eax, dword [ebp - 0x50]
jmp 0x423f10
mov eax, 0xe91a049f
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], esi
cmp dword [ebp - 0x44], ebx
jl 0x424165
mov byte [ebp - 0x36], bl
cmp byte [ebp - 0x36], 0
je 0x424160
push ebx
push 0x2075
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
dec dword [ebp - 0x44]
jns 0x42414a
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x424175
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.004264fc
pop ecx
pop ecx
push esi
lea ecx, [ebp - 0xd0]
call fcn.00420237
mov dword [ebp - 0x74], 0x47f1a969
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x70], 0x3e19f23e
mov dword [ebp - 0x3c], ebx
jmp 0x4241ba
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], esi
jl 0x4241a7
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], ebx
jmp 0x4241e9
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x4241d6
lea ecx, [ebp - 0xd0]
call fcn.00420309
jmp 0x423ef2
push esi
lea ecx, [ebp - 0xc4]
call fcn.00420237
mov dword [ebp - 0x34], 0xade19d29
mov dword [ebp - 0x54], 0x1cb6
mov dword [ebp - 0x4c], 0xfff6
mov dword [ebp - 0x64], 0x74f0e4f
mov dword [ebp - 0x14], ebx
jmp 0x42423a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x42422b
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x34], ebx
jl 0x4242c5
mov dword [ebp - 0x14], 0xfffffff6
call fcn.00423bf1
mov dword [ebp - 0x14], ebx
jmp 0x4242b6
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0xee1c9741
movdqa xmm0, xmmword [0xab9810]
movdqu xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
push dword [ebp - 0x74]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xf8]
push eax
push ebx
lea ecx, [ebp - 0x88]
call fcn.00422401
mov dword [ebp - 0x5c], ebx
dec dword [ebp - 0x5c]
lea ecx, [ebp - 0x88]
call fcn.00420309
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x424258
dec dword [ebp - 0x34]
jns 0x424247
cmp dword [ebp - 0x34], ebx
je 0x4242ce
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x64]
dec dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
sub ecx, 9
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
xor eax, eax
cmp ecx, 0xa750
setge al
mov ecx, dword [ebp - 0x54]
xor edx, edx
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0xc4]
call fcn.00420309
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret