Function at 0x10008d30
Capabilities:
Delete service

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [0x1001b8b0]
mov ecx, dword [0x1001b8b4]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
sete byte [esp + 9]
cmp ecx, 0xa
setl byte [esp + 0xa]
mov ebx, dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 0x4ac6a954
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0e77b2c
mov ecx, 0xcbfd484a
nop word cs:[eax + eax]
nop dword [eax]
cmove eax, ecx
cmp dword [0x1001b8b4], 0xa
cmovl eax, ecx
cmp eax, 0xf8e3ec73
jle 0x10008e20
cmp eax, 0x44063792
jg 0x10008e90
cmp eax, 0x19fc9609
jg 0x10008f6a
cmp eax, 0x7a63396
jg 0x100090ea
cmp eax, 0xfd30e3e5
jg 0x1000933e
cmp eax, 0xfb9784e6
jle 0x10009769
cmp eax, 0xfb9784e7
je 0x10009d17
cmp eax, 0xfbf30426
je 0x10009d21
cmp eax, 0xfc312ac7
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x491fbdcd
mov ecx, 0x46473a1e
jmp 0x10008d90
cmp eax, 0xc6d51546
jle 0x10008f00
cmp eax, 0xe483ad34
jg 0x10008fc9
cmp eax, 0xd273a56c
jg 0x1000912b
cmp eax, 0xca52d60e
jg 0x10009387
cmp eax, 0xc9dc35b1
jle 0x1000979c
cmp eax, 0xc9dc35b2
je 0x10009d3e
cmp eax, 0xc9de0837
je 0x10009d5b
cmp eax, 0xca15209f
jne 0x10008d9d
mov eax, 0x6f26e202
jmp 0x10008d9d
cmp eax, 0x643194c6
jg 0x1000902c
cmp eax, 0x4e1c7241
jg 0x1000917f
cmp eax, 0x47573cb5
jg 0x100093d0
cmp eax, 0x458cee40
jle 0x100097cf
cmp eax, 0x458cee41
je 0x10009d65
cmp eax, 0x46473a1e
je 0x10009d82
cmp eax, 0x46a3af49
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5981f1cc
mov ecx, 0xb424ecbf
jmp 0x10008d90
cmp eax, 0xa0e77b2b
jg 0x1000908b
cmp eax, 0x8fb5f758
jg 0x100091d3
cmp eax, 0x89e0e128
jg 0x1000940b
cmp eax, 0x83db6f45
jle 0x10009807
cmp eax, 0x83db6f46
je 0x10009d9f
cmp eax, 0x84235d94
je 0x10009dbc
cmp eax, 0x883dceaa
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xee3381e4
mov ecx, 0xc944954e
jmp 0x10008d90
cmp eax, 0x3121966c
jg 0x10009227
cmp eax, 0x2846c3fd
jg 0x10009441
cmp eax, 0x1d2947e4
jle 0x1000983a
cmp eax, 0x1d2947e5
je 0x10009dd9
cmp eax, 0x22f901d5
je 0x10009df6
cmp eax, 0x251f9d0f
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4ee0f187
mov ecx, 0x458cee41
jmp 0x10008d90
cmp eax, 0xee5f38f8
jg 0x10009268
cmp eax, 0xe9301721
jg 0x1000948a
cmp eax, 0xe4de9fc5
jle 0x1000986d
cmp eax, 0xe4de9fc6
je 0x10009e13
cmp eax, 0xe5cc175a
je 0x10009e30
cmp eax, 0xe87ef1b0
jne 0x10008d9d
mov dword [esp + 0xc], esi
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98da5095
mov ecx, 0x564689b5
jmp 0x10008d90
cmp eax, 0x7161fefc
jg 0x100092bc
cmp eax, 0x6e3381ba
jg 0x100094c0
cmp eax, 0x657fda2b
jle 0x1000988d
cmp eax, 0x657fda2c
je 0x10009e4d
cmp eax, 0x67295495
je 0x10009e6a
cmp eax, 0x68815a1b
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f78a7c6
mov ecx, 0x6e3381bb
jmp 0x10008d90
cmp eax, 0xb79c909f
jg 0x100092fd
cmp eax, 0xb1ba41ec
jg 0x10009509
cmp eax, 0xa1f9a63e
jle 0x100098c0
cmp eax, 0xa1f9a63f
je 0x10009e74
cmp eax, 0xab708706
je 0x10009e7e
cmp eax, 0xac7a8e6d
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xee4fcad7
mov ecx, 0xb68e1c9a
jmp 0x10008d90
cmp eax, 0x12400fea
jg 0x10009552
cmp eax, 0xd811d33
jle 0x100098f3
cmp eax, 0xd811d34
je 0x10009e88
cmp eax, 0xdd9d5fb
je 0x10009e92
cmp eax, 0xf850f4c
jne 0x10008d9d
mov eax, 0xea02bde7
jmp 0x10008d9d
cmp eax, 0xdb480ae3
jg 0x1000959b
cmp eax, 0xd5796c30
jle 0x10009926
cmp eax, 0xd5796c31
je 0x10009eaf
cmp eax, 0xd5ebbd6a
je 0x10009eb9
cmp eax, 0xd93938c2
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x89e0e129
mov ecx, 0xb1ba41ed
jmp 0x10008d90
cmp eax, 0x5981f1cb
jg 0x100095f5
cmp eax, 0x4ee0f186
jle 0x10009946
cmp eax, 0x4ee0f187
je 0x10009ed6
cmp eax, 0x50593bbb
je 0x10009ee0
cmp eax, 0x564689b5
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x98da5095
mov ecx, 0x46a3af49
jmp 0x10008d90
cmp eax, 0x9dbba948
jg 0x1000962b
cmp eax, 0x95cea471
jle 0x10009979
cmp eax, 0x95cea472
je 0x10009efd
cmp eax, 0x98da5095
je 0x10009f1a
cmp eax, 0x9a42fd99
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7896a2b7
mov ecx, 0xcafdd376
jmp 0x10008d90
cmp eax, 0x39b04684
jg 0x10009661
cmp eax, 0x346b8f3f
jle 0x100099ac
cmp eax, 0x346b8f40
je 0x10009f24
cmp eax, 0x352e1aae
je 0x10009f41
cmp eax, 0x35f29c73
jne 0x10008d9d
mov eax, 0x50593bbb
jmp 0x10008d9d
cmp eax, 0xf6b3e7e4
jg 0x100096bf
cmp eax, 0xf0974a96
jle 0x100099cc
cmp eax, 0xf0974a97
je 0x10009f5e
cmp eax, 0xf48b60c3
je 0x10009f68
cmp eax, 0xf630428f
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8a6190c1
mov ecx, 0x9ee9da81
jmp 0x10008d90
cmp eax, 0x7896a2b6
jg 0x100096f5
cmp eax, 0x72f3bcdd
jle 0x100099ec
cmp eax, 0x72f3bcde
je 0x10009f85
cmp eax, 0x733f61e0
je 0x10009fa2
cmp eax, 0x736bdfd4
jne 0x10008d9d
mov eax, 0x72f3bcde
jmp 0x10008d9d
cmp eax, 0xbe49e0d8
jle 0x1000972b
cmp eax, 0xc0ac2766
jle 0x10009a1f
cmp eax, 0xc0ac2767
je 0x10009fbf
cmp eax, 0xc4bb53d3
je 0x10009fdc
cmp eax, 0xc4f2d633
jne 0x10008d9d
mov eax, 0x657fda2c
jmp 0x10008d9d
cmp eax, 0xfe78c425
jle 0x10009a52
cmp eax, 0xfe78c426
je 0x10009fe6
cmp eax, 0x2ce08e4
je 0x10009ff0
cmp eax, 0x67a56c7
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a04f760
mov ecx, 0xc9dc35b2
jmp 0x10008d90
cmp eax, 0xcbfd4849
jle 0x10009a85
cmp eax, 0xcbfd484a
je 0x1000a022
cmp eax, 0xcf0b68fd
je 0x1000a03f
cmp eax, 0xd00e3396
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc4f2d633
mov ecx, 0x657fda2c
jmp 0x10008d90
cmp eax, 0x494bc071
jle 0x10009ab8
cmp eax, 0x494bc072
je 0x1000a05c
cmp eax, 0x4ac6a954
je 0x1000a079
cmp eax, 0x4b0dc972
jne 0x10008d9d
mov eax, 0xe87ef1b0
mov esi, 1
jmp 0x10008d9d
cmp eax, 0x8d20b9e9
jle 0x10009ad8
cmp eax, 0x8d20b9ea
je 0x1000a09a
cmp eax, 0x8f6b3188
je 0x1000a0b7
cmp eax, 0x8f78a7c6
jne 0x10008d9d
mov eax, 0x68815a1b
jmp 0x10008d9d
cmp eax, 0x2a51205a
jle 0x10009b03
cmp eax, 0x2a51205b
je 0x1000a0d4
cmp eax, 0x2a6f28f6
je 0x1000a0de
cmp eax, 0x2baa2513
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0df41ed
mov ecx, 0xfa27d1a8
jmp 0x10008d90
cmp eax, 0xea02bde6
jle 0x10009b36
cmp eax, 0xea02bde7
je 0x1000a0fb
cmp eax, 0xee3381e4
je 0x1000a118
cmp eax, 0xee4fcad7
jne 0x10008d9d
mov eax, 0x43a274be
jmp 0x10008d9d
cmp eax, 0x6ef1afb6
jle 0x10009b56
cmp eax, 0x6ef1afb7
je 0x1000a122
cmp eax, 0x6f26e202
je 0x1000a13f
cmp eax, 0x6f80f3f1
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f78a7c6
mov ecx, 0x68815a1b
jmp 0x10008d90
cmp eax, 0xb46ed510
jle 0x10009b89
cmp eax, 0xb46ed511
je 0x1000a15c
cmp eax, 0xb48e4b14
je 0x10008d6b
cmp eax, 0xb68e1c9a
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf48b60c3
mov ecx, 0xa18ee799
jmp 0x10008d90
cmp eax, 0x15e171bb
jle 0x10009bbc
cmp eax, 0x15e171bc
je 0x1000a179
cmp eax, 0x1702c742
je 0x1000a196
cmp eax, 0x174e4b4b
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7f8d55f6
mov ecx, 0x39b04685
jmp 0x10008d90
cmp eax, 0xe24f0488
jle 0x10009bdc
cmp eax, 0xe24f0489
je 0x1000a1a0
cmp eax, 0xe32323c0
je 0x1000a1bd
cmp eax, 0xe3afd3a1
jne 0x10008d9d
push 0xf003f
push dword [esp + 0x2c]
push dword [esp + 8]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [esp + 4], eax
cmp dword [esp + 4], 0
mov eax, 0xbd122268
mov ecx, 0x8348300a
cmove eax, ecx
jmp 0x10008d9d
cmp eax, 0x5d1c5a60
jle 0x10009bfe
cmp eax, 0x5d1c5a61
je 0x1000a1c9
cmp eax, 0x62158032
je 0x1000a1e6
cmp eax, 0x63ad8ea0
jne 0x10008d9d
mov eax, 0x733f61e0
jmp 0x10008d9d
cmp eax, 0x9ee9da80
jle 0x10009c1e
cmp eax, 0x9ee9da81
je 0x1000a203
cmp eax, 0x9f0505f2
je 0x1000a22b
cmp eax, 0xa0df41ed
jne 0x10008d9d
mov eax, 0xfa27d1a8
jmp 0x10008d9d
cmp eax, 0x43a274bd
jle 0x10009c51
cmp eax, 0x43a274be
je 0x1000a235
cmp eax, 0x43e147e1
je 0x1000a252
cmp eax, 0x43e3d27a
jne 0x10008d9d
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
push dword [esp + 4]
call edi
push dword [esp]
call edi
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe24f0489
mov ecx, 0x2a6f28f6
jmp 0x10008d90
cmp eax, 0xf6c5ef85
jle 0x10009c84
cmp eax, 0xf6c5ef86
je 0x1000a25c
cmp eax, 0xf8761d43
je 0x1000a266
cmp eax, 0xf8bfa457
jne 0x10008d9d
mov eax, 0xa18ee799
jmp 0x10008d9d
cmp eax, 0x7d9eb39f
jle 0x10009cb7
cmp eax, 0x7d9eb3a0
je 0x1000a283
cmp eax, 0x7ddfdb7b
je 0x1000a298
cmp eax, 0x7f8d55f6
jne 0x10008d9d
mov eax, 0x174e4b4b
jmp 0x10008d9d
cmp eax, 0xb9790b0c
jle 0x10009cea
cmp eax, 0xb9790b0d
je 0x1000a2b5
cmp eax, 0xbd122268
jne 0x1000a5b4
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe24f0489
mov ecx, 0x43e3d27a
jmp 0x10008d90
cmp eax, 0xf8e3ec74
je 0x1000a2bf
cmp eax, 0xfa27d1a8
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0df41ed
mov ecx, 0xfe78c426
jmp 0x10008d90
cmp eax, 0xc6d51547
je 0x1000a2c9
cmp eax, 0xc944954e
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xee3381e4
mov ecx, 0x6e97ebfc
jmp 0x10008d90
cmp eax, 0x44063793
je 0x1000a2e6
cmp eax, 0x44773cc9
jne 0x10008d9d
push dword [esp]
call edi
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe483ad35
mov ecx, 0xe32323c0
jmp 0x10008d90
cmp eax, 0x80b64509
je 0x1000a303
cmp eax, 0x8348300a
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe483ad35
mov ecx, 0x44773cc9
jmp 0x10008d90
cmp eax, 0x19fc960a
je 0x1000a320
cmp eax, 0x1c83621a
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd00e3396
mov ecx, 0x6f80f3f1
jmp 0x10008d90
cmp eax, 0xe483ad35
je 0x1000a33d
cmp eax, 0xe4d1c91f
jne 0x10008d9d
mov eax, 0x22f901d5
jmp 0x10008d9d
cmp eax, 0x643194c7
je 0x1000a34c
cmp eax, 0x645718f6
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2be6466
mov ecx, 0xd273a56d
jmp 0x10008d90
cmp eax, 0xa0e77b2c
je 0x1000a369
cmp eax, 0xa18ee799
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x491fbdcd
mov ecx, 0xfc312ac7
jmp 0x10008d90
cmp eax, 0x7a63397
je 0x1000a373
cmp eax, 0xca08bda
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa1f9a63f
mov ecx, 0xf8761d43
jmp 0x10008d90
cmp eax, 0xd273a56d
je 0x1000a390
cmp eax, 0xd2be6466
jne 0x10008d9d
mov eax, 0x645718f6
jmp 0x10008d9d
cmp eax, 0x4e1c7242
je 0x1000a3ad
cmp eax, 0x4e5d6946
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf630428f
mov ecx, 0xd5ebbd6a
jmp 0x10008d90
cmp eax, 0x8fb5f759
je 0x1000a3ca
cmp eax, 0x94a4dffc
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe4d1c91f
mov ecx, 0x22f901d5
jmp 0x10008d90
cmp eax, 0x3121966d
je 0x1000a3d4
cmp eax, 0x3124f53d
jne 0x10008d9d
mov eax, 0x80b64509
jmp 0x10008d9d
cmp eax, 0xee5f38f9
je 0x1000a3de
cmp eax, 0xf024e112
jne 0x10008d9d
mov eax, 0x729c4cb6
jmp 0x10008d9d
cmp eax, 0x7161fefd
je 0x1000a3fb
cmp eax, 0x729c4cb6
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf024e112
mov ecx, 0x494bc072
jmp 0x10008d90
cmp eax, 0xbe49e0d9
je 0x1000a418
cmp eax, 0xc04ab19e
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2baa2513
mov ecx, 0xf8bfa457
jmp 0x10008d90
cmp eax, 0xfd30e3e6
je 0x1000a435
cmp eax, 0xfe20a6d0
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2baa2513
mov ecx, 0xc04ab19e
jmp 0x10008d90
cmp eax, 0xca52d60f
je 0x1000a43f
cmp eax, 0xcafdd376
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x63ad8ea0
mov ecx, 0x733f61e0
jmp 0x10008d90
cmp eax, 0x47573cb6
je 0x1000a45e
cmp eax, 0x491fbdcd
jne 0x10008d9d
mov eax, 0xfc312ac7
jmp 0x10008d9d
cmp eax, 0x89e0e129
je 0x1000a468
cmp eax, 0x8a6190c1
jne 0x10008d9d
push 0xf003f
push 0
push 0
call ebx
mov eax, 0x9ee9da81
jmp 0x10008d9d
cmp eax, 0x2846c3fe
je 0x1000a472
cmp eax, 0x29950d0a
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1702c742
mov ecx, 0x43e147e1
jmp 0x10008d90
cmp eax, 0xe9301722
je 0x1000a493
cmp eax, 0xe9bc6d03
jne 0x10008d9d
mov eax, 0xdb480ae4
jmp 0x10008d9d
cmp eax, 0x6e3381bb
je 0x1000a4b0
cmp eax, 0x6e97ebfc
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7896a2b7
mov ecx, 0x9a42fd99
jmp 0x10008d90
cmp eax, 0xb1ba41ed
je 0x1000a4cd
cmp eax, 0xb424ecbf
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5981f1cc
mov ecx, 0x8f6b3188
jmp 0x10008d90
cmp eax, 0x12400feb
je 0x1000a4ea
cmp eax, 0x15aac1d6
jne 0x10008d9d
mov eax, 0x7ddfdb7b
jmp 0x10008d9d
cmp eax, 0xdb480ae4
je 0x1000a507
cmp eax, 0xdfc875ba
jne 0x10008d9d
mov eax, 0x2846c3fe
xor ebp, ebp
jmp 0x10008d9d
cmp eax, 0x5981f1cc
je 0x1000a524
cmp eax, 0x5a04f760
jne 0x10008d9d
mov eax, 0x67a56c7
jmp 0x10008d9d
cmp eax, 0x9dbba949
je 0x1000a541
cmp eax, 0x9e894d5c
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9790b0d
mov ecx, 0x15e171bc
jmp 0x10008d90
cmp eax, 0x39b04685
je 0x1000a54f
cmp eax, 0x3caa9cb1
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3121966d
mov ecx, 0xbc950d51
jmp 0x10008d90
cmp eax, 0xf6b3e7e5
je 0x1000a559
cmp eax, 0xf6b55329
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfb9784e7
mov ecx, 0x8d20b9ea
jmp 0x10008d90
cmp eax, 0x7896a2b7
je 0x1000a58d
cmp eax, 0x7c2ecc27
jne 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a63397
mov ecx, 0x883dceaa
jmp 0x10008d90
cmp eax, 0xb79c90a0
je 0x1000a597
cmp eax, 0xb7f26970
jne 0x10008d9d
cmp byte [esp + 0xb], 0
mov eax, 0x94a4dffc
mov ecx, 0xe3afd3a1
cmovne eax, ecx
jmp 0x10008d9d
mov eax, 0x8d20b9ea
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67295495
mov ecx, 0x5d1c5a61
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca15209f
mov ecx, 0x6f26e202
jmp 0x10008d90
mov eax, 0x1d2947e5
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4ee0f187
mov ecx, 0xdd9d5fb
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf48b60c3
mov ecx, 0x7c2ecc27
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0974a97
mov ecx, 0xe9301722
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd811d34
mov ecx, 0x12400feb
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2be6466
mov ecx, 0x645718f6
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe4d1c91f
mov ecx, 0x6ef1afb7
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x83db6f46
mov ecx, 0x251f9d0f
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa1f9a63f
mov ecx, 0xca08bda
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc4f2d633
mov ecx, 0x8fb5f759
jmp 0x10008d90
mov eax, 0x5d1c5a61
jmp 0x10008d9d
mov eax, 0xca08bda
jmp 0x10008d9d
mov eax, 0xcf0b68fd
jmp 0x10008d9d
mov eax, 0x12400feb
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf630428f
mov ecx, 0x72f3bcde
jmp 0x10008d90
mov eax, 0x95cea472
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf6c5ef86
mov ecx, 0xe5cc175a
jmp 0x10008d90
mov eax, 0x458cee41
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf024e112
mov ecx, 0x729c4cb6
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xab708706
mov ecx, 0xcf0b68fd
jmp 0x10008d90
mov eax, 0x564689b5
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2a51205b
mov ecx, 0x19fc960a
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a04f760
mov ecx, 0x67a56c7
jmp 0x10008d90
mov eax, 0xe9301722
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf850f4c
mov ecx, 0xea02bde7
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7d9eb3a0
mov ecx, 0xf6b3e7e5
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x63ad8ea0
mov ecx, 0xdfc875ba
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x83db6f46
mov ecx, 0x4e1c7242
jmp 0x10008d90
mov eax, 0x43e3d27a
jmp 0x10008d9d
mov eax, 0xc04ab19e
jmp 0x10008d9d
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
push dword [esp + 4]
call edi
push dword [esp]
call edi
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca52d60f
mov ecx, 0xc4bb53d3
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x47573cb6
mov ecx, 0x9e894d5c
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xab708706
mov ecx, 0xee5f38f9
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35f29c73
mov ecx, 0xc0ac2767
jmp 0x10008d90
movzx ecx, byte [esp + 9]
cmp byte [esp + 0xa], 0
mov eax, 0x89e0e129
mov edx, 0xd93938c2
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfb9784e7
mov ecx, 0xc6d51547
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa0e77b2c
mov ecx, 0xb48e4b14
jmp 0x10008d90
mov eax, 0x19fc960a
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9bc6d03
mov ecx, 0xdb480ae4
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf850f4c
mov ecx, 0xfe20a6d0
jmp 0x10008d90
mov eax, 0xc944954e
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf8e3ec74
mov ecx, 0x643194c7
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca15209f
mov ecx, 0xb7f26970
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a63397
mov ecx, 0xfbf30426
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9790b0d
mov ecx, 0x62158032
jmp 0x10008d90
mov eax, 0x29950d0a
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca52d60f
mov ecx, 0x2ce08e4
jmp 0x10008d90
mov eax, 0xe87ef1b0
xor esi, esi
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67295495
mov ecx, 0xb79c90a0
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x47573cb6
mov ecx, 0x84235d94
jmp 0x10008d90
push 0xf003f
push 0
push 0
call ebx
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8a6190c1
mov ecx, 0x736bdfd4
jmp 0x10008d90
mov eax, 0xbe49e0d9
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3124f53d
mov ecx, 0x80b64509
jmp 0x10008d90
mov eax, 0xb424ecbf
jmp 0x10008d9d
mov eax, 0xe5cc175a
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf6c5ef86
mov ecx, 0x44063793
jmp 0x10008d90
push 0xf003f
push 0
push 0
call ebx
mov eax, 0xf6b3e7e5
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x15aac1d6
mov ecx, 0xd5796c31
jmp 0x10008d90
mov eax, 0x15e171bc
jmp 0x10008d9d
mov eax, 0x643194c7
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc9de0837
mov ecx, 0x1d2947e5
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7161fefd
mov ecx, 0x95cea472
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3124f53d
mov ecx, 0xac7a8e6d
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2a51205b
mov ecx, 0xb46ed511
jmp 0x10008d90
push dword [esp]
call edi
mov eax, 0x44773cc9
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf8e3ec74
mov ecx, 0xf6b55329
jmp 0x10008d90
mov eax, 0xb48e4b14
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7f8d55f6
mov ecx, 0x174e4b4b
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc9de0837
mov ecx, 0x346b8f40
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9f0505f2
mov ecx, 0xbe49e0d9
jmp 0x10008d90
mov eax, 0x6f80f3f1
jmp 0x10008d9d
mov eax, 0x3caa9cb1
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7161fefd
mov ecx, 0x352e1aae
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x15aac1d6
mov ecx, 0x7ddfdb7b
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9f0505f2
mov ecx, 0xe4de9fc6
jmp 0x10008d90
mov eax, 0x4e1c7242
jmp 0x10008d9d
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_DeleteService]
push dword [esp + 4]
call edi
push dword [esp]
call edi
mov eax, 0x2ce08e4
jmp 0x10008d9d
mov eax, 0x9e894d5c
jmp 0x10008d9d
mov eax, 0xd93938c2
jmp 0x10008d9d
mov dword [esp + 0x10], ebp
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3121966d
mov ecx, 0x3caa9cb1
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0974a97
mov ecx, 0x1c83621a
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd00e3396
mov ecx, 0xfd30e3e6
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35f29c73
mov ecx, 0x50593bbb
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd811d34
mov ecx, 0x9dbba949
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe9bc6d03
mov ecx, 0x4b0dc972
jmp 0x10008d90
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1702c742
mov ecx, 0x29950d0a
jmp 0x10008d90
mov eax, 0x2846c3fe
mov ebp, dword [esp + 0xc]
jmp 0x10008d9d
mov eax, 0xfbf30426
jmp 0x10008d9d
push 0xf003f
push 0
push 0
call ebx
mov dword [esp], eax
cmp dword [esp], 0
setne byte [esp + 0xb]
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7d9eb3a0
mov ecx, 0x4e5d6946
jmp 0x10008d90
mov eax, 0x9a42fd99
jmp 0x10008d9d
mov eax, dword [0x1001b8b0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xee4fcad7
mov ecx, 0x43a274be
jmp 0x10008d90
cmp eax, 0xbc950d51
jne 0x10008d9d
mov eax, dword [esp + 0x10]
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret