Function at 0x140005910
Capabilities:
Delete service
Stop service

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1400bb060]
xor rax, rsp
mov qword [rbp + 0xa8], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x58], r14d
lea r8, [rsp + 0x58]
call fcn.140006c40
cmp qword [0x1400bbcf8], r14
je 0x140006915
cmp qword [0x1400bbd18], r14
je 0x140006915
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
cmp qword [0x1400bbcb8], r14
jne 0x140005993
cmp eax, 2
jne 0x140006915
movabs r13, 0x7ffffffffffffffe
lea r15, [0x1400bbd28]
mov rcx, qword [0x1400bbc98]
test rcx, rcx
jne 0x1400059d9
lea r12, [0x1400bbce8]
mov rdx, r12
lea rcx, [rbp - 0x80]
call fcn.1400021c0
mov rbx, rax
mov esi, 1
cmp r15, rax
je 0x140005b52
jmp 0x140005acd
mov rax, r13
sub rax, rcx
cmp rax, 1
jb 0x140006952
lea r9, [0x1400bbc88]
cmp qword [0x1400bbca0], 8
cmovae r9, qword [0x1400bbc88]
mov qword [rsp + 0x30], 1
lea rax, [0x1400a885c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x60]
call fcn.1400027e0
nop
mov dword [rsp + 0x50], 0x102
mov rdi, qword [0x1400bbcf8]
lea r12, [0x1400bbce8]
mov r9, r12
cmp qword [0x1400bbd00], 8
cmovae r9, qword [0x1400bbce8]
mov rsi, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140005a94
lea rax, [rsi + rdi]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x60]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064fd0
lea rax, [rsi + rdi]
mov word [rbx + rax*2], r14w
lea rax, [rbp - 0x60]
jmp 0x140005aa5
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.140002bc0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rbx, [rbp - 0x40]
mov esi, 0x306
mov rdx, qword [0x1400bbd40]
cmp rdx, 8
jb 0x140005b13
mov rcx, qword [0x1400bbd28]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140005b0e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006958
mov rcx, r8
call fcn.140062c6c
mov qword [0x1400bbd38], r14
mov qword [0x1400bbd40], 7
mov word [0x1400bbd28], r14w
movups xmm0, xmmword [rbx]
movups xmmword [0x1400bbd28], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x1400bbd38], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
test sil, 4
je 0x140005b9c
and esi, 0xfffffffb
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140005b9c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006958
call fcn.140062c6c
nop
test sil, 2
je 0x140005bf6
and esi, 0xfffffffd
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140005be5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005be0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000695e
call fcn.140062c6c
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r14w
test sil, 1
je 0x140005c3f
and esi, 0xfffffffe
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140005c3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006964
call fcn.140062c6c
mov r8d, 0x1a
lea rdx, [0x1400a8860]
lea rcx, [0x1400bbcc8]
call fcn.140002350
mov qword [rbp], r14
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], 7
mov word [rbp], r14w
mov r8d, 0x11
lea rdx, str.PROD_REG_PATH
lea rcx, [rbp]
call fcn.140002350
nop
lea r9, [rbp]
mov rbx, qword [rbp]
mov r14, qword [rbp + 0x18]
cmp r14, 8
cmovae r9, rbx
lea rcx, [0x1400bbcc8]
cmp qword [0x1400bbce0], 8
cmovae rcx, qword [0x1400bbcc8]
mov rdi, qword [rbp + 0x10]
mov qword [rsp + 0x20], rdi
mov rdx, qword [0x1400bbcd8]
call fcn.1400115f0
cmp rax, 0xffffffffffffffff
je 0x140005cf9
mov rcx, qword [0x1400bbd38]
cmp qword [0x1400bbd40], 8
cmovae r15, qword [0x1400bbd28]
mov qword [rsp + 0x20], rcx
mov r9, r15
mov r8, rdi
mov rdx, rax
call fcn.140034ae0
xor dil, dil
jmp 0x140005cfc
mov dil, 1
cmp r14, 8
jb 0x140005d37
lea rdx, [r14*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140005d2f
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000694c
mov rcx, rbx
call fcn.140062c6c
lea r14, [0x1400a8658]
test dil, dil
je 0x140005d55
xor r8d, r8d
mov rdx, r14
lea rcx, [0x1400bbcc8]
call fcn.140002350
lea rdx, [0x1400bbcc8]
lea rcx, [rbp + 0x60]
call fcn.1400021c0
mov rdx, rax
call fcn.140004990
test al, al
jne 0x140005edf
xor edi, edi
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
lea r8d, [rdi + 0x36]
lea rdx, str.Product_registry_entry_is_missing._Trying_to_create_it
lea rcx, [rbp - 0x80]
call fcn.140004570
lea rcx, [rbp - 0x80]
call fcn.1400033a0
lea rdx, [0x1400bbcc8]
lea rcx, [rbp + 0x60]
call fcn.1400021c0
mov rbx, rax
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x140005dc4
mov rdx, qword [rax]
mov qword [rsp + 0x40], rdi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x140005e86
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x140005e3e
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140005e39
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006970
mov rcx, r8
call fcn.140062c6c
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov r8d, 0x27
lea rdx, str.Unable_to_create_product_registry_entry
lea rcx, [rbp - 0x80]
call fcn.140004570
lea rcx, [rbp - 0x80]
call fcn.1400035c0
mov eax, 0xfffffffe
jmp 0x14000691c
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x140005ed0
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140005ecb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140006970
mov rcx, r8
call fcn.140062c6c
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
call fcn.1400069c0
mov rcx, qword [0x1400bbcf8]
mov rax, r13
sub rax, rcx
cmp rax, 4
jb 0x14000696a
cmp qword [0x1400bbd00], 8
cmovae r12, qword [0x1400bbce8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], 4
lea r9, str._pn:
lea rcx, [rbp]
call fcn.1400027e0
bts esi, 0xa
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x140005f7f
lea rdi, [rcx + 6]
mov qword [rbp + 0x10], rdi
lea rbx, [rbp]
cmp rdx, 8
cmovae rbx, qword [rbp]
lea rcx, [rbx + rcx*2]
mov r8d, 0xc
lea rdx, str.__lpn:
call fcn.140064fd0
xor r12d, r12d
mov word [rbx + rdi*2], r12w
lea rax, [rbp]
jmp 0x140005fa0
mov qword [rsp + 0x20], 6
lea r9, str.__lpn:
mov edx, 6
lea rcx, [rbp]
call fcn.140002bc0
xor r12d, r12d
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xb
mov rdi, qword [0x1400bbd18]
lea r9, [0x1400bbd08]
cmp qword [0x1400bbd20], 8
cmovae r9, qword [0x1400bbd08]
mov r15, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, r15
cmp rdi, rax
ja 0x140006034
lea rax, [r15 + rdi]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x60]
lea rcx, [rbx + r15*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064fd0
lea rax, [rdi + r15]
mov word [rbx + rax*2], r12w
lea rax, [rbp - 0x60]
jmp 0x140006045
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.140002bc0
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xc
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x1400060be
lea rdi, [rcx + 6]
mov qword [rbp + 0x50], rdi
lea rbx, [rbp + 0x40]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x40]
lea rcx, [rbx + rcx*2]
mov r8d, 0xc
lea rdx, str.__url:
call fcn.140064fd0
mov word [rbx + rdi*2], r12w
lea rax, [rbp + 0x40]
jmp 0x1400060dc
mov qword [rsp + 0x20], 6
lea r9, str.__url:
mov edx, 6
lea rcx, [rbp + 0x40]
call fcn.140002bc0
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xd
mov rdi, qword [0x1400bbcb8]
lea r9, [0x1400bbca8]
cmp qword [0x1400bbcc0], 8
cmovae r9, qword [0x1400bbca8]
mov r15, qword [rbp + 0x30]
mov rcx, qword [rbp + 0x38]
mov rax, rcx
sub rax, r15
cmp rdi, rax
ja 0x140006170
lea rax, [rdi + r15]
mov qword [rbp + 0x30], rax
lea rbx, [rbp + 0x20]
cmp rcx, 8
cmovae rbx, qword [rbp + 0x20]
lea rcx, [rbx + r15*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064fd0
lea rax, [rdi + r15]
mov word [rbx + rax*2], r12w
lea rax, [rbp + 0x20]
jmp 0x140006181
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x20]
call fcn.140002bc0
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
bts esi, 0xe
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1400061f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400061ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006976
call fcn.140062c6c
mov qword [rbp + 0x30], r12
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r12w
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140006245
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006240
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000697c
call fcn.140062c6c
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], r12w
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140006296
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006291
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006982
call fcn.140062c6c
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x1400062e7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062e2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006988
call fcn.140062c6c
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], 7
mov word [rbp], r12w
mov rax, qword [0x1400bbc98]
test rax, rax
jne 0x140006331
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140002350
lea r9, [rbp - 0x80]
or esi, 8
jmp 0x140006383
sub r13, rax
cmp r13, 5
jb 0x14000698e
cmp qword [0x1400bbca0], 8
lea rcx, [0x1400bbc88]
cmovae rcx, qword [0x1400bbc88]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 5
lea r9, str.__bn:
lea rcx, [rbp - 0x40]
call fcn.1400027e0
bts esi, 0xf
lea r9, [rbp - 0x40]
or esi, 0x10
mov dword [rsp + 0x50], esi
mov rdx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x140006395
mov r9, qword [r9]
mov rcx, qword [rbp - 0x10]
mov r8, qword [rbp - 8]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1400063d4
lea rdi, [rdx + rcx]
mov qword [rbp - 0x10], rdi
lea rbx, [rbp - 0x20]
cmp r8, 8
cmovae rbx, qword [rbp - 0x20]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.140064fd0
mov word [rbx + rdi*2], r12w
jmp 0x1400063e3
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x20]
call fcn.140002bc0
nop
test sil, 0x10
je 0x140006431
and esi, 0xffffffef
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140006431
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000642b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006994
call fcn.140062c6c
nop
test sil, 8
je 0x14000647e
and esi, 0xfffffff7
mov dword [rsp + 0x50], esi
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000647e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006479
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000699a
call fcn.140062c6c
mov edx, dword [0x1400bf564]
test edx, edx
je 0x1400064b4
lea rcx, [rbp + 0x60]
call fcn.140005820
nop
or esi, 0x20
mov dword [rsp + 0x50], esi
mov r8, rax
lea rdx, str.__dt:
lea rcx, [rbp - 0x40]
call fcn.1400025f0
mov r9, rax
or esi, 0x40
jmp 0x1400064e0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
xor r8d, r8d
mov rdx, r14
lea rcx, [rbp - 0x80]
call fcn.140002350
lea r9, [rbp - 0x80]
bts esi, 7
mov dword [rsp + 0x50], esi
mov rdx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x1400064f2
mov r9, qword [r9]
mov rcx, qword [rbp - 0x10]
mov r8, qword [rbp - 8]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140006531
lea rdi, [rdx + rcx]
mov qword [rbp - 0x10], rdi
lea rbx, [rbp - 0x20]
cmp r8, 8
cmovae rbx, qword [rbp - 0x20]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.140064fd0
mov word [rbx + rdi*2], r12w
jmp 0x140006540
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x20]
call fcn.140002bc0
nop
test sil, sil
jns 0x14000658a
btr esi, 7
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x14000658a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006584
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400069a0
call fcn.140062c6c
nop
test sil, 0x40
je 0x1400065e4
and esi, 0xffffffbf
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1400065d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400069a6
call fcn.140062c6c
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r12w
test sil, 0x20
je 0x14000662a
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x14000662a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006625
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400069ac
call fcn.140062c6c
lea rax, str.__dev
cmp byte [0x1400bf563], 0
cmovne r14, rax
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [r14 + rdx*2], 0
jne 0x140006643
mov rcx, qword [rbp - 0x10]
mov r8, qword [rbp - 8]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x14000668d
lea rdi, [rdx + rcx]
mov qword [rbp - 0x10], rdi
lea rbx, [rbp - 0x20]
cmp r8, 8
cmovae rbx, qword [rbp - 0x20]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r14
call fcn.140064fd0
mov word [rbx + rdi*2], r12w
jmp 0x14000669e
mov qword [rsp + 0x20], rdx
mov r9, r14
lea rcx, [rbp - 0x20]
call fcn.140002bc0
mov eax, dword [rsp + 0x58]
cmp eax, 1
jne 0x1400066c3
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x60]
call fcn.1400021c0
mov rcx, rax
call fcn.140007f40
mov ebx, eax
jmp 0x1400068d5
cmp eax, 2
jne 0x140006827
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
lea r8d, [rax + 0x15]
lea rdx, str.Service_uninstall_start
lea rcx, [rbp - 0x40]
call fcn.140004570
lea rcx, [rbp - 0x40]
call fcn.140002f60
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x140006719
lea ebx, [rax - 5]
jmp 0x1400068d5
mov r8d, 0xf01ff
lea rdx, str.rsSyncSvc
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x140006748
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea ebx, [rdi - 8]
jmp 0x1400068d5
mov ebx, r12d
lea r8, [rbp + 0x80]
mov edx, 1
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x140006769
lea ebx, [rax - 9]
jmp 0x14000677c
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_DeleteService]
mov ecx, 0xfffffff6
test eax, eax
cmove ebx, ecx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, ebx
lea rcx, [rbp + 0x60]
call fcn.140002d90
nop
mov r9d, 0x25
lea r8, str.Service_uninstall_finished_with_code
mov rcx, rax
call fcn.140008fd0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp - 0x80]
call fcn.140002f60
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x1400068d5
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000681d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400069b2
call fcn.140062c6c
jmp 0x1400068d5
lea rax, str.rsSyncSvc
mov qword [rsp + 0x60], rax
lea rax, [0x140008330]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
lea rcx, [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x14000685d
lea ebx, [rax - 3]
jmp 0x1400068d5
movzx eax, word [0x1400bf58c]
test ax, ax
je 0x1400068a3
mov ebx, 0xffff
lea rdi, [0x1400bf5a0]
nop word [rax + rax]
add ax, bx
mov word [0x1400bf58c], ax
movzx ecx, ax
mov rcx, qword [rdi + rcx*8]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
movzx eax, word [0x1400bf58c]
test ax, ax
jne 0x140006880
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov r8d, 0xa
lea rdx, str.Main:_Exit
lea rcx, [rbp - 0x40]
call fcn.140004570
lea rcx, [rbp - 0x40]
call fcn.140002f60
mov ebx, r12d
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x140006911
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000690c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000694c
call fcn.140062c6c
mov eax, ebx
jmp 0x14000691c
mov rax, 0xffffffffffffffff
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.140062b40
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14006ef68
int3
call fcn.140001480
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
int3
call fcn.140001480
int3
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
int3
call fcn.140001480
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
nop
call fcn.14006ef68
int3
call fcn.14006ef68
int3