Function at 0x4135a0
Capabilities:
Delete service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x497c10
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x4c606c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x20000004
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov esi, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
test esi, esi
jne 0x4136ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x30]
mov esi, eax
call fcn.0044b850
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41360d
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x43f
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Error_opening_SCM:
mov ecx, eax
call fcn.0040a3c0
push esi
mov ecx, eax
call fcn.004138e0
push eax
call fcn.0040a730
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x4136a4
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41369a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4138ca
push edx
push ecx
call fcn.0045a3a4
add esp, 8
xor al, al
jmp 0x4138ae
push 0xf01ff
push str.MBAMInstallerService
push esi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edi, eax
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 2
test edi, edi
jne 0x413764
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], 0
call fcn.0044b850
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4136fa
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x449
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Error_opening
mov ecx, eax
call fcn.0040a3c0
mov edx, str.MBAMInstallerService
mov ecx, eax
call fcn.00413c50
mov edx, str.__status:
mov ecx, eax
call fcn.0040a3c0
push edi
jmp 0x41365a
push edi
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
jne 0x4137fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov ebx, eax
call edi
push esi
mov dword [ebp - 0x18], 0
call edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], 0
call fcn.0044b850
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4137ac
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x452
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.DeleteSerivce_Failed:
mov ecx, eax
call fcn.0040a3c0
push ebx
jmp 0x41365a
lea ecx, [ebp - 0x30]
call fcn.0044b850
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x413815
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x456
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Installer_Service_removed
mov ecx, eax
call fcn.0040a3c0
push eax
call fcn.0040a730
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x4138a0
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x413896
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4138ca
push edx
push ecx
call fcn.0045a3a4
add esp, 8
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call edi
push esi
call edi
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00459e83
mov esp, ebp
pop ebp
ret
call fcn.004750dc
int3