Function at 0x10031aa3
Capabilities:
Modify service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
and dword [ebp - 0x24], 0
mov dword [ebp - 8], 1
mov dword [ebp - 0x10], 6
push ebx
mov dword [ebp - 0x18], 0x2b90f998
mov dword [ebp - 0x14], 0x267f
cmp dword [ebp - 0x14], 0x294e
push esi
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], ecx
jle 0x10031b52
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x5d9
push 0x9de
push 0x2308
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0xc], 0x20bd
xor edi, edi
mov eax, ebx
lea ecx, [ebp - 0x44]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10031b26
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push 0
push 1
lea ecx, [ebp - 0x44]
call fcn.100040fa
inc edi
cmp edi, 0x5f0d
jl 0x10031b0d
add ebx, esi
dec dword [ebp - 0xc]
jne 0x10031b0b
inc esi
cmp esi, 0xb4a
jl 0x10031b02
mov dword [ebp - 0xc], 0
jmp 0x10031b69
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x2c], 0xd0188753
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x10031b5b
cmp dword [ebp - 0x14], 0x2665
jge 0x10031b83
push str.mlpyn_axzvn_trvcqrmnl
call fcn.10036008
pop ecx
mov eax, dword [ebp - 8]
add eax, 0x530d
imul eax, eax, 0x6baf
test eax, eax
je 0x10031ba8
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
setle dl
xor eax, eax
imul edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
cmp edx, 0x20274952
setle al
xor edx, edx
test eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
sete dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 8], 0
cmp dword [ebp - 8], eax
jg 0x10031d07
mov dword [ebp - 0x18], 0x397f
cmp dword [ebp - 0x18], 0x3c22
jle 0x10031c76
xor edi, edi
mov dword [ebp - 0xc], edi
xor esi, esi
mov dword [ebp - 0x10], esi
mov eax, edi
xor ebx, ebx
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x14], eax
xor edi, edi
mov esi, 0x1dc9
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x5c]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10031c34
mov eax, dword [eax]
push eax
call fcn.10036008
pop ecx
push 0
push 1
lea ecx, [ebp - 0x5c]
call fcn.100040fa
mov eax, dword [ebp - 0x14]
add edi, ebx
dec esi
jne 0x10031c1b
inc ebx
cmp ebx, 0x3a7e
jl 0x10031c14
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0xc]
inc esi
mov dword [ebp - 0x10], esi
cmp esi, 0x2403
jl 0x10031c08
inc edi
mov dword [ebp - 0xc], edi
cmp edi, 0x6d4a
jl 0x10031c03
cmp dword [ebp - 0x18], 0x35c1
jge 0x10031c8a
push str.qlhjol_rwnqqqz_ihxwueeo_ltpxwvs_wpdhr_mkvq_zltnjgz_zlfou_gmuz_sdrvm
call fcn.10036008
pop ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c]
mov ecx, dword [ebp - 8]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xffffffff
setge al
cmp eax, 0xffffffff
mov eax, dword [ebp - 8]
sbb ecx, ecx
neg ecx
sub ecx, 0x3e73
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp + eax*4 - 0x2c]
cmp ecx, 6
jbe 0x10031cc7
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x2c]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xaec
mov eax, dword [ebp - 8]
setne cl
xor edx, edx
cmp ecx, 8
mov eax, dword [ebp + eax*4 - 0x2c]
setl dl
sub eax, edx
jne 0x10031cf0
cmp dword [ebp - 0x2c], eax
jne 0x10031cf0
xor ecx, ecx
jmp 0x10031cf3
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x2c], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 1
jle 0x10031bee
mov edx, dword [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x20]
call fcn.100311bd
mov eax, dword [ebp - 0x20]
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret