Function at 0x412c50
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x497b38
mov eax, dword fs:[0]
push eax
sub esp, 0x4c
mov eax, dword [0x4c606c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x20000004
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov esi, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 0
test esi, esi
jne 0x412d5b
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.0044b850
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x412cbd
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x3c4
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Error_opening_SCM:
mov ecx, eax
call fcn.0040a3c0
push esi
mov ecx, eax
call fcn.004138e0
push eax
call fcn.0040a730
mov edx, dword [ebp - 0x44]
add esp, 4
cmp edx, 8
jb 0x412d54
mov ecx, dword [ebp - 0x58]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x412d4a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x412ffc
push edx
push ecx
call fcn.0045a3a4
add esp, 8
xor al, al
jmp 0x412fe0
push 0xf01ff
push str.MBAMInstallerService
push esi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edi, eax
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 2
test edi, edi
jne 0x412e7c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0
call fcn.0044b850
cmp edi, 0x424
jne 0x412e03
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x412db2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x3d1
mov ecx, eax
call fcn.00408a40
mov edx, str.:_Service_not_found:
mov ecx, eax
call fcn.0040a3c0
mov edx, str.MBAMInstallerService
mov ecx, eax
call fcn.00413c50
jmp 0x412d11
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x412e12
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x3d5
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Error_opening
mov ecx, eax
call fcn.0040a3c0
mov edx, str.MBAMInstallerService
mov ecx, eax
call fcn.00413c50
mov edx, str.__status:
mov ecx, eax
call fcn.0040a3c0
push edi
jmp 0x412d0a
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
push eax
push 0x24
lea eax, [ebp - 0x40]
push eax
push 0
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x412f41
call dword [sym.imp.KERNEL32.dll_GetLastError]
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov ebx, eax
call edi
push esi
mov dword [ebp - 0x18], 0
call edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0
call fcn.0044b850
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x412ed7
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x3e2
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.Error_getting
mov ecx, eax
call fcn.0040a3c0
mov edx, str.MBAMInstallerService
mov ecx, eax
call fcn.00413c50
mov edx, str._status:
mov ecx, eax
call fcn.0040a3c0
push ebx
jmp 0x412d0a
cmp dword [ebp - 0x3c], 1
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jne 0x412fd9
call edi
push esi
mov dword [ebp - 0x18], 0
call edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x14], 0
call fcn.0044b850
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x412f7c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4ca1e0
call fcn.0040b1e0
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupinstallerservicefactory.cpp
mov ecx, eax
call fcn.0040a3c0
mov edx, 0x4adac4
mov ecx, eax
call fcn.0040a3c0
push 0x3e9
mov ecx, eax
call fcn.00408a40
mov edx, 0x4adc00
mov ecx, eax
call fcn.0040a3c0
mov edx, str.MBAMInstallerService
mov ecx, eax
call fcn.00413c50
mov edx, str._appears_to_be_stopped
mov ecx, eax
call fcn.0040a3c0
jmp 0x412d11
call edi
push esi
call edi
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00459e83
mov esp, ebp
pop ebp
ret
call fcn.004750dc
int3