Function at 0x2e00ad15
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
lea esi, [ecx + 0x128]
push esi
mov dword [ebp - 0xc], ecx
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
jb 0x2e00ad37
mov eax, dword [esi + 4]
jmp 0x2e00ad3a
lea eax, [esi + 4]
xor ebx, ebx
push ebx
push ebx
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
push 0x2e003298
push 2
call fcn.2e008b5a
call fcn.2e01a0c7
push 0x80000000
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x20], eax
cmp eax, ebx
jne 0x2e00adaa
push esi
call fcn.2e01ae72
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x14], eax
jb 0x2e00ad84
mov eax, dword [esi + 4]
jmp 0x2e00ad87
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x2e0031b8
push 2
call fcn.2e008bb2
call fcn.2e01a0c7
jmp 0x2e00b02c
push 4
push 0x2e0031a0
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x14], eax
cmp eax, ebx
jne 0x2e00adff
push esi
call fcn.2e01ae72
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x14], eax
jb 0x2e00add9
mov eax, dword [esi + 4]
jmp 0x2e00addc
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xc]
push eax
push 0x2e0030c8
push 2
call fcn.2e008c10
call fcn.2e01a0c7
jmp 0x2e00b023
mov ecx, dword [ebp - 0xc]
push edi
xor eax, eax
mov dword [ebp - 0x28], ebx
lea edi, [ebp - 0x24]
stosd dword es:[edi], eax
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 8], ebx
call fcn.2e007e40
jmp 0x2e00af6a
push 8
pop ecx
xor eax, eax
mov dword [ebp - 0x4c], ebx
lea edi, [ebp - 0x48]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x18]
push eax
push 0x24
lea eax, [ebp - 0x4c]
push eax
push ebx
push dword [ebp - 0x14]
mov dword [ebp - 0x18], ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x2e00afa9
mov eax, dword [ebp - 8]
push 0x3c
xor edx, edx
pop ecx
div ecx
mov edi, edx
cmp edi, ebx
jne 0x2e00aeb2
push esi
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
jb 0x2e00ae71
mov eax, dword [esi + 4]
jmp 0x2e00ae74
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x2e002f28
push 2
call fcn.2e00ac6c
call fcn.2e01a0c7
test dword [ebp - 0x48], 1
jne 0x2e00aecd
test dword [ebp - 0x44], 1
jne 0x2e00aecd
mov dword [ebp - 4], 0xa
jmp 0x2e00af17
push esi
cmp dword [ebp - 4], ebx
jbe 0x2e00afe1
dec dword [ebp - 4]
call fcn.2e01ae72
mov eax, dword [ebp - 4]
imul eax, eax, 0x3e8
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x1c], eax
jb 0x2e00aef6
mov eax, dword [esi + 4]
jmp 0x2e00aef9
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x2e002e68
push 2
call fcn.2e008d24
call fcn.2e01a0c7
cmp edi, ebx
jne 0x2e00af5a
cmp dword [ebp - 4], 0xa
jb 0x2e00af5a
push esi
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x1c], 0xea60
jb 0x2e00af39
mov eax, dword [esi + 4]
jmp 0x2e00af3c
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x2e002de0
push 2
call fcn.2e008de0
call fcn.2e01a0c7
inc dword [ebp - 8]
push 1
push 0x3e8
call dword [sym.imp.KERNEL32.dll_SleepEx]
mov ecx, dword [ebp - 0xc]
lea eax, [ebp - 0x28]
push eax
call fcn.2e007e7b
test al, al
je 0x2e00ae24
push esi
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
jb 0x2e00af8f
mov eax, dword [esi + 4]
jmp 0x2e00af92
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push 0x2e0023d0
push 2
call fcn.2e008c6e
jmp 0x2e00b014
push esi
call fcn.2e01ae72
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x1c], eax
jb 0x2e00afc3
mov eax, dword [esi + 4]
jmp 0x2e00afc6
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x2e002cf8
push 2
call fcn.2e008cc6
jmp 0x2e00b014
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
mov dword [ebp - 0x1c], 0x2710
jb 0x2e00aff8
mov eax, dword [esi + 4]
jmp 0x2e00affb
lea eax, [esi + 4]
push ebx
push ebx
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x2e002c40
push 2
call fcn.2e008d82
call fcn.2e01a0c7
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
pop edi
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push esi
call fcn.2e01ae72
cmp dword [esi + 0x18], 8
jb 0x2e00b040
mov eax, dword [esi + 4]
mov dword [ebp - 0x14], eax
jmp 0x2e00b046
add esi, 4
mov dword [ebp - 0x14], esi
push ebx
push ebx
lea eax, [ebp - 0x14]
push eax
push 0x2e002bf8
push 2
call fcn.2e008e3e
call fcn.2e01a0c7
pop esi
pop ebx
leave
ret