Function at 0x4d7d50
Capabilities:
Delete service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54a895
mov eax, dword fs:[0]
push eax
sub esp, 0x15c
mov eax, dword [0x595c60]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov eax, dword [0x59e598]
mov dword [ebp - 0x30], edi
test al, 1
jne 0x4d7db7
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4d7dcc
cmp byte [eax + 0x19], 6
jb 0x4d7dcc
mov al, 1
jmp 0x4d7dce
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4d7de8
cmp byte [0x59e5a9], 0
jne 0x4d7de8
test al, al
je 0x4d7f18
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str..Service.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x18b
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a46c
mov ecx, eax
call fcn.0047f130
mov edx, str.Service::UnInstall
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 2
cmp dword [ebp - 0x18], 0x10
jb 0x4d7e7c
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d7e7c
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], 0x10
jb 0x4d7e99
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4d7ec4
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 5
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 4
push esi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4d7ee7
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d7ee7
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 1
call fcn.0047b620
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4d7f11
mov dword [ebp - 4], 0xffffffff
mov ecx, edi
call fcn.004d7420
mov dword [ebp - 0x34], eax
test eax, eax
jne 0x4d80f0
push dword [edi + 0x50]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
jne 0x4d80a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x34], eax
mov eax, dword [0x59e598]
test al, 1
jne 0x4d7f74
or dword [0x59e598], 1
mov dword [ebp - 4], 7
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4d7f89
cmp byte [eax + 0x19], 2
jb 0x4d7f89
mov al, 1
jmp 0x4d7f8b
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4d7fa5
cmp byte [0x59e5a9], 0
jne 0x4d7fa5
test al, al
je 0x4d80a0
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str..Service.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x194
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_delete_the_service._Service_Uninstall_Failed.
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 9
cmp dword [ebp - 0x18], 0x10
jb 0x4d802d
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d802d
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x4d804a
mov esi, dword [esi]
call fcn.004a0950
push esi
push 2
mov ecx, eax
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4d806f
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d806f
push eax
call fcn.005074d4
add esp, 4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x80]
call fcn.0047b620
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
jmp 0x4d8099
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x59e598]
test al, 1
jne 0x4d80d0
or dword [0x59e598], 1
mov dword [ebp - 4], 0x14
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4d8269
cmp byte [eax + 0x19], 6
jb 0x4d8269
mov al, 1
jmp 0x4d826b
mov eax, dword [0x59e598]
test al, 1
jne 0x4d8120
or dword [0x59e598], 1
mov dword [ebp - 4], 0xd
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4d8135
cmp byte [eax + 0x19], 2
jb 0x4d8135
mov al, 1
jmp 0x4d8137
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4d8151
cmp byte [0x59e5a9], 0
jne 0x4d8151
test al, al
je 0x4d80a0
sub esp, 8
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str..Service.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x199
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_Stop
mov ecx, eax
call fcn.0047f130
lea edx, [edi + 0x6c]
mov ecx, eax
call fcn.004a0d80
mov edx, str._service.
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x18], 0x10
jb 0x4d81ef
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d81ef
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x11
cmp dword [esi + 0x14], 0x10
jb 0x4d820c
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4d8237
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x12
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x11
push esi
push 2
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4d825a
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d825a
push eax
call fcn.005074d4
add esp, 4
mov byte [ebp - 4], 0xe
jmp 0x4d8073
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4d8285
cmp byte [0x59e5a9], 0
jne 0x4d8285
test al, al
je 0x4d83b4
sub esp, 8
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0xd0]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x16
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xd0]
call fcn.0047eed0
mov edx, str..Service.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x19c
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Succeeded_uninstalling
mov ecx, eax
call fcn.0047f130
lea edx, [edi + 0x6c]
mov ecx, eax
call fcn.004a0d80
mov edx, str._service.
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x18], 0x10
jb 0x4d8323
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d8323
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x18
cmp dword [esi + 0x14], 0x10
jb 0x4d8340
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4d836b
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x19
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x18
push esi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4d838e
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d838e
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x15
call fcn.0047b620
lea eax, [ebp - 0x80]
mov dword [ebp - 0x80], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x59e598]
test al, 1
jne 0x4d83e4
or dword [0x59e598], 1
mov dword [ebp - 4], 0x1b
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4d83ff
cmp byte [eax + 0x19], 6
jb 0x4d83ff
mov al, 1
jmp 0x4d8401
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4d841b
cmp byte [0x59e5a9], 0
jne 0x4d841b
test al, al
je 0x4d8554
sub esp, 8
mov dword [ebp - 4], 0x1c
lea ecx, [ebp - 0x168]
call fcn.0047b550
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1d
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x168]
call fcn.0047eed0
mov edx, str..Service.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x19d
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a498
mov ecx, eax
call fcn.0047f130
mov edx, str.Service::UnInstall
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x18], 0x10
jb 0x4d84af
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d84af
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x168]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x1f
cmp dword [esi + 0x14], 0x10
jb 0x4d84cc
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4d84f7
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x20
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x1f
push esi
push 6
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp - 0x18], 0x10
jb 0x4d851a
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x4d851a
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
mov byte [ebp - 4], 0x1c
call fcn.0047b620
lea eax, [ebp - 0x118]
mov dword [ebp - 0x118], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00506c7d
mov esp, ebp
pop ebp
ret