Function at 0x10048a80
Capabilities:
Create service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
push esi
push edi
mov byte [ebp - 1], 0
mov ecx, 0x35
mov esi, str.D:_A__CCDCLCSWRPWPDTLOCRSDRCWDWO___SY__A__CCLCSWRPLOCRRC___BA__A__CCLCSWLOCRRC___IU__A__CCLCSWLOCRRC___SU_
lea edi, [ebp - 0x120]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
push 1
lea ecx, [ebp - 0x120]
push ecx
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW
test eax, eax
jne 0x10048ad3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
jmp 0x10048c8a
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x1c], edx
call fcn.1003ccd0
test eax, eax
je 0x10048ae8
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x48]
call fcn.1004c100
lea ecx, [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
call fcn.10040590
test eax, eax
jne 0x10048b18
mov dword [ebp - 0x30], 0
lea ecx, [ebp - 0x48]
call fcn.1004c150
mov eax, dword [ebp - 0x30]
jmp 0x10048c8a
call fcn.100402c0
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x10048c78
push 0xf01ff
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x10048b92
push 0
mov edx, dword [ebp + 0x14]
push edx
lea ecx, [ebp - 0x48]
call fcn.1004c610
push eax
mov eax, dword [ebp + 8]
push eax
call fcn.100471a0
add esp, 0x10
mov byte [ebp - 1], al
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10048c0c
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x48]
call fcn.1004c610
push eax
push 1
push 1
push 1
push 0x40000
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x10048c0c
mov byte [ebp - 1], 1
mov eax, dword [ebp - 0x18]
push eax
push 4
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.ADVAPI32.dll_SetServiceObjectSecurity]
test eax, eax
jne 0x10048c02
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
lea ecx, [ebp - 0x48]
call fcn.1004c150
mov eax, dword [ebp - 0x24]
jmp 0x10048c8a
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_SetLastError]
movzx eax, byte [ebp - 1]
test eax, eax
je 0x10048c78
mov ecx, dword [ebp + 8]
push ecx
call fcn.10048e70
test eax, eax
je 0x10048c47
mov dword [ebp - 0x14], 1
jmp 0x10048c4e
mov dword [ebp - 0x14], 0
mov dl, byte [ebp - 0x14]
mov byte [ebp - 1], dl
movzx eax, byte [ebp - 1]
test eax, eax
jne 0x10048c78
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.100493d0
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_SetLastError]
movzx eax, byte [ebp - 1]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x48]
call fcn.1004c150
mov eax, dword [ebp - 0x28]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10