Function at 0x140008074
Capabilities:
Delete registry key
Delete service
Query service status

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140035f98], eax
jg 0x140008108
lea rbx, [0x140035e90]
mov rdi, qword [rbx]
mov rcx, 0xffffffff80000000
mov rdx, rdi
call qword [sym.imp.api_ms_win_core_registry_l2_1_0.dll_RegDeleteKeyW]
nop dword [rax + rax]
test eax, eax
je 0x1400080e9
mov rcx, qword [rsp + 0x28]
lea r8, str.mrcommon_sdk_simulation_servicesperceptionsimulationexemain.cpp
mov r9d, 0x80004005
mov edx, 0x130
call fcn.140003f3c
mov rdx, rdi
lea rcx, str.Failed_to_delete_key_HKCR_ls_n
call fcn.14001c500
add rbx, 8
lea rax, [0x140035ea8]
cmp rbx, rax
jne 0x1400080a1
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp 0x14000a134
lea rcx, [0x140035f98]
call fcn.14001baf8
cmp dword [0x140035f98], 0xffffffff
jne 0x14000809a
lea rax, str.AppID9F7BC6EE_A81C_479D_B8A5_DAC928772875
mov qword [0x140035e90], rax
lea rcx, [0x140035f98]
lea rax, str.AppIDPerceptionSimulationService.exe
mov qword [0x140035e98], rax
lea rax, str.CLSIDAC7FBAB1_2C10_4A11_97B8_D563F29980DB
mov qword [0x140035ea0], rax
call fcn.14001ba90
jmp 0x14000809a
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r13
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1400354c8]
xor rax, rsp
mov qword [rbp - 8], rax
xor ebx, ebx
lea r13, fcn.14000a470
and qword [rbp - 0x38], rbx
xor eax, eax
and qword [rbp - 0x48], rbx
xorps xmm0, xmm0
xor edx, edx
mov qword [rbp - 0x40], r13
lea r12d, [rbx + 1]
mov qword [rbp - 0x50], r13
mov r8d, r12d
mov qword [rbp - 0x18], rax
xor ecx, ecx
mov dword [rbp - 0x10], eax
movups xmmword [rbp - 0x28], xmm0
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x38]
mov rdi, rax
cmp rax, rcx
je 0x14000a1dc
test rcx, rcx
je 0x14000a1d5
mov rax, qword [rbp - 0x40]
movabs r10, 0xefcdb65178560a70
mov rax, qword [rax]
lea rcx, [rbp - 0x40]
call qword [0x14002acf0]
test al, al
je 0x14000a400
mov rcx, rdi
mov qword [rbp - 0x38], rcx
mov edi, 0x80070000
test rcx, rcx
jne 0x14000a216
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
lea rcx, str.OpenSCManager_failed__0x_08X__n
or ebx, edi
test eax, eax
cmovle ebx, eax
mov edx, ebx
call fcn.14001c500
test ebx, ebx
js 0x14000a379
mov rcx, qword [rbp - 0x38]
lea r15, str.PerceptionSimulation
mov r8d, 0x10024
mov rdx, r15
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
nop dword [rax + rax]
mov rsi, rax
mov rax, qword [rbp - 0x48]
cmp rsi, rax
je 0x14000a26d
test rax, rax
je 0x14000a266
mov rax, qword [rbp - 0x50]
movabs r10, 0xefcdb65178560a70
mov rax, qword [rax]
lea rcx, [rbp - 0x50]
call qword [0x14002acf0]
test al, al
je 0x14000a423
mov rax, rsi
mov qword [rbp - 0x48], rax
test rax, rax
jne 0x14000a29a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
lea rcx, str.OpenService_failed__0x_08X__n
or ebx, edi
test eax, eax
cmovle ebx, eax
mov edx, ebx
call fcn.14001c500
mov rax, qword [rbp - 0x48]
test ebx, ebx
js 0x14000a37d
lea r8, [rbp - 0x28]
mov edx, r12d
mov rcx, rax
call qword [sym.imp.api_ms_win_service_winsvc_l1_1_0.dll_ControlService]
nop dword [rax + rax]
test eax, eax
je 0x14000a32e
mov rdx, r15
lea rcx, str.Stopping__ls
call fcn.14001c500
lea rcx, [0x14002cab8]
call fcn.14001c500
mov ecx, 0xfa
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x48]
lea rdx, [rbp - 0x28]
call qword [sym.imp.api_ms_win_service_winsvc_l1_1_0.dll_QueryServiceStatus]
nop dword [rax + rax]
test eax, eax
je 0x14000a306
cmp dword [rbp - 0x24], 3
je 0x14000a2cb
lea rcx, [0x14002bd00]
call fcn.14001c500
lea rcx, str._ls_is_stopped._n
mov rdx, r15
cmp dword [rbp - 0x24], r12d
je 0x14000a329
lea rcx, str._ls_failed_to_stop._n
call fcn.14001c500
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_DeleteService]
nop dword [rax + rax]
test eax, eax
jne 0x14000a36a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
lea rcx, str.DeleteService_failed__0x_08X__n
or ebx, edi
test eax, eax
cmovle ebx, eax
mov edx, ebx
call fcn.14001c500
test ebx, ebx
js 0x14000a379
mov rdx, r15
lea rcx, str._ls_is_removed._n
call fcn.14001c500
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], r13
test rax, rax
je 0x14000a39c
lea rcx, [rbp - 0x50]
call fcn.14000a470
test al, al
je 0x14000a442
and qword [rbp - 0x48], 0
cmp qword [rbp - 0x38], 0
mov qword [rbp - 0x40], r13
je 0x14000a3b4
lea rcx, [rbp - 0x40]
call fcn.14000a470
test al, al
je 0x14000a3e1
mov eax, ebx
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14001b420
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, r12d
or ecx, edi
test eax, eax
cmovle ecx, eax
call fcn.140006624
int3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, r12d
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
call fcn.140006624
int3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, r12d
or ecx, edi
test eax, eax
cmovle ecx, eax
call fcn.140006624
int3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
mov edx, r12d
or ecx, edi
test eax, eax
cmovle ecx, eax
call fcn.140006624
int3