Function at 0x44cdc0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x467788
mov eax, dword fs:[0]
push eax
sub esp, 0x8b8
mov eax, dword [0x4e9028]
xor eax, esp
mov dword [esp + 0x8b0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4e9028]
xor eax, esp
push eax
lea eax, [esp + 0x8cc]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x8dc]
mov edi, ecx
mov dword [esp + 0x14], ebp
mov dword [esp + 0x1c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp + 0x44c], eax
mov eax, str.calc...
mov ecx, ebp
sub ecx, eax
lea edx, [ecx + 0x24c]
jmp 0x44ce30
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x44ce30
mov dword [ebp + 0x21c], edi
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
push 1
mov ecx, edi
call eax
push 0x3ff
lea ecx, [esp + 0x4c9]
push 0
push ecx
mov byte [esp + 0x4d0], 0
call sub.ntdll.dll_memset
add esp, 0xc
push ebp
lea ebx, [esp + 0x4c8]
call fcn.0044d8f0
xor ebx, ebx
cmp eax, ebx
je 0x44cef1
mov edx, dword [edi]
push eax
mov eax, dword [edx + 0x20]
mov ecx, edi
call eax
mov eax, 1
test byte [0x4f1904], al
jne 0x44cec0
or dword [0x4f1904], eax
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], 0xffffffff
call fcn.00462d9a
add esp, 4
mov esi, dword [0x4f18dc]
push 0x34
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044ca00
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_Query__bitmap_to_fail.
push 0x4f18dc
call ecx
add esp, 0xc
xor eax, eax
jmp 0x44d321
push ebx
push ebx
push ebx
xor eax, eax
lea esi, [esp + 0x78]
call fcn.00449c60
push ebx
push ebx
push 0x400
lea edx, [esp + 0x4d0]
push edx
mov eax, esi
mov dword [esp + 0x8e4], ebx
call fcn.00449fb0
test eax, eax
jne 0x44cf72
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 0xd1
mov ecx, edi
call edx
call fcn.0041e870
mov edi, eax
mov esi, dword [edi]
push 0x3c
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044ca00
add esp, 4
push eax
mov eax, dword [esi]
push str._s:_Initialize__Bitmap_to_fail.
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], 0xffffffff
call fcn.00449db0
xor eax, eax
jmp 0x44d321
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
push ecx
call fcn.00449f50
add esp, 4
test eax, eax
jne 0x44cfbd
mov edx, dword [edi]
mov eax, dword [edx + 0x20]
push 0xd1
mov ecx, edi
call eax
call fcn.0041e870
mov edi, eax
mov esi, dword [edi]
push 0x43
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044ca00
mov ecx, dword [esi]
add esp, 4
push eax
push str._s:_The__Bitmap_file_record_invalid.
push edi
call ecx
jmp 0x44cf54
mov dl, byte [ebp + 0x220]
lea eax, [esp + 0x6c]
mov byte [esp + 0x1b], dl
call fcn.0044a660
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x34], edi
jbe 0x44d272
lea ebx, [ebx]
lea eax, [esp + 0x6c]
call fcn.0044a6b0
mov esi, eax
cmp esi, ebx
je 0x44d34b
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x8d4], 1
call fcn.00453090
test eax, eax
je 0x44d3cf
lea eax, [esp + 0x4c]
call fcn.00453190
mov ecx, dword [esi + 0x30]
mov esi, dword [esi + 0x34]
mov dword [ebp + 0x22c], esi
xor esi, esi
cmp eax, ebx
mov dword [esp + 0x30], eax
mov dword [ebp + 0x228], ecx
mov dword [esp + 0x28], esi
jbe 0x44d23f
jmp 0x44d064
mov esi, dword [esp + 0x28]
cmp esi, ebx
jl 0x44d082
mov ecx, dword [esp + 0x58]
cmp ecx, ebx
je 0x44d082
mov eax, dword [esp + 0x5c]
sub eax, ecx
sar eax, 2
cmp esi, eax
jae 0x44d082
mov esi, dword [ecx + esi*4]
jmp 0x44d084
xor esi, esi
push 0x400000
call sub.MFC80U.DLL_Ordinal_265
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x44d41f
push 0x400000
push 0
push ebx
call sub.ntdll.dll_memset
movzx eax, byte [esp + 0x27]
mov ecx, dword [esi + 0x10]
cdq
add esp, 0xc
push edx
push eax
mov dword [esp + 0x44], eax
mov eax, dword [esi + 0x14]
push eax
push ecx
mov dword [esp + 0x50], edx
call sub.ntdll.dll__allmul
push 0
push 0x2000
mov ebp, edx
mov edi, eax
push ebp
push edi
call sub.ntdll.dll__alldiv
push 0
push 0x2000
push ebp
push edi
mov dword [esp + 0x34], eax
call sub.ntdll.dll__allrem
test byte [0x4f190c], 1
mov dword [esp + 0x38], eax
jne 0x44d10a
or dword [0x4f190c], 1
mov dword [0x4f1908], 0x4db424
mov edx, dword [esp + 0x14]
mov edi, dword [edx + 0x218]
xor ebp, ebp
cmp dword [esp + 0x24], ebp
mov dword [esp + 0x20], edi
mov dword [esp + 0x48], ebp
jle 0x44d19f
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov edx, dword [esp + 0x40]
push 0
push 0x2000
push eax
mov eax, dword [esp + 0x48]
push ecx
push edx
push eax
call sub.ntdll.dll__allmul
mov ecx, eax
mov edi, edx
mov eax, ebp
cdq
add ecx, eax
adc edi, edx
push edi
mov edi, dword [esp + 0x2c]
push ecx
push ebx
call fcn.0044cb30
add esp, 0x14
test eax, eax
je 0x44d4af
mov edx, dword [esp + 0x14]
push 0x400000
push ebx
push edx
lea ecx, [esp + 0x70]
call fcn.0044d640
mov eax, dword [esp + 0x14]
cmp dword [eax + 0x248], 0
jne 0x44d19b
mov eax, dword [esp + 0x48]
add eax, 1
add ebp, 0x2000
cmp eax, dword [esp + 0x24]
mov dword [esp + 0x48], eax
jl 0x44d124
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x14]
cmp dword [ecx + 0x248], 0
jne 0x44d20b
test eax, eax
jle 0x44d20b
mov ecx, dword [esi]
cdq
push edx
push eax
mov eax, dword [esp + 0x2c]
shl eax, 0xd
cdq
mov ebp, eax
mov eax, edx
mov edx, dword [esi + 4]
push edx
mov edx, dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x4c]
push edx
push ecx
mov dword [esp + 0x38], eax
call sub.ntdll.dll__allmul
add ebp, eax
mov eax, dword [esp + 0x28]
adc eax, edx
push eax
push ebp
push ebx
call fcn.0044cb30
add esp, 0x14
test eax, eax
je 0x44d54e
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
shl eax, 9
push eax
push ebx
push edx
lea ecx, [esp + 0x70]
call fcn.0044d640
push ebx
call sub.MFC80U.DLL_Ordinal_266
mov eax, dword [esp + 0x18]
xor ebx, ebx
add esp, 4
cmp dword [eax + 0x248], ebx
jne 0x44d23d
mov eax, dword [esp + 0x28]
add eax, 1
cmp eax, dword [esp + 0x30]
mov dword [esp + 0x28], eax
jb 0x44d060
mov ebp, dword [esp + 0x14]
jmp 0x44d23f
mov ebp, eax
cmp dword [ebp + 0x248], ebx
jne 0x44d5be
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00452f80
mov edi, dword [esp + 0x34]
add edi, 1
cmp edi, dword [esp + 0x2c]
mov dword [esp + 0x34], edi
jb 0x44cff0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, dword [ebp + 0x44c]
mov eax, 0x10624dd3
mul ecx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x34]
push ecx
shr edx, 6
lea eax, [esp + 0x28]
push eax
mov ecx, edx
call fcn.0042e790
mov ebx, 1
or esi, 0xffffffff
test byte [0x4f1904], bl
jne 0x44d2d3
or dword [0x4f1904], ebx
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x20]
mov edi, dword [0x4f18dc]
push ecx
push edx
push eax
push 0xb3
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_Copy_NTFS_Volume_elapsed_time:___02d:_02d:_02d_
push 0x4f18dc
call ecx
add esp, 0x18
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00449db0
mov eax, ebx
mov ecx, dword [esp + 0x8cc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x8b0]
xor ecx, esp
call fcn.00462b77
add esp, 0x8c4
ret 4
mov eax, 1
or esi, 0xffffffff
test byte [0x4f1904], al
jne 0x44d37e
or dword [0x4f1904], eax
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov edi, dword [0x4f18dc]
push 0x55
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_Cannot_find__DATA_attribute_of_the__Bitmap.
push 0x4f18dc
call edx
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
add esp, 0xc
push 0xd1
call edx
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00449db0
xor eax, eax
jmp 0x44d321
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
push 0xd3
call edx
call fcn.0041e870
mov edi, eax
mov esi, dword [edi]
push 0x5e
mov ecx, str.._ntfscnvvol.cpp
add esi, 8
call fcn.0044ca00
add esp, 4
push eax
mov eax, dword [esi]
push str._s:_Failed_to_initialize_DataRun.
push edi
call eax
add esp, 0xc
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00452f80
jmp 0x44cf57
or esi, 0xffffffff
test byte [0x4f1904], 1
jne 0x44d44f
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov edi, dword [0x4f18dc]
push 0x72
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_No_sufficient_memory.
push 0x4f18dc
call edx
add esp, 0xc
push 0x15
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
call edx
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0x8d8], 0
call fcn.00452f80
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00449db0
xor eax, eax
jmp 0x44d321
push ebx
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
or esi, 0xffffffff
test byte [0x4f1904], 1
jne 0x44d4e8
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov edi, dword [0x4f18dc]
push 0x84
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_Failed_to_read_sector_for__BITMAP.
push 0x4f18dc
call ecx
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
add esp, 0xc
push 0xca
call eax
lea ecx, [esp + 0x4c]
push ecx
mov byte [esp + 0x8d8], 0
call fcn.00452f80
lea ecx, [esp + 0x6c]
mov dword [esp + 0x8d4], esi
call fcn.00449db0
xor eax, eax
jmp 0x44d321
push ebx
call sub.MFC80U.DLL_Ordinal_266
add esp, 4
or esi, 0xffffffff
test byte [0x4f1904], 1
jne 0x44d587
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov edi, dword [0x4f18dc]
push 0x96
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov edx, dword [edi]
add esp, 4
push eax
push str._s:_Failed_to_read_sector_for__BITMAP.
push 0x4f18dc
call edx
add esp, 0xc
push 0xca
jmp 0x44d47b
mov ecx, dword [ebp + 0x21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x20]
push 0x17
call eax
or esi, 0xffffffff
test byte [0x4f1904], 1
jne 0x44d5fd
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], esi
call fcn.00462d9a
add esp, 4
mov edi, dword [0x4f18dc]
push 0xaa
mov ecx, str.._ntfscnvvol.cpp
add edi, 8
call fcn.0044ca00
mov ecx, dword [edi]
add esp, 4
push eax
push str._s:_User_cancel_operations.
push 0x4f18dc
call ecx
add esp, 0xc
lea edx, [esp + 0x4c]
push edx
jmp 0x44d48b