Function at 0x4ba5e0
Capabilities:
Check for time delay via gettickcount
Delete service
Query service status
Stop service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [0x80236c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0xf003f
push 0
push 0
mov edi, eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov ebx, eax
mov dword [ebp - 0x30], ebx
test ebx, ebx
jne 0x4ba63c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenSCManager_failed___d_
push ebx
push 2
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x18
xor bl, bl
jmp 0x4ba8cf
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push 0x1002c
cmovae eax, dword [ebp + 8]
push eax
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov esi, eax
test esi, esi
jne 0x4ba69e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.OpenService_failed___d_
push esi
push 2
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x18
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x424
jne 0x4ba690
mov bl, 1
jmp 0x4ba8cf
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor bl, bl
jmp 0x4ba8cf
lea eax, [ebp - 8]
mov bl, 1
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x4ba6e1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceStatusEx_failed___d_
push 0
push 2
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x18
xor bl, bl
jmp 0x4ba8b4
mov eax, dword [ebp - 0x28]
cmp eax, 1
jne 0x4ba6f3
push str.Service_is_already_stopped
jmp 0x4ba830
cmp eax, 3
jne 0x4ba785
nop dword [eax]
push str.Service_stop_pending...
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
mov eax, 0xcccccccd
add esp, 0x14
mul dword [ebp - 0x14]
shr edx, 3
cmp edx, 0x3e8
jae 0x4ba736
mov edx, 0x3e8
jmp 0x4ba744
cmp edx, 0x2710
mov eax, 0x2710
cmova edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x4ba6b7
cmp dword [ebp - 0x28], 1
je 0x4ba7da
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x7530
ja 0x4ba7b7
cmp dword [ebp - 0x28], 3
je 0x4ba700
push esi
push dword [ebp - 0x30]
call fcn.004b82a0
add esp, 8
lea eax, [ebp - 0x2c]
push eax
push 1
push esi
call dword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x4ba7e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.ControlService_failed___d__n
push 0
push 4
jmp 0x4ba6c7
push str.Service_stop_timed_out.
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x14
xor bl, bl
jmp 0x4ba8b4
push str.Service_stopped_successfully
jmp 0x4ba89d
cmp dword [ebp - 0x28], 1
je 0x4ba82b
nop word [eax + eax]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x2c]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x4ba887
cmp dword [ebp - 0x28], 1
je 0x4ba82b
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x7530
ja 0x4ba867
cmp dword [ebp - 0x28], 1
jne 0x4ba7f0
push str.Service_stopped_successfully_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x14
push esi
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
jne 0x4ba898
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DeleteService_failed_w_err_0x_08lx_n
push 0
push 4
jmp 0x4ba6c7
push str.Wait_timed_out_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x14
xor bl, bl
jmp 0x4ba8b4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.QueryServiceStatusEx_failed___d__n
jmp 0x4ba6c3
push str.DeleteService_Success_n
push 0
push 4
push str.AdobeGCServiceUtilityLog
push dword [0x8084d0]
call fcn.004c1270
add esp, 0x14
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp + 0x1c]
cmp edx, 8
jb 0x4ba905
mov ecx, dword [ebp + 8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4ba8fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4ba918
push edx
push ecx
call fcn.00669b1d
add esp, 8
mov ecx, dword [ebp - 4]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00669adc
mov esp, ebp
pop ebp
ret
call fcn.006892c4
int3