Function at 0x43b990
Capabilities:
Delete service

Disassembly:
mov eax, 0x1068
call fcn.005a46e0
sub rsp, rax
mov rax, qword [0x006443a8]
xor rax, rsp
mov qword [rsp + 0x1040], rax
mov qword [rsp + 0x1078], rbx
mov qword [rsp + 0x1080], rbp
mov qword [rsp + 0x1088], rsi
mov qword [rsp + 0x1060], rdi
mov qword [rsp + 0x1058], r12
mov r12, rcx
xor edi, edi
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
mov qword [rsp + 0x1050], r13
mov ebp, edi
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
lea esi, [rdi + 1]
test rax, rax
mov rbx, rax
je 0x43bd7c
lea r13, [r12 + 0x68]
mov r8d, esi
mov rcx, rax
mov rdx, r13
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
je 0x43ba29
mov rcx, rax
mov ebp, esi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebp, ebp
je 0x43bd7c
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test rax, rax
mov r12, rax
jne 0x43bb16
lea rcx, [0x00648260]
xor edx, edx
call fcn.0053cb10
test rax, rax
je 0x43baad
nop
nop
test edi, edi
jne 0x43bafc
lea r8, [rsp + 0x40]
mov r9d, 0x400
mov edx, 0xd80a
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringW]
lea rcx, [0x00648260]
mov edx, esi
mov edi, eax
call fcn.0053cb10
add esi, 1
test rax, rax
jne 0x43ba70
test edi, edi
jne 0x43bafc
lea r8, str.Could_not_open_Service_Manager
lea rcx, [rsp + 0x40]
mov edx, 0x400
call fcn.0056ad50
test eax, eax
je 0x43bafc
cmp eax, 0xc
je 0x43baf1
cmp eax, 0x16
je 0x43bae6
cmp eax, 0x22
je 0x43bae6
cmp eax, 0x50
je 0x43bafc
mov ecx, 0x80004005
call fcn.00401020
int3
mov ecx, 0x80070057
call fcn.00401020
int3
mov ecx, 0x8007000e
call fcn.00401020
int3
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov r8, r13
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x43bd7e
mov r8d, 0x10020
mov rdx, r13
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
mov rbp, rax
jne 0x43bbe4
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea rcx, [0x00648260]
xor edx, edx
call fcn.0053cb10
test rax, rax
je 0x43bb8d
test edi, edi
jne 0x43bafc
lea r8, [rsp + 0x40]
mov r9d, 0x400
mov edx, 0xd80c
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringW]
lea rcx, [0x00648260]
mov edx, esi
mov edi, eax
call fcn.0053cb10
add esi, 1
test rax, rax
jne 0x43bb50
test edi, edi
jne 0x43bafc
lea r8, str.Could_not_open_service
lea rcx, [rsp + 0x40]
mov edx, 0x400
call fcn.0056ad50
test eax, eax
je 0x43bafc
cmp eax, 0xc
je 0x43bbd9
cmp eax, 0x16
je 0x43bbce
cmp eax, 0x22
je 0x43bbce
cmp eax, 0x50
je 0x43bafc
mov ecx, 0x80004005
call fcn.00401020
int3
mov ecx, 0x80070057
call fcn.00401020
int3
mov ecx, 0x8007000e
call fcn.00401020
int3
lea r8, [rsp + 0x20]
mov edx, esi
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x43bc96
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x426
je 0x43bc96
cmp eax, 0x425
jne 0x43bc1b
cmp dword [rsp + 0x24], 3
je 0x43bc96
lea rdx, [rsp + 0x40]
mov r8d, 0x400
mov ecx, 0xd80e
call fcn.0043b2f0
test eax, eax
jne 0x43bc83
lea r8, str.Could_not_stop_service
lea rcx, [rsp + 0x40]
mov edx, 0x400
call fcn.0056ad50
test eax, eax
je 0x43bc83
cmp eax, 0xc
je 0x43bc78
cmp eax, 0x16
je 0x43bc6d
cmp eax, 0x22
je 0x43bc6d
cmp eax, 0x50
je 0x43bc83
mov ecx, 0x80004005
call fcn.00401020
int3
mov ecx, 0x80070057
call fcn.00401020
int3
mov ecx, 0x8007000e
call fcn.00401020
int3
lea rdx, [rsp + 0x40]
xor r9d, r9d
mov r8, r13
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, rbp
call qword [sym.imp.ADVAPI32.dll_DeleteService]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test ebx, ebx
jne 0x43bd7c
lea rcx, [0x00648260]
xor edx, edx
call fcn.0053cb10
test rax, rax
je 0x43bd10
nop
test edi, edi
jne 0x43bd62
lea r8, [rsp + 0x840]
mov r9d, 0x400
mov edx, 0xd80d
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringW]
lea rcx, [0x00648260]
mov edx, esi
mov edi, eax
call fcn.0053cb10
add esi, 1
test rax, rax
jne 0x43bcd0
test edi, edi
jne 0x43bd62
lea r8, str.Could_not_delete_service
lea rcx, [rsp + 0x840]
mov edx, 0x400
call fcn.0056ad50
test eax, eax
je 0x43bd62
cmp eax, 0xc
je 0x43bd57
cmp eax, 0x16
je 0x43bd4c
cmp eax, 0x22
je 0x43bd4c
cmp eax, 0x50
je 0x43bd62
mov ecx, 0x80004005
call fcn.00401020
int3
mov ecx, 0x80070057
call fcn.00401020
int3
mov ecx, 0x8007000e
call fcn.00401020
int3
lea rdx, [rsp + 0x840]
xor r9d, r9d
mov r8, r13
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x43bd7e
mov eax, esi
mov r13, qword [rsp + 0x1050]
mov r12, qword [rsp + 0x1058]
mov rdi, qword [rsp + 0x1060]
mov rsi, qword [rsp + 0x1088]
mov rbp, qword [rsp + 0x1080]
mov rbx, qword [rsp + 0x1078]
mov rcx, qword [rsp + 0x1040]
xor rcx, rsp
call fcn.00568fb0
add rsp, 0x1068
ret