Function at 0x56e2f0
Capabilities:
Check for time delay via gettickcount
Delete service
Query service status
Stop service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x6f8b74]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0xf003f
push 0
push 0
mov ebx, eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov ecx, eax
mov dword [ebp - 0x30], ecx
test ecx, ecx
jne 0x56e34c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenSCManager_failed___d_
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
jmp 0x56e5b5
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push esi
cmovae eax, dword [ebp + 8]
push 0x1002c
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
test esi, esi
jne 0x56e39b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenSCManager_failed___d_
push esi
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x56e5b4
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x56e3da
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceStatusEx_failed___d_
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
jmp 0x56e59b
mov eax, dword [ebp - 0x28]
cmp eax, 1
jne 0x56e3ec
push str.Service_is_already_stopped
jmp 0x56e50c
cmp eax, 3
jne 0x56e46e
push str.Service_stop_pending...
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
mov eax, 0xcccccccd
add esp, 0x14
mul dword [ebp - 0x14]
shr edx, 3
cmp edx, 0x3e8
jae 0x56e427
mov edx, 0x3e8
jmp 0x56e435
cmp edx, 0x2710
mov eax, 0x2710
cmova edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x56e3b2
cmp dword [ebp - 0x28], 1
je 0x56e4bd
call edi
sub eax, ebx
cmp eax, 0x7530
ja 0x56e4b3
cmp dword [ebp - 0x28], 3
je 0x56e3f1
push esi
push dword [ebp - 0x30]
call fcn.0056c4a0
add esp, 8
lea eax, [ebp - 0x2c]
push eax
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x56e4c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ControlService_failed___d__n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
jmp 0x56e59b
push str.Service_stop_timed_out.
jmp 0x56e584
push str.Service_stopped_successfully
jmp 0x56e584
cmp dword [ebp - 0x28], 1
je 0x56e507
nop dword [eax]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x56e55a
cmp dword [ebp - 0x28], 1
je 0x56e507
call edi
sub eax, ebx
cmp eax, 0x7530
ja 0x56e553
cmp dword [ebp - 0x28], 1
jne 0x56e4d0
push str.Service_stopped_successfully_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x14
push esi
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
jne 0x56e57f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DeleteService_failed_w_err_0x_08lx_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
jmp 0x56e59b
push str.Wait_timed_out_n
jmp 0x56e584
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceStatusEx_failed___d__n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x18
jmp 0x56e59b
push str.DeleteService_Success_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x706d40]
call fcn.004515c0
add esp, 0x14
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push dword [ebp - 0x30]
call esi
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
pop esi
mov edx, dword [ebp + 0x1c]
pop edi
pop ebx
cmp edx, 8
jb 0x56e5ed
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x56e5e3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x56e5fb
push edx
push ecx
call fcn.005b5296
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005b56fe
mov esp, ebp
pop ebp
ret
call fcn.005c116d
int3