Function at 0x1400166bd
Capabilities:
Delete file
Print debug messages

Disassembly:
jmp 0x140028610
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x848
lea rbp, [rsp + 0x30]
mov rdi, rsp
mov ecx, 0x212
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x868]
mov rax, qword [0x140064bf8]
xor rax, rbp
mov qword [rbp + 0x808], rax
lea rcx, [0x14006d19a]
call fcn.140016276
mov dword [rbp + 4], 0xc0000022
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xe8], 0
mov eax, 0x30
mov word [rbp + 0x108], ax
mov eax, 0x32
mov word [rbp + 0x10a], ax
lea rax, str.BaseNamedObjectsCZ2128
mov qword [rbp + 0x110], rax
mov edx, 0x410
lea rcx, [rbp + 0x1b0]
call fcn.140016c2b
mov rax, qword [0x140065a08]
cmp dword [rax + 0x5c], 0x2800
jb 0x140028724
mov rax, qword [0x140065a08]
add rax, 0x480
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.14001616d
lea rdx, str.w32time.dll
lea rcx, [rbp + 0x1b0]
call fcn.1400165e1
mov r8d, dword [rbp + 0x838]
mov rdx, qword [rbp + 0x830]
lea rcx, [rbp + 0x1b0]
call fcn.140016ad7
test eax, eax
jne 0x14002871f
mov eax, dword [rbp + 4]
jmp 0x140028a37
jmp 0x1400287b7
mov r9d, 1
lea r8, str.ChiyodaMain
mov edx, dword [rbp + 0x838]
mov rcx, qword [rbp + 0x830]
call fcn.140016bef
test eax, eax
jne 0x14002874f
mov eax, dword [rbp + 4]
jmp 0x140028a37
mov rax, qword [0x140065a08]
add rax, 0x480
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.14001616d
lea rdx, str.pe386
lea rcx, [rbp + 0x1b0]
call fcn.1400165e1
lea rdx, str..exe
lea rcx, [rbp + 0x1b0]
call fcn.1400165e1
mov r8d, dword [rbp + 0x838]
mov rdx, qword [rbp + 0x830]
lea rcx, [rbp + 0x1b0]
call fcn.140016ad7
test eax, eax
jne 0x1400287b7
mov eax, dword [rbp + 4]
jmp 0x140028a37
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x138], 0x30
mov qword [rbp + 0x140], 0
mov dword [rbp + 0x150], 0x40
lea rax, [rbp + 0x108]
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x160], 0
mov byte [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0x138]
mov edx, 0x1f0003
lea rcx, [rbp + 0xa8]
call qword [sym.imp.ntdll.dll_NtCreateEvent]
test eax, eax
jge 0x140028837
jmp 0x1400289c5
lea r9, [rbp + 0xe8]
mov r8d, 4
lea rdx, [0x140044078]
lea rcx, str.179CC917_3A82_40E7_9F8C_2FC8A3D2212B
call fcn.140016889
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
je 0x140028865
jmp 0x1400289c5
lea r9, [rbp + 0xc8]
mov r8d, 4
lea rdx, [0x1400440a8]
lea rcx, str.9DF523B0_A6C0_4EA9_B5F1_F4565C3AC8B8
call fcn.140016889
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
je 0x140028893
jmp 0x1400289c5
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, qword [rbp + 0xc8]
call qword [rax + 0x60]
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
je 0x1400288b5
jmp 0x1400289c5
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 1
lea rdx, [rbp + 0x1b0]
mov rcx, qword [rbp + 0xe8]
call fcn.140016320
test eax, eax
jne 0x1400288e2
jmp 0x1400289c5
mov dword [rbp + 0x24], 5
lea rcx, str.app__svc_start_try
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
xor edx, edx
mov rcx, qword [rbp + 0xc8]
call qword [rax + 0x68]
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
je 0x140028917
jmp 0x140028953
call fcn.140016370
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 4
je 0x14002892b
cmp dword [rbp + 0x44], 2
jne 0x14002893a
lea rcx, str.app__started
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x140028953
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [rbp + 0x24]
dec eax
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jne 0x1400288e9
cmp dword [rbp + 0x64], 0
jge 0x140028979
lea rcx, str.app__StartServiceAndRefresh_failed
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0xe8]
call fcn.140016320
jmp 0x1400289c5
mov dword [rbp + 4], 0
lea rcx, str.app__waiting_for_an_event_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov qword [rbp + 0x188], 0xfffffffff4143e00
lea r8, [rbp + 0x188]
xor edx, edx
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.ntdll.dll_NtWaitForSingleObject]
lea rcx, str.app__wait_complete_r_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
xor eax, eax
test eax, eax
jne 0x1400287ca
cmp qword [rbp + 0xa8], 0
je 0x1400289dc
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.ntdll.dll_NtClose]
cmp qword [rbp + 0xe8], 0
je 0x1400289fa
mov rax, qword [rbp + 0xe8]
mov rax, qword [rax]
mov rcx, qword [rbp + 0xe8]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
cmp qword [rbp + 0xc8], 0
je 0x140028a18
mov rax, qword [rbp + 0xc8]
mov rax, qword [rax]
mov rcx, qword [rbp + 0xc8]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
cmp dword [rbp + 0x84], 0
jne 0x140028a27
call qword [sym.imp.ole32.dll_CoUninitialize]
lea rcx, [rbp + 0x1b0]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [rbp + 4]
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14004d0e0]
call fcn.140016b90
mov rax, rdi
mov rcx, qword [rbp + 0x808]
xor rcx, rbp
call fcn.14001633e
lea rsp, [rbp + 0x818]
pop rdi
pop rbp
ret