Function at 0x43b7d4
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x43b7dc
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x43bc5d
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x16], 0
push 5
push 0x43bc6c
push 0
call sub.advapi32.dll_OpenSCManagerW
mov ebx, eax
test ebx, ebx
jne 0x43b848
call sub.kernel32.dll_GetLastError_1
mov esi, eax
mov eax, esi
xor edx, edx
push edx
push eax
mov eax, dword [0x446078]
mov edx, 0x43bc98
call fcn.00407450
call fcn.00407dec
mov edx, 0x43bce4
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
mov eax, esi
call fcn.0040632c
xor eax, eax
mov dword [ebp - 0x14], eax
push 0x5d1
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x43b7ac]
call fcn.00408334
add esp, 4
mov eax, dword [ebp - 4]
call fcn.0040816c
imul edx, eax, 0x2c
mov eax, dword [ebp - 4]
xor ecx, ecx
call fcn.00404a04
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
call fcn.0040816c
imul eax, eax, 0x2c
push eax
mov eax, dword [ebp - 4]
push eax
push 3
push 0x30
push 0
push ebx
call sub.advapi32.dll_EnumServicesStatusExW
test eax, eax
jne 0x43b99e
call sub.kernel32.dll_GetLastError_1
mov esi, eax
cmp esi, 0xea
je 0x43b8fe
push ebx
call sub.advapi32.dll_CloseServiceHandle
mov eax, esi
xor edx, edx
push edx
push eax
mov eax, dword [0x446078]
mov edx, 0x43bcf8
call fcn.00407450
call fcn.00407dec
mov edx, 0x43bce4
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
mov eax, esi
call fcn.0040632c
jmp 0x43b99e
push 0x1745
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x43b7ac]
call fcn.00408334
add esp, 4
mov eax, dword [ebp - 4]
call fcn.0040816c
imul edx, eax, 0x2c
mov eax, dword [ebp - 4]
xor ecx, ecx
call fcn.00404a04
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
call fcn.0040816c
imul eax, eax, 0x2c
push eax
mov eax, dword [ebp - 4]
push eax
push 3
push 0x30
push 0
push ebx
call sub.advapi32.dll_EnumServicesStatusExW
test eax, eax
jne 0x43b99e
push ebx
call sub.advapi32.dll_CloseServiceHandle
call sub.kernel32.dll_GetLastError_1
mov esi, eax
mov eax, esi
xor edx, edx
push edx
push eax
mov eax, dword [0x446078]
mov edx, 0x43bcf8
call fcn.00407450
call fcn.00407dec
mov edx, 0x43bce4
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
mov eax, esi
call fcn.0040632c
push ebx
call sub.advapi32.dll_CloseServiceHandle
mov byte [ebp - 0x15], 0
mov eax, dword [ebp - 4]
call fcn.0040816c
mov esi, eax
dec esi
test esi, esi
jl 0x43ba22
inc esi
xor ebx, ebx
imul eax, ebx, 0xb
mov edx, dword [ebp - 4]
mov edi, dword [edx + eax*4]
test edi, edi
je 0x43ba22
lea eax, [ebp - 0x20]
mov edx, edi
call fcn.00406d9c
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.0040e50c
mov eax, dword [ebp - 0x1c]
push eax
lea edx, [ebp - 0x24]
mov eax, 0x43bd50
call fcn.0040e50c
mov edx, dword [ebp - 0x24]
pop eax
call fcn.004072a4
jne 0x43ba1e
mov byte [ebp - 0x15], 1
lea eax, [ebp - 8]
imul edx, ebx, 0xb
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edx*4]
call fcn.00406d9c
imul eax, ebx, 0xb
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x24]
mov dword [0x44bfb4], eax
jmp 0x43ba22
inc ebx
dec esi
jne 0x43b9ba
cmp byte [ebp - 0x15], 0
jne 0x43ba4b
mov eax, dword [0x446078]
mov edx, 0x43bd74
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
mov eax, 0x424
call fcn.0040632c
cmp dword [0x44bfb4], 0
jne 0x43ba9f
cmp byte [ebp - 0x16], 0
je 0x43ba7d
mov eax, dword [0x446078]
mov edx, 0x43bdb8
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
mov eax, 0x426
call fcn.0040632c
mov eax, 0x43bd50
mov edx, 2
call fcn.0043b1a8
mov eax, 0x43bd50
call fcn.0043b58c
mov byte [ebp - 0x16], 1
jmp 0x43b7f8
mov eax, dword [0x44bfb4]
xor edx, edx
push edx
push eax
mov eax, dword [0x446078]
mov edx, 0x43be28
call fcn.00407450
call fcn.00407dec
mov edx, 0x43bce4
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
push 0
mov eax, 0x44bfb8
mov ecx, 1
mov edx, dword [0x43a61c]
call fcn.00408334
add esp, 4
mov eax, dword [ebp - 4]
call fcn.0040816c
mov esi, eax
dec esi
test esi, esi
jl 0x43bb80
inc esi
xor ebx, ebx
imul edi, ebx, 0xb
mov eax, dword [ebp - 4]
cmp dword [eax + edi*4], 0
je 0x43bb80
mov eax, dword [ebp - 4]
mov eax, dword [eax + edi*4 + 0x24]
cmp eax, dword [0x44bfb4]
jne 0x43bb7c
lea eax, [ebp - 0x28]
imul edx, ebx, 0xb
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + edx*4]
call fcn.00406d9c
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 8]
call fcn.004072a4
je 0x43bb7c
mov eax, dword [0x44bfb8]
call fcn.0040816c
inc eax
push eax
mov eax, 0x44bfb8
mov ecx, 1
mov edx, dword [0x43a61c]
call fcn.00408334
add esp, 4
mov eax, dword [0x44bfb8]
call fcn.0040816c
mov edx, dword [0x44bfb8]
lea eax, [edx + eax*4 - 4]
mov edx, dword [ebp - 4]
mov edx, dword [edx + edi*4]
call fcn.00406d9c
inc ebx
dec esi
jne 0x43bb00
mov eax, 0x44bfbc
xor edx, edx
call fcn.00406bf0
mov eax, dword [0x44bfb8]
call fcn.0040816c
mov esi, eax
dec esi
test esi, esi
jl 0x43bbe4
inc esi
xor ebx, ebx
cmp dword [0x44bfbc], 0
jne 0x43bbbe
mov eax, 0x44bfbc
mov edx, dword [0x44bfb8]
mov edx, dword [edx + ebx*4]
call fcn.00406bf0
jmp 0x43bbe0
push dword [0x44bfbc]
push 0x43be6c
mov eax, dword [0x44bfb8]
push dword [eax + ebx*4]
mov eax, 0x44bfbc
mov edx, 3
call fcn.00407184
inc ebx
dec esi
jne 0x43bba0
cmp dword [0x44bfbc], 0
je 0x43bc13
mov eax, dword [0x446078]
mov edx, 0x43be80
call fcn.00407450
mov edx, dword [0x44bfbc]
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
jmp 0x43bc2c
mov eax, dword [0x446078]
mov edx, 0x43bec4
call fcn.00407450
call fcn.00404cdc
call fcn.004042f8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43bc64
lea eax, [ebp - 0x28]
mov edx, 4
call fcn.00406be8
lea eax, [ebp - 8]
call fcn.00406be0
lea eax, [ebp - 4]
mov edx, dword [0x43b7ac]
call fcn.00408340
ret