Function at 0x473c80
Capabilities:
Print debug messages
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47db3d
mov eax, dword fs:[0]
push eax
sub esp, 0xb1c
mov eax, dword [0x499078]
xor eax, ebp
mov dword [ebp - 0x48], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xb04], ecx
mov dword [ebp - 0x2c], 1
cmp dword [ebp + 8], 0
je 0x473df9
lea ecx, [ebp - 0x64]
call fcn.004017d0
mov dword [ebp - 4], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9b8], esp
push str.sc_stop_XYService
call fcn.00401800
mov dword [ebp - 0xb08], eax
call fcn.00472dd0
add esp, 0x1c
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xb0c]
mov dword [ebp - 0x84], eax
mov byte [ebp - 0x184], 0
push 0xfe
push 0
lea ecx, [ebp - 0x183]
push ecx
call fcn.00416c80
add esp, 0xc
mov edx, dword [ebp - 0x84]
push edx
push str.stop_XYService_code:_d
lea eax, [ebp - 0x184]
push eax
call fcn.00417425
add esp, 0xc
lea ecx, [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x80]
call fcn.004016f0
mov byte [ebp - 4], 1
lea edx, [ebp - 0x80]
push edx
call fcn.00401500
add esp, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x9bc], esp
push str.sc_delete_XYService
call fcn.00401800
mov dword [ebp - 0xb10], eax
call fcn.00472dd0
add esp, 0x1c
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x84], eax
push 0xff
push 0
lea ecx, [ebp - 0x184]
push ecx
call fcn.00416c80
add esp, 0xc
mov edx, dword [ebp - 0x84]
push edx
push str.delete_XYService_code:_d
lea eax, [ebp - 0x184]
push eax
call fcn.00417425
add esp, 0xc
lea ecx, [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x80]
call fcn.00401790
lea edx, [ebp - 0x80]
push edx
call fcn.00401500
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x80]
call fcn.00401770
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00401880
lea ecx, [ebp - 0x44]
call fcn.00401d60
mov dword [ebp - 4], 2
push str.xyservice.exe
lea ecx, [ebp - 0x9d8]
call fcn.00401800
mov byte [ebp - 4], 3
lea eax, [ebp - 0x9d8]
push eax
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9d8]
call fcn.00401880
push str.xylauncher.exe
lea ecx, [ebp - 0x9f4]
call fcn.00401800
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9f4]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9f4]
call fcn.00401880
push str.xyclient.exe
lea ecx, [ebp - 0xa10]
call fcn.00401800
mov byte [ebp - 4], 5
lea edx, [ebp - 0xa10]
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa10]
call fcn.00401880
push str.xyappinst.exe
lea ecx, [ebp - 0xa2c]
call fcn.00401800
mov byte [ebp - 4], 6
lea eax, [ebp - 0xa2c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa2c]
call fcn.00401880
push str.uninstall.exe
lea ecx, [ebp - 0xa48]
call fcn.00401800
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xa48]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa48]
call fcn.00401880
push str.bugreport.exe
lea ecx, [ebp - 0xa64]
call fcn.00401800
mov byte [ebp - 4], 8
lea edx, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e40
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa64]
call fcn.00401880
lea ecx, [ebp - 0x24]
call fcn.00401c20
mov byte [ebp - 4], 9
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0xb04]
call fcn.00473280
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x188], 0
jmp 0x473f71
mov ecx, dword [ebp - 0x188]
add ecx, 1
mov dword [ebp - 0x188], ecx
lea ecx, [ebp - 0x44]
call fcn.00401df0
cmp dword [ebp - 0x188], eax
jae 0x47430d
mov dword [ebp - 0x18c], 0
jmp 0x473fa0
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
lea ecx, [ebp - 0x24]
call fcn.004064f0
cmp dword [ebp - 0x18c], eax
jae 0x4742f7
mov eax, dword [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x24]
call fcn.00401cb0
mov ecx, dword [eax]
add ecx, 0x24
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0xa68], esp
push ecx
mov ecx, edx
call fcn.00401800
mov dword [ebp - 0xb18], eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.00460430
add esp, 0x20
mov dword [ebp - 0xb1c], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x18c]
push ecx
lea ecx, [ebp - 0x24]
call fcn.00401cb0
mov edx, dword [eax]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0
je 0x4742e3
mov eax, dword [ebp - 0x190]
add eax, 0x24
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xa70], esp
push eax
call fcn.00401800
mov dword [ebp - 0xb20], eax
lea ecx, [ebp - 0xa8c]
push ecx
call fcn.00460430
add esp, 0x20
mov dword [ebp - 0xb24], eax
mov edx, dword [ebp - 0xb24]
mov dword [ebp - 0xb28], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0xb28]
push eax
mov ecx, dword [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00401e10
push eax
call fcn.00404fb0
add esp, 8
mov byte [ebp - 0xa69], al
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa8c]
call fcn.00401880
movzx edx, byte [ebp - 0xa69]
test edx, edx
je 0x4742e3
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
add eax, 1
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ecx + 8]
push edx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x47410a
push 0
mov eax, dword [ebp - 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x1b4], 0
jmp 0x4741ba
mov byte [ebp - 0x5b4], 0
push 0x3ff
push 0
lea ecx, [ebp - 0x5b3]
push ecx
call fcn.00416c80
add esp, 0xc
mov edx, dword [ebp - 0x188]
push edx
lea ecx, [ebp - 0x44]
call fcn.00401e10
mov ecx, eax
call fcn.00401950
push eax
push str.Open_Process_fail:_s_n
push 0x400
lea eax, [ebp - 0x5b4]
push eax
call fcn.004174a2
add esp, 0x10
lea ecx, [ebp - 0x5b4]
push ecx
lea ecx, [ebp - 0xaa8]
call fcn.004016f0
mov byte [ebp - 4], 0xc
push 0x48e9a0
lea ecx, [ebp - 0xac4]
call fcn.004016f0
mov byte [ebp - 4], 0xd
lea edx, [ebp - 0xaa8]
push edx
push 0x33d
lea eax, [ebp - 0xac4]
push eax
call fcn.0047a760
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xac4]
call fcn.00401770
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xaa8]
call fcn.00401770
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ecx + 8]
push edx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x4741f5
cmp dword [ebp - 0x1b0], 0xa
jl 0x4740ba
cmp dword [ebp - 0x1b4], 0
je 0x4742e3
cmp dword [ebp - 0x1b0], 0xa
jl 0x4742e3
mov byte [ebp - 0x9b4], 0
push 0x3ff
push 0
lea eax, [ebp - 0x9b3]
push eax
call fcn.00416c80
add esp, 0xc
mov ecx, dword [ebp - 0x188]
push ecx
lea ecx, [ebp - 0x44]
call fcn.00401e10
mov ecx, eax
call fcn.00401950
push eax
push str.Kill_Process_fail:_s_n
push 0x400
lea edx, [ebp - 0x9b4]
push edx
call fcn.004174a2
add esp, 0x10
mov eax, dword [ebp - 0x188]
push eax
lea ecx, [ebp - 0x44]
call fcn.00401e10
mov ecx, eax
call fcn.00401950
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea ecx, [ebp - 0x9b4]
push ecx
lea ecx, [ebp - 0xae0]
call fcn.004016f0
mov byte [ebp - 4], 0xe
push str..CXYAutoUpdateWnd.cpp
lea ecx, [ebp - 0xafc]
call fcn.004016f0
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0xae0]
push edx
push 0x347
lea eax, [ebp - 0xafc]
push eax
call fcn.0047a760
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xafc]
call fcn.00401770
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xae0]
call fcn.00401770
mov dword [ebp - 0x2c], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1ac]
call fcn.00401880
jmp 0x473f91
cmp dword [ebp + 8], 0
je 0x474308
cmp dword [ebp - 0x188], 0
jne 0x474308
jmp 0x47430d
jmp 0x473f62
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xb00], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x24]
call fcn.00401c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
call fcn.00401dd0
mov eax, dword [ebp - 0xb00]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x48]
xor ecx, ebp
call fcn.0041694e
mov esp, ebp
pop ebp
ret 4