Function at 0x14000e330
Capabilities:
Create service

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xf0
mov rax, qword [0x14017b1b0]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov rbx, rcx
xor esi, esi
mov qword [rbp + 0x2f], rsi
mov qword [rbp + 0x3f], rsi
mov qword [rbp + 0x47], 0xf
mov byte [rbp + 0x2f], sil
mov dword [rbp + 0x17], 0x41f16843
movdqa xmm0, xmmword [0x140044850]
movdqu xmmword [rbp + 0x1b], xmm0
mov r8d, 0x41f16843
lea rdx, [rbp + 0x1b]
lea rcx, [rbp - 1]
call fcn.140007ec0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x17], xmm0
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x27], eax
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 0xf
lea rax, [rbp + 0x1b]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14000e3c2
lea rdx, [rbp + 0x1b]
lea rcx, [rbp - 0x29]
call fcn.140008660
movups xmm0, xmmword [rbp - 0x29]
movups xmmword [rbp + 0x2f], xmm0
movups xmm1, xmmword [rbp - 0x19]
movups xmmword [rbp + 0x3f], xmm1
lea rdx, [rbp + 0x2f]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0x10
cmovae rdx, rcx
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x19], rsi
mov qword [rbp - 0x11], 0xf
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14000e420
lea rcx, [rbp - 0x29]
call fcn.140008660
lea rcx, [rbp - 0x29]
call fcn.140001a70
lea rax, [rbp + 0x2f]
cmp qword [rbp + 0x47], 0x10
cmovae rax, qword [rbp + 0x2f]
mov qword [rbp + 0x3f], rsi
mov byte [rax], 0
call fcn.14000e1a0
mov rdi, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x14000e529
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], rsi
mov rcx, qword [rbx]
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 1
mov r9d, 0x10030
lea r8, str.mhyprotect
lea rdx, str.mhyprotect
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_CreateServiceA]
mov rbx, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x14000e4d0
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x14000e530
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x431
jne 0x14000e504
lea rcx, str.Service_already_exists__open_handle_n
call fcn.14000b9a0
mov r8d, 0x10030
lea rdx, str.mhyprotect
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov rbx, rax
jmp 0x14000e530
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, str.mhyprotect
lea rcx, str.Failed_to_create__s_service.__0x_lX__n
call fcn.14000b9a0
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp + 0x47]
cmp rdx, 0x10
jb 0x14000e567
inc rdx
mov rcx, qword [rbp + 0x2f]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e562
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e58f
call fcn.1400105cc
mov rax, rbx
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.140010320
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.140016bd4
int3