Function at 0x1400c1ea6
Capabilities:
Query service status
Start service

Disassembly:
push rax
pushf
mov eax, 0xbaa5b47b
pushf
not eax
add eax, 0xb115f98f
xor eax, 0x8bc3e6cd
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xe542a65d
xor eax, 0xf603cc8b
rol eax, 0x20
popf
cmp eax, 4
jne 0x1400c1ee3
popf
pop rax
jmp 0x1400c288a
cmp eax, 0
jne 0x1400c1ef2
popf
pop rax
jmp 0x1400c1f97
cmp eax, 3
jne 0x1400c1f01
popf
pop rax
jmp 0x1400c25bd
cmp eax, 1
jne 0x1400c1f10
popf
pop rax
jmp 0x1400c2066
cmp eax, 0xa
jne 0x1400c1f1f
popf
pop rax
jmp 0x1400c3070
cmp eax, 7
jne 0x1400c1f2e
popf
pop rax
jmp 0x1400c2d3f
cmp eax, 6
jne 0x1400c1f3d
popf
pop rax
jmp 0x1400c2cd3
cmp eax, 0xb
jne 0x1400c1f4c
popf
pop rax
jmp 0x1400c3207
cmp eax, 0xc
jne 0x1400c1f5b
popf
pop rax
jmp 0x1400c345b
cmp eax, 8
jne 0x1400c1f6a
popf
pop rax
jmp 0x1400c2eb7
cmp eax, 5
jne 0x1400c1f79
popf
pop rax
jmp 0x1400c292c
cmp eax, 2
jne 0x1400c1f88
popf
pop rax
jmp 0x1400c24e5
cmp eax, 9
jne 0x1400c1f97
popf
pop rax
jmp 0x1400c2f35
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c1fc8
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x1400c2020
push rax
pushf
mov eax, 0xa8353f05
pushf
not eax
add eax, 0xfdc68684
xor eax, 0xffeee870
rol eax, 0xf7
popf
pushf
not eax
add eax, 0xd990ebbd
xor eax, 0x882f2ac3
rol eax, 0x52
popf
pushf
not eax
add eax, 0xb1c7178b
xor eax, 0xa92baf38
rol eax, 6
popf
jmp 0x1400c1ed4
push rax
pushf
mov eax, 0x73c2ebb1
pushf
not eax
add eax, 0xe1279238
xor eax, 0xd14a7fb6
rol eax, 0x58
popf
pushf
not eax
add eax, 0xbd4ba5f0
xor eax, 0x9f5fb380
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xd253cd37
xor eax, 0xe9b1822d
rol eax, 0x8b
popf
jmp 0x1400c1ed4
movabs rdx, 0xd748a2536fcbf7d1
pushf
not rdx
add rdx, 0x5a175c2a
xor rdx, 0x52e11411
rol rdx, 0x86
popf
pushf
not rdx
add rdx, 0x46a2a0ea
xor rdx, 0x4c2172b4
rol rdx, 0xb3
popf
pushf
not rdx
add rdx, 0x7b763593
xor rdx, 0x51d07338
rol rdx, 0xa
popf
movabs rax, 0xdbf08ca1a17bb18b
pushf
not rax
add rax, 0x4dde5622
xor rax, 0x59838c04
rol rax, 0
popf
pushf
not rax
add rax, 0x5e018c12
xor rax, 0x6f3ed6f9
rol rax, 7
popf
pushf
not rax
add rax, 0x661606a9
xor rax, 0x45bf1e18
rol rax, 0x53
popf
pushf
not rax
add rax, 0x65785872
xor rax, 0x6926dfcc
rol rax, 0x4d
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0x1d74671058d2f8a
pushf
not rcx
add rcx, 0x4e4b1155
xor rcx, 0x4939ec28
rol rcx, 0x4a
popf
pushf
not rcx
add rcx, 0x4e3b1484
xor rcx, 0x4364f94c
rol rcx, 0x29
popf
pushf
not rcx
add rcx, 0x77501408
xor rcx, 0x7539ac60
rol rcx, 0x5a
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x17cb24ebda1c14c8
pushf
not rax
add rax, 0x6db06707
xor rax, 0x741fcce4
rol rax, 0xa5
popf
pushf
not rax
add rax, 0x5412b124
xor rax, 0x6bb00a4d
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x492d7c7e
xor rax, 0x5d0ef4c3
rol rax, 2
popf
pushf
not rax
add rax, 0x5a87a1ed
xor rax, 0x42407424
rol rax, 0xc5
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xf02ae96e49b86e1d
pushf
not rcx
add rcx, 0x64bb9af5
xor rcx, 0x631b9117
rol rcx, 0xbd
popf
pushf
not rcx
add rcx, 0x64569920
xor rcx, 0x69343ffa
rol rcx, 0xec
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x9da24f26df09a0f3
pushf
not rax
add rax, 0x56e1e9d4
xor rax, 0x69c83481
rol rax, 0xde
popf
pushf
not rax
add rax, 0x6f828992
xor rax, 0x7fc804bb
rol rax, 0xd0
popf
pushf
not rax
add rax, 0x57b9e10b
xor rax, 0x6a9d012a
rol rax, 0xe3
popf
mov qword [rbp + 0x27], rax
movabs r8, 0xa41d5e3754c60954
pushf
not r8
add r8, 0x6236d655
xor r8, 0x583fce34
rol r8, 0xac
popf
pushf
not r8
add r8, 0x577fad9d
xor r8, 0x5b25c037
rol r8, 0xe9
popf
pushf
not r8
add r8, 0x4f409e4c
xor r8, 0x7da87e64
rol r8, 0x8a
popf
mov qword [rbp - 0x11], rcx
movabs rax, 0x178753a6ce92e4e
pushf
not rax
add rax, 0x70fc8438
xor rax, 0x50d4a19d
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x4a487612
xor rax, 0x7a7379a5
rol rax, 0x82
popf
pushf
not rax
add rax, 0x5caafa89
xor rax, 0x768ce934
rol rax, 0xc
popf
pushf
not rax
add rax, 0x4c2b4dd5
xor rax, 0x43fd7e68
rol rax, 0x50
popf
xorps xmm0, xmmword [rbp - 0x19]
movabs rcx, 0x7e936ac55418d4de
pushf
not rcx
add rcx, 0x72ac6c0d
xor rcx, 0x6e9568a7
rol rcx, 0x55
popf
pushf
not rcx
add rcx, 0x447a01b7
xor rcx, 0x7640a61d
rol rcx, 0x93
popf
mov qword [rbp + 0x2f], rax
movabs rax, 0xf48c73fc8d911c85
pushf
not rax
add rax, 0x7e6b81e8
xor rax, 0x4089db22
rol rax, 0x43
popf
pushf
not rax
add rax, 0x7a81d121
xor rax, 0x7e0e2211
rol rax, 0xd6
popf
pushf
not rax
add rax, 0x6b4ea951
xor rax, 0x5c0b073b
rol rax, 2
popf
pushf
not rax
add rax, 0x50dc450a
xor rax, 0x4271dfba
rol rax, 0x2f
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], rax
movabs rax, 0x2f49910da408495
pushf
not rax
add rax, 0x5387d9dd
xor rax, 0x5efade5d
rol rax, 0x9f
popf
pushf
not rax
add rax, 0x51ea3501
xor rax, 0x761f8008
rol rax, 0xce
popf
mov qword [rbp + 0x3f], rdx
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c246a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c2476
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b39a4b47]
pushf
sub rdx, 0x7399cb27
popf
jmp 0x1400c2492
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c376d
mov r8d, 0x9e98f32f
pushf
not r8d
add r8d, 0x88539290
xor r8d, 0xef4f84e7
rol r8d, 0x7d
popf
pushf
not r8d
add r8d, 0xab075476
xor r8d, 0xdaf318a6
rol r8d, 0x71
popf
pushf
not r8d
add r8d, 0xe18d08a3
xor r8d, 0x8e46e6bb
rol r8d, 0x1e
popf
mov qword [rsp + 0xc8], rdi
mov rdx, rbx
mov rcx, rsi
jmp 0x1400c2545
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x1400c258a
push rax
pushf
mov eax, 0xf3b699c
pushf
not eax
add eax, 0xdcd79372
xor eax, 0xbe3c5cfb
rol eax, 0x3d
popf
pushf
not eax
add eax, 0xce54dd78
xor eax, 0xffe0ceb2
rol eax, 0xfb
popf
jmp 0x1400c1ed4
push rax
pushf
mov eax, 0xba4326de
pushf
not eax
add eax, 0xc9029498
xor eax, 0xfa805a48
rol eax, 0x15
popf
pushf
not eax
add eax, 0xdce0b54d
xor eax, 0xdea26d66
rol eax, 0x94
popf
jmp 0x1400c1ed4
movabs rax, 0x4b64821895f17956
pushf
not rax
add rax, 0x5b7c46f3
xor rax, 0x4d3063d2
rol rax, 0x21
popf
pushf
not rax
add rax, 0x659ea76f
xor rax, 0x4825a62c
rol rax, 0xf6
popf
lea rdx, [rbp - 0x19]
mov qword [rbp - 0x19], rax
movabs rcx, 0xc9894b32c94320b
pushf
not rcx
add rcx, 0x4bb7ccae
xor rcx, 0x76c1499f
rol rcx, 0x7f
popf
pushf
not rcx
add rcx, 0x52939c84
xor rcx, 0x41d3e558
rol rcx, 0x18
popf
pushf
not rcx
add rcx, 0x40bb8dda
xor rcx, 0x456b77e2
rol rcx, 0xdd
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0xd16893d7ec8b1755
pushf
not rax
add rax, 0x7a66b7d6
xor rax, 0x76a250ec
rol rax, 0x53
popf
pushf
not rax
add rax, 0x66ea0aee
xor rax, 0x66355ba1
rol rax, 0xe5
popf
pushf
not rax
add rax, 0x4dd9101a
xor rax, 0x5ff96434
rol rax, 0xc5
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x3bfbf1233968f578
pushf
not rcx
add rcx, 0x7521d21a
xor rcx, 0x6052cc23
rol rcx, 0xb3
popf
pushf
not rcx
add rcx, 0x7ff3ea85
xor rcx, 0x5cdbecf2
rol rcx, 0x80
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x25b2769a6e7e3957
pushf
not rax
add rax, 0x55d8c709
xor rax, 0x579c0d66
rol rax, 0x44
popf
pushf
not rax
add rax, 0x7ef6aaab
xor rax, 0x6d990bf0
rol rax, 0x43
popf
mov qword [rbp - 9], rax
movabs rax, 0xa5af72a552765105
pushf
not rax
add rax, 0x41d635c8
xor rax, 0x64f13db6
rol rax, 0xd0
popf
pushf
not rax
add rax, 0x4be2c4a9
xor rax, 0x4ea41502
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x49abe29e
xor rax, 0x6b91550f
rol rax, 0x49
popf
pushf
not rax
add rax, 0x58813c64
xor rax, 0x65072757
rol rax, 0xfb
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x5bbc45be4a2f9fc0
pushf
not rcx
add rcx, 0x790b9048
xor rcx, 0x7536e258
rol rcx, 0x59
popf
pushf
not rcx
add rcx, 0x4c6dd131
xor rcx, 0x73f52651
rol rcx, 0xac
popf
pushf
not rcx
add rcx, 0x540adef7
xor rcx, 0x4067eb86
rol rcx, 0
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c2818
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c2824
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1a33807bc]
pushf
sub rdx, 0x6337879c
popf
jmp 0x1400c2840
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c284a
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c3765
lea rdx, [rbp - 0x39]
mov rcx, rdi
jmp 0x1400c2892
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c28e6
push rax
pushf
mov eax, 0x660134fc
pushf
not eax
add eax, 0x92bade23
xor eax, 0xef2355b0
rol eax, 0x80
popf
pushf
not eax
add eax, 0xefb67e4b
xor eax, 0x98531c35
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xdde3d4ac
xor eax, 0xb6836519
rol eax, 0x99
popf
jmp 0x1400c1ed4
push rax
pushf
mov eax, 0xde29b844
pushf
not eax
add eax, 0xa7312849
xor eax, 0xf14587ce
rol eax, 0x28
popf
pushf
not eax
add eax, 0xa86a594e
xor eax, 0xfd5a3622
rol eax, 0x28
popf
pushf
not eax
add eax, 0xd69cd446
xor eax, 0xade39cab
rol eax, 0
popf
jmp 0x1400c1ed4
movabs r8, 0x7a448ce76b2a7838
pushf
not r8
add r8, 0x4cb848c0
xor r8, 0x7034da91
rol r8, 0x8e
popf
pushf
not r8
add r8, 0x712ddf3c
xor r8, 0x56a73b8e
rol r8, 0x1f
popf
movabs rdx, 0xb8ba6cc422f20305
pushf
not rdx
add rdx, 0x664775bc
xor rdx, 0x57f0bb01
rol rdx, 0x53
popf
pushf
not rdx
add rdx, 0x52c248aa
xor rdx, 0x44c0ac40
rol rdx, 0x2b
popf
pushf
not rdx
add rdx, 0x71e634c3
xor rdx, 0x6aa3d831
rol rdx, 0x78
popf
mov qword [rbp + 0x3f], rdx
movabs rax, 0x7e81146c72f71672
pushf
not rax
add rax, 0x54000fc5
xor rax, 0x487f38a4
rol rax, 0x54
popf
pushf
not rax
add rax, 0x658f20b6
xor rax, 0x5d40d5d2
rol rax, 0xe5
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0x784218da73327d45
pushf
not rcx
add rcx, 0x783b1cb6
xor rcx, 0x4c6f19eb
rol rcx, 0x53
popf
pushf
not rcx
add rcx, 0x671fea8f
xor rcx, 0x4386b444
rol rcx, 0xb0
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x27a755f1450adc6
pushf
not rax
add rax, 0x5f49aa57
xor rax, 0x42116948
rol rax, 0x9d
popf
pushf
not rax
add rax, 0x4b116a5e
xor rax, 0x474a7c6e
rol rax, 0xf
popf
pushf
not rax
add rax, 0x6d6809cc
xor rax, 0x77399455
rol rax, 0xb
popf
pushf
not rax
add rax, 0x7f034a88
xor rax, 0x6a67e6cf
rol rax, 0xb3
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x5ae59bea38297da9
pushf
not rcx
add rcx, 0x7f6121e8
xor rcx, 0x67280a7d
rol rcx, 0xd3
popf
pushf
not rcx
add rcx, 0x69c66457
xor rcx, 0x593e05b0
rol rcx, 0x7d
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x30d2d8c440466b07
pushf
not rax
add rax, 0x7d5634c7
xor rax, 0x79c9e70b
rol rax, 0x8b
popf
pushf
not rax
add rax, 0x4f06358c
xor rax, 0x731cab45
rol rax, 0xd7
popf
pushf
not rax
add rax, 0x6ff82752
xor rax, 0x6c53f21a
rol rax, 0xf2
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x604bdedc72d03c27
pushf
not rax
add rax, 0x751f9a08
xor rax, 0x5972735e
rol rax, 0xc4
popf
pushf
not rax
add rax, 0x7d245c48
xor rax, 0x5239de8e
rol rax, 0x16
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x4009425d3b96b14d
pushf
not rcx
add rcx, 0x52c0646d
xor rcx, 0x62a09788
rol rcx, 0x85
popf
pushf
not rcx
add rcx, 0x4fd5a953
xor rcx, 0x547599a2
rol rcx, 0x78
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movabs rax, 0xf53b952c156ddf2b
pushf
not rax
add rax, 0x6345993f
xor rax, 0x65f6af8e
rol rax, 0x8d
popf
pushf
not rax
add rax, 0x69b04238
xor rax, 0x40b60c71
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x6b830a8c
xor rax, 0x7c004731
rol rax, 0xbb
popf
pushf
not rax
add rax, 0x4ddfb1e8
xor rax, 0x4632e967
rol rax, 0xfd
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c2c6a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c33eb
cmp dword [rbp - 0x35], 4
jne 0x1400c2d0c
push rax
pushf
mov eax, 0x2b2eeedc
pushf
not eax
add eax, 0xef0ed790
xor eax, 0x8ae602a1
rol eax, 0x11
popf
pushf
not eax
add eax, 0xa0ed5ca8
xor eax, 0xccc8d634
rol eax, 0x56
popf
jmp 0x1400c1ed4
push rax
pushf
mov eax, 0x922c1fd0
pushf
not eax
add eax, 0xf085de58
xor eax, 0xcbe1ded8
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x9d29887d
xor eax, 0xbaa80a26
rol eax, 0xcb
popf
jmp 0x1400c1ed4
movabs rax, 0xb5b7ccf3b758bb7e
pushf
not rax
add rax, 0x717b85bf
xor rax, 0x6378917d
rol rax, 0xe7
popf
pushf
not rax
add rax, 0x6e32ef57
xor rax, 0x405274b5
rol rax, 0xb1
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x8cad8cbbe98274
pushf
not rax
add rax, 0x69757024
xor rax, 0x66854e23
rol rax, 0xb
popf
pushf
not rax
add rax, 0x55d9d3c9
xor rax, 0x74181319
rol rax, 0x35
popf
mov qword [rbp - 0x11], rax
movabs rax, 0xce42f07aeadd7a48
pushf
not rax
add rax, 0x4e3e8e39
xor rax, 0x6b30adbe
rol rax, 0xdc
popf
pushf
not rax
add rax, 0x76f76c0b
xor rax, 0x425423e8
rol rax, 0x12
popf
mov qword [rbp - 9], rax
movabs rax, 0xdc9963c698a6bc5f
pushf
not rax
add rax, 0x6a6ad53e
xor rax, 0x737cf338
rol rax, 0x44
popf
pushf
not rax
add rax, 0x659fbe85
xor rax, 0x6a1a7417
rol rax, 0xc6
popf
pushf
not rax
add rax, 0x400a09b5
xor rax, 0x64274a18
rol rax, 0xc7
popf
pushf
not rax
add rax, 0x69fb1542
xor rax, 0x71343ffd
rol rax, 0xd3
popf
jmp 0x1400c35a3
xor r8d, r8d
xor edx, edx
mov rcx, rdi
jmp 0x1400c2ec0
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x1400c2f01
push rax
pushf
mov eax, 0x5bbe4ef1
pushf
not eax
add eax, 0x8f2eb76b
xor eax, 0x90204419
rol eax, 0x2f
popf
pushf
not eax
add eax, 0xcb5f1bca
xor eax, 0xf52eca23
rol eax, 2
popf
jmp 0x1400c1ed4
push rax
pushf
mov eax, 0x38ee74f
pushf
not eax
add eax, 0xe3dc31a1
xor eax, 0xd0d0a07e
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xc778ac71
xor eax, 0xd82734ec
rol eax, 0xf9
popf
jmp 0x1400c1ed4
call qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rcx, 0xe9b245837d4dff0c
pushf
not rcx
add rcx, 0x4167ddf2
xor rcx, 0x4005da6e
rol rcx, 0x15
popf
pushf
not rcx
add rcx, 0x7eaac9eb
xor rcx, 0x7139408d
rol rcx, 0x21
popf
pushf
not rcx
add rcx, 0x659b35d7
xor rcx, 0x7b0f994a
rol rcx, 0xf1
popf
pushf
not rcx
add rcx, 0x4ca5624d
xor rcx, 0x5745a428
rol rcx, 0x20
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0xed6e2b0ee96f0569
pushf
not rcx
add rcx, 0x726aa6ed
xor rcx, 0x7427b265
rol rcx, 0xc6
popf
pushf
not rcx
add rcx, 0x5f044842
xor rcx, 0x41438ec4
rol rcx, 0xf0
popf
pushf
not rcx
add rcx, 0x78b25852
xor rcx, 0x7db8ddd5
rol rcx, 0x69
popf
pushf
not rcx
add rcx, 0x451ec714
xor rcx, 0x609e449b
rol rcx, 0x7e
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x25092451bc4e5da4
pushf
not rcx
add rcx, 0x56e33585
xor rcx, 0x57d5573f
rol rcx, 0xb1
popf
pushf
not rcx
add rcx, 0x41429fee
xor rcx, 0x6d97b449
rol rcx, 2
popf
mov qword [rbp + 0x27], rcx
mov ebx, eax
cmp eax, 0x420
jne 0x1400c3207
movabs rax, 0x57c78b4bca3892df
pushf
not rax
add rax, 0x439d23be
xor rax, 0x43f7460d
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x5c54b86d
xor rax, 0x7e87c8ba
rol rax, 0xdd
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x51e958b679537836
pushf
not rax
add rax, 0x7d765a3a
xor rax, 0x569e6af6
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x795421cf
xor rax, 0x4ccaf716
rol rax, 0xca
popf
pushf
not rax
add rax, 0x6963a7be
xor rax, 0x75294e66
rol rax, 0xd3
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x73c9fd71aca087b6
pushf
not rax
add rax, 0x599e7d40
xor rax, 0x51a319e5
rol rax, 0xea
popf
pushf
not rax
add rax, 0x450574ce
xor rax, 0x56e80da0
rol rax, 0xe6
popf
pushf
not rax
add rax, 0x55c64737
xor rax, 0x634151d1
rol rax, 0x98
popf
pushf
not rax
add rax, 0x4d0d64bb
xor rax, 0x544749ce
rol rax, 0xff
popf
mov qword [rbp - 9], rax
movabs rax, 0xc6c3d7b512edc268
pushf
not rax
add rax, 0x4d746d29
xor rax, 0x5b8ea6fe
rol rax, 0x79
popf
pushf
not rax
add rax, 0x46cf224d
xor rax, 0x4a80959f
rol rax, 0x16
popf
pushf
not rax
add rax, 0x408d3e94
xor rax, 0x71ba6e58
rol rax, 0x2a
popf
pushf
not rax
add rax, 0x58dc15da
xor rax, 0x40e684da
rol rax, 0x3a
popf
jmp 0x1400c3680
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x1f8a05c7c7535db3
pushf
not rax
add rax, 0x4c52127e
xor rax, 0x5c50c871
rol rax, 0x8b
popf
pushf
not rax
add rax, 0x6458e3ef
xor rax, 0x6708fda9
rol rax, 0x53
popf
pushf
not rax
add rax, 0x5d63cb5a
xor rax, 0x486fa142
rol rax, 0x22
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xcc4a986725de4fd4
pushf
not rax
add rax, 0x4fc8ec93
xor rax, 0x7e9ef1b9
rol rax, 3
popf
pushf
not rax
add rax, 0x4cc8bd6c
xor rax, 0x78ed0396
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x56b4fc3d
xor rax, 0x45afe9bb
rol rax, 0x8a
popf
mov qword [rbp - 0x11], rax
movabs rax, 0xe1f3295bd268b7c2
pushf
not rax
add rax, 0x4638e994
xor rax, 0x77602bdb
rol rax, 0x33
popf
pushf
not rax
add rax, 0x52a78bc9
xor rax, 0x4dad3ca9
rol rax, 0x58
popf
pushf
not rax
add rax, 0x69860e5e
xor rax, 0x59d22aad
rol rax, 0xde
popf
pushf
not rax
add rax, 0x7a5c1c73
xor rax, 0x53ddb625
rol rax, 0x26
popf
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 9], rax
movabs rax, 0x297f69c6c4cabc99
pushf
not rax
add rax, 0x7a1c17ab
xor rax, 0x7fbc29cb
rol rax, 0x61
popf
pushf
not rax
add rax, 0x525be459
xor rax, 0x4261a1d0
rol rax, 0xea
popf
pushf
not rax
add rax, 0x775ca606
xor rax, 0x52eb6ca3
rol rax, 2
popf
mov qword [rbp - 1], rax
movabs rax, 0x4fc9f87234b69eb9
pushf
not rax
add rax, 0x65849746
xor rax, 0x4be14756
rol rax, 0x61
popf
pushf
not rax
add rax, 0x573e766c
xor rax, 0x43db9a4e
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x448e1ae1
xor rax, 0x7851044b
rol rax, 0x70
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8eaf
mov edx, ebx
mov rcx, rax
jmp 0x1400c33eb
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b15a0df4]
pushf
sub rdx, 0x71598dd4
popf
jmp 0x1400c3407
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c3411
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c341b
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c3765
movabs rax, 0xd346e82ba7be74c3
pushf
not rax
add rax, 0x756dac4f
xor rax, 0x7978dd98
rol rax, 0xc7
popf
pushf
not rax
add rax, 0x6b82a888
xor rax, 0x4c64adbd
rol rax, 0x48
popf
pushf
not rax
add rax, 0x4e6a18e4
xor rax, 0x4e578523
rol rax, 0x7c
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x9b524ed569f56dec
pushf
not rax
add rax, 0x5911c25b
xor rax, 0x7ed80dcb
rol rax, 0xe
popf
pushf
not rax
add rax, 0x7e29d6c2
xor rax, 0x746bae1d
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x5de75bee
xor rax, 0x7c93c57f
rol rax, 0xc1
popf
pushf
not rax
add rax, 0x7a0e9111
xor rax, 0x6c655ff1
rol rax, 0xd1
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x938069e28e5fc67e
pushf
not rax
add rax, 0x7aa62d02
xor rax, 0x6dce9761
rol rax, 0x30
popf
pushf
not rax
add rax, 0x4fae2017
xor rax, 0x61b42213
rol rax, 0xf
popf
pushf
not rax
add rax, 0x7a7976f2
xor rax, 0x574f31b6
rol rax, 0xd3
popf
mov qword [rbp - 9], rax
movabs rax, 0xfb4129711301ed88
pushf
not rax
add rax, 0x51c04e15
xor rax, 0x784a41cc
rol rax, 0x91
popf
pushf
not rax
add rax, 0x67e30ace
xor rax, 0x4b999c69
rol rax, 0xaf
popf
movabs rcx, 0x7f2ce6a8091d72a3
pushf
not rcx
add rcx, 0x565af398
xor rcx, 0x4fec33ef
rol rcx, 0x23
popf
pushf
not rcx
add rcx, 0x632e0d73
xor rcx, 0x65a7fe3e
rol rcx, 0xd1
popf
pushf
not rcx
add rcx, 0x79b19f2e
xor rcx, 0x691f2fc3
rol rcx, 0x7f
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x61cfe3586885b5e6
pushf
not rcx
add rcx, 0x4f1fbdb4
xor rcx, 0x6e9ded41
rol rcx, 0x1f
popf
pushf
not rcx
add rcx, 0x5af1c070
xor rcx, 0x57217d61
rol rcx, 0x73
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x4a0e6cd26e6d3ee2
pushf
not rcx
add rcx, 0x779eb490
xor rcx, 0x6acd7412
rol rcx, 0xed
popf
pushf
not rcx
add rcx, 0x4d3c469b
xor rcx, 0x46582c3f
rol rcx, 0x85
popf
mov qword [rbp + 0x27], rcx
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp - 1], rax
movabs rax, 0xe7e93dec2c9eee6e
pushf
not rax
add rax, 0x4b01e4a2
xor rax, 0x5819eac6
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x71ec9b38
xor rax, 0x7e372060
rol rax, 0xc2
popf
pushf
not rax
add rax, 0x4188fd72
xor rax, 0x60b778b7
rol rax, 0x5a
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8eaf
lea rdx, [0x19823f3a3]
pushf
sub rdx, 0x58237383
popf
mov rcx, rax
jmp 0x1400c3715
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c371f
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c3729
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, 0x87
pushf
not al
add al, 0xf6
xor al, 0xa2
rol al, 0x99
popf
pushf
not al
add al, 0x6d
xor al, 0x5d
rol al, 0xd3
popf
pushf
not al
add al, 0x15
xor al, 0x19
rol al, 0x20
popf
pushf
not al
add al, 0x53
xor al, 0x19
rol al, 0xd9
popf
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e1fcd
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret