Function at 0x10017c43
Capabilities:
Modify service

Disassembly:
mov eax, 0x1008e3c7
call fcn.1008dfcc
sub esp, 0x74
push ebx
mov dword [ebp - 0x14], 4
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov al, dl
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x24], 0xffff
push edi
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xfffffff1
push 1
mov byte [ebp - 0xe], al
mov dword [ebp - 0x2c], ecx
pop edi
jl 0x10017de1
mov dword [ebp - 0x1c], 0x5dae5a60
lea ecx, [ebp - 0x4c]
push edi
call fcn.10014de1
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10017cb6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], 0xcdead9ba
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10017ca6
cmp dword [ebp - 0x14], 0xfdeb7727
ja 0x10017cee
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0x8f4a
setge cl
xor eax, eax
cmp ecx, 0x4307a329
setne al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
cmp edx, 0x9102
jl 0x10017d42
mov dword [ebp - 0x18], ebx
jmp 0x10017d3a
mov dword [ebp - 0x28], 0xa28c
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x10017d32
push ebx
push 0x297
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [ebp - 0x28], ebx
jne 0x10017db0
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
jg 0x10017d10
jmp 0x10017db0
mov dword [ebp - 0x18], 0xc4f32b7b
mov dword [ebp - 0x20], 0x8abff5ec
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x18], ebx
je 0x10017d79
mov eax, dword [ebp - 0x20]
mov ecx, edi
sub ecx, eax
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
mov ecx, edi
cmp dword [ebp - 0x1c], ebx
jne 0x10017d7b
mov ecx, ebx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x34]
jle 0x10017d92
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, 0xfdef05de
mov eax, dword [ebp - 0x18]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x3b3bbbb5
setle cl
mov dword [ebp - 0x18], ecx
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x10017dc9
push 0xfd2
push 0x1c10
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
lea ecx, [ebp - 0x4c]
call fcn.10014e63
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff1
jge 0x10017c8b
mov al, byte [ebp - 0xe]
test al, al
je 0x100181dc
mov dword [ebp - 0x18], 0x928c176b
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], bl
je 0x10017e15
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0xfc8
push 0x1981
push 0x19e5
push ebx
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov dword [ebp - 0x18], 0xffffffe5
jmp 0x10017e41
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], bl
je 0x10017e3e
push 0x1917
push ebx
push 0x5c6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x11
jle 0x10017e1e
push esi
mov dword [ebp - 0x18], 0xfffffffb
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 6
push 3
call fcn.10014de1
push 0xffffffffffffffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x10017e77
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10017e6b
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x17
jg 0x10017f97
push 3
lea ecx, [ebp - 0x40]
call fcn.10014de1
mov dword [ebp - 0x34], 0x3f2f34e4
mov dword [ebp - 0x30], 0xebdb88dc
mov dword [ebp - 0x14], ebx
jmp 0x10017eb7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10017ea7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x10017f7c
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
cmp dword [eax], ebx
je 0x10017f4a
cmp dword [ebp - 0x18], ebx
jne 0x10017f1f
mov eax, dword [ebp - 0x40]
xor edx, edx
cmp dword [eax + 8], 0xf748
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
inc edx
cmp edx, 0x6aa1
setge cl
add eax, ecx
mov dword [ebp - 0x34], eax
jne 0x10017f1f
mov ecx, ebx
jmp 0x10017f22
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x28]
imul eax, ecx
cmp eax, dword [ebp - 0x30]
je 0x10017f37
cmp dword [ebp - 0x14], ebx
je 0x10017f37
xor eax, eax
inc eax
jmp 0x10017f39
mov eax, ebx
add eax, 0xffff9dd5
jne 0x10017f45
cmp dword [esi + 4], ebx
je 0x10017f4a
xor eax, eax
inc eax
jmp 0x10017f4c
mov eax, ebx
mov dword [ebp - 0x24], eax
xor ecx, ecx
imul eax, dword [ebp - 0x24], 7
cmp eax, 0x1f7b
mov eax, dword [ebp - 0x40]
setl cl
sub ecx, 0x765e4bc
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [eax]
add ecx, dword [esi + 4]
mov dword [edi + 8], ecx
dec dword [ebp - 0x14]
jns 0x10017ed9
lea ecx, [ebp - 0x40]
call fcn.10014e63
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x17
jle 0x10017e8a
xor edi, edi
inc edi
or esi, 0xffffffff
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], esi
call fcn.10014e63
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x20], 0x8f9c3281
cmp dword [ebp - 0x78], ebx
je 0x10017fd7
cmp dword [ebp - 0x80], ebx
je 0x10017fcf
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1c], ebx
jne 0x10017fd7
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x78]
test eax, eax
jne 0x10017fe8
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x78]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xec6e
mov eax, dword [ebp - 0x7c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x80]
setge cl
cmp ecx, 0xdf47f28a
sbb ecx, ecx
inc ecx
add eax, ecx
jne 0x10018025
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x10018027
mov eax, edi
cmp eax, dword [ebp - 0x1c]
jle 0x10018045
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], 0
je 0x10018075
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10018075
push edi
lea ecx, [ebp - 0x64]
call fcn.10014de1
mov dword [ebp - 0x18], ebx
jmp 0x10018063
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov dword [eax + ecx*4], 0x47f9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10018053
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x64]
dec dword [eax]
call fcn.10014e63
mov dword [ebp - 0x18], 0x8e56f9b2
mov dword [ebp - 0x34], 0xae5a60d0
mov dword [ebp - 0x18], 0x6bdde0bc
mov dword [ebp - 0x18], 0xfffffffd
jmp 0x100180b5
mov dword [ebp - 0x34], esi
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], 0
je 0x100180ad
push ebx
push ebx
push 0x5e7
push ebx
call dword [sym.imp.USER32.dll_AppendMenuA]
cmp dword [ebp - 0x34], ebx
jne 0x100180bb
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe8
jge 0x10018093
mov dword [ebp - 0x34], esi
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x34], 0xdb505206
mov dword [ebp - 0x34], 0xfc558bac
mov dword [ebp - 0x34], 0x214c405b
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 0x7b8f5f49
mov dword [ebp - 0x34], 0x30cc2fdc
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], esi
push edi
call fcn.10014de1
mov dword [ebp - 0x28], 0x5d367296
mov dword [ebp - 0x18], ebx
jmp 0x10018119
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0x831eb239
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10018109
dec dword [ebp - 0x28]
lea ecx, [ebp - 0x70]
call fcn.10014e63
mov dword [ebp - 0x18], 0x1824a8c6
mov dword [ebp - 0x18], 0xf
jmp 0x1001814c
mov byte [ebp - 0xe], bl
cmp byte [ebp - 0xe], 0
je 0x10018149
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff9
jne 0x10018139
mov esi, dword [ebp + 0xc]
neg dword [ebp - 0x18]
cmp dword [esi], ebx
jne 0x1001815e
mov edi, ebx
mov eax, dword [ebp + 0x20]
xor edx, edx
mov eax, dword [eax]
cmp eax, 0x65420764
mov eax, dword [esi]
sete dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
cmp eax, edx
mov eax, dword [ebp + 0x1c]
setne cl
xor edx, edx
mov dword [eax], ecx
mov ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
cmp ecx, eax
setl dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp + 0x10]
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
cmp dword [eax], ebx
je 0x100181a8
mov eax, dword [ebp + 0x20]
cmp dword [eax], ebx
je 0x100181ab
xor ebx, ebx
inc ebx
mov edx, dword [ebp + 0x18]
xor ecx, ecx
cmp edi, ebx
setne cl
xor ebx, ebx
mov eax, dword [edx]
cmp ecx, eax
mov eax, dword [edx]
setne bl
sub ebx, eax
mov eax, dword [edx]
xor edx, edx
cmp ebx, eax
mov eax, dword [esi]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp + 0x14]
pop esi
setle cl
mov dword [eax], ecx
jmp 0x100181e5
mov eax, dword [ebp + 8]
mov dword [eax], 0x576c3a0b
mov ecx, dword [ebp - 0xc]
pop edi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret