Function at 0x412aa5
Capabilities:
Create service
Persist via windows service

Disassembly:
mov eax, 0x41646f
call fcn.00414110
sub esp, 0xe8
mov eax, dword [0x422a68]
push ebx
push esi
push edi
mov dword [ebp - 0x10], eax
mov esi, 0x4229f0
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.0040b3bc
pop ecx
pop ecx
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
mov ecx, 0x4229f0
mov dword [ebp - 4], ebx
call fcn.0040134f
or dword [ebp - 4], 0xffffffff
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x50]
call fcn.004010eb
cmp dword [0x422a08], 0x10
mov eax, dword [0x4229f4]
jae 0x412b08
mov eax, 0x4229f4
lea ecx, [ebp - 0xf4]
push ecx
push eax
call dword [sym.imp.MSVCR71.dll__stat]
test eax, eax
pop ecx
pop ecx
jge 0x412b54
cmp dword [0x422a08], 0x10
mov esi, dword [0x4229f4]
jae 0x412b30
mov esi, 0x4229f4
call dword [sym.imp.MSVCR71.dll__errno]
push dword [eax]
call dword [sym.imp.MSVCR71.dll_strerror]
push eax
push esi
push str.Could_not_find__s:__s_n
call fcn.00411378
add esp, 0x10
xor al, al
jmp 0x412f11
call fcn.00412744
call fcn.00412882
push edi
push 2
lea ecx, [ebp - 0xd0]
call fcn.004079bc
lea eax, [ebp - 0x50]
push ebx
push eax
mov dword [ebp - 4], edi
call fcn.0040b34a
pop ecx
pop ecx
push 0x41d200
push eax
lea eax, [ebp - 0xd0]
push 0x41d204
push eax
mov byte [ebp - 4], 2
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
push str._service
lea eax, [ebp - 0xd0]
push 0x41d214
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push 0x41d218
push esi
push 0x41d21c
push str._config
lea eax, [ebp - 0xd0]
push 0x41d228
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
cmp dword [0x422a3c], ebx
pop ecx
pop ecx
je 0x412c86
lea eax, [ebp - 0x50]
push 0x422a28
push eax
call fcn.0040b3bc
pop ecx
pop ecx
push 0x41d22c
push eax
push 0x41d230
push str._logfile
lea eax, [ebp - 0xd0]
push 0x41d240
push eax
mov byte [ebp - 4], 3
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
cmp dword [0x422a20], ebx
je 0x412d4c
cmp dword [0x422a24], 0x10
mov eax, dword [0x422a10]
mov esi, 0x422a10
jae 0x412ca7
mov eax, esi
lea ecx, [ebp - 0xf4]
push ecx
push eax
call dword [sym.imp.MSVCR71.dll__stat]
test eax, eax
pop ecx
pop ecx
jge 0x412ce7
cmp dword [0x422a24], 0x10
jb 0x412cca
mov esi, dword [0x422a10]
call dword [sym.imp.MSVCR71.dll__errno]
push dword [eax]
call dword [sym.imp.MSVCR71.dll_strerror]
push eax
push esi
push str.Could_not_find_profile___s_:__s_n
call fcn.004110c4
add esp, 0x10
lea eax, [ebp - 0x50]
push 0x422a0c
push eax
call fcn.0040b3bc
pop ecx
pop ecx
push 0x41d268
push eax
push 0x41d26c
push str._profile
lea eax, [ebp - 0xd0]
push 0x41d27c
push eax
mov byte [ebp - 4], 4
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
mov eax, dword [0x422de8]
cmp eax, ebx
jbe 0x412d8a
push eax
push 0x41d280
push str._verbose
lea eax, [ebp - 0xd0]
push 0x41d290
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
mov ecx, eax
call fcn.00412f49
mov eax, dword [0x422e18]
cmp eax, ebx
jbe 0x412dc8
push eax
push 0x41d294
push str._timing
lea eax, [ebp - 0xd0]
push 0x41d2a0
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
mov ecx, eax
call fcn.00412f49
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00408a97
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 5
jae 0x412de7
lea eax, [ebp - 0x28]
push eax
push str.Installing_JQS_service:__s_n
push edi
call fcn.004113d7
add esp, 0xc
push 2
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov esi, eax
cmp esi, ebx
jne 0x412e21
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Unable_to_install_service:_OpenSCManager_failed__error__d__n
call fcn.00411378
pop ecx
pop ecx
mov byte [ebp - 0x2d], bl
jmp 0x412ee0
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x412e2d
lea eax, [ebp - 0x28]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push edi
push 2
push 0x10
push 0xf01ff
push 0x41d2fc
push 0x41d310
push esi
call dword [sym.imp.ADVAPI32.dll_CreateServiceA]
mov edi, eax
cmp edi, ebx
jne 0x412e7f
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
jne 0x412e6d
push 0x41d328
push str.Unable_to_register_service:__s_already_installed_n
jmp 0x412e73
push eax
push str.Unable_to_register_service:_CreatedService_failed__error__d__n
call fcn.00411378
pop ecx
pop ecx
mov byte [ebp - 0x2d], bl
jmp 0x412edd
cmp dword [0x422c40], 2
jne 0x412ecd
cmp dword [0x422c34], 5
jb 0x412ecd
mov eax, dword [0x422cf4]
cmp eax, ebx
je 0x412ec2
lea ecx, [ebp - 0x34]
push ecx
push 1
push edi
mov dword [ebp - 0x34], str.Prefetches_JRE_files_for_faster_startup_of_Java_applets_and_applications
call eax
test eax, eax
jne 0x412ecd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_to_set_service_description:_ChangeServiceConfig2_failed__error__d__n
call fcn.004110c4
pop ecx
jmp 0x412ecc
push str.Unable_to_set_service_description:_ChangeServiceConfig2_is_not_available_n
call fcn.004110c4
pop ecx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push edi
call esi
mov byte [ebp - 0x2d], 1
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004010eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.00407364
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], 0x417b50
call fcn.00414f2b
mov al, byte [ebp - 0x2d]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.00414215
leave
ret