Function at 0x6ca02b90
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
test byte [0x6ca06044], 8
jne 0x6ca02d50
mov dword [esp + 8], 0
mov dword [esp + 4], sym._ServiceControlHandler_16
mov dword [esp], str.lanmanworkstation
call sym._RegisterServiceCtrlHandlerExW_12
sub esp, 0xc
mov dword [0x6ca09150], eax
test eax, eax
je 0x6ca02d90
mov eax, 2
call sym._UpdateServiceStatus
mov dword [ebp - 0x10], 0xc000b
mov dword [ebp - 0xc], str.Workstation
mov dword [ebp - 8], 0x260025
mov dword [ebp - 4], str.MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
test byte [0x6ca06044], 2
jne 0x6ca02d10
mov dword [esp], 0x6ca09020
mov dword [0x6ca09020], 0x114
call sym._GetVersionExW_4
lea eax, [ebp - 0x14]
sub esp, 4
mov dword [esp + 8], eax
lea eax, [ebp - 0x10]
mov dword [esp + 4], 0x6ca09004
mov dword [esp], eax
call sym._LsaRegisterLogonProcess_12
sub esp, 0xc
test eax, eax
js 0x6ca02cf0
lea eax, [ebp - 8]
mov dword [esp + 8], 0x6ca09000
mov dword [esp + 4], eax
mov eax, dword [0x6ca09004]
mov dword [esp], eax
call sym._LsaLookupAuthenticationPackage_12
sub esp, 0xc
test eax, eax
js 0x6ca02e90
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._RpcThreadRoutine_4
mov dword [esp + 4], 0
mov dword [esp], 0
call sym._CreateThread_24
sub esp, 0x18
test eax, eax
je 0x6ca02e70
mov dword [esp], eax
call sym._CloseHandle_4
mov eax, dword [0x6ca09150]
sub esp, 4
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], 1
mov dword [esp], eax
call sym._SetServiceBits_16
sub esp, 0x10
mov eax, 4
call sym._UpdateServiceStatus
leave
ret 8
test byte [0x6ca06044], 2
jne 0x6ca02de0
mov eax, 1
call sym._UpdateServiceStatus
leave
ret 8
mov dword [esp + 0x14], str.ServiceInit___n
mov dword [esp + 0x10], 0x52
mov dword [esp + 0xc], str.ServiceInit
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6ca02c02
mov dword [esp + 0x14], 0x6ca0790c
mov dword [esp + 0x10], 0xcf
mov dword [esp + 0xc], str.ServiceMain
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 3
call sym._ros_dbg_log
jmp 0x6ca02ba3
test byte [0x6ca06044], 2
je 0x6ca02d07
call sym._GetLastError_0
mov dword [esp + 0x14], str.RegisterServiceCtrlHandlerExW___failed___Error__lu__n
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], 0xd6
mov dword [esp + 0xc], str.ServiceMain
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 1
call sym._ros_dbg_log
leave
ret 8
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.LsaRegisterLogonProcess___failed___Status_0x_08lx__n
mov dword [esp + 0x10], 0x5d
mov dword [esp + 0xc], str.ServiceInit
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 1
call sym._ros_dbg_log
mov eax, 1
test byte [0x6ca06044], 2
je 0x6ca02cfd
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.Service_stopped__dwError:__lu_n
mov dword [esp + 0x10], 0xdf
mov dword [esp + 0xc], str.ServiceMain
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6ca02cfd
test byte [0x6ca06044], 2
jne 0x6ca02ec0
call sym._GetLastError_0
test eax, eax
je 0x6ca02cd9
jmp 0x6ca02e1d
test byte [0x6ca06044], 2
je 0x6ca02cfd
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.LsaLookupAuthenticationPackage___failed___Status_0x_08lx__n
mov dword [esp + 0x10], 0x66
jmp 0x6ca02df4
mov dword [esp + 0x14], str.Cant_create_PortThread_n
mov dword [esp + 0x10], 0x73
mov dword [esp + 0xc], str.ServiceInit
mov dword [esp + 8], 0x6ca0778d
mov dword [esp + 4], 0x6ca06044
mov dword [esp], 1
call sym._ros_dbg_log
jmp 0x6ca02e79