Function at 0x140010950
Capabilities:
Query service status
Start service

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
mov rax, qword [0x14008b5a0]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov r14, rcx
lea rcx, str.Verifying_Mfenlfk.sys_is_installed_and_running..._n
mov dil, 1
mov r13d, r8d
movzx r15d, dl
xor bpl, bpl
movzx esi, dil
call fcn.1400154e0
xor edx, edx
xor ecx, ecx
mov r8d, 0xa0000000
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test rax, rax
mov r12, rax
jne 0x1400109f2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.ERROR:_Could_not_open_SCManager._GetLastError___u_n
mov edx, eax
call fcn.1400154e0
lea rcx, str.mfenlfk.sys_is_not_installed_properly_n
call fcn.1400154e0
xor al, al
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.14004c890
add rsp, 0x130
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rdx, [rsp + 0x50]
lea rcx, str.mfenlfk.sys
mov r8d, 0x64
mov qword [rsp + 0x180], rbx
call fcn.14000de80
lea rdx, [rsp + 0x50]
mov r8d, reloc.Cabinet.dll_FDICreate
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
test rax, rax
mov rbx, rax
jne 0x140010a50
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.ERROR:_Could_not_open_mfenlfk.sys_service._GetLastError___u_n
mov edx, eax
call fcn.1400154e0
jmp 0x140010b71
lea rdx, [rsp + 0x30]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x140010b71
mov edx, dword [rsp + 0x34]
lea eax, [rdx - 1]
cmp eax, 6
ja case.default.0x140010a88
lea r8, [0x140000000]
mov ecx, dword [r8 + rax*4 + 0x10c34]
add rcx, r8
jmp rcx
lea rcx, str.mfenlfk.sys_service_reports_STOPPED._n
call fcn.1400154e0
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
je 0x140010b46
lea rcx, str.started_mfenlfk.sys_service._n
call fcn.1400154e0
jmp 0x140010a50
lea rcx, str.mfenlfk.sys_service_reports_CONTINUE_PENDING._n
call fcn.1400154e0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140010a50
lea rcx, str.mfenlfk.sys_service_reports_PAUSE_PENDING._n
call fcn.1400154e0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140010a50
lea rcx, str.mfenlfk.sys_service_reports_START_PENDING._n
call fcn.1400154e0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140010a50
lea rcx, str.mfenlfk.sys_service_reports_PENDING._n
call fcn.1400154e0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140010a50
lea rcx, str.mfenlfk.sys_service_reports__x__n
call fcn.1400154e0
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140010a50
lea rcx, str.Could_not_start_mfenlfk.sys_service_n
call fcn.1400154e0
jmp 0x140010b71
lea rcx, str.mfenlfk.sys_service_reports_RUNNING._n
call fcn.1400154e0
mov bpl, 1
jmp 0x140010b71
lea rcx, str.mfenlfk.sys_service_reports_PAUSED._n
call fcn.1400154e0
test rbx, rbx
je 0x140010b81
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor ebx, ebx
test bpl, bpl
jne 0x140010bfb
lea rcx, str.mfenlfk.sys_service_is_not_running._n
call fcn.1400154e0
test sil, sil
je 0x140010bfb
lea rcx, str.Uninstall_mfenlfk.sys_service_n
call fcn.1400154e0
lea rcx, str.mfenlfk.sys
mov r9d, r13d
movzx r8d, r15b
mov rdx, r14
mov byte [rsp + 0x20], bpl
call fcn.140010750
test al, al
movzx edi, al
je 0x140010bfb
lea rcx, str.Install_mfenlfk.sys_service_n
call fcn.1400154e0
lea rcx, str.mfenlfk.sys
mov r9d, r13d
movzx r8d, r15b
mov rdx, r14
mov byte [rsp + 0x20], bpl
call fcn.1400100c0
test al, al
mov dil, al
je 0x140010bfb
xor sil, sil
jmp 0x140010a11
test rbx, rbx
je 0x140010c09
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, r12
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test dil, dil
mov rbx, qword [rsp + 0x180]
je 0x1400109c1
test bpl, bpl
je 0x1400109c1
mov al, dil
jmp 0x1400109cf