Function at 0x427be0
Capabilities:
Modify service
Query service configuration

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 0x38], ecx
call fcn.00401ff0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x427c41
push 0
movzx eax, byte [0x623349]
push eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x20]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x427c41
push str.CServiceModule::FixServiceStartType
push 0x5e9298
push 0x54
push 0x5e92a8
push 0
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ecx + 0x10]
call eax
add esp, 0x1c
xor ecx, ecx
jne 0x427be9
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x427cdf
call fcn.00401ff0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x427cd3
push 4
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x24]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x427cd3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenSCManager_failed___d__n
push 0x64
push 0x5e92d8
push 4
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0x10]
call eax
add esp, 0x1c
xor ecx, ecx
jne 0x427c79
mov eax, dword [ebp - 0x10]
jmp 0x427f80
push 3
push 0x62aef8
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x427d69
call fcn.00401ff0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x427d53
push 4
movzx eax, byte [0x623349]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x28]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x427d53
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenService_failed___d__n
push 0x71
push 0x5e9308
push 4
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ecx + 0x10]
call eax
add esp, 0x1c
xor ecx, ecx
jne 0x427cf9
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x10]
jmp 0x427f80
lea eax, [ebp - 0x14]
push eax
push 0
push 0
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
test eax, eax
jne 0x427e11
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x7a
jne 0x427da9
mov edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [ebp - 0xc], eax
jmp 0x427e11
call fcn.00401ff0
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x427e03
push 4
movzx ecx, byte [0x623349]
push ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x427e03
mov ecx, dword [ebp - 0x18]
push ecx
push 0x5e931c
push 0x86
push 0x5e933c
push 4
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2c]
push edx
mov eax, dword [ecx + 0x10]
call eax
add esp, 0x1c
xor ecx, ecx
jne 0x427da9
jmp 0x427f38
lea edx, [ebp - 0x14]
push edx
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
test eax, eax
jne 0x427e96
call fcn.00401ff0
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x427e88
push 4
movzx eax, byte [0x623349]
push eax
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x30]
mov eax, dword [edx + 0xc]
call eax
movzx ecx, al
test ecx, ecx
je 0x427e88
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceConfig_failed___d_
push 0x91
push 0x5e9370
push 4
movzx edx, byte [0x623349]
push edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ecx + 0x10]
call eax
add esp, 0x1c
xor ecx, ecx
jne 0x427e2b
jmp 0x427f38
mov edx, dword [ebp - 0xc]
cmp dword [edx + 4], 2
je 0x427f31
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 2
push 0xffffffffffffffff
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigA]
test eax, eax
je 0x427ece
mov dword [ebp - 0x10], 1
jmp 0x427f2f
call fcn.00401ff0
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x427f2b
push 4
movzx ecx, byte [0x623349]
push ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x34]
mov edx, dword [eax + 0xc]
call edx
movzx eax, al
test eax, eax
je 0x427f2b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ChangeServiceConfig_failed___d__n
push 0xa5
push 0x5e93a8
push 4
movzx ecx, byte [0x623349]
push ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x34]
push ecx
mov edx, dword [eax + 0x10]
call edx
add esp, 0x1c
xor eax, eax
jne 0x427ece
jmp 0x427f38
mov dword [ebp - 0x10], 1
cmp dword [ebp - 0xc], 0
je 0x427f4f
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xc], 0
cmp dword [ebp - 4], 0
je 0x427f66
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 4], 0
cmp dword [ebp - 0x1c], 0
je 0x427f7d
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x10]
mov esp, ebp
pop ebp
ret