Function at 0x10012330
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
movsd xmm0, qword [0x1002aa38]
sub esp, 0x28
ucomisd xmm0, qword [0x10022b68]
push ebx
push esi
push edi
lahf
test ah, 0x44
jp 0x10012d82
movsd xmm0, qword [0x1002aa78]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x18], xmm0
push 0xe
push str.ewikibapewyosa
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
sub esp, 0x18
mov ecx, esp
push 6
push str.Zoezeu
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
push 0
push 0x13c03661
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x3326f8ea
sub esp, 0x18
mov ecx, esp
fstp qword [ebp - 0x18]
push 0xc
push str.upeariqojyie
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa70]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x18], xmm0
push 0xd
push str.iwyykyyjawuyg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
push 0
push 0x2541d74d
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
sub esp, 0x18
mov ebx, eax
mov ecx, esp
mov edi, edx
push 0xa
push str.feeriicaka
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa38]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm1, qword [0x10022ab8]
add esp, 0xc
movsd xmm0, qword [0x1002aa60]
push 0
push 0x31e1020a
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd qword [ebp - 8], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ecx, eax
call fcn.10014f20
mov edx, edi
movsd qword [ebp - 0x10], xmm0
mov ecx, ebx
call fcn.10014f20
mulsd xmm0, qword [0x100228a0]
movsd xmm1, qword [ebp - 0x10]
mulsd xmm0, qword [ebp - 8]
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa30]
movsd qword [ebp - 0x10], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa38]
push edx
push eax
sub esp, 0x20
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
fstp qword [ebp - 8]
call sub.IMM32.dll_ImmRegisterWordA
fdivr qword [0x10022a18]
fdiv qword [ebp - 0x18]
fdiv qword [ebp - 8]
fstp qword [ebp - 0x28]
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
movsd xmm0, qword [0x10022968]
movsd qword [esp], xmm0
movsd xmm0, qword [0x1002aa78]
call fcn.10014e70
movsd xmm0, qword [0x1002aa50]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
add esp, 4
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm0, qword [0x10022a50]
add esp, 0x10
fstp qword [ebp - 0x18]
divsd xmm0, qword [ebp - 0x18]
mov ecx, esp
movsd xmm1, qword [0x100227d0]
mulsd xmm0, qword [ebp - 0x20]
subsd xmm1, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [esp + 0x18], xmm0
push 0xe
push str.ewikibapewyosa
subsd xmm1, qword [ebp - 0x28]
addsd xmm1, qword [ebp - 0x10]
movsd qword [0x1002aa38], xmm1
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
sub esp, 0x18
mov ecx, esp
push 6
push str.Zoezeu
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
push 0
push 0x13c03661
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x3326f8ea
sub esp, 0x18
mov ecx, esp
fstp qword [ebp - 0x20]
push 0xc
push str.upeariqojyie
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa70]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x18], xmm0
push 0xd
push str.iwyykyyjawuyg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
push 0
push 0x2541d74d
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
sub esp, 0x18
mov ebx, eax
mov ecx, esp
mov edi, edx
push 0xa
push str.feeriicaka
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa38]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm1, qword [0x10022ab8]
add esp, 0xc
movsd xmm0, qword [0x1002aa60]
push 0
push 0x31e1020a
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd qword [ebp - 0x28], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ecx, eax
call fcn.10014f20
mov edx, edi
movsd qword [ebp - 0x10], xmm0
mov ecx, ebx
call fcn.10014f20
mulsd xmm0, qword [0x100228a0]
movsd xmm1, qword [ebp - 0x10]
mulsd xmm0, qword [ebp - 0x28]
mulsd xmm1, xmm0
movsd qword [ebp - 0x10], xmm1
movsd xmm0, qword [0x1002aa30]
call fcn.10014e70
movsd xmm0, qword [0x1002aa38]
push edx
push eax
sub esp, 0x20
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
fstp qword [ebp - 0x28]
call sub.IMM32.dll_ImmRegisterWordA
fdivr qword [0x10022a18]
fdiv qword [ebp - 0x20]
fdiv qword [ebp - 0x28]
fstp qword [ebp - 0x18]
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
movsd xmm0, qword [0x10022968]
movsd qword [esp], xmm0
movsd xmm0, qword [0x1002aa78]
call fcn.10014e70
movsd xmm0, qword [0x1002aa50]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
add esp, 4
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm0, qword [0x10022a50]
add esp, 0x10
fstp qword [ebp - 0x28]
divsd xmm0, qword [ebp - 0x28]
mov ecx, esp
movsd xmm1, qword [0x10022820]
mulsd xmm0, qword [ebp - 0x20]
subsd xmm1, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [esp + 0x18], xmm0
push 0xe
push str.ewikibapewyosa
subsd xmm1, qword [ebp - 0x18]
addsd xmm1, qword [ebp - 0x10]
movsd qword [0x1002aa48], xmm1
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
sub esp, 0x18
mov ecx, esp
push 6
push str.Zoezeu
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
sub esp, 0x18
mov esi, esp
movsd xmm0, qword [0x1002aa78]
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
push 0
push 0x13c03661
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x3326f8ea
sub esp, 0x18
mov ecx, esp
fstp qword [ebp - 0x20]
push 0xc
push str.upeariqojyie
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa70]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x18], xmm0
push 0xd
push str.iwyykyyjawuyg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
push 0
push 0x2541d74d
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
sub esp, 0x18
mov ebx, eax
mov ecx, esp
mov edi, edx
push 0xa
push str.feeriicaka
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa38]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm1, qword [0x10022ab8]
add esp, 0xc
movsd xmm0, qword [0x1002aa60]
push 0
push 0x31e1020a
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd qword [ebp - 0x28], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ecx, eax
call fcn.10014f20
mov edx, edi
movsd qword [ebp - 0x10], xmm0
mov ecx, ebx
call fcn.10014f20
mulsd xmm0, qword [0x100228a0]
movsd xmm1, qword [ebp - 0x10]
mulsd xmm0, qword [ebp - 0x28]
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa30]
movsd qword [ebp - 0x10], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa38]
push edx
push eax
sub esp, 0x20
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
fstp qword [ebp - 0x28]
call sub.IMM32.dll_ImmRegisterWordA
fdivr qword [0x10022a18]
fdiv qword [ebp - 0x20]
fdiv qword [ebp - 0x28]
fstp qword [ebp - 0x18]
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
movsd xmm0, qword [0x10022968]
movsd qword [esp], xmm0
movsd xmm0, qword [0x1002aa78]
call fcn.10014e70
movsd xmm0, qword [0x1002aa50]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
add esp, 4
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm0, qword [0x10022a50]
add esp, 0x10
fstp qword [ebp - 0x28]
divsd xmm0, qword [ebp - 0x28]
mov ecx, esp
movsd xmm1, qword [0x10022768]
mulsd xmm0, qword [ebp - 0x20]
subsd xmm1, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [esp + 0x18], xmm0
push 0xe
push str.ewikibapewyosa
subsd xmm1, qword [ebp - 0x18]
addsd xmm1, qword [ebp - 0x10]
movsd qword [0x1002aa60], xmm1
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
sub esp, 0x18
mov ecx, esp
push 6
push str.Zoezeu
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
push 0
push 0x13c03661
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x3326f8ea
sub esp, 0x18
mov ecx, esp
fstp qword [ebp - 0x20]
push 0xc
push str.upeariqojyie
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa70]
sub esp, 0x20
mov ecx, esp
movsd qword [esp + 0x18], xmm0
push 0xd
push str.iwyykyyjawuyg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
push 0
push 0x2541d74d
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
sub esp, 0x18
mov ebx, eax
mov ecx, esp
mov edi, edx
push 0xa
push str.feeriicaka
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa38]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm1, qword [0x10022ab8]
add esp, 0xc
movsd xmm0, qword [0x1002aa60]
push 0
push 0x31e1020a
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd qword [ebp - 0x28], xmm0
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
mov ecx, eax
call fcn.10014f20
mov edx, edi
movsd qword [ebp - 0x10], xmm0
mov ecx, ebx
call fcn.10014f20
mulsd xmm0, qword [0x100228a0]
movsd xmm1, qword [ebp - 0x10]
mulsd xmm0, qword [ebp - 0x28]
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa30]
movsd qword [ebp - 0x10], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa38]
push edx
push eax
sub esp, 0x20
mov esi, esp
movsd qword [esp + 0x18], xmm0
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
fstp qword [ebp - 0x28]
call sub.IMM32.dll_ImmRegisterWordA
fdivr qword [0x10022a18]
fdiv qword [ebp - 0x20]
fdiv qword [ebp - 0x28]
fstp qword [ebp - 0x18]
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x20], xmm0
movsd xmm0, qword [0x10022968]
movsd qword [esp], xmm0
movsd xmm0, qword [0x1002aa78]
call fcn.10014e70
movsd xmm0, qword [0x1002aa50]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
add esp, 4
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm1, qword [0x10022a50]
add esp, 0x30
fstp qword [ebp - 0x28]
divsd xmm1, qword [ebp - 0x28]
movsd xmm0, qword [0x10022a78]
mulsd xmm1, qword [ebp - 0x20]
subsd xmm0, xmm1
subsd xmm0, qword [ebp - 0x18]
addsd xmm0, qword [ebp - 0x10]
movsd qword [0x1002aa38], xmm0
push 0
push 0x10022410
push 0x10022414
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret