Function at 0x4047c0
Capabilities:
Query service status
Start service

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
push 5
push str.ServicesActive
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test eax, eax
je 0x404a6d
mov esi, eax
push 0x14
push str.wsclient
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
test eax, eax
je 0x404a74
mov edi, eax
push 0
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov ebx, 1
test eax, eax
jne 0x404a9b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x404a8c
mov ebp, esp
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov ebx, 1
test eax, eax
je 0x404a9b
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
cmp dword [esp + 4], 4
je 0x404a9b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404ab1
mov eax, dword [esp + 4]
cmp eax, 4
je 0x404a9b
jmp 0x404ab5
push str.start_service.OpenSCManager
jmp 0x404a80
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push str.start_service.OpenService
call fcn.00404560
add esp, 4
xor ebx, ebx
jmp 0x404aa7
push str.start_service.StartService
call fcn.00404560
add esp, 4
xor ebx, ebx
mov ebp, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push edi
call ebp
push esi
call ebp
mov eax, ebx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
push eax
push str.start_service:_Timeout_waiting_for_service_start__current_state_is__d_n
call fcn.00404ad0
add esp, 8
jmp 0x404a99