Function at 0x4bbb50
Capabilities:
Create service

Disassembly:
push 0xffffffffffffffff
push 0x4d544c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x558
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov ecx, 0x5040a8
mov dword [esp + 0x44], esi
call fcn.0042ce90
test eax, eax
jne 0x4bbb8d
mov eax, 1
jmp 0x4bbf9f
mov ecx, esi
call fcn.004bc0c0
mov al, byte [esp + 0x12]
xor ebx, ebx
push ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00406ad6
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
lea ecx, [esp + 0x12]
mov dword [esp + 0x570], ebx
push ecx
lea ecx, [esp + 0x30]
call fcn.0041dbef
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov eax, dword [0x5041d4]
mov byte [esp + 0x570], 1
cmp eax, ebx
jne 0x4bbc15
push str.m_hInstance___0
lea edx, [esp + 0x16c]
push str.ASSERT__s_
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [esp + 0x168]
mov ecx, 0x503ff0
push eax
push 0x558
push str..isoutils.h
call fcn.00423080
mov edx, dword [0x5041d4]
lea ecx, [esp + 0x64]
push 0x104
push ecx
push 0x1bb3
push edx
call dword [sym.imp.USER32.dll_LoadStringA]
cmp eax, ebx
je 0x4bbc52
lea edi, [esp + 0x64]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x64]
push ecx
push eax
lea ecx, [esp + 0x34]
call fcn.0040695a
lea ecx, [esp + 0x4c]
push ecx
mov ecx, dword [esi + 0x70]
call fcn.0049ddc0
mov eax, dword [eax + 4]
mov byte [esp + 0x570], 2
cmp eax, ebx
jne 0x4bbc73
mov eax, 0x4d68e8
mov esi, dword [esp + 0x30]
cmp esi, ebx
jne 0x4bbc80
mov esi, 0x4d68e8
push eax
mov ecx, 0x5040a8
call fcn.0042d460
push eax
lea edx, [esp + 0x1c]
push esi
push edx
call fcn.00430ae0
mov eax, dword [esp + 0x6c]
add esp, 0x10
cmp eax, ebx
mov byte [esp + 0x570], 1
je 0x4bbcb7
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x5c], ebx
push 1
lea ecx, [esp + 0x50]
call fcn.00406ad6
lea ecx, [esp + 0x14]
call fcn.0044fbc0
sub esp, 0x18
mov ebp, eax
mov esi, esp
lea eax, [esp + 0x2b]
mov dword [esp + 0x60], esp
push eax
mov ecx, esi
mov dword [esp + 0x64], esi
call fcn.0041dbef
mov edi, ebp
or ecx, 0xffffffff
xor eax, eax
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov byte [esp + 0x588], 3
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push ebp
mov ecx, esi
call fcn.0040695a
mov ecx, 0x5040a8
mov byte [esp + 0x588], 1
call fcn.0042f640
cmp eax, ebx
jne 0x4bbd7b
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x4bbd2c
mov eax, 0x4d68e8
push eax
push str.Driver__s_no_found
push 0x503ff0
call fcn.004230b0
mov eax, dword [esp + 0x48]
add esp, 0xc
cmp eax, ebx
mov byte [esp + 0x570], bl
je 0x4bbd5b
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x3c], ebx
push 1
lea ecx, [esp + 0x30]
call fcn.00406ad6
mov eax, dword [esp + 0x24]
mov dword [esp + 0x570], 0xffffffff
cmp eax, ebx
je 0x4bbde7
jmp 0x4bbdda
push 0xf003f
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov edi, eax
cmp edi, ebx
jne 0x4bbdf9
push str.OpenSCManager_Failed_to_open_SCM
push 0x503ff0
call fcn.004234a0
mov eax, dword [esp + 0x44]
add esp, 8
cmp eax, ebx
mov byte [esp + 0x570], bl
je 0x4bbdbc
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x3c], ebx
push 1
lea ecx, [esp + 0x30]
call fcn.00406ad6
mov eax, dword [esp + 0x24]
mov dword [esp + 0x570], 0xffffffff
cmp eax, ebx
je 0x4bbde7
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x24], ebx
push 1
lea ecx, [esp + 0x18]
call fcn.00406ad6
xor eax, eax
jmp 0x4bbf9f
mov esi, dword [esp + 0x44]
mov eax, dword [esi + 0x34]
cmp eax, ebx
jne 0x4bbe09
mov eax, 0x4d68e8
push eax
push str.Installing_NT_Service__s
push 0x503ff0
call fcn.00423100
mov edx, dword [esp + 0x24]
add esp, 0xc
cmp edx, ebx
jne 0x4bbe29
mov edx, 0x4d68e8
mov ecx, dword [esi + 0x4c]
cmp ecx, ebx
jne 0x4bbe35
mov ecx, 0x4d68e8
mov eax, dword [esi + 0x34]
cmp eax, ebx
jne 0x4bbe41
mov eax, 0x4d68e8
push ebx
push ebx
push ebx
push ebx
push ebx
mov ebp, 1
push edx
push ebp
push 3
push ebp
push 0xf01ff
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_CreateServiceA]
cmp eax, ebx
jne 0x4bbea6
mov eax, dword [esi + 0x34]
cmp eax, ebx
jne 0x4bbe6e
mov eax, 0x4d68e8
push eax
push str.CreateService_of__s_Failed__may_be_it_is_loaded_already__we_can_try_to_open....
push 0x503ff0
call fcn.004234a0
mov eax, dword [esi + 0x34]
add esp, 0xc
cmp eax, ebx
jne 0x4bbe8d
mov eax, 0x4d68e8
push 0xf01ff
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
cmp eax, ebx
je 0x4bbf19
cmp eax, 0xffffffff
je 0x4bbf19
mov dword [esi + 0x78], ebp
mov dword [esi + 0x74], ebp
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push eax
call esi
push edi
call esi
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x570], bl
cmp eax, ebx
je 0x4bbed1
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x3c], ebx
push ebp
lea ecx, [esp + 0x30]
call fcn.00406ad6
mov eax, dword [esp + 0x24]
cmp eax, ebx
je 0x4bbef0
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x24], ebx
mov ecx, dword [esp + 0x18]
cmp ecx, ebx
je 0x4bbf9d
mov al, byte [ecx - 1]
cmp al, bl
je 0x4bbf93
cmp al, 0xff
je 0x4bbf93
dec al
mov byte [ecx - 1], al
jmp 0x4bbf9d
mov eax, dword [esi + 0x34]
cmp eax, ebx
jne 0x4bbf25
mov eax, 0x4d68e8
push eax
push str.OpenService_also_failed_on__s
push 0x503ff0
call fcn.004234a0
add esp, 0xc
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [esp + 0x3c]
mov byte [esp + 0x570], bl
cmp eax, ebx
je 0x4bbf5b
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x3c], ebx
push ebp
lea ecx, [esp + 0x30]
call fcn.00406ad6
mov eax, dword [esp + 0x24]
mov dword [esp + 0x570], 0xffffffff
cmp eax, ebx
je 0x4bbf85
push eax
call fcn.004be17b
add esp, 4
mov dword [esp + 0x24], ebx
push ebp
lea ecx, [esp + 0x18]
call fcn.00406ad6
xor eax, eax
jmp 0x4bbf9f
dec ecx
push ecx
call fcn.004be17b
add esp, 4
mov eax, ebp
mov ecx, dword [esp + 0x568]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x564
ret