Function at 0x180015600
Capabilities:
Enumerate services
Query or enumerate registry value

Disassembly:
mov rax, rsp
sub rsp, 0x168
movsd xmm0, qword [0x1800b3870]
ucomisd xmm0, qword [0x18009a480]
jp 0x1800159a2
jne 0x1800159a2
mov qword [rax + 8], rbx
lea rdx, str.umceyvavol
cvttsd2si ebx, qword [0x1800b3848]
mov qword [rax - 8], rdi
lea rcx, [rsp + 0x30]
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm11
call fcn.1800090b0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
movsd xmm11, qword [0x180099e98]
lea rdx, str.inoyydoyo
cvttsd2si rbx, qword [0x1800b3910]
lea rcx, [rsp + 0x50]
movaps xmm7, xmm11
divsd xmm7, xmm0
mulsd xmm7, xmm6
call fcn.1800090b0
cvttsd2si ecx, qword [0x1800b37e8]
mov rdx, rax
mov dword [rsp + 0x20], 0x31b37652
mov r9, rbx
mov r8d, 0x2b1638d3
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rsp + 0x70]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm7
movsd xmm7, qword [0x180099d68]
subsd xmm7, xmm0
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rsp + 0x90]
mov rbx, rax
call fcn.18002f2d0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
movsd xmm2, qword [0x180099528]
mov r9, rbx
mov ecx, 0xe36d8e7
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerA]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rsp + 0xb0]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x1800987f8]
call fcn.18002f2f0
lea rdx, [0x180096c34]
mov rdi, rax
lea rcx, [rsp + 0xd0]
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0xf0]
mov rbx, rax
call fcn.18002f2f0
movsd xmm1, qword [0x1800995d0]
mov rcx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea rdx, str.roskesebb
lea rcx, [rsp + 0x110]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.1800090b0
mov rcx, rax
movsd xmm1, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm7
movsd qword [0x1800b37e8], xmm6
cvttsd2si ebx, qword [0x1800b3848]
lea rdx, str.umceyvavol
lea rcx, [rsp + 0x110]
call fcn.1800090b0
mov rcx, rax
mov edx, ebx
call qword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movd xmm6, eax
cvtdq2pd xmm6, xmm6
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
cvttsd2si rbx, qword [0x1800b3910]
lea rdx, str.inoyydoyo
lea rcx, [rsp + 0xf0]
divsd xmm11, xmm0
mulsd xmm11, xmm6
call fcn.1800090b0
cvttsd2si ecx, qword [0x1800b37e8]
mov rdx, rax
mov dword [rsp + 0x20], 0x31b37652
mov r9, rbx
mov r8d, 0x2b1638d3
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rsp + 0xd0]
movsd xmm7, qword [0x180098f40]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm11
subsd xmm7, xmm0
call fcn.18002f2d0
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rsp + 0xb0]
mov rbx, rax
call fcn.18002f2d0
movsd xmm0, qword [0x1800b3848]
mov rdx, rax
movsd xmm2, qword [0x180099528]
mov r9, rbx
mov ecx, 0xe36d8e7
movsd qword [rsp + 0x20], xmm0
call qword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerA]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rsp + 0x90]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, qword [0x1800987f8]
call fcn.18002f2f0
lea rdx, [0x180096c34]
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.1800090b0
cvttsd2si rdx, qword [0x1800b3870]
lea rcx, [rsp + 0x50]
mov rbx, rax
call fcn.18002f2f0
movsd xmm1, qword [0x1800995d0]
mov rcx, rax
mov r9, rdi
mov r8, rbx
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea rdx, str.roskesebb
lea rcx, [rsp + 0x30]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
call fcn.1800090b0
mov rcx, rax
movsd xmm1, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
movaps xmm11, xmmword [rsp + 0x130]
mov rdi, qword [rsp + 0x160]
mov rbx, qword [rsp + 0x170]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm6, xmm0
addsd xmm6, xmm7
movaps xmm7, xmmword [rsp + 0x140]
movsd qword [0x1800b3878], xmm6
movaps xmm6, xmmword [rsp + 0x150]
add rsp, 0x168
ret