Function at 0x44da90
Capabilities:
Contain obfuscated stackstrings
Extract resource via kernel32 functions
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x460c
call fcn.004535d0
push 0x2349
push 0x68
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x45f4], eax
cmp dword [ebp - 0x45f4], 0
jne 0x44dad9
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.0044d723
add esp, 4
test eax, eax
je 0x44dad2
jmp 0x44e013
xor eax, eax
jmp 0x44e018
mov edx, dword [ebp - 0x45f4]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x44e4], eax
cmp dword [ebp - 0x44e4], 0
jne 0x44db00
xor eax, eax
jmp 0x44e018
mov ecx, dword [ebp - 0x44e4]
push ecx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [0x462fbc], eax
cmp dword [0x462fbc], 0
jne 0x44db22
xor eax, eax
jmp 0x44e018
mov edx, dword [ebp - 0x45f4]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
push 0x4338
mov edx, dword [ebp + 0x14]
mov eax, dword [edx]
mov ecx, dword [0x462fbc]
lea edx, [ecx + eax - 0x4338]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00453180
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, 0x3ff
div ecx
mov dword [0x462ea8], edx
mov byte [ebp - 0x44d8], 0x14
mov byte [ebp - 0x44d7], 0x28
mov byte [ebp - 0x44d6], 0x30
mov byte [ebp - 0x44d5], 0x60
mov byte [ebp - 0x44d4], 0xc8
mov byte [ebp - 0x44d3], 0x30
mov byte [ebp - 0x44d2], 0x45
mov byte [ebp - 0x44d1], 0x12
mov byte [ebp - 0x44d0], 0x18
mov byte [ebp - 0x44cf], 0x61
mov byte [ebp - 0x44ce], 0xe
mov byte [ebp - 0x44cd], 0
mov byte [ebp - 0x44cc], 0x22
mov byte [ebp - 0x44cb], 0
mov byte [ebp - 0x44ca], 0x20
mov byte [ebp - 0x44c9], 0
mov byte [ebp - 0x44c8], 0x90
mov byte [ebp - 0x44c7], 0x66
mov byte [ebp - 0x44c6], 0xe
mov byte [ebp - 0x44c5], 0
mov byte [ebp - 0x44c4], 0xe8
mov byte [ebp - 0x44c3], 2
mov byte [ebp - 0x44c2], 0x7f
mov byte [ebp - 0x44c1], 0x3a
mov byte [ebp - 0x44c0], 0x6b
mov byte [ebp - 0x44bf], 0x23
mov byte [ebp - 0x44be], 0x36
mov byte [ebp - 0x44bd], 0x20
mov byte [ebp - 0x44bc], 0x80
mov byte [ebp - 0x44bb], 0x60
mov byte [ebp - 0x44ba], 0x30
mov byte [ebp - 0x44b9], 0
push 0x23c
lea edx, [ebp - 0x44d8]
push edx
push 0x64
mov eax, dword [ebp + 0xc]
add eax, 0xfc
push eax
call fcn.00450cfe
add esp, 0x10
mov dword [ebp - 0x44dc], 0
push 0
call fcn.00452e40
add esp, 4
push eax
call fcn.0045359c
add esp, 4
mov dword [ebp - 0x45f8], 1
jmp 0x44dca8
mov ecx, dword [ebp - 0x45f8]
add ecx, 1
mov dword [ebp - 0x45f8], ecx
cmp dword [ebp - 0x45f8], 0x7f
jg 0x44dcc5
call fcn.004535a9
mov edx, dword [ebp - 0x45f8]
mov byte [ebp + edx - 0x180], al
jmp 0x44dc99
mov byte [ebp - 0x180], 0
mov byte [ebp - 0x101], 0
push 0x80
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00453180
add esp, 0xc
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x238
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x2b8
push ecx
lea edx, [ebp - 0x180]
push edx
call fcn.0044d110
add esp, 0x10
mov dword [ebp - 0x45f8], 1
jmp 0x44dd32
mov eax, dword [ebp - 0x45f8]
add eax, 1
mov dword [ebp - 0x45f8], eax
cmp dword [ebp - 0x45f8], 0x3f
jg 0x44dd87
mov ecx, 0x7f
sub ecx, dword [ebp - 0x45f8]
mov dl, byte [ebp + ecx - 0x180]
mov byte [ebp - 0x44e8], dl
mov eax, 0x7f
sub eax, dword [ebp - 0x45f8]
mov ecx, dword [ebp - 0x45f8]
mov dl, byte [ebp + ecx - 0x180]
mov byte [ebp + eax - 0x180], dl
mov eax, dword [ebp - 0x45f8]
mov cl, byte [ebp - 0x44e8]
mov byte [ebp + eax - 0x180], cl
jmp 0x44dd23
push 0x4338
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x44b8]
push eax
call fcn.00453180
add esp, 0xc
mov ecx, 1
test ecx, ecx
je 0x44dfa8
push 0x4338
lea edx, [ebp - 0x44b8]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.00453180
add esp, 0xc
push 0x80
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x80]
push edx
call fcn.00453180
add esp, 0xc
lea eax, [ebp - 0x45f0]
push eax
mov ecx, dword [ebp - 0x44dc]
push ecx
call fcn.00451500
test eax, eax
je 0x44de61
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x234]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0xfc
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x12e
push edx
push 0
call fcn.00450340
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x4600], eax
mov eax, dword [ebp - 0x4600]
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x4604], eax
push 0
mov ecx, dword [ebp - 0x4604]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, dword [ebp - 0x4604]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x44e018
lea eax, [ebp - 0x45f0]
push eax
push 0x80
lea ecx, [ebp - 0x80]
push ecx
push 0x7330
push 0x73b0
call fcn.00451a50
mov dword [ebp - 0x45fc], eax
push 0x80
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x80]
push eax
call fcn.004534f0
add esp, 0xc
test eax, eax
jne 0x44df94
cmp dword [ebp - 0x45fc], 0
jne 0x44df94
lea ecx, [ebp - 0x45f0]
push ecx
push 0x80
mov edx, dword [ebp + 0xc]
push edx
push 0x7330
push 0x73b0
call fcn.00451a50
test eax, eax
je 0x44dedd
xor eax, eax
jmp 0x44e018
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x4608], eax
mov dword [ebp - 0x45f8], 0
jmp 0x44df01
mov ecx, dword [ebp - 0x45f8]
add ecx, 1
mov dword [ebp - 0x45f8], ecx
cmp dword [ebp - 0x45f8], 0x3f
jg 0x44df5c
mov edx, 0x7f
sub edx, dword [ebp - 0x45f8]
mov eax, dword [ebp - 0x4608]
mov cl, byte [eax + edx]
mov byte [ebp - 0x44e8], cl
mov edx, 0x7f
sub edx, dword [ebp - 0x45f8]
mov eax, dword [ebp - 0x4608]
add eax, dword [ebp - 0x45f8]
mov ecx, dword [ebp - 0x4608]
mov al, byte [eax]
mov byte [ecx + edx], al
mov ecx, dword [ebp - 0x4608]
add ecx, dword [ebp - 0x45f8]
mov dl, byte [ebp - 0x44e8]
mov byte [ecx], dl
jmp 0x44def2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x460c], eax
mov ecx, dword [ebp - 0x460c]
add ecx, 1
mov dword [ebp - 0x460c], ecx
mov edx, dword [ebp - 0x460c]
push edx
mov eax, dword [ebp - 0x460c]
push eax
call fcn.00450ff2
add esp, 8
mov eax, 1
jmp 0x44e018
mov ecx, dword [ebp - 0x44dc]
add ecx, 1
mov dword [ebp - 0x44dc], ecx
jmp 0x44dd9f
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x234]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0xfc
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x12e
push edx
push 0
call fcn.00450340
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x44e0], eax
mov eax, dword [ebp - 0x44e0]
push eax
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x44ec], eax
push 0
mov ecx, dword [ebp - 0x44ec]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, dword [ebp - 0x44ec]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x44e018
jmp 0x44db38
mov esp, ebp
pop ebp
ret