Function at 0x4301c6
Capabilities:
Enumerate services

Disassembly:
jmp 0x43d380
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
test dword [edx], ebx
add byte [eax], al
add byte [eax], al
add byte [eax], al
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x48], 0
mov esi, esp
push 0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 0
push 0
push 3
push 0x30
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x43d7d8
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00430289
cmp eax, 0xea
jne 0x43d7d8
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x30], eax
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov edx, 0x24
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00430680
add esp, 4
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x24], eax
mov esi, esp
push 0
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x24]
push eax
push 3
push 0x30
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x610], 0
jmp 0x43d4ab
mov eax, dword [ebp - 0x610]
add eax, 1
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x48]
jae 0x43d7d8
push 0x5a8
push 0
lea eax, [ebp - 0x604]
push eax
call fcn.0042f6fe
add esp, 0xc
mov eax, dword [ebp - 0x610]
imul eax, eax, 0x24
mov esi, esp
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + eax]
push edx
push 0x49310c
lea eax, [ebp - 0x604]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.00430289
mov eax, dword [ebp - 0x610]
imul eax, eax, 0x24
mov esi, esp
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + eax + 4]
push edx
push 0x49310c
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.00430289
mov eax, dword [ebp - 0x610]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + eax + 0xc]
mov dword [ebp - 0x268], edx
mov esi, esp
push 0xf01ff
mov eax, dword [ebp - 0x610]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + eax]
push edx
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x640], 0
mov esi, esp
lea eax, [ebp - 0x634]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x61c]
push ecx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x43d67a
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00430289
cmp eax, 0x7a
jne 0x43d67a
mov eax, dword [ebp - 0x634]
add eax, 1
mov dword [ebp - 0x628], eax
xor ecx, ecx
mov eax, dword [ebp - 0x628]
mov edx, 0x24
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00430680
add esp, 4
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x640], eax
mov esi, esp
lea eax, [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x628]
push ecx
mov edx, dword [ebp - 0x640]
push edx
mov eax, dword [ebp - 0x61c]
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x640]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x26c], ecx
mov esi, esp
mov eax, dword [ebp - 0x640]
mov ecx, dword [eax + 0xc]
push ecx
push 0x49310c
lea edx, [ebp - 0x264]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.00430289
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x730]
push ecx
call fcn.0042f7da
add esp, 4
mov dword [ebp - 0x64c], 0
mov esi, esp
lea eax, [ebp - 0x634]
push eax
push 0
push 0
push 1
mov ecx, dword [ebp - 0x61c]
push ecx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfig2W]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x43d77e
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.00430289
cmp eax, 0x7a
jne 0x43d77e
mov eax, dword [ebp - 0x634]
add eax, 1
mov dword [ebp - 0x628], eax
xor ecx, ecx
mov eax, dword [ebp - 0x628]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00430680
add esp, 4
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x64c], eax
mov esi, esp
lea eax, [ebp - 0x634]
push eax
mov ecx, dword [ebp - 0x628]
push ecx
mov edx, dword [ebp - 0x64c]
push edx
push 1
mov eax, dword [ebp - 0x61c]
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfig2W]
cmp esi, esp
call fcn.00430289
mov dword [ebp - 0x54], eax
mov esi, esp
mov eax, dword [ebp - 0x64c]
mov ecx, dword [eax]
push ecx
push 0x49310c
lea edx, [ebp - 0x474]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.00430289
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x718]
push ecx
call fcn.0042f7da
add esp, 4
mov esi, esp
mov eax, dword [ebp - 0x61c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp esi, esp
call fcn.00430289
push 0x86d
push 0x5a8
lea eax, [ebp - 0x604]
push eax
push 5
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 4]
call fcn.0042f82a
jmp 0x43d49c
mov esi, esp
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp esi, esp
call fcn.00430289
push edx
mov ecx, ebp
push eax
lea edx, [0x43d81c]
call fcn.0042f7b2
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042f230
add esp, 0x74c
cmp ebp, esp
call fcn.00430289
mov esp, ebp
pop ebp
ret