Function at 0x479760
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bfc84
mov eax, dword fs:[0]
push eax
sub esp, 0x44
mov eax, dword [0x4fb00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
call fcn.00478f70
push eax
push str._s:_Initializing_modules...
push 0x4e3924
push 4
call fcn.0046b300
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
call dword [eax + 8]
test eax, eax
jne 0x4799b7
push eax
push eax
push eax
call fcn.00476270
mov ecx, dword [edi + 0x18]
add esp, 0xc
mov esi, eax
mov dword [ebp - 0x44], esi
mov edx, dword [ecx]
call dword [edx + 0xc]
test eax, eax
je 0x479805
mov ecx, dword [edi + 0x18]
push 0x28
push 0
mov eax, dword [ecx]
call dword [eax + 0xc]
push eax
push edi
push 0x47a650
push 0
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.api_ms_win_core_threadpool_legacy_l1_1_0.dll_CreateTimerQueueTimer]
test eax, eax
jne 0x479805
push eax
push 2
push str.Daemon::AManagerBase::RunDaemonThread
call fcn.0046aee0
add esp, 0xc
mov ecx, dword [0x4ff580]
xor bl, bl
mov eax, dword fs:[0x2c]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x40], eax
nop dword [eax]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
cmp eax, 3
ja case.default.0x479830
jmp dword [eax*4 + 0x479a4c]
call fcn.00478f70
push eax
push str._s:_Updating_running_modules...
push 0x4e3924
push 4
call fcn.0046b300
add esp, 0x10
mov dword [ebp - 0x38], 0x4d6388
xor eax, eax
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
push 0xe
push str.UnknownProduct
call fcn.00410a70
xorps xmm0, xmm0
mov byte [ebp - 0x1c], 1
movq qword [ebp - 0x18], xmm0
mov byte [ebp - 0x18], 0
mov byte [ebp - 0x14], 0
mov dword [ebp - 4], 0
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x38]
call fcn.00474940
cmp byte [ebp - 0x1c], 0
je 0x4799e0
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
push 1
cmovae eax, dword [ebp - 0x34]
mov ecx, edi
push eax
call fcn.0047a2a0
lea ecx, [ebp - 0x34]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0x4d6388
call fcn.004306a0
jmp 0x479941
call fcn.00478f70
push eax
push str._s:_Service_required_to_stop...
push 0x4e3924
push 4
call fcn.0046b300
mov bl, 1
jmp 0x47993e
call fcn.00478f70
push eax
push str._s:_Handling_service_event...
jmp 0x479932
call fcn.00478f70
push eax
push str._s:_Handling_a_command_event...
jmp 0x479932
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax]
mov eax, dword [0x5048f4]
cmp eax, dword [ecx + 4]
jg 0x479a05
push dword [0x5048f0]
push str._s:_Unknown_service_event
push 0x4e3924
push 4
call fcn.0046b300
add esp, 0x10
mov ecx, dword [edi + 0x18]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
test al, al
je 0x4799d6
mov eax, dword [edi + 4]
lea ecx, [edi + 4]
call dword [eax + 4]
mov esi, eax
mov ecx, dword [esi]
add esi, 4
test ecx, ecx
je 0x47997a
mov edx, dword [ecx]
call dword [edx + 0x14]
cmp eax, 2
je 0x4799d3
mov ecx, dword [esi]
add esi, 4
test ecx, ecx
jne 0x479967
call fcn.00478f70
push eax
push str._s:_No_more_modules_running__stopping_service...
push 0x4e3924
push 4
call fcn.0046b300
add esp, 0x10
call fcn.00478f70
push eax
push str._s:_Uninitializing_modules...
push 0x4e3924
push 4
call fcn.0046b300
mov eax, dword [edi]
add esp, 0x10
mov ecx, edi
call dword [eax + 0xc]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00437174
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 0x44]
test bl, bl
je 0x479820
jmp 0x479994
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x50]
movq qword [ebp - 0x50], xmm0
call fcn.0041b180
push 0x4f7e30
lea eax, [ebp - 0x50]
push eax
call fcn.004434e6
push 0x5048f4
call fcn.00437342
add esp, 4
cmp dword [0x5048f4], 0xffffffff
jne 0x479927
lea ecx, [ebp - 0x39]
mov dword [ebp - 4], 1
call fcn.0046cf20
push 0x5048f4
mov dword [0x5048f0], eax
mov dword [ebp - 4], 0xffffffff
call fcn.004372f8
add esp, 4
jmp 0x479927