Function at 0x4144ba
Capabilities:
Delete service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x439276
mov eax, dword fs:[0]
push eax
sub esp, 0x108
mov eax, dword [0x4444c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xfc], ecx
push 2
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0xc4], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc0], eax
push str.DoInstall.cpp
lea ecx, [ebp - 0x48]
call fcn.00408211
and dword [ebp - 4], 0
push dword [ebp - 0xc0]
push str.OpenSCManager___delete__failed_rc_d_n
lea eax, [ebp - 0x2c]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 1
push 1
push dword [ebp - 0x104]
push 3
push 0x68d
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 2
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402ad2
mov byte [ebp - 4], 0
mov dword [ebp - 4], 3
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402ad2
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xc4], 0
je 0x414769
push 0x10000
push str.YSDrv
push dword [ebp - 0xc4]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
je 0x414693
push dword [ebp - 0xc8]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
je 0x4145e1
and dword [ebp - 0xbc], 0
jmp 0x414682
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc0], eax
push str.DoInstall.cpp
lea ecx, [ebp - 0x80]
call fcn.00408211
mov dword [ebp - 4], 4
push dword [ebp - 0xc0]
push str.DeleteService_failed_dwErr_d_n
lea eax, [ebp - 0x64]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 5
push 1
push dword [ebp - 0x10c]
push 3
push 0x69b
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 6
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00402ad2
mov byte [ebp - 4], 4
mov dword [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402ad2
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xbc], eax
push dword [ebp - 0xc8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41475b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x424
jne 0x4146b7
and dword [ebp - 0xbc], 0
jmp 0x41475b
push str.DoInstall.cpp
lea ecx, [ebp - 0xb8]
call fcn.00408211
mov dword [ebp - 4], 8
push dword [ebp - 0xc0]
push str.OpenService_failed_dwErr_d_n
lea eax, [ebp - 0x9c]
push eax
call fcn.00419558
add esp, 0xc
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 9
push 1
push dword [ebp - 0x114]
push 3
push 0x6a7
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x44621c
call fcn.0041952f
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402ad2
mov byte [ebp - 4], 8
mov dword [ebp - 4], 0xb
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402ad2
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xbc], eax
push dword [ebp - 0xc4]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x414775
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c438
leave
ret