Function at 0x140006f60
Capabilities:
Delete service
Query service status
Stop service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x1402f8c60]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r14, rcx
mov dword [rbp - 0x11], 0x160
lea r8, str.RemoveService
mov dword [rbp + 7], 3
lea r12, str.c:users_scddocumentsmyworkproject__dynabooksystemdriverdsd_for_tos6208_v6dsd_branch_dev_6.01.0029.xxcentennial_rs5dynabookecoserviceecoserver_toshibasystemmodules.cpp
mov qword [rbp - 0x21], r8
lea r13, str.__RemoveService_
mov qword [rbp - 0x19], r12
lea rbx, [0x1402a214c]
mov qword [rbp - 9], r13
lea rcx, [rbp - 0x19]
mov qword [rbp - 1], rbx
lea rdx, str.ENTER__s
call fcn.140008d50
xor eax, eax
xor edx, edx
xor ecx, ecx
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x1f], rax
lea r8d, [rax + 1]
mov dword [rbp + 0x27], eax
lea esi, [rax + 0xa]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov r15, rax
test rax, rax
jne 0x14000703e
mov qword [rbp - 0x31], rbx
lea rdx, str.Error_Code:_0x_x
xor ebx, ebx
mov qword [rbp - 0x49], r12
mov edi, 0x80004003
mov dword [rbp - 0x29], ebx
mov r8d, edi
mov dword [rbp - 0x41], 0x168
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x39], r13
call fcn.140008d50
jmp 0x14000726b
mov r8d, 0x10024
mov rdx, r14
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x14000708d
mov qword [rbp - 0x31], rbx
lea rdx, str.Error_Code:_0x_x
xor ebx, ebx
mov qword [rbp - 0x49], r12
mov edi, 0x80004003
mov dword [rbp - 0x29], ebx
mov r8d, edi
mov dword [rbp - 0x41], 0x16b
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x39], r13
call fcn.140008d50
jmp 0x140007262
lea rdx, [rbp + 0xf]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
xor ebx, ebx
cmp dword [rbp + 0x13], 1
je 0x1400071f1
lea r8, [rbp + 0xf]
mov rcx, rdi
lea edx, [rbx + 1]
call qword [sym.imp.ADVAPI32.dll_ControlService]
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r13
test eax, eax
je 0x1400071c1
lea rax, [0x1402a214c]
mov dword [rbp - 0x41], 0x172
mov r8, r14
mov qword [rbp - 0x31], rax
lea rdx, str.Stopping__s
mov dword [rbp - 0x29], 3
lea rcx, [rbp - 0x49]
call fcn.140008d50
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xf]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x14000716b
nop
mov eax, dword [rbp + 0x13]
cmp eax, 3
jne 0x14000716e
lea rax, [0x1402a214c]
mov qword [rbp - 0x49], r12
lea rdx, [0x1402a56b8]
mov qword [rbp - 0x31], rax
lea rcx, [rbp - 0x49]
mov dword [rbp - 0x41], 0x179
mov qword [rbp - 0x39], r13
mov dword [rbp - 0x29], 3
call fcn.140008d50
test esi, esi
jle 0x14000716b
mov ecx, 0x3e8
dec esi
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0xf]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x140007110
mov eax, dword [rbp + 0x13]
mov qword [rbp - 0x49], r12
lea rsi, [0x1402a214c]
mov qword [rbp - 0x31], rsi
mov r8, r14
mov qword [rbp - 0x39], r13
lea rcx, [rbp - 0x49]
cmp eax, 1
jne 0x1400071a9
lea rdx, str._s_stopped
mov dword [rbp - 0x41], 0x186
mov dword [rbp - 0x29], 3
call fcn.140008d50
jmp 0x1400071f8
lea rdx, str._s_failed_to_stop
mov dword [rbp - 0x41], 0x188
mov dword [rbp - 0x29], ebx
call fcn.140008d50
jmp 0x1400071f8
lea rsi, [0x1402a214c]
mov dword [rbp - 0x41], 0x18c
mov qword [rbp - 0x31], rsi
mov dword [rbp - 0x29], ebx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.ControlService_error:__d
lea rcx, [rbp - 0x49]
call fcn.140008d50
jmp 0x1400071f8
lea rsi, [0x1402a214c]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_DeleteService]
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r13
mov qword [rbp - 0x31], rsi
test eax, eax
je 0x140007234
mov r8, r14
mov dword [rbp - 0x41], 0x193
lea rdx, str._s_removed
mov dword [rbp - 0x29], 3
lea rcx, [rbp - 0x49]
call fcn.140008d50
jmp 0x140007257
mov dword [rbp - 0x41], 0x197
mov dword [rbp - 0x29], ebx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.DeleteService_error:__d
lea rcx, [rbp - 0x49]
call fcn.140008d50
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edi, ebx
mov rcx, r15
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov r8, qword [rbp - 0x21]
lea rdx, str.LEAVE__s
lea rcx, [rbp - 0x19]
call fcn.140008d50
mov eax, edi
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140072680
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret