Function at 0x1000e0d0
Capabilities:
Enumerate services
Log keystrokes via input method manager
Query or enumerate registry key
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10021822
mov eax, dword fs:[0]
push eax
sub esp, 0x364
mov eax, dword [0x1002a0f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x2bc], eax
movsd xmm0, qword [0x1002aa70]
ucomisd xmm0, qword [0x10022b58]
mov dword [ebp - 0x2f8], eax
lahf
test ah, 0x44
jp 0x1000f3e5
movsd xmm0, qword [0x1002aa50]
call fcn.10014e70
movsd xmm0, qword [0x1002aa68]
push edx
push eax
push 0x1b1dd421
push 0x10905fec
call fcn.10014e70
movsd xmm0, qword [0x1002aa30]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm0, qword [0x1002aa60]
add esp, 0x30
mov dword [ebp - 0x30c], eax
push 0
push 0x3a9073b3
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
movsd xmm0, qword [0x1002aa60]
push 0
push 0x6dd7149
sub esp, 0x18
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2dc], edx
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x100227c8]
add esp, 4
movsd qword [esp], xmm0
push 0
push 0x2dc926e6
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
add esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2bc], esp
mov dword [ebp - 0x2cc], edx
push 6
push str.vysine
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov dword [ebp - 4], 0
mov esi, esp
mov dword [ebp - 0x2d0], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
cvttsd2si edi, qword [0x1002aa50]
mov byte [ebp - 4], 1
movsd xmm0, qword [0x1002aa58]
sub esp, 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov edx, 0x3777677a
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
movsd xmm0, qword [0x1002aa60]
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov esi, esp
mov dword [ebp - 0x2c8], edx
mov dword [ebp - 0x2bc], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov dword [ebp - 4], 2
mov esi, esp
mov dword [ebp - 0x2e4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa28]
sub esp, 0xc
mov byte [ebp - 4], 3
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm1, qword [0x10022990]
add esp, 0xc
movsd xmm0, qword [0x100229c8]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
movsd xmm0, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2fc], eax
mov esi, esp
mov dword [ebp - 0x2bc], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa48]
sub esp, 0xc
mov dword [ebp - 4], 4
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call sub.IMM32.dll_ImmGetCandidateListW
sub esp, 0x18
mov dword [ebp - 0x300], eax
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push 5
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.oxgii
call fcn.1000ce20
movsd xmm0, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 4], 5
mov esi, esp
mov dword [ebp - 0x2e4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa30]
sub esp, 0xc
mov byte [ebp - 4], 6
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov dword [ebp - 4], 0xffffffff
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
mov dword [ebp - 0x308], eax
mov ecx, esp
mov dword [ebp - 0x304], edx
push 0xb
push str.Uncofevkopg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
push 0
push 0x3357f6e7
sub esp, 8
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmIsUIMessageA
movsd xmm0, qword [0x1002aa68]
sub esp, 0x18
cvttsd2si edi, qword [0x1002aa60]
mov dword [ebp - 0x2e4], eax
mov esi, esp
mov dword [ebp - 0x2e8], edx
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si edi, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push 0xa
push str.Orlixajiur
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa28]
sub esp, 0x18
mov dword [ebp - 4], 7
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov edx, edi
movsd qword [esp], xmm0
mov edi, dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
mov ecx, 0x80b9878
mov dword [ebp - 4], 0xffffffff
call edi
sub esp, 0x18
mov esi, eax
mov ecx, esp
push 8
push str.quykhyva
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2fc]
movsd xmm1, qword [0x10022988]
cvtdq2pd xmm0, xmm0
mov edx, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x308]
fstp qword [ebp - 0x2f4]
divsd xmm1, xmm0
movd xmm0, dword [ebp - 0x300]
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014e70
push edx
push eax
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2b0]
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x2e4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call sub.IMM32.dll_ImmGetCompositionStringW
movd xmm0, dword [ebp - 0x30c]
cvtdq2pd xmm0, xmm0
mov edx, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x2ec]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsd qword [ebp - 0x2b8], xmm1
movsd xmm1, qword [0x10022880]
divsd xmm1, xmm0
movsd qword [ebp - 0x310], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x310]
mov edx, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x2d8]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b8]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b8], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b8]
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d0]
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b8], xmm1
call fcn.10014f20
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm2, xmm0
addsd xmm2, qword [0x100229a8]
addsd xmm2, qword [ebp - 0x2b0]
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [0x10022770]
mov ecx, 0x11c6cc96
divsd xmm1, xmm0
push 0
push 0x345d8f8f
movd xmm0, dword [ebp - 0x2bc]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
push 0
push 0x2207b2e2
push 0
push 0x624b805
movsd qword [ebp - 0x2b0], xmm1
call edi
movsd xmm1, qword [ebp - 0x2b8]
add esp, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x2b0]
subsd xmm1, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10022838]
divsd xmm0, qword [ebp - 0x2f4]
addsd xmm1, xmm0
movsd xmm0, qword [0x1002aa50]
movsd qword [0x1002aa70], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa68]
push edx
push eax
push 0x1b1dd421
push 0x10905fec
call fcn.10014e70
movsd xmm0, qword [0x1002aa30]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm0, qword [0x1002aa60]
add esp, 0x30
mov dword [ebp - 0x2dc], eax
push 0
push 0x3a9073b3
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
movsd xmm0, qword [0x1002aa60]
push 0
push 0x6dd7149
sub esp, 0x18
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x30c], edx
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x100227c8]
add esp, 4
movsd qword [esp], xmm0
push 0
push 0x2dc926e6
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
add esp, 0x18
mov dword [ebp - 0x308], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2e8], edx
push 6
push str.vysine
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov dword [ebp - 4], 8
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa58]
sub esp, 0xc
cvttsd2si edi, qword [0x1002aa50]
mov byte [ebp - 4], 9
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov edx, 0x3777677a
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
movsd xmm0, qword [0x1002aa60]
sub esp, 0x18
mov dword [ebp - 0x300], eax
mov esi, esp
mov dword [ebp - 0x304], edx
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov dword [ebp - 4], 0xa
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa28]
sub esp, 0xc
mov byte [ebp - 4], 0xb
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm1, qword [0x10022990]
add esp, 0xc
movsd xmm0, qword [0x100229c8]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
movsd xmm0, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa48]
sub esp, 0xc
mov dword [ebp - 4], 0xc
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call sub.IMM32.dll_ImmGetCandidateListW
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 5
push str.oxgii
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 4], 0xd
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa30]
sub esp, 0xc
mov byte [ebp - 4], 0xe
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov dword [ebp - 4], 0xffffffff
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2c8], edx
push 0xb
push str.Uncofevkopg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
push 0
push 0x3357f6e7
sub esp, 8
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmIsUIMessageA
cvttsd2si edi, qword [0x1002aa60]
sub esp, 0x18
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2cc], edx
mov esi, esp
movsd xmm0, qword [0x1002aa68]
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si edi, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2fc], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0xa
push str.Orlixajiur
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa28]
sub esp, 0x18
mov dword [ebp - 4], 0xf
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov edx, edi
mov dword [ebp - 4], 0xffffffff
mov edi, dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
mov ecx, 0x80b9878
movsd qword [esp], xmm0
call edi
sub esp, 0x18
mov esi, eax
mov ecx, esp
push 8
push str.quykhyva
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
movsd xmm1, qword [0x10022988]
cvtdq2pd xmm0, xmm0
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
fstp qword [ebp - 0x2c4]
divsd xmm1, xmm0
movd xmm0, dword [ebp - 0x2d0]
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014e70
push edx
push eax
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2b0]
mov edx, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x2ec]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call sub.IMM32.dll_ImmGetCompositionStringW
movd xmm1, eax
movd xmm0, dword [ebp - 0x2dc]
cvtdq2pd xmm1, xmm1
mov edx, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x2e4]
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2b8], xmm1
movsd xmm1, qword [0x10022880]
divsd xmm1, xmm0
movsd qword [ebp - 0x2f4], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2f4]
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x308]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b8]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b8], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b8]
mov edx, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x300]
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b8], xmm1
call fcn.10014f20
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm2, xmm0
addsd xmm2, qword [0x10022a10]
addsd xmm2, qword [ebp - 0x2b0]
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [0x10022770]
mov ecx, 0x11c6cc96
divsd xmm1, xmm0
push 0
push 0x345d8f8f
movd xmm0, dword [ebp - 0x2fc]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
push 0
push 0x2207b2e2
push 0
push 0x624b805
movsd qword [ebp - 0x2b0], xmm1
call edi
movsd xmm1, qword [ebp - 0x2b8]
add esp, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x2b0]
subsd xmm1, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10022838]
divsd xmm0, qword [ebp - 0x2c4]
addsd xmm1, xmm0
movsd xmm0, qword [0x1002aa50]
movsd qword [0x1002aa78], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa68]
push edx
push eax
push 0x1b1dd421
push 0x10905fec
call fcn.10014e70
movsd xmm0, qword [0x1002aa30]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm0, qword [0x1002aa60]
add esp, 0x30
mov dword [ebp - 0x2dc], eax
push 0
push 0x3a9073b3
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
movsd xmm0, qword [0x1002aa60]
push 0
push 0x6dd7149
sub esp, 0x18
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x30c], edx
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x100227c8]
add esp, 4
movsd qword [esp], xmm0
push 0
push 0x2dc926e6
call dword [sym.imp.ADVAPI32.dll_RegisterServiceCtrlHandlerW]
add esp, 0x18
mov dword [ebp - 0x308], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2e8], edx
push 6
push str.vysine
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa78]
sub esp, 0x18
mov dword [ebp - 4], 0x10
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa58]
sub esp, 0xc
cvttsd2si edi, qword [0x1002aa50]
mov byte [ebp - 4], 0x11
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov edx, 0x3777677a
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_EnumServicesStatusW]
sub esp, 0x18
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x304], edx
mov esi, esp
movsd xmm0, qword [0x1002aa60]
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa68]
sub esp, 0xc
mov dword [ebp - 4], 0x12
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa28]
sub esp, 0xc
mov byte [ebp - 4], 0x13
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm1, qword [0x10022990]
add esp, 0xc
movsd xmm0, qword [0x100229c8]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_QueryServiceConfigW]
movsd xmm0, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa48]
sub esp, 0xc
mov dword [ebp - 4], 0x14
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
call sub.IMM32.dll_ImmGetCandidateListW
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 5
push str.oxgii
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
movsd xmm0, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 4], 0x15
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
sub esp, 0xc
mov byte [ebp - 4], 0x16
mov esi, esp
movsd xmm0, qword [0x1002aa30]
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov dword [ebp - 4], 0xffffffff
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2c8], edx
push 0xb
push str.Uncofevkopg
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
push 0
push 0x3357f6e7
sub esp, 8
movsd qword [esp], xmm0
call sub.IMM32.dll_ImmIsUIMessageA
movsd xmm0, qword [0x1002aa68]
sub esp, 0x18
cvttsd2si edi, qword [0x1002aa60]
mov dword [ebp - 0x2ec], eax
mov esi, esp
mov dword [ebp - 0x2cc], edx
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
add esp, 0xc
mov ecx, edi
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si edi, qword [0x1002aa30]
sub esp, 0x18
mov dword [ebp - 0x2fc], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0xa
push str.Orlixajiur
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa28]
sub esp, 0x18
mov dword [ebp - 4], 0x17
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
movsd xmm0, qword [0x1002aa78]
add esp, 4
mov edx, edi
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x80b9878
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
mov esi, eax
mov ecx, esp
push 8
push str.quykhyva
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
fstp qword [ebp - 0x2f4]
movsd xmm1, qword [0x10022988]
cvtdq2pd xmm0, xmm0
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
divsd xmm1, xmm0
movd xmm0, dword [ebp - 0x2d0]
cvtdq2pd xmm0, xmm0
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm2, qword [ebp - 0x2b0]
mulsd xmm2, xmm0
movsd xmm0, qword [0x1002aa78]
movsd qword [ebp - 0x2b0], xmm2
call fcn.10014e70
push edx
push eax
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2b0]
mov edx, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x2ec]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call sub.IMM32.dll_ImmGetCompositionStringW
movd xmm0, dword [ebp - 0x2dc]
cvtdq2pd xmm0, xmm0
mov edx, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x2e4]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsd qword [ebp - 0x2b8], xmm1
movsd xmm1, qword [0x10022880]
divsd xmm1, xmm0
movsd qword [ebp - 0x2c4], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2c4]
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x308]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b8]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b8], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b8]
mov edx, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x300]
mulsd xmm1, xmm0
movsd qword [ebp - 0x2b8], xmm1
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b8]
mulsd xmm1, xmm0
addsd xmm1, qword [0x100228c0]
addsd xmm1, qword [ebp - 0x2b0]
movsd qword [ebp - 0x2b8], xmm1
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [0x10022770]
mov ecx, 0x11c6cc96
divsd xmm1, xmm0
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
push 0
push 0x345d8f8f
movd xmm0, dword [ebp - 0x2fc]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2b0], xmm1
call edi
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
push 0
push 0x2207b2e2
movsd qword [ebp - 0x2b0], xmm1
push 0
push 0x624b805
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
movsd xmm1, qword [ebp - 0x2b8]
add esp, 0x10
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x2b0]
subsd xmm1, xmm0
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x10022838]
divsd xmm0, qword [ebp - 0x2f4]
addsd xmm1, xmm0
movsd qword [0x1002aa30], xmm1
jmp 0x1000f3eb
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0x220], 0
call fcn.10005070
lea ecx, [ebp - 0x220]
push ecx
push eax
call fcn.1000ae10
add esp, 8
mov esi, eax
cmp dword [ebp - 0x220], 2
mov dword [ebp - 0x2ec], esi
jle 0x1000f4de
push 3
xor eax, eax
mov dword [ebp - 0x328], 0
push 0x100222d0
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 7
mov word [ebp - 0x328], ax
call fcn.1000cf20
mov eax, 1
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2bc], eax
lea eax, [ebp - 0x328]
push eax
push dword [esi + 4]
call fcn.100012d0
add esp, 8
test al, al
je 0x1000f4de
push 1
push 0x100222d8
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
call fcn.1000cf20
mov eax, 3
mov dword [ebp - 0x2f8], eax
lea eax, [ebp - 0x23c]
push eax
push dword [esi + 8]
call fcn.100012d0
add esp, 8
mov byte [ebp - 0x2d1], 1
test al, al
jne 0x1000f4e5
mov byte [ebp - 0x2d1], 0
mov eax, dword [ebp - 0x2f8]
test al, 2
je 0x1000f509
and eax, 0xfffffffd
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x2f8], eax
call fcn.1000be50
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 4], 0xffffffff
test al, 1
je 0x1000f51f
lea ecx, [ebp - 0x328]
call fcn.1000be50
cmp byte [ebp - 0x2d1], 0
je 0x100109df
xorps xmm0, xmm0
mov dword [ebp - 0x298], 0x44
movups xmmword [ebp - 0x2a8], xmm0
movlpd qword [ebp - 0x294], xmm0
movlpd qword [ebp - 0x28c], xmm0
movlpd qword [ebp - 0x284], xmm0
movlpd qword [ebp - 0x27c], xmm0
movlpd qword [ebp - 0x274], xmm0
movlpd qword [ebp - 0x26c], xmm0
movlpd qword [ebp - 0x264], xmm0
movlpd qword [ebp - 0x25c], xmm0
movsd xmm0, qword [0x1002aa78]
ucomisd xmm0, qword [0x10022b78]
lahf
test ah, 0x44
jp 0x100105c6
cvttsd2si esi, qword [0x1002aa50]
push 0
push 0x1974aa64
sub esp, 0x18
mov ecx, esp
push 6
push str.yyulyx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movsd xmm0, qword [0x1002aa68]
push 0
push 0x1324f682
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
sub esp, 0xc
mov dword [ebp - 4], 0x19
mov ecx, esp
push 0xd
push str.siygacuonkaze
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
add esp, 0x20
mov ecx, esp
fstp qword [ebp - 0x2c4]
push 0xd
push str.Ataxungademay
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
cvttsd2si esi, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
push 0xa
push str.poiyakrohi
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
movsd qword [ebp - 0x2e0], xmm0
movsd xmm0, qword [0x1002aa68]
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
movsd xmm0, qword [0x1002aa58]
mov dword [ebp - 4], 0x1a
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x12afba41
call edi
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2c8], edx
push 0xa
push str.yshymoiyyy
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 4], 0x1b
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
sub esp, 0xc
mov byte [ebp - 4], 0x1c
mov ecx, esp
push 0xe
push str.ilevesgimykhoa
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 0x2cc], eax
mov ecx, esp
mov edi, edx
push 0xf
push str.ufepsyeemayveni
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
sub esp, 0x18
movsd qword [ebp - 0x2f4], xmm0
movsd xmm0, qword [0x1002aa30]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov esi, eax
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
movsd xmm2, qword [0x10022760]
cvtdq2pd xmm0, xmm0
movd xmm1, eax
mulsd xmm0, qword [0x10022918]
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
movsd xmm0, qword [0x100228f8]
mulsd xmm1, qword [ebp - 0x2c4]
subsd xmm2, xmm1
movd xmm1, dword [ebp - 0x2d0]
cvtdq2pd xmm1, xmm1
divsd xmm0, xmm1
addsd xmm2, xmm0
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2b0], xmm0
movsd xmm0, qword [ebp - 0x2e0]
mulsd xmm0, qword [0x100228b8]
movsd qword [ebp - 0x2e0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2e0]
mov edx, edi
mov ecx, dword [ebp - 0x2cc]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm1, qword [ebp - 0x2f4]
movd xmm0, esi
cvtdq2pd xmm0, xmm0
subsd xmm2, xmm1
mulsd xmm0, qword [0x10022810]
addsd xmm2, xmm0
movsd qword [ebp - 0x2b8], xmm2
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x100227f8]
movsd qword [ebp - 0x2c4], xmm0
movsd xmm0, qword [0x1002aa60]
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
fdivr qword [ebp - 0x2c4]
push 0
push 0x2ae7590b
fstp qword [ebp - 0x2c4]
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2c4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2c4], xmm1
call sub.IMM32.dll_ImmIsUIMessageA
cvttsd2si esi, qword [0x1002aa50]
push 0
push 0x1974aa64
sub esp, 0x18
mov ecx, esp
push 6
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.yyulyx
mulsd xmm0, qword [ebp - 0x2c4]
addsd xmm0, qword [ebp - 0x2b8]
movsd qword [0x1002aa38], xmm0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movsd xmm0, qword [0x1002aa68]
push 0
push 0x1324f682
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
mov dword [ebp - 4], 0x1d
sub esp, 0xc
mov ecx, esp
push 0xd
push str.siygacuonkaze
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
add esp, 0x20
mov ecx, esp
fstp qword [ebp - 0x2c4]
push 0xd
push str.Ataxungademay
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
cvttsd2si esi, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
push 0xa
push str.poiyakrohi
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
movsd qword [ebp - 0x2e0], xmm0
movsd xmm0, qword [0x1002aa68]
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
movsd xmm0, qword [0x1002aa58]
mov dword [ebp - 4], 0x1e
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x12afba41
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2c8], edx
push 0xa
push str.yshymoiyyy
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 4], 0x1f
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
sub esp, 0xc
mov byte [ebp - 4], 0x20
mov ecx, esp
push 0xe
push str.ilevesgimykhoa
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 0x2cc], eax
mov ecx, esp
mov edi, edx
push 0xf
push str.ufepsyeemayveni
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
sub esp, 0x18
movsd qword [ebp - 0x2f4], xmm0
movsd xmm0, qword [0x1002aa30]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov esi, eax
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
movsd xmm2, qword [0x10022778]
cvtdq2pd xmm0, xmm0
movd xmm1, eax
mulsd xmm0, qword [0x10022918]
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
movd xmm0, dword [ebp - 0x2d0]
cvtdq2pd xmm0, xmm0
mulsd xmm1, qword [ebp - 0x2c4]
subsd xmm2, xmm1
movsd xmm1, qword [0x100228f8]
divsd xmm1, xmm0
addsd xmm2, xmm1
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2b0], xmm0
movsd xmm0, qword [ebp - 0x2e0]
mulsd xmm0, qword [0x100228b8]
movsd qword [ebp - 0x2e0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2e0]
mov edx, edi
mov ecx, dword [ebp - 0x2cc]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm1, qword [ebp - 0x2f4]
movd xmm0, esi
cvtdq2pd xmm0, xmm0
subsd xmm2, xmm1
mulsd xmm0, qword [0x10022810]
addsd xmm2, xmm0
movsd qword [ebp - 0x2b8], xmm2
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x100227f8]
movsd qword [ebp - 0x2c4], xmm0
movsd xmm0, qword [0x1002aa60]
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
fdivr qword [ebp - 0x2c4]
push 0
push 0x2ae7590b
fstp qword [ebp - 0x2c4]
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2c4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2c4], xmm1
call sub.IMM32.dll_ImmIsUIMessageA
cvttsd2si esi, qword [0x1002aa50]
push 0
push 0x1974aa64
sub esp, 0x18
mov ecx, esp
push 6
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push str.yyulyx
mulsd xmm0, qword [ebp - 0x2c4]
addsd xmm0, qword [ebp - 0x2b8]
movsd qword [0x1002aa68], xmm0
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movsd xmm0, qword [0x1002aa68]
push 0
push 0x1324f682
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
sub esp, 0xc
mov dword [ebp - 4], 0x21
mov ecx, esp
push 0xd
push str.siygacuonkaze
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
add esp, 0x20
mov ecx, esp
fstp qword [ebp - 0x2c4]
push 0xd
push str.Ataxungademay
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
cvttsd2si esi, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0xa
push str.poiyakrohi
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
movsd qword [ebp - 0x2e0], xmm0
movsd xmm0, qword [0x1002aa68]
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
movsd xmm0, qword [0x1002aa58]
mov dword [ebp - 4], 0x22
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x12afba41
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2c8], edx
push 0xa
push str.yshymoiyyy
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 4], 0x23
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
sub esp, 0xc
mov byte [ebp - 4], 0x24
mov ecx, esp
push 0xe
push str.ilevesgimykhoa
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 0x2cc], eax
mov ecx, esp
mov edi, edx
push 0xf
push str.ufepsyeemayveni
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
sub esp, 0x18
movsd qword [ebp - 0x2f4], xmm0
movsd xmm0, qword [0x1002aa30]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov esi, eax
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
movsd xmm2, qword [0x10022a90]
cvtdq2pd xmm0, xmm0
movd xmm1, eax
mulsd xmm0, qword [0x10022918]
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
movd xmm0, dword [ebp - 0x2d0]
cvtdq2pd xmm0, xmm0
mulsd xmm1, qword [ebp - 0x2c4]
subsd xmm2, xmm1
movsd xmm1, qword [0x100228f8]
divsd xmm1, xmm0
addsd xmm2, xmm1
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2b0], xmm0
movsd xmm0, qword [ebp - 0x2e0]
mulsd xmm0, qword [0x100228b8]
movsd qword [ebp - 0x2e0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2e0]
mov edx, edi
mov ecx, dword [ebp - 0x2cc]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm1, qword [ebp - 0x2f4]
movd xmm0, esi
cvtdq2pd xmm0, xmm0
subsd xmm2, xmm1
mulsd xmm0, qword [0x10022810]
addsd xmm2, xmm0
movsd qword [ebp - 0x2b8], xmm2
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x100227f8]
movsd qword [ebp - 0x2c4], xmm0
movsd xmm0, qword [0x1002aa60]
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
fdivr qword [ebp - 0x2c4]
push 0
push 0x2ae7590b
fstp qword [ebp - 0x2c4]
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2c4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2c4], xmm1
call sub.IMM32.dll_ImmIsUIMessageA
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x2c4]
addsd xmm0, qword [ebp - 0x2b8]
movsd qword [0x1002aa48], xmm0
cvttsd2si esi, qword [0x1002aa50]
push 0
push 0x1974aa64
sub esp, 0x18
mov ecx, esp
push 6
push str.yyulyx
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
movsd xmm0, qword [0x1002aa68]
push 0
push 0x1324f682
sub esp, 0x18
mov dword [ebp - 0x2bc], eax
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
sub esp, 0xc
mov dword [ebp - 4], 0x25
mov ecx, esp
push 0xd
push str.siygacuonkaze
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
add esp, 0x20
mov ecx, esp
fstp qword [ebp - 0x2c4]
push 0xd
push str.Ataxungademay
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
call sub.IMM32.dll_ImmGetIMEFileNameA
cvttsd2si esi, qword [0x1002aa58]
sub esp, 0x18
mov dword [ebp - 0x2d0], eax
mov ecx, esp
push 0xa
push str.poiyakrohi
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_GetServiceKeyNameA]
sub esp, 0x18
movsd qword [ebp - 0x2e0], xmm0
movsd xmm0, qword [0x1002aa68]
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
movsd xmm0, qword [0x1002aa58]
mov dword [ebp - 4], 0x26
call fcn.10014e70
movsd xmm0, qword [0x1002aa70]
push edx
push eax
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x12afba41
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
sub esp, 0x18
mov dword [ebp - 0x2d8], eax
mov ecx, esp
mov dword [ebp - 0x2ac], esp
mov dword [ebp - 0x2c8], edx
push 0xa
push str.yshymoiyyy
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
movsd xmm0, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 4], 0x27
mov esi, esp
mov dword [ebp - 0x2b4], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.10011280
sub esp, 0xc
mov byte [ebp - 4], 0x28
mov ecx, esp
push 0xe
push str.ilevesgimykhoa
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.ADVAPI32.dll_StartServiceA]
cvttsd2si esi, qword [0x1002aa50]
sub esp, 0x18
mov dword [ebp - 0x2cc], eax
mov ecx, esp
mov edi, edx
push 0xf
push str.ufepsyeemayveni
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
call fcn.1000cf20
mov ecx, esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
sub esp, 0x18
movsd qword [ebp - 0x2f4], xmm0
movsd xmm0, qword [0x1002aa30]
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov esi, eax
call sub.IMM32.dll_ImmGetIMEFileNameA
movd xmm0, dword [ebp - 0x2bc]
movsd xmm2, qword [0x10022aa8]
cvtdq2pd xmm0, xmm0
movd xmm1, eax
mulsd xmm0, qword [0x10022918]
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
movd xmm0, dword [ebp - 0x2d0]
cvtdq2pd xmm0, xmm0
mulsd xmm1, qword [ebp - 0x2c4]
subsd xmm2, xmm1
movsd xmm1, qword [0x100228f8]
divsd xmm1, xmm0
addsd xmm2, xmm1
movsd qword [ebp - 0x2b8], xmm2
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov edx, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2d8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [ebp - 0x2b0], xmm0
movsd xmm0, qword [ebp - 0x2e0]
mulsd xmm0, qword [0x100228b8]
movsd qword [ebp - 0x2e0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2e0]
mov edx, edi
mov ecx, dword [ebp - 0x2cc]
mulsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2b0]
mulsd xmm0, xmm1
movsd qword [ebp - 0x2b0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
divsd xmm1, xmm0
movsd xmm2, qword [ebp - 0x2b8]
mulsd xmm1, qword [ebp - 0x2f4]
movd xmm0, esi
cvtdq2pd xmm0, xmm0
subsd xmm2, xmm1
mulsd xmm0, qword [0x10022810]
addsd xmm2, xmm0
movsd qword [ebp - 0x2b8], xmm2
call sub.IMM32.dll_ImmIsUIMessageA
sub esp, 8
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x100227f8]
movsd qword [ebp - 0x2c4], xmm0
movsd xmm0, qword [0x1002aa60]
movsd qword [esp], xmm0
call dword [sym.imp.ADVAPI32.dll_SetServiceStatus]
fdivr qword [ebp - 0x2c4]
push 0
push 0x2ae7590b
fstp qword [ebp - 0x2c4]
call sub.IMM32.dll_ImmRegisterWordA
movsd xmm1, qword [ebp - 0x2c4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebp - 0x2c4], xmm1
call sub.IMM32.dll_ImmIsUIMessageA
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [ebp - 0x2c4]
addsd xmm0, qword [ebp - 0x2b8]
movsd qword [0x1002aa50], xmm0
push 0x20a
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.100161c0
push 0x104
lea eax, [ebp - 0x21c]
push eax
push 0
call fcn.100066a0
add esp, 0x18
test eax, eax
je 0x100109df
xor eax, eax
mov dword [ebp - 0x328], 0
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x314], 7
lea edx, [ecx + 2]
mov word [ebp - 0x328], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10010627
sub ecx, edx
lea eax, [ebp - 0x21c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x328]
call fcn.1000cf20
lea eax, [ebp - 0x328]
mov dword [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x340]
push 0x10022370
push eax
call fcn.10001330
add esp, 0xc
push 1
push 0x10022370
mov ecx, eax
mov byte [ebp - 4], 0x2a
call fcn.1000cc90
mov dword [ebp - 0x23c], 0
xor ecx, ecx
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x23c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x22c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
lea ecx, [ebp - 0x340]
call fcn.1000be50
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x2d
call fcn.1000be50
lea ecx, [ebp - 0x21c]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100106f0
sub ecx, edx
sar ecx, 1
test ecx, ecx
jle 0x10010713
cmp word [ebp + ecx*2 - 0x21c], 0x5c
je 0x10010713
dec ecx
test ecx, ecx
jg 0x10010703
lea eax, [ebp - 0x2d1]
push eax
lea eax, [ebp - 0x21c]
lea eax, [eax + ecx*2]
push eax
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x254]
call fcn.100011e0
movsd xmm0, qword [0x1002aa60]
ucomisd xmm0, qword [0x10022b50]
mov byte [ebp - 4], 0x2e
lahf
test ah, 0x44
jp 0x100108fb
movsd xmm0, qword [0x1002aa70]
sub esp, 0x18
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
call sub.IMM32.dll_ImmGetCompositionStringW
movsd xmm0, qword [0x1002aa60]
add esp, 0x18
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2bc], edx
call fcn.10014e70
push edx
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0x10022374
call fcn.1000bb50
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov ecx, esp
push 0xe
push str.Leakaneobobyah
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov ecx, 0x320715db
mov byte [ebp - 4], 0x2e
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
movsd xmm0, qword [0x1002aa28]
sub esp, 0x18
mov edi, eax
mov esi, esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
add esp, 0xc
mov ecx, 0x274334be
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x2c8], eax
mov esi, edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, eax
call fcn.10014f20
movsd xmm1, qword [0x10022980]
divsd xmm1, xmm0
movsd qword [ebp - 0x2f4], xmm1
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov edx, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x2d0]
fstp qword [ebp - 0x2c4]
movsd xmm0, qword [ebp - 0x2c4]
mulsd xmm0, qword [ebp - 0x2f4]
movsd qword [ebp - 0x2b0], xmm0
call fcn.10014f20
movsd xmm1, qword [ebp - 0x2b0]
mulsd xmm1, xmm0
movd xmm0, edi
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd xmm0, qword [0x1002aa68]
movsd qword [ebp - 0x2b0], xmm1
call fcn.10014e70
movsd xmm0, qword [0x1002aa38]
mov ecx, 0x253a8ac4
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceLockStatusW]
mov ecx, eax
call fcn.10014f20
mulsd xmm0, qword [ebp - 0x2b0]
movsd xmm1, qword [0x10022a68]
subsd xmm1, xmm0
mov ecx, dword [ebp - 0x2c8]
mov edx, esi
movsd qword [ebp - 0x2c4], xmm1
call fcn.10014f20
movsd xmm1, qword [0x10022868]
divsd xmm1, xmm0
movsd xmm0, qword [ebp - 0x2c4]
addsd xmm0, xmm1
movsd qword [0x1002aa58], xmm0
mov esi, 3
cmp dword [ebp - 0x220], esi
jle 0x1001096a
mov edi, dword [ebp - 0x2ec]
nop
push dword [edi + esi*4]
lea ecx, [ebp - 0x370]
call fcn.1000bb50
push eax
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x30
push 0x100223a4
push eax
call fcn.10001330
add esp, 0xc
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0x31
call fcn.1000c000
lea ecx, [ebp - 0x358]
call fcn.1000be50
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x2e
call fcn.1000be50
inc esi
cmp esi, dword [ebp - 0x220]
jl 0x10010910
cmp dword [ebp - 0x240], 8
lea edx, [ebp - 0x2a8]
push edx
lea edx, [ebp - 0x298]
push edx
lea eax, [ebp - 0x254]
cmovae eax, dword [ebp - 0x254]
lea ecx, [ebp - 0x23c]
cmp dword [ebp - 0x228], 8
push eax
cmovae ecx, dword [ebp - 0x23c]
lea eax, [ebp - 0x21c]
push 0
push 0
push 0
push 0
push 0
push ecx
push eax
call fcn.10003720
push 0
call fcn.10004600
add esp, 0x2c
lea ecx, [ebp - 0x254]
call fcn.1000be50
lea ecx, [ebp - 0x23c]
mov dword [ebp - 4], 0xffffffff
call fcn.1000be50
push 0
call fcn.100072f0
lea edx, [ebp - 0x224]
push edx
push 0x40
mov ecx, dword [eax + 0x3c]
mov edi, dword [ecx + eax + 0x28]
mov dword [ebp - 0x224], 0
add edi, eax
push dword [ecx + eax + 0x50]
push eax
call fcn.1000a490
add esp, 0x14
test eax, eax
jne 0x10010b76
movsd xmm0, qword [0x1002aa78]
ucomisd xmm0, qword [0x10022b88]
lahf
test ah, 0x44
jp 0x10010b71
movsd xmm0, qword [0x1002aa58]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x2ac], esp
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
sub esp, 0xc
mov dword [ebp - 4], 0x32
mov ecx, esp
push 0xf
push str.aheunoyutukoogf
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm1, qword [0x1002aa50]
movsd xmm0, qword [0x10022a88]
fstp qword [ebp - 0x2c4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
movsd xmm0, qword [0x10022780]
sub esp, 0x18
divsd xmm0, qword [ebp - 0x2c4]
mov esi, esp
mov dword [ebp - 0x2ac], esp
movd xmm1, eax
cvtdq2pd xmm1, xmm1
mulsd xmm1, xmm0
movsd xmm0, qword [0x1002aa58]
addsd xmm1, qword [0x10022870]
movsd qword [0x1002aa70], xmm1
call fcn.10014e70
push edx
push eax
push esi
call fcn.100111f0
sub esp, 0xc
mov dword [ebp - 4], 0x33
mov ecx, esp
push 0xf
push str.aheunoyutukoogf
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.1000ce20
mov dword [ebp - 4], 0xffffffff
call sub.IMM32.dll_ImmGetCandidateListW
movsd xmm1, qword [0x1002aa50]
movsd xmm0, qword [0x10022a88]
fstp qword [ebp - 0x2c4]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
movsd xmm1, qword [0x10022780]
divsd xmm1, qword [ebp - 0x2c4]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
addsd xmm0, qword [0x10022af0]
movsd qword [0x1002aa58], xmm0
call fcn.1000c340
mov eax, dword [0x1002aa1c]
mov dword [ebp - 0x2af], eax
mov byte [ebp - 0x2b0], 0xb8
mov eax, dword [ebp - 0x2b0]
mov word [ebp - 0x2ab], 0xd0ff
mov byte [ebp - 0x2a9], 0x90
mov dword [edi], eax
mov eax, dword [ebp - 0x2ac]
mov dword [edi + 4], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10014e53
mov esp, ebp
pop ebp
ret