Function at 0x41aea0
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47556d
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x490040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x48], ecx
mov dword [edx + 0x10], 0
mov eax, edx
cmp dword [edx + 0x14], 7
jbe 0x41aee5
mov eax, dword [edx]
xor ecx, ecx
push 0xf003f
push ecx
push ecx
mov word [eax], cx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x41afd7
call dword [sym.imp.KERNEL32.dll_GetLastError]
movaps xmm0, xmmword [0x488050]
mov esi, eax
mov eax, dword fs:[0x2c]
movups xmmword [ebp - 0xa4], xmm0
mov dword [ebp - 0x74], 0x7758ca38
movaps xmm0, xmmword [0x487ee0]
mov ecx, dword [eax]
mov eax, dword [0x495e74]
movups xmmword [ebp - 0x94], xmm0
mov byte [ebp - 0x70], 0x8b
movaps xmm0, xmmword [0x487550]
movups xmmword [ebp - 0x84], xmm0
cmp eax, dword [ecx + 4]
jle 0x41afb6
push 0x495e74
call fcn.00452992
add esp, 4
cmp dword [0x495e74], 0xffffffff
jne 0x41afb6
xorps xmm0, xmm0
mov byte [0x495ff1], 1
movlpd qword [ebp - 0x6c], xmm0
mov edx, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
nop
mov al, byte [ebp + ecx - 0xa4]
mov byte [ecx + 0x495fbc], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x41af9c
cmp ecx, 0x35
jb 0x41af80
push 0x47a6f0
call fcn.00452c62
add esp, 4
push 0x495e74
call fcn.00452941
add esp, 4
mov ecx, 0x495fbc
call fcn.0041ecd0
push esi
push 0x495fbc
push 1
call fcn.00401610
add esp, 0xc
xor al, al
jmp 0x41b337
mov edi, dword [sym.imp.ADVAPI32.dll_EnumServicesStatusExW]
xor esi, esi
xor ebx, ebx
test ebx, ebx
je 0x41aff0
push ebx
call fcn.00452cad
add esp, 4
xor ebx, ebx
test esi, esi
je 0x41afff
push esi
call fcn.00452cb2
add esp, 4
mov ebx, eax
push 0
lea eax, [ebp - 0x68]
mov dword [ebp - 0x50], 0
push eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0
push eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x68], 0
push eax
push esi
push ebx
push 1
push 0xb
push 0
push dword [ebp - 0x60]
call edi
test eax, eax
je 0x41b037
test ebx, ebx
jne 0x41b04d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x41b2d6
add esi, dword [ebp - 0x50]
jmp 0x41afe1
xor edi, edi
cmp dword [ebp - 0x5c], edi
jbe 0x41b31b
mov esi, ebx
nop word [eax + eax]
push dword [esi]
lea ecx, [ebp - 0x2c]
call fcn.0040a1c0
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + 0x24]
test ecx, ecx
je 0x41b358
mov eax, dword [ecx]
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [eax + 8]
call eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 0x49], al
cmp ecx, 7
jbe 0x41b0d1
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41b0c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41b353
push ecx
push edx
call fcn.00452c7c
mov al, byte [ebp - 0x49]
add esp, 8
test al, al
jne 0x41b0e3
inc edi
add esi, 0x2c
cmp edi, dword [ebp - 0x5c]
jb 0x41b060
jmp 0x41b31b
push 1
push dword [esi]
push dword [ebp - 0x60]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edi, eax
test edi, edi
jne 0x41b146
push ecx
or edx, 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0041a470
add esp, 4
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], 2
cmp dword [eax + 0x14], 7
jbe 0x41b11a
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov edi, dword [esi]
call fcn.0041b410
mov esi, eax
mov ecx, esi
call fcn.0040b700
push dword [ebp - 0x58]
push edi
push esi
push 1
call fcn.00401610
add esp, 0x10
lea ecx, [ebp - 0x2c]
call fcn.0040a0d0
jmp 0x41b31b
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push eax
push 0
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x41b285
push dword [ebp - 0x50]
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0x48], eax
test eax, eax
jne 0x41b1a2
call fcn.0041b4c0
mov esi, eax
mov ecx, esi
call fcn.0041ef70
push esi
push 1
call fcn.00401610
add esp, 8
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41b31b
lea ecx, [ebp - 0x50]
push ecx
push dword [ebp - 0x50]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x41b214
push ecx
or edx, 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0041a470
add esp, 4
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], 4
cmp dword [eax + 0x14], 7
jbe 0x41b1d9
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov esi, dword [esi]
call fcn.0041b640
mov ecx, eax
call fcn.0041d2e0
push dword [ebp - 0x58]
push esi
push eax
push 1
call fcn.00401610
add esp, 0x10
lea ecx, [ebp - 0x2c]
call fcn.0040a0d0
mov esi, dword [ebp - 0x48]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41b31b
mov esi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x54]
push dword [esi + 0xc]
call fcn.0040a0a0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0
push eax
push ecx
call fcn.0041b720
mov ecx, eax
call fcn.0041d220
mov ecx, dword [ebp - 0x54]
mov edx, eax
call fcn.00417ce0
add esp, 8
test al, al
je 0x41b272
cmp dword [ebp - 0x48], 0
jne 0x41b272
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 0x44]
push 0xffffffffffffffff
push 4
push eax
call fcn.004158f0
mov ecx, dword [ebp - 0x54]
push eax
call fcn.0040a130
lea ecx, [ebp - 0x44]
call fcn.0040a0d0
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41b31b
push ecx
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.0041a470
add esp, 4
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 3
cmp dword [eax + 0x14], 7
jbe 0x41b2a8
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov esi, dword [esi]
call fcn.0041b570
mov ecx, eax
call fcn.0041d280
push dword [ebp - 0x48]
push esi
push eax
push 1
call fcn.00401610
add esp, 0x10
lea ecx, [ebp - 0x2c]
call fcn.0040a0d0
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x41b31b
push ecx
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.0041a470
add esp, 4
mov edi, eax
mov dword [ebp - 4], 0
cmp dword [edi + 0x14], 7
jbe 0x41b2f5
mov edi, dword [edi]
call fcn.0041b360
mov esi, eax
mov ecx, esi
call fcn.0041e7f0
push edi
push esi
push 1
call fcn.00401610
add esp, 0xc
lea ecx, [ebp - 0x2c]
call fcn.0040a0d0
test ebx, ebx
je 0x41b324
push ebx
call fcn.00452cad
add esp, 4
push dword [ebp - 0x60]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x54]
cmp dword [eax + 0x10], 0
setne al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00452933
mov esp, ebp
pop ebp
ret
call fcn.004579bf
call fcn.0043d035
int3