Function at 0x1400c1059
Capabilities:
Authenticate hmac
Hash data using murmur3
Query service status
Start service

Disassembly:
push rax
pushf
mov eax, 0x2d2c253a
pushf
not eax
add eax, 0x9e82341b
xor eax, 0xfe070862
rol eax, 0x4b
popf
pushf
not eax
add eax, 0xf33ea2a9
xor eax, 0xebeb2b52
rol eax, 0xd9
popf
pushf
not eax
add eax, 0xc9f0ad92
xor eax, 0xcde915a1
rol eax, 0x2a
popf
pushf
not eax
add eax, 0xd1bdf765
xor eax, 0xb1be5ef0
rol eax, 0xfc
popf
cmp eax, 4
jne 0x1400c10bc
popf
pop rax
jmp 0x1400c1abe
cmp eax, 0
jne 0x1400c10cb
popf
pop rax
jmp 0x1400c1170
cmp eax, 3
jne 0x1400c10da
popf
pop rax
jmp 0x1400c17c3
cmp eax, 1
jne 0x1400c10e9
popf
pop rax
jmp 0x1400c1252
cmp eax, 0xa
jne 0x1400c10f8
popf
pop rax
jmp 0x1400c23c2
cmp eax, 7
jne 0x1400c1107
popf
pop rax
jmp 0x1400c2056
cmp eax, 6
jne 0x1400c1116
popf
pop rax
jmp 0x1400c1fc4
cmp eax, 0xb
jne 0x1400c1125
popf
pop rax
jmp 0x1400c2583
cmp eax, 0xc
jne 0x1400c1134
popf
pop rax
jmp 0x1400c27fd
cmp eax, 8
jne 0x1400c1143
popf
pop rax
jmp 0x1400c21fc
cmp eax, 5
jne 0x1400c1152
popf
pop rax
jmp 0x1400c1b73
cmp eax, 2
jne 0x1400c1161
popf
pop rax
jmp 0x1400c16cb
cmp eax, 9
jne 0x1400c1170
popf
pop rax
jmp 0x1400c22a0
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c11a1
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rsi, rax
test rax, rax
jne 0x1400c120c
push rax
pushf
mov eax, 0xe291333e
pushf
not eax
add eax, 0xf0718d0c
xor eax, 0xfd90ea95
rol eax, 0x54
popf
pushf
not eax
add eax, 0x87154c4b
xor eax, 0xa658c86a
rol eax, 0x6a
popf
pushf
not eax
add eax, 0x94d26789
xor eax, 0xf1b9b156
rol eax, 0xc5
popf
pushf
not eax
add eax, 0xe80ed3ff
xor eax, 0x8376f409
rol eax, 0xbd
popf
jmp 0x1400c10ad
push rax
pushf
mov eax, 0xd1917f99
pushf
not eax
add eax, 0x9d6d2e66
xor eax, 0xd55a8d46
rol eax, 0x53
popf
pushf
not eax
add eax, 0xa1cd5e33
xor eax, 0x8449145c
rol eax, 0xe5
popf
pushf
not eax
add eax, 0xc46aa507
xor eax, 0x9dbade66
rol eax, 0xd6
popf
jmp 0x1400c10ad
movabs rdx, 0x51a74e6a805a0727
pushf
not rdx
add rdx, 0x5327c82a
xor rdx, 0x5027111f
rol rdx, 0x24
popf
pushf
not rdx
add rdx, 0x58b90eb8
xor rdx, 0x41e2cbeb
rol rdx, 0x6f
popf
pushf
not rdx
add rdx, 0x791ac459
xor rdx, 0x4fae72b0
rol rdx, 0x4c
popf
movabs rax, 0x12a56b0266ea2bd9
pushf
not rax
add rax, 0x613f7237
xor rax, 0x78a15d74
rol rax, 0xd
popf
pushf
not rax
add rax, 0x78a44597
xor rax, 0x4ae92cee
rol rax, 0x88
popf
pushf
not rax
add rax, 0x6e6895ea
xor rax, 0x5ca27fde
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x46d347b0
xor rax, 0x418c68fd
rol rax, 0xb9
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0xe9f7fa765091a5f2
pushf
not rcx
add rcx, 0x66570d4f
xor rcx, 0x7d27077d
rol rcx, 0x68
popf
pushf
not rcx
add rcx, 0x79cd3379
xor rcx, 0x7931d807
rol rcx, 0xd4
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x822eb4c556d30d7a
pushf
not rax
add rax, 0x49e813d1
xor rax, 0x602845a3
rol rax, 0x1c
popf
pushf
not rax
add rax, 0x71856463
xor rax, 0x726d3c6b
rol rax, 0xa4
popf
pushf
not rax
add rax, 0x5140202f
xor rax, 0x7431ba8b
rol rax, 0x7c
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xd1ae25ee4fc66cf3
pushf
not rcx
add rcx, 0x5846407a
xor rcx, 0x78d07fea
rol rcx, 0x83
popf
pushf
not rcx
add rcx, 0x7983436b
xor rcx, 0x41f3233a
rol rcx, 0x39
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0xb8bf81591a7eec77
pushf
not rax
add rax, 0x6f88513c
xor rax, 0x72792dda
rol rax, 0x80
popf
pushf
not rax
add rax, 0x4e9bf2fb
xor rax, 0x75986197
rol rax, 0x36
popf
pushf
not rax
add rax, 0x57e45013
xor rax, 0x6623af7b
rol rax, 0xb2
popf
pushf
not rax
add rax, 0x765e81ed
xor rax, 0x7f17ba83
rol rax, 0xa3
popf
mov qword [rbp + 0x27], rax
movabs r8, 0x29c7e034611a458f
pushf
not r8
add r8, 0x4a85b35a
xor r8, 0x5242d1b5
rol r8, 0x48
popf
pushf
not r8
add r8, 0x67e7e93b
xor r8, 0x726138a9
rol r8, 0x5e
popf
mov qword [rbp - 0x11], rcx
movabs rax, 0x16aada499c245ca2
pushf
not rax
add rax, 0x78f5d085
xor rax, 0x61c38a14
rol rax, 0x73
popf
pushf
not rax
add rax, 0x44cedfc8
xor rax, 0x6bbdcada
rol rax, 0xa
popf
pushf
not rax
add rax, 0x638ff4cb
xor rax, 0x73cc0d2d
rol rax, 0xa5
popf
xorps xmm0, xmmword [rbp - 0x19]
movabs rcx, 0xcfd8b4c2cde394b7
pushf
not rcx
add rcx, 0x55564668
xor rcx, 0x52e398f2
rol rcx, 0xf2
popf
pushf
not rcx
add rcx, 0x7fd10869
xor rcx, 0x47dcbc8c
rol rcx, 0x25
popf
pushf
not rcx
add rcx, 0x6353825a
xor rcx, 0x5551ae1f
rol rcx, 0xf
popf
mov qword [rbp + 0x2f], rax
movabs rax, 0xa05c3d9a575665a5
pushf
not rax
add rax, 0x78d7c35d
xor rax, 0x5b1646c7
rol rax, 0x89
popf
pushf
not rax
add rax, 0x746fe344
xor rax, 0x4d77576c
rol rax, 0x8c
popf
pushf
not rax
add rax, 0x57875a8e
xor rax, 0x469eb024
rol rax, 0xc7
popf
pushf
not rax
add rax, 0x5a87ccb2
xor rax, 0x7289f728
rol rax, 0xae
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], rax
movabs rax, 0xeba9503b83a077ef
pushf
not rax
add rax, 0x7eb70b98
xor rax, 0x50d0a09e
rol rax, 0x2b
popf
pushf
not rax
add rax, 0x75787cb0
xor rax, 0x59efba93
rol rax, 0x23
popf
pushf
not rax
add rax, 0x5295020b
xor rax, 0x7122d8aa
rol rax, 0xbf
popf
mov qword [rbp + 0x3f], rdx
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400c163d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c1649
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1bb20e31c]
pushf
sub rdx, 0x7b20690c
popf
jmp 0x1400c1665
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c2b1b
mov r8d, 0x764ba3f
pushf
not r8d
add r8d, 0xa68dc202
xor r8d, 0xf56da3b7
rol r8d, 0xc1
popf
pushf
not r8d
add r8d, 0xd4817f2b
xor r8d, 0xebf83640
rol r8d, 0x48
popf
mov qword [rsp + 0xc8], rdi
mov rdx, rbx
mov rcx, rsi
jmp 0x1400c1712
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rdi, rax
test rax, rax
jne 0x1400c176a
push rax
pushf
mov eax, 0xe10a88c9
pushf
not eax
add eax, 0xe448abcc
xor eax, 0xca522fa1
rol eax, 0xc9
popf
pushf
not eax
add eax, 0x90110c77
xor eax, 0xc359719d
rol eax, 0x5d
popf
pushf
not eax
add eax, 0xdde42815
xor eax, 0xb74e5165
rol eax, 0x25
popf
jmp 0x1400c10ad
push rax
pushf
mov eax, 0x3ba21e79
pushf
not eax
add eax, 0xd79a53b5
xor eax, 0xddfadf5c
rol eax, 0x85
popf
pushf
not eax
add eax, 0xa64f82bb
xor eax, 0xa8b536d0
rol eax, 0x48
popf
pushf
not eax
add eax, 0xed643703
xor eax, 0x9bf37c9a
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x87dcf52c
xor eax, 0xbeb87238
rol eax, 0x26
popf
jmp 0x1400c10ad
movabs rax, 0x9c3ee6a0b2b941d3
pushf
not rax
add rax, 0x6dee1a15
xor rax, 0x73e98a92
rol rax, 0xc4
popf
pushf
not rax
add rax, 0x56d28bf0
xor rax, 0x631f75ba
rol rax, 0xc7
popf
pushf
not rax
add rax, 0x642e4add
xor rax, 0x7b31e14b
rol rax, 0x81
popf
pushf
not rax
add rax, 0x5bed5994
xor rax, 0x426f64d1
rol rax, 0xc6
popf
lea rdx, [rbp - 0x19]
mov qword [rbp - 0x19], rax
movabs rcx, 0x678d72d4a3e3cb9b
pushf
not rcx
add rcx, 0x4657b2b9
xor rcx, 0x5fc56d26
rol rcx, 0x42
popf
pushf
not rcx
add rcx, 0x40bddf9a
xor rcx, 0x5a3ff2f7
rol rcx, 0x20
popf
pushf
not rcx
add rcx, 0x7ca9d1b7
xor rcx, 0x57f4ac08
rol rcx, 0x52
popf
pushf
not rcx
add rcx, 0x5fe51d2d
xor rcx, 0x5889e3f9
rol rcx, 0x60
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x43b618e6c8f129d
pushf
not rax
add rax, 0x4380fac0
xor rax, 0x5cecae37
rol rax, 0x60
popf
pushf
not rax
add rax, 0x578f7731
xor rax, 0x76640d04
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x581e8295
xor rax, 0x680bb356
rol rax, 0x85
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x8305c4be4c8cfee7
pushf
not rcx
add rcx, 0x63e95394
xor rcx, 0x5a6880e2
rol rcx, 0x4c
popf
pushf
not rcx
add rcx, 0x55329262
xor rcx, 0x7a5d6671
rol rcx, 0x33
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xad6797e65bb215e6
pushf
not rax
add rax, 0x4e6d95c0
xor rax, 0x4d7ecccb
rol rax, 0x94
popf
pushf
not rax
add rax, 0x725b6db5
xor rax, 0x7ada0fbb
rol rax, 0xb8
popf
pushf
not rax
add rax, 0x504da7c3
xor rax, 0x421500e3
rol rax, 0x3f
popf
mov qword [rbp - 9], rax
movabs rax, 0x280481b5f6743472
pushf
not rax
add rax, 0x783098b7
xor rax, 0x776b446b
rol rax, 0xa7
popf
pushf
not rax
add rax, 0x64d792cb
xor rax, 0x7a9f36ad
rol rax, 0x40
popf
pushf
not rax
add rax, 0x593a1c73
xor rax, 0x4866e4ea
rol rax, 0x21
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x5e272f4e3e4c5170
pushf
not rcx
add rcx, 0x47a770b5
xor rcx, 0x48ef08e4
rol rcx, 0x6d
popf
pushf
not rcx
add rcx, 0x4be911bd
xor rcx, 0x6f78eec1
rol rcx, 0x1a
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400c1a4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c1a58
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b4006aaa]
pushf
sub rdx, 0x73fff09a
popf
jmp 0x1400c1a74
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c1a7e
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c2b13
lea rdx, [rbp - 0x39]
mov rcx, rdi
jmp 0x1400c1ac6
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c1b1a
push rax
pushf
mov eax, 0x819f4cb8
pushf
not eax
add eax, 0xf8fd5a6c
xor eax, 0x81d99146
rol eax, 0xfd
popf
pushf
not eax
add eax, 0x93825e49
xor eax, 0xefa06dac
rol eax, 0xa3
popf
pushf
not eax
add eax, 0xb30827cc
xor eax, 0xda7fbf9a
rol eax, 0xf4
popf
jmp 0x1400c10ad
push rax
pushf
mov eax, 0x1d433c9d
pushf
not eax
add eax, 0xe8f9b609
xor eax, 0x877c88e3
rol eax, 0xee
popf
pushf
not eax
add eax, 0xdbe3111f
xor eax, 0xfd3f2337
rol eax, 0xa4
popf
pushf
not eax
add eax, 0xf099f6c8
xor eax, 0xcf640f92
rol eax, 0x8d
popf
pushf
not eax
add eax, 0xbae9f993
xor eax, 0xba0e9813
rol eax, 0xae
popf
jmp 0x1400c10ad
movabs r8, 0xf28e6e3fa5e3c3c6
pushf
not r8
add r8, 0x4de20f21
xor r8, 0x5922a173
rol r8, 3
popf
pushf
not r8
add r8, 0x4736e70c
xor r8, 0x5d5ec6d1
rol r8, 0xb0
popf
movabs rdx, 0x8069961075458599
pushf
not rdx
add rdx, 0x6adfe016
xor rdx, 0x527ef60c
rol rdx, 0x4b
popf
pushf
not rdx
add rdx, 0x5a2e0bbe
xor rdx, 0x7fe42aaa
rol rdx, 0x63
popf
mov qword [rbp + 0x3f], rdx
movabs rax, 0xcea6b028ac4a9e2
pushf
not rax
add rax, 0x74324b6f
xor rax, 0x6b8a3a55
rol rax, 0xd1
popf
pushf
not rax
add rax, 0x5201ad0e
xor rax, 0x6b3af3e3
rol rax, 0xef
popf
mov qword [rbp + 0x17], rax
movabs rcx, 0x110553bd16216e1a
pushf
not rcx
add rcx, 0x5622a6d1
xor rcx, 0x5dcef53b
rol rcx, 0x3d
popf
pushf
not rcx
add rcx, 0x53ecdf4c
xor rcx, 0x564c12ca
rol rcx, 0xaa
popf
pushf
not rcx
add rcx, 0x478c3d8c
xor rcx, 0x6cb5d5be
rol rcx, 0x3b
popf
pushf
not rcx
add rcx, 0x782cf96b
xor rcx, 0x4c9b2a0d
rol rcx, 0x4c
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x5c57f929625db4a1
pushf
not rax
add rax, 0x4a8699ec
xor rax, 0x512ab663
rol rax, 0xab
popf
pushf
not rax
add rax, 0x5a2b6c00
xor rax, 0x6d7ddd48
rol rax, 0xed
popf
pushf
not rax
add rax, 0x43305343
xor rax, 0x4db86d16
rol rax, 0x96
popf
pushf
not rax
add rax, 0x49a42bc4
xor rax, 0x51ef6973
rol rax, 0xd6
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xf5b7f96e35fa675b
pushf
not rcx
add rcx, 0x736e6663
xor rcx, 0x530868e4
rol rcx, 5
popf
pushf
not rcx
add rcx, 0x72d618cf
xor rcx, 0x42188d0c
rol rcx, 0xc3
popf
pushf
not rcx
add rcx, 0x48c07681
xor rcx, 0x7dc47237
rol rcx, 0xd6
popf
pushf
not rcx
add rcx, 0x4a5d5d2b
xor rcx, 0x6520d2fd
rol rcx, 0x9e
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x96711a1962a5ec92
pushf
not rax
add rax, 0x76ae26f2
xor rax, 0x533e9d3e
rol rax, 0x16
popf
pushf
not rax
add rax, 0x763f56aa
xor rax, 0x7c4cea19
rol rax, 0xe
popf
pushf
not rax
add rax, 0x63120cc6
xor rax, 0x5aeda7b4
rol rax, 1
popf
pushf
not rax
add rax, 0x40368fa4
xor rax, 0x4ceda729
rol rax, 0x16
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x9aac9ad0bc8e185f
pushf
not rax
add rax, 0x7399e886
xor rax, 0x57047abb
rol rax, 0x80
popf
pushf
not rax
add rax, 0x64953ec7
xor rax, 0x5f0d68eb
rol rax, 0x5b
popf
pushf
not rax
add rax, 0x66357a46
xor rax, 0x6575afd3
rol rax, 0xfc
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x62d36f6b49515b0d
pushf
not rcx
add rcx, 0x4b6c1912
xor rcx, 0x7328cd36
rol rcx, 0x30
popf
pushf
not rcx
add rcx, 0x4c183ca3
xor rcx, 0x6b3c5a0e
rol rcx, 0x1f
popf
pushf
not rcx
add rcx, 0x718c166a
xor rcx, 0x4b2b20c4
rol rcx, 0x31
popf
pushf
not rcx
add rcx, 0x6cefcb9a
xor rcx, 0x4238e1df
rol rcx, 0xe6
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movabs rax, 0xaa723d726725694d
pushf
not rax
add rax, 0x5b8860cc
xor rax, 0x42d65fbd
rol rax, 0x6f
popf
pushf
not rax
add rax, 0x74399c83
xor rax, 0x49c119cf
rol rax, 0x26
popf
pushf
not rax
add rax, 0x70f8a777
xor rax, 0x64a73624
rol rax, 0x8e
popf
pushf
not rax
add rax, 0x5945c015
xor rax, 0x700eb1af
rol rax, 0xc4
popf
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
movdqa xmmword [rbp + 0x17], xmm0
movdqa xmm0, xmmword [rbp + 0x37]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0xf], rdx
lea rdx, [rbp + 0x17]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
xorps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x37], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400c1f5b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c2767
cmp dword [rbp - 0x35], 4
jne 0x1400c1ffd
push rax
pushf
mov eax, 0x5164d006
pushf
not eax
add eax, 0xdf71937f
xor eax, 0x89c51802
rol eax, 5
popf
pushf
not eax
add eax, 0xc69ad156
xor eax, 0xcd5f6c15
rol eax, 0x77
popf
jmp 0x1400c10ad
push rax
pushf
mov eax, 0x350e5caf
pushf
not eax
add eax, 0xdf8b9f94
xor eax, 0xb23d3041
rol eax, 0x44
popf
pushf
not eax
add eax, 0x8c1dbc78
xor eax, 0x97285c4f
rol eax, 0x39
popf
pushf
not eax
add eax, 0x87134c4a
xor eax, 0x9fa48b78
rol eax, 0x97
popf
pushf
not eax
add eax, 0xc3a6e787
xor eax, 0xd9102f64
rol eax, 0xf4
popf
jmp 0x1400c10ad
movabs rax, 0xcf955f53419ce21e
pushf
not rax
add rax, 0x69372895
xor rax, 0x48cb02bc
rol rax, 0x5c
popf
pushf
not rax
add rax, 0x6482c1ee
xor rax, 0x62639f89
rol rax, 0x26
popf
pushf
not rax
add rax, 0x5ea7962a
xor rax, 0x6dc3c932
rol rax, 0x9d
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xdb133f3891cc85bb
pushf
not rax
add rax, 0x4f0fdf4a
xor rax, 0x4f2fa232
rol rax, 0x71
popf
pushf
not rax
add rax, 0x527bdfeb
xor rax, 0x5237c6b2
rol rax, 0xef
popf
pushf
not rax
add rax, 0x58a10ca9
xor rax, 0x64738bf0
rol rax, 0x1e
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x2f205754cdd3b246
pushf
not rax
add rax, 0x5b3ef1c9
xor rax, 0x407caa7c
rol rax, 0
popf
pushf
not rax
add rax, 0x5e2918e2
xor rax, 0x66808ca1
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x413a2369
xor rax, 0x66ebd5bb
rol rax, 0x69
popf
mov qword [rbp - 9], rax
movabs rax, 0x5f6c968f6e3dc516
pushf
not rax
add rax, 0x6eaffca6
xor rax, 0x461a875b
rol rax, 0x3f
popf
pushf
not rax
add rax, 0x7e0b59b6
xor rax, 0x576d4858
rol rax, 0x18
popf
pushf
not rax
add rax, 0x56d8b46c
xor rax, 0x7e6ab986
rol rax, 0xdd
popf
jmp 0x1400c295c
xor r8d, r8d
xor edx, edx
mov rcx, rdi
jmp 0x1400c2205
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x1400c2259
push rax
pushf
mov eax, 0x5195db5a
pushf
not eax
add eax, 0xf5b877b2
xor eax, 0x9a9f01c3
rol eax, 0x48
popf
pushf
not eax
add eax, 0xe0517551
xor eax, 0xb7c1d1de
rol eax, 0xac
popf
pushf
not eax
add eax, 0xd556edc9
xor eax, 0xb36a2471
rol eax, 0x6b
popf
jmp 0x1400c10ad
push rax
pushf
mov eax, 0xa3f61cca
pushf
not eax
add eax, 0x9afd7a8a
xor eax, 0xec84f0b4
rol eax, 0x22
popf
pushf
not eax
add eax, 0xf6e6123a
xor eax, 0xef44d186
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x9285f636
xor eax, 0xdebc2e40
rol eax, 0xbe
popf
jmp 0x1400c10ad
call qword [sym.imp.KERNEL32.dll_GetLastError]
movabs rcx, 0xc23c80cef469cde
pushf
not rcx
add rcx, 0x41a47810
xor rcx, 0x47aad2bf
rol rcx, 0xa0
popf
pushf
not rcx
add rcx, 0x589520f2
xor rcx, 0x73a57720
rol rcx, 0xfc
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x6671a19f49483b8b
pushf
not rcx
add rcx, 0x6ea9df40
xor rcx, 0x72433483
rol rcx, 0x34
popf
pushf
not rcx
add rcx, 0x5d602f56
xor rcx, 0x52851f23
rol rcx, 0x49
popf
pushf
not rcx
add rcx, 0x5c90fd70
xor rcx, 0x727d5672
rol rcx, 0xf5
popf
pushf
not rcx
add rcx, 0x68905d84
xor rcx, 0x4961c108
rol rcx, 0x52
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x4239762eb17c2121
pushf
not rcx
add rcx, 0x5769e55e
xor rcx, 0x7aa72a7a
rol rcx, 0x8c
popf
pushf
not rcx
add rcx, 0x4b1cc813
xor rcx, 0x47ca40a6
rol rcx, 0x84
popf
pushf
not rcx
add rcx, 0x58e9f169
xor rcx, 0x63397ff5
rol rcx, 0x6c
popf
mov qword [rbp + 0x27], rcx
mov ebx, eax
cmp eax, 0x420
jne 0x1400c2583
movabs rax, 0x3379d437b5dd76e9
pushf
not rax
add rax, 0x5aa866ef
xor rax, 0x42169494
rol rax, 0x58
popf
pushf
not rax
add rax, 0x45786e6a
xor rax, 0x7ea704d2
rol rax, 0xef
popf
pushf
not rax
add rax, 0x5ba4ebf7
xor rax, 0x6fe7276a
rol rax, 0xb3
popf
pushf
not rax
add rax, 0x5586fda3
xor rax, 0x4aea55e1
rol rax, 0xd2
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xe307d1471557578a
pushf
not rax
add rax, 0x7e1f8abb
xor rax, 0x7712bc39
rol rax, 0x79
popf
pushf
not rax
add rax, 0x5c758a43
xor rax, 0x56f6fea0
rol rax, 0xea
popf
pushf
not rax
add rax, 0x7c5012c2
xor rax, 0x6907c7d5
rol rax, 0x74
popf
pushf
not rax
add rax, 0x40fcf634
xor rax, 0x521798d6
rol rax, 0xf6
popf
mov qword [rbp - 0x11], rax
movabs rax, 0xc135f1350cff7e71
pushf
not rax
add rax, 0x431474f6
xor rax, 0x4b5b7ca9
rol rax, 0x43
popf
pushf
not rax
add rax, 0x68fefec2
xor rax, 0x61db457c
rol rax, 0x92
popf
pushf
not rax
add rax, 0x47b5c497
xor rax, 0x7a286752
rol rax, 0xcb
popf
mov qword [rbp - 9], rax
movabs rax, 0x22c748c36060096a
pushf
not rax
add rax, 0x607128ac
xor rax, 0x42574d79
rol rax, 0x4c
popf
pushf
not rax
add rax, 0x54f87d34
xor rax, 0x64d00916
rol rax, 0x45
popf
pushf
not rax
add rax, 0x6c2dc10d
xor rax, 0x46e016b5
rol rax, 4
popf
jmp 0x1400c2a52
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movabs rax, 0x3f9bd8ff84780d9e
pushf
not rax
add rax, 0x62bc6729
xor rax, 0x69f5128e
rol rax, 0x32
popf
pushf
not rax
add rax, 0x4c3bde07
xor rax, 0x40804369
rol rax, 0x98
popf
pushf
not rax
add rax, 0x57f68d44
xor rax, 0x4a5d3de8
rol rax, 0x8d
popf
pushf
not rax
add rax, 0x7006c0db
xor rax, 0x6131417a
rol rax, 0x13
popf
mov qword [rbp - 0x19], rax
movabs rax, 0x50afd68c6870a46f
pushf
not rax
add rax, 0x5854b1ff
xor rax, 0x76e823a9
rol rax, 0xcf
popf
pushf
not rax
add rax, 0x542b4257
xor rax, 0x6ccc4ea1
rol rax, 0xe2
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x3c8aa69e04ab6f3b
pushf
not rax
add rax, 0x4a5b8ac1
xor rax, 0x7baf3f36
rol rax, 0x55
popf
pushf
not rax
add rax, 0x6fa06aa9
xor rax, 0x4aa6250b
rol rax, 0xef
popf
pushf
not rax
add rax, 0x583df258
xor rax, 0x402c2e4f
rol rax, 0x19
popf
pushf
not rax
add rax, 0x58e5e524
xor rax, 0x55de3a65
rol rax, 0x8a
popf
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 9], rax
movabs rax, 0xff8e7a7b93b8274a
pushf
not rax
add rax, 0x7fdfff50
xor rax, 0x556b0df8
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x68e486f4
xor rax, 0x55bb6eb4
rol rax, 0x90
popf
mov qword [rbp - 1], rax
movabs rax, 0xe3d2393f2588a5b6
pushf
not rax
add rax, 0x515f74d5
xor rax, 0x7fc5b5d2
rol rax, 0x33
popf
pushf
not rax
add rax, 0x5cb272ad
xor rax, 0x7e8cd2e3
rol rax, 0x50
popf
pushf
not rax
add rax, 0x708ea77d
xor rax, 0x6dedf8a7
rol rax, 0xdd
popf
pushf
not rax
add rax, 0x4249b4f9
xor rax, 0x77f251be
rol rax, 0xcf
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8127
mov edx, ebx
mov rcx, rax
jmp 0x1400c2767
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18e221076]
pushf
sub rdx, 0x4e219666
popf
jmp 0x1400c2783
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c278d
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c2797
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c2b13
movabs rax, 0x24108e6d69d4d777
pushf
not rax
add rax, 0x52af8f69
xor rax, 0x73f96bb8
rol rax, 0xb0
popf
pushf
not rax
add rax, 0x4a5b95d8
xor rax, 0x4265b5ea
rol rax, 0x3e
popf
pushf
not rax
add rax, 0x57406aa0
xor rax, 0x56aa060d
rol rax, 0xd7
popf
pushf
not rax
add rax, 0x465d7371
xor rax, 0x76783288
rol rax, 0x6b
popf
mov qword [rbp - 0x19], rax
movabs rax, 0xefcf2fd5f154be27
pushf
not rax
add rax, 0x7b59c04d
xor rax, 0x5363c372
rol rax, 0x2f
popf
pushf
not rax
add rax, 0x7341ec63
xor rax, 0x7986cf06
rol rax, 0xc
popf
mov qword [rbp - 0x11], rax
movabs rax, 0x38cf627517de9fbd
pushf
not rax
add rax, 0x4df7fd65
xor rax, 0x674b0f7e
rol rax, 0xbe
popf
pushf
not rax
add rax, 0x5770502e
xor rax, 0x4118cfa3
rol rax, 0xba
popf
pushf
not rax
add rax, 0x748eca75
xor rax, 0x420155d4
rol rax, 0xcc
popf
mov qword [rbp - 9], rax
movabs rax, 0x94d8b3c09b880920
pushf
not rax
add rax, 0x76cefb81
xor rax, 0x433e0530
rol rax, 0x3c
popf
pushf
not rax
add rax, 0x42782579
xor rax, 0x5085280a
rol rax, 0x56
popf
pushf
not rax
add rax, 0x41f023c8
xor rax, 0x7dcf8465
rol rax, 0x90
popf
pushf
not rax
add rax, 0x7a853482
xor rax, 0x605071ea
rol rax, 0xd
popf
movabs rcx, 0x767ec02005981cbd
pushf
not rcx
add rcx, 0x48e4591a
xor rcx, 0x5d0c07ff
rol rcx, 0x30
popf
pushf
not rcx
add rcx, 0x5f272db0
xor rcx, 0x64ef2cb6
rol rcx, 0xe2
popf
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x17], rcx
movabs rcx, 0x93f5ea30a4323bcb
pushf
not rcx
add rcx, 0x7fcb01df
xor rcx, 0x781eec7a
rol rcx, 0x22
popf
pushf
not rcx
add rcx, 0x6c0a7155
xor rcx, 0x40bc352d
rol rcx, 0x13
popf
pushf
not rcx
add rcx, 0x66d6ea05
xor rcx, 0x42ec3008
rol rcx, 0xf9
popf
pushf
not rcx
add rcx, 0x5f4b7b06
xor rcx, 0x587327b9
rol rcx, 0x66
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x60ae663f3bb26a6e
pushf
not rcx
add rcx, 0x44dce8a5
xor rcx, 0x7f045e88
rol rcx, 0x1f
popf
pushf
not rcx
add rcx, 0x5297fab5
xor rcx, 0x7f978601
rol rcx, 0xad
popf
mov qword [rbp + 0x27], rcx
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp + 0x17]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp - 1], rax
movabs rax, 0x35c80b505058a58e
pushf
not rax
add rax, 0x75d08c5b
xor rax, 0x4120490e
rol rax, 0xf8
popf
pushf
not rax
add rax, 0x684e05b9
xor rax, 0x41d0441b
rol rax, 0xaa
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp - 0x19], xmm0
call fcn.1400b8127
lea rdx, [0x1a8bc58d0]
pushf
sub rdx, 0x68bbdec0
popf
mov rcx, rax
jmp 0x1400c2ad0
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c2ada
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rsi
jmp 0x1400c2ae4
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, 0xad
pushf
not al
add al, 0x41
xor al, 0x74
rol al, 0x13
popf
pushf
not al
add al, 0x4a
xor al, 0x98
rol al, 0x17
popf
pushf
not al
add al, 9
xor al, 0xb7
rol al, 0x75
popf
mov rdi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e02a0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret