Function at 0x41c220
Capabilities:
Modify service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43deca
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x4550d8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00401f70
mov dword [eax + 0x60], 0x64
add eax, 0x10
push str.ReconfigureService__
push eax
mov dword [ebp - 4], 0
call fcn.00401240
mov esi, eax
add esp, 8
mov ecx, dword [esi]
push 0xa
mov ecx, dword [ecx + 4]
add ecx, esi
call fcn.00407680
movzx ecx, ax
push ecx
mov ecx, esi
call fcn.00406f10
mov ecx, esi
call fcn.00406780
lea ecx, [ebp - 0x154]
call fcn.0040c690
lea eax, [ebp - 0x154]
mov dword [ebp - 4], 1
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0041f324
add esp, 4
mov dword [ebp - 4], 2
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov edi, eax
mov dword [ebp - 0x104], edi
mov byte [ebp - 4], 3
test edi, edi
jne 0x41c314
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenSCManager
lea ecx, [ebp - 0x40]
call fcn.004081d0
push 0x451b88
lea eax, [ebp - 0x40]
push eax
call fcn.004225f6
push 0xf003f
lea eax, [ebx + 0x40]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
mov dword [ebp - 0x108], esi
mov byte [ebp - 4], 4
test esi, esi
jne 0x41c356
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenService
lea ecx, [ebp - 0x6c]
call fcn.004081d0
push 0x451b88
lea eax, [ebp - 0x6c]
push eax
call fcn.004225f6
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
lea eax, [ebp - 0xf4]
mov byte [ebp - 4], 5
push eax
push 0
push 0
push esi
mov dword [ebp - 0xf4], 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x41c3cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x41c3cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceConfig_1st
lea ecx, [ebp - 0x98]
call fcn.004081d0
push 0x451b88
lea eax, [ebp - 0x98]
push eax
call fcn.004225f6
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x100]
call fcn.0041e340
mov ebx, dword [ebp - 0x100]
lea eax, [ebp - 0xf4]
push eax
push dword [ebp - 0xf4]
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x41c423
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceConfig_2nd
lea ecx, [ebp - 0xc4]
call fcn.004081d0
push 0x451b88
lea eax, [ebp - 0xc4]
push eax
call fcn.004225f6
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00401f70
mov dword [eax + 0x60], 0x64
add eax, 0x10
push str.Current_startup_type
push eax
mov byte [ebp - 4], 6
call fcn.00401240
add esp, 8
mov ecx, eax
push dword [ebx + 4]
call fcn.0040c9a0
mov ebx, eax
push 0xa
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
add ecx, ebx
call fcn.00407680
movzx eax, ax
mov ecx, ebx
push eax
call fcn.00406f10
mov ecx, ebx
call fcn.00406780
lea ecx, [ebp - 0x154]
call fcn.0040c690
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 7
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0041f324
mov eax, dword [ebp - 0x100]
add esp, 4
mov byte [ebp - 4], 5
mov eax, dword [eax + 4]
cmp eax, 3
je 0x41c563
cmp eax, 4
je 0x41c563
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00401f70
mov dword [eax + 0x60], 0xa
add eax, 0x10
push str.Changing_startup_type_to_SERVICE_DEMAND_START
push eax
mov byte [ebp - 4], 8
call fcn.00401240
mov ebx, eax
add esp, 8
mov eax, dword [ebx]
push 0xa
mov ecx, dword [eax + 4]
add ecx, ebx
call fcn.00407680
movzx eax, ax
mov ecx, ebx
push eax
call fcn.00406f10
mov ecx, ebx
call fcn.00406780
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 5
call fcn.00402f60
push 0
push 0
push 0
push str.RPCSS
push 0
push 0
push 0
push 0xffffffffffffffff
push 3
push 0xffffffffffffffff
push esi
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
test eax, eax
jne 0x41c563
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ChangeServiceConfig
lea ecx, [ebp - 0xf0]
call fcn.004081d0
push 0x451b88
lea eax, [ebp - 0xf0]
push eax
call fcn.004225f6
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00401f70
mov dword [eax + 0x60], 0x64
add eax, 0x10
push str.ReconfigureStartup___done
push eax
mov byte [ebp - 4], 9
call fcn.00401240
mov ebx, eax
add esp, 8
mov eax, dword [ebx]
push 0xa
mov ecx, dword [eax + 4]
add ecx, ebx
call fcn.00407680
movzx eax, ax
mov ecx, ebx
push eax
call fcn.00406f10
mov ecx, ebx
call fcn.00406780
lea ecx, [ebp - 0x154]
call fcn.0040c690
lea eax, [ebp - 0x154]
mov byte [ebp - 4], 0xa
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0041f324
add esp, 4
lea ecx, [ebp - 0x100]
call fcn.00419860
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor eax, eax
jmp 0x41c68a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004202ef
mov esp, ebp
pop ebp
ret