Function at 0x4dabd0
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2e
push 0
push 0
dec ecx
jne 0x4dabd9
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x4db15c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
call fcn.00404a2c
lea eax, [ebp - 0x14]
call fcn.00404a2c
lea eax, [ebp - 0x18]
call fcn.00404a2c
lea eax, [ebp - 0x1c]
call fcn.00404a2c
lea eax, [ebp - 0x20]
call fcn.00404a2c
push 4
push 0
mov eax, esi
call fcn.00404eec
push eax
call sub.advapi32.dll_OpenSCManagerA
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x4dac50
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 8], eax
jmp 0x4db110
xor eax, eax
push ebp
push 0x4db109
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 0
mov eax, dword [ebp - 0x34]
push eax
push 3
push 0x30
mov eax, dword [ebp - 0x28]
push eax
call sub.advapi32.dll_EnumServicesStatusA
mov eax, dword [ebp - 0x38]
mov ecx, 0x24
xor edx, edx
div ecx
add eax, 1
jae 0x4dac98
call fcn.00403b58
push eax
lea eax, [ebp - 0x34]
mov ecx, 1
mov edx, dword [0x4dabb0]
call fcn.00405dd0
add esp, 4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x34]
push eax
push 3
push 0x30
mov eax, dword [ebp - 0x28]
push eax
call sub.advapi32.dll_EnumServicesStatusA
test eax, eax
jne 0x4dace6
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 8], eax
call fcn.00404490
jmp 0x4db110
mov eax, dword [ebp - 0x3c]
sub eax, 1
jae 0x4dacf3
call fcn.00403b58
test eax, eax
jl 0x4db0f2
inc eax
mov dword [ebp - 0x44], eax
xor esi, esi
lea eax, [ebp - 0xc]
imul edi, esi, 9
jno 0x4dad0e
call fcn.00403b58
mov edx, dword [ebp - 0x34]
mov edx, dword [edx + edi*4]
call fcn.00404c24
lea eax, [ebp - 0x24]
call fcn.00404a2c
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + edi*4 + 0xc]
cmp eax, 7
ja case.0x4dad31.0
jmp dword [eax*4 + 0x4dad38]
lea ecx, [ebp - 0x24]
mov edx, 0x4db178
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db198
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db1a8
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db1b8
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db1c8
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db1d8
mov eax, 0x4db188
call fcn.00510c34
jmp case.0x4dad31.0
lea ecx, [ebp - 0x24]
mov edx, 0x4db1e8
mov eax, 0x4db188
call fcn.00510c34
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0x34]
mov edx, dword [edx + edi*4]
call fcn.00403690
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x48]
call fcn.00404c90
push dword [ebp - 0x48]
lea eax, [ebp - 0x150]
mov edx, ebx
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x14c]
call fcn.00404c90
push dword [ebp - 0x14c]
lea eax, [ebp - 0x154]
mov edx, dword [ebp - 0x34]
mov edx, dword [edx + edi*4 + 4]
call fcn.00404c24
push dword [ebp - 0x154]
lea eax, [ebp - 0x158]
mov edx, ebx
call fcn.00404c14
push dword [ebp - 0x158]
push dword [ebp - 0x24]
lea eax, [ebp - 0x15c]
mov edx, ebx
call fcn.00404c14
push dword [ebp - 0x15c]
lea eax, [ebp - 0x10]
mov edx, 6
call fcn.00404dac
push 1
mov eax, dword [ebp - 0xc]
call fcn.00404eec
push eax
mov eax, dword [ebp - 0x28]
push eax
call sub.advapi32.dll_OpenServiceA
mov edi, eax
test edi, edi
jne 0x4dae9e
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 8], eax
jmp 0x4db059
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
push 0
push 0
push edi
call sub.advapi32.dll_QueryServiceConfigA
mov eax, dword [ebp - 0x38]
call fcn.004027e0
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x2c]
push eax
push edi
call sub.advapi32.dll_QueryServiceConfigA
test eax, eax
je 0x4dafc9
lea eax, [ebp - 0x160]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx + 0xc]
call fcn.00404c24
mov eax, dword [ebp - 0x160]
lea edx, [ebp - 0x20]
call fcn.00409114
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x1c], 0
jne 0x4daf1c
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
sub eax, 0x10
je 0x4daf0d
sub eax, 0x10
jne 0x4daf3b
lea eax, [ebp - 0x1c]
mov edx, 0x4db1f8
call fcn.00404ac4
jmp 0x4daf3b
lea eax, [ebp - 0x164]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx + 0x1c]
call fcn.00404c24
mov eax, dword [ebp - 0x164]
lea edx, [ebp - 0x1c]
call fcn.00409114
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
cmp eax, 4
ja case.default.0x4daf4a
jmp dword [eax*4 + 0x4daf51]
lea ecx, [ebp - 0x18]
mov edx, 0x4db20c
mov eax, 0x4db188
call fcn.00510c34
jmp case.default.0x4daf4a
lea ecx, [ebp - 0x18]
mov edx, 0x4db21c
mov eax, 0x4db188
call fcn.00510c34
jmp case.default.0x4daf4a
lea ecx, [ebp - 0x18]
mov edx, 0x4db22c
mov eax, 0x4db188
call fcn.00510c34
jmp case.default.0x4daf4a
lea ecx, [ebp - 0x18]
mov edx, 0x4db23c
mov eax, 0x4db188
call fcn.00510c34
jmp case.default.0x4daf4a
lea ecx, [ebp - 0x18]
mov edx, 0x4db24c
mov eax, 0x4db188
call fcn.00510c34
jmp case.default.0x4daf4a
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x2c]
call fcn.00402800
xor eax, eax
mov dword [ebp - 0x38], eax
mov eax, dword [0x544298]
cmp dword [eax], 0
je 0x4db053
lea eax, [ebp - 0x38]
push eax
push 0
push 0
push 1
push edi
mov eax, dword [0x544298]
mov eax, dword [eax]
call eax
mov eax, dword [ebp - 0x38]
call fcn.004027e0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 1
push edi
mov eax, dword [0x544298]
mov eax, dword [eax]
call eax
test eax, eax
je 0x4db043
lea eax, [ebp - 0x168]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
call fcn.00404c24
mov eax, dword [ebp - 0x168]
lea edx, [ebp - 0x14]
call fcn.00409114
jmp 0x4db04b
call sub.kernel32.dll_GetLastError_1
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x30]
call fcn.00402800
push edi
call sub.advapi32.dll_CloseServiceHandle
push dword [ebp - 0x10]
push dword [ebp - 0x18]
lea eax, [ebp - 0x16c]
mov edx, ebx
call fcn.00404c14
push dword [ebp - 0x16c]
push dword [ebp - 0x1c]
lea eax, [ebp - 0x170]
mov edx, ebx
call fcn.00404c14
push dword [ebp - 0x170]
push dword [ebp - 0x14]
lea eax, [ebp - 0x174]
mov edx, ebx
call fcn.00404c14
push dword [ebp - 0x174]
push dword [ebp - 0x20]
lea eax, [ebp - 0x10]
mov edx, 8
call fcn.00404dac
test esi, esi
jne 0x4db0bf
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
call fcn.00404a80
jmp 0x4db0e8
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x178]
mov dl, byte [ebp - 1]
call fcn.00404c14
push dword [ebp - 0x178]
push dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00404dac
inc esi
dec dword [ebp - 0x44]
jne 0x4dad01
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4db110
mov eax, dword [ebp - 0x28]
push eax
call sub.advapi32.dll_CloseServiceHandle
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4db163
lea eax, [ebp - 0x178]
mov edx, 0xa
call fcn.00404a50
lea eax, [ebp - 0x14c]
call fcn.00404a2c
lea eax, [ebp - 0x48]
call fcn.00404a2c
lea eax, [ebp - 0x34]
mov edx, dword [0x4dabb0]
call fcn.00405ddc
lea eax, [ebp - 0x24]
mov edx, 7
call fcn.00404a50
ret