Function at 0x448160
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
push eax
mov eax, 0x10d0
call fcn.0057e5f0
mov ecx, 0x3ff
sub esp, eax
lea edi, [ebp - 0x1008]
mov eax, dword [esp + eax]
mov dword [ebp - 0x10d4], edx
mov ebx, eax
mov dword [ebp - 0x10d0], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, 0x22
lea edi, [ebp - 0x1094]
mov dword [ebp - 0x10c8], 0
rep stosd dword es:[edi], eax
mov dword [ebp - 0x10c0], ebx
mov dword [ebp - 0x10c4], 0
mov dword [ebp - 0x100c], 0
cmp ebx, 3
jle 0x448523
mov eax, ebx
mov ebx, dword [edx + 0xc]
xor edi, edi
mov dword [ebp - 0x10cc], ebx
cmp eax, 4
jne 0x44856e
mov esi, dword [0x717c58]
mov dword [ebp - 0x10bc], edi
mov dword [ebp - 0x10ac], 0
mov ebx, dword [sym.imp.msvcrt.dll_strstr]
mov dword [esp + 4], str.attach
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x448581
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_DebugActiveProcess]
mov esi, dword [0x717c58]
push edx
mov dword [ebp - 0x10b0], eax
test eax, eax
je 0x44855a
mov dword [esp + 4], 0x59405e
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x44827a
lea eax, [ebp - 0x100c]
mov esi, str.processing_debug_messages_n
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea edx, [ebp - 0x100c]
mov ecx, 0x1b
add eax, edx
xor edx, edx
mov edi, eax
lea eax, [ebp - 0x1094]
rep movsb byte es:[edi], byte [esi]
call fcn.00447a90
cmp dword [ebp - 0x10d0], 5
jg 0x4485ae
mov dword [ebp - 0x10b4], 0
mov dword [ebp - 0x10d0], 0
mov esi, dword [0x717c58]
mov dword [ebp - 0x10b8], 1
mov eax, dword [sym.imp.kernel32.dll_SetEvent]
mov dword [ebp - 0x10d4], eax
mov dword [esp + 4], 0x59405e
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x44833b
mov ecx, 0x4e20
lea edx, [ebp - 0x1094]
mov eax, 0x22f
call fcn.00446690
mov eax, 0x230
call fcn.00443e00
mov eax, dword [ebp - 0x1090]
mov dword [esp + 4], str.dwDebugEventCode___ld_n
mov dword [esp + 8], eax
sub eax, 1
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov eax, 0x231
call fcn.00443e00
mov eax, dword [ebp - 0x1084]
mov dword [esp + 4], str.ExceptionCode___lx_n
cmp eax, 0xc0000005
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00444b30
mov eax, dword [ebp - 0x10cc]
test eax, eax
je 0x448356
lea ecx, [ebp - 0x10c4]
lea edx, [ebp - 0x10c8]
call fcn.00443c00
mov esi, dword [0x717c58]
mov dword [esp + 4], str.order
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x4483b3
lea eax, [ebp - 0x100c]
mov esi, str.waiting_for_the_start_signal..._n
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea ecx, [ebp - 0x100c]
add eax, ecx
mov ecx, 0x21
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x10c8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov esi, dword [0x717c58]
push ecx
push ecx
mov dword [ebp - 0x10a4], 0
mov dword [esp + 4], str.nokill
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x44859f
xor edi, edi
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_DebugSetProcessKillOnExit]
mov esi, dword [0x717c58]
push edx
mov dword [ebp - 0x10a8], eax
test eax, eax
je 0x448546
mov dword [ebp - 0x109c], 0
mov dword [esp + 4], str.detach
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x448590
mov eax, dword [ebp - 0x10bc]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_DebugActiveProcessStop]
push esi
mov dword [ebp - 0x10a0], eax
test eax, eax
je 0x448532
lea eax, [ebp - 0x100c]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ecx, dword [ebp - 0x10d0]
mov esi, eax
test ecx, ecx
je 0x4484a0
mov eax, dword [0x717c58]
mov dword [esp + 4], str.late
mov eax, dword [eax + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x4484a0
lea ebx, [ebp - 0x100c]
mov ecx, 0xf
lea eax, [ebx + esi]
mov esi, str.setting_event_n
mov edi, eax
mov eax, dword [ebp - 0x10d0]
rep movsb byte es:[edi], byte [esi]
mov dword [esp], eax
mov eax, dword [ebp - 0x10d4]
call eax
push edx
mov dword [ebp - 0x10b8], eax
test eax, eax
je 0x448653
nop
lea eax, [ebp - 0x100c]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
lea ecx, [ebp - 0x100c]
mov edi, dword [ebp - 0x10cc]
add eax, ecx
mov dword [eax + 0xc], 0x2e2e676e
mov dword [eax], 0x656e6f64
mov dword [eax + 4], 0x62656420
mov dword [eax + 8], 0x69676775
mov dword [eax + 0xf], 0xa2e2e
test edi, edi
je 0x448502
mov eax, dword [0x8f075c]
lea edx, [ebp - 0x10c0]
mov dword [ebp - 0x1098], eax
mov eax, edi
mov dword [esp], ecx
mov ecx, 0x2c
call fcn.004456f0
mov eax, dword [ebp - 0x10c4]
mov dword [esp], eax
mov eax, dword [ebp - 0x10d4]
call eax
sub esp, 4
mov dword [esp], 0xdeadbeef
call dword [sym.imp.kernel32.dll_ExitProcess]
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x10cc], ecx
jmp 0x4481e3
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x109c], eax
jmp 0x448435
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x10a4], eax
jmp 0x4483f5
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x10ac], eax
jmp 0x448235
mov eax, dword [edx + 0x10]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll_atol]
mov edi, eax
jmp 0x4481e3
mov dword [ebp - 0x10b0], 1
jmp 0x448235
mov dword [ebp - 0x10a0], 1
jmp 0x448435
mov dword [ebp - 0x10a8], 1
jmp 0x4483f5
mov eax, dword [ebp - 0x10d4]
xor edi, edi
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll_atol]
mov dword [ebp - 0x10b4], edi
test eax, eax
je 0x448291
mov esi, dword [0x717c58]
mov dword [ebp - 0x10d0], eax
mov dword [esp + 4], str.event
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
test eax, eax
je 0x4482a1
lea ecx, [ebp - 0x100c]
mov esi, str.setting_event_n
mov dword [esp], ecx
call sub.msvcrt.dll_strlen
lea ecx, [ebp - 0x100c]
add eax, ecx
mov ecx, 0xf
mov edi, eax
mov eax, dword [ebp - 0x10d0]
rep movsb byte es:[edi], byte [esi]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_SetEvent]
mov dword [ebp - 0x10d4], eax
call eax
push esi
mov dword [ebp - 0x10b8], eax
test eax, eax
jne 0x448648
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x10b4], eax
mov esi, dword [0x717c58]
jmp 0x4482b6
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x10b4], eax
jmp 0x4484a0