Function at 0x1000783b
Capabilities:
Query service status
Resume thread

Disassembly:
mov eax, 0x10064256
call fcn.10063a98
sub esp, 0x38
mov byte [ebp - 0x1c], cl
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x10007a7b
cmp byte [ebp + 0x14], 0
je 0x100079d6
mov dword [ebp - 0x20], 0x68f
cmp dword [ebp - 0x20], 0x754
jle 0x100078b1
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor esi, esi
xor edi, edi
mov eax, edi
mov ecx, 0x100812f8
or eax, esi
cdq
push edx
push eax
call fcn.10001ee2
inc edi
cmp edi, 0x6ac3
jl 0x1000787f
inc esi
cmp esi, 0x38b8
jl 0x1000787d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
and dword [ebp - 4], 0
cmp dword [ebp - 0x20], 0x491
jge 0x100078cd
mov edx, str.hzhkbhu_jxqkxhrp_recasmb_huukyz_mjel_msmq_qovbtlap_pyjge_crlvvcvtd
mov ecx, 0x100812f8
call fcn.1000395e
mov esi, dword [ebp + 0x1c]
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], esi
mov dword [esi], 0
cmp dword [esi], 0xffffffe3
jl 0x10007ae6
mov byte [ebp - 0x15], 0
mov dword [ebp - 0x28], 0x7357
cmp dword [ebp - 0x28], 0x7660
jle 0x10007954
xor edi, edi
xor ebx, ebx
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x24], 0x16be
mov dword [ebp - 0x20], ecx
mov eax, ebx
shl eax, cl
mov ecx, 0x100812f8
and eax, edi
cdq
push edx
push eax
call fcn.10001ee2
mov ecx, dword [ebp - 0x20]
add ecx, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
jne 0x1000790c
inc esi
cmp esi, 0x2ac9
jl 0x10007900
inc ebx
cmp ebx, 0x52a9
jl 0x100078fe
inc edi
cmp edi, 0x3d06
jl 0x100078fc
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov esi, dword [ebp + 0x1c]
cmp byte [ebp - 0x15], 0
je 0x10007970
push ecx
push 0x6643
push ecx
push 0x3fe4
mov dl, 1
call fcn.10004cd6
add esp, 0x10
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x71e8
jge 0x100079cb
mov edx, str.inqkzwmq_fvxgt_npka_dledjql_wklfo_zuyp_esoo_jljji_xvrwehfp_kov_nuuuu_fqep
mov ecx, 0x100812f8
call fcn.1000395e
jmp 0x100079cb
or dword [ebp - 4], 0xffffffff
dec dword [esi]
jmp 0x100078dd
mov dword [ebp - 0x24], 0x4a13
cmp dword [ebp - 0x24], 0x4a5e
jle 0x10007a45
xor esi, esi
mov dword [ebp - 0x28], esi
xor edi, edi
mov eax, edi
xor ebx, ebx
and eax, esi
mov dword [ebp - 0x2c], eax
mov esi, eax
mov eax, esi
lea ecx, [ebp - 0x44]
xor eax, ebx
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007a11
mov eax, dword [eax]
push eax
call fcn.1004b616
pop ecx
push 0
push 1
lea ecx, [ebp - 0x44]
call fcn.1000230b
inc ebx
cmp ebx, 0x7fdd
jl 0x100079f8
mov esi, dword [ebp - 0x28]
inc edi
cmp edi, 0x2a43
jl 0x100079ed
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x2e2f
jl 0x100079eb
cmp dword [ebp - 0x24], 0x4822
jge 0x10007a59
push str.tfei_mczk_zzyqxmm_xkhgbi_iyoq_mipnaqoh_dskny_wsplgg_ahyx_offt_vsy
call fcn.1004b616
pop ecx
mov edx, dword [ebp + 0x10]
mov dword [edx], 0
cmp dword [edx], 1
jge 0x10007ae6
mov esi, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [esi]
and dword [eax + ecx*4], 0
inc dword [edx]
cmp dword [edx], 1
jl 0x10007a6a
jmp 0x10007ae6
test cl, cl
je 0x10007ad9
mov edi, dword [ebp + 0x24]
xor edx, edx
mov ecx, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
mov eax, dword [edi]
mov eax, dword [edi]
mov eax, dword [edi]
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi]
mov eax, dword [ecx]
mov eax, dword [edi]
mov dword [esi], eax
mov ecx, dword [edi]
mov eax, dword [esi]
cmp eax, ecx
mov ecx, dword [ebp + 0x28]
setne dl
sub edx, 0xd8cf
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x9ba
mov edx, dword [ebp + 0x2c]
setle al
mov dword [edx], eax
mov eax, dword [edx]
mov dword [ecx], eax
mov eax, dword [ecx]
mov eax, dword [edx]
mov eax, dword [edi]
mov ecx, dword [edi]
imul ecx, dword [esi]
mov eax, dword [ebp + 0x20]
mov dword [eax], ecx
jmp 0x10007ae6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret