Function at 0x532d74
Capabilities:
Start service
Stop service

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x532d7c
mov dword [ebp - 8], edx
mov byte [ebp - 1], al
xor eax, eax
push ebp
push 0x532f9c
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
mov al, byte [ebp - 1]
add al, 0xfe
sub al, 2
jae 0x532f81
cmp byte [ebp - 1], 2
jne 0x532dcb
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x10]
lea eax, [ebp - 0x40]
mov edx, 0x532fb8
call fcn.004081f8
mov eax, dword [ebp - 0x40]
call fcn.0052c604
jmp 0x532de6
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0x10]
lea eax, [ebp - 0x44]
mov edx, 0x532ff4
call fcn.004081f8
mov eax, dword [ebp - 0x44]
call fcn.0052c604
push 1
push 0
push 0
call sub.advapi32.dll_OpenSCManagerW
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x532e58
push 0x533030
call sub.kernel32.dll_GetLastError_2
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x4c]
call fcn.0041eec4
push dword [ebp - 0x4c]
push 0x533070
call sub.kernel32.dll_GetLastError_2
lea edx, [ebp - 0x50]
call fcn.0042341c
push dword [ebp - 0x50]
push 0x533070
mov eax, dword [ebp - 8]
push dword [eax + 0xc]
push 0x533070
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
lea eax, [ebp - 0x48]
mov edx, 8
call fcn.00408280
mov eax, dword [ebp - 0x48]
call fcn.0052c604
jmp 0x532f81
cmp byte [ebp - 1], 2
jne 0x532e67
mov dword [ebp - 0x18], 0x10
jmp 0x532e6e
mov dword [ebp - 0x18], 0x20
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x10]
call fcn.00407fb4
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_OpenServiceW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x532ee3
push 0x533080
call sub.kernel32.dll_GetLastError_2
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x58]
call fcn.0041eec4
push dword [ebp - 0x58]
push 0x533070
call sub.kernel32.dll_GetLastError_2
lea edx, [ebp - 0x5c]
call fcn.0042341c
push dword [ebp - 0x5c]
push 0x533070
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
lea eax, [ebp - 0x54]
mov edx, 6
call fcn.00408280
mov eax, dword [ebp - 0x54]
call fcn.0052c604
jmp 0x532f78
cmp byte [ebp - 1], 2
jne 0x532f03
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_StartServiceW
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 9], al
jmp 0x532f1b
lea eax, [ebp - 0x38]
push eax
push 1
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_ControlService
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 9], al
cmp byte [ebp - 9], 0
jne 0x532f6f
push 0x533030
call sub.kernel32.dll_GetLastError_2
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x64]
call fcn.0041eec4
push dword [ebp - 0x64]
push 0x533070
call sub.kernel32.dll_GetLastError_2
lea edx, [ebp - 0x68]
call fcn.0042341c
push dword [ebp - 0x68]
push 0x533070
mov eax, dword [ebp - 8]
push dword [eax + 0x10]
lea eax, [ebp - 0x60]
mov edx, 6
call fcn.00408280
mov eax, dword [ebp - 0x60]
call fcn.0052c604
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_CloseServiceHandle
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_CloseServiceHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x532fa3
lea eax, [ebp - 0x68]
mov edx, 0xb
call fcn.00407458
ret