Function at 0x14002c170
Capabilities:
Start service

Disassembly:
push rbx
sub rsp, 0x70
mov rax, qword [0x140093008]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rbx, rdx
lea rdx, str.install
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c1b5
call fcn.14002c980
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003d770
add rsp, 0x70
pop rbx
ret
mov rcx, qword [rbx + 8]
lea rdx, str.uninstall
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c1e2
call fcn.14002ccc0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003d770
add rsp, 0x70
pop rbx
ret
mov rcx, qword [rbx + 8]
lea rdx, str.start
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x90], rdi
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c2fc
mov ebx, 1
xor edx, edx
mov r8d, ebx
xor ecx, ecx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
je 0x14002c32f
lea r8d, [rbx + 0xf]
mov rcx, rax
lea rdx, str.jhi_service
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x14002c283
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c33a
cmp eax, 0x424
je 0x14002c3a0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Open_Service_failed:___d__n
call fcn.140020490
mov eax, ebx
jmp 0x14002c4f8
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_StartServiceW]
test eax, eax
jne 0x14002c2f0
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c33a
cmp eax, 0x420
jne 0x14002c2d5
lea rcx, str.Error:_JHI_service_already_running._n
call fcn.140020490
mov ebx, 5
mov eax, ebx
jmp 0x14002c4f8
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Start_Service_failed:___d__n
call fcn.140020490
mov eax, ebx
jmp 0x14002c4f8
lea rcx, str.JHI_Service_started_successfully_n
jmp 0x14002c42e
mov rcx, qword [rbx + 8]
lea rdx, str.stop
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c44e
mov ebx, 1
xor edx, edx
mov r8d, ebx
xor ecx, ecx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x14002c367
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
jne 0x14002c352
lea rcx, str.ACCESS_DENIED:_administrative_privileges_required._n
call fcn.140020490
mov ebx, 2
mov eax, ebx
jmp 0x14002c4f8
mov edx, eax
lea rcx, str.OpenSCManager_failed___d__n
call fcn.140020490
mov eax, ebx
jmp 0x14002c4f8
mov r8d, 0x20000000
lea rdx, str.jhi_service
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x14002c3d3
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c33a
cmp eax, 0x424
jne 0x14002c3b8
lea rcx, str.Error:_the_service_does_not_exist._n
call fcn.140020490
mov ebx, 4
mov eax, ebx
jmp 0x14002c4f8
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edx, eax
lea rcx, str.Stop_Service_failed:___d__n
call fcn.140020490
mov eax, ebx
jmp 0x14002c4f8
lea r8, [rsp + 0x40]
mov edx, ebx
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_winsvc_l1_1_0.dll_ControlService]
test eax, eax
jne 0x14002c427
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 5
je 0x14002c33a
cmp eax, 0x426
jne 0x14002c3b8
lea rcx, str.Error:_JHI_service_has_not_been_started._n
call fcn.140020490
mov ebx, 6
mov eax, ebx
jmp 0x14002c4f8
lea rcx, str.JHI_Service_terminated_successfully_n
call fcn.140020490
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
mov rcx, rsi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
xor ebx, ebx
mov eax, ebx
jmp 0x14002c4f8
mov rcx, qword [rbx + 8]
lea rdx, [0x1400803f4]
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c49f
lea rdx, [0x14007e190]
lea rcx, [0x1400954d0]
call fcn.140006f30
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140006d30
movzx edx, al
mov rcx, rbx
call fcn.140007aa0
mov rcx, rbx
call fcn.140006a00
jmp 0x14002c4f6
mov rcx, qword [rbx + 8]
lea rdx, str.console
call qword [sym.imp.api_ms_win_core_string_obsolete_l1_1_0.dll_lstrcmpiW]
test eax, eax
jne 0x14002c4c7
lea rcx, str.Running_JHI_in_console_is_only_supported_in_debug_or_emulation_mode._n
call fcn.140020490
mov eax, 1
jmp 0x14002c4f8
xor ebx, ebx
lea rax, str.jhi_service
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
lea rax, [0x14002ce80]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], rbx
call qword [sym.imp.api_ms_win_service_core_l1_1_0.dll_StartServiceCtrlDispatcherW]
xor eax, eax
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14003d770
add rsp, 0x70
pop rbx
ret