Function at 0x401b5c
Capabilities:
Query service status

Disassembly:
push 0x130
mov eax, 0x427bbb
call fcn.004162d9
push 0x23
pop ebx
push ebx
push 4
call fcn.00409a80
pop ecx
pop ecx
mov edi, 0xd2
test al, al
je 0x401ba5
push 0x42b770
call fcn.00408be0
mov esi, eax
push esi
push 0x73f
push edi
push ebx
push 4
call fcn.004094a0
push esi
call fcn.004141bd
add esp, 0x1c
mov ecx, dword [0x43c180]
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x17c]
lea eax, [ebp - 0x114]
push 0x104
push eax
call fcn.00405d37
pop ecx
pop ecx
test al, al
jne 0x401c0b
push ebx
push 1
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401c03
push 0x42b748
call fcn.00408be0
mov esi, eax
push esi
push 0x749
push edi
push ebx
push 1
call fcn.004094a0
push esi
call fcn.004141bd
add esp, 0x1c
xor eax, eax
inc eax
jmp 0x40208d
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov dword [ebp - 0x13c], eax
test eax, eax
jne 0x401c6f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 1
mov esi, eax
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401c68
push esi
push 0x42b720
call fcn.00408be0
push eax
push 0x752
push edi
push ebx
push 1
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x20
test esi, esi
jne 0x401cea
inc esi
jmp 0x401cea
push 0x60000
lea ecx, [ebp - 0x114]
push ecx
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x138], eax
test eax, eax
jne 0x401cf1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 1
mov esi, eax
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401cd0
push esi
push 0x42b6f8
call fcn.00408be0
push eax
push 0x761
push edi
push ebx
push 1
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x20
test esi, esi
jne 0x401cd5
inc esi
cmp dword [ebp - 0x13c], 0
je 0x401cea
push dword [ebp - 0x13c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, esi
jmp 0x40208d
mov ecx, dword [0x43c180]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [eax]
push 1
push 0x20
mov ebx, 0x42b6dc
push ebx
mov dword [ebp - 0x134], eax
call fcn.004087f7
pop ecx
mov ecx, dword [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call dword [esi + 0x178]
push dword [ebp - 0x138]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push 0x60024
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x13c]
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov dword [ebp - 0x138], eax
test eax, eax
jne 0x401d93
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x23
push 1
mov esi, eax
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401cd0
push esi
push 0x42b6f8
call fcn.00408be0
mov ebx, eax
push ebx
push 0x774
push edi
push 0x23
push 1
call fcn.004094a0
push ebx
jmp 0x401cc8
mov ecx, dword [0x43c180]
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [eax]
push 1
push 0x10012
push ebx
mov dword [ebp - 0x134], eax
call fcn.004087f7
pop ecx
mov ecx, dword [ebp - 0x134]
push eax
push dword [ebp - 0x138]
call dword [esi + 0x178]
xor ebx, ebx
push 0x23
cmp dword [0x43a5c0], ebx
je 0x401f1f
pop ebx
push ebx
push 3
pop esi
push esi
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401e14
push 0x42b6b8
call fcn.00408be0
push eax
push 0x790
push edi
push ebx
push esi
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x1c
mov ecx, dword [0x43a5c0]
mov eax, dword [ecx]
call dword [eax + 0xc]
push ebx
push esi
test al, al
jne 0x401e77
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401e5c
push 0x42b698
call fcn.00408be0
push eax
push 0x793
push edi
push ebx
push esi
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x1c
push dword [ebp - 0x138]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x13c]
call esi
jmp 0x401c03
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401eae
push 0x42b674
call fcn.00408be0
push eax
push 0x798
push edi
push ebx
push esi
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x1c
mov ecx, dword [0x43a5c0]
mov eax, dword [ecx]
push 0xffffffffffffffff
call dword [eax + 0x14]
test al, al
jne 0x401eff
push ebx
push esi
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401eff
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x42b654
call fcn.00408be0
push eax
push 0x79b
push edi
push ebx
push esi
mov dword [ebp - 0x134], eax
call fcn.004094a0
push dword [ebp - 0x134]
call fcn.004141bd
add esp, 0x20
xor ebx, ebx
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
mov dword [ebp - 0x134], ebx
call esi
mov ebx, dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
jmp 0x401fe8
push 3
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x401f58
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x42b618
call fcn.00408be0
mov esi, eax
push esi
push 0x7a1
push edi
push 0x23
push 3
call fcn.004094a0
push esi
call fcn.004141bd
add esp, 0x20
push 0x7a3
push str.CorpLauncher.cpp
push 0xc4
call fcn.00414091
add esp, 0xc
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x401f8e
push 1
push ebx
push ebx
push ebx
push ebx
push ebx
mov ecx, eax
call fcn.0040e6ce
mov esi, eax
jmp 0x401f90
xor esi, esi
or dword [ebp - 4], 0xffffffff
push ebx
push ebx
push ebx
push 0x3e8
push 1
push 0xa6
push 0x1f
mov ecx, esi
call fcn.0040e99d
cmp esi, ebx
je 0x401f01
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esi, eax
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
jmp 0x401f01
cmp dword [ebp - 0x12c], 3
jne 0x401ffb
push 0x3e8
call esi
inc dword [ebp - 0x134]
cmp dword [ebp - 0x134], 0x3c
jg 0x401ffb
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x138]
call ebx
test eax, eax
jne 0x401fc9
cmp dword [ebp - 0x12c], 1
push 0x23
push 3
jne 0x402027
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x402057
push 0x42b600
call fcn.00408be0
mov esi, eax
push esi
push 0x7c2
jmp 0x402044
call fcn.00409a80
pop ecx
pop ecx
test al, al
je 0x402057
push 0x42b5e4
call fcn.00408be0
mov esi, eax
push esi
push 0x7c6
push edi
push 0x23
push 3
call fcn.004094a0
push esi
call fcn.004141bd
add esp, 0x1c
push dword [ebp - 0x138]
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
cmp dword [ebp - 0x13c], 0
je 0x402076
push dword [ebp - 0x13c]
call esi
mov ecx, dword [0x43c180]
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x180]
xor eax, eax
call fcn.0041635c
ret