Function at 0x1000df20
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100222bd
mov eax, dword fs:[0]
push eax
sub esp, 0x250
mov eax, dword [0x1002b0f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
movsd xmm0, qword [0x1002ba78]
ucomisd xmm0, qword [0x10023d40]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x254], eax
lahf
test ah, 0x44
jp 0x1000e36b
movsd xmm0, qword [0x1002ba50]
push 0
push 0x1abd8ac1
push 0
push 0x33d0838c
push 0x35e8dec2
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x224], esp
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013600
sub esp, 0xc
mov dword [ebp - 4], 0
mov ecx, esp
push 0xf
push str.oqoindaxejahizu
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
mov edi, dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
mov dword [ebp - 4], 0xffffffff
call edi
movsd xmm0, qword [0x100239a0]
sub esp, 0x28
mov dword [ebp - 0x244], eax
mov esi, esp
mov dword [ebp - 0x240], edx
mov dword [ebp - 0x224], esp
movsd qword [esp + 0x20], xmm0
movsd xmm0, qword [0x1002ba28]
movsd qword [esp + 0x18], xmm0
movsd xmm0, qword [0x1002ba30]
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
movsd xmm0, qword [0x1002ba30]
sub esp, 0xc
mov dword [ebp - 4], 1
mov esi, esp
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call sub.COMCTL32.dll_DefSubclassProc
add esp, 0x28
mov ecx, esp
mov dword [ebp - 0x224], esp
fstp qword [ebp - 0x25c]
push 0xf
push str.Yploisbyituxedp
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000d430
movsd xmm0, qword [0x1002ba50]
sub esp, 0x18
mov dword [ebp - 4], 2
mov esi, esp
mov dword [ebp - 0x228], esp
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
sub esp, 0xc
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ecx], 0
push 7
push str.uxyyipa
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
movsd xmm0, qword [0x10023900]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.COMCTL32.dll_ImageList_SetOverlayImage]
movsd xmm0, qword [0x1002ba50]
push 0
push 0x7b4c1bd
sub esp, 0x18
mov dword [ebp - 0x248], eax
mov esi, esp
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013600
add esp, 0xc
call dword [sym.imp.COMCTL32.dll_FlatSB_SetScrollRange]
movsd xmm0, qword [0x1002ba38]
sub esp, 0x18
mov dword [ebp - 0x23c], eax
mov esi, esp
mov dword [ebp - 0x24c], edx
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
cvttsd2si eax, qword [0x1002ba70]
add esp, 0xc
push eax
push 0x133243fe
call edi
sub esp, 0x18
mov dword [ebp - 0x224], eax
mov ecx, esp
mov dword [ebp - 0x228], edx
push 0xf
push str.aiyeadaxallepeh
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000d430
movsd xmm0, qword [0x1002ba78]
cvttsd2si esi, qword [0x1002ba50]
call fcn.10015b90
mov ecx, esi
mov esi, dword [sym.imp.ADVAPI32.dll_UnlockServiceDatabase]
push edx
push eax
movsd xmm1, qword [0x10023bd8]
movsd xmm0, qword [0x10023bb0]
call esi
cvttsd2si ecx, qword [0x1002ba70]
push 0
push 0x2836c1be
mov dword [ebp - 0x22c], eax
mov edi, edx
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_BeginDrag]
push 0
push 0x18a97a2c
sub esp, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10023cc8]
movsd qword [ebp - 0x238], xmm0
movaps xmm0, xmmword [0x10023d80]
movups xmmword [esp], xmm0
call esi
add esp, 0x18
mov ecx, eax
call fcn.10015c40
movsd xmm1, qword [ebp - 0x238]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x1002ba70]
movsd qword [ebp - 0x238], xmm1
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusA]
mov ecx, dword [ebp - 0x22c]
mov edx, edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x238]
movsd qword [ebp - 0x238], xmm0
call fcn.10015c40
movsd xmm1, qword [ebp - 0x238]
divsd xmm1, xmm0
cvttsd2si eax, qword [0x1002ba28]
movsd qword [ebp - 0x238], xmm1
push eax
push 0x16401aad
call dword [sym.imp.COMCTL32.dll_ImageList_Duplicate]
add esp, 8
mov ecx, eax
call fcn.10015c40
movsd xmm2, qword [0x10023b28]
divsd xmm2, xmm0
mov edx, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x244]
movsd qword [ebp - 0x230], xmm2
call fcn.10015c40
movsd xmm1, qword [ebp - 0x230]
mulsd xmm1, xmm0
mov edx, dword [ebp - 0x24c]
movd xmm0, dword [ebp - 0x248]
cvtdq2pd xmm0, xmm0
mov ecx, dword [ebp - 0x23c]
addsd xmm1, qword [0x10023ce8]
movsd qword [ebp - 0x230], xmm1
movsd xmm1, qword [ebp - 0x25c]
mulsd xmm1, qword [0x100239d0]
divsd xmm1, xmm0
movsd qword [ebp - 0x25c], xmm1
call fcn.10015c40
movsd xmm1, qword [ebp - 0x25c]
divsd xmm1, xmm0
mov edx, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x224]
movsd xmm2, qword [ebp - 0x230]
subsd xmm2, xmm1
movsd qword [ebp - 0x230], xmm2
call fcn.10015c40
movsd xmm1, qword [0x10023b80]
divsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x230]
subsd xmm0, xmm1
addsd xmm0, qword [ebp - 0x238]
movsd qword [0x1002ba58], xmm0
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.10016ee0
push 0x104
lea eax, [ebp - 0x21c]
push eax
push 0
call fcn.10006270
add esp, 0x18
test eax, eax
je 0x1000e451
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000e3a5
sub ecx, edx
sar ecx, 1
lea eax, [ecx - 1]
test eax, eax
js 0x1000e3e5
nop dword [eax + eax]
cmp word [ebp + eax*2 - 0x21c], 0x5c
je 0x1000e3e5
cmp eax, 0x105
jae 0x1000e4f1
xor ecx, ecx
mov word [ebp + eax*2 - 0x21c], cx
sub eax, 1
jns 0x1000e3c0
movups xmm0, xmmword [str.license.dat]
push 0
push 0x80
push 3
movups xmmword [ebp + eax*2 - 0x21a], xmm0
push 0
movq xmm0, qword [0x10023864]
push 1
movq qword [ebp + eax*2 - 0x20a], xmm0
lea eax, [ebp - 0x21c]
push 0x80000000
push eax
call fcn.100025d0
mov esi, eax
add esp, 0x1c
mov dword [ebp - 0x224], esi
test esi, esi
je 0x1000e451
cmp esi, 0xffffffff
je 0x1000e451
push 0
push esi
call fcn.10005a70
mov edi, eax
add esp, 8
test edi, edi
jne 0x1000e46e
push esi
call fcn.10001c50
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10015b81
mov esp, ebp
pop ebp
ret
mov eax, dword fs:[0x2c]
mov ecx, dword [0x1002bdfc]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1002ba8c]
cmp eax, dword [ecx + 4]
jg 0x1000e4f6
push 0
lea eax, [ebp - 0x220]
mov dword [ebp - 0x220], 0
push eax
push edi
push dword [0x1002ba80]
push esi
call fcn.100092a0
push esi
call fcn.10001c50
push 0x1002ba80
call fcn.1000c3b0
mov ecx, dword [ebp - 0x250]
add esp, 0x1c
mov eax, dword [0x1002ba80]
mov dword [ecx], eax
mov eax, dword [0x1002ba84]
mov ecx, dword [ebp - 0x254]
sub eax, dword [0x1002ba80]
cmp dword [ebp - 0x220], 0
mov dword [ecx], eax
je 0x1000e451
mov al, 1
jmp 0x1000e453
call fcn.1001589d
push 0x1002ba8c
call fcn.10015aab
add esp, 4
cmp dword [0x1002ba8c], 0xffffffff
jne 0x1000e48a
mov dword [ebp - 4], 4
cmp edi, 0x7fffffff
jbe 0x1000e524
call fcn.1000d0d0
cmp edi, 0x1000
jb 0x1000e557
lea eax, [edi + 0x23]
cmp eax, edi
ja 0x1000e538
call fcn.1000d0a0
push eax
call fcn.10015423
mov ecx, eax
add esp, 4
test ecx, ecx
je 0x1000e552
lea eax, [ecx + 0x23]
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000e562
call fcn.10018abf
push edi
call fcn.10015423
add esp, 4
jmp 0x1000e562
push edi
lea esi, [eax + edi]
mov dword [0x1002ba80], eax
push 0
push eax
mov dword [0x1002ba88], esi
call fcn.10016ee0
push 0x10022740
mov dword [0x1002ba84], esi
call fcn.10015766
push 0x1002ba8c
mov dword [ebp - 4], 0xffffffff
call fcn.10015a61
mov esi, dword [ebp - 0x224]
add esp, 0x14
jmp 0x1000e48a