Function at 0x14002bee0
Capabilities:
Start service

Disassembly:
push rbx
sub rsp, 0x70
mov rax, qword [0x140092008]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbx, rdx
lea rdx, str.install
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002bf25
call fcn.14002c6f0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003ce20
add rsp, 0x70
pop rbx
ret
mov rcx, qword [rbx + 8]
lea rdx, str.uninstall
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002bf52
call fcn.14002ca30
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003ce20
add rsp, 0x70
pop rbx
ret
mov rcx, qword [rbx + 8]
lea rdx, str.start
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x90], rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c06c
mov ebx, 1
xor edx, edx
mov r8d, ebx
xor ecx, ecx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
je 0x14002c09f
lea r8d, [rbx + 0xf]
mov rcx, rax
lea rdx, str.jhi_service
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x14002bff3
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c0aa
cmp eax, 0x424
je 0x14002c110
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Open_Service_failed:___d__n
call fcn.140020340
mov eax, ebx
jmp 0x14002c268
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_StartServiceW]
test eax, eax
jne 0x14002c060
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c0aa
cmp eax, 0x420
jne 0x14002c045
lea rcx, str.Error:_JHI_service_already_running._n
call fcn.140020340
mov ebx, 5
mov eax, ebx
jmp 0x14002c268
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Start_Service_failed:___d__n
call fcn.140020340
mov eax, ebx
jmp 0x14002c268
lea rcx, str.JHI_Service_started_successfully_n
jmp 0x14002c19e
mov rcx, qword [rbx + 8]
lea rdx, str.stop
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c1be
mov ebx, 1
xor edx, edx
mov r8d, ebx
xor ecx, ecx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x14002c0d7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
jne 0x14002c0c2
lea rcx, str.ACCESS_DENIED:_administrative_privileges_required._n
call fcn.140020340
mov ebx, 2
mov eax, ebx
jmp 0x14002c268
mov edx, eax
lea rcx, str.OpenSCManager_failed___d__n
call fcn.140020340
mov eax, ebx
jmp 0x14002c268
mov r8d, 0x20000000
lea rdx, str.jhi_service
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x14002c143
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c0aa
cmp eax, 0x424
jne 0x14002c128
lea rcx, str.Error:_the_service_does_not_exist._n
call fcn.140020340
mov ebx, 4
mov eax, ebx
jmp 0x14002c268
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Stop_Service_failed:___d__n
call fcn.140020340
mov eax, ebx
jmp 0x14002c268
lea r8, [rsp + 0x40]
mov edx, ebx
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_winsvc_l1_1_0.dll_ControlService]
test eax, eax
jne 0x14002c197
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c0aa
cmp eax, 0x426
jne 0x14002c128
lea rcx, str.Error:_JHI_service_has_not_been_started._n
call fcn.140020340
mov ebx, 6
mov eax, ebx
jmp 0x14002c268
lea rcx, str.JHI_Service_terminated_successfully_n
call fcn.140020340
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
xor ebx, ebx
mov eax, ebx
jmp 0x14002c268
mov rcx, qword [rbx + 8]
lea rdx, [0x14007ef54]
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c20f
lea rdx, [0x14007ef60]
lea rcx, [0x1400944d0]
call fcn.140006f30
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140006d30
movzx edx, al
mov rcx, rbx
call fcn.140007aa0
mov rcx, rbx
call fcn.140006a00
jmp 0x14002c266
mov rcx, qword [rbx + 8]
lea rdx, str.console
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c237
lea rcx, str.Running_JHI_in_console_is_only_supported_in_debug_or_emulation_mode._n
call fcn.140020340
mov eax, 1
jmp 0x14002c268
xor ebx, ebx
lea rax, str.jhi_service
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
lea rax, [0x14002cb90]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rbx
call qword [sym.imp.api_ms_win_service_core_l1_1_0.dll_StartServiceCtrlDispatcherW]
xor eax, eax
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003ce20
add rsp, 0x70
pop rbx
ret