Function at 0x437e51
Capabilities:
Query service configuration

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push 1
push str.mfevtp
push dword [ebp + 8]
mov edi, ecx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov ebx, eax
test ebx, ebx
jne 0x437e9d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [edi + 0x10]
mov esi, eax
test edx, edx
je 0x437e96
cmp dword [0x4c12e0], ebx
je 0x437e96
mov ecx, dword [edx]
push esi
push str.Failed_to_open_mfevtp_service_with_error__d
push edx
call dword [ecx + 0x18]
add esp, 0xc
mov eax, esi
jmp 0x438085
lea eax, [ebp + 8]
push eax
push 0
push 0
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
test eax, eax
jne 0x43805c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 0x7a
jne 0x438024
mov esi, dword [ebp + 8]
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
lea ecx, [ebp + 8]
mov dword [ebp - 4], eax
push ecx
push esi
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
test eax, eax
jne 0x437f47
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x437f14
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x437f14
cmp dword [0x4c12e0], eax
je 0x437f14
mov eax, dword [ecx]
push str.Failed_to_close_mfevtp_service_handle._Possible_resource_leak
push ecx
call dword [eax + 0x18]
pop ecx
pop ecx
mov ebx, dword [ebp - 4]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x437e96
cmp dword [0x4c12e0], 0
je 0x437e96
mov eax, dword [ecx]
push esi
push str.Failed_to_query_for_mfevtp_service_information_with_error__d
push ecx
call dword [eax + 0x14]
jmp 0x437e93
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x437f6e
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x437f6e
cmp dword [0x4c12e0], eax
je 0x437f6e
mov eax, dword [ecx]
push str.Failed_to_close_mfevtp_service_handle._Possible_resource_leak
push ecx
call dword [eax + 0x18]
pop ecx
pop ecx
mov ebx, dword [ebp - 4]
push dword [ebx + 0xc]
call fcn.00465f76
pop ecx
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [edi + 0x10]
test esi, esi
jne 0x437fab
test ecx, ecx
je 0x437fa3
cmp dword [0x4c12e0], esi
je 0x437fa3
mov eax, dword [ecx]
push str.Failed_to_make_copy_of_binary_path_for_mfevtp_service
push ecx
call dword [eax + 0x14]
pop ecx
pop ecx
push 8
pop eax
jmp 0x438085
test ecx, ecx
je 0x437fd0
cmp dword [0x4c12e0], 0
je 0x437fd0
cmp dword [0x4c3630], 0
je 0x437fd0
mov eax, dword [ecx]
push esi
push str.Binary_command_for_mfevtp_service_is:__s
push ecx
call dword [eax + 0x10]
add esp, 0xc
push esi
mov ecx, edi
call fcn.00437889
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x438000
cmp dword [0x4c12e0], 0
je 0x438000
cmp dword [0x4c3630], 0
je 0x438000
mov eax, dword [ecx]
push esi
push str.Binary_path_for_mfevtp_service_is:__s
push ecx
call dword [eax + 0x10]
add esp, 0xc
push 0
push esi
call fcn.0044261e
pop ecx
pop ecx
push esi
cmp eax, 1
jne 0x43801d
call fcn.0045f1d9
pop ecx
mov eax, 0x424
jmp 0x438085
call fcn.0045f1d9
jmp 0x438082
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x437f1e
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x437f1e
cmp dword [0x4c12e0], eax
je 0x437f1e
mov eax, dword [ecx]
push str.Failed_to_close_mfevtp_service_handle._Possible_resource_leak
push ecx
call dword [eax + 0x18]
pop ecx
pop ecx
jmp 0x437f1e
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x438083
mov ecx, dword [edi + 0x10]
test ecx, ecx
je 0x438083
cmp dword [0x4c12e0], eax
je 0x438083
mov eax, dword [ecx]
push str.Failed_to_close_mfevtp_service_handle._Possible_resource_leak
push ecx
call dword [eax + 0x18]
pop ecx
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 4