Function at 0x180021d20
Capabilities:
Enumerate services
Query or enumerate registry value

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
movaps xmmword [rsp + 0x2a0], xmm8
call fcn.180022370
movsd xmm0, qword [0x1800b3870]
mov r15d, 0x3bf7
movsd xmm8, qword [0x18009a630]
ucomisd xmm0, xmm8
jp 0x18002234a
jne 0x18002234a
movaps xmmword [rsp + 0x290], xmm9
movsd xmm9, qword [0x180099e28]
movaps xmmword [rsp + 0x280], xmm10
movsd xmm10, qword [0x180099cc8]
movaps xmmword [rsp + 0x270], xmm11
movsd xmm11, qword [0x180099f80]
movaps xmmword [rsp + 0x260], xmm12
movsd xmm12, qword [0x1800999a0]
movaps xmmword [rsp + 0x250], xmm13
movsd xmm13, qword [0x180098fa0]
movaps xmmword [rsp + 0x240], xmm14
movsd xmm14, qword [0x18009a140]
movaps xmmword [rsp + 0x230], xmm15
movsd xmm15, qword [0x180098f78]
mov qword [rsp + 0x2f0], rbx
mov qword [rsp + 0x2f8], rsi
mov qword [rsp + 0x300], rdi
mov qword [rsp + 0x2d0], r14
movaps xmmword [rsp + 0x2c0], xmm6
movaps xmmword [rsp + 0x2b0], xmm7
nop word [rax + rax]
cmp r15d, 0x3bf8
jge 0x1800222db
lea rdx, str.Olijgycindiwe
lea rcx, [rsp + 0x30]
call fcn.18000a440
lea rdx, str.nidgaalo
mov rdi, rax
lea rcx, [rsp + 0x50]
call fcn.18000a440
lea rdx, str.jovopige
mov rbx, rax
lea rcx, [rsp + 0x70]
call fcn.18000a440
mov rcx, rax
mov qword [rsp + 0x20], 0x31b475fc
mov r9, rdi
mov r8, rbx
movaps xmm1, xmm9
call qword [sym.imp.ADVAPI32.dll_SetServiceStatus]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x70]
mulsd xmm0, xmm10
movaps xmm7, xmm15
subsd xmm7, xmm0
call fcn.18002f2d0
lea rdx, str.ujdiy
mov rdi, rax
lea rcx, [rbp - 0x50]
call fcn.18000a440
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp - 0x30]
mov rbx, rax
call fcn.18002f2f0
movsd xmm3, qword [0x1800b3878]
mov rcx, rax
mov r8, rdi
mov qword [rsp + 0x20], 0x60e7e49
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xorps xmm6, xmm6
lea rdx, [0x180098580]
lea rcx, [rbp - 0x10]
cvtsi2sd xmm6, rax
call fcn.18000a440
mov rdx, rax
cvttsd2si ecx, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x10]
mulsd xmm0, xmm11
mulsd xmm0, xmm6
subsd xmm7, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cvttsd2si edx, qword [0x1800b3910]
xorps xmm0, xmm0
movsd qword [rsp + 0x20], xmm13
cvtsi2sd xmm0, rax
movaps xmm6, xmm12
movaps xmm3, xmm14
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b3878]
cvttsd2si r8d, xmm0
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp + 0x30]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call fcn.18002f2f0
lea rcx, [rbp + 0x50]
mov rdi, rax
cvttsd2si rdx, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ipovojoebolj
mov rbx, rax
lea rcx, [rbp + 0x70]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si r14, qword [0x1800b37e8]
lea rdx, str.xagykebg
lea rcx, [rbp + 0x90]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call fcn.1800090b0
lea rdx, str.Kapa
mov rsi, rax
lea rcx, [rbp + 0xb0]
call fcn.1800090b0
lea rdx, str.udupabemsi
mov rdi, rax
lea rcx, [rbp + 0xd0]
call fcn.18000a440
lea rcx, [rbp + 0xf0]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
mov rcx, rax
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_SetServiceStatus]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0x110]
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mulsd xmm0, xmm6
lea rdx, str.Olijgycindiwe
lea rcx, [rbp + 0x110]
addsd xmm0, xmm7
movsd qword [0x1800b3910], xmm0
call fcn.18000a440
lea rdx, str.nidgaalo
mov rdi, rax
lea rcx, [rbp + 0xf0]
call fcn.18000a440
lea rdx, str.jovopige
mov rbx, rax
lea rcx, [rbp + 0xd0]
call fcn.18000a440
mov rcx, rax
mov qword [rsp + 0x20], 0x31b475fc
mov r9, rdi
mov r8, rbx
movaps xmm1, xmm9
call qword [sym.imp.ADVAPI32.dll_SetServiceStatus]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp + 0xb0]
movsd xmm7, qword [0x180099d50]
mulsd xmm0, xmm10
subsd xmm7, xmm0
call fcn.18002f2d0
lea rdx, str.ujdiy
mov rdi, rax
lea rcx, [rbp + 0x90]
call fcn.18000a440
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rbp + 0x70]
mov rbx, rax
call fcn.18002f2f0
movsd xmm3, qword [0x1800b3878]
mov rcx, rax
mov r8, rdi
mov qword [rsp + 0x20], 0x60e7e49
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xorps xmm6, xmm6
lea rdx, [0x180098580]
lea rcx, [rbp + 0x50]
cvtsi2sd xmm6, rax
call fcn.18000a440
mov rdx, rax
cvttsd2si ecx, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mulsd xmm0, xmm11
mulsd xmm0, xmm6
cvttsd2si rdx, qword [0x1800b3848]
lea rcx, [rbp + 0x30]
subsd xmm7, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cvttsd2si edx, qword [0x1800b3910]
xorps xmm0, xmm0
movsd qword [rsp + 0x20], xmm13
cvtsi2sd xmm0, rax
movaps xmm6, xmm12
movaps xmm3, xmm14
divsd xmm6, xmm0
movsd xmm0, qword [0x1800b3878]
cvttsd2si r8d, xmm0
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp + 0x10]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call fcn.18002f2f0
lea rcx, [rbp - 0x10]
mov rdi, rax
cvttsd2si rdx, qword [0x1800b37e8]
call fcn.18002f2f0
lea rdx, str.Ipovojoebolj
mov rbx, rax
lea rcx, [rbp - 0x30]
call fcn.18000a440
mov rcx, rax
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cvttsd2si r14, qword [0x1800b37e8]
lea rdx, str.xagykebg
lea rcx, [rbp - 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm6, xmm0
call fcn.1800090b0
lea rdx, str.Kapa
mov rsi, rax
lea rcx, [rbp - 0x70]
call fcn.1800090b0
lea rdx, str.udupabemsi
mov rdi, rax
lea rcx, [rsp + 0x70]
call fcn.18000a440
lea rcx, [rsp + 0x50]
mov rbx, rax
cvttsd2si rdx, qword [0x1800b3870]
call fcn.18002f2f0
mov rcx, rax
mov qword [rsp + 0x20], r14
mov r9, rsi
mov r8, rdi
mov rdx, rbx
call qword [sym.imp.ADVAPI32.dll_SetServiceStatus]
cvttsd2si rdx, qword [0x1800b3878]
lea rcx, [rsp + 0x30]
divsd xmm6, xmm0
call fcn.18002f2f0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mulsd xmm0, xmm6
inc r15d
addsd xmm0, xmm7
ucomisd xmm0, xmm8
movsd qword [0x1800b3870], xmm0
jp 0x1800222db
je 0x180021e20
mov rsi, qword [rsp + 0x2f8]
mov rdi, qword [rsp + 0x300]
mov r14, qword [rsp + 0x2d0]
movaps xmm6, xmmword [rsp + 0x2c0]
movaps xmm7, xmmword [rsp + 0x2b0]
mov rbx, qword [rsp + 0x2f0]
movaps xmm9, xmmword [rsp + 0x290]
movaps xmm10, xmmword [rsp + 0x280]
movaps xmm11, xmmword [rsp + 0x270]
movaps xmm12, xmmword [rsp + 0x260]
movaps xmm13, xmmword [rsp + 0x250]
movaps xmm14, xmmword [rsp + 0x240]
movaps xmm15, xmmword [rsp + 0x230]
movaps xmm8, xmmword [rsp + 0x2a0]
add rsp, 0x2d8
pop r15
pop rbp
jmp 0x180022580
mov rax, rsp
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
movsd xmm0, qword [0x1800b3870]
ucomisd xmm0, qword [0x18009a448]
jp 0x180022ec1
jne 0x180022ec1
movsd xmm0, qword [0x1800b37e8]
mov edx, 0x38dff251
mov qword [rax + 8], rbx
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
movaps xmmword [rax - 0x58], xmm10
movaps xmmword [rax - 0x68], xmm11
movaps xmmword [rax - 0x78], xmm12
movaps xmmword [rax - 0x88], xmm13
movaps xmmword [rax - 0x98], xmm14
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
movsd xmm14, qword [0x180099cd0]
lea rdx, str.Abeu
xorps xmm0, xmm0
lea rcx, [rsp + 0x30]
movaps xmm8, xmm14
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rsp + 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
addsd xmm8, qword [0x1800995e8]
call fcn.18002f2d0
mov rdx, rax
mov ecx, 0x4681360
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
movaps xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
movsd xmm11, qword [0x180098d48]
mov edx, 0x3973a71f
cvttsd2si eax, qword [0x1800b3870]
mov r8d, 0x31b3b377
cvttsd2si ecx, qword [0x1800b3848]
mov dword [rsp + 0x20], eax
movsd xmm3, qword [0x1800b37e8]
movaps xmm1, xmm11
divsd xmm1, xmm0
mulsd xmm6, xmm1
subsd xmm8, xmm6
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cvttsd2si ecx, qword [0x1800b3870]
movsd xmm12, qword [0x180098908]
movsd xmm10, qword [0x180099500]
movaps xmm6, xmm12
movaps xmm1, xmm10
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movsd xmm0, qword [0x1800b3870]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
lea rdx, str.ekojiexbaoybod
lea rcx, [rsp + 0x70]
divsd xmm7, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
cvttsd2si rcx, qword [0x1800b3910]
mov edx, 0x185d3a4b
mov r8d, 0x1ceb5a78
divsd xmm7, xmm0
subsd xmm8, xmm7
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
movsd xmm13, qword [0x180099a78]
lea rdx, str.vyfeodaov
xorps xmm0, xmm0
lea rcx, [rbp - 0x70]
movaps xmm7, xmm13
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18000a440
mov r8, rax
mov edx, 0x1f3f66cf
mov r9d, 0x14a4207b
mov ecx, 0x1f69838b
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b37e8]
lea rdx, str.Iqeehen
lea rcx, [rbp - 0x50]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm7, xmm0
call fcn.1800090b0
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov ecx, 0x3d9aeb49
mov r9d, 0x12adf8dc
mov r8d, 0x243ffe26
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, xmm7
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
xorps xmm7, xmm7
lea rdx, str.hucynoafaireuw
lea rcx, [rbp - 0x30]
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call fcn.1800090b0
cvttsd2si r8d, qword [0x1800b3910]
mov edx, 0x3443d363
mov ecx, 0x13343daf
mov qword [rsp + 0x20], rax
movsd xmm9, qword [0x180099c50]
movaps xmm3, xmm9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
mov edx, 0x38dff251
cvtsi2sd xmm0, rax
mulsd xmm0, xmm7
addsd xmm0, xmm8
movsd qword [0x1800b3848], xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
xorps xmm0, xmm0
lea rdx, str.Abeu
movaps xmm8, xmm14
lea rcx, [rbp - 0x30]
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
addsd xmm8, qword [0x1800989d0]
call fcn.18002f2d0
mov rdx, rax
mov ecx, 0x4681360
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
movaps xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si eax, qword [0x1800b3870]
mov edx, 0x3973a71f
mov r8d, 0x31b3b377
cvttsd2si ecx, qword [0x1800b3848]
mov dword [rsp + 0x20], eax
movsd xmm3, qword [0x1800b37e8]
movaps xmm1, xmm11
divsd xmm1, xmm0
mulsd xmm6, xmm1
subsd xmm8, xmm6
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cvttsd2si ecx, qword [0x1800b3870]
movaps xmm6, xmm12
movaps xmm1, xmm10
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
movsd xmm0, qword [0x1800b3870]
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
lea rdx, str.ekojiexbaoybod
lea rcx, [rbp - 0x70]
divsd xmm7, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
cvttsd2si rcx, qword [0x1800b3910]
mov edx, 0x185d3a4b
mov r8d, 0x1ceb5a78
divsd xmm7, xmm0
subsd xmm8, xmm7
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
xorps xmm0, xmm0
lea rdx, str.vyfeodaov
movaps xmm7, xmm13
lea rcx, [rsp + 0x70]
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18000a440
mov r8, rax
mov edx, 0x1f3f66cf
mov r9d, 0x14a4207b
mov ecx, 0x1f69838b
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b37e8]
lea rdx, str.Iqeehen
lea rcx, [rsp + 0x50]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm7, xmm0
call fcn.1800090b0
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov ecx, 0x3d9aeb49
mov r9d, 0x12adf8dc
mov r8d, 0x243ffe26
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, xmm7
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
xorps xmm7, xmm7
lea rdx, str.hucynoafaireuw
lea rcx, [rsp + 0x30]
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call fcn.1800090b0
cvttsd2si r8d, qword [0x1800b3910]
mov qword [rsp + 0x20], rax
mov edx, 0x3443d363
mov ecx, 0x13343daf
movaps xmm3, xmm9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
mov edx, 0x38dff251
cvtsi2sd xmm0, rax
mulsd xmm0, xmm7
addsd xmm0, xmm8
movsd qword [0x1800b3878], xmm0
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
xorps xmm0, xmm0
lea rdx, str.Abeu
movaps xmm8, xmm14
lea rcx, [rbp - 0x30]
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm8, xmm0
addsd xmm8, qword [0x180099ae0]
call fcn.18002f2d0
mov rdx, rax
mov ecx, 0x4681360
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
movaps xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si eax, qword [0x1800b3870]
mov edx, 0x3973a71f
mov r8d, 0x31b3b377
cvttsd2si ecx, qword [0x1800b3848]
mov dword [rsp + 0x20], eax
movsd xmm3, qword [0x1800b37e8]
movaps xmm1, xmm11
divsd xmm1, xmm0
mulsd xmm6, xmm1
subsd xmm8, xmm6
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cvttsd2si ecx, qword [0x1800b3870]
movaps xmm6, xmm12
movaps xmm1, xmm10
divsd xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movsd xmm0, qword [0x1800b3870]
xorps xmm7, xmm7
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
lea rdx, str.ekojiexbaoybod
lea rcx, [rbp - 0x70]
divsd xmm7, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
cvttsd2si rcx, qword [0x1800b3910]
mov edx, 0x185d3a4b
mov r8d, 0x1ceb5a78
divsd xmm7, xmm0
subsd xmm8, xmm7
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
xorps xmm0, xmm0
lea rdx, str.vyfeodaov
movaps xmm7, xmm13
lea rcx, [rsp + 0x70]
cvtsi2sd xmm0, rax
divsd xmm7, xmm0
call fcn.18000a440
mov r8, rax
mov edx, 0x1f3f66cf
mov r9d, 0x14a4207b
mov ecx, 0x1f69838b
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b37e8]
lea rdx, str.Iqeehen
lea rcx, [rsp + 0x50]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm7, xmm0
call fcn.1800090b0
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov ecx, 0x3d9aeb49
mov r9d, 0x12adf8dc
mov r8d, 0x243ffe26
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, xmm7
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
xorps xmm7, xmm7
lea rdx, str.hucynoafaireuw
lea rcx, [rsp + 0x30]
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call fcn.1800090b0
cvttsd2si r8d, qword [0x1800b3910]
mov qword [rsp + 0x20], rax
mov edx, 0x3443d363
mov ecx, 0x13343daf
movaps xmm3, xmm9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm7
addsd xmm0, xmm8
movsd qword [0x1800b3870], xmm0
mov edx, 0x38dff251
movsd xmm0, qword [0x1800b37e8]
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
xorps xmm0, xmm0
lea rdx, str.Abeu
lea rcx, [rbp - 0x30]
cvtsi2sd xmm0, rax
divsd xmm14, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
cvttsd2si rdx, qword [0x1800b3910]
lea rcx, [rbp - 0x50]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm14, xmm0
addsd xmm14, qword [0x180098b18]
call fcn.18002f2d0
mov rdx, rax
mov ecx, 0x4681360
call qword [sym.imp.ADVAPI32.dll_EnumDependentServicesW]
movaps xmm6, xmm0
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
cvttsd2si eax, qword [0x1800b3870]
mov edx, 0x3973a71f
mov r8d, 0x31b3b377
cvttsd2si ecx, qword [0x1800b3848]
mov dword [rsp + 0x20], eax
movsd xmm3, qword [0x1800b37e8]
divsd xmm11, xmm0
mulsd xmm6, xmm11
subsd xmm14, xmm6
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
cvttsd2si ecx, qword [0x1800b3870]
movaps xmm1, xmm10
divsd xmm12, xmm0
call qword [sym.imp.ADVAPI32.dll_IsTextUnicode]
movsd xmm0, qword [0x1800b3870]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, xmm12
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
lea rdx, str.ekojiexbaoybod
lea rcx, [rbp - 0x70]
divsd xmm6, xmm0
call fcn.1800090b0
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
cvttsd2si rcx, qword [0x1800b3910]
mov edx, 0x185d3a4b
mov r8d, 0x1ceb5a78
divsd xmm6, xmm0
subsd xmm14, xmm6
call qword [sym.imp.ADVAPI32.dll_InitializeSid]
xorps xmm0, xmm0
lea rdx, str.vyfeodaov
lea rcx, [rsp + 0x70]
cvtsi2sd xmm0, rax
divsd xmm13, xmm0
call fcn.18000a440
mov r8, rax
mov edx, 0x1f3f66cf
mov r9d, 0x14a4207b
mov ecx, 0x1f69838b
call qword [sym.imp.ADVAPI32.dll_InitializeAcl]
cvttsd2si rbx, qword [0x1800b37e8]
lea rdx, str.Iqeehen
lea rcx, [rsp + 0x50]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm13, xmm0
call fcn.1800090b0
mov rdx, rax
mov qword [rsp + 0x20], rbx
mov ecx, 0x3d9aeb49
mov r9d, 0x12adf8dc
mov r8d, 0x243ffe26
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
xorps xmm6, xmm6
cvtsi2sd xmm6, rax
mulsd xmm6, xmm13
call qword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
xorps xmm7, xmm7
lea rdx, str.hucynoafaireuw
lea rcx, [rsp + 0x30]
cvtsi2sd xmm7, rax
mulsd xmm7, xmm6
call fcn.1800090b0
cvttsd2si r8d, qword [0x1800b3910]
mov qword [rsp + 0x20], rax
mov edx, 0x3443d363
mov ecx, 0x13343daf
movaps xmm3, xmm9
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
movaps xmm13, xmmword [rsp + 0x100]
xorps xmm0, xmm0
movaps xmm12, xmmword [rsp + 0x110]
movaps xmm11, xmmword [rsp + 0x120]
movaps xmm10, xmmword [rsp + 0x130]
movaps xmm9, xmmword [rsp + 0x140]
movaps xmm8, xmmword [rsp + 0x150]
movaps xmm6, xmmword [rsp + 0x170]
mov rbx, qword [rsp + 0x190]
cvtsi2sd xmm0, rax
mulsd xmm0, xmm7
movaps xmm7, xmmword [rsp + 0x160]
addsd xmm0, xmm14
movaps xmm14, xmmword [rsp + 0xf0]
movsd qword [0x1800b37e8], xmm0
add rsp, 0x180
pop rbp
ret