Function at 0x1800091b0
Capabilities:
Enumerate services

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
xor r11d, r11d
mov esi, r9d
add r9d, 0x58b
mov qword [rbp - 0x49], r11
mov byte [rbp - 0x41], r11b
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x39], xmm0
xorps xmm1, xmm1
mov r14, qword [rbp - 0x39]
mov r10, r8
movdqa xmmword [rbp - 0x29], xmm1
mov rbx, rdx
mov qword [rbp - 0x19], r11
mov r15, rcx
mov byte [rbp - 0x11], r11b
movabs r8, 0x2aaaaaaaaaaaaaab
movdqa xmmword [rbp - 9], xmm0
mov byte [rbp + 7], r11b
mov qword [rbp + 0xf], r11
mov qword [rbp + 0x17], r11
mov byte [rbp + 0x1f], r11b
mov dword [rbp + 0x7f], r9d
cmp esi, r9d
jae 0x180009669
mov r12, qword [rbp - 0x31]
mov r13, qword [rsp + 0x50]
cmp esi, 0x1a2
ja 0x1800094a0
je 0x18000945d
mov eax, esi
sub eax, 0x1f
je 0x1800093fd
sub eax, 0x81
je 0x1800093a9
sub eax, 0x4b
je 0x18000939c
sub eax, 0x36
je 0x1800092e3
cmp eax, 0x4b
jne 0x18000936d
mov rcx, qword [rbx + 0x18]
mov r8, rbx
cmp rcx, 0x10
jb 0x18000928f
mov r8, qword [rbx]
mov rdx, rbx
jb 0x180009297
mov rdx, qword [rbx]
add rdx, qword [rbx + 0x10]
mov rax, rbx
cmp rcx, 0x10
jb 0x1800092a7
mov rax, qword [rbx]
mov qword [rsp + 0x28], r8
mov r9, r10
lea r8, [rbp - 0x49]
mov dword [rsp + 0x20], r11d
mov rcx, rax
call fcn.180002480
mov r14, qword [rbp - 0x39]
movabs r8, 0x2aaaaaaaaaaaaaab
test al, al
je 0x180009665
mov r12, qword [rbp - 0x31]
mov r9d, dword [rbp + 0x7f]
jmp 0x18000936d
mov dil, 0x30
nop word [rax + rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18000931c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180009311
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x18000932f
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.180002020
inc dil
cmp dil, 0x39
jbe 0x1800092f0
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180009388
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180009359
mov rax, qword [rbx]
mov word [rax + rcx], 0x2d
mov r9d, dword [rbp + 0x7f]
movabs r8, 0x2aaaaaaaaaaaaaab
add esi, 0x81
cmp esi, r9d
jae 0x180009669
mov r10, qword [rbp + 0x77]
xor r11d, r11d
jmp 0x180009240
mov r9b, 0x2d
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.180002020
jmp 0x18000935f
mov r13, r11
mov dword [rsp + 0x44], 0xb
jmp 0x18000936d
mov dil, 0x41
nop dword [rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x1800093dc
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x1800093d1
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x1800093ef
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.180002020
inc dil
cmp dil, 0x5a
jbe 0x1800093b0
jmp 0x18000935f
mov edx, 0x40
mov rcx, rbx
call fcn.18002e230
mov dil, 0x61
nop dword [rax]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x18000943c
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x180009431
mov rax, qword [rbx]
mov byte [rax + rcx], dil
mov byte [rax + rcx + 1], 0
jmp 0x18000944f
xor r8d, r8d
movzx r9d, dil
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.180002020
inc dil
cmp dil, 0x7a
jbe 0x180009410
jmp 0x18000935f
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x180009489
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0x10
jb 0x18000947e
mov rax, qword [rbx]
mov word [rax + rcx], 0x5f
jmp 0x18000936d
mov r9b, 0x5f
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 1]
call fcn.180002020
jmp 0x18000935f
cmp esi, 0x1ed
je 0x180009658
cmp esi, 0x26e
je 0x18000962e
cmp esi, 0x2ef
je 0x18000951e
cmp esi, 0x370
je 0x1800094e1
cmp esi, 0x3f1
jne 0x18000936d
cmp qword [r15 + 0x10], 0
setne bl
jmp 0x18000966d
mov r8d, dword [rsp + 0x50]
lea rax, [rsp + 0x40]
mov edx, dword [rsp + 0x44]
xor r9d, r9d
mov qword [rsp + 0x38], r11
mov rcx, r13
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x40], r11d
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
jmp 0x18000935f
mov rcx, r12
mov rax, r8
sub rcx, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rbp + 0xf]
cmp rdx, 1
jbe 0x180009546
lea rax, [r14 + 0x18]
cmp byte [rax + 0x10], 0
je 0x180009555
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x61], xmm0
jmp 0x18000955d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x61], xmm0
mov rdx, qword [rbp - 0x61]
mov eax, 0xf
mov r8, qword [rbp - 0x59]
mov qword [rbp - 0x71], r11
mov qword [rbp - 0x69], rax
mov byte [rsp + 0x58], 0
cmp rdx, r8
je 0x180009591
sub r8, rdx
lea rcx, [rsp + 0x58]
call fcn.18001f060
mov rax, qword [rbp - 0x69]
mov r9d, dword [rbp + 0x7f]
lea rcx, [rsp + 0x58]
cmp r15, rcx
je 0x1800095ec
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x1800095d5
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1800095d0
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800096dc
mov rcx, r8
call fcn.180030c24
movups xmm0, xmmword [rsp + 0x58]
movups xmm1, xmmword [rbp - 0x71]
movups xmmword [r15], xmm0
movups xmmword [r15 + 0x10], xmm1
jmp 0x18000935f
cmp rax, 0x10
jb 0x180009363
mov rcx, qword [rsp + 0x58]
lea rdx, [rax + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009624
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800096dc
call fcn.180030c24
jmp 0x18000935f
mov rcx, r12
mov rax, r8
sub rcx, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdx, 2
jb 0x180009665
mov dword [rsp + 0x48], r11d
jmp 0x18000936d
mov dword [rsp + 0x50], 1
jmp 0x18000936d
xor bl, bl
jmp 0x18000966d
movzx ebx, byte [rbp + 0x7f]
test r14, r14
je 0x1800096be
mov rcx, qword [rbp - 0x29]
mov rax, r8
sub rcx, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r14
lea rdx, [rdx + rdx*2]
shl rdx, 3
cmp rdx, 0x1000
jb 0x1800096b6
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800096dc
mov rcx, r14
call fcn.180030c24
movzx eax, bl
mov rbx, qword [rsp + 0x140]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180034d34
int3