Function at 0x1005be10
Capabilities:
Query service status
Stop service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x100f7084]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x1005be88
call dword [0x100fa7f0]
movzx eax, al
test eax, eax
je 0x1005be83
call dword [0x100fa7f8]
cmp eax, 3
jg 0x1005be83
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100d3608
push 3
push 0x2b
push 0x100d3654
call dword [0x100fa800]
add esp, 0x14
jmp 0x1005c03e
push 0xf01ff
call fcn.1003ff40
add eax, 0x184
push eax
lea ecx, [ebp - 0x38]
push ecx
call fcn.1002f210
add esp, 8
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
call fcn.10049c40
push eax
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x38]
call fcn.1000c290
cmp dword [ebp - 0x3c], 0
jne 0x1005bf1a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x424
jne 0x1005bedf
jmp 0x1005c03e
call dword [0x100fa7f0]
movzx eax, al
test eax, eax
je 0x1005bf15
call dword [0x100fa7f8]
cmp eax, 3
jg 0x1005bf15
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100d3680
push 3
push 0x38
push 0x100d36c8
call dword [0x100fa800]
add esp, 0x14
jmp 0x1005c03e
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1005bf67
call dword [0x100fa7f0]
movzx eax, al
test eax, eax
je 0x1005bf62
call dword [0x100fa7f8]
cmp eax, 3
jg 0x1005bf62
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100d36f0
push 3
push 0x40
push 0x100d3744
call dword [0x100fa800]
add esp, 0x14
jmp 0x1005c03e
cmp dword [ebp - 0x1c], 3
jne 0x1005bfae
mov dword [ebp - 0x44], 0
jmp 0x1005bf7f
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 6
jae 0x1005bfae
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1005bf99
jmp 0x1005bfae
cmp dword [ebp - 0x1c], 1
jne 0x1005bfa1
jmp 0x1005bfae
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1005bf76
cmp dword [ebp - 0x1c], 1
je 0x1005c000
lea ecx, [ebp - 0x20]
push ecx
push 1
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x1005c000
call dword [0x100fa7f0]
movzx eax, al
test eax, eax
je 0x1005bffe
call dword [0x100fa7f8]
cmp eax, 3
jg 0x1005bffe
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x100d3770
push 3
push 0x57
push 0x100d37c4
call dword [0x100fa800]
add esp, 0x14
jmp 0x1005c03e
call dword [0x100fa7f0]
movzx ecx, al
test ecx, ecx
je 0x1005c02f
call dword [0x100fa7f8]
cmp eax, 1
jg 0x1005c02f
push 0x100d37ec
push 1
push 0x5b
push 0x100d3804
call dword [0x100fa800]
add esp, 0x10
mov dword [ebp - 0x48], 1
xor edx, edx
jne 0x1005be35
cmp dword [ebp - 0x3c], 0
je 0x1005c04e
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [ebp - 0x40], 0
je 0x1005c05e
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10086b0f
mov esp, ebp
pop ebp
ret