Function at 0x409b70
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x14
call fcn.00401a00
push 0x20000
call fcn.0041257c
add eax, 0x20
push eax
call fcn.00413b64
add esp, 4
push eax
call fcn.00413a6d
add esp, 8
push 0x20000
call fcn.0041257c
add eax, 0x40
push eax
call fcn.00413b64
add esp, 4
push eax
call fcn.00413a6d
add esp, 8
call fcn.00409920
call fcn.00408310
test eax, eax
je 0x409bcb
push 0x6f
call fcn.00413919
push ebx
mov ebx, dword [esp + 0x1c]
cmp ebx, 1
push ebp
push esi
push edi
jle 0x409eb0
mov ebp, dword [esp + 0x2c]
mov eax, dword [ebp + 4]
lea esi, [ebp + 4]
push str.start
push eax
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409c10
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 0
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov ecx, dword [esi]
push str.stop
push ecx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409c3c
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 1
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov edx, dword [esi]
push str.restart
push edx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409c7e
lea esi, [ebp + 8]
push esi
lea edi, [ebx - 2]
push edi
push 1
call fcn.0040ef10
add esp, 0xc
test eax, eax
je 0x409c6c
push eax
call fcn.00413919
push esi
push edi
push 0
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov eax, dword [esi]
push str.pause
push eax
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409caa
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 2
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov ecx, dword [esi]
push str.continue
push ecx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409cd6
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 3
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov edx, dword [esi]
push str.status
push edx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409d02
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 4
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov eax, dword [esi]
push str.rotate
push eax
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409d31
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
push 0x80
call fcn.0040ef10
add esp, 0xc
push eax
call fcn.00413919
mov ecx, dword [esi]
push str.install
push ecx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409d78
cmp byte [0x42340d], 0
jne 0x409d62
push ebp
mov eax, 0x400001f6
call fcn.004099a0
add esp, 4
push eax
call fcn.00413919
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
call fcn.0040fee0
add esp, 8
push eax
call fcn.00413919
mov edx, dword [esi]
push str.edit
push edx
call fcn.004097b0
add esp, 8
test eax, eax
jne 0x409e2f
mov eax, dword [esi]
push 0x41dbf4
push eax
call fcn.004097b0
add esp, 8
test eax, eax
jne 0x409e2f
mov ecx, dword [esi]
push 0x41dbec
push ecx
call fcn.004097b0
add esp, 8
test eax, eax
jne 0x409e2f
mov edx, dword [esi]
push str.reset
push edx
call fcn.004097b0
add esp, 8
test eax, eax
jne 0x409e2f
mov eax, dword [esi]
push str.unset
push eax
call fcn.004097b0
add esp, 8
test eax, eax
jne 0x409e2f
mov ecx, dword [esi]
push str.remove
push ecx
call fcn.004097b0
add esp, 8
test eax, eax
je 0x409eb0
cmp byte [0x42340d], 0
jne 0x409e19
push ebp
mov eax, 0x400001f8
call fcn.004099a0
add esp, 4
push eax
call fcn.00413919
add ebp, 8
push ebp
add ebx, 0xfffffffe
push ebx
call fcn.0040ebc0
add esp, 8
push eax
call fcn.00413919
lea edx, [ebx - 1]
push esi
push edx
call fcn.0040daa0
mov ecx, eax
add esp, 8
mov dword [esp + 0x10], ecx
cmp ecx, 3
jne 0x409e68
cmp byte [0x42340d], 0
jne 0x409e68
cmp ebx, eax
jne 0x409e68
push ebp
mov eax, 0x400001f7
call fcn.004099a0
add esp, 4
push eax
call fcn.00413919
xor eax, eax
test ebx, ebx
jle 0x409eaa
mov edi, edi
mov esi, dword [ebp + eax*4]
mov ecx, esi
lea edi, [ecx + 2]
lea esp, [esp]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x409e80
sub ecx, edi
sar ecx, 1
lea edx, [ecx + ecx]
mov ecx, esi
test edx, edx
je 0x409ea1
mov byte [ecx], 0
inc ecx
sub edx, 1
jne 0x409e98
inc eax
cmp eax, ebx
jl 0x409e70
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00413919
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
cmp byte [0x42340d], 0
mov dword [0x4233c0], eax
je 0x409ec9
call fcn.0040a860
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
test eax, eax
jne 0x409f0b
lea eax, [esp + 0x14]
xor esi, esi
push eax
mov dword [esp + 0x18], str.NSSM
mov dword [esp + 0x1c], 0x410090
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], esi
call dword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x409f41
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x427
jne 0x409f1b
push 1
call fcn.004098d0
add esp, 4
push eax
call fcn.00413919
push esi
push eax
call fcn.004052c0
add esp, 4
push eax
push 0xc00003e9
push 1
call fcn.00405400
add esp, 0x10
call fcn.00408480
push 0x64
call fcn.00413919
push esi
call fcn.00413919
int3