Function at 0x1400085ce
Capabilities:
Enumerate services

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rax, 0x12
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400085dd
sub rsp, 0x28
call fcn.140061030
mov rdx, rsp
mov rcx, 0xc5
call fcn.140061f60
mov rcx, 0x86
call fcn.14004f5b3
mov rcx, 0x89
call fcn.14004f5b3
movabs rdx, 0x1400d5206
lea rcx, [rsp + 0x68]
call fcn.140060ea0
mov rcx, 0x89
call fcn.14004f5b3
movabs rdx, 0x1400d5206
lea rcx, [rsp + 0x70]
call fcn.140060ea0
mov rcx, 0x89
call fcn.14004f5b3
movabs rdx, 0x1400d5206
lea rcx, [rsp + 0x78]
call fcn.140060ea0
mov rcx, 0x8a
call fcn.14004f5b3
sub rsp, 0x18
mov rdx, 1
mov rcx, rdx
call fcn.14004f6db
lea rax, [rsp + 0xa8]
push rax
xor r9, r9
mov r8, 0x18
mov rcx, 1
sub rsp, 0x20
call fcn.1400609dc
add rsp, 0x40
mov qword [rsp + 0x90], rax
mov rcx, 0x8b
call fcn.14004f5b3
movabs rax, 0x80000004
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
call sub.ADVAPI32.DLL_OpenSCManagerW
mov rcx, 0x8b
call fcn.14004f795
mov qword [rsp + 0x28], rax
mov rcx, 0x8c
call fcn.14004f5b3
cmp qword [rsp + 0x28], 0
je 0x14000965c
mov rcx, 0x8d
call fcn.14004f5b3
mov dword [rsp + 0x38], 0
mov rcx, 0x8e
call fcn.14004f5b3
mov dword [rsp + 0x48], 0
mov rcx, 0x8f
call fcn.14004f5b3
mov dword [rsp + 0x50], 0
mov rcx, 0x90
call fcn.14004f5b3
lea rax, [rsp + 0x38]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
push 0
push 0
push 3
movsxd rax, dword [rsp + 0x100]
mov rax, rax
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.DLL_EnumServicesStatusW
add rsp, 0x40
mov rcx, 0x90
call fcn.14004f795
mov qword [rsp + 0x58], rax
mov rcx, 0x91
call fcn.14004f5b3
movsxd r15, dword [rsp + 0x48]
and r15, r15
jle 0x14000962e
mov rcx, 0x92
call fcn.14004f5b3
movsxd rax, dword [rsp + 0x48]
push rax
pop rax
mov dword [rsp + 0x40], eax
mov rcx, 0x93
call fcn.14004f5b3
movsxd rax, dword [rsp + 0x40]
inc rax
lea rdx, [rsp + 0x90]
mov rcx, rax
call fcn.14004f6db
call fcn.140060b98
mov rcx, 0x94
call fcn.14004f5b3
push 0
movsxd rax, dword [rsp + 0x48]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0xa0]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
mov rbp, qword [rsp + 0xa0]
lea rax, [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
movabs r10, 0x140055a40
mov r11, 0
call fcn.14004f7b3
call fcn.140056090
mov rcx, 0x95
call fcn.14004f5b3
mov dword [rsp + 0x38], 0
mov rcx, 0x96
call fcn.14004f5b3
mov dword [rsp + 0x48], 0
mov rcx, 0x97
call fcn.14004f5b3
mov dword [rsp + 0x50], 0
mov rcx, 0x98
call fcn.14004f5b3
lea rax, [rsp + 0x38]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
lea rax, [rsp + 0x58]
mov rax, rax
push rax
movsxd rax, dword [rsp + 0x58]
mov rax, rax
push rax
mov rax, 0
mov rdx, qword [rsp + 0xb0]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
lea rax, [rbp]
mov rax, rax
push rax
push 3
movsxd rax, dword [rsp + 0x100]
mov rax, rax
push rax
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.ADVAPI32.DLL_EnumServicesStatusW
add rsp, 0x40
mov rcx, 0x98
call fcn.14004f795
mov qword [rsp + 0x58], rax
mov rcx, 0x99
call fcn.14004f5b3
cmp qword [rsp + 0x58], 0
je 0x140009622
mov rcx, 0x9a
call fcn.14004f5b3
movsxd r15, dword [rsp + 0x50]
and r15, r15
jle 0x140009616
mov rcx, 0x9b
call fcn.14004f5b3
mov dword [rsp + 0x60], 0
mov rcx, 0x9c
call fcn.14004f5b3
mov rax, 0
mov rdx, qword [rsp + 0x90]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
mov rbp, qword [rsp + 0x90]
lea rax, [rbp]
mov qword [rsp + 0x30], rax
mov rcx, 0x9d
call fcn.14004f5b3
mov rcx, 0x9e
call fcn.14004f5b3
movsxd r15, dword [rsp + 0x60]
inc r15
mov rax, r15
push rax
pop rax
mov dword [rsp + 0x60], eax
mov rcx, 0x9f
call fcn.14004f5b3
mov rbp, qword [rsp + 0x30]
call fcn.14004f6cb
cmp qword [rbp], 0
je 0x140008a14
mov rbp, qword [rsp + 0x30]
call fcn.14004f6cb
cmp qword [rbp + 8], 0
je 0x140008a14
mov rax, 1
jmp 0x140008a17
xor rax, rax
and rax, rax
je 0x1400095b3
mov rcx, 0xa0
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x68]
call fcn.14004f6cb
push qword [rbp]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140055d40
mov r11, 0
call fcn.14004f7b3
call fcn.1400561c0
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.140061170
mov rcx, 0xa1
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x68]
call fcn.14004f6cb
push qword [rbp + 8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140055d40
mov r11, 0
call fcn.14004f7b3
call fcn.1400561c0
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061170
mov rcx, 0xa2
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push 0x19
push 0xffffffffffffffff
mov rbp, qword [rsp + 0x88]
call fcn.14004f6cb
push qword [rbp]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140055d40
mov r11, 0
call fcn.14004f7b3
call fcn.1400561c0
add rsp, 0x28
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140025e8b
add rsp, 0x30
mov rcx, 0xa2
call fcn.14004f795
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x80]
pop rdx
call fcn.140061170
mov rcx, 0xa3
call fcn.14004f5b3
push qword [rsp + 0x68]
movabs rcx, 0x1400d5206
pop rdx
call fcn.140061250
or rax, rax
jne 0x140008df6
push qword [rsp + 0x70]
movabs rcx, 0x1400d5206
pop rdx
call fcn.140061250
or rax, rax
jne 0x140008df6
push qword [rsp + 0x78]
movabs rcx, 0x1400d5206
pop rdx
call fcn.140061250
or rax, rax
jne 0x140008df6
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0x88]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x28
call fcn.1400613d0
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
movabs rax, str.Shell_Hardware_Detection
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061350
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061350
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061250
or rax, rax
jne 0x140008df6
mov rax, 1
jmp 0x140008df9
xor rax, rax
and rax, rax
je 0x1400095a7
mov rcx, 0xa4
call fcn.14004f5b3
movabs rax, 0x1400d52d0
push rax
push qword [rsp + 0x78]
pop rcx
pop rdx
call fcn.140051a90
mov r15, rax
cmp r15, 2
jl 0x14000959b
mov rcx, 0xa5
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400d52d0
push rax
push 1
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140051690
mov r11, 0
call fcn.14004f7b3
call fcn.1400517e0
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140061170
mov rcx, 0xa6
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400d52d0
push rax
push 2
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
movabs r10, 0x140051690
mov r11, 0
call fcn.14004f7b3
call fcn.1400517e0
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x90]
pop rdx
call fcn.140061170
mov rcx, 0xa7
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0xa0]
pop rcx
sub rsp, 0x20
call fcn.140051bf0
add rsp, 0x28
mov r15, rax
sub rsp, 8
push qword [rsp + 0xb0]
pop rcx
sub rsp, 0x20
call fcn.140051bf0
add rsp, 0x28
sub r15, rax
mov rax, r15
push rax
push qword [rsp + 0xb0]
pop rcx
sub rsp, 0x20
call fcn.140051bf0
add rsp, 0x20
mov r15, rax
inc r15
mov rax, r15
push rax
push qword [rsp + 0xa8]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c10
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
movabs r10, 0x1400516b0
mov r11, 0
call fcn.14004f7b3
call fcn.1400516c0
add rsp, 0x28
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061170
mov rcx, 0xa8
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push 1
push 1
push qword [rsp + 0xc0]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c10
add rsp, 0x20
push rax
call fcn.1400610d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x28
lea rcx, [rsp + 0x88]
pop rdx
call fcn.140061170
mov rcx, 0xa9
call fcn.14004f5b3
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0xa0]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x28
call fcn.1400613d0
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400d6cf2
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061350
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061350
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061250
or rax, rax
jne 0x140009367
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
push qword [rsp + 0xa0]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x28
call fcn.1400613d0
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x1400d5d6e
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140051b60
add rsp, 0x20
pop rcx
sub rsp, 8
call fcn.140061350
add rsp, 8
mov rcx, rax
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.140061350
add rsp, 0x20
pop rcx
mov rdx, rax
call fcn.140061250
or rax, rax
jne 0x140009367
push qword [rsp + 0x80]
pop rcx
call fcn.140051cd0
mov r15, rax
movabs rax, 0x1400d53ee
push rax
pop rcx
call fcn.140051cd0
cmp r15, rax
jl 0x140009332
push qword [rsp + 0x80]
pop rcx
call fcn.140051cd0
mov r15, rax
movabs rax, 0x1400d548e
push rax
pop rcx
call fcn.140051cd0
cmp r15, rax
jg 0x140009332
mov rax, 1
jmp 0x140009335
xor rax, rax
and rax, rax
je 0x140009356
push qword [rsp + 0x70]
pop rcx
call fcn.140051bf0
mov r15, rax
cmp r15, 4
jle 0x140009356
mov rax, 1
jmp 0x140009359
xor rax, rax
and rax, rax
je 0x140009367
mov rax, 1
jmp 0x14000936a
xor rax, rax
and rax, rax
je 0x14000958f
mov rcx, 0xac
call fcn.14004f5b3
mov rcx, qword [rsp + 0x80]
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400612e0
add rsp, 0x28
push rcx
sub rsp, 0x20
call fcn.140060f90
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push qword [rsp + 0x90]
pop rcx
sub rsp, 0x20
call fcn.140051bf0
add rsp, 0x28
mov r15, rax
dec r15
mov rax, r15
push rax
push 2
push qword [rsp + 0x98]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140051c10
add rsp, 0x20
pop rax
lea rcx, [rsp + 0x78]
pop rdx
call fcn.140061170
mov rcx, 0xad
call fcn.14004f5b3
mov rcx, qword [rsp + 0x68]
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400612e0
add rsp, 0x28
movsxd r15, dword [0x1400ee584]
mov rax, r15
mov rdx, qword [0x1400d5108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
mov rbp, qword [0x1400d5108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f6cb
lea rcx, [rbp]
pop rdx
call fcn.140061170
mov rcx, 0xae
call fcn.14004f5b3
mov rcx, qword [rsp + 0x70]
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400612e0
add rsp, 0x28
movsxd r15, dword [0x1400ee584]
mov rax, r15
mov rdx, qword [0x1400d5108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
mov rbp, qword [0x1400d5108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f6cb
lea rcx, [rbp + 8]
pop rdx
call fcn.140061170
mov rcx, 0xaf
call fcn.14004f5b3
mov rcx, qword [rsp + 0x78]
push rcx
sub rsp, 0x28
call fcn.140060f90
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400612e0
add rsp, 0x28
movsxd r15, dword [0x1400ee584]
mov rax, r15
mov rdx, qword [0x1400d5108]
mov rdx, qword [rdx - 0x10]
call fcn.14004f6ee
mov rbp, qword [0x1400d5108]
imul r15, r15, 0x18
add rbp, r15
call fcn.14004f6cb
lea rcx, [rbp + 0x10]
pop rdx
call fcn.140061170
mov rcx, 0xb0
call fcn.14004f5b3
movsxd r15, dword [0x1400ee584]
inc r15
mov rax, r15
push rax
pop rax
mov dword [0x1400ee584], eax
mov rcx, 0xb1
call fcn.14004f5b3
movsxd rax, dword [0x1400ee584]
inc rax
movabs rdx, 0x1400d5108
mov rcx, rax
call fcn.14004f6db
call fcn.140060b98
mov rcx, 0xb4
call fcn.14004f5b3
mov rcx, 0xb5
call fcn.14004f5b3
mov rcx, 0xb6
call fcn.14004f5b3
mov rcx, 0xb7
call fcn.14004f5b3
mov rcx, 0xb8
call fcn.14004f5b3
mov r15, qword [rsp + 0x30]
add r15, 0x30
mov qword [rsp + 0x30], r15
mov rcx, 0xb9
call fcn.14004f5b3
movsxd r15, dword [rsp + 0x60]
cmp r15d, dword [rsp + 0x50]
jge 0x140009601
movsxd r15, dword [rsp + 0x60]
cmp r15, 0x1f4
jg 0x140009601
jmp 0x14000960a
mov rax, 1
jmp 0x14000960d
xor rax, rax
and rax, rax
je 0x1400089b4
mov rcx, 0xba
call fcn.14004f5b3
mov rcx, 0xbb
call fcn.14004f5b3
mov rcx, 0xbc
call fcn.14004f5b3
mov rcx, 0xbd
call fcn.14004f5b3
push qword [rsp + 0x28]
pop rcx
call sub.ADVAPI32.DLL_CloseServiceHandle
mov rcx, 0xbd
call fcn.14004f795
mov rcx, 0xbe
call fcn.14004f5b3
mov rcx, 0xbf
call fcn.14004f5b3
xor rax, rax
push rax
push rax
sub rsp, 0x20
call fcn.1400621b0
add rsp, 0x20
pop rax
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.1400612b0
add rsp, 0x28
mov rcx, qword [rsp + 0x88]
sub rsp, 0x28
call fcn.1400612b0
add rsp, 0x28
mov rcx, qword [rsp + 0x90]
sub rsp, 0x28
call fcn.1400612b0
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.1400612b0
add rsp, 0x28
mov rcx, qword [rsp + 0x78]
sub rsp, 0x28
call fcn.1400612b0
add rsp, 0x28
mov rcx, qword [rsp + 0x98]
sub rsp, 0x28
call fcn.140060cc0
add rsp, 0x28
pop rax
add rsp, 0xb8
pop r15
pop rbp
ret