Function at 0x4286d0
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push esi
mov esi, dword [ebp + 8]
test esi, esi
jne 0x4286f7
push str.VNLQueryServiceRunningStatus:_invalid_parameter
push 1
call fcn.004343f0
add esp, 8
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push edi
push esi
push str.VNLQueryServiceRunningStatus:_Attempting_to_query_service:__S
push 0x20
call fcn.004343f0
add esp, 0xc
push 0x20000
push str.ServicesActive
push 0
call dword [0x465034]
mov edi, eax
test edi, edi
jne 0x4287c8
call dword [0x4651b0]
cmp eax, 5
je 0x4287a2
cmp eax, 0x57
je 0x42877c
cmp eax, 0x429
je 0x428756
push eax
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_0x_08X
push 1
call fcn.004343f0
add esp, 0xc
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_ERROR_DATABASE_DOES_NOT_EXIST
push 1
call fcn.004343f0
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_system_config_appears_to_be_corrupt
push 1
call fcn.004343f0
add esp, 0x10
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_ERROR_INVALID_PARAMETER
push 1
call fcn.004343f0
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_system_config_appears_to_be_corrupt
push 1
call fcn.004343f0
add esp, 0x10
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_ERROR_ACCESS_DENIED
push 1
call fcn.004343f0
push str.VNLQueryServiceRunningStatus:_Service_Manager_open_failed:_you_must_be_an_administrator
push 1
call fcn.004343f0
add esp, 0x10
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_Manager_successfully_opened
push 0x10
call fcn.004343f0
add esp, 8
push 4
push esi
push edi
call dword [0x465038]
mov esi, eax
test esi, esi
jne 0x42885f
call dword [0x4651b0]
cmp eax, 0x7b
ja 0x428815
je 0x42880e
mov ecx, eax
sub ecx, 5
je 0x428807
sub ecx, 1
jne 0x42881c
push str.VNLQueryServiceRunningStatus:_Service_could_not_be_opened:_ERROR_INVALID_HANDLE
jmp 0x428843
push str.VNLQueryServiceRunningStatus:_Service_could_not_be_opened:_ERROR_ACCESS_DENIED
jmp 0x428843
push str.VNLQueryServiceRunningStatus:_Service_could_not_be_opened:_ERROR_INVALID_NAME
jmp 0x428843
cmp eax, 0x424
je 0x42883e
push eax
push str.VNLQueryServiceRunningStatus:_Service_could_not_be_opened:_0x_08x
push 1
call fcn.004343f0
add esp, 0xc
push edi
call dword [0x46503c]
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_could_not_be_opened:_ERROR_SERVICE_DOES_NOT_EXIST
push 1
call fcn.004343f0
add esp, 8
push edi
call dword [0x46503c]
pop edi
mov eax, 0x8420
pop esi
mov esp, ebp
pop ebp
ret
push str.VNLQueryServiceRunningStatus:_Service_successfully_opened
push 0x10
call fcn.004343f0
add esp, 8
lea eax, [ebp - 0x1c]
push eax
push esi
call dword [0x465044]
test eax, eax
jne 0x4288a7
call dword [0x4651b0]
push eax
push str.VNLQueryServiceRunningStatus:_Could_not_query_service_status:_0x_08x
push 1
call fcn.004343f0
add esp, 0xc
push esi
mov esi, dword [0x46503c]
call esi
push edi
call esi
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
push esi
mov esi, dword [0x46503c]
call esi
push edi
call esi
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
push ecx
push edx
call fcn.004269c0
add esp, 4
push eax
push str.VNLQueryServiceRunningStatus:_service_status:__s_cp0x_08x
push 0x20
call fcn.004343f0
mov eax, dword [ebp - 0x18]
dec eax
add esp, 0x10
cmp eax, 6
ja case.default.0x4288e0
jmp dword [eax*4 + 0x428934]
pop edi
mov eax, 0x8404
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x8405
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x8408
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x8409
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x840a
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x8411
pop esi
mov esp, ebp
pop ebp
ret
pop edi
mov eax, 0x8410
pop esi
mov esp, ebp
pop ebp
ret