Function at 0x44e104
Capabilities:
Query service status
Start service

Disassembly:
push 0x19c
mov eax, 0x7b2985
call fcn.00720838
mov esi, dword [ebp + 8]
xor ebx, ebx
push ebx
mov dword [ebp - 0x1a4], esi
call fcn.0044da49
mov edi, eax
mov dword [ebp - 0x1a8], edi
pop ecx
test edi, edi
je 0x44e40d
lea eax, [ebp - 0x198]
push esi
push eax
call fcn.00409509
pop ecx
pop ecx
cmp dword [eax + 0x14], 8
jb 0x44e14c
mov eax, dword [eax]
push reloc.WS2_32.dll_recv
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edi, eax
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x1a0], edi
call fcn.004066fd
test edi, edi
je 0x44e39f
lea eax, [ebp - 0x19c]
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
je 0x44e334
mov eax, dword [ebp - 0x198]
cmp eax, 4
je 0x44e330
cmp eax, 7
je 0x44e2e6
cmp eax, 6
je 0x44e2e6
cmp eax, 2
je 0x44e2bf
cmp eax, 5
je 0x44e2bf
cmp eax, 1
je 0x44e25d
push dword [ebp + 0xc]
lea eax, [ebp - 0x1a0]
push 1
push esi
push eax
call fcn.0044e609
add esp, 0x10
test al, al
jne 0x44e257
push 1
push str.AgentErrors.log
lea ecx, [ebp - 0xc8]
call fcn.00404fa8
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 2
push str.Unable_to_start_service_
push eax
call fcn.00401ea3
pop ecx
pop ecx
push str._state.
push dword [ebp - 0x198]
mov ecx, eax
call fcn.0044d34e
add esp, 4
push eax
push str._as_it_is_stuck_in_the
push esi
push ecx
call fcn.00403f8c
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
lea ecx, [ebp - 0xc8]
call fcn.004052de
jmp 0x44e2db
mov edi, dword [ebp - 0x1a0]
push ebx
push ebx
push edi
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
test eax, eax
jne 0x44e2bf
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x1a4], eax
cmp eax, 0x420
je 0x44e330
call fcn.00405a2d
push 2
push eax
lea ecx, [ebp - 0xc8]
call fcn.00404fa8
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 1
push str.Failed_to_start_service_
push eax
call fcn.00401ea3
pop ecx
pop ecx
push dword [ebp - 0x1a4]
push str._due_to_error
push esi
jmp 0x44e374
cmp dword [ebp + 0xc], ebx
jbe 0x44e330
push dword [ebp + 0xc]
lea eax, [ebp - 0x1a0]
push 4
push esi
push eax
call fcn.0044e609
add esp, 0x10
mov bl, al
mov edi, dword [ebp - 0x1a0]
jmp 0x44e396
call fcn.00405a2d
push 2
push eax
lea ecx, [ebp - 0xc8]
call fcn.00404fa8
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], ebx
push str.Service_
push eax
call fcn.00401ea3
pop ecx
pop ecx
push str._started__but_in_a_paused_state.
push esi
push eax
call fcn.00403f8c
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
lea ecx, [ebp - 0xc8]
call fcn.004052de
mov bl, 1
jmp 0x44e396
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 1
push str.AgentErrors.log
lea ecx, [ebp - 0xc8]
mov esi, eax
call fcn.00404fa8
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 3
push str.Failed_to_query_service_
push eax
call fcn.00401ea3
pop ecx
pop ecx
push esi
push str._due_to_error
push dword [ebp - 0x1a4]
push eax
call fcn.00403f8c
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
mov ecx, eax
call fcn.00413514
lea ecx, [ebp - 0xc8]
call fcn.004052de
push edi
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x44e401
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 1
push str.AgentErrors.log
lea ecx, [ebp - 0x180]
mov esi, eax
call fcn.00404fa8
lea eax, [ebp - 0x180]
mov dword [ebp - 4], 4
push str.Failed_to_open_service_
push eax
call fcn.00401ea3
pop ecx
pop ecx
push esi
push str._so_that_it_can_be_started_due_to_error
push dword [ebp - 0x1a4]
push eax
call fcn.00403f8c
pop ecx
pop ecx
push eax
call fcn.00401ea3
pop ecx
pop ecx
mov ecx, eax
call fcn.00413514
lea ecx, [ebp - 0x180]
call fcn.004052de
push dword [ebp - 0x1a8]
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, bl
call fcn.007207e2
ret