Function at 0x100046bd
Capabilities:
Query service status

Disassembly:
mov eax, 0x1005c138
call fcn.1005bac8
sub esp, 0x5c
push ebx
push esi
mov dword [ebp - 0x24], 0x2e73
xor ebx, ebx
cmp dword [ebp - 0x24], 0x2f68
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x34], ecx
jle 0x10004773
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
xor edi, edi
mov esi, ebx
inc edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], edi
mov eax, esi
mov dword [ebp - 0x1c], 0x3e0e
mov dword [ebp - 0x18], eax
mov esi, ebx
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x4c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10004726
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x4c]
call fcn.100020a8
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, 0x746d
jl 0x1000470d
dec eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jne 0x1000470b
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x781f
jl 0x100046ff
push 0xcbb
push ebx
push 0x1bec
push 0x20df
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10004779
xor edi, edi
inc edi
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x24], 0x2ddf
jge 0x1000478d
push str.cqeht_oiun_mjldlhuu
call fcn.10043bf4
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0x6125
cmp dword [ebp - 0x2c], 0x624a
jle 0x1000482d
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
cdq
mov ecx, ebx
idiv esi
mov esi, dword [ebp - 0x1c]
mov eax, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], eax
xor eax, ecx
lea ecx, [ebp - 0x64]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100047db
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x64]
call fcn.100020a8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6e7a
jl 0x100047c2
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x3b82
jl 0x100047b2
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1130
jl 0x100047ad
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x3f28
jl 0x100047a8
cmp byte [ebp + 0x10], 0
je 0x10004969
mov dword [ebp - 0x18], 0x3cc1
cmp dword [ebp - 0x18], 0x4046
jle 0x100048d1
push 0x22a3
push 0x76a
push ebx
push ebx
push 0x2674
push 0x1383
call dword [sym.imp.USER32.dll_ToUnicode]
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x1c], esi
mov ecx, edi
mov eax, ebx
shl esi, cl
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x30], ebx
mov ecx, eax
mov ebx, esi
mov esi, dword [ebp - 0x30]
sar ebx, cl
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
inc esi
cmp esi, 0x5205
jl 0x10004889
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x24], eax
push 0
pop ebx
cmp eax, 0x7b3
jl 0x1000487d
mov esi, dword [ebp - 0x20]
inc edi
cmp edi, 0x77d2
jl 0x1000486e
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x287a
jl 0x1000486c
mov dword [ebp - 4], 2
cmp dword [ebp - 0x18], 0x3a8d
jge 0x10004915
mov edx, str.gwznzloj_avf_nadarjhx_cuz_czjhgqltf_dily_bzuijx_pfscgrdsq
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x10004915
mov esi, dword [ebp + 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp + 0x1c]
mov eax, dword [eax]
mov edx, dword [esi]
mov eax, dword [edi]
cmp eax, edx
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x28]
setg cl
mov dword [eax], ecx
mov eax, dword [eax]
mov eax, dword [esi]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov eax, dword [ecx]
mov eax, dword [edx]
mov eax, dword [edx]
mov eax, dword [ecx]
mov eax, dword [edx]
xor edx, edx
mov eax, dword [esi]
mov ecx, dword [ecx]
mov eax, dword [edi]
cmp ecx, eax
mov eax, dword [ebp + 0x30]
setge dl
mov dword [eax], edx
cmp dword [eax], ebx
je 0x1000495f
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp + 0x34]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
jmp 0x1000497b
mov eax, dword [ebp + 0x14]
mov dword [eax], 0xffffffff
mov eax, dword [ebp + 0x20]
mov dword [eax], 0xffffffff
cmp dword [ebp - 0x2c], 0x5fee
jge 0x1000498f
push str.jlmkgh_ancnxf_kdv_gbsaap_mjtgkfgh_ysmqfj_zinromzp_etndf_hgdcau_japcj_jxdha
call fcn.10043bf4
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret