Function at 0x180001993
Capabilities:
Query service status

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x58], rcx
mov eax, dword [0x18001ac4c]
mov ecx, dword [0x18001ac48]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 0x11]
cmp ecx, 0xa
setl byte [rbp - 0x12]
mov eax, 0xb2ec7a5f
xorps xmm6, xmm6
mov r12d, 0x88dcc145
mov r13d, 0x4ca3137f
mov ebx, 0xc3c2bbbd
mov esi, 0xa110a114
cmp eax, 0x203bc6b4
jle 0x180001a3e
cmp eax, 0x6099d153
jg 0x180001a93
cmp eax, 0x42d5aa8d
jle 0x180001b18
cmp eax, 0x4ca3137e
jg 0x180001c44
cmp eax, 0x42d5aa8e
je 0x180001e0f
cmp eax, 0x4776dfe6
je 0x180001e2d
cmp eax, 0x4c3e1a0c
jne 0x1800019ee
mov rax, qword [rbp - 0x50]
mov eax, 0x4ca3137f
jmp 0x1800019ee
cmp eax, 0xc3c2bbbc
jle 0x180001ad7
cmp eax, 0xe9639ee4
jle 0x180001b6a
cmp eax, 0x6b802e4
jg 0x180001c83
cmp eax, 0xe9639ee5
je 0x180001e37
cmp eax, 0xf962d46b
je 0x180001e5d
cmp eax, 0xff4b6286
jne 0x1800019ee
cmp qword [rbp - 0x48], 0
sete byte [rbp - 0x13]
mov eax, 0xb68b4f1a
jmp 0x1800019ee
cmp eax, 0x70008413
jg 0x180001ba4
cmp eax, 0x6b802c54
jg 0x180001cc2
cmp eax, 0x6099d154
je 0x180001e83
cmp eax, 0x61abdec6
je 0x180001e93
cmp eax, 0x6a2a8a2f
jne 0x1800019ee
mov eax, 0xa92d5a5f
xor r15d, r15d
jmp 0x1800019ee
cmp eax, 0xa92d5a5e
jg 0x180001c02
cmp eax, 0x94b86996
jle 0x180001d00
cmp eax, 0x94b86997
je 0x180001ebb
cmp eax, 0x9e8eb482
je 0x180001ed9
cmp eax, 0xa110a114
jne 0x1800019ee
mov eax, 0x6ceee96f
jmp 0x1800019ee
cmp eax, 0x23750e02
jle 0x180001d34
cmp eax, 0x23750e03
je 0x180001f03
cmp eax, 0x2387277f
je 0x180001f0f
cmp eax, 0x2727ad40
jne 0x1800019ee
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
add rsp, 0x20
mov qword [rbp - 0x40], rax
mov eax, 0x4df815f5
jmp 0x1800019ee
cmp eax, 0xcc3cfb12
jle 0x180001d68
cmp eax, 0xcc3cfb13
je 0x180001f2d
cmp eax, 0xcdc1d7ff
je 0x180001f37
cmp eax, 0xce3ca70a
jne 0x1800019ee
mov eax, 0xa92d5a5f
mov r15d, dword [rbp - 0x34]
jmp 0x1800019ee
cmp eax, 0x78084990
jle 0x180001d8b
cmp eax, 0x78084991
je 0x180001f69
cmp eax, 0x7d9dd0b5
je 0x180001f73
cmp eax, 0x7dc789ec
jne 0x1800019ee
mov rax, qword [rbp - 0x28]
add rax, 4
mov qword [rbp - 0x50], rax
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x879161a4
cmove eax, esi
cmp dword [0x18001ac48], 0xa
cmovl eax, esi
jmp 0x1800019ee
cmp eax, 0xb346f587
jle 0x180001ddb
cmp eax, 0xb346f588
je 0x180001f89
cmp eax, 0xb4de991a
je 0x180001f96
cmp eax, 0xb68b4f1a
jne 0x1800019ee
cmp byte [rbp - 0x13], 0
mov eax, 0x6be7f23c
mov ecx, 0x6a2a8a2f
cmovne eax, ecx
jmp 0x1800019ee
cmp eax, 0x4ca3137f
je 0x180001fa0
cmp eax, 0x4df815f5
je 0x180001fc9
cmp eax, 0x58eccb60
jne 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x879161a4
mov ecx, 0x7dc789ec
jmp 0x18000205e
cmp eax, 0x6b802e5
je 0x180001fe0
cmp eax, 0xef48dc4
je 0x180001fea
cmp eax, 0x1e24d9ae
jne 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x78084991
mov ecx, 0xce3ca70a
jmp 0x18000205e
cmp eax, 0x6be7f23c
je 0x180001ff4
cmp eax, 0x6ceee96f
jne 0x180002070
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4c3e1a0c
cmove eax, r13d
cmp dword [0x18001ac48], 0xa
cmovl eax, r13d
jmp 0x1800019ee
cmp eax, 0x879161a4
je 0x180002006
cmp eax, 0x88dcc145
jne 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef48dc4
mov ecx, 0x23750e03
jmp 0x18000205e
cmp eax, 0x203bc6b5
je 0x180002014
cmp eax, 0x20d1a1be
jne 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb4de991a
mov ecx, 0x2387277f
jmp 0x18000205e
cmp eax, 0xc3c2bbbd
je 0x180002021
cmp eax, 0xc8bd3531
jne 0x1800019ee
mov eax, 0x6b802c55
mov edi, dword [rbp - 0x38]
jmp 0x1800019ee
cmp eax, 0x70008414
je 0x18000202b
cmp eax, 0x762e4ac0
jne 0x1800019ee
mov eax, 0x20
call fcn.180003a20
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcc3cfb13
cmove eax, ebx
cmp dword [0x18001ac48], 0xa
cmovl eax, ebx
jmp 0x1800019ee
cmp eax, 0xa92d5a5f
je 0x180002041
cmp eax, 0xb2ec7a5f
jne 0x1800019ee
mov cl, byte [rbp - 0x11]
cmp byte [rbp - 0x12], 0
mov eax, 0xcc3cfb13
mov edx, 0x762e4ac0
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x203bc6b5
mov ecx, 0xe9639ee5
jmp 0x18000205e
mov eax, 0x20d1a1be
jmp 0x1800019ee
cmp dword [rbp - 0x1c], 0
setne byte [rbp - 0x14]
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x203bc6b5
mov ecx, 0x70008414
jmp 0x18000205e
mov dword [rbp - 0x34], r14d
mov rax, qword [rbp - 0x30]
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x78084991
mov ecx, 0x1e24d9ae
jmp 0x18000205e
mov eax, 0xf962d46b
mov r14d, 1
jmp 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef48dc4
cmove eax, r12d
cmp dword [0x18001ac48], 0xa
cmovl eax, r12d
jmp 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6b802e5
mov ecx, 0xc8bd3531
jmp 0x18000205e
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
mov rdx, qword [rbp - 0x58]
mov r8d, 4
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
add rsp, 0x20
mov qword [rbp - 0x48], rax
mov eax, 0xff4b6286
jmp 0x1800019ee
mov eax, 0x6b802c55
xor edi, edi
jmp 0x1800019ee
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb4de991a
mov ecx, 0x7d9dd0b5
jmp 0x18000205e
mov eax, 0x762e4ac0
jmp 0x1800019ee
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x30]
movups xmmword [rax + 0xc], xmm6
movups xmmword [rax], xmm6
mov rdx, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x48]
sub rsp, 0x20
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
add rsp, 0x20
mov dword [rbp - 0x1c], eax
mov eax, 0x42d5aa8e
jmp 0x1800019ee
mov eax, 0x1e24d9ae
jmp 0x1800019ee
cmp byte [rbp - 0x15], 0
mov eax, 0xb346f588
mov ecx, 0x6099d154
cmovne eax, ecx
jmp 0x1800019ee
mov eax, 0xf962d46b
xor r14d, r14d
jmp 0x1800019ee
mov eax, 0x2387277f
jmp 0x1800019ee
mov rax, qword [rbp - 0x50]
cmp dword [rax], 4
sete byte [rbp - 0x15]
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4c3e1a0c
mov ecx, 0x4776dfe6
jmp 0x18000205e
cmp qword [rbp - 0x40], 0
mov eax, 0x9e8eb482
mov ecx, 0x61abdec6
cmove eax, ecx
jmp 0x1800019ee
mov eax, 0x94b86997
jmp 0x1800019ee
mov eax, 0x88dcc145
jmp 0x1800019ee
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x30], rax
mov eax, 0xcdc1d7ff
jmp 0x1800019ee
mov rax, qword [rbp - 0x28]
mov eax, 0x7dc789ec
jmp 0x1800019ee
mov eax, dword [rbp - 0x1c]
mov eax, 0xe9639ee5
jmp 0x1800019ee
mov eax, 0x2727ad40
jmp 0x1800019ee
cmp byte [rbp - 0x14], 0
mov eax, 0xb346f588
mov ecx, 0x58eccb60
cmovne eax, ecx
jmp 0x1800019ee
mov dword [rbp - 0x38], r15d
mov eax, dword [0x18001ac4c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6b802e5
mov ecx, 0x94b86997
cmove eax, ecx
cmp dword [0x18001ac48], 0xa
cmovl eax, ecx
jmp 0x1800019ee
cmp eax, 0x6b802c55
jne 0x1800019ee
mov eax, edi
movaps xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret