Function at 0x4226c3
Capabilities:
Start service

Disassembly:
mov eax, 0x4b6fcb
call fcn.004b6988
sub esp, 0x108
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], 0xf3617394
mov dword [ebp - 0x28], 0x3c576436
xor ebx, ebx
mov dword [ebp - 0x20], ebx
push 3
pop edi
jmp 0x4226ff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x58], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x4226f1
mov dword [ebp - 0x54], 0xfffffffb
jmp 0x422724
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x422721
push ebx
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
dec dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xfffffff9
jne 0x42270d
mov esi, dword [ebp - 0x58]
mov dword [ebp - 0x54], esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x53e1e01b
setg al
imul eax, dword [ebp - 0x14]
cmp eax, 0xffff
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x14]
xor eax, eax
cmp esi, ecx
setne al
add eax, 0x44214078
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xa5bc
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], 0x4fd9e2a8
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], 0xcd7820ea
mov dword [ebp - 0x14], ebx
jmp 0x4227c0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 0x418a5273
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4227b2
imul eax, dword [ebp - 0x20], 0xffff
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], ebx
xor esi, esi
inc esi
cmp dword [ebp - 0x20], 0xffffffe5
jne 0x4229ae
mov dword [ebp - 0x2c], 0x4b58e17c
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x28], 0xbc383c67
push esi
lea ecx, [ebp - 0x64]
call fcn.00420237
mov dword [ebp - 0x14], ebx
jmp 0x422819
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x42280b
mov dword [ebp - 0x14], ebx
jmp 0x422834
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x64]
mov dword [eax + ecx*4], 0x85e0710d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x422824
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x42294c
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0xf2301355
mov dword [ebp - 0x28], 0xdd0bb265
mov dword [ebp - 0x30], 0x42fa
inc dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x48]
mov ecx, 0x8de9
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x48]
xor edx, edx
cmp ecx, eax
setge dl
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x48]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x6892
setge al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], ecx
mov dword [ebp - 0x28], ecx
je 0x4228b3
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x48]
mov ecx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
sete dl
mov eax, dword [ebp - 0x64]
sub edx, dword [eax]
neg edx
sbb edx, edx
inc edx
xor eax, eax
cmp edx, 0xb7dc
setle al
cmp eax, 0xc5f6b4ab
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x30], ebx
jne 0x4228fa
mov eax, dword [ebp - 0x64]
cmp dword [eax], ebx
mov eax, ebx
je 0x4228fc
mov eax, esi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
je 0x42290b
cmp dword [ebp - 0x3c], ebx
mov eax, esi
jne 0x42290d
mov eax, ebx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
dec ecx
neg ecx
sbb ecx, ecx
inc ecx
xor eax, eax
test ecx, ecx
setle al
xor edx, edx
cmp eax, 0xc684
setne dl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x30]
imul ecx, ecx, 0xdfdd
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
dec dword [ebp - 0x14]
jns 0x422845
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
test ecx, ecx
jne 0x42298c
cmp dword [ebp - 0x18], ebx
jne 0x422960
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x3c]
sub eax, 9
xor ecx, ecx
cmp eax, 2
setg cl
xor eax, eax
cmp eax, ecx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, esi
setg cl
cmp ecx, edx
mov edx, ebx
jge 0x42298e
mov edx, esi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x64]
call fcn.00420309
dec dword [ebp - 0x20]
jmp 0x4227de
mov dword [ebp - 0x14], 2
push edi
lea ecx, [ebp - 0xd0]
call fcn.00420237
mov dword [ebp - 0x18], 0x1cfd1f2e
mov dword [ebp - 0x38], 0x2624
mov dword [ebp - 0x14], ebx
jmp 0x4229e7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x4229d4
mov dword [ebp - 0x14], ebx
jmp 0x4229fb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4229f1
mov dword [ebp - 0x14], ebx
jmp 0x422a16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd8], 0x5d9c72
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x422a05
mov dword [ebp - 0x14], 0x10
jmp 0x422b20
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x20], ebx
jmp 0x422a41
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x34], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x422a37
mov dword [ebp - 0x34], ebx
jmp 0x422b13
mov dword [ebp - 0x28], 0xffff
push esi
lea ecx, [ebp - 0xa0]
call fcn.00420237
mov dword [ebp - 0x20], ebx
jmp 0x422a79
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x422a66
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0xd0]
cmp dword [eax + ecx*4], 0xc47a
setne dl
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
sete cl
sub ecx, 0x4418
je 0x422ab5
cmp dword [ebp - 0x34], ebx
mov edx, esi
jne 0x422ab7
mov edx, ebx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
inc dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0xd93c
setne dl
mov eax, dword [ebp - 0xa0]
mov dword [eax], edx
lea ecx, [ebp - 0xa0]
call fcn.00420309
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jle 0x422a4e
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
je 0x422a28
lea ecx, [ebp - 0xd0]
call fcn.00420309
mov dword [ebp - 0x20], 0xf3617394
mov dword [ebp - 0x38], 0x3c576436
push edi
lea ecx, [ebp - 0xb8]
call fcn.00420237
mov dword [ebp - 0x14], 0xade19d29
mov dword [ebp - 0x30], 0x1cb6
mov dword [ebp - 0x28], 0xfff6
mov dword [ebp - 0x2c], 0x74f0e4f
mov dword [ebp - 0x14], ebx
jmp 0x422b7f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x422b70
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x422c16
mov dword [ebp - 0x18], 0xfffffff6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x422bb3
push ebx
push ebx
push 0xb93
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0x18], ebx
jmp 0x422c06
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xee1c9741
movdqa xmm0, xmmword [0xab9810]
movdqu xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
push dword [ebp - 0x2c]
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0xf8]
push eax
push ebx
lea ecx, [ebp - 0x7c]
call fcn.00422401
mov dword [ebp - 0x24], ebx
dec dword [ebp - 0x24]
lea ecx, [ebp - 0x7c]
call fcn.00420309
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x422bb8
dec dword [ebp - 0x14]
jns 0x422b94
cmp dword [ebp - 0x14], ebx
je 0x422c1f
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, 9
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
xor edx, edx
cmp ecx, 0xa750
setge dl
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0xb8]
call fcn.00420309
mov dword [ebp - 0x18], 0x7e2799ac
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x18], ebx
jmp 0x422c92
mov dword [ebp - 0x24], 0x2edc7555
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0xffff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jle 0x422c6e
mov dword [ebp - 0x18], ebx
jmp 0x422cab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x422c9d
push esi
lea ecx, [ebp - 0xc4]
call fcn.00420237
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x2c], 0xd8131dda
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0x8d08f492
push esi
lea ecx, [ebp - 0x88]
call fcn.00420237
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], ebx
jmp 0x422d09
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x422cf6
mov dword [ebp - 0x14], ebx
jmp 0x422d24
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x108], 0x509978f3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x422d13
mov dword [ebp - 0x14], ebx
jmp 0x422d40
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x114], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x422d2f
mov dword [ebp - 0x14], ebx
jmp 0x422d5d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0x42796a45
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x422d4a
mov eax, dword [ebp - 0xc4]
inc dword [eax]
mov dword [ebp - 0x100], 0xfffffff6
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
lea ecx, [ebp - 0x88]
call fcn.00420309
lea ecx, [ebp - 0xc4]
call fcn.00420309
mov dword [ebp - 0x6c], 0xfffffffb
mov eax, 0xe91a049f
cmp dword [ebp - 0x6c], 0xfffffff9
je 0x422fbc
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x422df1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x422dec
push ebx
push 0x2075
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
dec dword [ebp - 0x18]
jns 0x422dd6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x422ea0
mov dword [ebp - 0x30], 0x599a
cmp dword [ebp - 0x30], 0x5c83
jle 0x422e52
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, eax
mov esi, 0x38bf
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xac67d8
call fcn.004200f3
dec edi
dec esi
jne 0x422e21
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x366f
jl 0x422e1a
push 0x1f3b
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
inc esi
push 3
pop edi
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x30], 0x581d
jge 0x422e74
mov edx, str.fzterxypd_kqjjly_sqbqfck_ulc_hellgejhq_trgqrk_uvbevh_dkgmoh_nwilxyp_binht_xdzjyq_tbquihape
mov ecx, 0xac67d8
call fcn.00421ea9
or dword [ebp - 4], 0xffffffff
jmp 0x422ea0
mov byte [ebp - 0x19], bl
push edi
lea ecx, [ebp - 0x94]
call fcn.00420237
mov dword [ebp - 0x2c], 0x47f1a969
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c], 0x3e19f23e
mov dword [ebp - 0x18], ebx
jmp 0x422edc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x422ec9
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], ebx
jmp 0x422f07
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x422ef8
lea ecx, [ebp - 0x94]
call fcn.00420309
cmp byte [ebp - 0x19], 0
je 0x422fb4
push 4
lea ecx, [ebp - 0xac]
call fcn.00420237
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xdade661f
mov dword [ebp - 0x2c], 0x8cae2fe8
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x18], ebx
jmp 0x422f61
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x422f52
mov edx, dword [ebp - 0xac]
cmp dword [edx + 4], ebx
jne 0x422f94
mov eax, dword [ebp - 0x28]
add eax, 0x6a1c
xor ecx, ecx
cmp eax, dword [edx + 4]
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [edx + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x30]
lea ecx, [ebp - 0xac]
call fcn.00420309
push ebx
push 0x26e0
call dword [sym.imp.USER32.dll_KillTimer]
dec dword [ebp - 0x6c]
jmp 0x422da4
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x6c], esi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x53e1e01b
setg al
imul eax, dword [ebp - 0x20]
cmp eax, 0xffff
sbb ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setg dl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20]
xor eax, eax
cmp esi, ecx
setne al
add eax, 0x44214078
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, 0xa5bc
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret