Function at 0x1000aa60
Capabilities:
Create thread
Listen for remote procedure calls

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x1c
test byte [0x10011118], 8
jne 0x1000abc0
mov dword [esp + 4], sym._schedsvc_handler_4
mov dword [esp], str.Schedule
call dword [sym.imp.advapi32.dll_RegisterServiceCtrlHandlerW]
mov dword [0x10018010], eax
sub esp, 8
test eax, eax
je 0x1000abf0
mov eax, 2
call sym._schedsvc_update_status
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateEventW]
sub esp, 0x10
mov dword [0x1001800c], eax
lea eax, [ebp - 0xc]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym._tasks_monitor_thread_4
mov dword [esp + 4], 0
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateThread]
sub esp, 0x18
mov ebx, eax
test eax, eax
je 0x1000ab70
mov eax, dword [0x100111b4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov esi, dword [sym.imp.rpcrt4.dll_RpcServerRegisterIf]
mov dword [esp], eax
call esi
sub esp, 0xc
test eax, eax
je 0x1000ac38
test byte [0x10011118], 2
je 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcServerRegisterIf_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
lea esi, [esi]
mov eax, 1
call sym._schedsvc_update_status
test byte [0x10011118], 8
jne 0x1000ab90
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret 8
mov dword [esp + 0xc], str.exiting_Task_Scheduler_Service_n
mov dword [esp + 8], str.ServiceMain
mov dword [esp + 4], 0x10011118
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret 8
mov dword [esp + 0xc], str.starting_Task_Scheduler_Service_n
mov dword [esp + 8], str.ServiceMain
mov dword [esp + 4], 0x10011118
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000aa75
test byte [0x10011118], 2
je 0x1000ab83
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.RegisterServiceCtrlHandler_error__ld_n
mov dword [esp + 8], str.ServiceMain
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret 8
mov eax, dword [0x1001113c]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call esi
sub esp, 0xc
test eax, eax
je 0x1000ac90
test byte [0x10011118], 2
jne 0x1000ad80
mov eax, dword [0x100111b4]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_RpcServerUnregisterIf]
sub esp, 0xc
jmp 0x1000ab70
mov dword [esp + 0xc], 0
mov esi, dword [sym.imp.rpcrt4.dll_RpcServerUseProtseqEpW]
mov dword [esp + 8], str.pipe_atsvc
mov dword [esp + 4], 0xa
mov dword [esp], str.ncacn_np
call esi
sub esp, 0x10
test eax, eax
je 0x1000ad00
test byte [0x10011118], 2
je 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcServerUseProtseqEp_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000ab70
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.atsvc
mov dword [esp + 4], 0xa
mov dword [esp], str.ncalrpc
call esi
sub esp, 0x10
test eax, eax
jne 0x1000acbe
mov dword [esp], 0x10018004
call dword [sym.imp.rpcrt4.dll_RpcServerInqBindings]
sub esp, 4
test eax, eax
je 0x1000adb0
test byte [0x10011118], 2
je 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcServerInqBindings_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcServerRegisterIf_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000ac66
mov eax, dword [0x10018004]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov esi, dword [sym.imp.rpcrt4.dll_RpcEpRegisterW]
mov dword [esp + 4], eax
mov eax, dword [0x100111b4]
mov dword [esp], eax
call esi
sub esp, 0x10
test eax, eax
jne 0x1000af0b
mov eax, dword [0x10018004]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [0x1001113c]
mov dword [esp], eax
call esi
sub esp, 0x10
test eax, eax
jne 0x1000af0b
mov dword [esp + 8], 1
mov dword [esp + 4], 0x4d2
mov dword [esp], 1
call dword [sym.imp.rpcrt4.dll_RpcServerListen]
sub esp, 0xc
test eax, eax
jne 0x1000af45
mov eax, 4
call sym._schedsvc_update_status
mov dword [esp], ebx
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
sub esp, 8
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.rpcrt4.dll_RpcMgmtStopServerListening]
mov eax, dword [0x10018004]
mov ebx, dword [sym.imp.rpcrt4.dll_RpcEpUnregister]
sub esp, 4
mov dword [esp + 4], eax
mov eax, dword [0x100111b4]
mov dword [esp + 8], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x10018004]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [0x1001113c]
mov dword [esp + 8], 0
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp], 0x10018004
call dword [sym.imp.rpcrt4.dll_RpcBindingVectorFree]
mov eax, dword [0x100111b4]
mov ebx, dword [sym.imp.rpcrt4.dll_RpcServerUnregisterIf]
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
mov eax, dword [0x1001113c]
sub esp, 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call ebx
sub esp, 0xc
jmp 0x1000ab70
test byte [0x10011118], 2
je 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcEpRegister_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000ab70
test byte [0x10011118], 2
je 0x1000ab70
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.RpcServerListen_error__lx_n
mov dword [esp + 8], str.RPC_init
mov dword [esp + 4], 0x10011118
mov dword [esp], 1
call sym._wine_dbg_log.constprop.0_2
jmp 0x1000ab70