Function at 0x1400bf977
Capabilities:
Query service status

Disassembly:
push rax
pushf
mov eax, 0x7a492ce2
pushf
not eax
add eax, 0xef16364d
xor eax, 0x9a2be824
rol eax, 0xe7
popf
pushf
not eax
add eax, 0xfcf27b00
xor eax, 0x8981d388
rol eax, 0xf3
popf
cmp eax, 4
jne 0x1400bf9b4
popf
pop rax
jmp 0x1400c0212
cmp eax, 0
jne 0x1400bf9c3
popf
pop rax
jmp 0x1400bfa1d
cmp eax, 3
jne 0x1400bf9d2
popf
pop rax
jmp 0x1400bff12
cmp eax, 1
jne 0x1400bf9e1
popf
pop rax
jmp 0x1400bfad9
cmp eax, 5
jne 0x1400bf9f0
popf
pop rax
jmp 0x1400c02c7
cmp eax, 7
jne 0x1400bf9ff
popf
pop rax
jmp 0x1400c06ec
cmp eax, 6
jne 0x1400bfa0e
popf
pop rax
jmp 0x1400c069e
cmp eax, 2
jne 0x1400bfa1d
popf
pop rax
jmp 0x1400bfea0
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400bfa4e
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x1400bfa93
push rax
pushf
mov eax, 0x4349f034
pushf
not eax
add eax, 0xb7cba03f
xor eax, 0x9bba425b
rol eax, 0x5c
popf
pushf
not eax
add eax, 0xa82d1936
xor eax, 0x89394a10
rol eax, 0x74
popf
jmp 0x1400bf9a5
push rax
pushf
mov eax, 0x87d493d1
pushf
not eax
add eax, 0xdc463b20
xor eax, 0xd0ee4c39
rol eax, 2
popf
pushf
not eax
add eax, 0xacd334be
xor eax, 0x9953a471
rol eax, 0x4d
popf
pushf
not eax
add eax, 0xbf60d622
xor eax, 0xbb0f15c1
rol eax, 0xf
popf
jmp 0x1400bf9a5
movabs rdx, 0x661058299fad2e1e
pushf
not rdx
add rdx, 0x65173ad9
xor rdx, 0x5e3b5f2c
rol rdx, 0x45
popf
pushf
not rdx
add rdx, 0x69208636
xor rdx, 0x4443be50
rol rdx, 0x59
popf
movabs rax, 0xbb9a80e92d494cf9
pushf
not rax
add rax, 0x5522085a
xor rax, 0x652e0aef
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x597392a5
xor rax, 0x482aa06f
rol rax, 0x8a
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0xf8a8eeff6d3bae3
pushf
not rcx
add rcx, 0x6a60fbd0
xor rcx, 0x75bd3417
rol rcx, 0xa6
popf
pushf
not rcx
add rcx, 0x7d36dd99
xor rcx, 0x5bf55678
rol rcx, 0x71
popf
pushf
not rcx
add rcx, 0x79ecffa9
xor rcx, 0x768c8fab
rol rcx, 0xb5
popf
pushf
not rcx
add rcx, 0x4333fa03
xor rcx, 0x7afd02d1
rol rcx, 0xd7
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x8ff18b3a4cfb8a5d
pushf
not rax
add rax, 0x4ef15efd
xor rax, 0x53a2e8da
rol rax, 0xe7
popf
pushf
not rax
add rax, 0x4dcfdbd8
xor rax, 0x60fa310f
rol rax, 0x35
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x7b65afb6a1a781fb
pushf
not rcx
add rcx, 0x5700dc60
xor rcx, 0x59e351fd
rol rcx, 0x41
popf
pushf
not rcx
add rcx, 0x454eab85
xor rcx, 0x58e24343
rol rcx, 0xe5
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xeee52b2d505f4aa7
pushf
not rax
add rax, 0x47631fa2
xor rax, 0x6127f961
rol rax, 2
popf
pushf
not rax
add rax, 0x569c9a17
xor rax, 0x65f70aae
rol rax, 0x8f
popf
mov qword [rbp - 9], rax
movabs r8, 0x47a78f5a5ed2573
pushf
not r8
add r8, 0x54c01f7d
xor r8, 0x702377d8
rol r8, 0xa1
popf
pushf
not r8
add r8, 0x43549738
xor r8, 0x43ac5444
rol r8, 0xdc
popf
pushf
not r8
add r8, 0x6729d98f
xor r8, 0x615a8527
rol r8, 0xdb
popf
mov qword [rbp + 0x1f], rcx
movabs rax, 0x4dce6a10fa2c8dc4
pushf
not rax
add rax, 0x632cc310
xor rax, 0x55ba8ea6
rol rax, 0xad
popf
pushf
not rax
add rax, 0x5ad881dd
xor rax, 0x7d5e813f
rol rax, 0xfc
popf
xorps xmm0, xmmword [rbp + 0x17]
movabs rcx, 0xf52f5514608b2ddd
pushf
not rcx
add rcx, 0x7da01676
xor rcx, 0x415df950
rol rcx, 0x4c
popf
pushf
not rcx
add rcx, 0x451d58c5
xor rcx, 0x5c5f863d
rol rcx, 0xf7
popf
mov qword [rbp - 1], rax
movabs rax, 0x4e47c682552858cc
pushf
not rax
add rax, 0x4c04d083
xor rax, 0x68aa6c22
rol rax, 0x7d
popf
pushf
not rax
add rax, 0x5b3b2e64
xor rax, 0x71a09bc7
rol rax, 0x7c
popf
pushf
not rax
add rax, 0x7a068eca
xor rax, 0x447fa9a0
rol rax, 0x98
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0xd42461d6cdc98d10
pushf
not rax
add rax, 0x666cbd47
xor rax, 0x75ff23ba
rol rax, 0xae
popf
pushf
not rax
add rax, 0x42b3b7b3
xor rax, 0x45b3d85e
rol rax, 0x8b
popf
mov qword [rbp + 0xf], rdx
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400bfe25
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400bfe31
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1b72a905d]
pushf
sub rdx, 0x772a164d
popf
jmp 0x1400bfe4d
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c06f4
mov r8d, 0xcae3aa38
pushf
not r8d
add r8d, 0x8d94a8ec
xor r8d, 0xa195e2a8
rol r8d, 0xce
popf
pushf
not r8d
add r8d, 0xf70d6747
xor r8d, 0xc3a120e3
rol r8d, 0xd2
popf
pushf
not r8d
add r8d, 0xacd250ac
xor r8d, 0xf658820d
rol r8d, 0xc8
popf
mov qword [rsp + 0xc8], rsi
mov rdx, rbx
mov rcx, rdi
jmp 0x1400bff00
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x1400c0212
movabs rax, 0x2e2ee6d5e484ece4
pushf
not rax
add rax, 0x7a5c53a1
xor rax, 0x45bf2e05
rol rax, 0x36
popf
pushf
not rax
add rax, 0x441b943c
xor rax, 0x5169ca0e
rol rax, 0x5c
popf
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rax
movabs rcx, 0xe8e31dd1f6acd53b
pushf
not rcx
add rcx, 0x564b5401
xor rcx, 0x64a1cda5
rol rcx, 0xe
popf
pushf
not rcx
add rcx, 0x40fb9db5
xor rcx, 0x452e7032
rol rcx, 8
popf
pushf
not rcx
add rcx, 0x44f0f03f
xor rcx, 0x420d6b4f
rol rcx, 0x1d
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x6171d01c50ffba0
pushf
not rax
add rax, 0x796b620c
xor rax, 0x67da6a3b
rol rax, 0xfe
popf
pushf
not rax
add rax, 0x72c62f74
xor rax, 0x76a24fa0
rol rax, 0xac
popf
pushf
not rax
add rax, 0x470091f6
xor rax, 0x68993b8d
rol rax, 0xea
popf
pushf
not rax
add rax, 0x5dc55067
xor rax, 0x498f3e65
rol rax, 0x20
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0xb671ffb954f205cd
pushf
not rcx
add rcx, 0x570a87af
xor rcx, 0x439d049e
rol rcx, 0x36
popf
pushf
not rcx
add rcx, 0x705ecfa8
xor rcx, 0x4cddd558
rol rcx, 0x79
popf
pushf
not rcx
add rcx, 0x77b979df
xor rcx, 0x5f79dc99
rol rcx, 0x55
popf
pushf
not rcx
add rcx, 0x670cf47a
xor rcx, 0x51bf7103
rol rcx, 0x40
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0x4a5c7f9ddc32f43c
pushf
not rax
add rax, 0x78bebb4e
xor rax, 0x43e2dc04
rol rax, 0xd0
popf
pushf
not rax
add rax, 0x4ed2684d
xor rax, 0x4131e29a
rol rax, 0x6a
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x16d7bb1f617e6b8f
pushf
not rax
add rax, 0x7a8b5c82
xor rax, 0x47d0dc31
rol rax, 0xd9
popf
pushf
not rax
add rax, 0x613cf00e
xor rax, 0x606be143
rol rax, 0xbd
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0x9a536e1516be0ea2
pushf
not rcx
add rcx, 0x71ed1f60
xor rcx, 0x4f4923f9
rol rcx, 0x5a
popf
pushf
not rcx
add rcx, 0x6d8f2368
xor rcx, 0x44794c05
rol rcx, 0x40
popf
pushf
not rcx
add rcx, 0x4166dd90
xor rcx, 0x4dcdd528
rol rcx, 0xa7
popf
pushf
not rcx
add rcx, 0x7dd67f1c
xor rcx, 0x724d656e
rol rcx, 0x4a
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x17], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400c01a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c01ad
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18c04d9b6]
pushf
sub rdx, 0x4c045fa6
popf
jmp 0x1400c01c9
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c01d3
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c06ec
lea rdx, [rbp - 0x39]
mov rcx, rsi
jmp 0x1400c021a
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c0281
push rax
pushf
mov eax, 0x7b386343
pushf
not eax
add eax, 0xfc6435df
xor eax, 0x9feecbf1
rol eax, 0x74
popf
pushf
not eax
add eax, 0xc9124398
xor eax, 0x9e696132
rol eax, 0xb3
popf
pushf
not eax
add eax, 0xee297f00
xor eax, 0xf1d38664
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xe345e6e2
xor eax, 0x90e49bb4
rol eax, 0xc6
popf
jmp 0x1400bf9a5
push rax
pushf
mov eax, 0x4a83b2d1
pushf
not eax
add eax, 0x9b2372f5
xor eax, 0xc54268b3
rol eax, 0x41
popf
pushf
not eax
add eax, 0xe00f0415
xor eax, 0xb90f493c
rol eax, 0xe4
popf
pushf
not eax
add eax, 0x90a2434b
xor eax, 0xbad28a5a
rol eax, 0xd7
popf
jmp 0x1400bf9a5
movabs r8, 0xfd0f80d1adcaeee5
pushf
not r8
add r8, 0x67f36bdb
xor r8, 0x50e74c74
rol r8, 0x50
popf
pushf
not r8
add r8, 0x759bebc3
xor r8, 0x6c5ddfcd
rol r8, 0x54
popf
movabs rdx, 0x11831d315b173a8e
pushf
not rdx
add rdx, 0x74730cfa
xor rdx, 0x785e50fa
rol rdx, 0x9f
popf
pushf
not rdx
add rdx, 0x4d64cc12
xor rdx, 0x61d657f9
rol rdx, 0xfc
popf
pushf
not rdx
add rdx, 0x5c5c2c04
xor rdx, 0x5a37fd9a
rol rdx, 0x1f
popf
mov qword [rbp + 0xf], rdx
movabs rax, 0xcd40112696c0f537
pushf
not rax
add rax, 0x7e773192
xor rax, 0x73da1ff8
rol rax, 0x71
popf
pushf
not rax
add rax, 0x748ff21c
xor rax, 0x7ddeb45b
rol rax, 0x10
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x5668565b30181277
pushf
not rcx
add rcx, 0x4e45bd0d
xor rcx, 0x45fbb586
rol rcx, 0x16
popf
pushf
not rcx
add rcx, 0x678a2879
xor rcx, 0x72da67e5
rol rcx, 0xe1
popf
pushf
not rcx
add rcx, 0x5e719744
xor rcx, 0x57318043
rol rcx, 0xed
popf
pushf
not rcx
add rcx, 0x43a17b1f
xor rcx, 0x401e6062
rol rcx, 0x4b
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x160408803726239f
pushf
not rax
add rax, 0x4dd3febe
xor rax, 0x7280aa26
rol rax, 0x5f
popf
pushf
not rax
add rax, 0x704e4e72
xor rax, 0x6b6bfeab
rol rax, 0x50
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x866709fa87710ae5
pushf
not rcx
add rcx, 0x7c14a98c
xor rcx, 0x5b9a6ab4
rol rcx, 0x73
popf
pushf
not rcx
add rcx, 0x68de55b6
xor rcx, 0x6fa22d2d
rol rcx, 0x95
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0xe1a8fe597b38ca2f
pushf
not rax
add rax, 0x75a39b9f
xor rax, 0x6d77c81e
rol rax, 0x3d
popf
pushf
not rax
add rax, 0x5abfc0e1
xor rax, 0x73b79bf8
rol rax, 0xc8
popf
mov qword [rbp - 9], rax
movabs rax, 0xeda561257fa3e055
pushf
not rax
add rax, 0x580c8f49
xor rax, 0x4d40b5de
rol rax, 0xe7
popf
pushf
not rax
add rax, 0x7f8d8d98
xor rax, 0x5178a2df
rol rax, 0x18
popf
pushf
not rax
add rax, 0x7459a05f
xor rax, 0x466f0eef
rol rax, 0x40
popf
pushf
not rax
add rax, 0x79609f8a
xor rax, 0x668a734b
rol rax, 0x2f
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x8627260ec4931ef2
pushf
not rcx
add rcx, 0x43cf2220
xor rcx, 0x58b6b898
rol rcx, 0x92
popf
pushf
not rcx
add rcx, 0x51f496ab
xor rcx, 0x69b06557
rol rcx, 0x15
popf
pushf
not rcx
add rcx, 0x701401bb
xor rcx, 0x697df1a5
rol rcx, 0x82
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movabs rax, 0xfdde32885c09e83c
pushf
not rax
add rax, 0x40b74066
xor rax, 0x40079f2d
rol rax, 0x95
popf
pushf
not rax
add rax, 0x729b1126
xor rax, 0x4e7b9230
rol rax, 0xe2
popf
pushf
not rax
add rax, 0x4642e8a5
xor rax, 0x4f673cf8
rol rax, 0xc4
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8127
mov rbx, rax
jmp 0x1400c0622
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c062e
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18905a12f]
pushf
sub rdx, 0x4905271f
popf
jmp 0x1400c064a
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c0654
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c065e
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c06ec
mov rcx, rsi
jmp 0x1400c06a2
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c06ac
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [rbp - 0x35], 4
sete al
push rax
pushf
mov eax, 0x33e06dac
pushf
not eax
add eax, 0xf9c7a5d8
xor eax, 0xf6f2a4b2
rol eax, 0x7a
popf
pushf
not eax
add eax, 0xf4e48a2c
xor eax, 0x901833b7
rol eax, 0x7f
popf
jmp 0x1400bf9a5
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e02a0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret