Function at 0x404360
Capabilities:
Query service status
Start service

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
push 5
push str.ServicesActive
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
test eax, eax
je 0x40460d
mov esi, eax
push 0x14
push str.wsclient
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
test eax, eax
je 0x404614
mov edi, eax
push 0
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov ebx, 1
test eax, eax
jne 0x40463b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
jne 0x40462c
mov ebp, esp
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov ebx, 1
test eax, eax
je 0x40463b
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
cmp dword [esp + 4], 4
je 0x40463b
push 0x12c
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x404651
mov eax, dword [esp + 4]
cmp eax, 4
je 0x40463b
jmp 0x404655
push str.start_service.OpenSCManager
jmp 0x404620
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push str.start_service.OpenService
call fcn.00404100
add esp, 4
xor ebx, ebx
jmp 0x404647
push str.start_service.StartService
call fcn.00404100
add esp, 4
xor ebx, ebx
mov ebp, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push edi
call ebp
push esi
call ebp
mov eax, ebx
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
push eax
push str.start_service:_Timeout_waiting_for_service_start__current_state_is__d_n
call fcn.00404670
add esp, 8
jmp 0x404639