Function at 0x1400c1f89
Capabilities:
Hash data using murmur3
Query service status
Start service

Disassembly:
push rax
pushf
mov eax, 0x969e69e9
pushf
not eax
add eax, 0xc7162f08
xor eax, 0xd78592f6
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xe0f77534
xor eax, 0xa164b5ec
rol eax, 0xb5
popf
cmp eax, 4
jne 0x1400c1fc6
popf
pop rax
jmp 0x1400c2952
cmp eax, 0
jne 0x1400c1fd5
popf
pop rax
jmp 0x1400c207a
cmp eax, 3
jne 0x1400c1fe4
popf
pop rax
jmp 0x1400c2689
cmp eax, 1
jne 0x1400c1ff3
popf
pop rax
jmp 0x1400c2123
cmp eax, 0xa
jne 0x1400c2002
popf
pop rax
jmp 0x1400c31a1
cmp eax, 7
jne 0x1400c2011
popf
pop rax
jmp 0x1400c2ebf
cmp eax, 6
jne 0x1400c2020
popf
pop rax
jmp 0x1400c2e2d
cmp eax, 0xb
jne 0x1400c202f
popf
pop rax
jmp 0x1400c334b
cmp eax, 0xc
jne 0x1400c203e
popf
pop rax
jmp 0x1400c3543
cmp eax, 8
jne 0x1400c204d
popf
pop rax
jmp 0x1400c3020
cmp eax, 5
jne 0x1400c205c
popf
pop rax
jmp 0x1400c2a07
cmp eax, 2
jne 0x1400c206b
popf
pop rax
jmp 0x1400c25a4
cmp eax, 9
jne 0x1400c207a
popf
pop rax
jmp 0x1400c30b1
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c20ab
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x1400c20f0
push rax
pushf
mov eax, 0x5ff66d86
pushf
not eax
add eax, 0xc3aa8069
xor eax, 0xb87289ea
rol eax, 0xf8
popf
pushf
not eax
add eax, 0x986ea2cc
xor eax, 0x8f925c30
rol eax, 0x51
popf
jmp 0x1400c1fb7
push rax
pushf
mov eax, 0xa70e2467
pushf
not eax
add eax, 0xfa5980cf
xor eax, 0xecfe2b99
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xceaba8f3
xor eax, 0xd8bdfd33
rol eax, 0x6d
popf
jmp 0x1400c1fb7
movabs rdx, 0x91b1044d620e8469
pushf
not rdx
add rdx, 0x67734561
xor rdx, 0x45bacf2b
rol rdx, 0x8a
popf
pushf
not rdx
add rdx, 0x5e89296e
xor rdx, 0x703b2cbc
rol rdx, 0x8f
popf
movabs rax, 0x84c2d590de4e6947
pushf
not rax
add rax, 0x4fe801e1
xor rax, 0x443f3ec0
rol rax, 0x8e
popf
pushf
not rax
add rax, 0x41ffaef6
xor rax, 0x5754696e
rol rax, 0x13
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0xc0645c27783e9675
pushf
not rcx
add rcx, 0x4544d2dd
xor rcx, 0x5320dad8
rol rcx, 0x9f
popf
pushf
not rcx
add rcx, 0x6725fe40
xor rcx, 0x42d69169
rol rcx, 0xb2
popf
pushf
not rcx
add rcx, 0x535fc26d
xor rcx, 0x4be7212b
rol rcx, 0x12
popf
pushf
not rcx
add rcx, 0x43de8452
xor rcx, 0x6a49a7b6
rol rcx, 0xb1
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0xa0899b2dcf9a4e59
pushf
not rax
add rax, 0x6b499304
xor rax, 0x44b9263a
rol rax, 0x5e
popf
pushf
not rax
add rax, 0x44d940ae
xor rax, 0x7fa8658a
rol rax, 6
popf
pushf
not rax
add rax, 0x5d202cad
xor rax, 0x5138716f
rol rax, 0xd2
popf
pushf
not rax
add rax, 0x5187c640
xor rax, 0x41f24814
rol rax, 0x98
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xb87a78588f205b4f
pushf
not rcx
add rcx, 0x5f0074cf
xor rcx, 0x48437db5
rol rcx, 0xfe
popf
pushf
not rcx
add rcx, 0x62c05927
xor rcx, 0x6552c792
rol rcx, 0x13
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0xa3cfa511fef7318
pushf
not rax
add rax, 0x7229f59b
xor rax, 0x6d32ba0e
rol rax, 0x23
popf
pushf
not rax
add rax, 0x5e5d277d
xor rax, 0x7ba7a5ab
rol rax, 0x48
popf
pushf
not rax
add rax, 0x6b687283
xor rax, 0x774f1539
rol rax, 0x47
popf
pushf
not rax
add rax, 0x51310bab
xor rax, 0x4123fb6e
rol rax, 0xed
popf
mov qword [rbp + 0x27], rax
movabs r8, 0x6d6a01d88bab33c2
pushf
not r8
add r8, 0x7c9338a8
xor r8, 0x444b7d10
rol r8, 0x6a
popf
pushf
not r8
add r8, 0x71c0fa9a
xor r8, 0x4766784a
rol r8, 0x1c
popf
mov qword [rbp - 0x11], rcx
movabs rax, 0x1d230e625a30d197
pushf
not rax
add rax, 0x7fee584c
xor rax, 0x47cb686e
rol rax, 0xa4
popf
pushf
not rax
add rax, 0x5c8bc02f
xor rax, 0x5aab0f6b
rol rax, 0x1a
popf
xorps xmm0, xmmword [rbp - 0x19]
movabs rcx, 0x2239adc03f11aeba
pushf
not rcx
add rcx, 0x50648cbb
xor rcx, 0x6323ca7d
rol rcx, 0xb1
popf
pushf
not rcx
add rcx, 0x725eb8c3
xor rcx, 0x476bed78
rol rcx, 0xb
popf
pushf
not rcx
add rcx, 0x4bd458c7
xor rcx, 0x779a580c
rol rcx, 0x35
popf
pushf
not rcx
add rcx, 0x62cd1385
xor rcx, 0x7604ddd2
rol rcx, 0x8e
popf
mov qword [rbp + 0x2f], rax
movabs rax, 0xe76da2bbb7e8234f
pushf
not rax
add rax, 0x6a30f9de
xor rax, 0x645c9f74
rol rax, 0xef
popf
pushf
not rax
add rax, 0x573d92b2
xor rax, 0x58c62ea2
rol rax, 0x28
popf
pushf
not rax
add rax, 0x50fd1311
xor rax, 0x50920d5e
rol rax, 0x40
popf
pushf
not rax
add rax, 0x5ed80038
xor rax, 0x4432669d
rol rax, 0x3c
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], rax
movabs rax, 0xf522c5451f3e60b0
pushf
not rax
add rax, 0x7f08f6da
xor rax, 0x7a99608f
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x7f49c7d5
xor rax, 0x5e303677
rol rax, 0xf4
popf
pushf
not rax
add rax, 0x75fbebd7
xor rax, 0x5ce6c471
rol rax, 0x86
popf
pushf
not rax
add rax, 0x74347181
xor rax, 0x660d192e
rol rax, 0x5a
popf
mov qword [rbp + 0x3f], rdx
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c2529
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c2535
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x19306e1f8]
pushf
sub rdx, 0x530661d8
popf
jmp 0x1400c2551
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c3905
mov r8d, 0xdef9f8d3
pushf
not r8d
add r8d, 0x9aa6708b
xor r8d, 0xc4e24af4
rol r8d, 0xfe
popf
pushf
not r8d
add r8d, 0xaf77fd34
xor r8d, 0xcfa52de3
rol r8d, 0x74
popf
mov qword [rsp + 0xc8], rdi
mov rdx, rbx
mov rcx, rsi
jmp 0x1400c25eb
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x1400c2630
push rax
pushf
mov eax, 0xe4eec737
pushf
not eax
add eax, 0x8892e95b
xor eax, 0xc4065979
rol eax, 0x81
popf
pushf
not eax
add eax, 0xb8a85ad8
xor eax, 0xe9636443
rol eax, 0x1b
popf
jmp 0x1400c1fb7
push rax
pushf
mov eax, 0xd2bef695
pushf
not eax
add eax, 0xd11d12b7
xor eax, 0xfbcc7fac
rol eax, 8
popf
pushf
not eax
add eax, 0xb9ecb0d0
xor eax, 0xf9793a93
rol eax, 0xe6
popf
pushf
not eax
add eax, 0x9a1c4815
xor eax, 0xb18a7ca2
rol eax, 0x8c
popf
pushf
not eax
add eax, 0xeaee06aa
xor eax, 0xf2180fb0
rol eax, 0xf1
popf
jmp 0x1400c1fb7
movabs rax, 0x85ff6698db2f18e4
pushf
not rax
add rax, 0x6bda4e04
xor rax, 0x5969a1a9
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x4f208455
xor rax, 0x45f3d5ec
rol rax, 0xcc
popf
pushf
not rax
add rax, 0x4028d513
xor rax, 0x6de24a2b
rol rax, 0x7d
popf
lea rdx, [rbp - 0x19]
mov qword [rbp - 0x19], rax
movabs rcx, 0xced4b38c1521f4c2
pushf
not rcx
add rcx, 0x72aea5b3
xor rcx, 0x5cdc5c95
rol rcx, 0xac
popf
pushf
not rcx
add rcx, 0x67b8f791
xor rcx, 0x43a82127
rol rcx, 0x7d
popf
pushf
not rcx
add rcx, 0x5d8a10be
xor rcx, 0x53f8a3fb
rol rcx, 0x34
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x7fc928b10c59175d
pushf
not rax
add rax, 0x41308987
xor rax, 0x44a588f7
rol rax, 0x90
popf
pushf
not rax
add rax, 0x4c281746
xor rax, 0x46fe8757
rol rax, 0x51
popf
pushf
not rax
add rax, 0x7d87d3c4
xor rax, 0x70009644
rol rax, 0x82
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xf3235dda79eff22c
pushf
not rcx
add rcx, 0x66e51e5a
xor rcx, 0x4b7094c8
rol rcx, 0xe3
popf
pushf
not rcx
add rcx, 0x6d558f30
xor rcx, 0x7af185c0
rol rcx, 0xf5
popf
pushf
not rcx
add rcx, 0x52d5f3f8
xor rcx, 0x56a87a23
rol rcx, 0xd
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xe1f9b468a26523cd
pushf
not rax
add rax, 0x5bb78b02
xor rax, 0x65a1d16b
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x6c974fbc
xor rax, 0x4df29141
rol rax, 0x48
popf
mov qword [rbp - 9], rax
movabs rax, 0x1ec200198791319d
pushf
not rax
add rax, 0x73765f30
xor rax, 0x71e45b3e
rol rax, 0xd6
popf
pushf
not rax
add rax, 0x4d9f3ccf
xor rax, 0x67222dd1
rol rax, 0xf3
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x8cdfd22a3838bd39
pushf
not rcx
add rcx, 0x618db5df
xor rcx, 0x6eca9751
rol rcx, 0x7a
popf
pushf
not rcx
add rcx, 0x4581c39c
xor rcx, 0x64847f0b
rol rcx, 0x9d
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c28cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c28d9
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b03c2337]
pushf
sub rdx, 0x703ba317
popf
jmp 0x1400c28f5
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c28ff
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c38fd
lea rdx, [rbp - 0x39]
mov rcx, rdi
jmp 0x1400c295a
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c29c1
push rax
pushf
mov eax, 0x52a56bf3
pushf
not eax
add eax, 0xfc1ca3e0
xor eax, 0x83e09d3d
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xb840b0df
xor eax, 0xe755ed46
rol eax, 0x5e
popf
pushf
not eax
add eax, 0x875dd847
xor eax, 0xe9dfac80
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf679e5ca
xor eax, 0xd174d9f5
rol eax, 0x63
popf
jmp 0x1400c1fb7
push rax
pushf
mov eax, 0x5ddeca6d
pushf
not eax
add eax, 0xe145deb5
xor eax, 0xcc2abfe7
rol eax, 0x61
popf
pushf
not eax
add eax, 0xdfaade82
xor eax, 0xd7390534
rol eax, 0x67
popf
pushf
not eax
add eax, 0xaa91b7d9
xor eax, 0x8f50bd0d
rol eax, 0x53
popf
jmp 0x1400c1fb7
movabs r8, 0x2f56feac8cfc9d7a
pushf
not r8
add r8, 0x47c89872
xor r8, 0x737091d3
rol r8, 0xf1
popf
pushf
not r8
add r8, 0x595351e3
xor r8, 0x7526cc74
rol r8, 0x8c
popf
movabs rdx, 0x741e54fc45773f9c
pushf
not rdx
add rdx, 0x5041a341
xor rdx, 0x51d6d424
rol rdx, 0x67
popf
pushf
not rdx
add rdx, 0x4557979c
xor rdx, 0x7e0e9f82
rol rdx, 0xc4
popf
pushf
not rdx
add rdx, 0x4db16a2a
xor rdx, 0x5a130822
rol rdx, 0x24
popf
pushf
not rdx
add rdx, 0x72de83ac
xor rdx, 0x4ed451ef
rol rdx, 0x8d
popf
mov qword [rbp + 0x3f], rdx
movabs rax, 0x93a0e14ad292154c
pushf
not rax
add rax, 0x56fd0338
xor rax, 0x5b80ac42
rol rax, 0x3a
popf
pushf
not rax
add rax, 0x7b24671e
xor rax, 0x573a18e4
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x4492ad1f
xor rax, 0x5062bb7c
rol rax, 0xf
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0xb81a75113f77a85b
pushf
not rcx
add rcx, 0x576f6683
xor rcx, 0x402ce5b7
rol rcx, 0x23
popf
pushf
not rcx
add rcx, 0x4a15b121
xor rcx, 0x7cba6527
rol rcx, 0x14
popf
pushf
not rcx
add rcx, 0x42c4b662
xor rcx, 0x75044aab
rol rcx, 0xd1
popf
pushf
not rcx
add rcx, 0x5818b874
xor rcx, 0x67438e6e
rol rcx, 0xd0
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x6e909234ff9c9d0e
pushf
not rax
add rax, 0x533e9292
xor rax, 0x5cd8e93f
rol rax, 0x2b
popf
pushf
not rax
add rax, 0x710b0d31
xor rax, 0x6e78db2b
rol rax, 0x46
popf
pushf
not rax
add rax, 0x54939a8b
xor rax, 0x5235ddbe
rol rax, 0xb6
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x52f6823c42dac39b
pushf
not rcx
add rcx, 0x5e5f80de
xor rcx, 0x51c324d3
rol rcx, 0x1e
popf
pushf
not rcx
add rcx, 0x419d3ce7
xor rcx, 0x555570b2
rol rcx, 6
popf
pushf
not rcx
add rcx, 0x6a76ce60
xor rcx, 0x6137b303
rol rcx, 0x3d
popf
pushf
not rcx
add rcx, 0x591057d1
xor rcx, 0x5d24942f
rol rcx, 0xaa
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x5e6135d280df027c
pushf
not rax
add rax, 0x6ef6c0ac
xor rax, 0x76fbe75c
rol rax, 0xf1
popf
pushf
not rax
add rax, 0x4a026453
xor rax, 0x6c6ee87f
rol rax, 0xc9
popf
mov qword [rbp + 0x27], rax
movabs rax, 0xfefcf0b1c05719bf
pushf
not rax
add rax, 0x574abebd
xor rax, 0x4fec27ab
rol rax, 0x64
popf
pushf
not rax
add rax, 0x6107b328
xor rax, 0x4b230ce8
rol rax, 0xef
popf
pushf
not rax
add rax, 0x66f24cf8
xor rax, 0x65b55677
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x681161a1
xor rax, 0x58ff0f3d
rol rax, 0x2a
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x40a4b2c8d90a7e86
pushf
not rcx
add rcx, 0x627c80f5
xor rcx, 0x6cd1eaca
rol rcx, 0xf8
popf
pushf
not rcx
add rcx, 0x75cdea90
xor rcx, 0x7ada4445
rol rcx, 0x9d
popf
pushf
not rcx
add rcx, 0x6b936efe
xor rcx, 0x6458c10c
rol rcx, 0x5e
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movabs rax, 0x90fc1ca64ff8a1e4
pushf
not rax
add rax, 0x534591b5
xor rax, 0x62b54950
rol rax, 0xa0
popf
pushf
not rax
add rax, 0x69787658
xor rax, 0x58b1d63d
rol rax, 0x3b
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b9268
mov rbx, rax
jmp 0x1400c2dc4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c34d3
cmp dword [rbp - 0x35], 4
jne 0x1400c2e8c
push rax
pushf
mov eax, 0xe401db6a
pushf
not eax
add eax, 0xb3668d10
xor eax, 0xa7b5d2a9
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xc5d2b2fc
xor eax, 0xcd49fa76
rol eax, 0x74
popf
pushf
not eax
add eax, 0xdb7925d9
xor eax, 0xf635acd8
rol eax, 0x50
popf
pushf
not eax
add eax, 0xb1fe54f7
xor eax, 0xa7b8cb9a
rol eax, 0xfc
popf
jmp 0x1400c1fb7
push rax
pushf
mov eax, 0xe19cd41c
pushf
not eax
add eax, 0xb191fce8
xor eax, 0xd3a87a4e
rol eax, 0x39
popf
pushf
not eax
add eax, 0xff24b885
xor eax, 0xb4ebfddf
rol eax, 0x25
popf
jmp 0x1400c1fb7
movabs rax, 0xbc4098a3c0eb2bc4
pushf
not rax
add rax, 0x7edbd4d8
xor rax, 0x61981796
rol rax, 0x65
popf
pushf
not rax
add rax, 0x6ebf104c
xor rax, 0x6cb25d0f
rol rax, 0xa9
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x76474978d3e90f78
pushf
not rax
add rax, 0x4e97fbc3
xor rax, 0x7c3da438
rol rax, 0x84
popf
pushf
not rax
add rax, 0x7d3ca92c
xor rax, 0x7c8ce2e4
rol rax, 0x82
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x38bf15e90a24632d
pushf
not rax
add rax, 0x64f7ac7f
xor rax, 0x403de986
rol rax, 0x9d
popf
pushf
not rax
add rax, 0x7a0c5f97
xor rax, 0x78a1e10a
rol rax, 0xfa
popf
mov qword [rbp - 9], rax
movabs rax, 0xfce4c7b35f8d3496
pushf
not rax
add rax, 0x75f86659
xor rax, 0x5e41e35b
rol rax, 0x4a
popf
pushf
not rax
add rax, 0x53d50d70
xor rax, 0x59e17c05
rol rax, 0xc5
popf
pushf
not rax
add rax, 0x573a821c
xor rax, 0x51a6b0b7
rol rax, 0x99
popf
jmp 0x1400c36e7
xor r8d, r8d
xor edx, edx
mov rcx, rdi
jmp 0x1400c3029
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x1400c307d
push rax
pushf
mov eax, 0x15c242a2
pushf
not eax
add eax, 0xbebf83f9
xor eax, 0xbd36ddfe
rol eax, 0x34
popf
pushf
not eax
add eax, 0xaca75f54
xor eax, 0xeabe0674
rol eax, 0x96
popf
pushf
not eax
add eax, 0xefa0904c
xor eax, 0xb41e6ada
rol eax, 0x9c
popf
jmp 0x1400c1fb7
push rax
pushf
mov eax, 0xff4110b5
pushf
not eax
add eax, 0x8c5a5b5b
xor eax, 0x923f69a7
rol eax, 0xe1
popf
pushf
not eax
add eax, 0xdacb771c
xor eax, 0x9c7f3717
rol eax, 0x79
popf
jmp 0x1400c1fb7
call qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rcx, 0x6ae62a702b13483e
pushf
not rcx
add rcx, 0x5d84a0de
xor rcx, 0x72deb9b4
rol rcx, 0xdb
popf
pushf
not rcx
add rcx, 0x7d24d5af
xor rcx, 0x7b30d162
rol rcx, 0xe6
popf
pushf
not rcx
add rcx, 0x5441fad1
xor rcx, 0x43bc305c
rol rcx, 0x98
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0xadc0740f7523a8a0
pushf
not rcx
add rcx, 0x4d293450
xor rcx, 0x68f106fd
rol rcx, 0x59
popf
pushf
not rcx
add rcx, 0x7480c9ee
xor rcx, 0x4a642cb8
rol rcx, 0xcb
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x9b6b8dd6d199eb7f
pushf
not rcx
add rcx, 0x5820b799
xor rcx, 0x68b10795
rol rcx, 0x74
popf
pushf
not rcx
add rcx, 0x4f273606
xor rcx, 0x5d13a8cd
rol rcx, 0xfa
popf
mov qword [rbp + 0x27], rcx
mov ebx, eax
cmp eax, 0x420
jne 0x1400c334b
movabs rax, 0x5198367db933b9a4
pushf
not rax
add rax, 0x5b19b3fb
xor rax, 0x47770387
rol rax, 0xdd
popf
pushf
not rax
add rax, 0x58d3c123
xor rax, 0x638bd014
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x41bc5df0
xor rax, 0x761e23ea
rol rax, 0x36
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x31372c9930556046
pushf
not rax
add rax, 0x78411b73
xor rax, 0x5fd6b2ad
rol rax, 0x6e
popf
pushf
not rax
add rax, 0x780c9b6f
xor rax, 0x5fcc4d56
rol rax, 0xc1
popf
pushf
not rax
add rax, 0x59e9291c
xor rax, 0x6b7c6960
rol rax, 0xda
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x77c3fa4b93453f8a
pushf
not rax
add rax, 0x4480f116
xor rax, 0x70c025a6
rol rax, 0x18
popf
pushf
not rax
add rax, 0x7b04d1cf
xor rax, 0x577aefaa
rol rax, 0x9d
popf
pushf
not rax
add rax, 0x6cd51ca2
xor rax, 0x68aec851
rol rax, 0xe5
popf
mov qword [rbp - 9], rax
movabs rax, 0x1f91ecda5e4f036
pushf
not rax
add rax, 0x4197511c
xor rax, 0x4bf1c379
rol rax, 0x1a
popf
pushf
not rax
add rax, 0x4c99114f
xor rax, 0x5ad8ecac
rol rax, 0x1f
popf
pushf
not rax
add rax, 0x67363d9e
xor rax, 0x7cabf4db
rol rax, 0x42
popf
pushf
not rax
add rax, 0x7ae124ad
xor rax, 0x45d42efc
rol rax, 0
popf
jmp 0x1400c380e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x296cf3d45d1b36b0
pushf
not rax
add rax, 0x7ebfec1c
xor rax, 0x50bb5c1e
rol rax, 0xc3
popf
pushf
not rax
add rax, 0x6e5fa19c
xor rax, 0x413ae7f4
rol rax, 0x3c
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xc3122eea7acdec7a
pushf
not rax
add rax, 0x63a48b54
xor rax, 0x7d79faf6
rol rax, 0x27
popf
pushf
not rax
add rax, 0x688d4658
xor rax, 0x5e82e02d
rol rax, 0x91
popf
mov qword [rbp - 0x11], rax
movabs rax, 0xb8b2fc3afec1d2f4
pushf
not rax
add rax, 0x7e01791a
xor rax, 0x642600b4
rol rax, 0x13
popf
pushf
not rax
add rax, 0x63a75607
xor rax, 0x5a3c850d
rol rax, 0x60
popf
pushf
not rax
add rax, 0x64732a4c
xor rax, 0x667101be
rol rax, 2
popf
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 9], rax
movabs rax, 0x9a0fdf8fcd81685a
pushf
not rax
add rax, 0x7f3a9d2b
xor rax, 0x71273242
rol rax, 0x58
popf
pushf
not rax
add rax, 0x6b9e67e5
xor rax, 0x71c4807f
rol rax, 5
popf
pushf
not rax
add rax, 0x6550a0d4
xor rax, 0x6a45f1ca
rol rax, 0xc6
popf
mov qword [rbp - 1], rax
movabs rax, 0xe64c544cdf4a7a92
pushf
not rax
add rax, 0x648afaff
xor rax, 0x7360ec98
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x68b74e92
xor rax, 0x541fb6ae
rol rax, 0xd1
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b9268
mov edx, ebx
mov rcx, rax
jmp 0x1400c34d3
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x19a2a04d8]
pushf
sub rdx, 0x5a2984b8
popf
jmp 0x1400c34ef
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c34f9
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c3503
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c38fd
movabs rax, 0x69025481601d2701
pushf
not rax
add rax, 0x788dba2b
xor rax, 0x50d5eae8
rol rax, 0x64
popf
pushf
not rax
add rax, 0x64652c3c
xor rax, 0x570ec1e7
rol rax, 0xa1
popf
pushf
not rax
add rax, 0x7d89bafb
xor rax, 0x429096b2
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x75d1f148
xor rax, 0x770a55e8
rol rax, 0xd7
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x5b78e934ef48c8b
pushf
not rax
add rax, 0x78d07189
xor rax, 0x629757f3
rol rax, 0xd5
popf
pushf
not rax
add rax, 0x71254e97
xor rax, 0x5dfd0c05
rol rax, 0xf2
popf
pushf
not rax
add rax, 0x77d065c7
xor rax, 0x50897c79
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x74ceeae2
xor rax, 0x433f1594
rol rax, 0xb1
popf
mov qword [rbp - 0x11], rax
movabs rax, 0xd89179f9f2d830a9
pushf
not rax
add rax, 0x43ec9166
xor rax, 0x5ef6e0d5
rol rax, 0xf6
popf
pushf
not rax
add rax, 0x77d20dab
xor rax, 0x6f32ec8b
rol rax, 0x85
popf
pushf
not rax
add rax, 0x60141606
xor rax, 0x42c62185
rol rax, 0xdb
popf
pushf
not rax
add rax, 0x462c06f4
xor rax, 0x5db4d548
rol rax, 0x56
popf
mov qword [rbp - 9], rax
movabs rax, 0x8ea9a7217763e604
pushf
not rax
add rax, 0x502701f9
xor rax, 0x699b9313
rol rax, 0x4d
popf
pushf
not rax
add rax, 0x73a0fef6
xor rax, 0x71e02dde
rol rax, 0xef
popf
pushf
not rax
add rax, 0x7bb47a7d
xor rax, 0x663ab654
rol rax, 0x28
popf
pushf
not rax
add rax, 0x728a2671
xor rax, 0x6cb0594c
rol rax, 0xb2
popf
movabs rcx, 0x827051815cc251f6
pushf
not rcx
add rcx, 0x6f6a6b3d
xor rcx, 0x4d811726
rol rcx, 0xb5
popf
pushf
not rcx
add rcx, 0x6a540dc6
xor rcx, 0x6332fec1
rol rcx, 0x75
popf
pushf
not rcx
add rcx, 0x6e1026fa
xor rcx, 0x4255396b
rol rcx, 1
popf
pushf
not rcx
add rcx, 0x6898816e
xor rcx, 0x497d6f40
rol rcx, 0x93
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x6e585b85de53e408
pushf
not rcx
add rcx, 0x43e4a224
xor rcx, 0x72cc8e8a
rol rcx, 0x80
popf
pushf
not rcx
add rcx, 0x510c1e11
xor rcx, 0x5f4e049e
rol rcx, 0xf7
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x6f59e3ef87899946
pushf
not rcx
add rcx, 0x70fdf44c
xor rcx, 0x713c8288
rol rcx, 0x25
popf
pushf
not rcx
add rcx, 0x5b3beb4c
xor rcx, 0x4fc118a3
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x4829fd3d
xor rcx, 0x7a6faa49
rol rcx, 9
popf
pushf
not rcx
add rcx, 0x44c24e4d
xor rcx, 0x73dc7f2f
rol rcx, 0xdf
popf
mov qword [rbp + 0x27], rcx
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp - 1], rax
movabs rax, 0xc4e5bd512004bdcc
pushf
not rax
add rax, 0x51fd489a
xor rax, 0x613f6cb5
rol rax, 0xaa
popf
pushf
not rax
add rax, 0x4444a387
xor rax, 0x6609b44a
rol rax, 0x6f
popf
pushf
not rax
add rax, 0x6d65ec6a
xor rax, 0x69c465ae
rol rax, 0x8b
popf
pushf
not rax
add rax, 0x79c577e5
xor rax, 0x5e30281d
rol rax, 0x7d
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b9268
lea rdx, [0x1a4bbc630]
pushf
sub rdx, 0x64bb4610
popf
mov rcx, rax
jmp 0x1400c38ba
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c38c4
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c38ce
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, 0x76
pushf
not al
add al, 0x5d
xor al, 0xfe
rol al, 0x1d
popf
pushf
not al
add al, 0xfd
xor al, 0xe1
rol al, 0x72
popf
pushf
not al
add al, 0x95
xor al, 0x35
rol al, 0x60
popf
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e25c8
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret