Function at 0x14002e920
Capabilities:
Query service status
Start service

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1400820c0]
xor rax, rsp
mov qword [rbp + 0x70], rax
xor ebx, ebx
xor r15b, r15b
xor edx, edx
xor ecx, ecx
mov r8d, 0xf003f
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov r14, rax
test rax, rax
je 0x14002efcf
mov r8d, 0xf01ff
lea rdx, str.Fylakas
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
je 0x14002edde
lea rdx, [rbp + 0x50]
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x14002ebac
cmp dword [rbp + 0x54], 4
jne 0x14002ebac
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
lea r8d, [rbx + 6]
lea rdx, [0x14006e87c]
lea rcx, [rbp - 0x10]
call fcn.140010590
nop
call fcn.140009730
lea r8, [rbp - 0x10]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140009620
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea r8d, [rbx + 7]
lea rdx, str.Fylakas
lea rcx, [rsp + 0x60]
call fcn.140010310
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x30]
call fcn.1400254a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14002ea63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ea5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f008
call fcn.140038e94
movdqa xmm0, xmmword [0x140072190]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], bx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
lea rax, str.Service__is_already_running
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0x1d
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rsp + 0x58]
movsd qword [rbp - 0x60], xmm1
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
mov r8d, 2
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x38]
call fcn.140025f90
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x14002eb09
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002eb04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f00e
call fcn.140038e94
movdqa xmm0, xmmword [0x1400721a0]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14002eb58
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14002eb58
mov rbx, qword [rsp + 0x40]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14002eb58
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14002eb93
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002eb8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f014
call fcn.140038e94
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r14
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, 1
jmp 0x14002efd3
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
setne r15b
test eax, eax
jne 0x14002efcf
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x420
je 0x14002edd6
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 6
lea rdx, [0x14006e87c]
lea rcx, [rbp - 0x50]
call fcn.140010590
nop
call fcn.140009730
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140009620
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 7
lea rdx, str.Fylakas
lea rcx, [rsp + 0x60]
call fcn.140010310
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x10]
call fcn.1400254a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14002ec9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ec95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f01a
call fcn.140038e94
movdqa xmm0, xmmword [0x140072190]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], bx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
lea rax, str.StartService___failed__
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0x1b
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rsp + 0x58]
movsd qword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x38]
call fcn.140030db0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x14002ed44
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ed3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f020
call fcn.140038e94
movdqa xmm0, xmmword [0x1400721a0]
movdqu xmmword [rbp + 0x20], xmm0
mov byte [rbp + 0x10], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14002ed93
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14002ed93
mov rbx, qword [rsp + 0x40]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14002ed93
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14002efcf
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002efca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f002
jmp 0x14002efca
mov r15b, 1
jmp 0x14002efcf
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
mov r8d, 6
lea rdx, [0x14006e87c]
lea rcx, [rbp - 0x50]
call fcn.140010590
nop
call fcn.140009730
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140009620
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
mov r8d, 7
lea rdx, str.Fylakas
lea rcx, [rsp + 0x60]
call fcn.140010310
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x30]
call fcn.1400254a0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 7
jbe 0x14002ee9f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ee9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f026
call fcn.140038e94
movdqa xmm0, xmmword [0x140072190]
movdqu xmmword [rsp + 0x70], xmm0
mov word [rsp + 0x60], bx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x58], rbx
lea rax, str.OpenService__failed___
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0x1a
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rbp - 0x70], xmm0
movsd xmm1, qword [rsp + 0x58]
movsd qword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea rdx, [rbp - 0x70]
mov rcx, qword [rsp + 0x38]
call fcn.140030db0
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x14002ef49
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ef44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002f02c
call fcn.140038e94
movdqa xmm0, xmmword [0x1400721a0]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14002ef98
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14002ef98
mov rbx, qword [rsp + 0x40]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x14002ef98
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x14002efcf
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002efca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002effc
call fcn.140038e94
movzx eax, r15b
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140038a00
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140042e3c
int3
call fcn.140042e3c
nop
call fcn.140042e3c
nop
call fcn.140042e3c
nop
call fcn.140042e3c
nop
call fcn.140042e3c
int3
call fcn.140042e3c
nop
call fcn.140042e3c
int3
call fcn.140042e3c
int3