Function at 0x412d40
Capabilities:
Accept command line arguments
Create thread
Query environment variable
Set environment variable

Disassembly:
push ecx
push ebx
push esi
push edi
push str.PB_DEBUGGER_Communication
mov dword [0x438064], 0
call sub.MSVCRT.dll_getenv
mov edi, eax
add esp, 4
test edi, edi
je 0x412e4b
push 0x3b
push edi
call sub.MSVCRT.dll_strchr
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x412d7c
mov byte [ebx], 0
inc ebx
jmp 0x412d81
mov ebx, 0x4291fc
xor esi, esi
mov eax, dword [esi*4 + 0x436500]
mov ecx, edi
mov eax, dword [eax]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x412db0
test dl, dl
je 0x412dac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x412db0
add eax, 2
add ecx, 2
test dl, dl
jne 0x412d90
xor eax, eax
jmp 0x412db5
sbb eax, eax
or eax, 1
test eax, eax
je 0x412dc4
inc esi
cmp esi, 4
jb 0x412d83
jmp 0x413161
mov eax, dword [esi*4 + 0x436500]
mov dword [0x4388a4], eax
test ebx, ebx
je 0x413176
mov eax, dword [eax + 8]
push ebx
call eax
add esp, 4
test eax, eax
je 0x413176
mov eax, dword [esi*4 + 0x436500]
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov dword [0x438064], 1
cmp dword [eax + 4], 0
jne 0x412e42
push str.PB_DEBUGGER_Options
call sub.MSVCRT.dll_getenv
add esp, 4
test eax, eax
je 0x412e42
push 0x43888c
push 0x438070
push 0x43806c
push 0x438068
push str._d__d__d__d
push eax
call sub.MSVCRT.dll_sscanf
add esp, 0x18
push 0
push str.PB_DEBUGGER_Options
call esi
push 0
push str.PB_DEBUGGER_Communication
call esi
push ebp
mov dword [0x438ca8], 0
mov ebp, 0x4291fc
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
test eax, eax
je 0x4130ab
mov edx, dword [0x43bc68]
nop
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx], cl
lea edx, [edx + 1]
test cl, cl
jne 0x412e70
mov ebx, dword [0x43bc68]
mov ecx, ebx
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x412e90
sub ecx, edx
lea ebp, [ebx + 1]
add ebp, ecx
mov byte [ebp], al
cmp byte [ebx], al
je 0x4130ab
lea esp, [esp]
cmp byte [ebx], 0x20
jne 0x412ebb
inc ebx
cmp byte [ebx], 0x20
je 0x412eb5
cmp byte [ebx], 0
je 0x4130ab
mov esi, ebx
cmp byte [ebx], 0x20
je 0x412ed1
inc ebx
cmp byte [ebx], 0
jne 0x412ec6
cmp byte [ebx], 0
je 0x412eda
mov byte [ebx], 0
inc ebx
push 0x42ba0c
push esi
call sub.MSVCRT.dll__stricmp
add esp, 8
test eax, eax
je 0x413098
push 0x42ba1c
push esi
call sub.MSVCRT.dll__stricmp
add esp, 8
test eax, eax
je 0x413098
push 0xd
push str._DEBUGLISTEN
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x412f42
lea ecx, [esi + 0xd]
mov dword [0x438ca8], 0x436c40
mov edx, ebp
sub edx, ecx
jmp 0x412f30
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x412f30
jmp 0x4130a2
push 0xe
push str.__debuglisten
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x412f79
lea ecx, [esi + 0xe]
mov dword [0x438ca8], 0x436c40
mov edx, ebp
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x412f67
jmp 0x4130a2
push 0xe
push str._DEBUGCONNECT
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x412fb2
lea ecx, [esi + 0xe]
mov dword [0x438ca8], 0x436c58
mov edx, ebp
sub edx, ecx
mov edi, edi
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x412fa0
jmp 0x4130a2
push 0xf
push str.__debugconnect
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x412fe9
lea ecx, [esi + 0xf]
mov dword [0x438ca8], 0x436c58
mov edx, ebp
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x412fd7
jmp 0x4130a2
push 0xa
push str._PASSWORD
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x41303c
lea edi, [ebp - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x413000
mov ax, word [0x42ba78]
lea edx, [esi + 0xa]
mov word [edi], ax
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x413018
sub edx, esi
lea edi, [ebp - 1]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x413024
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4130a2
push 0xb
push str.__password
push esi
call sub.MSVCRT.dll__strnicmp
add esp, 0xc
test eax, eax
jne 0x4130a2
lea edi, [ebp - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x413053
mov ax, word [0x42ba78]
lea edx, [esi + 0xb]
mov word [edi], ax
mov esi, edx
jmp 0x413070
mov al, byte [edx]
inc edx
test al, al
jne 0x413070
sub edx, esi
lea edi, [ebp - 1]
lea esp, [esp]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x413080
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4130a2
mov dword [0x438ca8], 0x436c40
cmp byte [ebx], 0
jne 0x412eb0
mov eax, dword [0x438ca8]
test eax, eax
je 0x4130db
mov eax, dword [eax + 8]
push ebp
call eax
add esp, 4
test eax, eax
je 0x41318b
mov eax, dword [0x438ca8]
mov dword [0x4388a4], eax
mov dword [0x438064], 1
jmp 0x4130e8
cmp dword [0x438064], 0
je 0x41315b
mov eax, dword [0x43888c]
mov dword [0x438888], eax
xor eax, eax
cmp dword [0x438068], eax
setne al
inc eax
mov dword [0x44d5f8], eax
call fcn.00415120
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x43b480
call esi
push 0x447cd0
call esi
push 0x43bc70
call esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x412550
push 0
push 0
call esi
mov dword [0x43889c], eax
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4124f0
push 0
push 0
call esi
mov dword [0x4388a0], eax
pop ebp
pop edi
pop esi
pop ebx
pop ecx
ret
push edi
push str._Fatal_Debugger_Error__No_communication_plugin_found_for___s_._n_n
call sub.MSVCRT.dll_printf
add esp, 8
push 1
call sub.MSVCRT.dll_exit
push edi
push str._Fatal_Debugger_Error__Communication_plugin_failed_to_connect:___s_._n_n
call sub.MSVCRT.dll_printf
add esp, 8
push 1
call sub.MSVCRT.dll_exit
push 1
call sub.MSVCRT.dll_exit
int3