Function at 0x140010680
Capabilities:
Create service
Modify service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x300
mov rax, qword [0x14009d2d0]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov rdi, rcx
mov ecx, 1
call fcn.14002bb50
test eax, eax
je 0x1400106e1
lea rax, str.Installing_Service.
mov qword [rsp + 0x20], rax
mov r9d, 0x42
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::InstallService
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
lea ecx, [r9 - 0x41]
call fcn.14000da30
mov rcx, rdi
call fcn.140010c60
xor edx, edx
cmp eax, 1
jne 0x140010714
mov rcx, qword [rdi]
call fcn.140011750
mov rcx, rdi
call fcn.140010ec0
mov edx, 1
mov rcx, qword [rdi]
call fcn.140011750
xor eax, eax
jmp 0x140010a20
mov r8d, 0x20c
lea rcx, [rsp + 0xe0]
call fcn.1400464e0
mov r8d, 0x104
lea rdx, [rsp + 0xe2]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400109d0
cmp eax, 0x104
je 0x1400109d0
mov r8d, 0x22
mov word [rsp + 0xe0], r8w
lea ecx, [rax + 1]
mov word [rsp + rcx*2 + 0xe0], r8w
lea ecx, [rax + 2]
add rcx, rcx
cmp rcx, 0x20c
jae 0x140010a48
xor r14d, r14d
mov word [rsp + rcx + 0xe0], r14w
mov rsi, qword [rdi + 8]
mov dword [rsp + 0x98], 0x10
mov dword [rsp + 0x9c], 2
mov rbp, qword [rdi + 0x10]
mov rcx, rdi
call fcn.140011290
mov ebx, eax
mov dword [rsp + 0x70], eax
test eax, eax
je 0x1400107e5
lea ecx, [r14 + 5]
call fcn.14002bb50
test eax, eax
je 0x140010a1e
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, str.Failed_to_call_OpenSCManager__error_code___d
lea r9d, [r14 + 0x6b]
jmp 0x140010a01
mov rax, qword [rsp + 0x98]
shr rax, 0x20
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], r14
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x10
mov r9d, 0xf01ff
mov r8, rsi
mov rdx, qword [rdi]
mov rcx, qword [rdi + 0x18]
call qword [sym.imp.ADVAPI32.dll_CreateServiceW]
mov rbx, rax
mov qword [rsp + 0x80], rax
test rax, rax
jne 0x1400108a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x70], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x14001089f
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, str.Failed_to_call_CreateService__error_code___d
mov qword [rsp + 0x20], rax
mov r9d, 0x73
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::InstallService
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
lea ecx, [r9 - 0x6e]
call fcn.140001f30
nop
jmp 0x140010a1e
mov rdx, rbx
call fcn.140011180
mov esi, eax
test eax, eax
je 0x1400108c2
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, esi
jmp 0x140010a20
mov rax, qword [rdi + 8]
mov qword [rsp + 0x78], rax
lea r8, [rsp + 0x78]
mov edx, 1
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_ChangeServiceConfig2W]
test eax, eax
jne 0x14001097d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [rsp + 0x70], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x140010934
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, str.Failed_to_call_ChangeServiceConfig2_when_setting_service_Description__error_code___d
mov qword [rsp + 0x20], rax
mov r9d, 0x198
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::SetServiceDescription
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
mov ecx, 5
call fcn.140001f30
mov dword [rsp + 0x70], esi
test esi, esi
je 0x14001097d
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x14001097d
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, str.Failed_to_Set_Service_Description__error_code___d
mov qword [rsp + 0x20], rax
mov r9d, 0x80
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::InstallService
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
lea ecx, [r9 - 0x7b]
call fcn.140001f30
mov ecx, 1
call fcn.14002bb50
test eax, eax
je 0x1400109b5
lea rax, str.Service_Successfuly_installed.
mov qword [rsp + 0x20], rax
mov r9d, 0x83
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::InstallService
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
mov ecx, 1
call fcn.14000da30
mov edx, 1
mov rcx, qword [rdi]
call fcn.140011750
nop
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor eax, eax
jmp 0x140010a20
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x70], eax
mov ecx, 5
call fcn.14002bb50
test eax, eax
je 0x140010a1e
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, str.Failed_to_call_GetModuleFileNameW__error_code___d
mov r9d, 0x54
mov qword [rsp + 0x20], rax
lea r8, str.SecurityCenter::CMSCServiceInstallerLogic_class_SecurityCenter::CMSCServiceTypedefs_class_SecurityCenter::CMSCServiceDep_::InstallService
lea rdx, str.E:BTc1fd866d_3751_4c72_a231_f6b223727ef9_vscore_srcMcAPExeMSCServiceInstaller.h
mov ecx, 5
call fcn.140001f30
mov eax, ebx
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.140043760
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
call fcn.140043914
int3