Function at 0x14a12f2e
Capabilities:
Create service

Disassembly:
push ebp
lea ebp, [esp - 0xa0]
sub esp, 0x120
mov eax, dword [0x14a36198]
xor eax, ebp
mov dword [ebp + 0x9c], eax
push edi
mov edi, ecx
call fcn.14a0fcbb
test eax, eax
je 0x14a12f5d
xor eax, eax
inc eax
jmp 0x14a1315d
mov ecx, edi
call fcn.14a10454
test eax, eax
je 0x14a1315d
push esi
push 0xf003f
xor esi, esi
push esi
push esi
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov dword [ebp - 0x70], eax
cmp eax, esi
jne 0x14a12fbe
push str.Could_not_open_Service_Manager
lea ecx, [ebp - 0x6c]
call fcn.14a12daf
push 0xd80a
lea ecx, [ebp - 0x6c]
call fcn.14a12498
push esi
add edi, 0x40
push edi
push dword [ebp - 0x6c]
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.14a0ab78
xor eax, eax
jmp 0x14a1315c
lea eax, [edi + 0x40]
push ebx
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x78], eax
call fcn.14a12daf
mov ebx, 0x14a366ac
push ebx
lea ecx, [ebp - 0x6c]
call fcn.14a0bddd
push dword [edi + 0x16c]
lea eax, [ebp - 0x6c]
push str.__SystemRoot___system32_svchost.exe__k__s
push eax
call fcn.14a12501
add esp, 0xc
push esi
push esi
push str.RPCSS
push esi
push esi
push dword [ebp - 0x6c]
push 1
push 3
push 0x20
push 0xf01ff
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_CreateServiceA]
cmp eax, esi
jne 0x14a1308d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x70]
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push str.Could_not_create_service
lea ecx, [ebp - 0x80]
call fcn.14a12daf
push 0xd80b
lea ecx, [ebp - 0x80]
call fcn.14a12498
push ebx
lea ecx, [ebp - 0x70]
call fcn.14a0bddd
push edi
push dword [ebp - 0x80]
lea eax, [ebp - 0x70]
push str._s___lu_
push eax
call fcn.14a12501
mov edi, dword [ebp - 0x70]
add esp, 0x10
push esi
push dword [ebp - 0x78]
push edi
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [edi - 0x10]
call fcn.14a0ab78
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.14a0ab78
jmp 0x14a13143
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edi, dword [edi + 0x174]
push esi
push esi
push 0x2001f
push esi
push esi
push edi
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
call fcn.14a0ac07
test eax, eax
jne 0x14a1313b
push ebx
lea ecx, [ebp - 0x70]
call fcn.14a0bddd
mov edi, 0x104
push edi
lea eax, [ebp - 0x68]
push eax
push dword [0x14a36634]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp eax, esi
je 0x14a13130
cmp eax, edi
je 0x14a13130
push 2
lea eax, [ebp - 0x68]
push eax
push 0x14a28bb4
lea ecx, [ebp - 0x7c]
call fcn.14a0acea
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
test eax, eax
jne 0x14a13136
call fcn.14a0ab78
lea ecx, [ebp - 0x7c]
call fcn.14a0abec
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.14a0ab78
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.14a0ab78
xor eax, eax
inc eax
jmp 0x14a1315b
mov ecx, dword [ebp - 0x70]
add ecx, 0xfffffff0
call fcn.14a0ab78
lea ecx, [ebp - 0x7c]
call fcn.14a0abec
mov ecx, dword [ebp - 0x6c]
add ecx, 0xfffffff0
call fcn.14a0ab78
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.14a0ab78
xor eax, eax
pop ebx
pop esi
mov ecx, dword [ebp + 0x9c]
xor ecx, ebp
pop edi
call fcn.14a22c16
add ebp, 0xa0
leave
ret