Function at 0x76e45576
Capabilities:
Print debug messages

Disassembly:
push 0x10
push 0x76e457a0
call fcn.76e42b25
mov esi, ecx
mov dword [0x76e5f3a0], 0x30
mov dword [0x76e5f3a4], 2
xor edi, edi
mov dword [0x76e5f3a8], edi
xor ebx, ebx
inc ebx
mov dword [0x76e5f3b4], ebx
mov dword [0x76e5f3b8], 0x15f90
mov dword [0x76e5f3ac], edi
mov dword [0x76e5f3b0], edi
call fcn.76e4755c
mov dword [ebp - 4], edi
push 0x76e5f080
call dword [sym.imp.ntdll.dll_RtlInitializeResource]
or dword [ebp - 4], 0xffffffff
push 0x76e4a129
push 0x76e45bf4
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
mov dword [0x76e5f3bc], eax
cmp eax, edi
je 0x76e47e96
push edi
push edi
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x76e5f3c0], eax
cmp eax, edi
je 0x76e47eb4
or dword [esi], ebx
call fcn.76e457b1
mov ebx, eax
cmp ebx, edi
jne 0x76e47f3e
call fcn.76e4783e
mov ebx, eax
cmp ebx, edi
jne 0x76e47eca
or dword [esi], 0x20
call fcn.76e457de
mov ebx, eax
cmp ebx, edi
jne 0x76e47ed9
or dword [esi], 2
inc dword [0x76e5f3b4]
call fcn.76e457b1
call fcn.76e45f05
mov ebx, eax
cmp ebx, edi
jne 0x76e47ee8
inc dword [0x76e5f3b4]
call fcn.76e457b1
call fcn.76e462ad
mov ebx, eax
cmp ebx, edi
jne 0x76e47ef7
inc dword [0x76e5f3b4]
call fcn.76e457b1
call fcn.76e4691b
cmp eax, edi
jne 0x76e4577a
or byte [esi + 3], 0x10
call fcn.76e4637e
cmp eax, edi
jne 0x76e4577a
or byte [esi + 3], 0x20
xor ebx, ebx
cmp ebx, edi
jne 0x76e47f06
push edi
push 0x76e45784
push 0xa
push 0x76e42480
call dword [sym.imp.RPCRT4.dll_RpcServerUseProtseqEpW]
mov ebx, eax
cmp ebx, 0x6cc
je 0x76e47f17
cmp ebx, edi
jne 0x76e47f1e
push 0x76e424c0
push 0x4d2
push 0x11
push edi
push edi
push dword [0x76e5f658]
call dword [sym.imp.RPCRT4.dll_RpcServerRegisterIfEx]
mov ebx, eax
cmp ebx, edi
jne 0x76e47f1e
or dword [esi], 8
call fcn.76e469c5
mov ebx, eax
cmp ebx, edi
jne 0x76e47f2f
or dword [esi], 0x40
push edi
push 1
push 1
push 1
push dword [0x76e5f3bc]
call sub.ADVAPI32.dll_I_ScSetServiceBitsW
mov dword [0x76e5f3a4], 4
mov dword [0x76e5f3a8], 7
mov dword [0x76e5f3b4], edi
mov dword [0x76e5f3b8], edi
call fcn.76e457b1
mov ebx, eax
cmp ebx, edi
jne 0x76e47f3e
push edi
push 4
lea eax, [ebp - 0x1c]
push eax
push 0x1c
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtQueryInformationProcess]
test eax, eax
jl 0x76e4576c
xor eax, eax
cmp dword [ebp - 0x1c], edi
setne al
mov edi, eax
mov dword [0x76e5f57c], edi
xor eax, eax
call fcn.76e42b65
ret
mov ebx, eax
jmp 0x76e456a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push dword [esi]
call fcn.76e4a192
push edi
push 0x76e480d8
call sub.ntdll.dll_DbgPrint
pop ecx
pop ecx
jmp 0x76e47ec3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push dword [esi]
call fcn.76e4a192
mov eax, edi
jmp 0x76e45774
push dword [esi]
call fcn.76e4a192
push ebx
push 0x76e480b0
jmp 0x76e47f4d
push dword [esi]
call fcn.76e4a192
push ebx
push 0x76e48080
jmp 0x76e47f4d
push dword [esi]
call fcn.76e4a192
push ebx
push 0x76e48054
jmp 0x76e47f4d
push dword [esi]
call fcn.76e4a192
push ebx
push 0x76e48030
jmp 0x76e47f4d
push dword [esi]
mov eax, ebx
call fcn.76e4a192
push ebx
push 0x76e48000
jmp 0x76e47f4d
xor ebx, ebx
jmp 0x76e456cb
push dword [esi]
mov eax, ebx
call fcn.76e4a192
push ebx
push 0x76e47fd8
jmp 0x76e47f4d
push dword [esi]
call fcn.76e4a192
push ebx
push 0x76e47fb0
jmp 0x76e47f4d
push dword [esi]
mov eax, ebx
call fcn.76e4a192
push ebx
push 0x76e47f88
call sub.ntdll.dll_DbgPrint
pop ecx
pop ecx
mov eax, ebx
jmp 0x76e45774