Function at 0x7ff72e2cffc0
Capabilities:
Modify service

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1f90]
mov eax, 0x2090
call fcn.7ff72e32aaf0
sub rsp, rax
mov rax, qword [0x7ff72e3c3a28]
xor rax, rsp
mov qword [rbp + 0x1f80], rax
xor edx, edx
mov rdi, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov r14, rax
test rax, rax
jne 0x7ff72e2d0069
movdqa xmm0, xmmword [str.NvcServiceHost._]
mov rbx, qword [rdi + 8]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x707063
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
lea rdi, str.Failed_to_open_SCM._Error__u
mov r8d, 0x17e
mov qword [rsp + 0x20], rdi
lea r9d, [r14 + 1]
mov rcx, rbx
lea rdx, [rsp + 0x68]
call fcn.7ff72e2d6af0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rdx, rdi
lea ecx, [r14 + 0x15]
mov r8d, eax
call fcn.7ff72e2c7fe0
jmp 0x7ff72e2d0347
lea rbx, [rdi + 0x608]
mov qword [rsp + 0x20b8], rsi
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x7ff72e2d0085
mov rdx, qword [rbx]
mov r8d, 3
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x7ff72e2d0123
movdqa xmm0, xmmword [str.NvcServiceHost._]
mov rdi, qword [rdi + 8]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x707063
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x7ff72e2d00cd
mov rdx, qword [rbx]
mov dword [rsp + 0x30], eax
lea rsi, str.Failed_to_open_service__ls._Error__u
mov qword [rsp + 0x28], rdx
mov r9d, 1
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rsi
mov r8d, 0x189
mov rcx, rdi
call fcn.7ff72e2d6d80
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
jb 0x7ff72e2d010b
mov rbx, qword [rbx]
mov r9d, eax
mov r8, rbx
mov rdx, rsi
mov ecx, 0x16
call fcn.7ff72e2c80a0
jmp 0x7ff72e2d0336
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20c0], r15
mov r8d, 0x2000
lea rdx, [rbp - 0x80]
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
test eax, eax
jne 0x7ff72e2d01bc
movdqa xmm0, xmmword [str.NvcServiceHost._]
mov rdi, qword [rdi + 8]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x707063
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x7ff72e2d0174
mov rdx, qword [rbx]
mov dword [rsp + 0x30], eax
lea r15, str.Failed_to_query_service_configuration_for__ls._Error__u
mov qword [rsp + 0x28], rdx
mov r9d, 1
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], r15
mov r8d, 0x19a
mov rcx, rdi
call fcn.7ff72e2d6d80
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
jb 0x7ff72e2d01b2
mov rbx, qword [rbx]
mov ecx, 0x17
jmp 0x7ff72e2d0317
mov rax, qword [rbp - 0x7c]
cmp eax, 3
je 0x7ff72e2d0219
cmp qword [rbx + 0x18], 8
movdqa xmm0, xmmword [str.NvcServiceHost._]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x707063
jb 0x7ff72e2d01e5
mov rbx, qword [rbx]
mov rcx, qword [rdi + 8]
lea rdx, [rsp + 0x68]
mov dword [rsp + 0x30], eax
mov r9d, 3
lea rax, str.Leaving_service__ls_start_type__u_unchanged
mov qword [rsp + 0x28], rbx
mov r8d, 0x1a1
mov qword [rsp + 0x20], rax
call fcn.7ff72e2d6d80
jmp 0x7ff72e2d0325
mov r9d, dword [rbp - 0x78]
xor eax, eax
mov edx, dword [rbp - 0x80]
mov rcx, rsi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rax
lea r8d, [rax + 2]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
movdqa xmm0, xmmword [str.NvcServiceHost._]
mov dword [rsp + 0x78], 0x707063
movdqu xmmword [rsp + 0x68], xmm0
test eax, eax
je 0x7ff72e2d02bd
cmp qword [rbx + 0x18], 8
jb 0x7ff72e2d0276
mov rbx, qword [rbx]
mov rcx, qword [rdi + 8]
lea rax, str.Changed_service__ls_start_type_to_auto_start
mov qword [rsp + 0x28], rbx
lea rdx, [rsp + 0x68]
mov r9d, 3
mov qword [rsp + 0x20], rax
mov r8d, 0x1b3
call fcn.7ff72e2d6d80
mov edx, 0x200
mov rcx, rdi
call fcn.7ff72e2d0f80
mov edx, 0x100
mov rcx, rdi
call fcn.7ff72e2d0f80
jmp 0x7ff72e2d0325
mov rdi, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
mov rdx, rbx
jb 0x7ff72e2d02d4
mov rdx, qword [rbx]
mov dword [rsp + 0x30], eax
lea r15, str.Failed_to_change_service_to_auto_start_for__ls._Error__u
mov qword [rsp + 0x28], rdx
mov r9d, 1
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], r15
mov r8d, 0x1c3
mov rcx, rdi
call fcn.7ff72e2d6d80
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp qword [rbx + 0x18], 8
jb 0x7ff72e2d0312
mov rbx, qword [rbx]
mov ecx, 0x18
mov r9d, eax
mov r8, rbx
mov rdx, r15
call fcn.7ff72e2c80a0
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov r15, qword [rsp + 0x20c0]
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rsi, qword [rsp + 0x20b8]
mov rcx, qword [rbp + 0x1f80]
xor rcx, rsp
call fcn.7ff72e329d50
mov rbx, qword [rsp + 0x20c8]
add rsp, 0x2090
pop r14
pop rdi
pop rbp
ret