Function at 0x1000c116
Capabilities:
Start service

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10063255
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x78
cmp byte [ebp + 0x10], 0
push ebx
push esi
push edi
mov dword [esp + 0x28], edx
je 0x1000c21c
cmp byte [ebp + 0x14], 0
je 0x1000c1b7
mov esi, dword [ebp + 0x1c]
mov edi, dword [esi + 4]
cmp dword [esi], edi
je 0x1000c4e6
mov ecx, dword [ebp + 0xc]
push 0x18
pop ebx
sub edi, dword [esi]
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
cdq
idiv ebx
mov ecx, eax
mov eax, edi
cdq
idiv ebx
cmp eax, ecx
jne 0x1000c4e6
push 0x458f
xor ebx, ebx
mov edx, 0x3d8a
inc ebx
push ebx
push 0x2b55
push 0x44c2
push 0x2c7f
push 0x7ddd
push dword [esp + 0x40]
mov cl, bl
push dword [ebp + 0xc]
push ebx
push esi
push 0x68f7
call fcn.1000bf15
add esp, 0x2c
jmp 0x1000c4e6
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], 0
cmp dword [esp + 0x10], 0xfffffffd
jg 0x1000c4e6
xor ebx, ebx
inc ebx
push 0x2725
push 0x6cbc
push ebx
lea eax, [esp + 0x1c]
mov dword [esp + 0x38], ebx
push eax
push 0x1db5
lea eax, [esp + 0x40]
xor dl, dl
push 0xc40
push eax
mov cl, bl
call fcn.1000b3f1
add esp, 0x18
push ebx
call fcn.10007cda
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xfffffffd
pop ecx
pop ecx
jle 0x1000c1d5
jmp 0x1000c4e6
cmp byte [ebp + 8], 0
je 0x1000c4d2
mov edx, dword [ebp + 0x18]
lea ecx, [esp + 0x44]
xor esi, esi
mov dword [esp + 0x1c], esi
call fcn.10009957
mov edx, dword [ebp + 0x24]
lea ecx, [esp + 0x38]
mov dword [esp + 0x8c], esi
call fcn.10009957
xor ebx, ebx
inc ebx
mov byte [esp + 0x8c], bl
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x48]
sub ecx, dword [esp + 0x38]
sub eax, dword [esp + 0x44]
sar ecx, 2
sar eax, 2
mov dword [esp + 0x14], esi
cmp eax, ecx
jbe 0x1000c358
lea eax, [esp + 0x14]
push eax
push ecx
push ecx
push ebx
push 0x554d
lea ecx, [esp + 0x58]
call fcn.10009c41
mov dword [esp + 0x3c], 0x286e
add esp, 0x14
cmp dword [esp + 0x28], 0x28e0
jle 0x1000c310
mov edi, esi
mov dword [esp + 0x24], esi
mov ecx, esi
mov dword [esp + 0x20], esi
mov eax, edi
mov dword [esp + 0x18], 0xd51
cdq
idiv ecx
mov edi, edx
mov eax, edi
lea ecx, [esp + 0x50]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000c2d5
mov eax, dword [eax]
push eax
call fcn.1004a373
pop ecx
push esi
push ebx
lea ecx, [esp + 0x58]
call fcn.10005270
inc edi
dec dword [esp + 0x18]
jne 0x1000c2bd
mov ecx, dword [esp + 0x20]
mov edi, dword [esp + 0x24]
inc ecx
mov dword [esp + 0x20], ecx
cmp ecx, 0x6fd6
jl 0x1000c2ae
inc edi
mov dword [esp + 0x24], edi
cmp edi, 0x6235
jl 0x1000c2a8
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x38]
mov edi, dword [esp + 0x14]
sar eax, 2
cmp eax, edi
jge 0x1000c33a
sub edi, eax
lea eax, [esp + 0x30]
mov dword [esp + 0x30], esi
push eax
lea ecx, [esp + 0x3c]
call fcn.1000ce13
dec edi
jne 0x1000c325
cmp dword [esp + 0x28], 0x2805
jge 0x1000c34f
push str.ubgqjysas_dzobaiopy_aux_phc_vxk_ngs_kenirgn_umois_xfaym_pkna_enwse_kxfsxo_axmuift
call fcn.1004a373
pop ecx
mov dword [esp + 0x8c], ebx
jmp 0x1000c3a2
push ecx
push 0x5436
push ebx
push ecx
push ecx
lea eax, [esp + 0x4c]
push eax
push ecx
lea edx, [esp + 0x30]
mov ecx, 0x55e7
call fcn.10009cc8
mov eax, dword [esp + 0x64]
add esp, 0x1c
sub eax, dword [esp + 0x44]
mov edi, dword [esp + 0x14]
sar eax, 2
cmp eax, edi
jge 0x1000c3a6
sub edi, eax
lea eax, [esp + 0x34]
mov dword [esp + 0x34], esi
push eax
lea ecx, [esp + 0x48]
call fcn.1000ce13
dec edi
jne 0x1000c38d
mov edi, dword [esp + 0x14]
mov dword [esp + 0x18], esi
test edi, edi
jle 0x1000c425
cmp dword [esp + 0x1c], 0
jne 0x1000c425
push ebx
lea eax, [esp + 0x20]
mov ecx, 0x156
push eax
push 0x1378
push ebx
lea eax, [esp + 0x28]
push eax
push 0x6f10
push 0x1f09
lea eax, [esp + 0x54]
push eax
push ebx
push 0x3eb9
lea edx, [esp + 0x6c]
call fcn.10009e1e
add esp, 0x28
lea eax, [esp + 0x38]
push eax
push 0x4645
push ebx
push 0x2808
push ecx
push ecx
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x64]
push eax
sub esp, 0xc
call fcn.1000a5c9
mov eax, dword [esp + 0x48]
add esp, 0x30
inc eax
mov dword [esp + 0x18], eax
cmp eax, edi
jl 0x1000c3ae
mov dword [esp + 0x20], 0x1c55
cmp dword [esp + 0x20], 0x1cf7
jle 0x1000c4a0
mov edi, esi
mov dword [esp + 0x24], esi
mov eax, edi
mov dword [esp + 0x28], 0x2660
mov dword [esp + 0x18], eax
mov edi, esi
add eax, edi
lea ecx, [esp + 0x68]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000c465
mov eax, dword [eax]
push eax
call fcn.1004a373
pop ecx
push esi
push ebx
lea ecx, [esp + 0x70]
call fcn.10005270
mov eax, dword [esp + 0x18]
inc edi
cmp edi, 0xaf2
jl 0x1000c44d
dec eax
dec dword [esp + 0x28]
mov dword [esp + 0x18], eax
jne 0x1000c44b
mov edi, dword [esp + 0x24]
inc edi
mov dword [esp + 0x24], edi
cmp edi, 0x61c6
jl 0x1000c43d
cmp dword [esp + 0x20], 0x1c0d
mov ecx, dword [ebp + 0x20]
mov eax, dword [esp + 0x1c]
mov dword [ecx], eax
jge 0x1000c4be
push str.wbabrx_xkn_skzpvj_ejavk_huh_lwunqkg_vmyuxaveg
call fcn.1004a373
pop ecx
lea ecx, [esp + 0x38]
call fcn.1000d4d0
lea ecx, [esp + 0x44]
call fcn.1000d4d0
jmp 0x1000c4e6
cmp byte [ecx], 0
je 0x1000c4e6
xor esi, esi
push esi
push 0x2680
push esi
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov ecx, dword [esp + 0x84]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret