Function at 0x14000dba0
Capabilities:
Start service

Disassembly:
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x50], rsi
mov rdi, rcx
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov esi, 0x130
mov eax, dword [rsi + rbx]
mov ebp, 0x138
test al, 1
jne 0x14000dc00
or eax, 1
mov dword [rsi + rbx], eax
mov ecx, ebp
add rcx, rbx
xor eax, eax
mov qword [rcx], rax
call sym.iaStorAfsService.exe_private:_void___cdecl_GlobalLogger::constructor_void____ptr64
lea rcx, [0x1401b3c50]
call fcn.1400ebd30
nop
cmp byte [sym.iaStorAfsService.exe_bool_GlobalLogger::_printOnDebug], 0
je 0x14000dc28
lea rdx, str.unsigned_long___cdecl_MinifilterStartCommand::Execute_int_wchar_t____
lea rcx, [0x14022d0e0]
call fcn.14000abf0
lea rcx, [0x14022d0e0]
call fcn.14000e410
mov eax, dword [rsi + rbx]
test al, 1
jne 0x14000dc51
or eax, 1
mov dword [rsi + rbx], eax
mov ecx, ebp
add rcx, rbx
xor eax, eax
mov qword [rcx], rax
call sym.iaStorAfsService.exe_private:_void___cdecl_GlobalLogger::constructor_void____ptr64
lea rcx, [0x1401b3c50]
call fcn.1400ebd30
nop
cmp byte [sym.iaStorAfsService.exe_bool_GlobalLogger::_printOnDebug], 0
je 0x14000dc79
lea rdx, str.Start_Minifilter
lea rcx, [0x14022d0e0]
call fcn.14000abf0
lea rcx, [0x14022d0e0]
call fcn.14000e410
mov rcx, qword [rdi + 8]
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
jmp 0x140012e40
push rbx
sub rsp, 0x120
mov qword [rsp + 0x20], 0xfffffffffffffffe
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 8]
call qword [sym.imp.api_ms_win_service_management_l1_1_0.dll_StartServiceW]
test eax, eax
jne 0x140012f1e
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x28]
cmp eax, 0x420
jne 0x140012eb3
call fcn.140114650
lea rcx, [rsp + 0x28]
call fcn.14000df10
nop
lea rdx, str.Cannot_start_service._ERROR_SERVICE_ALREADY_RUNNING
lea rcx, [rsp + 0x38]
call fcn.14000abf0
lea rcx, [rsp + 0x38]
call fcn.14000e410
nop
jmp 0x140012f0d
call fcn.140114650
lea rcx, [rsp + 0x28]
call fcn.14000df10
cmp ebx, 2
jne 0x140012ee5
lea rdx, str.Cannot_start_service._ERROR_FILE_NOT_FOUND
lea rcx, [rsp + 0x38]
call fcn.14000abf0
lea rcx, [rsp + 0x38]
call fcn.14000e410
nop
jmp 0x140012f0d
lea rdx, str.Cannot_start_service._Error
lea rcx, [rsp + 0x38]
call fcn.14000abf0
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.140016d60
lea rcx, [rsp + 0x38]
call fcn.14000e410
nop
lea rcx, [rsp + 0x28]
call fcn.140026a40
mov eax, 0x6e
jmp 0x140012f85
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x130
mov eax, dword [rdx + rcx]
test al, 1
jne 0x140012f5b
or eax, 1
mov dword [rdx + rcx], eax
mov eax, 0x138
add rcx, rax
xor eax, eax
mov qword [rcx], rax
call sym.iaStorAfsService.exe_private:_void___cdecl_GlobalLogger::constructor_void____ptr64
lea rcx, [0x1401b3c50]
call fcn.1400ebd30
nop
cmp byte [sym.iaStorAfsService.exe_bool_GlobalLogger::_printOnDebug], 0
je 0x140012f83
lea rdx, str.Service_started_successfully.
lea rcx, [0x14022d0e0]
call fcn.14000abf0
lea rcx, [0x14022d0e0]
call fcn.14000e410
xor eax, eax
add rsp, 0x120
pop rbx
ret