Function at 0x1004a8ac
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b3a8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10c
push esi
mov dword [ebp - 0x14], 0xfffffff6
mov dword [ebp - 0xa4], 0xf0244c3f
mov dword [ebp - 0x14], 0
jmp 0x1004a8ec
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 5
jg 0x1004a9ac
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xa0], 0x677b568b
mov dword [ebp - 0x90], 0
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x1004a92a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0x14], 0
je 0x1004a969
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xa0], eax
jne 0x1004a94d
mov dword [ebp - 0x74], 1
jmp 0x1004a951
and dword [ebp - 0x74], 0
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x74]
jle 0x1004a969
mov dword [ebp - 0x50], 1
jmp 0x1004a96d
and dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x50], eax
jl 0x1004a987
cmp dword [ebp - 0x90], 0
je 0x1004a987
mov dword [ebp - 0x78], 1
jmp 0x1004a98b
and dword [ebp - 0x78], 0
cmp dword [ebp - 0x78], 2
jl 0x1004a99a
mov dword [ebp - 0x58], 1
jmp 0x1004a99e
and dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xa4], eax
jmp 0x1004a8e5
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1004aae1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x34], 0xe53d
mov dword [ebp - 0x1c], 0xaed6b657
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x68], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x1004aa34
cmp dword [ebp - 0x60], 0
je 0x1004aa1b
xor eax, eax
inc eax
je 0x1004aa1b
mov dword [ebp - 0x70], 1
jmp 0x1004aa1f
and dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x1004aa34
and dword [ebp - 0x88], 0
jmp 0x1004aa3e
mov dword [ebp - 0x88], 1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1c], eax
jg 0x1004aa54
or eax, 0xffffffff
je 0x1004aa63
cmp dword [ebp - 0x1c], 0
je 0x1004aa63
mov dword [ebp - 0x80], 1
jmp 0x1004aa67
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x80]
cmp dword [ebp - 0x34], eax
je 0x1004aa7e
mov dword [ebp - 0xbc], 1
jmp 0x1004aa85
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x34]
sub eax, 0x3d27
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1004aaa6
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
jmp 0x1004aabc
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax], 2
jge 0x1004aadc
mov eax, dword [ebp - 0x28]
push dword [eax]
mov ecx, dword [ebp - 0xc4]
call fcn.100156f9
mov dword [eax], 0x13034d00
jmp 0x1004aab1
jmp 0x1004ae82
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x40], 0xeb71
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x3c], 0
push 3
lea ecx, [ebp - 0xf4]
call fcn.1001565b
and dword [ebp - 4], 0
mov dword [ebp - 0xc0], 0x891ba802
mov dword [ebp - 0x30], 0
jmp 0x1004ab31
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1004ab4d
push dword [ebp - 0x30]
lea ecx, [ebp - 0xf4]
call fcn.100156f9
mov dword [eax], 5
jmp 0x1004ab2a
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x4c], 0x141e
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20]
cmp eax, ecx
jl 0x1004ab80
mov dword [ebp - 0x54], 1
jmp 0x1004ab84
and dword [ebp - 0x54], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x54], eax
jg 0x1004ab98
mov dword [ebp - 0xac], 1
jmp 0x1004ab9f
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x104], eax
mov eax, 0xfff9
cmp eax, 2
ja 0x1004abc1
cmp dword [ebp - 0x3c], 0
je 0x1004abc1
mov dword [ebp - 0x5c], 1
jmp 0x1004abc5
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x5c]
je 0x1004abd9
mov dword [ebp - 0xb0], 1
jmp 0x1004abe0
and dword [ebp - 0xb0], 0
mov esi, dword [ebp - 0x3c]
imul esi, dword [ebp - 0x40]
push 0
lea ecx, [ebp - 0xf4]
call fcn.100156f9
mov dword [eax], esi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.100156dd
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x24], 0x5e48d327
mov dword [ebp - 0xa8], 0xb8f5f499
mov dword [ebp - 0x94], 0x30cc2fdc
push 1
lea ecx, [ebp - 0xdc]
call fcn.1001565b
mov dword [ebp - 4], 1
mov dword [ebp - 0x8c], 0xca3691f6
mov dword [ebp - 0x2c], 0
jmp 0x1004ac63
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1004ac7f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xdc]
call fcn.100156f9
mov dword [eax], 0xfffffff6
jmp 0x1004ac5c
mov dword [ebp - 0x24], 0
jmp 0x1004ac8f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe5
jg 0x1004ae5e
push 3
lea ecx, [ebp - 0xd0]
call fcn.1001565b
mov byte [ebp - 4], 2
mov dword [ebp - 0x7c], 1
push 2
lea ecx, [ebp - 0xe8]
call fcn.1001565b
mov byte [ebp - 4], 3
mov dword [ebp - 0x10], 0
jmp 0x1004acd2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1004acee
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd0]
call fcn.100156f9
mov dword [eax], 8
jmp 0x1004accb
mov dword [ebp - 0x10], 0
jmp 0x1004acfe
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1004ad14
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x118], 1
jmp 0x1004acf7
mov dword [ebp - 0x10], 0
jmp 0x1004ad24
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004ad40
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe8]
call fcn.100156f9
mov dword [eax], 0xade0980d
jmp 0x1004ad1d
cmp dword [ebp - 0x24], 0
jne 0x1004ad53
push 2
lea ecx, [ebp - 0xd0]
call fcn.100156f9
cmp dword [ebp - 0xa8], 0
je 0x1004aded
cmp dword [ebp - 0x8c], 1
ja 0x1004ad72
mov dword [ebp - 0x64], 1
jmp 0x1004ad76
and dword [ebp - 0x64], 0
push 0
lea ecx, [ebp - 0xdc]
call fcn.100156f9
mov ecx, dword [ebp - 0x64]
cmp ecx, dword [eax]
je 0x1004ad93
mov dword [ebp - 0x6c], 1
jmp 0x1004ad97
and dword [ebp - 0x6c], 0
push 2
lea ecx, [ebp - 0xd0]
call fcn.100156f9
mov ecx, dword [ebp - 0x6c]
add ecx, dword [eax]
jne 0x1004adc3
push 0
lea ecx, [ebp - 0xdc]
call fcn.100156f9
cmp dword [eax], 0
jne 0x1004adc3
and dword [ebp - 0x48], 0
jmp 0x1004adca
mov dword [ebp - 0x48], 1
push 2
lea ecx, [ebp - 0xd0]
call fcn.100156f9
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [eax]
jle 0x1004aded
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x118], 0
jne 0x1004adff
mov eax, 0x5e4d8d95
test eax, eax
jne 0x1004adff
and dword [ebp - 0x84], 0
jmp 0x1004ae09
mov dword [ebp - 0x84], 1
push 0
lea ecx, [ebp - 0xe8]
call fcn.100156f9
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x94], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe8]
call fcn.100156dd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd0]
call fcn.100156dd
jmp 0x1004ac88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc]
call fcn.100156dd
mov eax, dword [ebp - 0x9c]
movzx eax, byte [eax]
test eax, eax
je 0x1004ae82
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret