Function at 0x1005c830
Capabilities:
Modify service
Query service status

Disassembly:
push 0x38
mov eax, 0x100af069
call fcn.100a56bc
mov ebx, ecx
and dword [ebp - 0x3c], 0
and dword [ebp - 0x40], 0
call fcn.1008e9f3
push eax
lea ecx, [ebp - 0x30]
call fcn.10091a7b
xor eax, eax
push 0xf003f
push eax
push eax
mov dword [ebp - 4], eax
call dword [sym.imp.advapi32.dll_OpenSCManagerW]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x1005c9e9
push 7
push dword [ebx + 0x10]
push eax
call dword [sym.imp.advapi32.dll_OpenServiceW]
mov esi, eax
mov dword [ebp - 0x3c], esi
test esi, esi
je 0x1005c9d6
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x2c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.advapi32.dll_QueryServiceStatus]
test eax, eax
je 0x1005c8ab
mov eax, dword [ebp - 0x28]
mov dword [ebx + 8], eax
jmp 0x1005c8d4
push 0x10013ec4
lea ecx, [ebp - 0x34]
call fcn.1006f4e2
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.10091a7b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
lea eax, [ebp - 0x40]
push eax
push 0
push 0
push esi
call dword [sym.imp.advapi32.dll_QueryServiceConfigW]
test eax, eax
jne 0x1005ca12
call dword [sym.imp.kernel32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1005ca12
mov esi, dword [ebp - 0x40]
push esi
push 0
call dword [sym.imp.kernel32.dll_LocalAlloc]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x34], eax
push ecx
push esi
push eax
push dword [ebp - 0x3c]
call dword [sym.imp.advapi32.dll_QueryServiceConfigW]
test eax, eax
je 0x1005c9a2
mov eax, dword [ebp - 0x34]
push 4
pop ecx
cmp dword [eax + 4], ecx
jne 0x1005c986
cmp dword [ebx + 8], ecx
je 0x1005c986
mov edi, dword [ebx + 0xc]
push 0x10013eec
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push 0xffffffffffffffff
push 3
push 0xffffffffffffffff
push dword [ebp - 0x3c]
call dword [sym.imp.advapi32.dll_ChangeServiceConfigW]
test eax, eax
je 0x1005c973
push 0x10013f20
mov byte [ebx + 4], 1
push 4
jmp 0x1005c98c
push 0x10013fa0
lea ecx, [ebp - 0x38]
call fcn.1006f4e2
mov byte [ebp - 4], 2
jmp 0x1005c9b3
push 0x10013fc8
push ecx
mov edi, dword [ebx + 0xc]
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
jmp 0x1005c9cb
push 0x10014024
lea ecx, [ebp - 0x38]
call fcn.1006f4e2
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x30]
call fcn.10091a7b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
push dword [ebp - 0x34]
call dword [sym.imp.kernel32.dll_LocalFree]
jmp 0x1005ca12
push 0x1001404c
lea ecx, [ebp - 0x38]
call fcn.1006f4e2
mov byte [ebp - 4], 4
jmp 0x1005c9fa
push 0x1000ff04
lea ecx, [ebp - 0x38]
call fcn.1006f4e2
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x30]
call fcn.10091a7b
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
push 0x10014064
lea ecx, [ebp - 0x34]
call fcn.1006f4e2
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x44]
mov ecx, ebx
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.1005ca56
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
call fcn.100a5666
ret