Function at 0x4b5480
Capabilities:
Delete service

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d4b06
push eax
mov dword fs:[0], esp
sub esp, 0x458
push ebx
push esi
mov esi, dword [esp + 0x474]
xor ebx, ebx
push edi
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x4b54b3
mov eax, 0x4d68e8
push eax
push str.UTILITY.INF:__RemoveSoftwareComponent__entered_for__s_n
push 0x503ff0
call fcn.00423100
add esp, 0xc
lea ecx, [esp + 0x28]
call fcn.0046ceb0
mov al, byte [esp + 0x27]
push ebx
lea ecx, [esp + 0x10]
mov dword [esp + 0x470], ebx
mov byte [esp + 0x10], al
call fcn.00406ad6
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov ecx, dword [esp + 0x474]
mov byte [esp + 0x46c], 1
mov eax, dword [ecx + 4]
cmp eax, ebx
jne 0x4b550b
mov eax, 0x4d68e8
push eax
lea edx, [esp + 0x10]
push 0xce1
push edx
call fcn.0041c3cf
add esp, 0xc
lea eax, [esp + 0xc]
lea ecx, [esp + 0x28]
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.0046d070
test eax, eax
jne 0x4b5558
push str..UtilityInf.cpp
push 0x3cc
push str.ManufacturerKey.Open_HKEY_LOCAL_MACHINE__ManufacturerKeyName_
lea ecx, [esp + 0x60]
push str.__s____d__in___s_
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push esi
lea ecx, [esp + 0x2c]
call fcn.0046f120
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov edi, eax
cmp edi, ebx
jne 0x4b55a6
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4b558a
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4b5606
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4b55fd
cmp al, 0xff
je 0x4b55fd
dec al
mov byte [ecx], al
jmp 0x4b5606
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x4b55b2
mov eax, 0x4d68e8
push 0xf01ff
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov esi, eax
cmp esi, ebx
jne 0x4b562a
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4b55e1
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4b5606
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4b55fd
cmp al, 0xff
je 0x4b55fd
dec al
mov byte [ecx], al
jmp 0x4b5606
push ecx
call fcn.004be17b
add esp, 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x46c], 0xffffffff
call fcn.0046cf30
xor eax, eax
jmp 0x4b569c
push esi
call dword [sym.imp.ADVAPI32.dll_DeleteService]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push edi
call esi
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x4b5652
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x4b5677
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x4b566e
cmp al, 0xff
je 0x4b566e
dec al
mov byte [ecx], al
jmp 0x4b5677
push ecx
call fcn.004be17b
add esp, 4
lea ecx, [esp + 0x28]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x46c], 0xffffffff
call fcn.0046cf30
mov eax, 1
mov ecx, dword [esp + 0x464]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x464
ret 8