Function at 0x14004f1d0
Capabilities:
Start service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov rbx, rcx
movzx eax, byte [rcx + 0x50]
nop
test al, al
jne 0x14004f561
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.140008170
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r14, rax
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbx + 0x48]
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
je 0x14004f280
xor edi, edi
movzx ecx, byte [rbx + 0x50]
nop
test cl, cl
jne 0x14004f26d
cmp edi, 0x50
jge 0x14004f26d
mov rcx, rbx
call fcn.14004eee0
cmp eax, 4
je 0x14004f29f
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
movzx eax, byte [rbx + 0x50]
nop
test al, al
je 0x14004f245
movzx eax, byte [rbx + 0x50]
nop
lea rdi, [rbx + 0x20]
test al, al
jne 0x14004f36c
jmp 0x14004f2d0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rsi, rax
sub rsi, r14
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x420
jne 0x14004f3cd
lea rcx, [rsp + 0x50]
call fcn.140009870
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.140071b40
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
nop
mov rbx, rax
sub rbx, r14
lea rdx, str.StartService_
lea rcx, [rsp + 0x50]
call fcn.14001d460
mov rcx, rax
mov rdx, rdi
call fcn.14001dae0
mov rcx, rax
lea rdx, str.__API_request_succeeded__but_the_service_did_not_report_as_running_after
call fcn.14001d460
mov rdx, rbx
mov rcx, rax
call fcn.14004e170
mov rcx, rax
lea rdx, [0x1400bf9e0]
call fcn.14001d460
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140010260
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.14004f8a0
mov rbx, rax
call fcn.14004f890
mov r8, rax
mov r9, rbx
mov edx, 0x41d
lea rcx, [rsp + 0x20]
call fcn.140049110
lea rdx, [0x1400e7738]
lea rcx, [rsp + 0x20]
call fcn.1400787c0
nop
mov rdx, rdi
lea rcx, [rbp + 0x60]
call fcn.14004f8a0
mov rbx, rax
lea rdx, str.StartService:
lea rcx, [rbp + 0x40]
call fcn.140005210
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140021ff0
mov rbx, rax
call fcn.14004f890
mov r8, rax
mov r9, rbx
mov edx, 0x4c7
lea rcx, [rsp + 0x20]
call fcn.140049110
lea rdx, [0x1400e7738]
lea rcx, [rsp + 0x20]
call fcn.1400787c0
nop
cmp edi, 0x41f
ja 0x14004f486
je 0x14004f47d
sub eax, 3
je 0x14004f471
sub eax, 2
je 0x14004f465
sub eax, 1
je 0x14004f459
sub eax, 0x417
je 0x14004f40e
cmp eax, 1
jne 0x14004f4a1
lea rdx, str.StartService:_a_thread_could_not_be_created_for_the_service__
jmp 0x14004f504
lea rdx, str.StartService_
lea rcx, [rsp + 0x50]
call fcn.14001d460
mov rcx, rax
lea rdx, [rbx + 0x20]
call fcn.14001dae0
mov rcx, rax
lea rdx, str.__API_request_failed_after
call fcn.14001d460
mov rdx, rsi
mov rcx, rax
call fcn.14004e170
mov rcx, rax
lea rdx, [0x1400bf9e0]
call fcn.14001d460
jmp 0x14004f51a
lea rdx, str.StartService:_the_service_has_not_been_opened__
jmp 0x14004f504
lea rdx, str.StartService:_insufficient_user_rights_to_request_the_service_to_start__
jmp 0x14004f504
lea rdx, str.StartService:_the_executable_for_the_service_could_not_be_found__
jmp 0x14004f504
lea rdx, str.StartService:_the_SCM_database_is_locked_by_another_process__
jmp 0x14004f504
sub eax, 0x422
je 0x14004f4fd
sub eax, 0xa
je 0x14004f4f4
sub eax, 1
je 0x14004f4eb
sub eax, 3
je 0x14004f4e2
cmp eax, 3
je 0x14004f4d9
lea rdx, str.StartService_failed_to_start_the_service
lea rcx, [rsp + 0x50]
call fcn.14001d460
mov rcx, rax
lea rdx, [rbx + 0x20]
call fcn.14001dae0
mov rcx, rax
lea rdx, [0x1400bf784]
call fcn.14001d460
mov edx, edi
mov rcx, rax
call fcn.140042640
jmp 0x14004f51a
lea rdx, str.StartService:_the_service_depends_on_a_service_that_does_not_exist_or_has_been_marked_for_deletion__
jmp 0x14004f504
lea rdx, str.StartService:_the_service_has_been_marked_for_deletion__
jmp 0x14004f504
lea rdx, str.StartService:_the_service_failed_to_logon.__Check_its_startup_logon_parameters_in_the_control_panel__
jmp 0x14004f504
lea rdx, str.StartService:_the_service_depends_on_another_service_that_has_failed_to_start__
jmp 0x14004f504
lea rdx, str.StartService:_the_service_has_been_disabled__
lea rcx, [rsp + 0x50]
call fcn.14001d460
lea rdx, [rbx + 0x20]
mov rcx, rax
call fcn.14001dae0
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.140010260
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.14004f8a0
mov rbx, rax
call fcn.14004f890
mov r8, rax
mov r9, rbx
mov edx, edi
lea rcx, [rsp + 0x20]
call fcn.140049110
lea rdx, [0x1400e7738]
lea rcx, [rsp + 0x20]
call fcn.1400787c0
nop
lea rdx, [rcx + 0x20]
lea rcx, [rbp + 0x80]
call fcn.14004f8a0
mov rbx, rax
lea rdx, str.StartService:
lea rcx, [rbp + 0x40]
call fcn.140005210
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140021ff0
mov rbx, rax
call fcn.14004f890
mov r8, rax
mov r9, rbx
mov edx, 0x4c7
lea rcx, [rsp + 0x20]
call fcn.140049110
lea rdx, [0x1400e7738]
lea rcx, [rsp + 0x20]
call fcn.1400787c0
int3