Function at 0x1800014e0
Capabilities:
Stop service

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov qword [rsp + 0x40], rcx
lea rax, [rsp + 0x48]
mov qword [rsp + 0x38], rax
mov eax, 0x94ea6553
mov rbp, qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov r14, qword [sym.imp.ADVAPI32.dll_ControlService]
mov r15d, 0x376ccc81
mov r13d, 0x97625a1f
mov esi, 0xb5e8748a
mov ebx, 0x659817b2
mov edi, 0x741148a2
mov r12d, 0x257c4c92
cmp eax, 0xf39f7d26
jle 0x180001581
cmp eax, 0x4271a1a9
jg 0x1800015cc
cmp eax, 0x21d400f2
jle 0x180001645
cmp eax, 0x257c4c91
jg 0x180001768
cmp eax, 0x21d400f3
je 0x1800018c6
cmp eax, 0x23542726
jne 0x180001533
cmp byte [rsp + 0x27], 0
mov eax, 0x872239b0
mov ecx, 0x21d400f3
cmovne eax, ecx
jmp 0x180001533
cmp eax, 0xbcf55def
jle 0x180001602
cmp eax, 0xce16e83e
jle 0x18000168c
cmp eax, 0xde90b52c
jg 0x1800017ab
cmp eax, 0xce16e83f
je 0x180001807
cmp eax, 0xd0495823
jne 0x180001533
mov rcx, qword [rsp + 0x28]
mov edx, 1
lea r8, [rsp + 0x48]
call r14
mov eax, 0x57e5c72b
jmp 0x180001533
cmp eax, 0x597a5fac
jle 0x1800016cb
cmp eax, 0x72670de6
jg 0x1800017cb
cmp eax, 0x597a5fad
je 0x180001821
cmp eax, 0x659817b2
jne 0x180001533
mov eax, 0x4271a1aa
jmp 0x180001533
cmp eax, 0x97625a1e
jle 0x180001724
cmp eax, 0xb5e87489
jle 0x1800017eb
cmp eax, 0xb5e8748a
je 0x1800017c1
cmp eax, 0xbcca71f8
jne 0x180001533
cmp byte [rsp + 0x26], 0
mov eax, 0x72670de7
mov ecx, 0x81192c2c
cmovne eax, ecx
jmp 0x180001533
cmp eax, 0xf39f7d27
je 0x180001869
cmp eax, 0xf6d2637b
je 0x180001891
cmp eax, 0x5d1053e
jne 0x180001533
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x559c6891
cmove eax, esi
cmp dword [0x18001ac50], 0xa
cmovl eax, esi
jmp 0x180001533
cmp eax, 0xbcf55df0
je 0x1800018a0
cmp eax, 0xbeaffca7
je 0x1800018aa
cmp eax, 0xc3c725ed
jne 0x180001533
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbcf55df0
mov ecx, 0xf39f7d27
jmp 0x18000190e
cmp eax, 0x4271a1aa
je 0x1800018bf
cmp eax, 0x559c6891
je 0x1800018d0
cmp eax, 0x57e5c72b
jne 0x180001533
mov rcx, qword [rsp + 0x28]
mov edx, 1
lea r8, [rsp + 0x48]
call r14
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0495823
cmove eax, edi
cmp dword [0x18001ac50], 0xa
cmovl eax, edi
jmp 0x180001533
cmp eax, 0x81192c2c
je 0x1800018da
cmp eax, 0x872239b0
je 0x1800018f5
cmp eax, 0x94ea6553
jne 0x180001533
mov rax, qword [rsp + 0x38]
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce16e83f
mov ecx, 0x597a5fad
jmp 0x18000190e
cmp eax, 0x257c4c92
je 0x180001920
cmp eax, 0x376ccc81
jne 0x180001533
mov rcx, qword [rsp + 0x28]
call rbp
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb477c340
cmove eax, ebx
cmp dword [0x18001ac50], 0xa
cmovl eax, ebx
jmp 0x180001533
cmp eax, 0xde90b52d
je 0x18000192a
cmp eax, 0xe81388f9
jne 0x180001533
mov eax, 0xf6d2637b
jmp 0x180001533
cmp eax, 0x72670de7
je 0x180001952
cmp eax, 0x741148a2
jne 0x180001533
mov eax, 0xde90b52d
jmp 0x180001533
cmp eax, 0xb477c340
jne 0x180001977
mov rcx, qword [rsp + 0x28]
call rbp
mov eax, 0x376ccc81
jmp 0x180001533
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov eax, 0x597a5fad
jmp 0x180001533
xor ecx, ecx
xor edx, edx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
sete byte [rsp + 0x26]
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce16e83f
cmove eax, r12d
cmp dword [0x18001ac50], 0xa
cmovl eax, r12d
jmp 0x180001533
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbcf55df0
cmove eax, r13d
cmp dword [0x18001ac50], 0xa
cmovl eax, r13d
jmp 0x180001533
mov rax, qword [rsp + 0x38]
mov eax, 0xc3c725ed
jmp 0x180001533
mov eax, 0xf39f7d27
jmp 0x180001533
cmp qword [rsp + 0x28], 0
sete byte [rsp + 0x27]
mov eax, 0x23542726
jmp 0x180001533
mov rcx, qword [rsp + 0x30]
call rbp
mov eax, 0xe81388f9
jmp 0x180001533
mov eax, 0x5d1053e
jmp 0x180001533
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x559c6891
mov ecx, 0x5d1053e
jmp 0x18000190e
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0495823
mov ecx, 0x57e5c72b
cmove eax, ecx
cmp dword [0x18001ac50], 0xa
cmovl eax, ecx
jmp 0x180001533
mov eax, 0xbcca71f8
jmp 0x180001533
mov eax, dword [0x18001ac54]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb477c340
cmove eax, r15d
cmp dword [0x18001ac50], 0xa
cmovl eax, r15d
jmp 0x180001533
mov rcx, qword [rsp + 0x30]
mov rdx, qword [rsp + 0x40]
mov r8d, 0x20
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov qword [rsp + 0x28], rax
mov eax, 0xbeaffca7
jmp 0x180001533
cmp eax, 0x97625a1f
jne 0x180001533
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret