Function at 0x44d710
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x472e18
mov eax, dword fs:[0]
push eax
sub esp, 0x8b8
mov eax, dword [0x4f8028]
xor eax, esp
mov dword [esp + 0x8b0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f8028]
xor eax, esp
push eax
lea eax, [esp + 0x8cc]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x8dc]
mov edi, ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x44c], eax
mov eax, str.calc...
mov ecx, ebp
sub ecx, eax
lea edx, [ecx + 0x24c]
jmp 0x44d780
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x44d780
mov dword [ebp + 0x21c], edi
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
push 1
mov ecx, edi
call eax
push 0x3ff
lea ecx, [esp + 0x4c9]
push 0
push ecx
mov byte [esp + 0x4d0], 0
call sub.ntdll.dll_memset
add esp, 0xc
push ebp
lea ebx, [esp + 0x4c8]
call fcn.0044e240
xor ebx, ebx
cmp eax, ebx
je 0x44d841
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x20]
mov ecx, edi
call eax
mov eax, 1
test byte [0x503544], al
jne 0x44d810
or dword [0x503544], eax
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], 0xffffffff
call fcn.0046d920
add esp, 4
mov esi, dword [0x503520]
push 0x34
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044d350
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_Query__bitmap_to_fail.
push 0x503520
call ecx
add esp, 0xc
xor eax, eax
jmp 0x44dc71
push ebx
push ebx
push ebx
xor eax, eax
lea esi, [esp + 0x78]
call fcn.00454340
push ebx
push ebx
push 0x400
lea edx, [esp + 0x4d0]
push edx
mov eax, esi
mov dword [esp + 0x8e4], ebx
call fcn.00454690
test eax, eax
jne 0x44d8c2
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 0xd1
mov ecx, edi
call edx
call fcn.004205a0
mov edi, eax
mov esi, dword [edi]
push 0x3c
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044d350
add esp, 4
push eax
mov eax, dword [esi]
push str._s:_Initialize__Bitmap_to_fail.
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], 0xffffffff
call fcn.00454490
xor eax, eax
jmp 0x44dc71
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
push ecx
call fcn.00454630
add esp, 4
test eax, eax
jne 0x44d90d
mov edx, dword [edi]
mov eax, dword [edx + 0x20]
push 0xd1
mov ecx, edi
call eax
call fcn.004205a0
mov edi, eax
mov esi, dword [edi]
push 0x43
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044d350
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_The__Bitmap_file_record_invalid.
push edi
call ecx
jmp 0x44d8a4
mov dl, byte [ebp + 0x220]
lea eax, [esp + 0x6c]
mov byte [esp + 0x1b], dl
call fcn.00454d40
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x34], edi
jbe 0x44dbc2
lea ebx, [ebx]
lea eax, [esp + 0x6c]
call fcn.00454d90
mov esi, eax
cmp esi, ebx
je 0x44dc9b
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x8d4], 1
call fcn.00453b20
test eax, eax
je 0x44dd1f
lea eax, [esp + 0x4c]
call fcn.00453c20
mov ecx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [ebp + 0x22c], esi
xor esi, esi
cmp eax, ebx
mov dword [esp + 0x30], eax
mov dword [ebp + 0x228], ecx
mov dword [esp + 0x28], esi
jbe 0x44db8f
jmp 0x44d9b4
mov esi, dword [esp + 0x28]
cmp esi, ebx
jl 0x44d9d2
mov ecx, dword [esp + 0x58]
cmp ecx, ebx
je 0x44d9d2
mov eax, dword [esp + 0x5c]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x44d9d2
mov esi, dword [ecx + esi*4]
jmp 0x44d9d4
xor esi, esi
push 0x400000
call sub.MFC80U.DLL_Ordinal_265
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x44dd6f
push 0x400000
push 0
push ebx
call sub.ntdll.dll_memset
movzx eax, byte [esp + 0x27]
mov ecx, dword [esi + 0x10]
cdq
add esp, 0xc
push edx
push eax
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
mov dword [esp + 0x50], edx
call sub.ntdll.dll__allmul
push 0
push 0x2000
mov ebp, edx
mov edi, eax
push ebp
push edi
call sub.ntdll.dll__alldiv
push 0
push 0x2000
push ebp
push edi
mov dword [esp + 0x34], eax
call sub.ntdll.dll__allrem
test byte [0x50354c], 1
mov dword [esp + 0x38], eax
jne 0x44da5a
or dword [0x50354c], 1
mov dword [0x503548], 0x4e7844
mov edx, dword [esp + 0x14]
mov edi, dword [edx + 0x218]
xor ebp, ebp
cmp dword [esp + 0x24], ebp
mov dword [esp + 0x20], edi
mov dword [esp + 0x48], ebp
jle 0x44daef
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esp + 0x40]
push 0
push 0x2000
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
call sub.ntdll.dll__allmul
mov ecx, eax
mov edi, edx
mov eax, ebp
cdq
add ecx, eax
adc edi, edx
push edi
mov edi, dword [esp + 0x2c]
push ecx
push ebx
call fcn.0044d480
add esp, 0x14
test eax, eax
je 0x44ddff
mov edx, dword [esp + 0x14]
push 0x400000
push ebx
push edx
lea ecx, [esp + 0x70]
call fcn.0044df90
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x248], 0
jne 0x44daeb
mov eax, dword [esp + 0x48]
add eax, 1
add ebp, 0x2000
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x48], eax
jl 0x44da74
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x248], 0
jne 0x44db5b
test eax, eax
jle 0x44db5b
mov ecx, dword [esi]
cdq
push edx
push eax
mov eax, dword [esp + 0x2c]
shl eax, 0xd
cdq
mov ebp, eax
mov eax, edx
mov edx, dword [esi + 4]
push edx
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push ecx
mov dword [esp + 0x38], eax
call sub.ntdll.dll__allmul
add ebp, eax
mov eax, dword [esp + 0x28]
adc eax, edx
push eax
push ebp
push ebx
call fcn.0044d480
add esp, 0x14
test eax, eax
je 0x44de9e
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
shl eax, 9
push eax
push ebx
push edx
lea ecx, [esp + 0x70]
call fcn.0044df90
push ebx
call sub.MFC80U.DLL_Ordinal_266
mov eax, dword [esp + 0x18]
xor ebx, ebx
add esp, 4
cmp dword [eax + 0x248], ebx
jne 0x44db8d
mov eax, dword [esp + 0x28]
add eax, 1
cmp eax, dword [esp + 0x30]
mov dword [esp + 0x28], eax
jb 0x44d9b0
mov ebp, dword [esp + 0x14]
jmp 0x44db8f
mov ebp, eax
cmp dword [ebp + 0x248], ebx
jne 0x44df0e
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00453a10
mov edi, dword [esp + 0x34]
add edi, 1
cmp edi, dword [esp + 0x2c]
mov dword [esp + 0x34], edi
jb 0x44d940
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [ebp + 0x44c]
mov eax, 0x10624dd3
mul ecx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x34]
push ecx
shr edx, 6
lea eax, [esp + 0x28]
push eax
mov ecx, edx
call fcn.004483f0
mov ebx, 1
or esi, 0xffffffff
test byte [0x503544], bl
jne 0x44dc23
or dword [0x503544], ebx
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x20]
mov edi, dword [0x503520]
push ecx
push edx
push eax
push 0xb3
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_Copy_NTFS_Volume_elapsed_time:___02d:_02d:_02d_
push 0x503520
call ecx
add esp, 0x18
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00454490
mov eax, ebx
mov ecx, dword [esp + 0x8cc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8b0]
xor ecx, esp
call fcn.0046d6fd
add esp, 0x8c4
ret 4
mov eax, 1
or esi, 0xffffffff
test byte [0x503544], al
jne 0x44dcce
or dword [0x503544], eax
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov edi, dword [0x503520]
push 0x55
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_Cannot_find__DATA_attribute_of_the__Bitmap.
push 0x503520
call edx
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
add esp, 0xc
push 0xd1
call edx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00454490
xor eax, eax
jmp 0x44dc71
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
push 0xd3
call edx
call fcn.004205a0
mov edi, eax
mov esi, dword [edi]
push 0x5e
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044d350
add esp, 4
push eax
mov eax, dword [esi]
push str._s:_Failed_to_initialize_DataRun.
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00453a10
jmp 0x44d8a7
or esi, 0xffffffff
test byte [0x503544], 1
jne 0x44dd9f
or dword [0x503544], 1
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov edi, dword [0x503520]
push 0x72
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_No_sufficient_memory.
push 0x503520
call edx
add esp, 0xc
push 0x15
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
call edx
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x8d8], 0
call fcn.00453a10
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00454490
xor eax, eax
jmp 0x44dc71
push ebx
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
or esi, 0xffffffff
test byte [0x503544], 1
jne 0x44de38
or dword [0x503544], 1
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov edi, dword [0x503520]
push 0x84
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_Failed_to_read_sector_for__BITMAP.
push 0x503520
call ecx
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
add esp, 0xc
push 0xca
call eax
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00453a10
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00454490
xor eax, eax
jmp 0x44dc71
push ebx
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
or esi, 0xffffffff
test byte [0x503544], 1
jne 0x44ded7
or dword [0x503544], 1
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov edi, dword [0x503520]
push 0x96
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_Failed_to_read_sector_for__BITMAP.
push 0x503520
call edx
add esp, 0xc
push 0xca
jmp 0x44ddcb
mov ecx, dword [ebp + 0x21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x17
call eax
or esi, 0xffffffff
test byte [0x503544], 1
jne 0x44df4d
or dword [0x503544], 1
push 0x4732e0
mov dword [0x503520], 0x4e7bc8
mov dword [0x503524], esi
call fcn.0046d920
add esp, 4
mov edi, dword [0x503520]
push 0xaa
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044d350
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_User_cancel_operations.
push 0x503520
call ecx
add esp, 0xc
lea edx, [esp + 0x4c]
push edx
jmp 0x44dddb