Function at 0x1400227c0
Capabilities:
Modify service

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3a0
mov qword [r11 - 0x238], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x1400700d0]
xor rax, rsp
mov qword [rsp + 0x390], rax
mov r12, rcx
xor r14d, r14d
mov dword [rsp + 0x60], r14d
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [r11 - 0x340], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [r11 - 0x2b0], rax
mov esi, 1
mov dword [rsp + 0x60], esi
xor r8d, r8d
lea rdx, [r11 - 0x338]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x68], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r14
mov dword [rsp + 0x100], r14d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.ReconfigureService__
lea rcx, [rsp + 0x88]
call fcn.140001350
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, rbx
call fcn.1400084b0
mov rcx, rbx
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenSCManagerW]
mov rdi, rax
mov qword [rsp + 0x198], rax
test rax, rax
jne 0x140022996
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.OpenSCManager
lea rcx, [rsp + 0x1b0]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x1b0]
call fcn.14002a5e0
lea rdx, [r12 + 0x68]
mov r8d, 0xf003f
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_OpenServiceW]
mov rbx, rax
mov qword [rsp + 0x1a0], rax
test rax, rax
jne 0x1400229eb
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.OpenService
lea rcx, [rsp + 0x200]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x200]
call fcn.14002a5e0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x178], xmm0
mov qword [rsp + 0x188], r14
mov dword [rsp + 0x68], r14d
lea r9, [rsp + 0x68]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l2_1_0.dll_QueryServiceConfigW]
test eax, eax
jne 0x140022a57
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
je 0x140022a57
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.QueryServiceConfig_1st
lea rcx, [rsp + 0x250]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x250]
call fcn.14002a5e0
mov edx, dword [rsp + 0x68]
lea rcx, [rsp + 0x178]
call fcn.140025240
mov r13, qword [rsp + 0x178]
mov r15d, r14d
cmp r15d, 3
jge 0x140022d55
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
or esi, 4
mov dword [rsp + 0x60], esi
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r14
mov dword [rsp + 0x100], r14d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.ReconfigureService__:_trying_QueryServiceConfig__retry_attempt:
lea rcx, [rsp + 0x88]
call fcn.140001350
mov edx, r15d
mov rcx, rax
call fcn.140017610
mov r14, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, r14
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, r14
call fcn.1400084b0
mov rcx, r14
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
lea r9, [rsp + 0x68]
mov r8d, dword [rsp + 0x68]
mov rdx, r13
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l2_1_0.dll_QueryServiceConfigW]
test eax, eax
jne 0x140022d52
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x7a
jne 0x140022d3c
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
or esi, 0x10
mov dword [rsp + 0x60], esi
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
xor eax, eax
mov qword [rsp + 0xf8], rax
mov dword [rsp + 0x100], eax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.ReconfigureService___failed_on_2nd_call_to_QueryServiceConfig._Retrying
lea rcx, [rsp + 0x88]
call fcn.140001350
mov r14, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, r14
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, r14
call fcn.1400084b0
mov rcx, r14
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
mov ecx, 0x64
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
inc r15d
xor r14d, r14d
jmp 0x140022a73
xor r14d, r14d
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
or esi, 0x40
mov dword [rsp + 0x60], esi
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r14
mov dword [rsp + 0x100], r14d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.Current_startup_type
lea rcx, [rsp + 0x88]
call fcn.140001350
mov edx, dword [r13 + 4]
mov rcx, rax
call fcn.14000ee10
mov r14, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, r14
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, r14
call fcn.1400084b0
mov rcx, r14
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea r15, vtable.std::ios_base.0
mov qword [rsp + 0x118], r15
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
mov eax, dword [r13 + 4]
sub eax, 3
cmp eax, 1
jbe 0x140023067
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
bts esi, 8
mov dword [rsp + 0x60], esi
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
xor r13d, r13d
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0x100], r13d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0xa
lea rdx, str.Changing_startup_type_to_SERVICE_DEMAND_START
lea rcx, [rsp + 0x88]
call fcn.140001350
mov r14, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, r14
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, r14
call fcn.1400084b0
mov rcx, r14
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
mov qword [rsp + 0x118], r15
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
lea rax, str.RPCSS
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
or r9d, 0xffffffff
lea r8d, [r13 + 3]
or edx, r9d
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l2_1_0.dll_ChangeServiceConfigW]
test eax, eax
jne 0x14002306a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.ChangeServiceConfig
lea rcx, [rsp + 0x2a0]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x2a0]
call fcn.14002a5e0
xor r13d, r13d
mov r14d, esi
mov r15d, esi
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
bts esi, 0xa
mov dword [rsp + 0x60], esi
lea rax, vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
mov dword [rsp + 0x114], 0x88
mov qword [rsp + 0x80], r13
lea rcx, [rsp + 0x118]
call fcn.140005120
lea rax, [rsp + 0x90]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], r13
mov dl, 0x20
lea rcx, [rsp + 0x118]
call fcn.140008a80
mov word [rsp + 0x170], ax
cmp qword [rsp + 0x160], 0
jne 0x140023117
mov edx, dword [rsp + 0x128]
or edx, 4
xor r8d, r8d
lea rcx, [rsp + 0x118]
call fcn.140006830
nop
lea rax, [rsp + 0x88]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x88]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + rcx + 0x88], rax
mov rax, qword [rsp + 0x88]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x84], edx
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x74], edx
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0x100], r13d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0xa
lea rdx, str.Adjusting_privileges
lea rcx, [rsp + 0x88]
call fcn.140001350
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, rsi
call fcn.1400084b0
mov rcx, rsi
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x118], rax
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
or r14d, 0x8400
mov dword [rsp + 0x60], r14d
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0x100], r13d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.Disabling_privilege:
lea rcx, [rsp + 0x88]
call fcn.140001350
lea rdx, str.SeImpersonatePrivilege
mov rcx, rax
call fcn.14000de00
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, rsi
call fcn.1400084b0
mov rcx, rsi
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
lea r14, vtable.std::ios_base.0
mov qword [rsp + 0x118], r14
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SeImpersonatePrivilege
mov rcx, r12
call fcn.140023e40
test eax, eax
je 0x140023417
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.SetPrivilege_SE_IMPERSONATE_NAME
lea rcx, [rsp + 0x2f0]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x2f0]
call fcn.14002a5e0
lea rax, [0x14004c818]
mov qword [rsp + 0x78], rax
lea rax, [0x14004c820]
mov qword [rsp + 0x88], rax
lea rax, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rsp + 0x118], rax
or r15d, 0x28400
mov dword [rsp + 0x60], r15d
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140001fe0
nop
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x74], edx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x90]
call fcn.140002110
nop
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xf8], r13
mov dword [rsp + 0x100], r13d
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea rax, vtable.Logger.0
mov qword [rsp + rcx + 0x78], rax
mov rax, qword [rsp + 0x78]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa0]
mov dword [rsp + rcx + 0x74], edx
mov dword [rsp + 0x108], 0x64
lea rdx, str.Disabling_privilege:
lea rcx, [rsp + 0x88]
call fcn.140001350
lea rdx, str.SeTcbPrivilege
mov rcx, rax
call fcn.14000de00
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, rsi
call fcn.1400084b0
mov rcx, rsi
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
mov qword [rsp + 0x118], r14
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SeTcbPrivilege
mov rcx, r12
call fcn.140023e40
test eax, eax
je 0x1400235b1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r8d, eax
lea rdx, str.SetPrivilege_SE_TCB_NAME
lea rcx, [rsp + 0x340]
call fcn.140009630
lea rdx, [0x14006dc20]
lea rcx, [rsp + 0x340]
call fcn.14002a5e0
mov edx, 1
lea rcx, [rsp + 0x78]
call fcn.140012040
nop
mov dword [rax + 0x90], 0x64
lea rcx, [rax + 0x10]
lea rdx, str.ReconfigureStartup___done
call fcn.140001350
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call fcn.140008a80
movzx edx, ax
mov rcx, rsi
call fcn.1400084b0
mov rcx, rsi
call fcn.140007eb0
nop
lea rcx, [rsp + 0x118]
call fcn.14000eb20
nop
mov qword [rsp + 0x118], r14
lea rcx, [rsp + 0x118]
call fcn.14002675c
nop
mov rdx, qword [rsp + 0x178]
test rdx, rdx
je 0x140023664
mov r8, qword [rsp + 0x188]
sub r8, rdx
sar r8, 2
lea rcx, [rsp + 0x178]
call fcn.1400251d0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x178], xmm0
mov qword [rsp + 0x188], r13
test rbx, rbx
je 0x140023673
mov rcx, rbx
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
nop
test rdi, rdi
je 0x140023682
mov rcx, rdi
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_CloseServiceHandle]
nop
xor eax, eax
jmp 0x14002368a
mov rcx, qword [rsp + 0x390]
xor rcx, rsp
call fcn.140027c60
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret