Function at 0x44cfa8
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1294
call fcn.004585a0
mov eax, dword [0x573510]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push dword [ebp + 8]
mov ebx, ecx
lea ecx, [ebx + 0x26e4]
call fcn.0047546c
mov edi, dword [eax]
mov dword [ebp - 0x126c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x26d8]
xor esi, esi
mov dword [ebx + 0x26dc], eax
mov eax, dword [edi + 0x20]
mov dword [edi + 0x2c], esi
cmp dword [eax + 4], 1
je 0x44d350
push edi
mov ecx, ebx
call fcn.00448e03
mov dword [ebx + 0x26d4], eax
mov ecx, dword [edi + 0x20]
cmp ecx, esi
je 0x44d019
mov dword [ecx + 0x2450], eax
cmp dword [ebx + 0x26d4], 0xc8
jne 0x44d249
push edi
mov ecx, ebx
call fcn.0044a798
push edi
mov ecx, ebx
call fcn.00448cf8
push edi
mov ecx, ebx
call fcn.004490b4
push edi
mov ecx, ebx
call fcn.00448e48
push edi
mov ecx, ebx
call fcn.00448cb4
mov edx, dword [edi + 0x38]
mov ecx, dword [ebx + 0x5d120]
mov eax, dword [edi + 0x3c]
cmp ecx, edx
jne 0x44d249
mov ecx, dword [ebx + 0x5d124]
cmp ecx, eax
jne 0x44d249
xor eax, eax
cmp dword [ebx + 0x2690], esi
je 0x44d086
cmp dword [edi + 0x30], 1
sete al
jmp 0x44d087
inc eax
cmp eax, esi
je 0x44d249
mov eax, dword [ebx + 0x5d128]
mov ecx, dword [ebx + 0x5d12c]
cmp eax, esi
jne 0x44d0a3
cmp ecx, esi
je 0x44d0d4
cmp eax, edx
jne 0x44d0ac
cmp ecx, dword [edi + 0x3c]
je 0x44d0d4
mov edi, dword [edi + 0x20]
cmp edi, esi
je 0x44d0bd
mov dword [edi + 0x244c], 1
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044acaa
push esi
mov ecx, ebx
call fcn.0044c74a
jmp 0x44d734
mov eax, dword [edi + 0x30]
push edi
mov ecx, ebx
mov dword [ebx + 0x2714], eax
call fcn.00448ee9
test eax, eax
je 0x44d19a
or eax, 0xffffffff
mov dword [ebx + 0x2690], 1
mov dword [ebx + 0x247c], esi
mov dword [ebx + 0x2714], esi
mov dword [edi + 0x30], esi
mov dword [ebx + 0x5d120], eax
mov dword [ebx + 0x5d124], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
lea eax, [ebx + 0x5d140]
push eax
push 0x4df954
lea eax, [ebx + 0x5d348]
push 0x103
push eax
call fcn.00448083
push 0x208
lea eax, [ebx + 0x5d140]
push esi
push eax
call fcn.004561f0
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push esi
push eax
call fcn.004561f0
add esp, 0x28
lea eax, [ebp - 0x20c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebx + 0x5d140]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4dfce4
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov eax, dword [edi + 0x20]
cmp eax, esi
je 0x44d1bc
cmp dword [eax + 0x2448], 0xffffffff
jne 0x44d1bc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 8]
mov ecx, dword [edi + 0x20]
mov dword [ecx + 0x2448], eax
push dword [edi + 0x1c]
mov eax, dword [ebx]
push 2
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44d732
mov eax, dword [ebx]
push esi
push 3
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44d732
mov ecx, ebx
call fcn.0044cc5e
test eax, eax
je 0x44d728
mov eax, dword [ebx]
push esi
push 4
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44d732
cmp dword [ebx + 0x2714], esi
je 0x44d70e
mov eax, dword [ebx + 0x5d120]
cmp eax, dword [ebx + 0x5d130]
jne 0x44d3e0
mov eax, dword [ebx + 0x5d124]
cmp eax, dword [ebx + 0x5d134]
jne 0x44d3e0
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044acaa
mov dword [ebx + 0x5d118], 7
jmp 0x44d268
cmp dword [ebx + 0x2690], esi
je 0x44d270
push 1
push dword [ebp + 8]
mov ecx, ebx
mov dword [edi + 0x28], esi
call fcn.0044cb89
test eax, eax
je 0x44d728
xor eax, eax
inc eax
jmp 0x44d734
mov eax, dword [ebx + 0x26d4]
cmp eax, 0x12e
jne 0x44d326
xor eax, eax
push 0x1046
mov word [ebp - 0x1254], ax
lea eax, [ebp - 0x1252]
push esi
push eax
call fcn.004561f0
add esp, 0xc
push 0x1048
lea eax, [ebp - 0x1254]
push eax
push edi
mov ecx, ebx
call fcn.00448eae
test eax, eax
je 0x44d728
push esi
push dword [edi + 0x20]
lea eax, [ebp - 0x1254]
push eax
call fcn.00448b4b
add esp, 0xc
test eax, eax
je 0x44d728
cmp dword [edi + 0x24], esi
jne 0x44d307
push 0x1048
lea edi, [ebx + 0x5f5e0]
push esi
push edi
call fcn.004561f0
lea eax, [ebp - 0x1254]
push eax
push 0x4df954
push 0x823
push edi
call fcn.00448064
add esp, 0x1c
push esi
mov ecx, ebx
call fcn.0044c74a
test eax, eax
je 0x44d728
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044acaa
jmp 0x44d268
cmp eax, 0x194
jne 0x44d251
xor eax, eax
inc eax
mov dword [ebx + 0x2470], eax
mov edi, dword [edi + 0x20]
cmp edi, esi
je 0x44d0bd
mov dword [edi + 0x244c], eax
jmp 0x44d0bd
cmp dword [edi], esi
jne 0x44d3ae
mov eax, dword [edi + 4]
cmp eax, esi
je 0x44d3ae
push edi
mov ecx, ebx
mov dword [edi + 0x1c], eax
call fcn.00448cf8
mov eax, dword [ebx + 0x5d120]
cmp eax, dword [edi + 0x38]
jne 0x44d251
mov eax, dword [ebx + 0x5d124]
cmp eax, dword [edi + 0x3c]
jne 0x44d251
xor eax, eax
cmp dword [ebx + 0x2690], esi
je 0x44d397
cmp dword [edi + 0x30], 1
sete al
jmp 0x44d398
inc eax
cmp eax, esi
je 0x44d251
mov eax, dword [edi + 0x30]
mov dword [ebx + 0x2714], eax
jmp 0x44d19a
push 0x4e0234
lea eax, [edi + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x44d251
mov dword [ebx + 0x2714], esi
mov dword [edi + 0x30], esi
mov dword [ebx + 0x26e0], 0x8000000
jmp 0x44d251
push 4
lea eax, [ebp - 0x1274]
push eax
push 6
push dword [edi + 0x1c]
mov dword [ebp - 0x1274], 0x4e20
call dword [sym.imp.WININET.dll_InternetSetOptionW]
and dword [edi + 0x8040], esi
and dword [ebp - 0x1258], esi
lea esi, [ebx + 0x26fc]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 2
test eax, eax
jbe 0x44d448
push dword [ebp - 0x1258]
mov ecx, esi
call fcn.0047546c
mov eax, dword [eax]
cmp dword [eax], 0
je 0x44d492
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc dword [ebp - 0x1258]
sar eax, 2
cmp dword [ebp - 0x1258], eax
jb 0x44d41d
push 8
xor eax, eax
and dword [ebp - 0x1258], eax
pop ecx
lea edi, [ebp - 0x1294]
rep stosd dword es:[edi], eax
lea edx, [ebx + 0x5cfd8]
push 0x20
pop ecx
mov edi, edx
lea esi, [ebp - 0x1294]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x44d477
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44d4c1
inc dword [ebp - 0x1258]
add edx, 0x20
cmp dword [ebp - 0x1258], 0xa
jb 0x44d461
jmp 0x44d317
push dword [ebp - 0x1258]
mov ecx, esi
call fcn.0047546c
mov eax, dword [eax]
push dword [ebp - 0x1258]
mov ecx, esi
mov dword [eax], 1
call fcn.0047546c
mov eax, dword [eax]
mov dword [edi + 0x8040], eax
jmp 0x44d69f
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x1270], eax
cmp eax, 0xffffffff
je 0x44d317
or dword [ebp - 0x125c], 0xffffffff
xor eax, eax
mov dword [ebp - 0x1264], eax
mov dword [ebp - 0x1260], eax
mov dword [ebp - 0x1258], eax
mov eax, dword [ebx + 0x270c]
sub eax, dword [ebx + 0x2708]
sar eax, 2
test eax, eax
jbe 0x44d317
push dword [ebp - 0x1258]
lea esi, [ebx + 0x26fc]
mov ecx, esi
call fcn.0047546c
mov edi, dword [eax]
push dword [ebp - 0x1258]
add edi, 0x18
mov ecx, esi
mov dword [ebp - 0x1268], edi
call fcn.0047546c
mov eax, dword [eax]
mov esi, dword [eax + 0x10]
sub esi, dword [edi]
mov edi, dword [eax + 0x14]
mov eax, dword [ebp - 0x1268]
push dword [ebp - 0x1258]
sbb edi, dword [eax + 4]
lea ecx, [ebx + 0x26fc]
call fcn.0047546c
mov eax, dword [eax]
sub esi, dword [eax + 8]
sbb edi, dword [eax + 0xc]
add esi, 1
adc edi, 0
cmp edi, dword [ebp - 0x1260]
jl 0x44d58f
jg 0x44d577
cmp esi, dword [ebp - 0x1264]
jbe 0x44d58f
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x1264], esi
mov dword [ebp - 0x1260], edi
mov dword [ebp - 0x125c], eax
mov eax, dword [ebx + 0x270c]
sub eax, dword [ebx + 0x2708]
inc dword [ebp - 0x1258]
sar eax, 2
cmp dword [ebp - 0x1258], eax
jb 0x44d508
cmp dword [ebp - 0x125c], 0xffffffff
je 0x44d317
cmp dword [ebp - 0x1260], 0
jl 0x44d317
jg 0x44d5dc
cmp dword [ebp - 0x1264], 0x40000
jbe 0x44d317
mov eax, dword [ebp - 0x1270]
push dword [ebp - 0x125c]
shl eax, 5
lea esi, [eax + ebx]
lea edi, [esi + 0x5cfd8]
lea ecx, [ebx + 0x26fc]
mov dword [edi], 1
call fcn.0047546c
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
push dword [ebp - 0x125c]
mov dword [esi + 0x5cfe8], ecx
mov eax, dword [eax + 0x14]
lea ecx, [ebx + 0x26fc]
mov dword [esi + 0x5cfec], eax
call fcn.0047546c
mov esi, dword [eax]
push 0xffffffffffffffff
push 0xfffffffffffffffe
push dword [ebp - 0x1260]
push dword [ebp - 0x1264]
call fcn.00458930
add dword [esi + 0x10], eax
push dword [ebp - 0x125c]
adc dword [esi + 0x14], edx
lea esi, [ebx + 0x26fc]
mov ecx, esi
call fcn.0047546c
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x1270]
add ecx, 1
adc edx, 0
add eax, 0x2e7f
shl eax, 5
mov dword [eax + ebx], ecx
mov dword [eax + ebx + 4], edx
lea eax, [ebp - 0x1268]
push eax
mov ecx, esi
mov dword [ebp - 0x1268], edi
call fcn.0044c0e0
mov eax, dword [ebp - 0x126c]
mov dword [eax + 0x8040], edi
mov edi, eax
mov eax, dword [edi + 0x8040]
xor esi, esi
cmp dword [eax + 8], esi
jne 0x44d6c1
cmp dword [eax + 0xc], esi
jne 0x44d6c1
mov dword [eax + 4], 1
mov dword [edi + 0x28], 8
jmp 0x44d6d3
push esi
push dword [ebp + 8]
mov ecx, ebx
mov dword [edi + 0x28], 4
call fcn.0044cb89
cmp dword [ebx + 0x2690], esi
jne 0x44d6fc
xor esi, esi
inc esi
lea edi, [ebx + 0x2468]
cmp dword [edi], esi
jbe 0x44d6fa
push 4
mov ecx, ebx
call fcn.0044c74a
test eax, eax
je 0x44d6fa
inc esi
cmp esi, dword [edi]
jb 0x44d6e8
xor esi, esi
mov eax, dword [ebx]
push esi
push 5
mov ecx, ebx
call dword [eax + 4]
neg eax
sbb eax, eax
neg eax
jmp 0x44d734
mov eax, dword [ebx]
push esi
push 5
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44d732
mov dword [edi + 0x28], 8
jmp 0x44d268
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044acaa
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045633d
leave
ret 4