Function at 0x43ec30
Capabilities:
Check for time delay via gettickcount
Query service status
Start service

Disassembly:
push 0xffffffffffffffff
push 0x4e80ff
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x44]
mov dword fs:[0], eax
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov edi, eax
mov dword [esp + 0x14], edi
test edi, edi
jne 0x43ecb5
lea eax, [esp + 0x14]
push eax
call fcn.00491540
mov dword [esp + 0x50], edi
mov ecx, dword [eax]
push ecx
push str.DoStartSvc_1_error___s_
push 8
call fcn.0043d500
add esp, 0x10
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
xor al, al
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov edx, dword [esp + 0x54]
push 0x14
push edx
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceA]
mov esi, eax
test esi, esi
jne 0x43ed1c
lea eax, [esp + 0x14]
push eax
call fcn.00491540
mov dword [esp + 0x50], 1
mov ecx, dword [eax]
push ecx
push str.DoStartSvc_2_error___s_
push 8
call fcn.0043d500
add esp, 0x10
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
lea edx, [esp + 0x18]
push edx
push 0x24
lea eax, [esp + 0x28]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x43ed8d
lea ecx, [esp + 0x14]
push ecx
call fcn.00491540
mov dword [esp + 0x50], 2
mov edx, dword [eax]
push edx
push str.DoStartSvc_3_error___s_
push 8
call fcn.0043d500
add esp, 0x10
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x14]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
push edi
call esi
xor al, al
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov eax, dword [esp + 0x24]
cmp eax, 1
je 0x43ed9b
cmp eax, 3
jne 0x43ed6b
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
cmp dword [esp + 0x24], 3
mov ebp, dword [esp + 0x34]
mov edi, eax
jne 0x43ee1d
mov eax, 0xcccccccd
mul dword [esp + 0x38]
shr edx, 3
cmp edx, 0x3e8
jae 0x43edcb
mov edx, 0x3e8
jmp 0x43edd8
cmp edx, 0x2710
jbe 0x43edd8
mov edx, 0x2710
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x18]
push eax
push 0x24
lea ecx, [esp + 0x28]
push ecx
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x43ee4c
cmp dword [esp + 0x34], ebp
jbe 0x43ee08
call ebx
mov ebp, dword [esp + 0x34]
mov edi, eax
jmp 0x43ee16
call ebx
sub eax, edi
cmp eax, dword [esp + 0x38]
ja 0x43eea8
cmp dword [esp + 0x24], 3
je 0x43edb0
push 0
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
test eax, eax
jne 0x43eec4
lea edx, [esp + 0x1c]
push edx
call fcn.00491540
mov dword [esp + 0x50], 5
mov eax, dword [eax]
push eax
push str.DoStartSvc_7_error___s_
jmp 0x43ee66
lea edx, [esp + 0x1c]
push edx
call fcn.00491540
mov dword [esp + 0x50], 3
mov eax, dword [eax]
push eax
push str.DoStartSvc_5_error___s_
push 8
call fcn.0043d500
add esp, 0x10
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
mov ecx, dword [esp + 0x14]
push ecx
call esi
xor al, al
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
lea edx, [esp + 0x1c]
push edx
call fcn.00491540
mov dword [esp + 0x50], 4
mov eax, dword [eax]
push eax
push str.DoStartSvc_6_error___s_
jmp 0x43ee66
lea edx, [esp + 0x18]
push edx
push 0x24
lea eax, [esp + 0x28]
push eax
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
jne 0x43ef26
lea ecx, [esp + 0x1c]
push ecx
call fcn.00491540
mov dword [esp + 0x50], 6
mov edx, dword [eax]
push edx
push str.DoStartSvc_8_error___s_
push 8
call fcn.0043d500
add esp, 0x10
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x1c]
call dword [sym.imp.mfc90.dll_Ordinal_601]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
mov eax, dword [esp + 0x14]
push eax
jmp 0x43ee90
call ebx
cmp dword [esp + 0x24], 2
mov ebp, dword [esp + 0x34]
mov edi, eax
jne 0x43efa9
jmp 0x43ef40
mov eax, 0xcccccccd
mul dword [esp + 0x38]
shr edx, 3
cmp edx, 0x3e8
jae 0x43ef5b
mov edx, 0x3e8
jmp 0x43ef68
cmp edx, 0x2710
jbe 0x43ef68
mov edx, 0x2710
push edx
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [esp + 0x18]
push ecx
push 0x24
lea edx, [esp + 0x28]
push edx
push 0
push esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatusEx]
test eax, eax
je 0x43efa9
cmp dword [esp + 0x34], ebp
jbe 0x43ef98
call ebx
mov ebp, dword [esp + 0x34]
mov edi, eax
jmp 0x43efa2
call ebx
sub eax, edi
cmp eax, dword [esp + 0x38]
ja 0x43efa9
cmp dword [esp + 0x24], 2
je 0x43ef40
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
call esi
mov eax, dword [esp + 0x14]
push eax
call esi
push str.DoStartSvc_No_error
push 8
call fcn.0043d500
add esp, 8
mov al, 1
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret