Function at 0x472670
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a155b
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
mov eax, dword [0x608554]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push ecx
push str.OperateService::CheckStatusSpoolerDepend
lea ecx, [ebp - 0x88]
call fcn.0040a480
mov dword [ebp - 4], 0
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x4726f6
test byte [ecx + 0x1c], 1
je 0x4726f6
cmp dword [0x608f68], 8
mov eax, 0x608f54
mov edx, 0x5cf518
cmovae eax, dword [0x608f54]
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x2f
call fcn.00401840
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x8c], 0
push 0x800f003f
push eax
push eax
mov dword [ebp - 0x90], 0
mov word [ebp - 0x94], ax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov edi, eax
mov dword [ebp - 0xa8], edi
test edi, edi
je 0x472bc1
push 0xf01ff
push str.SPOOLER
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov ebx, eax
mov dword [ebp - 0xa4], ebx
test ebx, ebx
je 0x472b67
mov esi, dword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x8c]
push eax
push 1
lea eax, [ebp - 0x94]
push eax
push 1
push ebx
call esi
test eax, eax
jne 0x472856
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x472856
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [0x608f30]
cmp eax, 0x608f30
je 0x4727e2
test byte [eax + 0x1c], 2
je 0x4727e2
cmp dword [0x608f68], 8
lea ecx, [ebp - 0x88]
mov esi, 0x608f54
cmovae esi, dword [0x608f54]
call fcn.0040a830
push eax
mov eax, dword [0x608f30]
mov edx, 0x5cf518
push esi
mov ecx, 0x30
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00405920
add esp, 0x10
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ebx
call esi
push edi
call esi
mov dword [0x6183ec], 0x28
mov byte [ebp - 0x84], 1
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x472a01
test byte [ecx + 0x1c], 1
je 0x472a01
cmp dword [0x608f68], 8
mov eax, 0x608f54
push 0x80010028
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x31
call fcn.004018a0
add esp, 0x10
mov esi, 0x80010028
jmp 0x472c5d
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x4728a2
test byte [ecx + 0x1c], 4
je 0x4728a2
push dword [ebp - 0x90]
cmp dword [0x608f68], 8
mov eax, 0x608f54
push dword [ebp - 0x8c]
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x32
call fcn.00437f70
add esp, 0x14
push dword [ebp - 0x8c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x98], eax
test eax, eax
jne 0x472926
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ebx
call esi
push edi
call esi
mov dword [0x6183ec], 2
mov byte [ebp - 0x84], 1
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x47291c
test byte [ecx + 0x1c], 1
je 0x47291c
cmp dword [0x608f68], 8
mov eax, 0x608f54
push 0x80010002
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x33
call fcn.004018a0
add esp, 0x10
mov esi, 0x80010002
jmp 0x472c5d
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push dword [ebp - 0x8c]
push eax
push 1
push ebx
call esi
test eax, eax
jne 0x472a0b
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x472993
test byte [ecx + 0x1c], 2
je 0x472993
push dword [ebp - 0x8c]
cmp dword [0x608f68], 8
mov eax, 0x608f54
push str._t_t_tEnumDependentServices2__d_
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x34
call fcn.004300c0
add esp, 0x14
push dword [ebp - 0x98]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ebx
call esi
push edi
call esi
mov dword [0x6183ec], 0x28
mov byte [ebp - 0x84], 1
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x472a01
test byte [ecx + 0x1c], 1
je 0x472a01
cmp dword [0x608f68], 8
mov eax, 0x608f54
push 0x80010028
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x35
call fcn.004018a0
add esp, 0x10
mov esi, 0x80010028
jmp 0x472c5d
cmp dword [ebp - 0x90], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
jbe 0x472b4a
mov esi, dword [ebp - 0x98]
mov ebx, dword [0x608f30]
push 0x40
lea eax, [ebp - 0x50]
push 0
push eax
call fcn.00571c00
mov edi, dword [esi + 0xc]
add esp, 0xc
cmp ebx, 0x608f30
je 0x472a90
test byte [ebx + 0x1c], 4
je 0x472a90
push dword [esi]
cmp dword [0x608f68], 8
mov eax, 0x608f54
push dword [esi + 4]
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ebx + 0x14]
mov ecx, 0x36
push dword [ebx + 0x10]
call fcn.00430170
mov ebx, dword [0x608f30]
add esp, 0x14
cmp edi, 4
je 0x472aa3
cmp edi, 2
je 0x472aa3
cmp edi, 5
jne 0x472b22
mov ebx, dword [ebp - 0x9c]
lea eax, [ebp - 0x50]
push ebx
push str.SPOOLERDEP_d
push 0x20
push eax
call fcn.0041e030
add esp, 0x10
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x472b01
test byte [ecx + 0x1c], 4
je 0x472b01
cmp dword [0x608f68], 8
mov eax, 0x608f54
push edi
push dword [esi]
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push ebx
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x37
call fcn.004305a0
add esp, 0x18
mov ecx, dword [0x6184f0]
lea eax, [ebp - 0x50]
push dword [esi]
push eax
mov ecx, dword [ecx + 0x1c]
call fcn.004f6860
inc ebx
mov dword [ebp - 0x9c], ebx
mov ebx, dword [0x608f30]
mov eax, dword [ebp - 0xa0]
add esi, 0x24
inc eax
mov dword [ebp - 0xa0], eax
cmp eax, dword [ebp - 0x90]
jb 0x472a38
mov ebx, dword [ebp - 0xa4]
mov edi, dword [ebp - 0xa8]
push dword [ebp - 0x98]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push ebx
call esi
push edi
call esi
jmp 0x472c12
mov eax, dword [0x608f30]
cmp eax, 0x608f30
je 0x472bb6
test byte [eax + 0x1c], 2
je 0x472bb6
cmp dword [0x608f68], 8
lea ecx, [ebp - 0x88]
mov esi, 0x608f54
cmovae esi, dword [0x608f54]
call fcn.0040a830
push eax
mov eax, dword [0x608f30]
mov edx, 0x5cf518
push esi
mov ecx, 0x38
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00405920
add esp, 0x10
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push edi
call esi
jmp 0x472c12
mov ecx, dword [0x608f30]
cmp ecx, 0x608f30
je 0x472c18
test byte [ecx + 0x1c], 2
je 0x472c18
cmp dword [0x608f68], 8
lea ecx, [ebp - 0x88]
mov esi, 0x608f54
cmovae esi, dword [0x608f54]
call fcn.0040a830
push eax
mov eax, dword [0x608f30]
mov edx, 0x5cf518
push esi
mov ecx, 0x39
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00405920
add esp, 0x10
mov ecx, dword [0x608f30]
mov byte [ebp - 0x84], 1
cmp ecx, 0x608f30
je 0x472c5b
test byte [ecx + 0x1c], 1
je 0x472c5b
cmp dword [0x608f68], 8
mov eax, 0x608f54
push 0
cmovae eax, dword [0x608f54]
mov edx, 0x5cf518
push eax
push dword [ecx + 0x14]
push dword [ecx + 0x10]
mov ecx, 0x3a
call fcn.004018a0
add esp, 0x10
xor esi, esi
lea ecx, [ebp - 0x88]
call fcn.0040a570
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0056d977
mov esp, ebp
pop ebp
ret