Function at 0x140002ef0
Capabilities:
Modify service

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x278
mov rdi, r8
mov rbx, rdx
mov r14, rcx
mov rax, qword [0x140033138]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rcx, rdx
call fcn.14001433c
cmp rax, 3
jb 0x140002f8d
mov rsi, rax
lea rdx, str.maintenanceservice_tmp.exe
mov rcx, rbx
call fcn.14000ce78
test rax, rax
jne 0x140002f8d
cmp word [rbx], 0x22
jne 0x140002f8d
cmp word [rbx + rsi*2 - 2], 0x22
jne 0x140002f8d
mov eax, dword [0x140033e78]
mov ecx, dword [0x140033ed8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400032ba
lea rcx, [0x140033c68]
lea rdx, str.The_MozillaMaintenance_service_path_is_correct.
call fcn.140008610
mov dword [rdi], 0
jmp 0x1400030ab
mov eax, dword [0x140033e78]
mov ecx, dword [0x140033ed8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140003170
lea rcx, [0x140033c68]
lea rdx, str.The_MozillaMaintenance_path_is_NOT_correct._It_was:__ls
mov r8, rbx
call fcn.140008610
mov dword [rdi], 1
lea rsi, [rsp + 0x60]
mov r8d, 0x20a
mov rcx, rsi
xor edx, edx
call fcn.14000cba0
mov r8d, 0x104
mov rcx, rsi
mov rdx, rbx
call fcn.140014804
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x1400030b5
lea rdx, [0x14002d0b0]
lea rsi, [rsp + 0x60]
mov rcx, rsi
call fcn.140009d40
test eax, eax
je 0x1400030f0
mov rcx, rsi
call qword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov edx, 0xffffffff
mov r8d, 0xffffffff
mov r9d, 0xffffffff
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov ecx, dword [0x140033e78]
mov edx, dword [0x140033ed8]
mov rbx, qword gs:[0x58]
mov rdx, qword [rbx + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x14000312b
cmp ecx, edx
jg 0x1400031f4
lea rcx, [0x140033c68]
lea rdx, str.Fixed_service_path_to:__ls.
lea r8, [rsp + 0x60]
call fcn.140008610
mov esi, 1
jmp 0x140003151
mov eax, dword [0x140033e78]
mov ecx, dword [0x140033ed8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400031b2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140033c68]
lea rdx, str.Couldnt_remove_file_spec.____lu_
jmp 0x140003147
mov eax, dword [0x140033e78]
mov ecx, dword [0x140033ed8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140003236
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140033c68]
lea rdx, str.Couldnt_append_file_spec.____lu_
jmp 0x140003147
cmp ecx, edx
jg 0x140003278
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140033c68]
lea rdx, str.Could_not_fix_service_path.____lu_
mov r8d, eax
call fcn.140008690
xor esi, esi
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.14000acd0
mov eax, esi
add rsp, 0x278
pop rbx
pop rdi
pop rsi
pop r14
ret
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x140002fb2
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x140002fb2
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x1400030da
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x1400030da
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x140003093
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x140003093
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x140003115
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x140003115
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x140003133
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x140003133
lea rcx, [0x140033e78]
call fcn.14000aa90
cmp dword [0x140033e78], 0xffffffff
jne 0x140002f6f
lea rcx, [0x140033c68]
call fcn.140008560
lea rcx, [0x140002160]
call fcn.14000acf4
lea rcx, [0x140033e78]
call fcn.14000aaf8
jmp 0x140002f6f