Function at 0x1400c0700
Capabilities:
Query service status

Disassembly:
push rax
pushf
mov eax, 0xcb3737f7
pushf
not eax
add eax, 0x8c107ef2
xor eax, 0xd147f9d3
rol eax, 0x71
popf
pushf
not eax
add eax, 0xed681ad0
xor eax, 0x92577c3a
rol eax, 3
popf
pushf
not eax
add eax, 0xf777e432
xor eax, 0xe373a1af
rol eax, 0xe0
popf
pushf
not eax
add eax, 0xa3e13271
xor eax, 0xb5d10b2b
rol eax, 0xce
popf
cmp eax, 4
jne 0x1400c0763
popf
pop rax
jmp 0x1400c1074
cmp eax, 0
jne 0x1400c0772
popf
pop rax
jmp 0x1400c07cc
cmp eax, 3
jne 0x1400c0781
popf
pop rax
jmp 0x1400c0d7b
cmp eax, 1
jne 0x1400c0790
popf
pop rax
jmp 0x1400c0888
cmp eax, 5
jne 0x1400c079f
popf
pop rax
jmp 0x1400c113b
cmp eax, 7
jne 0x1400c07ae
popf
pop rax
jmp 0x1400c156a
cmp eax, 6
jne 0x1400c07bd
popf
pop rax
jmp 0x1400c14f6
cmp eax, 2
jne 0x1400c07cc
popf
pop rax
jmp 0x1400c0cf0
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c07fd
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x1400c0855
push rax
pushf
mov eax, 0x7c324e7
pushf
not eax
add eax, 0x8cb6bf4d
xor eax, 0x86390749
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc3aeaec8
xor eax, 0x9dc1acb1
rol eax, 0xba
popf
pushf
not eax
add eax, 0xd6dc71b3
xor eax, 0xe300cede
rol eax, 0xaf
popf
jmp 0x1400c0754
push rax
pushf
mov eax, 0x539d6b77
pushf
not eax
add eax, 0xc774de5d
xor eax, 0xd3b3dadd
rol eax, 0x64
popf
pushf
not eax
add eax, 0xf1be0188
xor eax, 0xeb737cfd
rol eax, 0xb9
popf
jmp 0x1400c0754
movabs rdx, 0xf989a5b8201abf37
pushf
not rdx
add rdx, 0x54196426
xor rdx, 0x640b599f
rol rdx, 0x47
popf
pushf
not rdx
add rdx, 0x7a78def4
xor rdx, 0x516047b4
rol rdx, 7
popf
pushf
not rdx
add rdx, 0x4d61e204
xor rdx, 0x54774e64
rol rdx, 0x95
popf
pushf
not rdx
add rdx, 0x41efb8f2
xor rdx, 0x6eb23092
rol rdx, 0x81
popf
movabs rax, 0xac68ad0d7631eb61
pushf
not rax
add rax, 0x6981187d
xor rax, 0x59586793
rol rax, 0x3e
popf
pushf
not rax
add rax, 0x54afb41f
xor rax, 0x5174e628
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x5c2fc5ac
xor rax, 0x47b9df97
rol rax, 0xb1
popf
pushf
not rax
add rax, 0x6a46facf
xor rax, 0x7799a07c
rol rax, 0x6b
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0xe366da23fae3aa5a
pushf
not rcx
add rcx, 0x7c08ecfe
xor rcx, 0x44236531
rol rcx, 0xf6
popf
pushf
not rcx
add rcx, 0x728920d5
xor rcx, 0x63d9e7e8
rol rcx, 0xbb
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x2dc36e1a12fe99c3
pushf
not rax
add rax, 0x547e6029
xor rax, 0x41f1d3d0
rol rax, 0x25
popf
pushf
not rax
add rax, 0x58703bf9
xor rax, 0x5d51d615
rol rax, 0xd5
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xfc2251d2281e5f6
pushf
not rcx
add rcx, 0x7d8d4562
xor rcx, 0x4a5ad2d1
rol rcx, 0x69
popf
pushf
not rcx
add rcx, 0x5eadc900
xor rcx, 0x48d51b92
rol rcx, 0x17
popf
pushf
not rcx
add rcx, 0x42d3305f
xor rcx, 0x78194af6
rol rcx, 0x29
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xee734483befa1a21
pushf
not rax
add rax, 0x46be3d3f
xor rax, 0x7cdc17bd
rol rax, 0xaa
popf
pushf
not rax
add rax, 0x6dda0828
xor rax, 0x41451139
rol rax, 0x65
popf
pushf
not rax
add rax, 0x60863eb1
xor rax, 0x67db6337
rol rax, 0xdf
popf
pushf
not rax
add rax, 0x45a9e06a
xor rax, 0x7478aac2
rol rax, 0x5f
popf
mov qword [rbp - 9], rax
movabs r8, 0x98ed61f71cae22ce
pushf
not r8
add r8, 0x4781bdad
xor r8, 0x5ce77ce0
rol r8, 0x91
popf
pushf
not r8
add r8, 0x6a91d14d
xor r8, 0x7d84b538
rol r8, 0x69
popf
pushf
not r8
add r8, 0x57d3e8e0
xor r8, 0x4fb5a2d6
rol r8, 0xc
popf
mov qword [rbp + 0x1f], rcx
movabs rax, 0xe79018852843893b
pushf
not rax
add rax, 0x5a0d7637
xor rax, 0x79a32100
rol rax, 0x64
popf
pushf
not rax
add rax, 0x4338d841
xor rax, 0x6960c631
rol rax, 0x78
popf
pushf
not rax
add rax, 0x6eed54e2
xor rax, 0x578f5c0d
rol rax, 0x1b
popf
xorps xmm0, xmmword [rbp + 0x17]
movabs rcx, 0xca77faedb9763aad
pushf
not rcx
add rcx, 0x41a7964a
xor rcx, 0x487ddd5f
rol rcx, 0x77
popf
pushf
not rcx
add rcx, 0x4ddec659
xor rcx, 0x6b167d3f
rol rcx, 0xd7
popf
pushf
not rcx
add rcx, 0x54a19699
xor rcx, 0x7596ec02
rol rcx, 0xb8
popf
mov qword [rbp - 1], rax
movabs rax, 0xc513d7188efe053d
pushf
not rax
add rax, 0x6ec2b47b
xor rax, 0x79798835
rol rax, 0x35
popf
pushf
not rax
add rax, 0x54b599b8
xor rax, 0x4901161d
rol rax, 0x79
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0xb27d6c21a6aaa43a
pushf
not rax
add rax, 0x5118401a
xor rax, 0x6fe3e632
rol rax, 0xe
popf
pushf
not rax
add rax, 0x63329160
xor rax, 0x6ae9fd9f
rol rax, 0x10
popf
mov qword [rbp + 0xf], rdx
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c0c62
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0c6e
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1879ee1c7]
pushf
sub rdx, 0x479e61a7
popf
jmp 0x1400c0c8a
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c1572
mov r8d, 0xb4a3482e
pushf
not r8d
add r8d, 0xa850760c
xor r8d, 0xa710db65
rol r8d, 0xf7
popf
pushf
not r8d
add r8d, 0xad4ba9ac
xor r8d, 0x99711b90
rol r8d, 0x70
popf
pushf
not r8d
add r8d, 0xed050497
xor r8d, 0xd09d6784
rol r8d, 0x9a
popf
pushf
not r8d
add r8d, 0xc714d3b8
xor r8d, 0xbfe6ee48
rol r8d, 9
popf
mov qword [rsp + 0xc8], rsi
mov rdx, rbx
mov rcx, rdi
jmp 0x1400c0d69
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x1400c1074
movabs rax, 0xdf24d3bb5a287b2f
pushf
not rax
add rax, 0x7da714ad
xor rax, 0x6f59bc39
rol rax, 0x3b
popf
pushf
not rax
add rax, 0x5519f476
xor rax, 0x6b7543ee
rol rax, 0x78
popf
pushf
not rax
add rax, 0x516746c1
xor rax, 0x44602979
rol rax, 0x97
popf
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rax
movabs rcx, 0x8e38a2ef075c0159
pushf
not rcx
add rcx, 0x64ec8201
xor rcx, 0x444b2340
rol rcx, 0x3a
popf
pushf
not rcx
add rcx, 0x4e7e75b6
xor rcx, 0x67f461fc
rol rcx, 0x19
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x8ff87700ce5a10e
pushf
not rax
add rax, 0x6e7318b3
xor rax, 0x472e9a6c
rol rax, 0x66
popf
pushf
not rax
add rax, 0x65247e6d
xor rax, 0x41dc185b
rol rax, 0x6a
popf
pushf
not rax
add rax, 0x6c4e78df
xor rax, 0x7931ab5f
rol rax, 0x5e
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xfd50abac9296b8e
pushf
not rcx
add rcx, 0x4f956402
xor rcx, 0x675192c4
rol rcx, 0xb4
popf
pushf
not rcx
add rcx, 0x6dd6d5cf
xor rcx, 0x707dd136
rol rcx, 9
popf
pushf
not rcx
add rcx, 0x452914e0
xor rcx, 0x476566ab
rol rcx, 0xec
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0xc8362599c389578
pushf
not rax
add rax, 0x5e57c4c8
xor rax, 0x5667bb95
rol rax, 0xce
popf
pushf
not rax
add rax, 0x48673c45
xor rax, 0x6c0ebd29
rol rax, 0x7e
popf
pushf
not rax
add rax, 0x4012a222
xor rax, 0x69a746d8
rol rax, 0x3d
popf
mov qword [rbp + 0x27], rax
movabs rax, 0xca95ec06502f374e
pushf
not rax
add rax, 0x5ee60e11
xor rax, 0x5e8cc7d6
rol rax, 0x7f
popf
pushf
not rax
add rax, 0x70d3101e
xor rax, 0x4a6e45e7
rol rax, 0xb5
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0xe8979407db8453c3
pushf
not rcx
add rcx, 0x726c071d
xor rcx, 0x752000e4
rol rcx, 0xaf
popf
pushf
not rcx
add rcx, 0x47514dd8
xor rcx, 0x4354d69b
rol rcx, 0x4f
popf
pushf
not rcx
add rcx, 0x429856be
xor rcx, 0x540d44fb
rol rcx, 0x13
popf
pushf
not rcx
add rcx, 0x7d8106bb
xor rcx, 0x6706328e
rol rcx, 0x49
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x17], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c0fef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0ffb
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1852a5644]
pushf
sub rdx, 0x4529d624
popf
jmp 0x1400c1017
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c1021
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c156a
lea rdx, [rbp - 0x39]
mov rcx, rsi
jmp 0x1400c107c
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c10e3
push rax
pushf
mov eax, 0x62e5f18
pushf
not eax
add eax, 0xfcf915ea
xor eax, 0x993ec30d
rol eax, 0x6d
popf
pushf
not eax
add eax, 0xaaf6553c
xor eax, 0xff6d5d71
rol eax, 0xca
popf
pushf
not eax
add eax, 0x90a71b77
xor eax, 0xa241f279
rol eax, 0x8e
popf
pushf
not eax
add eax, 0xd097cd5f
xor eax, 0x9b33a93f
rol eax, 0xc4
popf
jmp 0x1400c0754
push rax
pushf
mov eax, 0xe99eea8a
pushf
not eax
add eax, 0xd9db2279
xor eax, 0x96738145
rol eax, 0x31
popf
pushf
not eax
add eax, 0x97dda5af
xor eax, 0xdb006a30
rol eax, 1
popf
pushf
not eax
add eax, 0xe5e87774
xor eax, 0x8e20669c
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xb290e637
xor eax, 0xfb2a5e67
rol eax, 0xf9
popf
jmp 0x1400c0754
movabs r8, 0xc0a432291c2fd990
pushf
not r8
add r8, 0x60caa8cb
xor r8, 0x60425c51
rol r8, 0x8a
popf
pushf
not r8
add r8, 0x57ce8c9d
xor r8, 0x4dfc01f1
rol r8, 0x62
popf
pushf
not r8
add r8, 0x67fa1fdb
xor r8, 0x5760b6d8
rol r8, 0xb6
popf
movabs rdx, 0x18216ebc2e3175b5
pushf
not rdx
add rdx, 0x4d17da31
xor rdx, 0x65f7a5ce
rol rdx, 0x89
popf
pushf
not rdx
add rdx, 0x6274cf6a
xor rdx, 0x597fb5a7
rol rdx, 1
popf
mov qword [rbp + 0xf], rdx
movabs rax, 0x3f4420dbafc8bb0d
pushf
not rax
add rax, 0x68bf41d1
xor rax, 0x792b2961
rol rax, 8
popf
pushf
not rax
add rax, 0x76225278
xor rax, 0x70d8999c
rol rax, 0xd2
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0xcbd726498ec618ac
pushf
not rcx
add rcx, 0x7c8ea4e8
xor rcx, 0x7a99ee27
rol rcx, 0x4d
popf
pushf
not rcx
add rcx, 0x51d99a47
xor rcx, 0x6c7c91d1
rol rcx, 0xba
popf
pushf
not rcx
add rcx, 0x7f8bbc9a
xor rcx, 0x6178431c
rol rcx, 0x34
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x2bf2f5c0939941b5
pushf
not rax
add rax, 0x7ac6f69c
xor rax, 0x5be385ba
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x5baf009c
xor rax, 0x6d74f9c7
rol rax, 0xee
popf
pushf
not rax
add rax, 0x522d9cf8
xor rax, 0x6136bb0c
rol rax, 0xba
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xd3bfbdd05956dac3
pushf
not rcx
add rcx, 0x776114a1
xor rcx, 0x7fb88ad5
rol rcx, 0x73
popf
pushf
not rcx
add rcx, 0x7de9c7f2
xor rcx, 0x693b9420
rol rcx, 0x84
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xd375d7c69b114910
pushf
not rax
add rax, 0x7ed2f543
xor rax, 0x6ad0d275
rol rax, 0x18
popf
pushf
not rax
add rax, 0x5d1471a4
xor rax, 0x5d99a504
rol rax, 0x7b
popf
pushf
not rax
add rax, 0x55e610ef
xor rax, 0x600d1ce8
rol rax, 0x98
popf
pushf
not rax
add rax, 0x417d2e95
xor rax, 0x62c947dd
rol rax, 0x61
popf
mov qword [rbp - 9], rax
movabs rax, 0x592a3a80db7a7fb3
pushf
not rax
add rax, 0x4ef4c51e
xor rax, 0x4dc93e04
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x4897017f
xor rax, 0x71625ea6
rol rax, 0xbf
popf
pushf
not rax
add rax, 0x654fabd7
xor rax, 0x57527439
rol rax, 0xb
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x684b91cae95eb8cf
pushf
not rcx
add rcx, 0x5eb685af
xor rcx, 0x48b08818
rol rcx, 0x43
popf
pushf
not rcx
add rcx, 0x4a90534c
xor rcx, 0x7f29e506
rol rcx, 0x2d
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movabs rax, 0x861ca95ec9ef8c92
pushf
not rax
add rax, 0x43330527
xor rax, 0x46a565f5
rol rax, 0x49
popf
pushf
not rax
add rax, 0x53c116d4
xor rax, 0x4730437d
rol rax, 0xf7
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8eaf
mov rbx, rax
jmp 0x1400c147a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c1486
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x183c4db5e]
pushf
sub rdx, 0x43c45b3e
popf
jmp 0x1400c14a2
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c14ac
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c14b6
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c156a
mov rcx, rsi
jmp 0x1400c14fa
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c1504
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [rbp - 0x35], 4
sete al
push rax
pushf
mov eax, 0x75fd15b8
pushf
not eax
add eax, 0xdc453a28
xor eax, 0xb09eb1c5
rol eax, 0x90
popf
pushf
not eax
add eax, 0x8e2bb4a6
xor eax, 0x9cfd77f2
rol eax, 0x1c
popf
pushf
not eax
add eax, 0x9c283b76
xor eax, 0xbcd3be44
rol eax, 0xc1
popf
pushf
not eax
add eax, 0x92ede134
xor eax, 0xa0862477
rol eax, 0x1c
popf
jmp 0x1400c0754
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e1fcd
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret