Function at 0x140067960
Capabilities:
Delete service
Stop service

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 0x39], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1404680d8]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rbx, rcx
xor r14d, r14d
mov edi, r14d
mov dword [rbp - 0x69], r14d
mov qword [rbp + 0x17], r14
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov qword [rbp + 0x17], rax
test rax, rax
jne 0x140067a71
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x61]
call fcn.14004c3c0
nop
lea r9d, [r14 + 0x3b]
lea r8, str._Uninstall__Could_not_open_Service_Control_Manager__Error:
xor edx, edx
mov rcx, rax
call fcn.14003fa50
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov esi, 1
mov dword [rbp - 0x69], esi
lea r8, [0x1403c461c]
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 9]
call fcn.1400440a0
nop
and esi, 0xfffffffe
mov dword [rbp - 0x69], esi
lea rcx, [rbp - 0x31]
call fcn.14000c340
nop
lea rcx, [rbp - 0x61]
call fcn.14000c340
lea rax, [rbp - 0x61]
mov qword [rbp - 0x11], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.1400256d0
nop
mov rcx, rax
call fcn.14004c770
nop
lea rcx, [rbp - 9]
call fcn.14000c340
xor bl, bl
jmp 0x140067d62
mov qword [rbp - 0x11], r14
cmp qword [rbx + 0x18], 8
jb 0x140067a7f
mov rbx, qword [rbx]
mov r8d, 0x10020
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rbx, rax
mov qword [rbp - 0x11], rax
test rax, rax
jne 0x140067b4d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x61]
call fcn.14004c3c0
nop
lea r9d, [rbx + 0x2b]
lea r8, str._Uninstall__Could_not_open_service__Error:
xor edx, edx
mov rcx, rax
call fcn.14003fa50
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov ebx, 4
mov dword [rbp - 0x69], ebx
lea r8, [0x1403c461c]
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 9]
call fcn.1400440a0
nop
and ebx, 0xfffffffb
mov dword [rbp - 0x69], ebx
lea rcx, [rbp - 0x31]
call fcn.14000c340
nop
lea rcx, [rbp - 0x61]
call fcn.14000c340
lea rax, [rbp - 0x61]
mov qword [rbp - 0x41], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.1400256d0
nop
mov rcx, rax
call fcn.14004c770
nop
lea rcx, [rbp - 9]
jmp 0x140067d51
lea r8, [rbp + 0x1f]
mov esi, 1
mov edx, esi
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x140067c64
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x426
je 0x140067c64
cmp eax, 0x425
jne 0x140067b8b
cmp dword [rbp + 0x23], 3
je 0x140067c64
mov edx, eax
lea rcx, [rbp - 0x61]
call fcn.14004c3c0
nop
mov r9d, 0x38
lea r8, str._Uninstall__Could_not_stop_service___continuing__Error:
xor edx, edx
mov rcx, rax
call fcn.14003fa50
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov dword [rbp - 0x69], reloc.WS2_32.dll_recv
mov r8, rsi
lea rdx, [0x1403c461c]
lea rcx, [rbp - 0x31]
call fcn.14000d710
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov edi, 0x30
mov dword [rbp - 0x69], edi
and edi, 0xffffffef
mov dword [rbp - 0x69], edi
lea rcx, [rbp - 0x31]
call fcn.14000c340
nop
lea rcx, [rbp - 0x61]
call fcn.14000c340
lea rax, [rbp - 0x61]
mov qword [rbp - 0x41], rax
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x61]
call fcn.1400256d0
nop
mov rcx, rax
call fcn.14004c770
and edi, 0xffffffdf
mov dword [rbp - 0x69], edi
lea rcx, [rbp - 9]
call fcn.14000c340
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
je 0x140067c78
mov bl, 1
jmp 0x140067d58
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rbp - 0x61]
call fcn.14004c3c0
nop
mov r9d, 0x2d
lea r8, str._Uninstall__Could_not_delete_service__Error:
xor edx, edx
mov rcx, rax
call fcn.14003fa50
xorps xmm0, xmm0
movdqu xmmword [rbp + 7], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 7], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
or edi, 0x40
mov dword [rbp - 0x69], edi
mov r8, rsi
lea rdx, [0x1403c461c]
lea rcx, [rbp - 9]
call fcn.14000d710
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x21], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x31], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x21], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
bts edi, 7
mov dword [rbp - 0x69], edi
and edi, 0xffffffbf
mov dword [rbp - 0x69], edi
lea rcx, [rbp - 9]
call fcn.14000c340
nop
lea rcx, [rbp - 0x61]
call fcn.14000c340
lea rax, [rbp - 0x61]
mov qword [rbp - 0x41], rax
lea rdx, [rbp - 0x31]
lea rcx, [rbp - 0x61]
call fcn.1400256d0
nop
mov rcx, rax
call fcn.14004c770
btr edi, 7
mov dword [rbp - 0x69], edi
lea rcx, [rbp - 0x31]
call fcn.14000c340
xor bl, bl
lea rcx, [rbp - 0x11]
call fcn.1400baff0
nop
lea rcx, [rbp + 0x17]
call fcn.1400baff0
movzx eax, bl
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140282c10
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret