Function at 0x100019a0
Capabilities:
Enumerate services
Get file size
Query service configuration
Read file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x634
mov eax, dword [0x10052010]
xor eax, esp
mov dword [esp + 0x630], eax
movsd xmm0, qword [0x10053568]
ucomisd xmm0, qword [0x1004ffd0]
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
mov dword [esp + 0x6c], eax
push esi
push edi
mov edi, 0x12446
lahf
test ah, 0x44
jp 0x10001edb
lea esp, [esp]
cmp edi, 0x12447
jge 0x10001edb
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push 0x1004f490
lea eax, [esp + 0x114]
push 0x40
push eax
call fcn.1001be78
mov dword [esi + 0x14], 0xf
add esp, 0x14
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [esp + 0x108], 0
jne 0x10001a46
xor ecx, ecx
jmp 0x10001a59
lea ecx, [esp + 0x108]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10001a50
sub ecx, edx
push ecx
lea eax, [esp + 0x10c]
mov ecx, esi
push eax
call fcn.10004d50
push 0x34149424
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 3
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x1004f4a4
mov word [ecx], ax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
cvttsd2si ecx, qword [0x10053588]
add esp, 0x2c
mov dword [esp + 0x68], eax
movsd xmm0, qword [0x1004fe08]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053560]
push ecx
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push str._I64d
lea eax, [esp + 0x1e0]
push 0x40
push eax
call fcn.1001bcd5
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
add esp, 0x14
mov word [esi], ax
cmp word [esp + 0x1d4], ax
jne 0x10001b01
xor ecx, ecx
jmp 0x10001b1f
lea ecx, [esp + 0x1d4]
lea edx, [ecx + 2]
jmp 0x10001b10
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10001b10
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x1d8]
mov ecx, esi
push eax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
movsd xmm0, qword [0x10053588]
sub esp, 8
mov esi, eax
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [0x1004fd68]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
push 0x17dacd33
movsd qword [esp + 0x5c], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053568]
push edx
push eax
push 0
push 0x14f7c177
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
add esp, 0x24
mov ecx, eax
call fcn.1001c83f
cvttsd2si eax, qword [0x10053560]
mulsd xmm0, qword [esp + 0x50]
push eax
movsd qword [esp + 0x54], xmm0
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
fdivr qword [esp + 0x54]
add esp, 4
movsd xmm0, qword [0x10053560]
fstp qword [esp + 0x50]
call fcn.1001c69f
push edx
push eax
push 0
push 0x38477ffb
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [esp + 0x50]
push 0x235f7930
push 0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0x1da41613
divsd xmm1, xmm0
movd xmm0, dword [esp + 0x6c]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
addsd xmm1, qword [0x1004fda8]
movsd qword [esp + 0x5c], xmm1
call ebx
movsd xmm1, qword [0x1004fe28]
add esp, 0xc
movd xmm0, esi
cvtdq2pd xmm0, xmm0
movd xmm2, eax
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
cvtdq2pd xmm2, xmm2
mulsd xmm2, qword [0x1004fcd0]
addsd xmm2, qword [esp + 0x50]
addsd xmm2, xmm1
movsd qword [0x10053568], xmm2
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push 0x1004f490
push 0x40
lea eax, [esp + 0x158]
push eax
call fcn.1001be78
mov dword [esi + 0x14], 0xf
add esp, 0x14
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [esp + 0x148], 0
jne 0x10001caa
xor ecx, ecx
jmp 0x10001cbd
lea ecx, [esp + 0x148]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10001cb4
sub ecx, edx
push ecx
lea eax, [esp + 0x14c]
mov ecx, esi
push eax
call fcn.10004d50
push 0x34149424
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 3
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x1004f4a4
mov word [ecx], ax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
cvttsd2si ecx, qword [0x10053588]
add esp, 0x2c
mov dword [esp + 0x68], eax
movsd xmm0, qword [0x1004fe08]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053560]
push ecx
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push str._I64d
lea eax, [esp + 0x2e0]
push 0x40
push eax
call fcn.1001bcd5
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
add esp, 0x14
mov word [esi], ax
cmp word [esp + 0x2d4], ax
jne 0x10001d65
xor ecx, ecx
jmp 0x10001d7f
lea ecx, [esp + 0x2d4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10001d70
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x2d8]
mov ecx, esi
push eax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
movsd xmm0, qword [0x10053588]
sub esp, 8
mov esi, eax
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_InitializeAcl]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [0x1004fd68]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
push 0x17dacd33
movsd qword [esp + 0x5c], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053568]
push edx
push eax
push 0
push 0x14f7c177
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
add esp, 0x24
mov ecx, eax
call fcn.1001c83f
cvttsd2si eax, qword [0x10053560]
mulsd xmm0, qword [esp + 0x50]
push eax
movsd qword [esp + 0x54], xmm0
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
fdivr qword [esp + 0x54]
add esp, 4
movsd xmm0, qword [0x10053560]
fstp qword [esp + 0x50]
call fcn.1001c69f
push edx
push eax
push 0
push 0x38477ffb
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [esp + 0x50]
push 0x235f7930
push 0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0x1da41613
divsd xmm1, xmm0
movd xmm0, dword [esp + 0x6c]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
addsd xmm1, qword [0x1004feb0]
movsd qword [esp + 0x5c], xmm1
call ebx
movsd xmm1, qword [0x1004fe28]
add esp, 0xc
movd xmm0, esi
inc edi
cvtdq2pd xmm0, xmm0
movd xmm2, eax
divsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
ucomisd xmm0, qword [0x1004ffd0]
cvtdq2pd xmm2, xmm2
lahf
mulsd xmm2, qword [0x1004fcd0]
addsd xmm2, qword [esp + 0x50]
addsd xmm2, xmm1
movsd qword [0x10053588], xmm2
test ah, 0x44
jnp 0x100019f0
xor eax, eax
push 0x206
push eax
mov word [esp + 0x438], ax
lea eax, [esp + 0x43a]
push eax
call fcn.1001cec0
add esp, 0xc
lea eax, [esp + 0x430]
push 0x104
push eax
mov eax, dword [0x1005354c]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov dword [esp + 0x8c], 7
mov dword [esp + 0x88], 0
mov word [esp + 0x78], ax
cmp word [esp + 0x430], ax
jne 0x10001f3f
xor ecx, ecx
jmp 0x10001f5f
lea ecx, [esp + 0x430]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10001f50
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x434]
push eax
lea ecx, [esp + 0x80]
call fcn.10005200
push 4
xor eax, eax
mov dword [esp + 0xd8], 7
push str..dat
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd8], 0
mov word [esp + 0xc8], ax
call fcn.10005200
cmp word [esp + 0x430], 0
jne 0x10001fb6
xor ecx, ecx
jmp 0x10001fcf
lea ecx, [esp + 0x430]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10001fc0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x434]
push eax
push ecx
lea ecx, [esp + 0xcc]
call fcn.10005fd0
mov esi, eax
mov dword [esp + 0xa4], 7
xor eax, eax
mov dword [esp + 0xa0], 0
mov word [esp + 0x90], ax
cmp dword [esi + 0x14], 8
jae 0x10002029
mov eax, dword [esi + 0x10]
inc eax
je 0x10002038
add eax, eax
push eax
lea eax, [esp + 0x94]
push esi
push eax
call fcn.1001b230
add esp, 0xc
jmp 0x10002038
mov eax, dword [esi]
mov dword [esp + 0x90], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [esp + 0xa0], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0xa4], eax
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
cmp dword [esp + 0xd4], 8
jb 0x10002078
push dword [esp + 0xc0]
call fcn.1001b0df
add esp, 4
movsd xmm0, qword [0x10053560]
ucomisd xmm0, qword [0x1004ffd8]
lahf
test ah, 0x44
jp 0x100024e6
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push str._I64d
lea eax, [esp + 0x3d4]
push 0x40
push eax
call fcn.1001bcd5
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
add esp, 0x14
mov word [esi], ax
cmp word [esp + 0x3c8], ax
jne 0x100020de
xor ecx, ecx
jmp 0x100020ff
lea ecx, [esp + 0x3c8]
lea edx, [ecx + 2]
jmp 0x100020f0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100020f0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x3cc]
mov ecx, esi
push eax
call fcn.10005200
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push str._I64d
lea eax, [esp + 0x26c]
push 0x40
push eax
call fcn.1001bcd5
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
add esp, 0x14
mov word [esi], ax
cmp word [esp + 0x260], ax
jne 0x1000215b
xor ecx, ecx
jmp 0x10002174
lea ecx, [esp + 0x260]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10002165
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x264]
mov ecx, esi
push eax
call fcn.10005200
movsd xmm0, qword [0x10053560]
sub esp, 0x10
unpcklpd xmm0, xmm0
movups xmmword [esp], xmm0
push 0
push 0x2c2034d2
call dword [sym.imp.OLEAUT32.dll_VarDateFromI1]
movsd xmm0, qword [0x10053560]
fstp qword [esp + 0x50]
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push str._I64d
lea eax, [esp + 0x354]
push 0x40
push eax
call fcn.1001bcd5
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
add esp, 0x14
mov word [esi], ax
cmp word [esp + 0x348], ax
jne 0x100021f4
xor ecx, ecx
jmp 0x1000220f
lea ecx, [esp + 0x348]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10002200
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [esp + 0x34c]
mov ecx, esi
push eax
call fcn.10005200
push 0x24971f0c
call dword [sym.imp.OLEAUT32.dll_VarR8FromI1]
sub esp, 0x18
mov ecx, esp
fstp qword [esp + 0x70]
push 3
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x1004f4b8
mov byte [ecx], 0
call fcn.10004d50
cvttsd2si eax, qword [0x10053588]
sub esp, 8
movsd xmm0, qword [0x1004fd30]
movsd qword [esp], xmm0
push eax
push 0x30f94eb9
call dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
movsd xmm0, qword [0x10053568]
push 0
push 0x23063dda
sub esp, 8
fstp qword [esp + 0x70]
movsd qword [esp], xmm0
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push 0x1004f490
lea eax, [esp + 0x1a4]
push 0x40
push eax
call fcn.1001be78
mov dword [esi + 0x14], 0xf
add esp, 0x14
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [esp + 0x198], 0
jne 0x100022d1
xor ecx, ecx
jmp 0x100022e9
lea ecx, [esp + 0x198]
lea edx, [ecx + 1]
jmp 0x100022e0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100022e0
sub ecx, edx
push ecx
lea eax, [esp + 0x19c]
mov ecx, esi
push eax
call fcn.10004d50
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 6
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push 0x1004f4bc
mov word [ecx], ax
call fcn.10005200
sub esp, 0x18
mov ecx, esp
push 4
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.Uyuw
mov byte [ecx], 0
call fcn.10004d50
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
movsd xmm0, qword [0x1004fe98]
push 0x16ecb5c
sub esp, 0x20
mov ecx, esp
fstp qword [esp + 0x8c]
movsd qword [esp + 0x18], xmm0
push 0xd
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push str.aebjueyvaumyy
mov byte [ecx], 0
call fcn.10004d50
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xc
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push str.Adyhyosolerb
mov word [ecx], ax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
movsd xmm0, qword [0x1004fe78]
sub esp, 0x20
mov ecx, esp
mov edi, eax
xor eax, eax
mov esi, edx
movsd qword [esp + 0x18], xmm0
push 0xb
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push str.iqacyjyujef
mov word [ecx], ax
call fcn.10005200
call dword [sym.imp.OLEAUT32.dll_SafeArrayUnlock]
movsd xmm0, qword [0x1004fd60]
fstp qword [esp + 0x48]
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
movsd xmm1, qword [0x1004ff68]
divsd xmm1, qword [esp + 0x50]
push 0x21fb1aac
push 0
push 0x187603c8
cvttsd2si eax, qword [0x10053588]
divsd xmm1, qword [esp + 0x64]
push eax
mulsd xmm0, xmm1
movsd xmm1, qword [0x1004fd28]
divsd xmm1, qword [esp + 0x70]
addsd xmm0, qword [0x1004fef8]
subsd xmm0, xmm1
movsd qword [esp + 0x60], xmm0
call dword [sym.imp.OLEAUT32.dll_VarCyFromI1]
add esp, 0x10
mov ecx, eax
call fcn.1001c83f
movsd qword [esp + 0x60], xmm0
movsd xmm0, qword [0x1004fd88]
mov edx, esi
divsd xmm0, qword [esp + 0x68]
mov ecx, edi
movsd qword [esp + 0x58], xmm0
call fcn.1001c83f
movsd xmm1, qword [esp + 0x58]
divsd xmm1, xmm0
movsd xmm0, qword [esp + 0x60]
mulsd xmm0, xmm1
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053560]
movsd xmm1, qword [0x10053568]
movapd xmm2, xmm0
push edx
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayCreate]
mulsd xmm0, qword [0x1004fed8]
movsd xmm1, qword [esp + 0x50]
divsd xmm0, qword [esp + 0x48]
subsd xmm1, xmm0
movsd qword [0x10053588], xmm1
sub esp, 8
mov dword [esp + 0x68], 0x5c
lea eax, [esp + 0x68]
lea ecx, [esp + 0x80]
push eax
call fcn.10004b20
cmp eax, 0xffffffff
je 0x1000259f
inc eax
mov dword [esp + 0xbc], 7
xor ecx, ecx
mov dword [esp + 0xb8], 0
push eax
push ecx
lea eax, [esp + 0x80]
mov word [esp + 0xb0], cx
push eax
lea ecx, [esp + 0xb4]
call fcn.100050e0
cmp dword [esp + 0x8c], 8
jb 0x10002558
push dword [esp + 0x78]
call fcn.1001b0df
add esp, 4
xor eax, eax
mov dword [esp + 0x8c], 7
mov word [esp + 0x78], ax
lea ecx, [esp + 0x78]
lea eax, [esp + 0xa8]
mov dword [esp + 0x88], 0
push eax
call fcn.100049f0
cmp dword [esp + 0xbc], 8
jb 0x1000259f
push dword [esp + 0xa8]
call fcn.1001b0df
add esp, 4
push ecx
lea edx, [esp + 0x7c]
lea ecx, [esp + 0xdc]
call fcn.10005c30
mov esi, eax
add esp, 4
cmp esi, 0x10053204
je 0x10002643
cmp dword [0x10053218], 8
jb 0x100025d8
push dword [0x10053204]
call fcn.1001b0df
add esp, 4
xor eax, eax
mov dword [0x10053218], 7
mov dword [0x10053214], 0
mov word [0x10053204], ax
cmp dword [esi + 0x14], 8
jae 0x10002613
mov eax, dword [esi + 0x10]
inc eax
je 0x10002620
add eax, eax
push eax
push esi
push 0x10053204
call fcn.1001b230
add esp, 0xc
jmp 0x10002620
mov eax, dword [esi]
mov dword [0x10053204], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [0x10053214], eax
mov eax, dword [esi + 0x14]
mov dword [0x10053218], eax
xor eax, eax
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov word [esi], ax
cmp dword [esp + 0xec], 8
jb 0x1000265c
push dword [esp + 0xd8]
call fcn.1001b0df
add esp, 4
xor edi, edi
mov edi, edi
movsd xmm0, qword [0x10053560]
mov esi, 0x8ffb2
ucomisd xmm0, qword [0x1004ff98]
lahf
test ah, 0x44
jp 0x100026ff
movsd xmm1, qword [0x10053588]
cmp esi, 0x8ffb3
jge 0x100026ff
movaps xmm0, xmm1
call fcn.1001c69f
push edx
push eax
push edx
push eax
call ebx
movsd xmm1, qword [0x1004fe00]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
addsd xmm1, qword [0x1004fe50]
movsd qword [0x10053568], xmm1
call fcn.1001c69f
push edx
push eax
push edx
push eax
call ebx
movsd xmm1, qword [0x1004fe00]
inc esi
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
ucomisd xmm0, qword [0x1004ff98]
addsd xmm1, qword [0x1004fd78]
lahf
movsd qword [0x10053588], xmm1
test ah, 0x44
jnp 0x10002687
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
call fcn.10004680
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esp + 0x60], eax
cmp eax, 0xffffffff
jne 0x10002745
test edi, edi
jne 0x10004433
lea eax, [esp + 0x90]
push eax
call fcn.10004650
mov edi, 1
jmp 0x10002660
movsd xmm0, qword [0x10053588]
ucomisd xmm0, qword [0x1004ffb8]
lahf
test ah, 0x44
jp 0x10002d91
call dword [sym.imp.OLEAUT32.dll_VarBoolFromI4]
fmul qword [0x1004ff70]
movsd xmm0, qword [0x10053568]
push 0x346fcb88
sub esp, 0x18
mov esi, esp
fstp qword [esp + 0x64]
push ecx
call fcn.1001c69f
push edx
push eax
push esi
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 8
mov edi, dword [sym.imp.OLEAUT32.dll_VarFormat]
movsd qword [esp], xmm0
call edi
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
sub esp, 0x20
divsd xmm1, xmm0
mov ecx, esp
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x18], xmm0
push 0x1004f54c
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
push 0x17f72296
sub esp, 0x18
mov ecx, esp
push str.yjocayuya
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.ajpeqi
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarR8FromI1]
fdivr qword [esp + 0x48]
movsd xmm0, qword [0x10053588]
fstp qword [esp + 0x48]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArrayCreate]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x68], xmm0
movsd xmm0, qword [0x1004fdb0]
movsd qword [esp + 0x18], xmm0
push str.ecexutrey
call fcn.10004510
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
push edx
push eax
call edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x58], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
fdivr qword [0x1004ff18]
sub esp, 0x18
mov ecx, esp
push str.Tymoibiew
fstp qword [esp + 0x64]
call fcn.10004460
movsd xmm1, qword [0x10053568]
mov ecx, 0x18f43177
movsd xmm0, qword [0x1004fe10]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movsd xmm2, qword [esp + 0x48]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
push 0x1ae5c254
divsd xmm2, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm2
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArraySetIID]
movsd xmm0, qword [esp + 0x50]
sub esp, 0x10
fstp qword [esp + 0x58]
divsd xmm0, qword [esp + 0x58]
addsd xmm0, qword [0x1004fd10]
addsd xmm0, qword [esp + 0x68]
movsd qword [esp + 0x60], xmm0
movsd xmm0, qword [0x10053568]
unpcklpd xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
fmul qword [0x1004fcf8]
add esp, 0x10
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
fstp qword [esp + 0x48]
call ebx
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd xmm2, qword [esp + 0x50]
subsd xmm2, xmm1
movsd qword [0x10053560], xmm2
call dword [sym.imp.OLEAUT32.dll_VarBoolFromI4]
fmul qword [0x1004ff70]
movsd xmm0, qword [0x10053568]
push 0x346fcb88
sub esp, 0x18
mov esi, esp
fstp qword [esp + 0x64]
push ecx
call fcn.1001c69f
push edx
push eax
push esi
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 8
movsd qword [esp], xmm0
call edi
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
sub esp, 0x20
divsd xmm1, xmm0
mov ecx, esp
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x18], xmm0
push 0x1004f54c
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
push 0x17f72296
sub esp, 0x18
mov ecx, esp
push str.yjocayuya
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.ajpeqi
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarR8FromI1]
fdivr qword [esp + 0x48]
movsd xmm0, qword [0x10053588]
fstp qword [esp + 0x48]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArrayCreate]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x68], xmm0
movsd xmm0, qword [0x1004fdb0]
movsd qword [esp + 0x18], xmm0
push str.ecexutrey
call fcn.10004510
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
push edx
push eax
call edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x58], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
fdivr qword [0x1004ff18]
sub esp, 0x18
mov ecx, esp
push str.Tymoibiew
fstp qword [esp + 0x64]
call fcn.10004460
movsd xmm1, qword [0x10053568]
mov ecx, 0x18f43177
movsd xmm0, qword [0x1004fe10]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movsd xmm2, qword [esp + 0x48]
push 0
push 0x1ae5c254
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm2, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm2
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArraySetIID]
movsd xmm0, qword [esp + 0x50]
sub esp, 0x10
fstp qword [esp + 0x58]
divsd xmm0, qword [esp + 0x58]
addsd xmm0, qword [0x1004fe58]
addsd xmm0, qword [esp + 0x68]
movsd qword [esp + 0x60], xmm0
movsd xmm0, qword [0x10053568]
unpcklpd xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
fmul qword [0x1004fcf8]
add esp, 0x10
fstp qword [esp + 0x48]
call ebx
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd xmm2, qword [esp + 0x50]
subsd xmm2, xmm1
movsd qword [0x10053560], xmm2
call dword [sym.imp.OLEAUT32.dll_VarBoolFromI4]
fmul qword [0x1004ff70]
fstp qword [esp + 0x48]
movsd xmm0, qword [0x10053568]
push 0x346fcb88
sub esp, 0x18
mov esi, esp
push ecx
call fcn.1001c69f
push edx
push eax
push esi
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 8
movsd qword [esp], xmm0
call edi
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
sub esp, 0x20
divsd xmm1, xmm0
mov ecx, esp
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x18], xmm0
push 0x1004f54c
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
push 0x17f72296
sub esp, 0x18
mov ecx, esp
push str.yjocayuya
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.ajpeqi
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarR8FromI1]
fdivr qword [esp + 0x48]
movsd xmm0, qword [0x10053588]
fstp qword [esp + 0x48]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArrayCreate]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x68], xmm0
movsd xmm0, qword [0x1004fdb0]
movsd qword [esp + 0x18], xmm0
push str.ecexutrey
call fcn.10004510
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
push edx
push eax
call edi
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x58], xmm0
call dword [sym.imp.OLEAUT32.dll_SafeArrayPtrOfIndex]
fdivr qword [0x1004ff18]
sub esp, 0x18
mov ecx, esp
push str.Tymoibiew
fstp qword [esp + 0x64]
call fcn.10004460
movsd xmm1, qword [0x10053568]
mov ecx, 0x18f43177
movsd xmm0, qword [0x1004fe10]
call dword [sym.imp.OLEAUT32.dll_VariantClear]
movsd xmm2, qword [esp + 0x48]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm2, xmm0
movsd xmm0, qword [0x10053568]
push 0
push 0x1ae5c254
movsd qword [esp + 0x58], xmm2
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_SafeArraySetIID]
movsd xmm0, qword [esp + 0x50]
sub esp, 0x10
fstp qword [esp + 0x58]
divsd xmm0, qword [esp + 0x58]
addsd xmm0, qword [0x1004fcd8]
addsd xmm0, qword [esp + 0x68]
movsd qword [esp + 0x60], xmm0
movsd xmm0, qword [0x10053568]
unpcklpd xmm0, xmm0
movups xmmword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
fmul qword [0x1004fcf8]
add esp, 0x10
fstp qword [esp + 0x48]
call ebx
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd xmm2, qword [esp + 0x50]
movsd xmm0, qword [0x10053588]
subsd xmm2, xmm1
movsd qword [0x10053568], xmm2
ucomisd xmm0, qword [0x1004ffa0]
mov edi, dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
lahf
test ah, 0x44
jp 0x10003979
movsd xmm0, qword [0x10053560]
sub esp, 8
movsd qword [esp], xmm0
call fcn.1001c69f
movsd xmm1, qword [0x10053560]
movsd xmm0, qword [0x10053588]
push edx
push eax
sub esp, 8
movsd qword [esp], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x10053588]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
call fcn.1001c69f
movsd xmm0, qword [0x1004ff30]
mov ecx, 0x1ba31837
push edx
push eax
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.Ekoareyhhai
mulsd xmm0, qword [0x1004fdf0]
mulsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
movsd xmm0, qword [0x10053588]
push 0
push 0x388ca797
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 4
mov ebx, dword [sym.imp.OLEAUT32.dll_VarR4FromI1]
movsd qword [esp], xmm0
call ebx
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [0x1004ff80]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053588]
push edx
push eax
call fcn.1001c69f
movsd xmm0, qword [0x10053560]
push edx
push eax
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm1, qword [0x1004fee0]
add esp, 0xc
movsd xmm0, qword [0x10053560]
call edi
movsd xmm1, qword [0x1004fed0]
divsd xmm1, xmm0
mov esi, dword [sym.imp.OLEAUT32.dll_VarUI1FromI4]
push 0
push 0x3bf617fc
movsd qword [esp + 0x50], xmm1
call esi
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053560]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
mov ecx, 0x20178e6d
call dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
movsd xmm0, qword [0x1004fd20]
sub esp, 8
fstp qword [esp + 0x58]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
push 0
push 0x35eed5e8
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
cvttsd2si eax, qword [0x10053588]
add esp, 4
mov edi, dword [sym.imp.OLEAUT32.dll_VarDateFromI4]
movsd xmm0, qword [0x1004fdb8]
movsd qword [esp], xmm0
push eax
call edi
add esp, 0x34
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
push 0x2051a052
mulsd xmm0, qword [0x1004fe80]
movsd qword [esp + 0x50], xmm0
fld qword [esp + 0x50]
fmul qword [esp + 0x58]
fsubr qword [esp + 0x60]
fstp qword [esp + 0x50]
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
fdivr qword [0x1004ff00]
add esp, 8
fsubr qword [esp + 0x48]
fstp qword [esp + 0x50]
movsd xmm0, qword [0x10053568]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0
push 0x1cb6c893
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fe70]
movsd qword [esp + 0x48], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 8
movsd xmm1, qword [esp + 0x58]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
movsd qword [esp], xmm0
movsd qword [esp + 0x50], xmm1
movsd qword [0x10053588], xmm1
call fcn.1001c69f
movsd xmm1, qword [0x10053560]
movsd xmm0, qword [esp + 0x50]
push edx
push eax
sub esp, 8
movsd qword [esp], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x10053588]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
call fcn.1001c69f
movsd xmm0, qword [0x1004ff30]
mov ecx, 0x1ba31837
push edx
push eax
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.Ekoareyhhai
mulsd xmm0, qword [0x1004fdf0]
mulsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
movsd xmm0, qword [0x10053588]
push 0
push 0x388ca797
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 4
movsd qword [esp], xmm0
call ebx
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [0x1004fe18]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053588]
push edx
push eax
call fcn.1001c69f
movsd xmm0, qword [0x10053560]
push edx
push eax
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm1, qword [0x1004fee0]
add esp, 0xc
movsd xmm0, qword [0x10053560]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
movsd xmm1, qword [0x1004fed0]
divsd xmm1, xmm0
push 0
push 0x3bf617fc
movsd qword [esp + 0x50], xmm1
call esi
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053560]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
mov ecx, 0x20178e6d
call dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
movsd xmm0, qword [0x1004fd20]
sub esp, 8
fstp qword [esp + 0x58]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
push 0
push 0x35eed5e8
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 4
cvttsd2si eax, qword [0x10053588]
movsd xmm0, qword [0x1004fdb8]
movsd qword [esp], xmm0
push eax
call edi
add esp, 0x34
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
push 0x2051a052
mulsd xmm0, qword [0x1004fe80]
movsd qword [esp + 0x50], xmm0
fld qword [esp + 0x50]
fmul qword [esp + 0x58]
fsubr qword [esp + 0x60]
fstp qword [esp + 0x50]
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
fdivr qword [0x1004ff00]
add esp, 8
movsd xmm0, qword [0x10053568]
fsubr qword [esp + 0x48]
fstp qword [esp + 0x50]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0
push 0x1cb6c893
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fe70]
movsd qword [esp + 0x48], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 8
movsd xmm1, qword [esp + 0x58]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
movsd qword [esp], xmm0
movsd qword [esp + 0x50], xmm1
movsd qword [0x10053588], xmm1
call fcn.1001c69f
movsd xmm1, qword [0x10053560]
movsd xmm0, qword [esp + 0x50]
push edx
push eax
sub esp, 8
movsd qword [esp], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x10053588]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
call fcn.1001c69f
push edx
movsd xmm0, qword [0x1004ff30]
mov ecx, 0x1ba31837
push eax
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.Ekoareyhhai
mulsd xmm0, qword [0x1004fdf0]
mulsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
movsd xmm0, qword [0x10053588]
push 0
push 0x388ca797
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 4
movsd qword [esp], xmm0
call ebx
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [0x1004fce0]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053588]
push edx
push eax
call fcn.1001c69f
movsd xmm0, qword [0x10053560]
push edx
push eax
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm1, qword [0x1004fee0]
add esp, 0xc
movsd xmm0, qword [0x10053560]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
movsd xmm1, qword [0x1004fed0]
divsd xmm1, xmm0
push 0
push 0x3bf617fc
movsd qword [esp + 0x50], xmm1
call esi
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053560]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
mov ecx, 0x20178e6d
call dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
movsd xmm0, qword [0x1004fd20]
sub esp, 8
fstp qword [esp + 0x58]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
push 0
push 0x35eed5e8
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
cvttsd2si eax, qword [0x10053588]
add esp, 4
movsd xmm0, qword [0x1004fdb8]
movsd qword [esp], xmm0
push eax
call edi
add esp, 0x34
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
push 0x2051a052
mulsd xmm0, qword [0x1004fe80]
movsd qword [esp + 0x50], xmm0
fld qword [esp + 0x50]
fmul qword [esp + 0x58]
fsubr qword [esp + 0x60]
fstp qword [esp + 0x50]
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
fdivr qword [0x1004ff00]
add esp, 8
movsd xmm0, qword [0x10053568]
fsubr qword [esp + 0x48]
fstp qword [esp + 0x50]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0
push 0x1cb6c893
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fe70]
movsd qword [esp + 0x48], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
sub esp, 8
movsd xmm1, qword [esp + 0x58]
subsd xmm1, xmm0
movapd xmm0, xmm1
movsd qword [esp + 0x50], xmm1
movsd qword [0x10053560], xmm1
movsd qword [esp], xmm1
call fcn.1001c69f
movsd xmm0, qword [esp + 0x50]
push edx
push eax
sub esp, 8
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053588]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x10053588]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigA]
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp], xmm0
call fcn.1001c69f
movsd xmm0, qword [0x1004ff30]
mov ecx, 0x1ba31837
push edx
push eax
sub esp, 8
movsd qword [esp], xmm0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.Ekoareyhhai
mulsd xmm0, qword [0x1004fdf0]
mulsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
movsd xmm0, qword [0x10053588]
push 0
push 0x388ca797
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053588]
add esp, 4
movsd qword [esp], xmm0
call ebx
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [0x1004fde8]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
movsd xmm0, qword [0x10053588]
push edx
push eax
call fcn.1001c69f
movsd xmm0, qword [0x10053560]
push edx
push eax
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm1, qword [0x1004fee0]
add esp, 0xc
movsd xmm0, qword [0x10053560]
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
movsd xmm1, qword [0x1004fed0]
divsd xmm1, xmm0
push 0
push 0x3bf617fc
movsd qword [esp + 0x50], xmm1
call esi
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053560]
add esp, 0xc
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push esi
call fcn.10001900
add esp, 0xc
mov ecx, 0x20178e6d
call dword [sym.imp.OLEAUT32.dll_VarCyFromR4]
movsd xmm0, qword [0x1004fd20]
sub esp, 8
fstp qword [esp + 0x58]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
push 0
push 0x35eed5e8
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
cvttsd2si eax, qword [0x10053588]
add esp, 4
movsd xmm0, qword [0x1004fdb8]
movsd qword [esp], xmm0
push eax
call edi
add esp, 0x34
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
push 0x2051a052
mulsd xmm0, qword [0x1004fe80]
movsd qword [esp + 0x50], xmm0
fld qword [esp + 0x50]
fmul qword [esp + 0x58]
fsubr qword [esp + 0x60]
fstp qword [esp + 0x50]
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
fdivr qword [0x1004ff00]
add esp, 8
movsd xmm0, qword [0x10053568]
fsubr qword [esp + 0x48]
fstp qword [esp + 0x50]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0
push 0x1cb6c893
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fe70]
movsd qword [esp + 0x48], xmm0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [esp + 0x48]
mov edi, dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
movsd xmm1, qword [esp + 0x50]
subsd xmm1, xmm0
movsd qword [0x10053588], xmm1
mov ebx, dword [esp + 0x60]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov dword [esp + 0x58], esi
test esi, esi
je 0x1000442c
movsd xmm0, qword [0x10053560]
mov ecx, 0xed249
ucomisd xmm0, qword [0x1004ff90]
mov dword [esp + 0x68], ecx
lahf
test ah, 0x44
jp 0x10004407
jmp 0x100039c0
cmp ecx, 0xed24a
jge 0x100043ff
push 0
push 0x3e955458
mov ecx, 0x24ef23fb
call dword [sym.imp.OLEAUT32.dll_VarUI1FromStr]
fmul qword [0x1004fd18]
sub esp, 0x18
mov ecx, esp
push str.puexuyfipu
fstp qword [esp + 0x64]
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Hivaclimazomif
call fcn.10004460
cvttsd2si ecx, qword [0x10053588]
movsd xmm1, qword [0x10053568]
movsd xmm0, qword [0x1004fdd8]
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd qword [esp + 0x50], xmm1
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0x2a211028
push 0
push 0xdd03b6d
push 0xd418053
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
movsd xmm1, qword [esp + 0x80]
add esp, 0x30
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x1004fe88]
subsd xmm0, xmm1
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053568]
add esp, 0xc
call fcn.1001c69f
push edx
cvttsd2si edx, qword [0x10053568]
push eax
mov ecx, 0x3bc0f04b
call edi
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.vudteqfetwiy
mulsd xmm0, qword [0x1004ff20]
movsd qword [esp + 0x64], xmm0
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x48]
push 0
push 0x1dfa0ba
movsd qword [esp + 0x50], xmm0
call dword [sym.imp.OLEAUT32.dll_BstrFromVector]
movsd xmm1, qword [esp + 0x48]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x48], xmm1
call fcn.1001c69f
movaps xmm0, xmmword [0x1004fff0]
push edx
push eax
sub esp, 0x28
mov ecx, esp
movups xmmword [esp + 0x18], xmm0
push str.yqusyqpy
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Cayhsuru
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
fdivr qword [esp + 0x90]
add esp, 0x48
mov ecx, 0x1ffdc18f
fsubr qword [esp + 0x50]
fstp qword [esp + 0x48]
call dword [sym.imp.OLEAUT32.dll_VarUI1FromBool]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [0x1004feb8]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.Fybriu
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm1, qword [0x1004fce8]
movsd xmm0, qword [0x1004fda0]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
push edx
push eax
sub esp, 0x18
mov ecx, esp
push str.afyjecooonuce
call fcn.10004510
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.aniuwoy
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x1004fec8]
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_VarFormatDateTime]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
cvttsd2si ebx, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
cvttsd2si edi, xmm0
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push esi
call fcn.10001900
add esp, 0xc
mov edx, edi
mov ecx, ebx
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.sufeiwseyf
mulsd xmm0, qword [esp + 0x6c]
addsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
sub esp, 0x18
mov ecx, esp
push str.ecpemeetifuqya
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fd50]
mov ecx, 0x24ef23fb
push 0
push 0x3e955458
addsd xmm0, qword [esp + 0x50]
movsd qword [0x10053560], xmm0
call dword [sym.imp.OLEAUT32.dll_VarUI1FromStr]
fmul qword [0x1004fd18]
sub esp, 0x18
mov ecx, esp
push str.puexuyfipu
fstp qword [esp + 0x64]
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Hivaclimazomif
call fcn.10004460
cvttsd2si ecx, qword [0x10053588]
movsd xmm1, qword [0x10053568]
movsd xmm0, qword [0x1004fdd8]
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd qword [esp + 0x50], xmm1
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0x2a211028
push 0
push 0xdd03b6d
push 0xd418053
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
movsd xmm1, qword [esp + 0x80]
add esp, 0x30
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x1004fea0]
subsd xmm0, xmm1
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053568]
add esp, 0xc
call fcn.1001c69f
push edx
cvttsd2si edx, qword [0x10053568]
push eax
mov ecx, 0x3bc0f04b
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.vudteqfetwiy
mulsd xmm0, qword [0x1004ff20]
movsd qword [esp + 0x64], xmm0
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
push 0
push 0x1dfa0ba
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x50]
movsd qword [esp + 0x50], xmm0
call dword [sym.imp.OLEAUT32.dll_BstrFromVector]
movsd xmm1, qword [esp + 0x48]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x48], xmm1
call fcn.1001c69f
movaps xmm0, xmmword [0x1004fff0]
push edx
push eax
sub esp, 0x28
mov ecx, esp
movups xmmword [esp + 0x18], xmm0
push str.yqusyqpy
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Cayhsuru
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
fdivr qword [esp + 0x90]
add esp, 0x48
mov ecx, 0x1ffdc18f
fsubr qword [esp + 0x50]
fstp qword [esp + 0x48]
call dword [sym.imp.OLEAUT32.dll_VarUI1FromBool]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [0x1004feb8]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.Fybriu
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm1, qword [0x1004fce8]
movsd xmm0, qword [0x1004fda0]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
push edx
push eax
sub esp, 0x18
mov ecx, esp
push str.afyjecooonuce
call fcn.10004510
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.aniuwoy
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x1004fec8]
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_VarFormatDateTime]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
cvttsd2si ebx, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
cvttsd2si edi, xmm0
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push esi
call fcn.10001900
add esp, 0xc
mov edx, edi
mov ecx, ebx
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.sufeiwseyf
mulsd xmm0, qword [esp + 0x6c]
addsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
sub esp, 0x18
mov ecx, esp
push str.ecpemeetifuqya
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fd50]
mov ecx, 0x24ef23fb
push 0
push 0x3e955458
addsd xmm0, qword [esp + 0x50]
movsd qword [0x10053568], xmm0
call dword [sym.imp.OLEAUT32.dll_VarUI1FromStr]
fmul qword [0x1004fd18]
sub esp, 0x18
mov ecx, esp
push str.puexuyfipu
fstp qword [esp + 0x64]
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Hivaclimazomif
call fcn.10004460
cvttsd2si ecx, qword [0x10053588]
movsd xmm1, qword [0x10053568]
movsd xmm0, qword [0x1004fdd8]
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x48]
divsd xmm1, xmm0
movsd qword [esp + 0x50], xmm1
call dword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 8
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10053568]
movsd qword [esp + 0x58], xmm1
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
add esp, 0xc
push 0x2a211028
push 0
push 0xdd03b6d
push 0xd418053
call dword [sym.imp.OLEAUT32.dll_VarI4FromUI4]
movsd xmm1, qword [esp + 0x80]
add esp, 0x30
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x1004ff88]
subsd xmm0, xmm1
movsd qword [esp + 0x50], xmm0
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001880
movsd xmm0, qword [0x10053568]
add esp, 0xc
call fcn.1001c69f
push edx
cvttsd2si edx, qword [0x10053568]
push eax
mov ecx, 0x3bc0f04b
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.vudteqfetwiy
mulsd xmm0, qword [0x1004ff20]
movsd qword [esp + 0x64], xmm0
call fcn.10004460
call dword [sym.imp.OLEAUT32.dll_VarUI1FromUI2]
push 0
push 0x1dfa0ba
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [esp + 0x50]
movsd qword [esp + 0x50], xmm0
call dword [sym.imp.OLEAUT32.dll_BstrFromVector]
movsd xmm1, qword [esp + 0x48]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x48], xmm1
call fcn.1001c69f
movaps xmm0, xmmword [0x1004fff0]
push edx
push eax
sub esp, 0x28
mov ecx, esp
movups xmmword [esp + 0x18], xmm0
push str.yqusyqpy
call fcn.10004460
sub esp, 0x18
mov ecx, esp
push str.Cayhsuru
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
fdivr qword [esp + 0x90]
add esp, 0x48
mov ecx, 0x1ffdc18f
fsubr qword [esp + 0x50]
fstp qword [esp + 0x48]
call dword [sym.imp.OLEAUT32.dll_VarUI1FromBool]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [0x1004feb8]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.Fybriu
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm1, qword [0x1004fce8]
movsd xmm0, qword [0x1004fda0]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
call fcn.1001c69f
push edx
push eax
sub esp, 0x18
mov ecx, esp
push str.afyjecooonuce
call fcn.10004510
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
mov ecx, eax
call fcn.1001c83f
movsd xmm1, qword [esp + 0x50]
sub esp, 0x18
divsd xmm1, xmm0
mov ecx, esp
push str.aniuwoy
movsd qword [esp + 0x6c], xmm1
call fcn.10004510
movsd xmm0, qword [0x10053560]
call fcn.1001c69f
sub esp, 0x18
mov ecx, esp
push edx
push eax
push ecx
call fcn.10001900
movsd xmm0, qword [0x1004fec8]
add esp, 0xc
call dword [sym.imp.OLEAUT32.dll_VarFormatDateTime]
movsd xmm1, qword [esp + 0x50]
divsd xmm1, xmm0
movsd xmm0, qword [0x10053560]
cvttsd2si ebx, qword [0x10053588]
movsd qword [esp + 0x50], xmm1
cvttsd2si edi, xmm0
call fcn.1001c69f
sub esp, 0x18
mov esi, esp
push edx
push eax
push esi
call fcn.10001900
add esp, 0xc
mov edx, edi
mov ecx, ebx
call dword [sym.imp.OLEAUT32.dll_VarDecSub]
sub esp, 0x18
mov ecx, esp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.sufeiwseyf
mulsd xmm0, qword [esp + 0x6c]
addsd xmm0, qword [esp + 0x64]
movsd qword [esp + 0x64], xmm0
call fcn.10004510
sub esp, 0x18
mov ecx, esp
push str.ecpemeetifuqya
call fcn.10004460
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov ecx, eax
call fcn.1001c83f
mulsd xmm0, qword [0x1004fd50]
mov ecx, dword [esp + 0x68]
mov edi, dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
inc ecx
mov dword [esp + 0x68], ecx
addsd xmm0, qword [esp + 0x48]
movsd qword [0x10053568], xmm0
movsd xmm0, qword [0x10053560]
ucomisd xmm0, qword [0x1004ff90]
lahf
test ah, 0x44
jnp 0x100039c0
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x58]
mov edi, dword [esp + 0x74]
mov ecx, edi
push esi
call fcn.100046f0
push 0
lea eax, [esp + 0x74]
mov dword [esp + 0x74], 0
push eax
push esi
push dword [edi]
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x90]
call fcn.10004620
lea ecx, [esp + 0x78]
call fcn.10004620
mov ecx, dword [esp + 0x63c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1001be94
mov esp, ebp
pop ebp
ret