Function at 0x180006cd0
Capabilities:
Create service
Start service

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x270
mov rsi, rcx
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rbx, rax
test rax, rax
jne 0x180006d3e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9d, [rbx + 0x10]
xor ecx, ecx
lea r8, str._1_Error_OpenSCManager...
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
mov rbx, qword [rsp + 0x290]
add rsp, 0x270
pop rsi
ret
mov qword [rsp + 0x280], rbp
lea r8, str.detectme_14882280_easy_fingerprint
xor ebp, ebp
mov qword [rsp + 0x288], rdi
mov qword [rsp + 0x60], rbp
lea rdx, str.detectme_14882280_easy_fingerprint
mov qword [rsp + 0x58], rbp
mov r9d, 0xf01ff
mov qword [rsp + 0x50], rbp
mov rcx, rbx
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 1
call qword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov rdi, rax
test rax, rax
jne 0x180006e90
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
je 0x180006df6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9d, [rbp + 0x10]
xor ecx, ecx
lea r8, str._1_Error_CreateService__1_...
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x180006f6f
call fcn.180006f90
mov qword [rsp + 0x60], rbp
lea r8, str.detectme_14882280_easy_fingerprint
mov qword [rsp + 0x58], rbp
lea rdx, str.detectme_14882280_easy_fingerprint
mov qword [rsp + 0x50], rbp
mov r9d, 0xf01ff
mov qword [rsp + 0x48], rbp
mov rcx, rbx
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 1
call qword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov rdi, rax
test rax, rax
jne 0x180006e90
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r9d, [rdi + 0x10]
xor ecx, ecx
lea r8, str._1_Error_CreateService__2_...
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x180006f6f
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x180006ede
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r9d, 0x10
lea r8, str._1_Error_StartService...
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x180006f6f
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x180006f24
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r9d, 0x10
lea r8, str._1_Error_CloseServiceHandle__1_...
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x180006f6f
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test eax, eax
jne 0x180006f6a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [0x1800203e8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfW]
mov r9d, 0x10
lea r8, str._1_Error_CloseServiceHandle__2_...
lea rdx, [rsp + 0x70]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x180006f6f
mov eax, 1
mov rbp, qword [rsp + 0x280]
mov rdi, qword [rsp + 0x288]
mov rbx, qword [rsp + 0x290]
add rsp, 0x270
pop rsi
ret