Function at 0x10006220
Capabilities:
Create service
Modify service
Start service

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov edi, dword [ebp + 0xc]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, dword [0x1001b8a4]
test cl, 1
sete byte [ebp - 0x15]
cmp eax, 0xa
setl byte [ebp - 0x16]
mov ebx, dword [ebp + 8]
mov eax, 0x7ca42715
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x527ace22
mov ecx, 0x4d07ada3
nop dword [eax]
cmove eax, ecx
cmp dword [0x1001b8a4], 0xa
cmovl eax, ecx
cmp eax, 0x288dc21
jle 0x10006300
cmp eax, 0x44323368
jg 0x10006380
cmp eax, 0x23b78acb
jle 0x1000645a
cmp eax, 0x35cd73ad
jle 0x100065c6
cmp eax, 0x3caf7c4c
jle 0x10006831
cmp eax, 0x409994be
jg 0x10006cee
cmp eax, 0x3f359a7f
jg 0x10007470
cmp eax, 0x3caf7c4d
je 0x10007b06
cmp eax, 0x3cb74696
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca48c3b8
mov ecx, 0xa1d0b441
jmp 0x10006270
cmp eax, 0xb74bf6ea
jle 0x100063f0
cmp eax, 0xde6c7b05
jle 0x100064a6
cmp eax, 0xef782405
jle 0x10006607
cmp eax, 0xf9c1199f
jle 0x100068b0
cmp eax, 0xfce9caaa
jg 0x10006d2c
cmp eax, 0xfbf7f798
jg 0x100074a3
cmp eax, 0xf9c119a0
je 0x10007b3f
cmp eax, 0xfba617fc
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b67e698
mov ecx, 0x4e7b7cd3
jmp 0x10006270
cmp eax, 0x5f7fc58d
jle 0x10006505
cmp eax, 0x6de6ffe5
jle 0x1000665b
cmp eax, 0x79448f58
jle 0x100068f9
cmp eax, 0x7b8ccbb0
jle 0x10006d57
cmp eax, 0x7ca42714
jg 0x100074c3
cmp eax, 0x7b8ccbb1
je 0x10007b52
cmp eax, 0x7bb78794
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb3b0d32a
mov ecx, 0x8d323227
jmp 0x10006270
cmp eax, 0x9afa645f
jg 0x10006564
cmp eax, 0x8d323226
jg 0x1000669c
cmp eax, 0x87b7b9b9
jg 0x1000693b
cmp eax, 0x81f23aaa
jle 0x10006da5
cmp eax, 0x85809ba6
jg 0x100074f8
cmp eax, 0x81f23aab
je 0x10007b6f
cmp eax, 0x8542a169
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x32c7b731
mov ecx, 0xc2c1b16c
jmp 0x10006270
cmp eax, 0x129a54f0
jg 0x100066f0
cmp eax, 0x82fc9b2
jg 0x10006971
cmp eax, 0x4617381
jle 0x10006df3
cmp eax, 0x69219d3
jg 0x10007518
cmp eax, 0x4617382
je 0x10007b8c
cmp eax, 0x518ebab
jne 0x1000627d
mov eax, 0x686b2948
jmp 0x1000627d
cmp eax, 0xc8b3cdf9
jg 0x1000672c
cmp eax, 0xc2c1b16b
jg 0x100069a7
cmp eax, 0xbe72a28c
jle 0x10006e1e
cmp eax, 0xc16dd52f
jg 0x1000754b
cmp eax, 0xbe72a28d
je 0x10007ba9
cmp eax, 0xbf372686
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x56cbfa62
mov ecx, 0x82fc9b3
jmp 0x10006270
cmp eax, 0x52f69a42
jg 0x10006789
cmp eax, 0x4e51ff43
jg 0x100069f0
cmp eax, 0x4806ad19
jle 0x10006e72
cmp eax, 0x4d07ada2
jg 0x1000757e
cmp eax, 0x4806ad1a
je 0x10007bc6
cmp eax, 0x4a395ca7
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeed54ab8
mov ecx, 0x9ba0585
jmp 0x10006270
cmp eax, 0xa6e04c33
jg 0x100067dd
cmp eax, 0x9ef32252
jg 0x10006a39
cmp eax, 0x9e55bc44
jle 0x10006eb0
cmp eax, 0x9eb0f9fe
jg 0x100075aa
cmp eax, 0x9e55bc45
je 0x10007be3
cmp eax, 0x9e74b844
jne 0x1000627d
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x14]
mov dword [eax], ecx
push dword [ebp - 0x24]
push 1
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
mov eax, 0xbb6e2ea4
jmp 0x1000627d
cmp eax, 0x2d508f28
jg 0x10006a82
cmp eax, 0x2873b7b9
jle 0x10006eee
cmp eax, 0x2b5cd202
jg 0x100075ca
cmp eax, 0x2873b7ba
je 0x10007bff
cmp eax, 0x292809cb
jne 0x1000627d
mov eax, 0xb96dbe45
jmp 0x1000627d
cmp eax, 0xe7775e83
jg 0x10006af2
cmp eax, 0xe142f967
jle 0x10006f2c
cmp eax, 0xe499355f
jg 0x100075f6
cmp eax, 0xe142f968
je 0x10007c1c
cmp eax, 0xe1708294
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf9c119a0
mov ecx, 0xa6e04c34
jmp 0x10006270
cmp eax, 0x65c2f256
jg 0x10006b3b
cmp eax, 0x63b909b6
jle 0x10006f57
cmp eax, 0x64b864e5
jg 0x10007629
cmp eax, 0x63b909b7
je 0x10007c39
cmp eax, 0x648b72d9
jne 0x1000627d
mov eax, 0x1b9d5a0c
jmp 0x1000627d
cmp eax, 0x954f2175
jg 0x10006b84
cmp eax, 0x8f60dcaa
jle 0x10006f95
cmp eax, 0x9219fb92
jg 0x10007649
cmp eax, 0x8f60dcab
je 0x10007c4a
cmp eax, 0x919fdd8d
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e8eb235
mov ecx, 0xadfc7c91
jmp 0x10006270
cmp eax, 0x20b81b9c
jg 0x10006bcd
cmp eax, 0x13fd969c
jle 0x10006fc0
cmp eax, 0x1b67e697
jg 0x1000767c
cmp eax, 0x13fd969d
je 0x10007c67
cmp eax, 0x15576ce9
je 0x1000704a
jmp 0x1000627d
cmp eax, 0xd5461efa
jg 0x10006c03
cmp eax, 0xd0a227bb
jle 0x10006ffe
cmp eax, 0xd40a31db
jg 0x100076c6
cmp eax, 0xd0a227bc
je 0x10007c84
cmp eax, 0xd24dfa48
jne 0x1000627d
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd5461efb
mov ecx, 0xf7f575a8
jmp 0x10006270
cmp eax, 0x58ec883a
jg 0x10006c4c
cmp eax, 0x54972786
jle 0x10007029
cmp eax, 0x56cbfa61
jg 0x100076f9
cmp eax, 0x54972787
je 0x10007ca1
cmp eax, 0x5666c507
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8da8ba
mov ecx, 0x65094f59
jmp 0x10006270
cmp eax, 0xb18b75f0
jg 0x10006ca5
cmp eax, 0xac2d809a
jle 0x1000705b
cmp eax, 0xaf2123ab
jg 0x1000772c
cmp eax, 0xac2d809b
je 0x10007cbe
cmp eax, 0xadfc7c91
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x731a7ec
mov ecx, 0x6ba2b3ef
jmp 0x10006270
cmp eax, 0x37e6cdd1
jle 0x1000709c
cmp eax, 0x3a0d920c
jg 0x1000774c
cmp eax, 0x37e6cdd2
je 0x10007cdb
cmp eax, 0x39c49ac8
jne 0x1000627d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, edi
mov esi, eax
push dword [ebp - 0x10]
mov edi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call edi
push dword [ebp - 0x14]
call edi
cmp esi, 0x420
setne al
cmp esi, 0x41d
mov edi, ebx
mov ebx, dword [ebp + 8]
setne cl
xor cl, al
mov byte [ebp - 0x1b], cl
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaa9624e4
mov ecx, 0x5f3d05b6
jmp 0x10006270
cmp eax, 0xf7a997ea
jle 0x100070da
cmp eax, 0xf84daff2
jg 0x1000777f
cmp eax, 0xf7a997eb
je 0x10007cf8
cmp eax, 0xf7f575a8
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca48c3b8
mov ecx, 0x3cb74696
jmp 0x10006270
cmp eax, 0x72b2fbb5
jle 0x10007118
cmp eax, 0x7672edd8
jg 0x100077bb
cmp eax, 0x72b2fbb6
je 0x10007d02
cmp eax, 0x75bc0859
jne 0x1000627d
cmp byte [ebp - 0x19], 0
mov eax, 0x62612657
mov ecx, 0x8542a169
cmovne eax, ecx
jmp 0x1000627d
cmp eax, 0x8c370804
jle 0x10007156
cmp eax, 0x8cbf6033
jg 0x100077ee
cmp eax, 0x8c370805
je 0x10007d0c
cmp eax, 0x8c664b49
jne 0x1000627d
mov eax, 0x7fc1808c
jmp 0x1000627d
cmp eax, 0x9ba0584
jle 0x10007194
cmp eax, 0xd8da8b9
jg 0x10007821
cmp eax, 0x9ba0585
je 0x10007d26
cmp eax, 0xc73d509
jne 0x1000627d
mov eax, 0x4806ad1a
jmp 0x1000627d
cmp eax, 0xc5dc89e9
jle 0x100071db
cmp eax, 0xc72649a9
jg 0x1000786a
cmp eax, 0xc5dc89ea
je 0x10007d49
cmp eax, 0xc6ea3362
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6de6ffe6
mov ecx, 0x129a54f1
jmp 0x10006270
cmp eax, 0x4f5e5872
jle 0x10007219
cmp eax, 0x516d8cff
jg 0x100078ad
cmp eax, 0x4f5e5873
je 0x10007d53
cmp eax, 0x4fbd9c2d
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7a997eb
mov ecx, 0xec9da6e4
jmp 0x10006270
cmp eax, 0xa1d0b440
jle 0x10007244
cmp eax, 0xa32b55d4
jg 0x100078cd
cmp eax, 0xa1d0b441
je 0x10007d73
cmp eax, 0xa2ae1296
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c664b49
mov ecx, 0x7fc1808c
jmp 0x10006270
cmp eax, 0x32c7b730
jle 0x10007282
cmp eax, 0x34223005
jg 0x10007900
cmp eax, 0x32c7b731
je 0x10007d90
cmp eax, 0x330ce5b7
jne 0x1000627d
mov eax, dword [ebp - 0x10]
sub esp, 0x34
xorps xmm0, xmm0
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x1c], ebx
movaps xmm0, xmmword [0x100150a0]
movups xmmword [esp + 0xc], xmm0
mov ecx, dword [ebp + 0x10]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x30], 0
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov eax, 0xe9c919be
jmp 0x1000627d
cmp eax, 0xec668d8e
jle 0x100072ad
cmp eax, 0xed58a881
jg 0x10007929
cmp eax, 0xec668d8f
je 0x10007d9a
cmp eax, 0xec9da6e4
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc41fce45
mov ecx, 0x54972787
jmp 0x10006270
cmp eax, 0x686b2947
jle 0x10007325
cmp eax, 0x6ba2b3ee
jg 0x1000794f
cmp eax, 0x686b2948
je 0x10007db0
cmp eax, 0x692849f4
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd5461efb
mov ecx, 0xd24dfa48
jmp 0x10006270
cmp eax, 0x9797923d
jle 0x10007373
cmp eax, 0x9991ec11
jg 0x10007982
cmp eax, 0x9797923e
je 0x10007dcd
cmp eax, 0x9800e75c
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc73d509
mov ecx, 0x4806ad1a
jmp 0x10006270
cmp eax, 0x21c3254a
jle 0x1000739e
cmp eax, 0x22267df1
jg 0x100079a2
cmp eax, 0x21c3254b
je 0x10007dea
cmp eax, 0x21d64767
jne 0x1000627d
mov eax, 0xb4ef6c93
jmp 0x1000627d
cmp eax, 0xdc884331
jle 0x100073dc
cmp eax, 0xdcfa1cfb
jg 0x100079d5
cmp eax, 0xdc884332
je 0x10007e07
cmp eax, 0xdce9436b
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef782406
mov ecx, 0x6fb48533
jmp 0x10006270
cmp eax, 0x5c1812ba
jle 0x10007407
cmp eax, 0x5e643538
jg 0x10007a08
cmp eax, 0x5c1812bb
je 0x10007e24
cmp eax, 0x5c600ae0
jne 0x1000627d
push edi
call fcn.10008d30
add esp, 4
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov eax, 0x6d95c311
jmp 0x1000627d
cmp eax, 0xb45676ec
jle 0x10007445
cmp eax, 0xb5c27a6f
jg 0x10007a3b
cmp eax, 0xb45676ed
je 0x10007e41
cmp eax, 0xb4ef6c93
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9eb0f9ff
mov ecx, 0x85809ba7
jmp 0x10006270
cmp eax, 0x420364ef
jg 0x10007ab3
cmp eax, 0x409994bf
je 0x10007e5e
cmp eax, 0x40a12bae
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x36172a7e
mov ecx, 0x9b24499
jmp 0x10006270
cmp eax, 0x24ffb65
jg 0x10007ae6
cmp eax, 0xfce9caab
je 0x10007e68
cmp eax, 0x14a9658
jne 0x1000627d
mov eax, 0x9797923e
jmp 0x1000627d
cmp eax, 0x7a7fc9b7
jg 0x10007b17
cmp eax, 0x79448f59
je 0x10007e85
cmp eax, 0x798341d6
jne 0x1000627d
push edi
call fcn.10008d30
add esp, 4
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov eax, 0x809cfc51
jmp 0x1000627d
cmp eax, 0x809cfc51
je 0x10007ea2
cmp eax, 0x80c15ec8
je 0x10007efc
cmp eax, 0x811d4b36
jne 0x1000627d
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4020ec2d
mov ecx, 0x678f410e
jmp 0x10006270
cmp eax, 0x288dc22
je 0x10007f06
cmp eax, 0x3b54725
je 0x10007f23
cmp eax, 0x4436f98
jne 0x1000627d
mov eax, 0x11863854
jmp 0x1000627d
cmp eax, 0xb74bf6eb
je 0x10007f40
cmp eax, 0xb96dbe45
je 0x10007f4a
cmp eax, 0xbb6e2ea4
jne 0x1000627d
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x14]
mov dword [eax], ecx
push dword [ebp - 0x24]
push 1
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9e74b844
mov ecx, 0x4436f98
jmp 0x10006270
cmp eax, 0x44323369
je 0x10007f67
cmp eax, 0x45c8f0bd
je 0x10007f71
cmp eax, 0x45f7b439
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfba617fc
mov ecx, 0xf6c7464b
jmp 0x10006270
cmp eax, 0x9afa6460
je 0x10007f8e
cmp eax, 0x9da7c67c
je 0x10007fab
cmp eax, 0x9dbdeb31
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35cd73ae
mov ecx, 0x3a0d920d
jmp 0x10006270
cmp eax, 0x23b78acc
je 0x10007fc8
cmp eax, 0x24f589e9
je 0x10007fe5
cmp eax, 0x279e461b
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaf8100c8
mov ecx, 0x12aa064b
jmp 0x10006270
cmp eax, 0xde6c7b06
je 0x1000704a
cmp eax, 0xdffd6bce
je 0x10007ffb
cmp eax, 0xe015fad0
jne 0x1000627d
mov eax, 0xbe72a28d
jmp 0x1000627d
cmp eax, 0x5f7fc58e
je 0x10008018
cmp eax, 0x60562f87
je 0x10008035
cmp eax, 0x62612657
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x12e02da1
mov ecx, 0x1b9d5a0c
jmp 0x10006270
cmp eax, 0x8d323227
je 0x10008052
cmp eax, 0x8dade29f
je 0x1000806f
cmp eax, 0x8e8eb235
jne 0x1000627d
mov eax, 0x919fdd8d
jmp 0x1000627d
cmp eax, 0x129a54f1
je 0x10008079
cmp eax, 0x12aa064b
je 0x10007b06
cmp eax, 0x12e02da1
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xec668d8f
mov ecx, 0xa32b55d5
jmp 0x10006270
cmp eax, 0xc8b3cdfa
je 0x10008083
cmp eax, 0xca48c3b8
je 0x100080a0
cmp eax, 0xcd2c04a3
jne 0x1000627d
mov eax, 0x954f2176
jmp 0x1000627d
cmp eax, 0x52f69a43
je 0x100080aa
cmp eax, 0x54284345
je 0x100080c7
cmp eax, 0x5464ecd1
jne 0x1000627d
mov eax, 0xf95bf08e
mov dword [ebp - 0x20], 0
jmp 0x1000627d
cmp eax, 0xa6e04c34
je 0x100080e4
cmp eax, 0xa773aab9
je 0x1000810a
cmp eax, 0xaa9624e4
jne 0x1000627d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, 0x39c49ac8
jmp 0x1000627d
cmp eax, 0x35cd73ae
je 0x10008127
cmp eax, 0x36172a7e
je 0x10008131
cmp eax, 0x36536ca1
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xddfc44ec
mov ecx, 0xa2ae1296
jmp 0x10006270
cmp eax, 0xef782406
je 0x10008144
cmp eax, 0xf2bc0fcb
je 0x1000814e
cmp eax, 0xf6c7464b
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7a997eb
mov ecx, 0x4fbd9c2d
jmp 0x10006270
cmp eax, 0x6de6ffe6
je 0x1000816b
cmp eax, 0x6fb48533
je 0x10008175
cmp eax, 0x71b7eb91
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f60dcab
mov ecx, 0x11863854
jmp 0x10006270
cmp eax, 0x87b7b9ba
je 0x10008192
cmp eax, 0x88f5c60a
je 0x100081af
cmp eax, 0x8a183b4e
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaa9624e4
mov ecx, 0x39c49ac8
jmp 0x10006270
cmp eax, 0x82fc9b3
je 0x100081b9
cmp eax, 0x8a084f9
je 0x100081d6
cmp eax, 0x9b24499
jne 0x1000627d
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x36172a7e
mov ecx, 0x34223006
jmp 0x10006270
cmp eax, 0xc2c1b16c
je 0x100081fc
cmp eax, 0xc41fce45
je 0x10008219
cmp eax, 0xc4868bb7
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaf8100c8
mov ecx, 0x279e461b
jmp 0x10006270
cmp eax, 0x4e51ff44
je 0x10008223
cmp eax, 0x4e7b7cd3
je 0x10008267
cmp eax, 0x4e7e13a0
jne 0x1000627d
mov eax, 0xc2858830
jmp 0x1000627d
cmp eax, 0x9ef32253
je 0x10008284
cmp eax, 0x9efbf8d9
je 0x100082a1
cmp eax, 0xa18c938b
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2b5cd203
mov ecx, 0x37e6cdd2
jmp 0x10006270
cmp eax, 0x2d508f29
je 0x100082be
cmp eax, 0x2fd97da9
je 0x100082db
cmp eax, 0x31e294d3
jne 0x1000627d
mov eax, 0xd24dfa48
jmp 0x1000627d
cmp eax, 0xe7775e84
je 0x100082f8
cmp eax, 0xe97722df
je 0x1000831f
cmp eax, 0xe9c919be
jne 0x1000627d
mov eax, dword [ebp - 0x10]
sub esp, 0x34
xorps xmm0, xmm0
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x1c], ebx
movaps xmm0, xmmword [0x100150a0]
movups xmmword [esp + 0xc], xmm0
mov ecx, dword [ebp + 0x10]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x30], 0
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x330ce5b7
mov ecx, 0x86786215
jmp 0x10006270
cmp eax, 0x65c2f257
je 0x1000833c
cmp eax, 0x678f410e
je 0x10008359
cmp eax, 0x67a9e078
jne 0x1000627d
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c370805
mov ecx, 0x20fb5316
jmp 0x10006270
cmp eax, 0x954f2176
je 0x10008363
cmp eax, 0x964ec8ec
je 0x10008380
cmp eax, 0x96542f36
jne 0x1000627d
mov eax, 0xb45676ed
jmp 0x1000627d
cmp eax, 0x20b81b9d
je 0x1000839d
cmp eax, 0x20fb5316
je 0x100083a7
cmp eax, 0x2113b5e0
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x999ee1bb
mov ecx, 0xd0a227bc
jmp 0x10006270
cmp eax, 0xd5461efb
je 0x100083b1
cmp eax, 0xd7613da5
je 0x10006254
cmp eax, 0xd7f1ad8a
jne 0x1000627d
mov eax, 0x964ec8ec
jmp 0x1000627d
cmp eax, 0x58ec883b
je 0x100083ce
cmp eax, 0x5a12d440
je 0x100083eb
cmp eax, 0x5bcb932b
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x40a12bae
mov ecx, 0x31e294d3
jmp 0x10006270
cmp eax, 0xb18b75f1
je 0x10008408
cmp eax, 0xb1de5a59
je 0x10008418
cmp eax, 0xb3b0d32a
jne 0x1000627d
mov eax, 0x8d323227
jmp 0x1000627d
cmp eax, 0x3f359a80
je 0x10008422
cmp eax, 0x4020ec2d
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c370805
mov ecx, 0x67a9e078
jmp 0x10006270
cmp eax, 0xfbf7f799
je 0x1000843f
cmp eax, 0xfc73f43d
jne 0x1000627d
mov eax, 0x42c44f07
jmp 0x1000627d
cmp eax, 0x7fc1808c
je 0x1000845c
cmp eax, 0x7ca42715
jne 0x1000627d
movzx ecx, byte [ebp - 0x15]
cmp byte [ebp - 0x16], 0
mov eax, 0x14a9658
mov edx, 0x9797923e
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1000627d
cmp eax, 0x85809ba7
je 0x10008479
cmp eax, 0x86786215
jne 0x1000627d
mov eax, 0xb6d3240f
jmp 0x1000627d
cmp eax, 0x69219d4
je 0x10008496
cmp eax, 0x731a7ec
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4020ec2d
mov ecx, 0x811d4b36
jmp 0x10006270
cmp eax, 0xc16dd530
je 0x100084b3
cmp eax, 0xc2858830
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e7e13a0
mov ecx, 0x65c2f257
jmp 0x10006270
cmp eax, 0x4d07ada3
je 0x100084bd
cmp eax, 0x4d30afc8
jne 0x1000627d
cmp byte [ebp - 0x17], 0
mov eax, 0x5f7fc58e
mov ecx, 0x7bb78794
cmovne eax, ecx
jmp 0x1000627d
cmp eax, 0x9eb0f9ff
je 0x100084c7
cmp eax, 0x9ee6703e
jne 0x1000627d
mov eax, 0x5c1812bb
jmp 0x1000627d
cmp eax, 0x2b5cd203
je 0x100084d1
cmp eax, 0x2ba48516
jne 0x1000627d
cmp byte [ebp - 0x18], 0
mov eax, 0x71b7eb91
mov ecx, 0xd40a31dc
cmovne eax, ecx
jmp 0x1000627d
cmp eax, 0xe4993560
je 0x100084db
cmp eax, 0xe6720b64
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5dc89ea
mov ecx, 0x75bc0859
jmp 0x10006270
cmp eax, 0x64b864e6
je 0x100084f8
cmp eax, 0x65094f59
jne 0x1000627d
mov eax, 0xf6c7464b
jmp 0x1000627d
cmp eax, 0x9219fb93
je 0x10008524
cmp eax, 0x94aa9d61
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x22267df2
mov ecx, 0x8cbf6034
jmp 0x10006270
cmp eax, 0x1b67e698
je 0x1000852e
cmp eax, 0x1b9d5a0c
jne 0x1000627d
push 0x10
push edi
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
sete byte [ebp - 0x1a]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x12e02da1
mov ecx, 0x4617382
jmp 0x10006270
cmp eax, 0xd40a31dc
je 0x10008538
cmp eax, 0xd4c38eb9
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaf2123ac
mov ecx, 0x3f359a80
jmp 0x10006270
cmp eax, 0x56cbfa62
je 0x10008555
cmp eax, 0x56fbaf68
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2760faf
mov ecx, 0xfbf7f799
jmp 0x10006270
cmp eax, 0xaf2123ac
je 0x1000855f
cmp eax, 0xaf8100c8
jne 0x1000627d
mov eax, 0x279e461b
jmp 0x1000627d
cmp eax, 0x3a0d920d
je 0x10008569
cmp eax, 0x3b6aa822
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9219fb93
mov ecx, 0x15576ce9
jmp 0x10006270
cmp eax, 0xf84daff3
je 0x10008586
cmp eax, 0xf95bf08e
jne 0x1000627d
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a8dccda
mov ecx, 0xf2bc0fcb
jmp 0x10006270
cmp eax, 0x7672edd9
je 0x100085a3
cmp eax, 0x7909008a
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2760faf
mov ecx, 0x56fbaf68
jmp 0x10006270
cmp eax, 0x8cbf6034
je 0x100085c0
cmp eax, 0x8d2aa5bb
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88f5c60a
mov ecx, 0x79448f59
jmp 0x10006270
cmp eax, 0xd8da8ba
je 0x100085dd
cmp eax, 0x11863854
jne 0x1000627d
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0x14]
mov dword [eax], ecx
push dword [ebp - 0x24]
push 1
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8f60dcab
mov ecx, 0xb18b75f1
jmp 0x10006270
cmp eax, 0xc72649aa
je 0x100085e7
cmp eax, 0xc73987f0
jne 0x1000627d
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x420364f0
mov ecx, 0xe142f968
jmp 0x10006270
cmp eax, 0x516d8d00
je 0x10008604
cmp eax, 0x527ace22
jne 0x1000627d
mov eax, 0xd7613da5
jmp 0x1000627d
cmp eax, 0xa32b55d5
je 0x1000860e
cmp eax, 0xa37b7da6
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe1708294
mov ecx, 0x5bcb932b
jmp 0x10006270
cmp eax, 0x34223006
je 0x10008637
cmp eax, 0x3555b6c1
jne 0x1000627d
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 0x8a084f9
jmp 0x1000627d
cmp eax, 0xed58a882
je 0x10008641
cmp eax, 0xeed54ab8
jne 0x1000627d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, 0x9ba0585
jmp 0x1000627d
cmp eax, 0x6ba2b3ef
je 0x1000865e
cmp eax, 0x6d95c311
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x798341d6
mov ecx, 0x809cfc51
jmp 0x10006270
cmp eax, 0x9991ec12
je 0x1000867b
cmp eax, 0x999ee1bb
jne 0x1000627d
mov eax, 0xd0a227bc
jmp 0x1000627d
cmp eax, 0x22267df2
je 0x10008698
cmp eax, 0x22cf14e4
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb74bf6eb
mov ecx, 0xa773aab9
jmp 0x10006270
cmp eax, 0xdcfa1cfc
je 0x100086a2
cmp eax, 0xddfc44ec
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x527ace22
mov ecx, 0xd7613da5
jmp 0x10006270
cmp eax, 0x5e643539
je 0x100086bf
cmp eax, 0x5f3d05b6
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfc73f43d
mov ecx, 0x42c44f07
jmp 0x10006270
cmp eax, 0xb5c27a70
je 0x100086c9
cmp eax, 0xb6d3240f
jne 0x1000627d
mov eax, dword [ebp - 0x10]
sub esp, 0x34
xorps xmm0, xmm0
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x1c], ebx
movaps xmm0, xmmword [0x100150a0]
movups xmmword [esp + 0xc], xmm0
mov ecx, dword [ebp + 0x10]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x30], 0
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
sete byte [ebp - 0x18]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2873b7ba
mov ecx, 0x52f69a43
jmp 0x10006270
cmp eax, 0x420364f0
je 0x100086e6
cmp eax, 0x42c44f07
jne 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfc73f43d
mov ecx, 0x81f23aab
jmp 0x10006270
cmp eax, 0x24ffb66
je 0x10008700
cmp eax, 0x2760faf
jne 0x1000627d
mov eax, 0x56fbaf68
jmp 0x1000627d
mov eax, 0xf95bf08e
mov dword [ebp - 0x20], 1
jmp 0x1000627d
cmp eax, 0x7a8dccda
jne 0x1000871d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xddfc44ec
mov ecx, 0x36536ca1
jmp 0x10006270
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 0xa6e04c34
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x72b2fbb6
mov ecx, 0x9991ec12
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f5e5873
mov ecx, 0x24f589e9
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x96542f36
mov ecx, 0xb45676ed
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3555b6c1
mov ecx, 0x8a084f9
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc73d509
mov ecx, 0x2d508f29
jmp 0x10006270
cmp byte [ebp - 0x1a], 0
mov eax, 0xe7775e84
mov ecx, 0x9efbf8d9
cmovne eax, ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], ecx
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x330ce5b7
mov ecx, 0xe9c919be
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x72b2fbb6
mov ecx, 0x7b8ccbb1
jmp 0x10006270
mov eax, 0xf95bf08e
mov dword [ebp - 0x20], 0
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9e74b844
mov ecx, 0xbb6e2ea4
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x44323369
mov ecx, 0xf84daff3
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x999ee1bb
mov ecx, 0x692849f4
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc41fce45
mov ecx, 0xe97722df
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x32c7b731
mov ecx, 0x5464ecd1
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2b5cd203
mov ecx, 0x3b6aa822
jmp 0x10006270
mov eax, 0x4fbd9c2d
jmp 0x1000627d
mov eax, 0x7b8ccbb1
jmp 0x1000627d
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, 0x67a9e078
jmp 0x1000627d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeed54ab8
mov ecx, 0x8dade29f
jmp 0x10006270
mov eax, 0xe6720b64
jmp 0x1000627d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, 0x2fd97da9
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x409994bf
mov ecx, 0xed58a882
jmp 0x10006270
mov eax, 0xc2c1b16c
jmp 0x1000627d
push 0x10
push edi
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov eax, 0xa32b55d5
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x518ebab
mov ecx, 0x5e643539
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x14a9658
mov ecx, 0x23b78acc
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8da8ba
mov ecx, 0x5666c507
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a12d440
mov ecx, 0x2113b5e0
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e7e13a0
mov ecx, 0xc2858830
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x96542f36
mov ecx, 0x9e55bc45
jmp 0x10006270
mov eax, 0xed58a882
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc16dd530
mov ecx, 0xdffd6bce
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88f5c60a
mov ecx, 0x3caf7c4d
jmp 0x10006270
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push edi
call fcn.10008d30
add esp, 4
push 0x5dc
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
sete byte [ebp - 0x17]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x798341d6
mov ecx, 0xdcfa1cfc
jmp 0x10006270
mov eax, 0x69219d4
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc8b3cdfa
mov ecx, 0x63b909b7
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x516d8d00
mov ecx, 0x8a183b4e
jmp 0x10006270
mov eax, 0x22cf14e4
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x292809cb
mov ecx, 0x9afa6460
jmp 0x10006270
mov eax, 0x13fd969d
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd2c04a3
mov ecx, 0x954f2176
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2873b7ba
mov ecx, 0xb6d3240f
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80c15ec8
mov ecx, 0x9800e75c
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c600ae0
mov ecx, 0x6d95c311
jmp 0x10006270
cmp byte [ebp - 0x1b], 0
mov eax, 0x9dbdeb31
mov ecx, 0x8d2aa5bb
cmovne eax, ecx
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc5dc89ea
mov ecx, 0xe6720b64
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9ee6703e
mov ecx, 0x5c1812bb
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e8eb235
mov ecx, 0x919fdd8d
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb3b0d32a
mov ecx, 0x7672edd9
jmp 0x10006270
mov eax, 0x64b864e6
jmp 0x1000627d
mov eax, 0x288dc22
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6de6ffe6
mov ecx, 0xc6ea3362
jmp 0x10006270
mov eax, 0x3cb74696
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e51ff44
mov ecx, 0x2ba48516
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x21d64767
mov ecx, 0x9ef32253
jmp 0x10006270
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf9c119a0
mov ecx, 0xe015fad0
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x21d64767
mov ecx, 0xb4ef6c93
jmp 0x10006270
mov eax, 0x3a0d920d
jmp 0x1000627d
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 0x9b24499
jmp 0x1000627d
mov eax, 0x6fb48533
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb74bf6eb
mov ecx, 0x22cf14e4
jmp 0x10006270
mov eax, 0xc6ea3362
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x22267df2
mov ecx, 0x94aa9d61
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe1708294
mov ecx, 0xbe72a28d
jmp 0x10006270
mov eax, 0x79448f59
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x56cbfa62
mov ecx, 0xd7f1ad8a
jmp 0x10006270
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3555b6c1
mov ecx, 0xa37b7da6
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbf372686
mov ecx, 0x964ec8ec
jmp 0x10006270
mov eax, 0x54972787
jmp 0x1000627d
mov eax, dword [ebp - 0x10]
sub esp, 0x34
xorps xmm0, xmm0
movups xmmword [esp + 0x20], xmm0
mov dword [esp + 0x1c], ebx
movaps xmm0, xmmword [0x100150a0]
movups xmmword [esp + 0xc], xmm0
mov ecx, dword [ebp + 0x10]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0x30], 0
call dword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov eax, 0x58ec883b
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b67e698
mov ecx, 0x21c3254b
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x44323369
mov ecx, 0x13fd969d
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a12d440
mov ecx, 0xdc884332
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9219fb93
mov ecx, 0xa18c938b
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x516d8d00
mov ecx, 0x3b54725
jmp 0x10006270
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
push 0
push 0
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
mov eax, 0x60562f87
mov ecx, 0x7909008a
cmove eax, ecx
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfba617fc
mov ecx, 0xac2d809b
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9ee6703e
mov ecx, 0x24ffb66
jmp 0x10006270
mov eax, 0x6ba2b3ef
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcd2c04a3
mov ecx, 0x4a395ca7
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbf372686
mov ecx, 0x45f7b439
jmp 0x10006270
mov eax, 0xf2bc0fcb
jmp 0x1000627d
mov eax, 0x811d4b36
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x40a12bae
mov ecx, 0x87b7b9ba
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x292809cb
mov ecx, 0xb96dbe45
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x518ebab
mov ecx, 0x686b2948
jmp 0x10006270
mov eax, 0xe7775e84
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x30], ecx
jmp 0x1000627d
mov eax, 0xe4993560
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaf2123ac
mov ecx, 0x648b72d9
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f5e5873
mov ecx, 0x2fd97da9
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8c664b49
mov ecx, 0x20b81b9d
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9eb0f9ff
mov ecx, 0x54284345
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1de5a59
mov ecx, 0xe4993560
jmp 0x10006270
mov eax, 0xfce9caab
jmp 0x1000627d
mov eax, 0x36536ca1
jmp 0x1000627d
mov eax, 0x85809ba7
jmp 0x1000627d
mov eax, 0x37e6cdd2
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1de5a59
mov ecx, 0x9da7c67c
jmp 0x10006270
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
setne byte [ebp - 0x19]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x45c8f0bd
mov ecx, 0xb5c27a70
jmp 0x10006270
mov eax, 0xa18c938b
jmp 0x1000627d
mov eax, 0x4e7b7cd3
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x45c8f0bd
mov ecx, 0x64b864e6
jmp 0x10006270
mov eax, 0x82fc9b3
jmp 0x1000627d
mov eax, 0x3f359a80
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x35cd73ae
mov ecx, 0xde6c7b06
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7a8dccda
mov ecx, 0xdce9436b
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc8b3cdfa
mov ecx, 0x288dc22
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef782406
mov ecx, 0x7a7fc9b8
jmp 0x10006270
mov eax, 0x5666c507
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x80c15ec8
mov ecx, 0x69219d4
jmp 0x10006270
mov eax, 0x3b54725
jmp 0x1000627d
push 0x10
push edi
push dword [ebp - 0x10]
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xec668d8f
mov ecx, 0xd4c38eb9
jmp 0x10006270
mov eax, 0x87b7b9ba
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x409994bf
mov ecx, 0xc72649aa
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x420364f0
mov ecx, 0xc73987f0
jmp 0x10006270
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x731a7ec
mov ecx, 0xc4868bb7
jmp 0x10006270
mov eax, 0x94aa9d61
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c600ae0
mov ecx, 0x4d30afc8
jmp 0x10006270
mov eax, 0xdc884332
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc16dd530
mov ecx, 0xfce9caab
jmp 0x10006270
push dword [ebp - 0x10]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x14]
call esi
mov eax, 0xc73987f0
jmp 0x1000627d
mov eax, dword [0x1001b8a0]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e51ff44
mov ecx, 0x58ec883b
jmp 0x10006270
cmp eax, 0x7a7fc9b8
jne 0x1000627d
mov eax, dword [ebp - 0x38]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret