Function at 0x482200
Capabilities:
Delete service
Print debug messages
Stop service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe74
mov eax, dword [0x6385e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov byte [ebp - 9], 0
push 0xf003f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x482270
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CrusaderService:_OpenSCManager___failed___d__r_n
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.0054e0f2
add esp, 0x10
lea ecx, [ebp - 0x218]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea edx, [ebp - 0x218]
push edx
call fcn.0054eca8
add esp, 4
jmp 0x482465
movzx eax, byte [ebp + 8]
test eax, eax
je 0x482284
mov dword [ebp - 0xe74], str.HitmanPro35CrusaderBoot
jmp 0x48228e
mov dword [ebp - 0xe74], str.HitmanPro35Crusader
mov ecx, dword [ebp - 0xe74]
mov dword [ebp - 0x21c], ecx
push 0x20010000
mov edx, dword [ebp - 0x21c]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x482342
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x424
jne 0x482301
push str.CrusaderService:_Service_does_not_exists_r_n
push 0x104
lea ecx, [ebp - 0x428]
push ecx
call fcn.0054e0f2
add esp, 0xc
lea edx, [ebp - 0x428]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x428]
push eax
call fcn.0054eca8
add esp, 4
jmp 0x48233d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CrusaderService:_OpenService___failed___d__r_n
push 0x104
lea ecx, [ebp - 0x630]
push ecx
call fcn.0054e0f2
add esp, 0x10
lea edx, [ebp - 0x630]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x630]
push eax
call fcn.0054eca8
add esp, 4
jmp 0x48245b
lea ecx, [ebp - 0x64c]
push ecx
push 1
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.ADVAPI32.dll_ControlService]
test eax, eax
jne 0x482397
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CrusaderService:_ControlService___failed_with__d_r_n
push 0x104
lea eax, [ebp - 0x858]
push eax
call fcn.0054e0f2
add esp, 0x10
lea ecx, [ebp - 0x858]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea edx, [ebp - 0x858]
push edx
call fcn.0054eca8
add esp, 4
jmp 0x4823cc
push str.CrusaderService:_Stopped_r_n
push 0x104
lea eax, [ebp - 0xa60]
push eax
call fcn.0054e0f2
add esp, 0xc
lea ecx, [ebp - 0xa60]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea edx, [ebp - 0xa60]
push edx
call fcn.0054eca8
add esp, 4
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.ADVAPI32.dll_DeleteService]
test eax, eax
jne 0x482418
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CrusaderService:_DeleteService___failed___d__r_n
push 0x104
lea ecx, [ebp - 0xc68]
push ecx
call fcn.0054e0f2
add esp, 0x10
lea edx, [ebp - 0xc68]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0xc68]
push eax
call fcn.0054eca8
add esp, 4
jmp 0x482451
push str.CrusaderService:_Deleted_r_n
push 0x104
lea ecx, [ebp - 0xe70]
push ecx
call fcn.0054e0f2
add esp, 0xc
lea edx, [ebp - 0xe70]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0xe70]
push eax
call fcn.0054eca8
add esp, 4
mov byte [ebp - 9], 1
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov al, byte [ebp - 9]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0054d4f5
mov esp, ebp
pop ebp
ret