Function at 0x1400c0786
Capabilities:
Query service status

Disassembly:
push rax
pushf
mov eax, 0x23ba1ca3
pushf
not eax
add eax, 0x917d6bcc
xor eax, 0x8ba7401c
rol eax, 0x65
popf
pushf
not eax
add eax, 0x9bb14bee
xor eax, 0xfca7bbd4
rol eax, 0xc1
popf
pushf
not eax
add eax, 0xda53415c
xor eax, 0xd87b2238
rol eax, 0x3b
popf
pushf
not eax
add eax, 0xd7679853
xor eax, 0x8a0dc31f
rol eax, 0xc
popf
cmp eax, 4
jne 0x1400c07e9
popf
pop rax
jmp 0x1400c105f
cmp eax, 0
jne 0x1400c07f8
popf
pop rax
jmp 0x1400c0852
cmp eax, 3
jne 0x1400c0807
popf
pop rax
jmp 0x1400c0da9
cmp eax, 1
jne 0x1400c0816
popf
pop rax
jmp 0x1400c08fb
cmp eax, 5
jne 0x1400c0825
popf
pop rax
jmp 0x1400c1101
cmp eax, 7
jne 0x1400c0834
popf
pop rax
jmp 0x1400c1594
cmp eax, 6
jne 0x1400c0843
popf
pop rax
jmp 0x1400c1533
cmp eax, 2
jne 0x1400c0852
popf
pop rax
jmp 0x1400c0d37
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c0883
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x1400c08c8
push rax
pushf
mov eax, 0x70552640
pushf
not eax
add eax, 0xf7d2a5fb
xor eax, 0xd0efaff5
rol eax, 0xb4
popf
pushf
not eax
add eax, 0xdb60d101
xor eax, 0xd66b57d1
rol eax, 0xbf
popf
jmp 0x1400c07da
push rax
pushf
mov eax, 0xdd2f2ab
pushf
not eax
add eax, 0xf85f3173
xor eax, 0x97bf12c4
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xf67f6654
xor eax, 0xda95ccf2
rol eax, 0x41
popf
jmp 0x1400c07da
movabs rdx, 0x995d671b95ab6095
pushf
not rdx
add rdx, 0x7ef1066f
xor rdx, 0x7d93d6d9
rol rdx, 0x2b
popf
pushf
not rdx
add rdx, 0x5b327e08
xor rdx, 0x737b97b4
rol rdx, 0x6a
popf
movabs rax, 0x4c11146f355c7789
pushf
not rax
add rax, 0x694aa7f8
xor rax, 0x5d8f1980
rol rax, 0x82
popf
pushf
not rax
add rax, 0x6cdbfaf3
xor rax, 0x562d4e12
rol rax, 0xfb
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0xb4275d65d17c1b96
pushf
not rcx
add rcx, 0x521f9780
xor rcx, 0x71c8ea9d
rol rcx, 0xec
popf
pushf
not rcx
add rcx, 0x7e23ba21
xor rcx, 0x42552ea8
rol rcx, 0x70
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x5cd01950c6d2d012
pushf
not rax
add rax, 0x57ae5d7c
xor rax, 0x4f39039c
rol rax, 0xa6
popf
pushf
not rax
add rax, 0x41d7962b
xor rax, 0x776a1196
rol rax, 0x71
popf
pushf
not rax
add rax, 0x4d9bf029
xor rax, 0x4cedcf42
rol rax, 0xfd
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x4135fdc6cca39772
pushf
not rcx
add rcx, 0x5de3f3f1
xor rcx, 0x5c63f09a
rol rcx, 0xb5
popf
pushf
not rcx
add rcx, 0x730d580d
xor rcx, 0x5fec7414
rol rcx, 5
popf
pushf
not rcx
add rcx, 0x4a8a381b
xor rcx, 0x66eb012c
rol rcx, 0x3f
popf
pushf
not rcx
add rcx, 0x59ecfddd
xor rcx, 0x7e895b0a
rol rcx, 0x35
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x2dff12ea14e9fd5e
pushf
not rax
add rax, 0x640a685a
xor rax, 0x6abf432b
rol rax, 0x61
popf
pushf
not rax
add rax, 0x4f9782a0
xor rax, 0x488bd200
rol rax, 0x23
popf
pushf
not rax
add rax, 0x7a4e838e
xor rax, 0x595a5609
rol rax, 5
popf
mov qword [rbp - 9], rax
movabs r8, 0x794bad21a4354a89
pushf
not r8
add r8, 0x5c36333b
xor r8, 0x7f50a74b
rol r8, 0x22
popf
pushf
not r8
add r8, 0x56c39f01
xor r8, 0x4e3eecf3
rol r8, 0x55
popf
pushf
not r8
add r8, 0x635678d3
xor r8, 0x67a8c323
rol r8, 0x82
popf
pushf
not r8
add r8, 0x51c4c712
xor r8, 0x4945af90
rol r8, 0x57
popf
mov qword [rbp + 0x1f], rcx
movabs rax, 0xe15bb5639c19515b
pushf
not rax
add rax, 0x7b3e0dfe
xor rax, 0x62a4e751
rol rax, 0x70
popf
pushf
not rax
add rax, 0x644be79e
xor rax, 0x50de0812
rol rax, 0xdc
popf
xorps xmm0, xmmword [rbp + 0x17]
movabs rcx, 0x713553318def836
pushf
not rcx
add rcx, 0x73e792c1
xor rcx, 0x6eefc5a4
rol rcx, 0x57
popf
pushf
not rcx
add rcx, 0x49db4ee9
xor rcx, 0x7e8f8a67
rol rcx, 0xa9
popf
mov qword [rbp - 1], rax
movabs rax, 0x424f2a5f20d76a8e
pushf
not rax
add rax, 0x70b9729f
xor rax, 0x6b11e303
rol rax, 0x39
popf
pushf
not rax
add rax, 0x6358614b
xor rax, 0x7210cd58
rol rax, 0xa9
popf
pushf
not rax
add rax, 0x7ee5eeba
xor rax, 0x448845ed
rol rax, 0x6c
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0xf2b0f33f28264250
pushf
not rax
add rax, 0x722dc970
xor rax, 0x4f52f929
rol rax, 0x78
popf
pushf
not rax
add rax, 0x4d283afd
xor rax, 0x7e4fab91
rol rax, 0xef
popf
pushf
not rax
add rax, 0x7b908ee5
xor rax, 0x5fa30c9a
rol rax, 0xa
popf
pushf
not rax
add rax, 0x4be5838c
xor rax, 0x5d9e1044
rol rax, 0x32
popf
mov qword [rbp + 0xf], rdx
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8f2a
mov rbx, rax
jmp 0x1400c0cbc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0cc8
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1becd3717]
pushf
sub rdx, 0x7eccb687
popf
jmp 0x1400c0ce4
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c159c
mov r8d, 0x734d2d92
pushf
not r8d
add r8d, 0x8fabcd27
xor r8d, 0xd727f5f3
rol r8d, 0xfe
popf
pushf
not r8d
add r8d, 0x89e52dac
xor r8d, 0x85f0083d
rol r8d, 0x79
popf
pushf
not r8d
add r8d, 0xe3cd101b
xor r8d, 0x85a70264
rol r8d, 0xf5
popf
mov qword [rsp + 0xc8], rsi
mov rdx, rbx
mov rcx, rdi
jmp 0x1400c0d97
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x1400c105f
movabs rax, 0xf415bcb910be5c21
pushf
not rax
add rax, 0x5588ac31
xor rax, 0x5b96da3a
rol rax, 0xe5
popf
pushf
not rax
add rax, 0x4d2646a0
xor rax, 0x489751ad
rol rax, 0xed
popf
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rax
movabs rcx, 0xc278a68c533d53a1
pushf
not rcx
add rcx, 0x6d5738c5
xor rcx, 0x51cd0c4f
rol rcx, 0x55
popf
pushf
not rcx
add rcx, 0x61fbbcb3
xor rcx, 0x6a3f4f4a
rol rcx, 0xe7
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x6e04bf41d7bb2cd8
pushf
not rax
add rax, 0x58f0bea6
xor rax, 0x6b8f3df1
rol rax, 0x87
popf
pushf
not rax
add rax, 0x70fc8086
xor rax, 0x4cb21a75
rol rax, 0x91
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x9b007ae4875b3d8c
pushf
not rcx
add rcx, 0x5501692b
xor rcx, 0x577fb9c1
rol rcx, 0x2f
popf
pushf
not rcx
add rcx, 0x75a4e8a2
xor rcx, 0x4c33cb07
rol rcx, 0xb8
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x53f17932806c2fe
pushf
not rax
add rax, 0x73990b68
xor rax, 0x6f62e06f
rol rax, 0x37
popf
pushf
not rax
add rax, 0x515919e2
xor rax, 0x4b65cf5e
rol rax, 0x48
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x914d652505bb83bd
pushf
not rax
add rax, 0x4e267abe
xor rax, 0x6d99f3a9
rol rax, 0x50
popf
pushf
not rax
add rax, 0x7144e2f7
xor rax, 0x4486d46d
rol rax, 0x55
popf
pushf
not rax
add rax, 0x539c72b6
xor rax, 0x64556159
rol rax, 0x3a
popf
pushf
not rax
add rax, 0x70259425
xor rax, 0x6e4a46ae
rol rax, 0x23
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x6fcf394406075511
pushf
not rcx
add rcx, 0x6cc0d8ab
xor rcx, 0x5427c9ce
rol rcx, 0x54
popf
pushf
not rcx
add rcx, 0x41f7d034
xor rcx, 0x698c8a80
rol rcx, 0xa9
popf
pushf
not rcx
add rcx, 0x51d984b3
xor rcx, 0x41ba1a15
rol rcx, 0x59
popf
pushf
not rcx
add rcx, 0x46f39c3c
xor rcx, 0x5625dfd6
rol rcx, 0x51
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x17], xmm0
call fcn.1400b8f2a
mov rbx, rax
jmp 0x1400c0fed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0ff9
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b059bf9c]
pushf
sub rdx, 0x70593f0c
popf
jmp 0x1400c1015
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c101f
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c1594
lea rdx, [rbp - 0x39]
mov rcx, rsi
jmp 0x1400c1067
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c10a8
push rax
pushf
mov eax, 0xee75afee
pushf
not eax
add eax, 0xb5d3e6d9
xor eax, 0xb1a0d676
rol eax, 0xaa
popf
pushf
not eax
add eax, 0x8d3dff2e
xor eax, 0x911b8d52
rol eax, 0x8b
popf
jmp 0x1400c07da
push rax
pushf
mov eax, 0xb06fdd1c
pushf
not eax
add eax, 0xc79347e2
xor eax, 0xf1397c96
rol eax, 0xbd
popf
pushf
not eax
add eax, 0xca395bc3
xor eax, 0xb4a2203b
rol eax, 0x88
popf
pushf
not eax
add eax, 0xe97f54dd
xor eax, 0xde93519f
rol eax, 0x43
popf
pushf
not eax
add eax, 0xe1297437
xor eax, 0x827b685c
rol eax, 0x7f
popf
jmp 0x1400c07da
movabs r8, 0xbbf6b8eaa9e7cc33
pushf
not r8
add r8, 0x7b9bfe8f
xor r8, 0x577bb9b1
rol r8, 0x9f
popf
pushf
not r8
add r8, 0x76f1250c
xor r8, 0x6e0ae1ca
rol r8, 0x2f
popf
movabs rdx, 0x216fe9a6617b9917
pushf
not rdx
add rdx, 0x507a9eef
xor rdx, 0x44516d76
rol rdx, 0xd5
popf
pushf
not rdx
add rdx, 0x7f1f5e37
xor rdx, 0x5ea81437
rol rdx, 0x6f
popf
pushf
not rdx
add rdx, 0x4572e71f
xor rdx, 0x783e265f
rol rdx, 0xe3
popf
mov qword [rbp + 0xf], rdx
movabs rax, 0x26cae05357875e7c
pushf
not rax
add rax, 0x5b22d789
xor rax, 0x52ffdd28
rol rax, 0x20
popf
pushf
not rax
add rax, 0x6baedf2b
xor rax, 0x75ac70c6
rol rax, 0xa9
popf
pushf
not rax
add rax, 0x5201d0f3
xor rax, 0x6e80ed19
rol rax, 2
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x49be2b6a658018db
pushf
not rcx
add rcx, 0x509f5742
xor rcx, 0x628cd5d1
rol rcx, 0xe0
popf
pushf
not rcx
add rcx, 0x43ee038e
xor rcx, 0x523e1f14
rol rcx, 0x84
popf
pushf
not rcx
add rcx, 0x5d3f17b0
xor rcx, 0x4a91a662
rol rcx, 0x4f
popf
pushf
not rcx
add rcx, 0x413e83ce
xor rcx, 0x5348980b
rol rcx, 0xf8
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0xf54f9f73fa3277ff
pushf
not rax
add rax, 0x5f471e28
xor rax, 0x742db630
rol rax, 0x33
popf
pushf
not rax
add rax, 0x50636bd3
xor rax, 0x6bd64b3f
rol rax, 0xc3
popf
pushf
not rax
add rax, 0x58c9aaaf
xor rax, 0x6fe6fe34
rol rax, 0x16
popf
pushf
not rax
add rax, 0x777a7745
xor rax, 0x49f307bd
rol rax, 0xb4
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0xf4d5cff1150266f
pushf
not rcx
add rcx, 0x51a6378f
xor rcx, 0x6989c49d
rol rcx, 0xdc
popf
pushf
not rcx
add rcx, 0x5681a853
xor rcx, 0x431bd8fa
rol rcx, 0x95
popf
pushf
not rcx
add rcx, 0x6f4d27dd
xor rcx, 0x78c8d5ff
rol rcx, 0x49
popf
pushf
not rcx
add rcx, 0x5b318bd0
xor rcx, 0x4bab5612
rol rcx, 1
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x25416045e96628d9
pushf
not rax
add rax, 0x7bae38ec
xor rax, 0x485d50ed
rol rax, 4
popf
pushf
not rax
add rax, 0x56572a74
xor rax, 0x68e04c51
rol rax, 0x85
popf
mov qword [rbp - 9], rax
movabs rax, 0x869d7dc7ee844dee
pushf
not rax
add rax, 0x61592396
xor rax, 0x626a351e
rol rax, 0xf9
popf
pushf
not rax
add rax, 0x7f030448
xor rax, 0x5b358f2f
rol rax, 0xf8
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x1c8d553948014d3e
pushf
not rcx
add rcx, 0x7bdbbf30
xor rcx, 0x67b5cdeb
rol rcx, 0x60
popf
pushf
not rcx
add rcx, 0x67094bb4
xor rcx, 0x5637cc34
rol rcx, 0xda
popf
pushf
not rcx
add rcx, 0x42947221
xor rcx, 0x6d601977
rol rcx, 0x82
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movabs rax, 0x2bec1dce53d6b7c2
pushf
not rax
add rax, 0x5d56633d
xor rax, 0x5c203ac0
rol rax, 0xfa
popf
pushf
not rax
add rax, 0x625ed059
xor rax, 0x52694a5b
rol rax, 0xf
popf
pushf
not rax
add rax, 0x66b15327
xor rax, 0x67c81370
rol rax, 0xe9
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8f2a
mov rbx, rax
jmp 0x1400c14a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c14b0
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1a9f5185a]
pushf
sub rdx, 0x69f497ca
popf
jmp 0x1400c14cc
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c14d6
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c14e0
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c1594
mov rcx, rsi
jmp 0x1400c1537
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c1541
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [rbp - 0x35], 4
sete al
push rax
pushf
mov eax, 0xec3a4b9f
pushf
not eax
add eax, 0x9d300038
xor eax, 0x90d5198b
rol eax, 0xbf
popf
pushf
not eax
add eax, 0xdf5ac75e
xor eax, 0xe4c1fcbc
rol eax, 0x70
popf
pushf
not eax
add eax, 0x85f195b8
xor eax, 0xc188ea2c
rol eax, 0x85
popf
jmp 0x1400c07da
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e25f6
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret