Function at 0x402864
Capabilities:
Create service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
push ebx
push esi
push edi
push 0x45f2c4
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f2f8
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f308
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f31c
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f330
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f340
call fcn.00403869
add esp, 4
cmp eax, 1
je 0x40290a
push 0x45f354
call fcn.00403869
add esp, 4
cmp eax, 1
jne 0x402921
push 0x45f3a0
push str.Unable_to_install:__s_is_installed_and_or_currently_running._n
call fcn.00452380
add esp, 8
jmp 0x402ba8
push 0x200
lea eax, [ebp - 0x408]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
jne 0x402967
push 0x100
push 0xb614a0
call fcn.00403677
add esp, 8
push eax
push 0x45f408
push str.Unable_to_install__s____s_n
call fcn.00452380
add esp, 0xc
jmp 0x402ba8
cmp dword [0x462284], 0
je 0x402992
push 0x200
lea eax, [ebp - 0x200]
push eax
push 0x45f44c
call fcn.004280cc
add esp, 0xc
jmp 0x4029ab
push 0x200
lea eax, [ebp - 0x200]
push eax
push 0x45f478
call fcn.004280cc
add esp, 0xc
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov dword [ebp - 0x40c], eax
cmp dword [0x462284], 0
je 0x4029ef
push 0xf01ff
push 0x45f4a4
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x204], eax
jmp 0x402a0c
push 0xf01ff
push 0x45f4b8
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
je 0x402a2b
push str._n_rThe_STBW_K32_service_already_exists.__Re_installation_will_not_be_performed._n_r
call fcn.00452380
add esp, 4
jmp 0x402ba8
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x408]
push eax
push str._nInstalling_SofTrack_Browser_Audit_Driver_with_Path:__n___s_n___s_n
call fcn.00452380
add esp, 0xc
cmp dword [ebp - 0x40c], 0
je 0x402b88
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x200]
push eax
push 1
push 3
push 1
push 0xf01ff
push str.SofTrack_Browser_Auditing_Kernel_Driver
mov eax, 0x45f58c
mov ecx, 0x45f598
xor edx, edx
cmp dword [0x462284], 0
setne dl
dec edx
sub ecx, eax
and edx, ecx
add edx, eax
push edx
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.ADVAPI32.dll_CreateServiceA]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x402b37
cmp dword [0x462284], 0
je 0x402afb
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
jne 0x402ae2
push str._n_rSTBW_K64_was_previously_installed
call fcn.00452380
add esp, 4
jmp 0x402af6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._n_rError_Installing_STBW_K64_to_Registry___d_
call fcn.00452380
add esp, 8
jmp 0x402b32
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
jne 0x402b1e
push str._n_rSTBW_K32_was_previously_installed
call fcn.00452380
add esp, 4
jmp 0x402b32
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._n_rError_Installing_STBW_K32_to_Registry___d_
call fcn.00452380
add esp, 8
jmp 0x402b69
lea eax, [ebp - 0x200]
push eax
mov eax, 0x45f64c
mov ecx, 0x45f650
xor edx, edx
cmp dword [0x462284], 0
setne dl
dec edx
sub ecx, eax
and edx, ecx
add edx, eax
push edx
push str._n_rInstalling_STBW_K_s_with_path___s_
call fcn.00452380
add esp, 0xc
mov eax, dword [ebp - 0x208]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x40c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x402ba8
push 0x100
push 0xb614a0
call fcn.00403677
add esp, 8
push eax
push 0x45f67c
call fcn.00452380
add esp, 8
pop edi
pop esi
pop ebx
leave
ret