Function at 0x43c610
Capabilities:
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443bd8
mov eax, dword fs:[0]
push eax
sub esp, 0xb0
mov eax, dword [0x45aeb8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.RunService___Enter
lea ecx, [ebp - 0x64]
call fcn.00401610
mov dword [ebp - 4], 0
lea eax, [ebp - 0x64]
push eax
call fcn.004013c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.00401650
lea ecx, [ebp - 0x38]
call fcn.0043ddb0
mov dword [ebp - 4], 1
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x43c6fb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
push ecx
push str.RunService___schSCManager__0__errcode_d
lea edx, [ebp - 0x38]
push edx
call fcn.0043e660
add esp, 0xc
lea eax, [ebp - 0x38]
test eax, eax
je 0x43c6c4
lea ecx, [ebp - 0x38]
add ecx, 4
mov dword [ebp - 0xb4], ecx
jmp 0x43c6ce
mov dword [ebp - 0xb4], 0
mov edx, dword [ebp - 0xb4]
push edx
call fcn.004013c0
add esp, 4
mov dword [ebp - 0x68], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0043db70
mov eax, dword [ebp - 0x68]
jmp 0x43c90f
push 0x10
push 0x450c68
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x43c789
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
push ecx
push str.RunService___schService__0__errcode_d
lea edx, [ebp - 0x38]
push edx
call fcn.0043e660
add esp, 0xc
lea eax, [ebp - 0x38]
test eax, eax
je 0x43c748
lea ecx, [ebp - 0x38]
add ecx, 4
mov dword [ebp - 0xb8], ecx
jmp 0x43c752
mov dword [ebp - 0xb8], 0
mov edx, dword [ebp - 0xb8]
push edx
call fcn.004013c0
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0043db70
mov eax, dword [ebp - 0x6c]
jmp 0x43c90f
push 0
push 0
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
je 0x43c80a
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push str.RunService____StartService_successfully__1
lea ecx, [ebp - 0x88]
call fcn.00401610
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
push ecx
call fcn.004013c0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.00401650
mov dword [ebp - 0x8c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0043db70
mov eax, dword [ebp - 0x8c]
jmp 0x43c90f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x420
jne 0x43c888
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push str.RunService____StartService_successfully__SERVICE_ALREADY_RUNNING
lea ecx, [ebp - 0xa8]
call fcn.00401610
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004013c0
add esp, 4
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa8]
call fcn.00401650
mov dword [ebp - 0xac], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0043db70
mov eax, dword [ebp - 0xac]
jmp 0x43c90f
mov edx, dword [ebp - 0x48]
push edx
push str.RunService___StartService_failed__errcode_d
lea eax, [ebp - 0x38]
push eax
call fcn.0043e660
add esp, 0xc
lea ecx, [ebp - 0x38]
test ecx, ecx
je 0x43c8b2
lea edx, [ebp - 0x38]
add edx, 4
mov dword [ebp - 0xbc], edx
jmp 0x43c8bc
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
push eax
call fcn.004013c0
add esp, 4
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0xb0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0043db70
mov eax, dword [ebp - 0xb0]
jmp 0x43c90f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00418496
mov esp, ebp
pop ebp
ret