Function at 0x1400086f3
Capabilities:
Enumerate services

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rax, reloc.WS2_32.dll_select
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140008702
sub rsp, 0x28
call fcn.1400611d0
mov rdx, rsp
mov rcx, 0xc6
call fcn.140062150
mov rcx, 0x86
call fcn.14004f899
mov rcx, 0x89
call fcn.14004f899
movabs rdx, 0x1400ec20e
lea rcx, [rsp + 0x68]
call fcn.140061090
mov rcx, 0x89
call fcn.14004f899
movabs rdx, 0x1400ec20e
lea rcx, [rsp + 0x70]
call fcn.140061090
mov rcx, 0x89
call fcn.14004f899
movabs rdx, 0x1400ec20e
lea rcx, [rsp + 0x78]
call fcn.140061090
mov rcx, 0x8a
call fcn.14004f899
sub rsp, 0x18
mov rdx, 1
mov rcx, rdx
call fcn.14004f9c1
lea rax, [rsp + 0xa8]
push rax
xor r9, r9
mov r8, 0x18
mov rcx, 1
sub rsp, 0x20
call fcn.14005fd4c
add rsp, 0x40
mov qword [rsp + 0x90], rax
mov rcx, 0x8b
call fcn.14004f899
movabs rax, 0x80000004
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
call sub.ADVAPI32.dll_OpenSCManagerW
mov rcx, 0x8b
call fcn.14004fa7b
mov qword [rsp + 0x28], rax
mov rcx, 0x8c
call fcn.14004f899
cmp qword [rsp + 0x28], 0
je 0x1400097ac
mov rcx, 0x8d
call fcn.14004f899
mov dword [rsp + 0x38], 0
mov rcx, 0x8e
call fcn.14004f899
mov dword [rsp + 0x48], 0
mov rcx, 0x8f
call fcn.14004f899
mov dword [rsp + 0x50], 0
mov rcx, 0x90
call fcn.14004f899
lea rax, [rsp + 0x38]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
push 0
push 0
push 3
movsxd rax, dword [rsp + 0x100]
mov rax, rax
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.dll_EnumServicesStatusW
add rsp, 0x40
mov rcx, 0x90
call fcn.14004fa7b
mov qword [rsp + 0x58], rax
mov rcx, __WSAFDIsSet
call fcn.14004f899
movsxd r15, dword [rsp + 0x48]
and r15, r15
jle 0x14000977e
mov rcx, __WSAFDIsSet
call fcn.14004f899
movsxd rax, dword [rsp + 0x48]
push rax
pop rax
mov dword [rsp + 0x40], eax
mov rcx, __WSAFDIsSet
call fcn.14004f899
movsxd rax, dword [rsp + 0x40]
inc rax
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004f9c1
call fcn.14005ff08
mov rcx, __WSAFDIsSet
call fcn.14004f899
push 0
movsxd rax, dword [rsp + 0x48]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0xa0]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
mov rbp, qword [rsp + 0xa0]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
movabs r10, 0x140060620
mov r11, 0
call fcn.14004fa99
call fcn.140060c70
mov rcx, __WSAFDIsSet
call fcn.14004f899
mov dword [rsp + 0x38], 0
mov rcx, __WSAFDIsSet
call fcn.14004f899
mov dword [rsp + 0x48], 0
mov rcx, reloc.WS2_32.dll___WSAFDIsSet
call fcn.14004f899
mov dword [rsp + 0x50], 0
mov rcx, 0x98
call fcn.14004f899
lea rax, [rsp + 0x38]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
movsxd rax, dword [rsp + 0x58]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0xb0]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
lea rax, [rbp]
mov rax, rax
push rax
push 3
movsxd rax, dword [rsp + 0x100]
mov rax, rax
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.dll_EnumServicesStatusW
add rsp, 0x40
mov rcx, 0x98
call fcn.14004fa7b
mov qword [rsp + 0x58], rax
mov rcx, 0x99
call fcn.14004f899
cmp qword [rsp + 0x58], 0
je 0x140009772
mov rcx, 0x9a
call fcn.14004f899
movsxd r15, dword [rsp + 0x50]
and r15, r15
jle 0x140009766
mov rcx, 0x9b
call fcn.14004f899
mov dword [rsp + 0x60], 0
mov rcx, 0x9c
call fcn.14004f899
mov rax, 0
mov rdx, qword [rsp + 0x90]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
mov rbp, qword [rsp + 0x90]
lea rax, [rbp]
mov qword [rsp + 0x30], rax
mov rcx, 0x9d
call fcn.14004f899
mov rcx, 0x9e
call fcn.14004f899
movsxd r15, dword [rsp + 0x60]
inc r15
mov rax, r15
push rax
pop rax
mov dword [rsp + 0x60], eax
mov rcx, 0x9f
call fcn.14004f899
mov rbp, qword [rsp + 0x30]
call fcn.14004f9b1
cmp qword [rbp], 0
je 0x140008b39
mov rbp, qword [rsp + 0x30]
call fcn.14004f9b1
cmp qword [rbp + 8], 0
je 0x140008b39
mov rax, 1
jmp 0x140008b3c
xor rax, rax
and rax, rax
je 0x140009703
mov rcx, 0xa0
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x68]
call fcn.14004f9b1
push qword [rbp]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140060920
mov r11, 0
call fcn.14004fa99
call fcn.140060d60
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.140061360
mov rcx, 0xa1
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x68]
call fcn.14004f9b1
push qword [rbp + 8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140060920
mov r11, 0
call fcn.14004fa99
call fcn.140060d60
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061360
mov rcx, 0xa2
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x88]
call fcn.14004f9b1
push qword [rbp]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140060920
mov r11, 0
call fcn.14004fa99
call fcn.140060d60
add rsp, 0x28
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140026017
add rsp, 0x30
mov rcx, 0xa2
call fcn.14004fa7b
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x80]
pop rdx
call fcn.140061360
mov rcx, 0xa3
call fcn.14004f899
push qword [rsp + 0x68]
movabs rcx, 0x1400ec20e
pop rdx
call fcn.140061440
or rax, rax
jne 0x140008e4c
push qword [rsp + 0x70]
movabs rcx, 0x1400ec20e
pop rdx
call fcn.140061440
or rax, rax
jne 0x140008e4c
mov rax, 1
jmp 0x140008e4f
xor rax, rax
and rax, rax
je 0x140008e76
push qword [rsp + 0x78]
movabs rcx, 0x1400ec20e
pop rdx
call fcn.140061440
or rax, rax
jne 0x140008e76
mov rax, 1
jmp 0x140008e79
xor rax, rax
and rax, rax
je 0x140008f35
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x88]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x28
call fcn.1400615c0
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
movabs rax, str.Shell_Hardware_Detection
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061540
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061540
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061440
or rax, rax
jne 0x140008f35
mov rax, 1
jmp 0x140008f38
xor rax, rax
and rax, rax
je 0x1400096f7
mov rcx, 0xa4
call fcn.14004f899
movabs rax, 0x1400ec2d8
push rax
push qword [rsp + 0x78]
pop rcx
pop rdx
call fcn.140051af0
mov r15, rax
cmp r15, 2
jl 0x1400096eb
mov rcx, 0xa5
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400ec2d8
push rax
push 1
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x1400516f0
mov r11, 0
call fcn.14004fa99
call fcn.140051840
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140061360
mov rcx, 0xa6
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400ec2d8
push rax
push 2
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x1400516f0
mov r11, 0
call fcn.14004fa99
call fcn.140051840
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x90]
pop rdx
call fcn.140061360
mov rcx, 0xa7
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0xa0]
pop rcx
sub rsp, 0x20
call fcn.140051c50
add rsp, 0x28
mov r15, rax
sub rsp, 8
push qword [rsp + 0xb0]
pop rcx
sub rsp, 0x20
call fcn.140051c50
add rsp, 0x28
sub r15, rax
mov rax, r15
push rax
push qword [rsp + 0xb0]
pop rcx
sub rsp, 0x20
call fcn.140051c50
add rsp, 0x20
mov r15, rax
inc r15
mov rax, r15
push rax
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c70
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x140051710
mov r11, 0
call fcn.14004fa99
call fcn.140051720
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061360
mov rcx, 0xa8
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push 1
push 1
push qword [rsp + 0xc0]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c70
add rsp, 0x20
push rax
call fcn.1400612c0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140061360
mov rcx, 0xab
call fcn.14004f899
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0xa0]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x28
call fcn.1400615c0
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400edcfe
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061540
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061540
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061440
or rax, rax
jne 0x140009421
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0xa0]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x28
call fcn.1400615c0
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400ecd7a
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051bc0
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061540
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061540
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061440
or rax, rax
jne 0x140009421
mov rax, 1
jmp 0x140009424
xor rax, rax
and rax, rax
je 0x1400094b7
push qword [rsp + 0x80]
pop rcx
call fcn.140051d30
mov r15, rax
movabs rax, 0x1400ec3f6
push rax
pop rcx
call fcn.140051d30
cmp r15, rax
jl 0x140009482
push qword [rsp + 0x80]
pop rcx
call fcn.140051d30
mov r15, rax
movabs rax, 0x1400ec49a
push rax
pop rcx
call fcn.140051d30
cmp r15, rax
jg 0x140009482
mov rax, 1
jmp 0x140009485
xor rax, rax
and rax, rax
je 0x1400094a6
push qword [rsp + 0x70]
pop rcx
call fcn.140051c50
mov r15, rax
cmp r15, 4
jle 0x1400094a6
mov rax, 1
jmp 0x1400094a9
xor rax, rax
and rax, rax
je 0x1400094b7
mov rax, 1
jmp 0x1400094ba
xor rax, rax
and rax, rax
je 0x1400096df
mov rcx, 0xac
call fcn.14004f899
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400614d0
add rsp, 0x28
push rcx
sub rsp, 0x20
call fcn.140061240
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x90]
pop rcx
sub rsp, 0x20
call fcn.140051c50
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push 2
push qword [rsp + 0x98]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c70
add rsp, 0x20
pop rax
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061360
mov rcx, 0xad
call fcn.14004f899
mov rcx, qword [rsp + 0x68]
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400614d0
add rsp, 0x28
movsxd r15, dword [0x1401059a8]
mov rax, r15
mov rdx, qword [0x1400ec108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
mov rbp, qword [0x1400ec108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f9b1
lea rcx, [rbp]
pop rdx
call fcn.140061360
mov rcx, 0xae
call fcn.14004f899
mov rcx, qword [rsp + 0x70]
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400614d0
add rsp, 0x28
movsxd r15, dword [0x1401059a8]
mov rax, r15
mov rdx, qword [0x1400ec108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
mov rbp, qword [0x1400ec108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f9b1
lea rcx, [rbp + 8]
pop rdx
call fcn.140061360
mov rcx, 0xaf
call fcn.14004f899
mov rcx, qword [rsp + 0x78]
push rcx
sub rsp, 0x28
call fcn.140061240
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400614d0
add rsp, 0x28
movsxd r15, dword [0x1401059a8]
mov rax, r15
mov rdx, qword [0x1400ec108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f9d4
mov rbp, qword [0x1400ec108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f9b1
lea rcx, [rbp + 0x10]
pop rdx
call fcn.140061360
mov rcx, 0xb0
call fcn.14004f899
movsxd r15, dword [0x1401059a8]
inc r15
mov rax, r15
push rax
pop rax
mov dword [0x1401059a8], eax
mov rcx, 0xb1
call fcn.14004f899
movsxd rax, dword [0x1401059a8]
inc rax
movabs rdx, 0x1400ec108
mov rcx, rax
call fcn.14004f9c1
call fcn.14005ff08
mov rcx, 0xb4
call fcn.14004f899
mov rcx, 0xb5
call fcn.14004f899
mov rcx, 0xb6
call fcn.14004f899
mov rcx, 0xb7
call fcn.14004f899
mov rcx, 0xb8
call fcn.14004f899
mov r15, qword [rsp + 0x30]
add r15, 0x30
mov qword [rsp + 0x30], r15
mov rcx, 0xb9
call fcn.14004f899
movsxd r15, dword [rsp + 0x60]
cmp r15d, dword [rsp + 0x50]
jge 0x140009751
movsxd r15, dword [rsp + 0x60]
cmp r15, 0x1f4
jg 0x140009751
jmp 0x14000975a
mov rax, 1
jmp 0x14000975d
xor rax, rax
and rax, rax
je 0x140008ad9
mov rcx, 0xba
call fcn.14004f899
mov rcx, 0xbb
call fcn.14004f899
mov rcx, 0xbc
call fcn.14004f899
mov rcx, 0xbd
call fcn.14004f899
push qword [rsp + 0x28]
pop rcx
call sub.ADVAPI32.dll_CloseServiceHandle
mov rcx, 0xbd
call fcn.14004fa7b
mov rcx, 0xbe
call fcn.14004f899
mov rcx, 0xbf
call fcn.14004f899
xor rax, rax
push rax
push rax
sub rsp, 0x20
call fcn.1400623c0
add rsp, 0x20
pop rax
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.1400614a0
add rsp, 0x28
mov rcx, qword [rsp + 0x88]
sub rsp, 0x28
call fcn.1400614a0
add rsp, 0x28
mov rcx, qword [rsp + 0x90]
sub rsp, 0x28
call fcn.1400614a0
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.1400614a0
add rsp, 0x28
mov rcx, qword [rsp + 0x78]
sub rsp, 0x28
call fcn.1400614a0
add rsp, 0x28
mov rcx, qword [rsp + 0x98]
sub rsp, 0x28
call fcn.140060030
add rsp, 0x28
pop rax
add rsp, 0xb8
pop r15
pop rbp
ret