Function at 0x1000823a
Capabilities:
Modify service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e0c3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x88
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1000828f
push 0x492f
push 1
push 0x61fd
push 0x4ed0
push 0x5c70
push 0x24f4
call fcn.100084ed
add esp, 0x18
jmp 0x100084dc
lea eax, [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x58]
movzx eax, byte [eax]
test eax, eax
je 0x100084c5
mov dword [ebp - 0x38], 0x4325
mov dword [ebp - 0x40], str.jnincu_jwaypb_hupr_xyau
cmp dword [ebp - 0x38], 0x45da
jle 0x10008365
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
and dword [ebp - 0x24], 0
jmp 0x100082ed
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xb71
jge 0x10008365
and dword [ebp - 0x2c], 0
jmp 0x10008303
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x70dc
jge 0x10008363
and dword [ebp - 0x18], 0
jmp 0x10008319
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1ddb
jge 0x10008361
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x2c]
sub edx, dword [ebp - 0x18]
mov eax, edx
cdq
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], edx
push dword [ebp - 0x50]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x80]
call fcn.10001a9f
pop ecx
pop ecx
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
call fcn.1000f536
push eax
call fcn.10045b49
pop ecx
lea ecx, [ebp - 0x80]
call fcn.1000f52c
jmp 0x10008312
jmp 0x100082fc
jmp 0x100082e6
mov dword [ebp - 0x3c], 0x7107
mov dword [ebp - 0x64], str.fpxgd_ebbcjpbt_gwzmocwu_ywqvzsji_bacoy
cmp dword [ebp - 0x3c], 0x727c
jle 0x10008432
and dword [ebp - 0x1c], 0
jmp 0x1000838d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x44d2
jge 0x10008432
and dword [ebp - 0x20], 0
jmp 0x100083a7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2417
jge 0x1000842d
and dword [ebp - 0x28], 0
jmp 0x100083bd
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x46b7
jge 0x10008428
and dword [ebp - 0x30], 0
jmp 0x100083d3
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x723f
jge 0x10008426
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x28]
imul edx, dword [ebp - 0x30]
mov eax, edx
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x98]
call fcn.10001a9f
pop ecx
pop ecx
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
call fcn.1000f536
push eax
call fcn.10045b49
pop ecx
lea ecx, [ebp - 0x98]
call fcn.1000f52c
jmp 0x100083cc
jmp 0x100083b6
jmp 0x100083a0
jmp 0x10008386
mov byte [ebp - 0x11], 0
and dword [ebp - 4], 0
cmp dword [ebp - 0x3c], 0x709a
jge 0x1000844c
push dword [ebp - 0x64]
call fcn.10045b49
pop ecx
jmp 0x10008468
or dword [ebp - 4], 0xffffffff
jmp 0x10008472
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x10008484
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x38], 0x3f6c
jge 0x1000849d
push dword [ebp - 0x40]
call fcn.10045b49
pop ecx
jmp 0x100084b9
or dword [ebp - 4], 0xffffffff
jmp 0x100084c3
jmp 0x100084dc
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret