Function at 0x1400c0731
Capabilities:
Query service status

Disassembly:
push rax
pushf
mov eax, 0xd03cd08
pushf
not eax
add eax, 0x88105909
xor eax, 0xbfbc9137
rol eax, 0xed
popf
pushf
not eax
add eax, 0xac9f977f
xor eax, 0xf7171d8b
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xb440b018
xor eax, 0xf461a951
rol eax, 0x4a
popf
cmp eax, 4
jne 0x1400c0781
popf
pop rax
jmp 0x1400c10ff
cmp eax, 0
jne 0x1400c0790
popf
pop rax
jmp 0x1400c07ea
cmp eax, 3
jne 0x1400c079f
popf
pop rax
jmp 0x1400c0deb
cmp eax, 1
jne 0x1400c07ae
popf
pop rax
jmp 0x1400c08b9
cmp eax, 5
jne 0x1400c07bd
popf
pop rax
jmp 0x1400c118e
cmp eax, 7
jne 0x1400c07cc
popf
pop rax
jmp 0x1400c15ad
cmp eax, 6
jne 0x1400c07db
popf
pop rax
jmp 0x1400c155f
cmp eax, 2
jne 0x1400c07ea
popf
pop rax
jmp 0x1400c0d79
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c081b
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x1400c0886
push rax
pushf
mov eax, 0x931e10ea
pushf
not eax
add eax, 0xe691be3e
xor eax, 0xbc3bb7a8
rol eax, 0xff
popf
pushf
not eax
add eax, 0xa5dc78a5
xor eax, 0x87a07b2a
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xad30324d
xor eax, 0xc3c1e8bd
rol eax, 0x72
popf
pushf
not eax
add eax, 0xe041e3d1
xor eax, 0xd42d7829
rol eax, 0x53
popf
jmp 0x1400c0772
push rax
pushf
mov eax, 0x72fbff2b
pushf
not eax
add eax, 0xd1dac393
xor eax, 0xa74e0b2a
rol eax, 0xe
popf
pushf
not eax
add eax, 0x995f9de5
xor eax, 0xe58c1f80
rol eax, 0xa2
popf
jmp 0x1400c0772
movabs rdx, 0x4a1f5af1d77fd474
pushf
not rdx
add rdx, 0x51a55ee0
xor rdx, 0x649e1ab5
rol rdx, 0xfb
popf
pushf
not rdx
add rdx, 0x4074abff
xor rdx, 0x475ceda1
rol rdx, 0x1f
popf
pushf
not rdx
add rdx, 0x53b6e793
xor rdx, 0x71aaced0
rol rdx, 0x32
popf
pushf
not rdx
add rdx, 0x7527065f
xor rdx, 0x712a5006
rol rdx, 0x9d
popf
movabs rax, 0x5339cffedc1f4f96
pushf
not rax
add rax, 0x7e8248be
xor rax, 0x6afb563c
rol rax, 0x30
popf
pushf
not rax
add rax, 0x41639c14
xor rax, 0x4610986e
rol rax, 0xee
popf
pushf
not rax
add rax, 0x7535d949
xor rax, 0x6eae1015
rol rax, 0x2b
popf
pushf
not rax
add rax, 0x7fe751a6
xor rax, 0x67b42067
rol rax, 0x13
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x2a3a3ea796dd0f69
pushf
not rcx
add rcx, 0x46ae9239
xor rcx, 0x70a6236b
rol rcx, 0xa7
popf
pushf
not rcx
add rcx, 0x4ddcdb95
xor rcx, 0x56b2441e
rol rcx, 0xdf
popf
pushf
not rcx
add rcx, 0x43c7f40a
xor rcx, 0x6d162336
rol rcx, 0xb4
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x4254994ccd1ee5c0
pushf
not rax
add rax, 0x665ab229
xor rax, 0x74c70800
rol rax, 0x32
popf
pushf
not rax
add rax, 0x477ce7e7
xor rax, 0x46849c7e
rol rax, 0xc4
popf
pushf
not rax
add rax, 0x478a12ff
xor rax, 0x5e77c337
rol rax, 0x33
popf
pushf
not rax
add rax, 0x46d060c3
xor rax, 0x6126335b
rol rax, 0x47
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xa782aa692cfa39d2
pushf
not rcx
add rcx, 0x678a0d35
xor rcx, 0x7f29b71a
rol rcx, 0xed
popf
pushf
not rcx
add rcx, 0x7d471773
xor rcx, 0x65b8037d
rol rcx, 0x58
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xb4c059217825352
pushf
not rax
add rax, 0x69ecdc03
xor rax, 0x4a1342d4
rol rax, 0x21
popf
pushf
not rax
add rax, 0x5d3b6ba4
xor rax, 0x44ff0d1a
rol rax, 0xfd
popf
pushf
not rax
add rax, 0x7d5466a3
xor rax, 0x7b515ee8
rol rax, 0xa0
popf
pushf
not rax
add rax, 0x66bc0833
xor rax, 0x686f9b7f
rol rax, 0x1e
popf
mov qword [rbp - 9], rax
movabs r8, 0xd5bc4641820283e3
pushf
not r8
add r8, 0x616760ff
xor r8, 0x6d29d7fc
rol r8, 0xd9
popf
pushf
not r8
add r8, 0x66aa7e80
xor r8, 0x7a6d202d
rol r8, 0x50
popf
mov qword [rbp + 0x1f], rcx
movabs rax, 0xbdc0d3070f57c9b2
pushf
not rax
add rax, 0x59695fc5
xor rax, 0x582cecab
rol rax, 0xa1
popf
pushf
not rax
add rax, 0x718eb361
xor rax, 0x45ed6464
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x4779bbbd
xor rax, 0x55ca3ef2
rol rax, 0xb3
popf
xorps xmm0, xmmword [rbp + 0x17]
movabs rcx, 0x51bfa4447b494cc6
pushf
not rcx
add rcx, 0x74b60289
xor rcx, 0x68ea23e0
rol rcx, 0xc5
popf
pushf
not rcx
add rcx, 0x4ec8cafa
xor rcx, 0x6e9b7447
rol rcx, 0x51
popf
mov qword [rbp - 1], rax
movabs rax, 0x6a43cb794417d83a
pushf
not rax
add rax, 0x6aa95d69
xor rax, 0x5f633890
rol rax, 0x63
popf
pushf
not rax
add rax, 0x76acaf0d
xor rax, 0x7eca75b5
rol rax, 0x4d
popf
pushf
not rax
add rax, 0x403dc007
xor rax, 0x5fc07df1
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x5aac8c8a
xor rax, 0x458846d8
rol rax, 0xfa
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0xc0f1aca7215353fe
pushf
not rax
add rax, 0x65c47aa5
xor rax, 0x634bc034
rol rax, 0x51
popf
pushf
not rax
add rax, 0x7d65889c
xor rax, 0x5a437266
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x4a26156a
xor rax, 0x4c61e172
rol rax, 0xfa
popf
pushf
not rax
add rax, 0x74a396ef
xor rax, 0x58ce2f9d
rol rax, 0x45
popf
mov qword [rbp + 0xf], rdx
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c0ceb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0cf7
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18d1fd0e7]
pushf
sub rdx, 0x4d1f50c7
popf
jmp 0x1400c0d13
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c15b5
mov r8d, 0xe9bf2f4b
pushf
not r8d
add r8d, 0xa4a38398
xor r8d, 0xddda9c23
rol r8d, 0xf5
popf
pushf
not r8d
add r8d, 0xddc613fa
xor r8d, 0xd32207cf
rol r8d, 0x7b
popf
pushf
not r8d
add r8d, 0xf9ced323
xor r8d, 0x80e2f9c3
rol r8d, 0x50
popf
mov qword [rsp + 0xc8], rsi
mov rdx, rbx
mov rcx, rdi
jmp 0x1400c0dd9
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x1400c10ff
movabs rax, 0xe273e8d7ad0845dc
pushf
not rax
add rax, 0x65910791
xor rax, 0x732d98fd
rol rax, 0x92
popf
pushf
not rax
add rax, 0x6c725f73
xor rax, 0x4ecbff0b
rol rax, 0x5b
popf
pushf
not rax
add rax, 0x53831a9d
xor rax, 0x54456d1d
rol rax, 0xbd
popf
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rax
movabs rcx, 0xb9d26d58ff852ea4
pushf
not rcx
add rcx, 0x7d6892e2
xor rcx, 0x7ed3aac4
rol rcx, 8
popf
pushf
not rcx
add rcx, 0x40c3cd95
xor rcx, 0x54bbc7d4
rol rcx, 0x23
popf
pushf
not rcx
add rcx, 0x553a8c39
xor rcx, 0x4afd5db6
rol rcx, 0x3a
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x74771d7babfba97a
pushf
not rax
add rax, 0x5da53739
xor rax, 0x6db17e03
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x5cc915ab
xor rax, 0x5bf1fad4
rol rax, 0x38
popf
pushf
not rax
add rax, 0x54d73f2b
xor rax, 0x6f432a57
rol rax, 0x1e
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x4b23c2c41cdd7227
pushf
not rcx
add rcx, 0x46a96daa
xor rcx, 0x626f573b
rol rcx, 0xc2
popf
pushf
not rcx
add rcx, 0x4c01cfe9
xor rcx, 0x5473cfd2
rol rcx, 0x89
popf
pushf
not rcx
add rcx, 0x58e95409
xor rcx, 0x471835c9
rol rcx, 0xcf
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x33a96055b240a348
pushf
not rax
add rax, 0x57905ad8
xor rax, 0x7f9043e6
rol rax, 0x54
popf
pushf
not rax
add rax, 0x4ac2e68a
xor rax, 0x607f1f43
rol rax, 0x34
popf
pushf
not rax
add rax, 0x673f619b
xor rax, 0x69b279f6
rol rax, 0xab
popf
pushf
not rax
add rax, 0x4ac586d9
xor rax, 0x5b6d1ce2
rol rax, 0xfb
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x51203c8756f82950
pushf
not rax
add rax, 0x63a77b1a
xor rax, 0x72d34305
rol rax, 0xbf
popf
pushf
not rax
add rax, 0x43775c68
xor rax, 0x777453c4
rol rax, 0x1a
popf
pushf
not rax
add rax, 0x5f3c287f
xor rax, 0x5eb3ce01
rol rax, 0x38
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x1d03f946d6b634b3
pushf
not rcx
add rcx, 0x51cf86d2
xor rcx, 0x67c215fc
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x427adcd8
xor rcx, 0x69fbb682
rol rcx, 0x71
popf
pushf
not rcx
add rcx, 0x7a6680c9
xor rcx, 0x5cbaae0f
rol rcx, 0x80
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x17], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c108d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c1099
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18e90efe0]
pushf
sub rdx, 0x4e906fc0
popf
jmp 0x1400c10b5
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c10bf
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c15ad
lea rdx, [rbp - 0x39]
mov rcx, rsi
jmp 0x1400c1107
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c115b
push rax
pushf
mov eax, 0x84c777f9
pushf
not eax
add eax, 0xa60ce8eb
xor eax, 0xe9d46428
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x9ac9b0fa
xor eax, 0x89e8b07f
rol eax, 0xed
popf
pushf
not eax
add eax, 0xff022cf1
xor eax, 0xf72c3516
rol eax, 0xf7
popf
jmp 0x1400c0772
push rax
pushf
mov eax, 0x2a138b9
pushf
not eax
add eax, 0x9d322654
xor eax, 0xb45fbc67
rol eax, 8
popf
pushf
not eax
add eax, 0xcd103bef
xor eax, 0xfdbe3ea0
rol eax, 0xbc
popf
jmp 0x1400c0772
movabs r8, 0x11c6b90c4092c0a4
pushf
not r8
add r8, 0x4a735167
xor r8, 0x40f795da
rol r8, 0xfd
popf
pushf
not r8
add r8, 0x4e7cdc33
xor r8, 0x47c29e65
rol r8, 0xb0
popf
movabs rdx, 0x3ad2f06dbaabb191
pushf
not rdx
add rdx, 0x6a7a00be
xor rdx, 0x6191f70a
rol rdx, 0xa
popf
pushf
not rdx
add rdx, 0x73f6e524
xor rdx, 0x476dfd94
rol rdx, 0x8a
popf
pushf
not rdx
add rdx, 0x415e3a3b
xor rdx, 0x43f7ef6e
rol rdx, 0xb6
popf
mov qword [rbp + 0xf], rdx
movabs rax, 0x67d5d610c88dbb4a
pushf
not rax
add rax, 0x492595ed
xor rax, 0x5604d68e
rol rax, 0x61
popf
pushf
not rax
add rax, 0x741aa733
xor rax, 0x6ad0ffd5
rol rax, 0x3e
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x2cd81ebe42855415
pushf
not rcx
add rcx, 0x4e503dff
xor rcx, 0x65f44310
rol rcx, 0x38
popf
pushf
not rcx
add rcx, 0x704925fb
xor rcx, 0x44389c5c
rol rcx, 0x52
popf
pushf
not rcx
add rcx, 0x48c35893
xor rcx, 0x6e0b8cf6
rol rcx, 6
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0xbd9284d407b40cf5
pushf
not rax
add rax, 0x6ca9fb70
xor rax, 0x6b7db773
rol rax, 0x71
popf
pushf
not rax
add rax, 0x60453684
xor rax, 0x4eaf61e1
rol rax, 0xfd
popf
pushf
not rax
add rax, 0x6478e0d8
xor rax, 0x6f5ecc4d
rol rax, 0xe0
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xf47af7ae1be09c0e
pushf
not rcx
add rcx, 0x78f5b081
xor rcx, 0x480739b9
rol rcx, 0x69
popf
pushf
not rcx
add rcx, 0x53df163b
xor rcx, 0x566fe8f0
rol rcx, 0x47
popf
pushf
not rcx
add rcx, 0x550fe67e
xor rcx, 0x489e4b2c
rol rcx, 0xba
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x5973a193b226d375
pushf
not rax
add rax, 0x76d9d56f
xor rax, 0x6118115b
rol rax, 0x3c
popf
pushf
not rax
add rax, 0x5a04573a
xor rax, 0x52c3d910
rol rax, 0xbf
popf
pushf
not rax
add rax, 0x545e18b8
xor rax, 0x6ecffe70
rol rax, 0x4f
popf
mov qword [rbp - 9], rax
movabs rax, 0xf7232a63394bc670
pushf
not rax
add rax, 0x5ebd8d5f
xor rax, 0x65c1cfca
rol rax, 0x64
popf
pushf
not rax
add rax, 0x5c652ec8
xor rax, 0x7b299585
rol rax, 0xe1
popf
pushf
not rax
add rax, 0x7d3bd5e7
xor rax, 0x7d80502e
rol rax, 0x37
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0xde7e13648f9aaa1e
pushf
not rcx
add rcx, 0x731572e6
xor rcx, 0x71f7d40f
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x41935659
xor rcx, 0x69a99a27
rol rcx, 0x27
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movabs rax, 0x9e06594f3cdd592
pushf
not rax
add rax, 0x452b5f36
xor rax, 0x7b4527ec
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x7acda944
xor rax, 0x4ecc68a3
rol rax, 0x81
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c14d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c14dc
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1afcdbd85]
pushf
sub rdx, 0x6fcd3d65
popf
jmp 0x1400c14f8
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c1502
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c150c
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c15ad
mov rcx, rsi
jmp 0x1400c1563
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c156d
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [rbp - 0x35], 4
sete al
push rax
pushf
mov eax, 0x9494af40
pushf
not eax
add eax, 0x9f98be50
xor eax, 0xe40944c8
rol eax, 0x1f
popf
pushf
not eax
add eax, 0x89f7c91e
xor eax, 0x9271234a
rol eax, 0xbc
popf
jmp 0x1400c0772
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e25c8
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret