Function at 0x1006f310
Capabilities:
Enumerate services

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101e5cf8
mov eax, dword fs:[0]
push eax
sub esp, 0x84
mov eax, dword [0x10276bc4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 4
push 0
push 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x80], 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerA]
mov esi, eax
mov dword [ebp - 0x7c], esi
test esi, esi
jne 0x1006f38c
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_open_service_control_manager.
call fcn.10052140
push 0x10052360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
lea eax, [esi + 1]
jmp 0x1006fac3
mov edi, dword [sym.imp.ADVAPI32.dll_EnumServicesStatusA]
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x70]
push eax
push 0
push 0
push 3
push 0x3ff
push esi
call edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x1006f3e7
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_retrieve_service_information.
call fcn.10052140
push 0x10052360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push esi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, 1
jmp 0x1006fac3
mov esi, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x6c], eax
test esi, esi
je 0x1006f484
cmp esi, 0x7fffffff
ja 0x1006fade
cmp esi, 0x1000
jb 0x1006f446
lea eax, [esi + 0x23]
cmp eax, esi
jbe 0x1006fae3
push eax
call fcn.101dee34
add esp, 4
test eax, eax
je 0x1006fa6d
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ebp - 0x78], ecx
mov dword [ecx - 4], eax
jmp 0x1006f454
push esi
call fcn.101dee34
add esp, 4
mov dword [ebp - 0x78], eax
mov ecx, eax
push esi
lea eax, [ecx + esi]
mov dword [ebp - 0x90], ecx
push 0
push ecx
mov dword [ebp - 0x88], eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x88]
add esp, 0xc
mov esi, dword [ebp - 0x70]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x70]
push eax
push esi
mov esi, dword [ebp - 0x6c]
push esi
push 1
push 0x3ff
push dword [ebp - 0x7c]
call edi
test eax, eax
jne 0x1006f4dc
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, str.Failed_to_retrieve_service_information.
call fcn.10052140
push 0x10052360
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov esi, 1
jmp 0x1006fa44
cmp dword [ebp - 0x74], 0
mov dword [ebp - 0x84], 0
jbe 0x1006fa39
mov edx, dword [esi]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f510
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.10052750
mov eax, dword [ebp - 0x6c]
xorps xmm0, xmm0
mov byte [ebp - 4], 1
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov edx, dword [eax]
mov ecx, edx
mov dword [ebp - 0x14], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1006f546
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.10052750
mov byte [ebp - 4], 2
mov eax, accept
mov ecx, dword [ebp - 0x30]
sub eax, ecx
cmp eax, 0x22
jb 0x1006fae8
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push ecx
cmovae eax, dword [ebp - 0x40]
push eax
push 0x22
push str.SYSTEMCurrentControlSetServices_
push ecx
push dword [ebp - 0x64]
lea ecx, [ebp - 0x58]
call fcn.10052ec0
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x1006f5c4
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006f5ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006fa6d
push ecx
push edx
call fcn.101df293
add esp, 8
movups xmm0, xmmword [ebp - 0x58]
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [ebp - 0x48]
push eax
movq qword [ebp - 0x30], xmm0
call fcn.1004ee30
lea ecx, [ebp - 0x58]
call fcn.1006edd0
add esp, 0x18
mov ecx, 0x102782f4
push eax
call fcn.10050b80
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x1006f62e
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006f624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006fa6d
push ecx
push edx
call fcn.101df293
add esp, 8
cmp dword [0x10278308], 0x10
mov edi, 0x102782f4
mov esi, dword [0x102782f4]
mov edx, 0x102782f4
mov eax, dword [0x10278304]
setae cl
cmovae edi, esi
test cl, cl
je 0x1006f658
add eax, esi
jmp 0x1006f65f
add eax, edx
mov esi, 0x102782f4
mov dword [ebp - 0x60], eax
cmp esi, eax
je 0x1006f686
sub edi, esi
nop dword [eax + eax]
movsx eax, byte [esi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi + esi], al
add esp, 4
inc esi
cmp esi, dword [ebp - 0x60]
jne 0x1006f670
cmp dword [ebp - 0x14], 0x10
lea edi, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
setae cl
cmovae edi, esi
test cl, cl
je 0x1006f6a4
add eax, esi
jmp 0x1006f6a9
add eax, edx
lea esi, [ebp - 0x28]
mov dword [ebp - 0x60], eax
cmp esi, eax
je 0x1006f6c8
sub edi, esi
movsx eax, byte [esi]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [edi + esi], al
add esp, 4
inc esi
cmp esi, dword [ebp - 0x60]
jne 0x1006f6b2
sub esp, 0x18
mov ecx, esp
push 0x102782f4
call fcn.1004ee30
call fcn.1006f0c0
add esp, 0x18
cmp eax, 0x32c8
jge 0x1006f708
sub esp, 0x18
mov ecx, esp
push 0x102782f4
call fcn.1004ee30
call fcn.1006f0c0
add esp, 0x18
cmp eax, 0x1388
jg 0x1006fa7f
cmp dword [0x10278308], 0x10
mov ecx, 0x102782f4
mov esi, dword [0x10278304]
mov edx, esi
mov edi, dword [0x102782f4]
setae byte [ebp - 0x59]
push 4
push str.hack
cmovae ecx, edi
push 0
call fcn.10079870
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1006fa7f
cmp byte [ebp - 0x59], 0
mov ecx, 0x102782f4
push 7
push str.iqvw64e
cmovne ecx, edi
mov edx, esi
push 0
call fcn.10079870
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1006fa7f
cmp byte [ebp - 0x59], 0
mov ecx, 0x102782f4
push 0xd
push str.AndroidKernel
cmovne ecx, edi
mov edx, esi
push 0
call fcn.10079870
add esp, 0xc
cmp eax, 0xffffffff
jne 0x1006fa7f
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
cmovae ecx, esi
mov dword [ebp - 0x60], esi
mov esi, dword [ebp - 0x18]
setae al
mov byte [ebp - 0x59], al
mov dword [ebp - 0x64], ecx
cmp esi, 7
jb 0x1006f84b
lea eax, [esi - 6]
add eax, ecx
mov dword [ebp - 0x68], eax
sub eax, ecx
push eax
push 0x61
push ecx
call sub.VCRUNTIME140.dll_memchr
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1006f845
mov ecx, esi
mov edx, str.aow_drv
mov edi, 3
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1006f7ef
add ecx, 4
add edx, 4
or edi, 0xffffffff
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1006f816
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1006f816
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1006f816
cmp edi, 0xffffffff
je 0x1006f812
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x1006f816
xor eax, eax
jmp 0x1006f81b
sbb eax, eax
or eax, 1
test eax, eax
je 0x1006f839
mov eax, dword [ebp - 0x68]
inc esi
sub eax, esi
push eax
push 0x61
push esi
call sub.VCRUNTIME140.dll_memchr
mov esi, eax
add esp, 0xc
test esi, esi
jne 0x1006f7d4
jmp 0x1006f845
sub esi, dword [ebp - 0x64]
cmp esi, 0xffffffff
jne 0x1006fa7f
mov esi, dword [ebp - 0x18]
mov al, byte [ebp - 0x59]
test al, al
lea ecx, [ebp - 0x28]
cmovne ecx, dword [ebp - 0x60]
mov dword [ebp - 0x68], ecx
cmp esi, 0xc
jb 0x1006f8fa
lea eax, [ecx - 0xb]
add eax, esi
mov dword [ebp - 0x64], eax
sub eax, ecx
push eax
push 0x75
push ecx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1006f8f7
nop dword [eax]
mov ecx, edi
mov edx, str.unifairy_x64
mov esi, 8
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1006f8a5
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1006f890
xor eax, eax
jmp 0x1006f8ca
cmp al, byte [edx]
jne 0x1006f8c5
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1006f8c5
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x1006f8c5
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x1006f8c5
xor eax, eax
jmp 0x1006f8ca
sbb eax, eax
or eax, 1
test eax, eax
je 0x1006f8e8
mov eax, dword [ebp - 0x64]
inc edi
sub eax, edi
push eax
push 0x75
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x1006f880
jmp 0x1006f8f4
sub edi, dword [ebp - 0x68]
cmp edi, 0xffffffff
jne 0x1006fa7f
mov esi, dword [ebp - 0x18]
mov al, byte [ebp - 0x59]
test al, al
lea ecx, [ebp - 0x28]
cmovne ecx, dword [ebp - 0x60]
mov dword [ebp - 0x68], ecx
cmp esi, 8
jb 0x1006f99a
lea eax, [ecx - 7]
add eax, esi
mov dword [ebp - 0x64], eax
sub eax, ecx
push eax
push 0x75
push ecx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x1006f99a
nop dword [eax + eax]
mov edx, edi
mov ecx, str.unifairy
mov esi, 4
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x1006f955
add edx, 4
add ecx, 4
sub esi, 4
jae 0x1006f940
xor eax, eax
jmp 0x1006f97a
cmp al, byte [ecx]
jne 0x1006f975
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x1006f975
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x1006f975
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x1006f975
xor eax, eax
jmp 0x1006f97a
sbb eax, eax
or eax, 1
test eax, eax
je 0x1006fa73
mov eax, dword [ebp - 0x64]
inc edi
sub eax, edi
push eax
push 0x75
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x1006f930
mov esi, dword [ebp - 0x60]
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x1006f9d4
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x1006f9ca
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006fa6d
push ecx
push esi
call fcn.101df293
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0x10
jb 0x1006fa1a
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006fa10
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006fa6d
push ecx
push edx
call fcn.101df293
add esp, 8
mov edi, dword [ebp - 0x84]
mov esi, dword [ebp - 0x6c]
inc edi
add esi, 0x24
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x6c], esi
cmp edi, dword [ebp - 0x74]
jb 0x1006f4f0
push dword [ebp - 0x7c]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor esi, esi
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0x1006fac1
mov edx, dword [ebp - 0x88]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1006fab7
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006fab7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
sub edi, dword [ebp - 0x68]
cmp edi, 0xffffffff
je 0x1006f99a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x64], esp
push 0x102782f4
call fcn.1004ee30
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.1004ee30
mov byte [ebp - 4], 2
call fcn.1006f140
mov esi, dword [ebp - 0x28]
add esp, 0x30
jmp 0x1006f99d
push edx
push ecx
call fcn.101df293
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101dee0e
mov esp, ebp
pop ebp
ret
call fcn.10054490
call fcn.100478d0
call fcn.10047970
int3