Function at 0x44cba0
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x471b48
push 0x408860
mov eax, dword fs:[0]
push eax
sub esp, 0x288
mov eax, dword [0x474534]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
xor edi, edi
xor esi, esi
lea ebx, [ebx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44cbf9
and edi, esi
jmp 0x44cc0f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 0x1f
jl 0x44cbe0
xor esi, esi
lea esp, [esp]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d65f
add edi, 0xd
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x44cc5f
cmp eax, 4
je 0x44cc5f
and edi, ecx
jmp 0x44cc61
sub edi, ecx
add ecx, 1
cmp ecx, 0xd
jl 0x44cc40
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [ebp - 0x270]
push ecx
push 0x45f5c0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x44cca8
and edi, esi
jmp 0x44ccbe
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 0xc
jl 0x44cc8f
xor ecx, ecx
jmp 0x44ccd0
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44ccef
cmp eax, 3
je 0x44ccef
xor edi, ecx
jmp 0x44ccf4
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 0x11
jl 0x44ccd0
lea ecx, [ebp - 0x270]
push ecx
push 0x45f5c8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d652
add edi, 9
xor esi, esi
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44cd4c
and edi, esi
jmp 0x44cd62
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 5
jl 0x44cd33
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x44cd89
and edi, esi
jmp 0x44cd9f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 0xc
jl 0x44cd70
mov esi, 0x11
nop
nop
nop
xor edi, edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d645
add esi, 0xd
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cdf1
cmp eax, 3
je 0x44cdf1
xor esi, ecx
jmp 0x44cdf6
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 0x10
jl 0x44cdd2
lea ecx, [ebp - 0x270]
push ecx
push 0x45f5d0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d638
lea edi, [ecx + 0x11]
nop
nop
nop
xor esi, esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x290], esi
cmp esi, 2
jge 0x44ce73
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44ce65
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44ce35
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44ce35
mov dword [ebp - 4], 0xfffffffe
call fcn.0044ceb6
mov edi, 1
mov dword [ebp - 4], edi
xor esi, esi
mov dword [ebp - 0x294], esi
cmp esi, edi
jge 0x44cecb
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
cmp eax, edi
jne 0x44cec1
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edi
jmp 0x44ce89
add dword [ebp - 0x274], edi
add esi, edi
jmp 0x44ce89
mov dword [ebp - 4], 0xfffffffe
call fcn.0044cf0f
push 0x45f5d8
push 0x45f5e0
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x44cf1b
cmp eax, 4
je 0x44cf1b
and esi, ecx
jmp 0x44cf1d
sub esi, ecx
add ecx, 1
cmp ecx, 3
jl 0x44cef0
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cf5f
cmp eax, 3
je 0x44cf5f
xor esi, ecx
jmp 0x44cf64
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x44cf40
lea ecx, [ebp - 0x270]
push ecx
push 0x45f5e8
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, 0x11
nop
nop
nop
xor esi, esi
jmp 0x44cf90
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea edx, [edx + edx*2]
mov eax, esi
sub eax, edx
cmp eax, 1
jne 0x44cfa9
and edi, esi
jmp 0x44cfbf
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x44cf90
push 0x45f5f0
push 0x45f5f8
call dword [sym.imp.USER32.dll_FindWindowW]
xor ecx, ecx
lea esp, [esp]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44cfff
cmp eax, 3
je 0x44cfff
xor edi, ecx
jmp 0x44d004
mov eax, ecx
imul edi, eax
add ecx, 1
cmp ecx, 3
jl 0x44cfe0
lea ecx, [ebp - 0x270]
push ecx
push 0x45f600
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d62b
add edi, 1
mov dword [ebp - 4], 2
xor esi, esi
mov dword [ebp - 0x280], esi
cmp esi, 3
jge 0x44d088
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d07a
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44d04a
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44d04a
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d0b5
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 1
je 0x44d0c1
cmp eax, 4
je 0x44d0c1
and edi, ecx
jmp 0x44d0c3
sub edi, ecx
add ecx, 1
cmp ecx, 3
jl 0x44d096
push 0xfa
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
nop
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x44d0f9
and edi, esi
jmp 0x44d10f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x44d0e0
xor esi, esi
lea esp, [esp]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d139
and edi, esi
jmp 0x44d14f
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
add esi, 1
cmp esi, 4
jl 0x44d120
mov esi, 0x11
nop
nop
nop
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d61e
push 0x45f608
push 0x45f610
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
call esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, 0x10
push 0x45f618
push 0x45f620
call esi
mov dword [ebp - 4], 3
xor esi, esi
mov dword [ebp - 0x278], esi
cmp esi, 2
jge 0x44d1f2
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d1e4
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44d1b4
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44d1b4
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d24b
mov edi, eax
lea edx, [ebp - 0x270]
push edx
push 0x45f628
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x288], esi
cmp esi, 2
jge 0x44d265
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d257
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44d21b
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44d21b
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d2c9
xor edi, edi
push 0xfa
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ecx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x44d611
add edi, 2
xor esi, esi
lea ecx, [ecx]
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea ecx, [edx + edx*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x44d2d4
and edi, esi
jmp 0x44d2f0
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or edi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
add esi, 1
cmp esi, 2
jl 0x44d2b0
xor esi, esi
lea ebx, [ebx]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea eax, [edx + edx*2]
sub ecx, eax
jne 0x44d604
add edi, 3
mov dword [ebp - 4], 5
xor esi, esi
mov dword [ebp - 0x27c], esi
cmp esi, 4
jge 0x44d361
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov edx, esi
sub edx, ecx
cmp edx, 1
jne 0x44d353
mov eax, ebx
nop
mov ecx, edx
nop
add esi, edx
jmp 0x44d324
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44d324
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d3ac
mov dword [ebp - 4], 6
xor esi, esi
mov dword [ebp - 0x284], esi
cmp esi, 1
jge 0x44d3c3
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d3b7
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44d376
add dword [ebp - 0x274], 1
add esi, 1
jmp 0x44d376
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d457
xor eax, eax
mov edx, eax
imul esi, edx
add eax, 1
cmp eax, 2
jl 0x44d3d1
test esi, esi
jle 0x44d3e5
lea esi, [esi + esi*4]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
jne 0x44d3ff
lea esi, [ecx + 0x11]
nop
nop
nop
push 0x45f630
push 0x45f638
call dword [sym.imp.USER32.dll_FindWindowW]
xor edi, edi
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d5f7
lea esi, [ecx + 0x11]
nop
nop
nop
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44d463
cmp eax, 3
je 0x44d463
xor esi, ecx
jmp 0x44d468
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x44d432
lea ecx, [ebp - 0x270]
push ecx
push 0x45f640
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileW]
call ebx
xor edi, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d5ea
add esi, 2
lea eax, [ebp - 0x270]
push eax
push 0x45f648
call ebx
xor ecx, ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ecx
sub eax, edx
cmp eax, 2
je 0x44d4d4
cmp eax, 3
je 0x44d4d4
xor esi, ecx
jmp 0x44d4d9
mov eax, ecx
imul esi, eax
add ecx, 1
cmp ecx, 2
jl 0x44d4b5
lea ecx, [ebp - 0x270]
push ecx
push 0x45f650
call ebx
lea edx, [ebp - 0x270]
push edx
push 0x45f658
call ebx
lea eax, [ebp - 0x270]
push eax
push 0x45f660
call ebx
push 0x45f668
push 0x45f670
mov esi, dword [sym.imp.USER32.dll_FindWindowW]
call esi
nop
nop
nop
push 0x45f678
push 0x45f680
call esi
mov edi, 0x11
push 0x45f688
push 0x45f690
call esi
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ecx, eax
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
lea edx, [edx + edx*2]
sub ecx, edx
jne 0x44d5dd
add edi, 1
mov dword [ebp - 4], 7
xor esi, esi
mov dword [ebp - 0x28c], esi
cmp esi, 1
jge 0x44d5a7
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
mov ecx, esi
sub ecx, eax
cmp ecx, 1
jne 0x44d599
mov eax, ebx
nop
mov ecx, edx
nop
add esi, 1
jmp 0x44d569
add edi, 1
mov dword [ebp - 0x274], edi
add esi, 1
jmp 0x44d569
mov dword [ebp - 4], 0xfffffffe
call fcn.0044d5cf
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0040470b
mov esp, ebp
pop ebp
ret
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x44d545
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x44d486
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x44d414
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x44d300
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x44d290
mov ecx, ebx
imul esi, ecx
add ebx, 1
jmp 0x44d167
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x44d026
mov eax, edi
imul esi, eax
add edi, 1
jmp 0x44ce12
mov ecx, edi
imul esi, ecx
add edi, 1
jmp 0x44cdb7
mov edx, esi
imul edi, edx
add esi, 1
jmp 0x44cd16
mov eax, esi
imul edi, eax
add esi, 1
jmp 0x44cc20