Function at 0x140004bb0
Capabilities:
Delete service
Print debug messages
Stop service

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1400ba060]
xor rax, rsp
mov qword [rbp + 0x88], rax
xor esi, esi
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x58], esi
lea r8, [rsp + 0x58]
call fcn.140005ec0
cmp qword [0x1400bacf8], rsi
je 0x140005b8a
cmp qword [0x1400bad18], rsi
je 0x140005b8a
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
cmp qword [0x1400bacb8], rsi
jne 0x140004c30
cmp eax, 2
jne 0x140005b8a
movabs rax, 0x7ffffffffffffffe
lea r12, [0x1400bad28]
mov rcx, qword [0x1400bac98]
test rcx, rcx
jne 0x140004c77
lea r13, [0x1400bace8]
mov rdx, r13
lea rcx, [rbp - 0x80]
call fcn.140001c20
mov rbx, rax
mov r14d, 1
cmp r12, rax
je 0x140004dea
jmp 0x140004d67
sub rax, rcx
cmp rax, 1
jb 0x140005bc7
lea r9, [0x1400bac88]
cmp qword [0x1400baca0], 8
cmovae r9, qword [0x1400bac88]
mov qword [rsp + 0x30], 1
lea rax, [0x1400a742c]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x60]
call fcn.140008b80
nop
mov dword [rsp + 0x50], 0x102
mov rdi, qword [0x1400bacf8]
lea r13, [0x1400bace8]
mov r9, r13
cmp qword [0x1400bad00], 8
cmovae r9, qword [0x1400bace8]
mov r14, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, r14
cmp rdi, rax
ja 0x140004d2e
lea rax, [r14 + rdi]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x60]
lea rcx, [rbx + r14*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064710
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
lea rax, [rbp - 0x60]
jmp 0x140004d3f
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.1400089c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea rbx, [rbp + 0x20]
mov r14d, 0x306
mov rdx, qword [0x1400bad40]
cmp rdx, 8
jb 0x140004dad
mov rcx, qword [0x1400bad28]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140004da8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005bcd
mov rcx, r8
call fcn.1400623ac
mov qword [0x1400bad38], rsi
mov qword [0x1400bad40], 7
mov word [0x1400bad28], si
movups xmm0, xmmword [rbx]
movups xmmword [0x1400bad28], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x1400bad38], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
test r14b, 4
je 0x140004e35
and r14d, 0xfffffffb
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140004e35
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bcd
call fcn.1400623ac
nop
test r14b, 2
je 0x140004e8f
and r14d, 0xfffffffd
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140004e7f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bd3
call fcn.1400623ac
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
test r14b, 1
je 0x140004ed9
and r14d, 0xfffffffe
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140004ed9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ed4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bd9
call fcn.1400623ac
mov r8d, 0x1a
lea rdx, [0x1400a7430]
lea rcx, [0x1400bacc8]
call fcn.140001db0
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], si
mov r8d, 0x11
lea rdx, str.PROD_REG_PATH
lea rcx, [rbp - 0x80]
call fcn.140001db0
nop
lea r9, [rbp - 0x80]
mov rbx, qword [rbp - 0x80]
mov r15, qword [rbp - 0x68]
cmp r15, 8
cmovae r9, rbx
lea rcx, [0x1400bacc8]
cmp qword [0x1400bace0], 8
cmovae rcx, qword [0x1400bacc8]
mov rdi, qword [rbp - 0x70]
mov qword [rsp + 0x20], rdi
mov rdx, qword [0x1400bacd8]
call fcn.140011370
mov rdx, rax
cmp rax, 0xffffffffffffffff
je 0x140004f92
mov rax, qword [0x1400bad38]
cmp qword [0x1400bad40], 8
cmovae r12, qword [0x1400bad28]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8, rdi
call fcn.140034220
xor dil, dil
jmp 0x140004f95
mov dil, 1
cmp r15, 8
jb 0x140004fd0
lea rdx, [r15*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004fc8
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bc1
mov rcx, rbx
call fcn.1400623ac
lea r15, [0x1400a7230]
test dil, dil
je 0x140004fee
xor r8d, r8d
mov rdx, r15
lea rcx, [0x1400bacc8]
call fcn.140001db0
lea rdx, [0x1400bacc8]
lea rcx, [rbp + 0x60]
call fcn.140001c20
mov rdx, rax
call fcn.140003c30
test al, al
jne 0x140005178
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov r8d, 0x36
lea rdx, str.Product_registry_entry_is_missing._Trying_to_create_it
lea rcx, [rbp - 0x80]
call fcn.140003810
lea rcx, [rbp - 0x80]
call fcn.1400025a0
lea rdx, [0x1400bacc8]
lea rcx, [rbp + 0x60]
call fcn.140001c20
mov rbx, rax
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14000505d
mov rdx, qword [rax]
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0xf003f
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x14000511f
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x1400050d7
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400050d2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005be5
mov rcx, r8
call fcn.1400623ac
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 0xf
mov r8d, 0x27
lea rdx, str.Unable_to_create_product_registry_entry
lea rcx, [rbp - 0x80]
call fcn.140003810
lea rcx, [rbp - 0x80]
call fcn.1400027c0
mov eax, 0xfffffffe
jmp 0x140005b91
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x140005169
mov rcx, qword [rbx]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140005164
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005be5
mov rcx, r8
call fcn.1400623ac
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
call fcn.140005c40
mov rcx, qword [0x1400bacf8]
movabs rax, 0x7ffffffffffffffe
sub rax, rcx
cmp rax, 4
jb 0x140005bdf
cmp qword [0x1400bad00], 8
cmovae r13, qword [0x1400bace8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], 4
lea r9, str._pn:
lea rcx, [rbp + 0x40]
call fcn.140008b80
bts r14d, 0xa
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x14000521c
lea rdi, [rcx + 6]
mov qword [rbp + 0x50], rdi
lea rbx, [rbp + 0x40]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x40]
lea rcx, [rbx + rcx*2]
mov r8d, 0xc
lea rdx, str.__lpn:
call fcn.140064710
mov word [rbx + rdi*2], si
lea rax, [rbp + 0x40]
jmp 0x14000523a
mov qword [rsp + 0x20], 6
lea r9, str.__lpn:
mov edx, 6
lea rcx, [rbp + 0x40]
call fcn.1400089c0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts r14d, 0xb
mov rdi, qword [0x1400bad18]
lea r9, [0x1400bad08]
cmp qword [0x1400bad20], 8
cmovae r9, qword [0x1400bad08]
mov r12, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, r12
cmp rdi, rax
ja 0x1400052cd
lea rax, [r12 + rdi]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x60]
lea rcx, [rbx + r12*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064710
lea rax, [rdi + r12]
mov word [rbx + rax*2], si
lea rax, [rbp - 0x60]
jmp 0x1400052de
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x60]
call fcn.1400089c0
mov qword [rbp], rsi
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts r14d, 0xc
mov rcx, qword [rbp + 0x10]
mov rdx, qword [rbp + 0x18]
mov rax, rdx
sub rax, rcx
cmp rax, 6
jb 0x140005356
lea rdi, [rcx + 6]
mov qword [rbp + 0x10], rdi
lea rbx, [rbp]
cmp rdx, 8
cmovae rbx, qword [rbp]
lea rcx, [rbx + rcx*2]
mov r8d, 0xc
lea rdx, str.__url:
call fcn.140064710
mov word [rbx + rdi*2], si
lea rax, [rbp]
jmp 0x140005374
mov qword [rsp + 0x20], 6
lea r9, str.__url:
mov edx, 6
lea rcx, [rbp]
call fcn.1400089c0
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts r14d, 0xd
mov rdi, qword [0x1400bacb8]
lea r9, [0x1400baca8]
cmp qword [0x1400bacc0], 8
cmovae r9, qword [0x1400baca8]
mov r12, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, r12
cmp rdi, rax
ja 0x140005407
lea rax, [rdi + r12]
mov qword [rbp - 0x10], rax
lea rbx, [rbp - 0x20]
cmp rcx, 8
cmovae rbx, qword [rbp - 0x20]
lea rcx, [rbx + r12*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.140064710
lea rax, [rdi + r12]
mov word [rbx + rax*2], si
lea rax, [rbp - 0x20]
jmp 0x140005418
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400089c0
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x28], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
bts r14d, 0xe
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x14000548c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005487
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005beb
call fcn.1400623ac
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], si
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x1400054dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400054d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bf1
call fcn.1400623ac
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], 7
mov word [rbp], si
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000552c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005527
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bf7
call fcn.1400623ac
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14000557c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005577
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bfd
call fcn.1400623ac
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], si
mov rax, qword [0x1400bac98]
test rax, rax
jne 0x1400055c5
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], si
xor r8d, r8d
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140001db0
lea r9, [rbp - 0x80]
or r14d, 8
jmp 0x140005623
movabs rcx, 0x7ffffffffffffffe
sub rcx, rax
cmp rcx, 5
jb 0x140005c03
cmp qword [0x1400baca0], 8
lea rcx, [0x1400bac88]
cmovae rcx, qword [0x1400bac88]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 5
lea r9, str.__bn:
lea rcx, [rbp + 0x20]
call fcn.140008b80
bts r14d, 0xf
lea r9, [rbp + 0x20]
or r14d, 0x10
mov dword [rsp + 0x50], r14d
mov rdx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x140005636
mov r9, qword [r9]
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140005674
lea rdi, [rdx + rcx]
mov qword [rbp - 0x30], rdi
lea rbx, [rbp - 0x40]
cmp r8, 8
cmovae rbx, qword [rbp - 0x40]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.140064710
mov word [rbx + rdi*2], si
jmp 0x140005683
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x40]
call fcn.1400089c0
nop
test r14b, 0x10
je 0x1400056d3
and r14d, 0xffffffef
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x1400056d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400056cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c09
call fcn.1400623ac
nop
test r14b, 8
je 0x140005722
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140005722
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000571d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c0f
call fcn.1400623ac
cmp dword [0x1400be55c], 0
je 0x14000575a
lea rcx, [rbp + 0x60]
call fcn.140004ac0
nop
or r14d, 0x20
mov dword [rsp + 0x50], r14d
mov r8, rax
lea rdx, str.__dt:
lea rcx, [rbp + 0x20]
call fcn.1400087b0
mov r9, rax
or r14d, 0x40
jmp 0x140005786
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], si
xor r8d, r8d
mov rdx, r15
lea rcx, [rbp - 0x80]
call fcn.140001db0
lea r9, [rbp - 0x80]
bts r14d, 7
mov dword [rsp + 0x50], r14d
mov rdx, qword [r9 + 0x10]
cmp qword [r9 + 0x18], 8
jb 0x140005799
mov r9, qword [r9]
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x1400057d7
lea rdi, [rdx + rcx]
mov qword [rbp - 0x30], rdi
lea rbx, [rbp - 0x40]
cmp r8, 8
cmovae rbx, qword [rbp - 0x40]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call fcn.140064710
mov word [rbx + rdi*2], si
jmp 0x1400057e6
mov qword [rsp + 0x20], rdx
lea rcx, [rbp - 0x40]
call fcn.1400089c0
nop
test r14b, r14b
jns 0x140005831
btr r14d, 7
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140005831
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000582b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c15
call fcn.1400623ac
nop
test r14b, 0x40
je 0x14000588b
and r14d, 0xffffffbf
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14000587b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005876
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c1b
call fcn.1400623ac
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], si
test r14b, 0x20
je 0x1400058d1
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x1400058d1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c21
call fcn.1400623ac
lea rax, str.__dev
cmp byte [0x1400be55b], 0
cmovne r15, rax
mov rdx, 0xffffffffffffffff
nop word [rax + rax]
inc rdx
cmp word [r15 + rdx*2], 0
jne 0x1400058f0
mov rcx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x28]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x140005939
lea rdi, [rdx + rcx]
mov qword [rbp - 0x30], rdi
lea rbx, [rbp - 0x40]
cmp r8, 8
cmovae rbx, qword [rbp - 0x40]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r15
call fcn.140064710
mov word [rbx + rdi*2], si
jmp 0x14000594a
mov qword [rsp + 0x20], rdx
mov r9, r15
lea rcx, [rbp - 0x40]
call fcn.1400089c0
mov eax, dword [rsp + 0x58]
cmp eax, 1
jne 0x14000596f
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x60]
call fcn.140001c20
mov rcx, rax
call fcn.1400071c0
mov esi, eax
jmp 0x140005b4a
cmp eax, 2
jne 0x140005a8d
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
lea r8d, [rax + 0x15]
lea rdx, str.Uninstalling_service...
lea rcx, [rbp - 0x80]
call fcn.140001db0
cmp byte [0x1400be55a], 0
je 0x1400059b9
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x1400059f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c27
call fcn.1400623ac
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rbx, rax
test rax, rax
jne 0x140005a19
lea esi, [rax - 5]
jmp 0x140005b4a
mov r8d, 0xf01ff
lea rdx, str.rsSyncSvc
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x140005a48
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea esi, [rdi - 8]
jmp 0x140005b4a
lea r8, [rbp + 0x60]
mov edx, 1
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x140005a63
lea esi, [rax - 9]
jmp 0x140005a76
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_DeleteService]
mov ecx, 0xfffffff6
test eax, eax
cmove esi, ecx
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140005b4a
lea rax, str.rsSyncSvc
mov qword [rsp + 0x60], rax
lea rax, [0x1400075b0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
lea rcx, [rsp + 0x60]
call qword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x140005ac6
lea esi, [rax - 3]
jmp 0x140005b4a
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], 7
mov r8d, 0x18
lea rdx, str.Sync_Service:_Main:_Exit
lea rcx, [rbp - 0x80]
call fcn.140001db0
cmp byte [0x1400be55a], 0
je 0x140005b09
lea rcx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140005b4a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005c2d
call fcn.1400623ac
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140005b86
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005bc1
call fcn.1400623ac
mov eax, esi
jmp 0x140005b91
mov rax, 0xffffffffffffffff
mov rcx, qword [rbp + 0x88]
xor rcx, rsp
call fcn.140062280
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14006e6a8
int3
call fcn.140001480
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
int3
call fcn.140001480
int3
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
int3
call fcn.140001480
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
nop
call fcn.14006e6a8
int3
call fcn.14006e6a8
int3
call fcn.14006e6a8
int3