Function at 0x44e180
Capabilities:
Read file on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x134], 0
push 0x104
lea eax, [ebp - 0x108]
push eax
mov ecx, dword [0x45cea0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
push 0
push 3
push 0
push 3
push 0x80000000
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x24
cmp dword [eax + 0x44d134], 0
je 0x44e343
mov ecx, dword [ebp - 0x114]
imul ecx, ecx, 0x24
mov edx, dword [0x45cea0]
add edx, dword [ecx + 0x44d134]
mov dword [ebp - 0x150], edx
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x24
mov ecx, dword [eax + 0x44d13c]
push ecx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x150], eax
push 0
push 0
mov edx, dword [ebp - 0x114]
imul edx, edx, 0x24
mov eax, dword [edx + 0x44d138]
push eax
mov ecx, dword [ebp - 0x120]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
lea edx, [ebp - 0x124]
push edx
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x24
mov ecx, dword [eax + 0x44d13c]
push ecx
mov edx, dword [ebp - 0x150]
push edx
mov eax, dword [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x114]
imul ecx, ecx, 0x24
mov edx, dword [ecx + 0x44d140]
push edx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
push eax
mov ecx, dword [ebp - 0x150]
push ecx
call fcn.0044dd20
add esp, 8
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x134], edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x24
mov ecx, dword [eax + 0x44d140]
push ecx
mov edx, dword [ebp - 0x134]
push edx
mov eax, dword [ebp - 0x114]
imul eax, eax, 0x24
add eax, 0x44d144
push eax
call fcn.004538b0
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x114]
imul ecx, ecx, 0x24
mov edx, dword [ecx + 0x44d13c]
push edx
push 0xcc
mov eax, dword [ebp - 0x134]
push eax
call fcn.0044f640
add esp, 0xc
mov ecx, dword [ebp - 0x114]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x110]
mov dword [ecx + 0x44d154], edx
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
jmp 0x44e1e2
mov ecx, dword [ebp - 0x120]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x128], 0
push 0x459378
mov edx, dword [0x44d154]
push edx
call fcn.004539f0
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x13c], 0
cmp dword [ebp - 0x140], 0
je 0x44e4e8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x10c]
and eax, 0xffff
movzx ecx, ax
mov edx, dword [ebp - 0x128]
and edx, 0xffff
movzx eax, dx
shl eax, 0x10
or ecx, eax
mov dword [ebp - 0x10c], ecx
mov ecx, dword [ebp - 0x15c]
push ecx
push 0x1d
call fcn.0044e150
add esp, 8
mov dword [ebp - 0x158], eax
mov edx, dword [ebp - 0x158]
push edx
mov eax, dword [0x44d018]
xor eax, dword [ebp - 0x15c]
push eax
mov ecx, dword [0x44d008]
xor ecx, dword [ebp - 0x15c]
push ecx
mov edx, dword [0x44d00c]
xor edx, dword [ebp - 0x15c]
push edx
lea eax, [ebp - 0x13c]
push eax
mov ecx, dword [0x44d010]
xor ecx, dword [ebp - 0x15c]
push ecx
mov edx, dword [0x44d014]
xor edx, dword [ebp - 0x15c]
push edx
mov eax, dword [0x44d004]
xor eax, dword [ebp - 0x15c]
push eax
mov ecx, dword [section..text_1]
xor ecx, dword [ebp - 0x15c]
push ecx
call dword [ebp - 0x140]
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x13c]
xor edx, dword [ebp - 0x15c]
mov dword [ebp - 0x13c], edx
cmp dword [ebp - 0x138], 0
jne 0x44e4bf
mov eax, dword [ebp - 0x13c]
cmp eax, dword [0x44d01c]
je 0x44e4e6
cmp dword [0x44d030], 0
je 0x44e4dc
push 0
push str.Logicaltech_LOCK_STAR_PK
push 0x44d034
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x44e4f0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 0x120]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esp, ebp
pop ebp
ret