Function at 0x444ac0
Capabilities:
Accept command line arguments
Create thread
Encode data using xor
Hash data with crc32
Set environment variable

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push str.PB_DEBUGGER_Communication
mov dword [0x4df5a8], 0
call fcn.00478832
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x444bc6
push 0x3b
push ebx
call fcn.0041d450
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x444afe
mov byte [ebp], 0
inc ebp
jmp 0x444b03
mov ebp, section..rdata
xor esi, esi
mov edi, dword [esi*4 + 0x4d9070]
mov ecx, ebx
mov eax, dword [edi]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x444b30
test dl, dl
je 0x444b2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x444b30
add eax, 2
add ecx, 2
test dl, dl
jne 0x444b10
xor eax, eax
jmp 0x444b35
sbb eax, eax
or eax, 1
test eax, eax
je 0x444b45
inc esi
cmp esi, 4
jae 0x444f83
jmp 0x444b05
mov dword [0x4dfdec], edi
test ebp, ebp
je 0x444f98
mov eax, dword [edi + 8]
push ebp
call eax
add esp, 4
test eax, eax
je 0x444f98
mov eax, dword [esi*4 + 0x4d9070]
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov dword [0x4df5a8], 1
cmp dword [eax + 4], 0
jne 0x444bbd
push str.PB_DEBUGGER_Options
call fcn.00478832
add esp, 4
test eax, eax
je 0x444bbd
push 0x4dfdd4
push 0x4df5b4
push 0x4df5b0
push 0x4df5ac
push str._d__d__d__d
push eax
call fcn.00447240
add esp, 0x18
push 0
push str.PB_DEBUGGER_Options
call esi
push 0
push str.PB_DEBUGGER_Communication
call esi
mov dword [0x4e01f0], 0
mov ebp, section..rdata
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
test eax, eax
je 0x444e2c
mov edx, dword [0x4e3710]
nop dword [eax]
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx], cl
lea edx, [edx + 1]
test cl, cl
jne 0x444bf0
mov ebx, dword [0x4e3710]
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x444c10
sub ecx, edx
lea ebp, [ebx + 1]
add ebp, ecx
mov byte [ebp], al
mov al, byte [ebx]
test al, al
je 0x444e2c
nop dword [eax + eax]
cmp al, 0x20
jne 0x444c44
mov al, byte [ebx + 1]
inc ebx
cmp al, 0x20
je 0x444c34
test al, al
je 0x444e22
mov esi, ebx
lea ecx, [ebx]
lea ebx, [ecx + 1]
cmp al, 0x20
je 0x444c57
mov al, byte [ebx]
test al, al
jne 0x444c46
jmp 0x444c5a
mov byte [ecx], 0
push 0x4af33c
push esi
call fcn.00475677
add esp, 8
test eax, eax
je 0x444e18
push 0x4af34c
push esi
call fcn.00475677
add esp, 8
test eax, eax
je 0x444e18
push 0xd
push str._DEBUGLISTEN
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444cc2
lea ecx, [esi + 0xd]
mov dword [0x4e01f0], 0x4d9780
mov edx, ebp
sub edx, ecx
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x444cb0
jmp 0x444e22
push 0xe
push str.__debuglisten
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444cf9
lea ecx, [esi + 0xe]
mov dword [0x4e01f0], 0x4d9780
mov edx, ebp
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x444ce7
jmp 0x444e22
push 0xe
push str._DEBUGCONNECT
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444d32
lea ecx, [esi + 0xe]
mov dword [0x4e01f0], 0x4d9798
mov edx, ebp
sub edx, ecx
nop
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x444d20
jmp 0x444e22
push 0xf
push str.__debugconnect
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444d69
lea ecx, [esi + 0xf]
mov dword [0x4e01f0], 0x4d9798
mov edx, ebp
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + edx - 1], al
test al, al
jne 0x444d57
jmp 0x444e22
push 0xa
push str._PASSWORD
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444dbc
lea edi, [ebp - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x444d80
mov ax, word [0x4af3a8]
lea edx, [esi + 0xa]
mov word [edi], ax
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x444d98
sub edx, esi
lea edi, [ebp - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x444da4
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x444e22
push 0xb
push str.__password
push esi
call fcn.004178ae
add esp, 0xc
test eax, eax
jne 0x444e22
lea edi, [ebp - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x444dd3
mov ax, word [0x4af3a8]
lea edx, [esi + 0xb]
mov word [edi], ax
mov esi, edx
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x444df0
sub edx, esi
lea edi, [ebp - 1]
nop dword [eax]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x444e00
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x444e22
mov dword [0x4e01f0], 0x4d9780
mov al, byte [ebx]
test al, al
jne 0x444c30
mov eax, dword [0x4e01f0]
test eax, eax
je 0x444e5c
mov eax, dword [eax + 8]
push ebp
call eax
add esp, 4
test eax, eax
je 0x444f91
mov eax, dword [0x4e01f0]
mov dword [0x4dfdec], eax
mov dword [0x4df5a8], 1
jmp 0x444e69
cmp dword [0x4df5a8], 0
je 0x444f7d
mov eax, dword [0x4dfdd4]
mov dword [0x4dfdd0], eax
xor eax, eax
cmp dword [0x4df5ac], eax
setne al
inc eax
xor esi, esi
mov dword [0x4ef790], eax
mov ecx, esi
mov eax, esi
shr ecx, 1
mov edx, ecx
xor edx, 0xedb88320
test al, 1
cmove edx, ecx
mov eax, edx
shr eax, 1
mov ecx, eax
xor ecx, 0xedb88320
test dl, 1
cmove ecx, eax
mov eax, ecx
shr eax, 1
mov edx, eax
xor edx, 0xedb88320
test cl, 1
cmove edx, eax
mov eax, edx
shr eax, 1
mov ecx, eax
xor ecx, 0xedb88320
test dl, 1
cmove ecx, eax
mov eax, ecx
shr eax, 1
mov edx, eax
xor edx, 0xedb88320
test cl, 1
cmove edx, eax
mov eax, edx
shr eax, 1
mov ecx, eax
xor ecx, 0xedb88320
test dl, 1
cmove ecx, eax
mov eax, ecx
shr eax, 1
mov edx, eax
xor edx, 0xedb88320
test cl, 1
cmove edx, eax
mov ecx, edx
shr ecx, 1
mov eax, ecx
xor eax, 0xedb88320
test dl, 1
cmove eax, ecx
mov dword [esi*4 + 0x4dfdf0], eax
inc esi
cmp esi, 0x100
jl 0x444e86
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x4e2f28
call esi
push 0x4ef778
call esi
push 0x4e371c
call esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4442f0
push 0
push 0
call esi
mov dword [0x4dfde4], eax
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x444290
push 0
push 0
call esi
mov dword [0x4dfde8], eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push ebx
push str._Fatal_Debugger_Error__No_communication_plugin_found_for___s_._n_n
call fcn.00437920
add esp, 8
push 1
call fcn.004075d4
push ebx
push str._Fatal_Debugger_Error__Communication_plugin_failed_to_connect:___s_._n_n
call fcn.00437920
add esp, 8
push 1
call fcn.004075d4
int3