Function at 0x1400411e0
Capabilities:
Query service status
Start service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x140214ba0]
xor rax, rsp
mov qword [rbp + 0x60], rax
movzx r15d, dl
mov rsi, rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
mov dword [rbp + 0x58], eax
lea rdx, [rbp + 0x40]
mov rcx, qword [rcx + 0x28]
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400412c6
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
lea rbx, str.service_command.cpp
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], 0x8a
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.QueryServiceStatus_failed:
lea rcx, [rsp + 0x48]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140030540
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
lea rdi, vtable.std::ios_base.0
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
xor al, al
jmp 0x1400416ce
cmp dword [rbp + 0x44], 4
jne 0x1400413b8
call fcn.1400553d0
mov r8d, 3
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
lea rbx, str.service_command.cpp
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], 0x90
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Service_is_already_running
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
lea rdi, vtable.std::ios_base.0
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
test r15b, r15b
je 0x1400416cc
mov rcx, rsi
call fcn.140041b00
test al, al
jne 0x1400416cc
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], 0x94
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Failed_to_enable_service_protection
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
xor al, al
jmp 0x1400416ce
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsi + 0x28]
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x14004145a
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
lea rbx, str.service_command.cpp
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], 0x9e
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Failed_to_start_service:
lea rcx, [rsp + 0x48]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140030540
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
lea rdi, vtable.std::ios_base.0
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
xor al, al
jmp 0x1400416ce
xor r14d, r14d
lea rbx, str.service_command.cpp
lea rdi, vtable.std::ios_base.0
cmp dword [rbp + 0x44], 4
je 0x14004158c
call fcn.1400553d0
mov r8d, 3
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x30], 0xa6
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Waiting_for_1_sec_before_querying_service_status...
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
inc r14d
cmp r14d, dword [rsi + 8]
jge 0x14004166b
lea rdx, [rbp + 0x40]
mov rcx, qword [rsi + 0x28]
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x140041577
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x40], UnRegisterTypeLib
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Failed_to_query_service:
lea rcx, [rsp + 0x48]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.140030540
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
mov eax, dword [rbp + 0x44]
jmp 0x140041583
mov eax, dword [rbp + 0x44]
cmp eax, 4
je 0x140041609
cmp eax, 4
jne 0x140041475
test r15b, r15b
je 0x1400416cc
mov rcx, rsi
call fcn.140041b00
test al, al
jne 0x1400416cc
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x40], 0xbf
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Failed_to_enable_service_protection
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
xor al, al
jmp 0x1400416ce
call fcn.1400553d0
mov r8d, 3
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x40], reloc.OLEAUT32.dll_VariantTimeToSystemTime
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Service_started_successfully
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
jmp 0x14004158c
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x40], 0xac
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x48]
call fcn.1400244b0
lea rdx, str.Timeout_while_waiting_for_service_to_start
lea rcx, [rsp + 0x48]
call fcn.1400244e0
lea rcx, [rbp - 0x20]
call fcn.140058d50
nop
mov qword [rbp - 0x20], rdi
lea rcx, [rbp - 0x20]
call fcn.140128970
nop
xor al, al
jmp 0x1400416ce
mov al, 1
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.14014f8e0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret