Function at 0x140002d50
Capabilities:
Modify service

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x278
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
mov rax, qword [0x140036138]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov rcx, rdx
call fcn.1400148ac
cmp rax, 3
jb 0x140002dee
mov r14, rax
lea rdx, str.maintenanceservice_tmp.exe
mov rcx, rbx
call fcn.14000c91c
test rax, rax
jne 0x140002dee
cmp word [rbx], 0x22
jne 0x140002dee
cmp word [rbx + r14*2 - 2], 0x22
jne 0x140002dee
mov eax, dword [0x140037038]
mov ecx, dword [0x140037098]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000311b
lea rcx, [0x140036e28]
lea rdx, str.The_MozillaMaintenance_service_path_is_correct.
call fcn.1400084d0
mov dword [rdi], 0
jmp 0x140002f0c
mov eax, dword [0x140037038]
mov ecx, dword [0x140037098]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140002fd1
lea rcx, [0x140036e28]
lea rdx, str.The_MozillaMaintenance_path_is_NOT_correct._It_was:__ls
mov r8, rbx
call fcn.1400084d0
mov dword [rdi], 1
lea rdi, [rsp + 0x60]
mov r8d, 0x20a
mov rcx, rdi
xor edx, edx
call fcn.14000c660
mov r8d, 0x104
mov rcx, rdi
mov rdx, rbx
call fcn.140014d74
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
test eax, eax
je 0x140002f16
lea rdx, [0x14002f7f8]
lea rdi, [rsp + 0x60]
mov rcx, rdi
call fcn.140009d70
test eax, eax
je 0x140002f51
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_PathQuoteSpacesW]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rdi
mov rcx, rsi
mov edx, 0xffffffff
mov r8d, 0xffffffff
mov r9d, 0xffffffff
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov ecx, dword [0x140037038]
mov edx, dword [0x140037098]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov edx, dword [rdx + 4]
test eax, eax
je 0x140002f8c
cmp ecx, edx
jg 0x140003055
lea rcx, [0x140036e28]
lea rdx, str.Fixed_service_path_to:__ls.
lea r8, [rsp + 0x60]
call fcn.1400084d0
mov esi, 1
jmp 0x140002fb2
mov eax, dword [0x140037038]
mov ecx, dword [0x140037098]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140003013
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140036e28]
lea rdx, str.Couldnt_remove_file_spec.____lu_
jmp 0x140002fa8
mov eax, dword [0x140037038]
mov ecx, dword [0x140037098]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x140003097
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140036e28]
lea rdx, str.Couldnt_append_file_spec.____lu_
jmp 0x140002fa8
cmp ecx, edx
jg 0x1400030d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [0x140036e28]
lea rdx, str.Could_not_fix_service_path.____lu_
mov r8d, eax
call fcn.1400086f0
xor esi, esi
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.14000ac40
mov eax, esi
add rsp, 0x278
pop rbx
pop rdi
pop rsi
pop r14
ret
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002e13
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002e13
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002f3b
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002f3b
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002ef4
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002ef4
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002f76
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002f76
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002f94
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002f94
lea rcx, [0x140037038]
call fcn.14000aa30
cmp dword [0x140037038], 0xffffffff
jne 0x140002dd0
lea rcx, [0x140036e28]
call fcn.140008420
lea rcx, [0x140002160]
call fcn.14000ac60
lea rcx, [0x140037038]
call fcn.14000aa98
jmp 0x140002dd0