Function at 0x4129f0
Capabilities:
Create service
Persist via windows service

Disassembly:
mov eax, 0x4163bf
call fcn.00414060
sub esp, 0xe8
mov eax, dword [0x422a68]
push ebx
push esi
push edi
mov dword [ebp - 0x10], eax
mov esi, 0x4229f0
lea eax, [ebp - 0x50]
push esi
push eax
call fcn.0040b307
pop ecx
pop ecx
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
mov ecx, 0x4229f0
mov dword [ebp - 4], ebx
call fcn.0040134f
or dword [ebp - 4], 0xffffffff
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x50]
call fcn.004010eb
cmp dword [0x422a08], 0x10
mov eax, dword [0x4229f4]
jae 0x412a53
mov eax, 0x4229f4
lea ecx, [ebp - 0xf4]
push ecx
push eax
call dword [sym.imp.MSVCR71.dll__stat]
test eax, eax
pop ecx
pop ecx
jge 0x412a9f
cmp dword [0x422a08], 0x10
mov esi, dword [0x4229f4]
jae 0x412a7b
mov esi, 0x4229f4
call dword [sym.imp.MSVCR71.dll__errno]
push dword [eax]
call dword [sym.imp.MSVCR71.dll_strerror]
push eax
push esi
push str.Could_not_find__s:__s_n
call fcn.004112c3
add esp, 0x10
xor al, al
jmp 0x412e5c
call fcn.0041268f
call fcn.004127cd
push edi
push 2
lea ecx, [ebp - 0xd0]
call fcn.004079bc
lea eax, [ebp - 0x50]
push ebx
push eax
mov dword [ebp - 4], edi
call fcn.0040b295
pop ecx
pop ecx
push 0x41d1f8
push eax
lea eax, [ebp - 0xd0]
push 0x41d1fc
push eax
mov byte [ebp - 4], 2
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
push str._service
lea eax, [ebp - 0xd0]
push 0x41d20c
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push 0x41d210
push esi
push 0x41d214
push str._config
lea eax, [ebp - 0xd0]
push 0x41d220
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
cmp dword [0x422a3c], ebx
pop ecx
pop ecx
je 0x412bd1
lea eax, [ebp - 0x50]
push 0x422a28
push eax
call fcn.0040b307
pop ecx
pop ecx
push 0x41d224
push eax
push 0x41d228
push str._logfile
lea eax, [ebp - 0xd0]
push 0x41d238
push eax
mov byte [ebp - 4], 3
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
cmp dword [0x422a20], ebx
je 0x412c97
cmp dword [0x422a24], 0x10
mov eax, dword [0x422a10]
mov esi, 0x422a10
jae 0x412bf2
mov eax, esi
lea ecx, [ebp - 0xf4]
push ecx
push eax
call dword [sym.imp.MSVCR71.dll__stat]
test eax, eax
pop ecx
pop ecx
jge 0x412c32
cmp dword [0x422a24], 0x10
jb 0x412c15
mov esi, dword [0x422a10]
call dword [sym.imp.MSVCR71.dll__errno]
push dword [eax]
call dword [sym.imp.MSVCR71.dll_strerror]
push eax
push esi
push str.Could_not_find_profile___s_:__s_n
call fcn.0041100f
add esp, 0x10
lea eax, [ebp - 0x50]
push 0x422a0c
push eax
call fcn.0040b307
pop ecx
pop ecx
push 0x41d260
push eax
push 0x41d264
push str._profile
lea eax, [ebp - 0xd0]
push 0x41d274
push eax
mov byte [ebp - 4], 4
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407657
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call fcn.004010eb
mov eax, dword [0x422de8]
cmp eax, ebx
jbe 0x412cd5
push eax
push 0x41d278
push str._verbose
lea eax, [ebp - 0xd0]
push 0x41d288
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
mov ecx, eax
call fcn.00412e94
mov eax, dword [0x422e18]
cmp eax, ebx
jbe 0x412d13
push eax
push 0x41d28c
push str._timing
lea eax, [ebp - 0xd0]
push 0x41d298
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
push eax
call fcn.00407507
pop ecx
pop ecx
mov ecx, eax
call fcn.00412e94
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00408a97
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 5
jae 0x412d32
lea eax, [ebp - 0x28]
push eax
push str.Installing_JQS_service:__s_n
push edi
call fcn.00411322
add esp, 0xc
push 2
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov esi, eax
cmp esi, ebx
jne 0x412d6c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Unable_to_install_service:_OpenSCManager_failed__error__d__n
call fcn.004112c3
pop ecx
pop ecx
mov byte [ebp - 0x2d], bl
jmp 0x412e2b
cmp dword [ebp - 0x14], 0x10
mov eax, dword [ebp - 0x28]
jae 0x412d78
lea eax, [ebp - 0x28]
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
push edi
push 2
push 0x10
push 0xf01ff
push 0x41d2f4
push 0x41d308
push esi
call dword [sym.imp.ADVAPI32.dll_CreateServiceA]
mov edi, eax
cmp edi, ebx
jne 0x412dca
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
jne 0x412db8
push 0x41d320
push str.Unable_to_register_service:__s_already_installed_n
jmp 0x412dbe
push eax
push str.Unable_to_register_service:_CreatedService_failed__error__d__n
call fcn.004112c3
pop ecx
pop ecx
mov byte [ebp - 0x2d], bl
jmp 0x412e28
cmp dword [0x422c40], 2
jne 0x412e18
cmp dword [0x422c34], 5
jb 0x412e18
mov eax, dword [0x422cf4]
cmp eax, ebx
je 0x412e0d
lea ecx, [ebp - 0x34]
push ecx
push 1
push edi
mov dword [ebp - 0x34], str.Prefetches_JRE_files_for_faster_startup_of_Java_applets_and_applications
call eax
test eax, eax
jne 0x412e18
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Failed_to_set_service_description:_ChangeServiceConfig2_failed__error__d__n
call fcn.0041100f
pop ecx
jmp 0x412e17
push str.Unable_to_set_service_description:_ChangeServiceConfig2_is_not_available_n
call fcn.0041100f
pop ecx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push edi
call esi
mov byte [ebp - 0x2d], 1
xor edi, edi
inc edi
push ebx
push edi
lea ecx, [ebp - 0x2c]
call fcn.004010eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.00407364
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], 0x417b50
call fcn.00414e7b
mov al, byte [ebp - 0x2d]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.00414165
leave
ret