Function at 0x180002092
Capabilities:
Modify service

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
movaps xmmword [rsp + 0x80], xmm6
mov qword [rsp + 0x78], rcx
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov qword [rsp + 0x60], rax
mov eax, 0x206baad1
xorps xmm6, xmm6
mov r12d, 0xf8ec4cbf
mov r14d, 0xd8f053e1
mov r15d, 0xa1bea979
cmp eax, 0x6efe856
jle 0x18000212b
cmp eax, 0x3dd1a8da
jg 0x18000217c
cmp eax, 0x2bd232ef
jg 0x180002209
cmp eax, 0x206baad0
jg 0x180002309
cmp eax, 0x10f661c4
je 0x180002481
cmp eax, 0x18535a5f
jne 0x18000262c
mov rax, qword [rsp + 0x60]
mov eax, 0xb9086f1b
jmp 0x1800020e1
cmp eax, 0xd497c82a
jg 0x1800021bf
cmp eax, 0xb71a6f0d
jg 0x180002248
cmp eax, 0xaceb0136
jg 0x180002329
cmp eax, 0x8f78d7b2
je 0x18000248b
cmp eax, 0xa1bea979
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb254d0fb
mov ecx, 0x66adc555
jmp 0x1800025c0
cmp eax, 0x6fc6ec58
jg 0x180002292
cmp eax, 0x66adc554
jg 0x180002349
cmp eax, 0x3dd1a8db
je 0x180002495
cmp eax, 0x52d2a9b0
jne 0x1800020e1
cmp byte [rsp + 0x5e], 0
mov eax, 0x5516f9
mov ecx, 0xbc6a8ac3
cmovne eax, ecx
jmp 0x1800020e1
cmp eax, 0xf5ab9321
jg 0x1800022c1
cmp eax, 0xdc798c11
jg 0x180002387
cmp eax, 0xd497c82b
je 0x1800024b3
cmp eax, 0xd8f053e1
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f78d7b2
mov ecx, 0xbc9e60e4
jmp 0x1800025c0
cmp eax, 0x340a9078
jg 0x1800023a7
cmp eax, 0x2bd232f0
je 0x1800024c2
cmp eax, 0x3020f273
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2427faf9
mov ecx, 0x6efe857
jmp 0x1800025c0
cmp eax, 0xbc6a8ac2
jg 0x1800023eb
cmp eax, 0xb71a6f0e
je 0x1800024cf
cmp eax, 0xb9086f1b
jne 0x1800020e1
cmp qword [rsp + 0x60], 0
sete byte [rsp + 0x5e]
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x18535a5f
mov ecx, 0xe33314df
jmp 0x1800025c0
cmp eax, 0x749dfb04
jg 0x18000240f
cmp eax, 0x6fc6ec59
je 0x1800024d9
cmp eax, 0x707413a4
jne 0x1800020e1
mov al, byte [rsp + 0x5d]
mov eax, 0xf8ec4cbf
jmp 0x1800020e1
cmp eax, 0x5516f8
jg 0x18000244d
cmp eax, 0xf5ab9322
je 0x1800024e5
cmp eax, 0xf8ec4cbf
jne 0x1800020e1
movzx eax, byte [rsp + 0x5d]
mov dword [rsp + 0x70], eax
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x707413a4
mov ecx, 0x10f661c4
jmp 0x1800025c0
cmp eax, 0x206baad1
je 0x180002545
cmp eax, 0x2427faf9
jne 0x1800020e1
mov eax, 0x3020f273
jmp 0x1800020e1
cmp eax, 0xaceb0137
je 0x180002560
cmp eax, 0xb254d0fb
jne 0x1800020e1
mov eax, 0xa1bea979
jmp 0x1800020e1
cmp eax, 0x66adc555
je 0x18000257b
cmp eax, 0x6dea2066
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x707413a4
cmove eax, r12d
cmp dword [0x18001ac40], 0xa
cmovl eax, r12d
jmp 0x1800020e1
cmp eax, 0xdc798c12
je 0x180002592
cmp eax, 0xe33314df
jne 0x1800020e1
mov eax, 0x52d2a9b0
jmp 0x1800020e1
cmp eax, 0x340a9079
je 0x18000259c
cmp eax, 0x3a25c75e
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2427faf9
mov ecx, 0x3020f273
cmove eax, ecx
cmp dword [0x18001ac40], 0xa
cmovl eax, ecx
mov esi, r13d
jmp 0x1800020e1
cmp eax, 0xbc6a8ac3
je 0x1800025d2
cmp eax, 0xbc9e60e4
jne 0x1800020e1
mov eax, 0x2bd232f0
mov ebp, dword [rsp + 0x70]
jmp 0x1800020e1
cmp eax, 0x749dfb05
je 0x1800025df
cmp eax, 0x7a1d3d69
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb254d0fb
cmove eax, r15d
cmp dword [0x18001ac40], 0xa
cmovl eax, r15d
jmp 0x1800020e1
cmp eax, 0x5516f9
je 0x180002607
cmp eax, 0x6df67a2
jne 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc798c12
mov ecx, 0x6fc6ec59
jmp 0x1800025c0
mov eax, 0x749dfb05
jmp 0x1800020e1
mov eax, 0xd8f053e1
jmp 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc798c12
mov ecx, 0x6df67a2
jmp 0x1800025c0
mov rax, qword [rsp + 0x68]
mov eax, 0x340a9079
jmp 0x1800020e1
mov eax, 0x3a25c75e
mov r13d, ebp
jmp 0x1800020e1
mov eax, 0x7a1d3d69
jmp 0x1800020e1
mov eax, 0x2bd232f0
xor ebp, ebp
jmp 0x1800020e1
mov rcx, qword [rsp + 0x68]
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov qword [rsp + 0x50], 0
mov edx, 0xffffffff
mov r8d, 2
mov r9d, 0xffffffff
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfigA]
mov edi, eax
mov rcx, qword [rsp + 0x68]
mov rbx, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call rbx
mov rcx, qword [rsp + 0x60]
call rbx
test edi, edi
setne byte [rsp + 0x5d]
mov al, byte [rsp + 0x5d]
mov eax, 0x6dea2066
jmp 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x18535a5f
mov ecx, 0xb9086f1b
jmp 0x1800025c0
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd497c82b
mov ecx, 0x340a9079
jmp 0x1800025c0
cmp byte [rsp + 0x5f], 0
mov eax, 0xf5ab9322
mov ecx, 0x3dd1a8db
cmovne eax, ecx
jmp 0x1800020e1
mov eax, 0x6df67a2
jmp 0x1800020e1
cmp qword [rsp + 0x68], 0
sete byte [rsp + 0x5f]
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd497c82b
mov ecx, 0xb71a6f0e
cmove eax, ecx
cmp dword [0x18001ac40], 0xa
cmovl eax, ecx
jmp 0x1800020e1
mov eax, 0x3a25c75e
xor r13d, r13d
jmp 0x1800020e1
mov eax, dword [0x18001ac44]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f78d7b2
cmove eax, r14d
cmp dword [0x18001ac40], 0xa
cmovl eax, r14d
jmp 0x1800020e1
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x78]
mov r8d, 2
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov qword [rsp + 0x68], rax
mov eax, 0xaceb0137
jmp 0x1800020e1
cmp eax, 0x6efe857
jne 0x1800020e1
mov dword [rsp + 0x74], esi
mov eax, dword [rsp + 0x74]
movaps xmm6, xmmword [rsp + 0x80]
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret