Function at 0x46bac8
Capabilities:
Get graphical window text
Query service status

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x20
push 0
push 0
dec ecx
jne 0x46bad1
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 3], cl
mov byte [ebp - 2], dl
mov byte [ebp - 1], al
xor eax, eax
push ebp
push 0x46c35d
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00469254
mov byte [ebp - 5], 0
mov byte [ebp - 4], 0
mov byte [ebp - 0x15], 0
cmp dword [0x47c6ac], 0
jne 0x46bb67
mov dl, 1
mov eax, dword [0x4212f8]
call fcn.00421364
mov dword [0x47c6ac], eax
mov dl, 1
mov eax, dword [0x416b10]
call fcn.004040b8
mov dword [0x47c6b0], eax
xor edx, edx
mov eax, dword [0x47c6b0]
call fcn.0041b25c
mov dl, 1
mov eax, dword [0x416b10]
call fcn.004040b8
mov dword [0x47c6b4], eax
mov dl, 1
mov eax, dword [0x416b10]
call fcn.004040b8
mov dword [0x47c6c0], eax
mov byte [0x47c6c4], 1
mov al, byte [ebp - 2]
call fcn.0046c404
cmp byte [0x47c6c4], 0
je 0x46be3e
mov eax, dword [0x47c6ac]
mov dword [eax + 0x10], 0x80000002
push 0
lea eax, [ebp - 0x3c]
call fcn.0046af3c
mov eax, dword [ebp - 0x3c]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.004214e4
test al, al
je 0x46be3e
mov eax, dword [0x47c6b4]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x47c6b0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [0x47c6b0]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.00421b80
mov eax, dword [0x47c6b0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46be37
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], 0
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x44]
mov ecx, 6
mov edx, 1
call fcn.004054ec
mov eax, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0x48]
call fcn.0046afb8
mov edx, dword [ebp - 0x48]
pop eax
call fcn.00409188
test al, al
jne 0x46bc6a
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x50]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x50]
mov ecx, 5
mov edx, 1
call fcn.004054ec
mov eax, dword [ebp - 0x4c]
push eax
lea eax, [ebp - 0x54]
call fcn.0046b034
mov edx, dword [ebp - 0x54]
pop eax
call fcn.00409188
test al, al
je 0x46bc8c
lea ecx, [ebp - 0x58]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x58]
mov eax, dword [0x47c6b4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x46bd7c
push 0
lea eax, [ebp - 0x60]
call fcn.0046af3c
push dword [ebp - 0x60]
push 0x46c378
lea ecx, [ebp - 0x64]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x64]
lea eax, [ebp - 0x5c]
mov edx, 3
call fcn.0040534c
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.004214e4
test al, al
je 0x46bd7c
push 0
push 0x46c384
mov eax, dword [0x47c6ac]
push eax
call fcn.004215ac
test al, al
je 0x46bd7c
push 0x46c384
mov eax, dword [0x47c6ac]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00421654
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.00408ef0
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x70]
call fcn.0046b398
mov eax, dword [ebp - 0x70]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46bd7c
push 0x46c384
mov eax, dword [0x47c6ac]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00421654
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.00408ef0
mov eax, dword [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
call fcn.0046b414
mov eax, dword [ebp - 0x7c]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46bd7c
lea ecx, [ebp - 0x80]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x47c6b4]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea ecx, [ebp - 0x88]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x84]
call fcn.00408f8c
mov eax, dword [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
call fcn.0046b8ec
mov eax, dword [ebp - 0x8c]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46be2b
lea ecx, [ebp - 0x94]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.00408f8c
mov eax, dword [ebp - 0x90]
push eax
lea eax, [ebp - 0x98]
call fcn.0046b968
mov eax, dword [ebp - 0x98]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46be2b
lea ecx, [ebp - 0x9c]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x47c6c0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xc]
dec dword [ebp - 0x1c]
jne 0x46bbec
mov byte [0x47c6c4], 0
mov eax, dword [0x47c6b4]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp eax, 0
jl 0x46be90
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xa0]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa0]
call fcn.0040548c
mov dl, 1
call fcn.0046b9e4
test al, al
je 0x46be87
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6b4]
mov ecx, dword [eax]
call dword [ecx + 0x48]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffff
jne 0x46be51
cmp byte [ebp - 3], 0
je 0x46bedd
mov eax, dword [0x47c6c0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46bedd
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], 0
lea ecx, [ebp - 0xa4]
mov edx, dword [ebp - 0xc]
mov eax, dword [0x47c6c0]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0xa4]
call fcn.0040548c
xor edx, edx
call fcn.0046b9e4
inc dword [ebp - 0xc]
dec dword [ebp - 0x1c]
jne 0x46beb0
lea eax, [ebp - 0xa8]
call fcn.0046b604
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x47c6b0]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jl 0x46bfd9
push 0xf003f
push 0
push 0
call sub.advapi32.dll_OpenSCManagerA
mov dword [ebp - 0x10], eax
push 4
lea eax, [ebp - 0xac]
call fcn.0046b604
mov eax, dword [ebp - 0xac]
call fcn.0040548c
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_OpenServiceA
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x46bf45
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_CloseServiceHandle
cmp dword [ebp - 0x10], 0
jbe 0x46bfc7
cmp dword [ebp - 0x14], 0
jbe 0x46bfc7
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_QueryServiceStatus
cmp dword [ebp - 0x34], 1
je 0x46bfc7
mov eax, dword [0x47c6ac]
mov dword [eax + 0x10], 0x80000002
push 1
lea eax, [ebp - 0xb0]
call fcn.0046b6fc
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xb4]
call fcn.0046b778
mov edx, dword [ebp - 0xb4]
pop eax
call fcn.00405294
mov eax, dword [ebp - 0xb0]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.004214e4
test al, al
je 0x46bfc7
push 1
push 0x46c398
mov eax, dword [0x47c6ac]
push eax
call fcn.004218d8
mov byte [ebp - 5], 1
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_CloseServiceHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_CloseServiceHandle
mov eax, dword [0x47c6ac]
mov dword [eax + 0x10], 0x80000002
push 0
lea eax, [ebp - 0xbc]
call fcn.0046af3c
push dword [ebp - 0xbc]
push 0x46c378
lea eax, [ebp - 0xc0]
call fcn.0046b680
push dword [ebp - 0xc0]
lea eax, [ebp - 0xb8]
mov edx, 3
call fcn.0040534c
mov eax, dword [ebp - 0xb8]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.004214e4
test al, al
je 0x46c111
push 0xf003f
push 0
push 0
call sub.advapi32.dll_OpenSCManagerA
mov dword [ebp - 0x10], eax
push 4
lea eax, [ebp - 0xc4]
call fcn.0046b680
mov eax, dword [ebp - 0xc4]
call fcn.0040548c
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_OpenServiceA
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x46c07d
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_CloseServiceHandle
cmp dword [ebp - 0x10], 0
jbe 0x46c0ff
cmp dword [ebp - 0x14], 0
jbe 0x46c0ff
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_QueryServiceStatus
cmp dword [ebp - 0x34], 4
jne 0x46c0ff
mov eax, dword [0x47c6ac]
mov dword [eax + 0x10], 0x80000002
push 1
lea eax, [ebp - 0xc8]
call fcn.0046b6fc
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xcc]
call fcn.0046b7f4
mov edx, dword [ebp - 0xcc]
pop eax
call fcn.00405294
mov eax, dword [ebp - 0xc8]
push eax
mov eax, dword [0x47c6ac]
push eax
call fcn.004214e4
test al, al
je 0x46c0ff
push 1
push 0x46c398
mov eax, dword [0x47c6ac]
push eax
call fcn.004218d8
mov byte [ebp - 5], 1
mov eax, dword [ebp - 0x14]
push eax
call sub.advapi32.dll_CloseServiceHandle
mov eax, dword [ebp - 0x10]
push eax
call sub.advapi32.dll_CloseServiceHandle
call sub.user32.dll_GetForegroundWindow
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x46c33f
mov dl, 1
mov eax, dword [ebp - 0x10]
call fcn.0046a618
push 0xff
mov eax, 0x47c6a0
call fcn.004054e4
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_GetWindowTextA
push 0xff
mov eax, 0x47c6a4
call fcn.004054e4
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_GetClassNameA
mov eax, 0x47c6a0
call fcn.004054e4
lea edx, [ebp - 0xd4]
call fcn.00409e08
mov eax, dword [ebp - 0xd4]
lea edx, [ebp - 0xd0]
call fcn.00408ef0
mov eax, dword [ebp - 0xd0]
push eax
lea eax, [ebp - 0xd8]
call fcn.0046acd0
mov eax, dword [ebp - 0xd8]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46c1ab
mov byte [ebp - 0x15], 1
cmp byte [ebp - 0x15], 0
jne 0x46c1fd
mov eax, 0x47c6a0
call fcn.004054e4
lea edx, [ebp - 0xe0]
call fcn.00409e08
mov eax, dword [ebp - 0xe0]
lea edx, [ebp - 0xdc]
call fcn.00408ef0
mov eax, dword [ebp - 0xdc]
push eax
lea eax, [ebp - 0xe4]
call fcn.0046ad4c
mov eax, dword [ebp - 0xe4]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46c1fd
mov byte [ebp - 0x15], 1
cmp byte [ebp - 0x15], 0
jne 0x46c29b
mov eax, 0x47c6a0
call fcn.004054e4
lea edx, [ebp - 0xec]
call fcn.00409e08
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0xe8]
call fcn.00408ef0
mov eax, dword [ebp - 0xe8]
push eax
lea eax, [ebp - 0xf0]
call fcn.0046adc8
mov eax, dword [ebp - 0xf0]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46c29b
mov eax, 0x47c6a0
call fcn.004054e4
lea edx, [ebp - 0xf8]
call fcn.00409e08
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
call fcn.00408ef0
mov eax, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xfc]
call fcn.0046ae44
mov eax, dword [ebp - 0xfc]
pop edx
call fcn.004055d0
test eax, eax
jle 0x46c29b
mov byte [ebp - 0x15], 1
cmp byte [ebp - 0x15], 0
jne 0x46c2ec
mov eax, 0x47c6a0
call fcn.004054e4
lea edx, [ebp - 0x104]
call fcn.00409e08
mov eax, dword [ebp - 0x104]
lea edx, [ebp - 0x100]
call fcn.00408f8c
mov eax, dword [ebp - 0x100]
push eax
lea eax, [ebp - 0x108]
call fcn.0046aec0
mov eax, dword [ebp - 0x108]
pop edx
call fcn.004055d0
dec eax
jne 0x46c2ec
mov byte [ebp - 0x15], 1
cmp byte [ebp - 0x15], 0
je 0x46c32f
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.user32.dll_GetWindowThreadProcessId
xor eax, eax
push ebp
push 0x46c325
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x14], 0
je 0x46c31b
lea eax, [ebp - 0x14]
call fcn.0046c748
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x46c32f
mov al, byte [ebp - 5]
and al, byte [ebp - 1]
je 0x46c33f
call fcn.0046cc28
mov byte [ebp - 4], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46c364
lea eax, [ebp - 0x108]
mov edx, 0x34
call fcn.00404fec
ret