Function at 0x14000b130
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1a0]
sub rsp, 0x2a0
mov rax, qword [0x14001c040]
xor rax, rsp
mov qword [rbp + 0x198], rax
mov r13, rcx
lea rcx, str.advapi32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, rax
test rax, rax
jne 0x14000b1bc
lea rdx, str.Failed_to_load_advapi32.dll__error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140008110
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
jmp 0x14000bde7
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x88], xmm1
mov r8d, recv
lea rdx, str.OpenSCManagerW
lea rcx, [rbp + 0x78]
call fcn.140008d50
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 7
cmova rdx, qword [rbp + 0x78]
mov rax, qword [rbp + 0x88]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x78]
cmova rdx, qword [rbp + 0x78]
lea rcx, [rbp + 0x98]
call fcn.14000ff80
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x60], rax
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x14000b27e
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b279
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b279
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0xa8], xmm0
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 7
jbe 0x14000b2db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b2d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b2d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp + 0x88], xmm0
xor r14d, r14d
mov word [rbp + 0x78], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r8d, [r14 + 0xc]
lea rdx, str.OpenServiceW
lea rcx, [rbp - 0x80]
call fcn.140008d50
nop
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova rdx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x80]
cmova rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0xb8]
call fcn.14000ff80
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x14000b3ab
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b3a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b3a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0xc8], xmm0
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14000b405
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b400
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b400
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp - 0x70], xmm0
mov word [rbp - 0x80], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
mov r8d, recv
lea rdx, str.ControlService
lea rcx, [rbp - 0x60]
call fcn.140008d50
nop
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
mov rax, qword [rbp - 0x50]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x60]
cmova rdx, qword [rbp - 0x60]
lea rcx, [rbp + 0xd8]
call fcn.14000ff80
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rdx, qword [rbp + 0xd8]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x78], rax
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x14000b4d1
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b4cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b4cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0xe8], xmm0
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x14000b52b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b526
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b526
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov r8d, socket
lea rdx, str.QueryServiceStatus
lea rcx, [rbp - 0x40]
call fcn.140008d50
nop
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 7
cmova rdx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x30]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x40]
cmova rdx, qword [rbp - 0x40]
lea rcx, [rbp + 0xf8]
call fcn.14000ff80
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x14000b5f5
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b5f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b5f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 7
jbe 0x14000b64f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b64a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b64a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x40], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8d, recv
lea rdx, str.DeleteService
lea rcx, [rbp - 0x20]
call fcn.140008d50
nop
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rdx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x10]
lea r8, [rdx + rax*2]
lea rdx, [rbp - 0x20]
cmova rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x118]
call fcn.14000ff80
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rdx, qword [rbp + 0x118]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [rbp + 0x68], rax
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x14000b71d
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b718
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b718
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0x128], xmm0
mov byte [rbp + 0x118], 0
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x14000b777
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b772
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b772
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp - 0x10], xmm0
mov word [rbp - 0x20], r14w
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
mov r8d, recv
lea rdx, str.CreateServiceW
lea rcx, [rbp]
call fcn.140008d50
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 7
cmova rdx, qword [rbp]
mov rax, qword [rbp + 0x10]
lea r8, [rdx + rax*2]
lea rdx, [rbp]
cmova rdx, qword [rbp]
lea rcx, [rbp + 0x138]
call fcn.14000ff80
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rdx, qword [rbp + 0x138]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [rbp + 0x70], rax
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x14000b845
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b840
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b840
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x14000b89f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b89a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b89a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r14w
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
mov r8d, recv
lea rdx, str.StartServiceW
lea rcx, [rbp + 0x20]
call fcn.140008d50
nop
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rdx, qword [rbp + 0x20]
mov rax, qword [rbp + 0x30]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x20]
cmova rdx, qword [rbp + 0x20]
lea rcx, [rbp + 0x158]
call fcn.14000ff80
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x14000b969
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b964
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b964
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x14000b9c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b9be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b9be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp + 0x30], xmm0
mov word [rbp + 0x20], r14w
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
mov r8d, socket
lea rdx, str.CloseServiceHandle
lea rcx, [rbp + 0x40]
call fcn.140008d50
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 7
cmova rdx, qword [rbp + 0x40]
mov rax, qword [rbp + 0x50]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x40]
cmova rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x178]
call fcn.14000ff80
lea rdx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0xf
cmova rdx, qword [rbp + 0x178]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov rdx, qword [rbp + 0x190]
cmp rdx, 0xf
jbe 0x14000ba8d
inc rdx
mov rcx, qword [rbp + 0x178]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ba88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ba88
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015710]
movdqu xmmword [rbp + 0x188], xmm0
mov byte [rbp + 0x178], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x14000bae7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bae2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bae2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140011690
movdqa xmm0, xmmword [0x140015700]
movdqu xmmword [rbp + 0x50], xmm0
xor eax, eax
mov word [rbp + 0x40], ax
mov rax, qword [rbp + 0x60]
test rax, rax
je 0x14000bda7
cmp qword [rsp + 0x70], 0
je 0x14000bda7
cmp qword [rsp + 0x78], 0
je 0x14000bda7
test rbx, rbx
je 0x14000bda7
test rsi, rsi
je 0x14000bda7
test rdi, rdi
je 0x14000bda7
test r12, r12
je 0x14000bda7
test r14, r14
je 0x14000bda7
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call rax
mov rsi, rax
test rax, rax
jne 0x14000bb6c
lea rdx, str.OpenSCManager_failed__error:
jmp 0x14000bdae
mov r8d, 0x10020
lea rdx, str.SimpleTimeLoggerService
mov rcx, rsi
call qword [rsp + WSAStartup]
mov rdi, rax
test rax, rax
je 0x14000bc65
lea r8, [rbp + 0x78]
mov edx, 1
mov rcx, rax
call qword [rsp + 0x78]
test eax, eax
je 0x14000bbfe
lea rdx, str.Stopping_the_service...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140008110
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x78]
mov rcx, rdi
call rbx
test eax, eax
je 0x14000bbfe
nop dword [rax + rax]
cmp dword [rbp + 0x7c], 3
jne 0x14000bbfe
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [rbp + 0x78]
mov rcx, rdi
call rbx
test eax, eax
jne 0x14000bbe0
mov rcx, rdi
call qword [rbp + 0x68]
test eax, eax
je 0x14000bc1d
lea rdx, str.Service_deleted_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140008110
jmp 0x14000bc44
lea rdx, str.DeleteService_failed__error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140008110
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rdi
call r14
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [r13 + 0x18], 7
jbe 0x14000bc70
mov r13, qword [r13]
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r9d, 0xf01ff
lea r8, str.DISPLAY_NAME
lea rdx, str.SimpleTimeLoggerService
mov rcx, rsi
call qword [rbp + 0x70]
mov rbx, rax
test rax, rax
jne 0x14000bd0c
lea rdx, str.CreateService_failed__error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140008110
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rsi
call r14
jmp 0x14000bdde
lea rdx, str.Service_created_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140008110
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call r12
test eax, eax
je 0x14000bd47
lea rdx, str.Service_started_successfully.
jmp 0x14000bd7d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x420
je 0x14000bd76
lea rdx, str.StartService_failed__error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140008110
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
jmp 0x14000bd89
lea rdx, str.Service_is_already_running.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140008110
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, rbx
call r14
mov rcx, rsi
call r14
jmp 0x14000bdde
lea rdx, str.Failed_to_get_procedure_address__error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140008110
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
lea rdx, [0x1400084d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rcx, qword [rbp + 0x198]
xor rcx, rsp
call fcn.140011080
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret