Function at 0x10014490
Capabilities:
Enumerate services
Query or enumerate registry key
Query service status

Disassembly:
push ebp
mov ebp, esp
movsd xmm0, qword [0x1002ba48]
sub esp, 0x34
ucomisd xmm0, qword [0x10023d70]
push ebx
push esi
push edi
lahf
test ah, 0x44
jp 0x10014997
sub esp, 0x18
mov ecx, esp
push 6
push str.dylipo
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
call dword [sym.imp.COMCTL32.dll_ImageList_GetDragImage]
cvttsd2si ecx, qword [0x1002ba60]
push 0x340b37e
mov dword [ebp - 4], eax
push ecx
push 0
push 0x3f4c4205
push 0
push 0x13e511d9
sub esp, 0x18
mov ecx, esp
push 0xc
push str.edykeueuhuen
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
call dword [sym.imp.COMCTL32.dll_ImageList_BeginDrag]
movsd xmm0, qword [0x1002ba68]
sub esp, 0x20
mov ebx, eax
mov edi, edx
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013600
sub esp, 0xc
mov ecx, esp
push 0xc
push str.Deygaqohhevz
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
movsd xmm0, qword [0x1002ba50]
call fcn.10015b90
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_ImpersonateSelf]
movsd xmm0, qword [0x1002ba48]
add esp, 0x40
fstp qword [ebp - 0x14]
call fcn.10015b90
movsd xmm0, qword [0x1002ba68]
push edx
push eax
call fcn.10015b90
movsd xmm0, qword [0x1002ba70]
push edx
push eax
call fcn.10015b90
push edx
push eax
cvttsd2si eax, qword [0x1002ba30]
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov edx, edi
mov ecx, ebx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10023a10]
movsd qword [ebp - 0x2c], xmm0
call fcn.10015c40
movsd xmm1, qword [0x10023ad0]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x1002ba38]
divsd xmm1, qword [ebp - 0x14]
movsd qword [esp], xmm0
movsd qword [ebp - 0x14], xmm1
push 0
push 0x1a8407bb
call dword [sym.imp.COMCTL32.dll_FlatSB_SetScrollInfo]
add esp, 0x10
mov ecx, eax
call fcn.10015c40
movsd xmm1, qword [ebp - 0x14]
divsd xmm1, xmm0
movsd qword [ebp - 0x14], xmm1
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cvttsd2si ecx, qword [0x1002ba28]
sub esp, 8
mov edx, 0x145e08a4
fmul qword [0x10023b90]
movsd xmm0, qword [0x1002ba60]
movsd qword [esp], xmm0
fstp qword [ebp - 0xc]
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, eax
call fcn.10015c40
mulsd xmm0, qword [ebp - 0xc]
sub esp, 0x18
mov esi, esp
movsd qword [ebp - 0x24], xmm0
movsd xmm0, qword [0x1002ba60]
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
add esp, 0xc
push 0
push 0x65a027e
call dword [sym.imp.ADVAPI32.dll_ImpersonateSelf]
sub esp, 8
mov ecx, 0x1afabcc4
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x1c], xmm0
movsd xmm0, qword [0x10023a08]
movsd qword [esp], xmm0
push 0
push 0x34624e2f
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov ecx, eax
call fcn.10015c40
movsd qword [ebp - 0xc], xmm0
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
movd xmm0, dword [ebp - 4]
sub esp, 0x18
cvtdq2pd xmm0, xmm0
mov ecx, esp
push 6
push str.dylipo
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10023c28]
divsd xmm1, qword [ebp - 0xc]
mulsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x1c]
addsd xmm1, qword [0x10023b78]
addsd xmm1, qword [ebp - 0x24]
subsd xmm1, qword [ebp - 0x14]
addsd xmm1, qword [ebp - 0x2c]
movsd qword [0x1002ba38], xmm1
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
call dword [sym.imp.COMCTL32.dll_ImageList_GetDragImage]
cvttsd2si ecx, qword [0x1002ba60]
push 0x340b37e
mov dword [ebp - 4], eax
push ecx
push 0
push 0x3f4c4205
push 0
push 0x13e511d9
sub esp, 0x18
mov ecx, esp
mov dword [ecx], 0
push 0xc
push str.edykeueuhuen
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
call dword [sym.imp.COMCTL32.dll_ImageList_BeginDrag]
movsd xmm0, qword [0x1002ba68]
sub esp, 0x20
mov ebx, eax
mov edi, edx
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013600
sub esp, 0xc
mov ecx, esp
push 0xc
push str.Deygaqohhevz
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000d330
movsd xmm0, qword [0x1002ba50]
call fcn.10015b90
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_ImpersonateSelf]
movsd xmm0, qword [0x1002ba48]
add esp, 0x40
fstp qword [ebp - 0x2c]
call fcn.10015b90
movsd xmm0, qword [0x1002ba68]
push edx
push eax
call fcn.10015b90
movsd xmm0, qword [0x1002ba70]
push edx
push eax
call fcn.10015b90
push edx
push eax
cvttsd2si eax, qword [0x1002ba30]
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov edx, edi
mov ecx, ebx
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10023a10]
movsd qword [ebp - 0x34], xmm0
call fcn.10015c40
movsd xmm1, qword [0x10023ad0]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x1002ba38]
divsd xmm1, qword [ebp - 0x2c]
movsd qword [esp], xmm0
push 0
push 0x1a8407bb
movsd qword [ebp - 0x14], xmm1
call dword [sym.imp.COMCTL32.dll_FlatSB_SetScrollInfo]
add esp, 0x10
mov ecx, eax
call fcn.10015c40
movsd xmm1, qword [ebp - 0x14]
divsd xmm1, xmm0
movsd qword [ebp - 0x14], xmm1
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cvttsd2si ecx, qword [0x1002ba28]
sub esp, 8
mov edx, 0x145e08a4
fmul qword [0x10023b90]
movsd xmm0, qword [0x1002ba60]
movsd qword [esp], xmm0
fstp qword [ebp - 0x2c]
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, eax
call fcn.10015c40
mulsd xmm0, qword [ebp - 0x2c]
sub esp, 0x18
mov esi, esp
movsd qword [ebp - 0x1c], xmm0
movsd xmm0, qword [0x1002ba60]
call fcn.10015b90
push edx
push eax
push esi
call fcn.10013690
add esp, 0xc
push 0
push 0x65a027e
call dword [sym.imp.ADVAPI32.dll_ImpersonateSelf]
sub esp, 8
mov ecx, 0x1afabcc4
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x24], xmm0
movsd xmm0, qword [0x10023a08]
movsd qword [esp], xmm0
push 0
push 0x34624e2f
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
mov ecx, eax
call fcn.10015c40
movsd qword [ebp - 0x2c], xmm0
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
movd xmm0, dword [ebp - 4]
cvtdq2pd xmm0, xmm0
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, qword [0x10023c28]
divsd xmm1, qword [ebp - 0x2c]
mulsd xmm1, xmm0
divsd xmm1, qword [ebp - 0x24]
addsd xmm1, qword [0x10023b70]
addsd xmm1, qword [ebp - 0x1c]
subsd xmm1, qword [ebp - 0x14]
addsd xmm1, qword [ebp - 0x34]
movsd qword [0x1002ba58], xmm1
push 0
push 0x100234ac
push 0x100235cc
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret