Function at 0x10011350
Capabilities:
Query or enumerate registry key
Start service

Disassembly:
push ebp
mov ebp, esp
movsd xmm0, qword [0x1002aa38]
sub esp, 0x28
ucomisd xmm0, qword [0x10022b48]
push esi
push edi
lahf
test ah, 0x44
jp 0x100116bc
movaps xmm0, xmmword [0x10022bc0]
push 0x2c58b8ac
sub esp, 0x28
mov ecx, esp
movups xmmword [esp + 0x18], xmm0
push 3
push 0x10022438
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
cvttsd2si ecx, qword [0x1002aa30]
mov dword [ebp - 4], eax
movsd xmm0, qword [0x1002aa38]
push ecx
cvttsd2si ecx, qword [0x1002aa48]
sub esp, 8
movsd qword [esp], xmm0
push ecx
sub esp, 0x18
mov ecx, esp
push 3
push 0x10022440
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
add esp, 0x28
fstp qword [ebp - 0x18]
push 0
push 0x39f9fa8
sub esp, 0x18
mov ecx, esp
push 0xf
push str.Eyyomevuategizy
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x10022930]
call sub.IMM32.dll_ImmIsUIMessageA
movsd xmm0, qword [0x1002aa50]
sub esp, 0x18
cvttsd2si esi, qword [0x1002aa58]
mov ecx, esp
mov edi, eax
push 0xc
push str.pyjayyofuyuc
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
movsd qword [ebp - 0x10], xmm0
call fcn.1000ce20
movsd xmm0, qword [ebp - 0x10]
mov edx, 0x1bad5c59
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd xmm1, qword [0x10022940]
mov esi, eax
movd xmm0, edi
cvtdq2pd xmm0, xmm0
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x166574c1
divsd xmm1, xmm0
movsd qword [ebp - 0x10], xmm1
call edi
movsd xmm1, qword [ebp - 0x10]
sub esp, 0x20
divsd xmm1, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x10022a28]
movsd qword [ebp - 0x10], xmm1
movsd qword [esp + 0x18], xmm0
movsd xmm0, qword [0x1002aa30]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa48]
add esp, 0xc
push 0x2a81529a
sub esp, 0x20
mov esi, esp
movsd qword [esp + 0x18], xmm0
movsd xmm0, qword [0x1002aa70]
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
movsd xmm0, qword [0x10022ad8]
add esp, 0x34
fmul qword [ebp - 0x10]
movsd qword [esp + 8], xmm0
movsd xmm0, qword [0x1002aa48]
fstp qword [ebp - 0x28]
movsd qword [esp], xmm0
call fcn.10014e70
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ecx, eax
call fcn.10014f20
mulsd xmm0, qword [0x10022878]
movsd qword [ebp - 0x10], xmm0
movsd xmm0, qword [0x1002aa58]
call fcn.10014e70
cvttsd2si ecx, qword [0x1002aa48]
mov esi, eax
movsd xmm0, qword [0x100229c0]
push ecx
push edx
push esi
sub esp, 0x20
mov eax, esp
movsd qword [esp + 0x18], xmm0
push edx
push esi
push eax
call fcn.10011280
cvttsd2si eax, qword [0x1002aa28]
add esp, 0xc
push eax
call edi
add esp, 0x30
mov ecx, eax
call fcn.10014f20
mulsd xmm0, qword [ebp - 0x10]
sub esp, 8
movsd xmm1, qword [0x1002aa58]
movsd qword [esp], xmm1
divsd xmm0, qword [ebp - 0x18]
movsd qword [ebp - 0x20], xmm0
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
mov ecx, eax
call fcn.10014f20
sub esp, 0x18
movsd qword [ebp - 0x10], xmm0
movsd xmm0, qword [0x1002aa48]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa28]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm2, qword [0x1002aa70]
add esp, 0xc
movsd xmm1, qword [0x10022890]
movsd xmm0, qword [0x100229e0]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
call esi
cvttsd2si ecx, qword [0x1002aa78]
push 0
push 0x397ae0ab
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x18], xmm0
call esi
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [0x10022858]
divsd xmm1, xmm0
movd xmm0, dword [ebp - 4]
divsd xmm1, qword [ebp - 0x18]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
mulsd xmm1, qword [ebp - 0x10]
addsd xmm1, qword [0x10022798]
subsd xmm1, qword [ebp - 0x20]
addsd xmm1, qword [ebp - 0x28]
movsd qword [0x1002aa78], xmm1
push 0
push 0x10022475
push 0x10022478
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop esi
mov esp, ebp
pop ebp
ret