Function at 0x44e5e5
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1294
call fcn.00459800
mov eax, dword [0x576510]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push dword [ebp + 8]
mov ebx, ecx
lea ecx, [ebx + 0x26e4]
call fcn.0044a8cf
mov edi, dword [eax]
mov dword [ebp - 0x126c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x26d8]
xor esi, esi
mov dword [ebx + 0x26dc], eax
mov eax, dword [edi + 0x20]
mov dword [edi + 0x2c], esi
cmp dword [eax + 4], 1
je 0x44e98d
push edi
mov ecx, ebx
call fcn.0044a4c0
mov dword [ebx + 0x26d4], eax
mov ecx, dword [edi + 0x20]
cmp ecx, esi
je 0x44e656
mov dword [ecx + 0x2450], eax
cmp dword [ebx + 0x26d4], 0xc8
jne 0x44e886
push edi
mov ecx, ebx
call fcn.0044bdd0
push edi
mov ecx, ebx
call fcn.0044a3b5
push edi
mov ecx, ebx
call fcn.0044a771
push edi
mov ecx, ebx
call fcn.0044a505
push edi
mov ecx, ebx
call fcn.0044a371
mov edx, dword [edi + 0x38]
mov ecx, dword [ebx + 0x5d120]
mov eax, dword [edi + 0x3c]
cmp ecx, edx
jne 0x44e886
mov ecx, dword [ebx + 0x5d124]
cmp ecx, eax
jne 0x44e886
xor eax, eax
cmp dword [ebx + 0x2690], esi
je 0x44e6c3
cmp dword [edi + 0x30], 1
sete al
jmp 0x44e6c4
inc eax
cmp eax, esi
je 0x44e886
mov eax, dword [ebx + 0x5d128]
mov ecx, dword [ebx + 0x5d12c]
cmp eax, esi
jne 0x44e6e0
cmp ecx, esi
je 0x44e711
cmp eax, edx
jne 0x44e6e9
cmp ecx, dword [edi + 0x3c]
je 0x44e711
mov edi, dword [edi + 0x20]
cmp edi, esi
je 0x44e6fa
mov dword [edi + 0x244c], 1
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044c2e7
push esi
mov ecx, ebx
call fcn.0044dd87
jmp 0x44ed71
mov eax, dword [edi + 0x30]
push edi
mov ecx, ebx
mov dword [ebx + 0x2714], eax
call fcn.0044a5a6
test eax, eax
je 0x44e7d7
or eax, 0xffffffff
mov dword [ebx + 0x2690], 1
mov dword [ebx + 0x247c], esi
mov dword [ebx + 0x2714], esi
mov dword [edi + 0x30], esi
mov dword [ebx + 0x5d120], eax
mov dword [ebx + 0x5d124], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
lea eax, [ebx + 0x5d140]
push eax
push 0x4e1b84
lea eax, [ebx + 0x5d348]
push 0x103
push eax
call fcn.00449611
push 0x208
lea eax, [ebx + 0x5d140]
push esi
push eax
call fcn.00457450
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push esi
push eax
call fcn.00457450
add esp, 0x28
lea eax, [ebp - 0x20c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebx + 0x5d140]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4e1edc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov eax, dword [edi + 0x20]
cmp eax, esi
je 0x44e7f9
cmp dword [eax + 0x2448], 0xffffffff
jne 0x44e7f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 8]
mov ecx, dword [edi + 0x20]
mov dword [ecx + 0x2448], eax
push dword [edi + 0x1c]
mov eax, dword [ebx]
push 2
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44ed6f
mov eax, dword [ebx]
push esi
push 3
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44ed6f
mov ecx, ebx
call fcn.0044e29b
test eax, eax
je 0x44ed65
mov eax, dword [ebx]
push esi
push 4
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44ed6f
cmp dword [ebx + 0x2714], esi
je 0x44ed4b
mov eax, dword [ebx + 0x5d120]
cmp eax, dword [ebx + 0x5d130]
jne 0x44ea1d
mov eax, dword [ebx + 0x5d124]
cmp eax, dword [ebx + 0x5d134]
jne 0x44ea1d
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044c2e7
mov dword [ebx + 0x5d118], 7
jmp 0x44e8a5
cmp dword [ebx + 0x2690], esi
je 0x44e8ad
push 1
push dword [ebp + 8]
mov ecx, ebx
mov dword [edi + 0x28], esi
call fcn.0044e1c6
test eax, eax
je 0x44ed65
xor eax, eax
inc eax
jmp 0x44ed71
mov eax, dword [ebx + 0x26d4]
cmp eax, 0x12e
jne 0x44e963
xor eax, eax
push 0x1046
mov word [ebp - 0x1254], ax
lea eax, [ebp - 0x1252]
push esi
push eax
call fcn.00457450
add esp, 0xc
push 0x1048
lea eax, [ebp - 0x1254]
push eax
push edi
mov ecx, ebx
call fcn.0044a56b
test eax, eax
je 0x44ed65
push esi
push dword [edi + 0x20]
lea eax, [ebp - 0x1254]
push eax
call fcn.0044a20b
add esp, 0xc
test eax, eax
je 0x44ed65
cmp dword [edi + 0x24], esi
jne 0x44e944
push 0x1048
lea edi, [ebx + 0x5f5e0]
push esi
push edi
call fcn.00457450
lea eax, [ebp - 0x1254]
push eax
push 0x4e1b84
push 0x823
push edi
call fcn.004495f2
add esp, 0x1c
push esi
mov ecx, ebx
call fcn.0044dd87
test eax, eax
je 0x44ed65
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044c2e7
jmp 0x44e8a5
cmp eax, 0x194
jne 0x44e88e
xor eax, eax
inc eax
mov dword [ebx + 0x2470], eax
mov edi, dword [edi + 0x20]
cmp edi, esi
je 0x44e6fa
mov dword [edi + 0x244c], eax
jmp 0x44e6fa
cmp dword [edi], esi
jne 0x44e9eb
mov eax, dword [edi + 4]
cmp eax, esi
je 0x44e9eb
push edi
mov ecx, ebx
mov dword [edi + 0x1c], eax
call fcn.0044a3b5
mov eax, dword [ebx + 0x5d120]
cmp eax, dword [edi + 0x38]
jne 0x44e88e
mov eax, dword [ebx + 0x5d124]
cmp eax, dword [edi + 0x3c]
jne 0x44e88e
xor eax, eax
cmp dword [ebx + 0x2690], esi
je 0x44e9d4
cmp dword [edi + 0x30], 1
sete al
jmp 0x44e9d5
inc eax
cmp eax, esi
je 0x44e88e
mov eax, dword [edi + 0x30]
mov dword [ebx + 0x2714], eax
jmp 0x44e7d7
push 0x4e24dc
lea eax, [edi + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x44e88e
mov dword [ebx + 0x2714], esi
mov dword [edi + 0x30], esi
mov dword [ebx + 0x26e0], 0x8000000
jmp 0x44e88e
push 4
lea eax, [ebp - 0x1274]
push eax
push 6
push dword [edi + 0x1c]
mov dword [ebp - 0x1274], 0x4e20
call dword [sym.imp.WININET.dll_InternetSetOptionW]
and dword [edi + 0x8040], esi
and dword [ebp - 0x1258], esi
lea esi, [ebx + 0x26fc]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
sar eax, 2
test eax, eax
jbe 0x44ea85
push dword [ebp - 0x1258]
mov ecx, esi
call fcn.0044a8cf
mov eax, dword [eax]
cmp dword [eax], 0
je 0x44eacf
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
inc dword [ebp - 0x1258]
sar eax, 2
cmp dword [ebp - 0x1258], eax
jb 0x44ea5a
push 8
xor eax, eax
and dword [ebp - 0x1258], eax
pop ecx
lea edi, [ebp - 0x1294]
rep stosd dword es:[edi], eax
lea edx, [ebx + 0x5cfd8]
push 0x20
pop ecx
mov edi, edx
lea esi, [ebp - 0x1294]
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x44eab4
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x44eafe
inc dword [ebp - 0x1258]
add edx, 0x20
cmp dword [ebp - 0x1258], 0xa
jb 0x44ea9e
jmp 0x44e954
push dword [ebp - 0x1258]
mov ecx, esi
call fcn.0044a8cf
mov eax, dword [eax]
push dword [ebp - 0x1258]
mov ecx, esi
mov dword [eax], 1
call fcn.0044a8cf
mov eax, dword [eax]
mov dword [edi + 0x8040], eax
jmp 0x44ecdc
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x1270], eax
cmp eax, 0xffffffff
je 0x44e954
or dword [ebp - 0x125c], 0xffffffff
xor eax, eax
mov dword [ebp - 0x1264], eax
mov dword [ebp - 0x1260], eax
mov dword [ebp - 0x1258], eax
mov eax, dword [ebx + 0x270c]
sub eax, dword [ebx + 0x2708]
sar eax, 2
test eax, eax
jbe 0x44e954
push dword [ebp - 0x1258]
lea esi, [ebx + 0x26fc]
mov ecx, esi
call fcn.0044a8cf
mov edi, dword [eax]
push dword [ebp - 0x1258]
add edi, 0x18
mov ecx, esi
mov dword [ebp - 0x1268], edi
call fcn.0044a8cf
mov eax, dword [eax]
mov esi, dword [eax + 0x10]
sub esi, dword [edi]
mov edi, dword [eax + 0x14]
mov eax, dword [ebp - 0x1268]
push dword [ebp - 0x1258]
sbb edi, dword [eax + 4]
lea ecx, [ebx + 0x26fc]
call fcn.0044a8cf
mov eax, dword [eax]
sub esi, dword [eax + 8]
sbb edi, dword [eax + 0xc]
add esi, 1
adc edi, 0
cmp edi, dword [ebp - 0x1260]
jl 0x44ebcc
jg 0x44ebb4
cmp esi, dword [ebp - 0x1264]
jbe 0x44ebcc
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0x1264], esi
mov dword [ebp - 0x1260], edi
mov dword [ebp - 0x125c], eax
mov eax, dword [ebx + 0x270c]
sub eax, dword [ebx + 0x2708]
inc dword [ebp - 0x1258]
sar eax, 2
cmp dword [ebp - 0x1258], eax
jb 0x44eb45
cmp dword [ebp - 0x125c], 0xffffffff
je 0x44e954
cmp dword [ebp - 0x1260], 0
jl 0x44e954
jg 0x44ec19
cmp dword [ebp - 0x1264], 0x40000
jbe 0x44e954
mov eax, dword [ebp - 0x1270]
push dword [ebp - 0x125c]
shl eax, 5
lea esi, [eax + ebx]
lea edi, [esi + 0x5cfd8]
lea ecx, [ebx + 0x26fc]
mov dword [edi], 1
call fcn.0044a8cf
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
push dword [ebp - 0x125c]
mov dword [esi + 0x5cfe8], ecx
mov eax, dword [eax + 0x14]
lea ecx, [ebx + 0x26fc]
mov dword [esi + 0x5cfec], eax
call fcn.0044a8cf
mov esi, dword [eax]
push 0xffffffffffffffff
push 0xfffffffffffffffe
push dword [ebp - 0x1260]
push dword [ebp - 0x1264]
call fcn.00459b90
add dword [esi + 0x10], eax
push dword [ebp - 0x125c]
adc dword [esi + 0x14], edx
lea esi, [ebx + 0x26fc]
mov ecx, esi
call fcn.0044a8cf
mov eax, dword [eax]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x1270]
add ecx, 1
adc edx, 0
add eax, 0x2e7f
shl eax, 5
mov dword [eax + ebx], ecx
mov dword [eax + ebx + 4], edx
lea eax, [ebp - 0x1268]
push eax
mov ecx, esi
mov dword [ebp - 0x1268], edi
call fcn.0044d71d
mov eax, dword [ebp - 0x126c]
mov dword [eax + 0x8040], edi
mov edi, eax
mov eax, dword [edi + 0x8040]
xor esi, esi
cmp dword [eax + 8], esi
jne 0x44ecfe
cmp dword [eax + 0xc], esi
jne 0x44ecfe
mov dword [eax + 4], 1
mov dword [edi + 0x28], 8
jmp 0x44ed10
push esi
push dword [ebp + 8]
mov ecx, ebx
mov dword [edi + 0x28], 4
call fcn.0044e1c6
cmp dword [ebx + 0x2690], esi
jne 0x44ed39
xor esi, esi
inc esi
lea edi, [ebx + 0x2468]
cmp dword [edi], esi
jbe 0x44ed37
push 4
mov ecx, ebx
call fcn.0044dd87
test eax, eax
je 0x44ed37
inc esi
cmp esi, dword [edi]
jb 0x44ed25
xor esi, esi
mov eax, dword [ebx]
push esi
push 5
mov ecx, ebx
call dword [eax + 4]
neg eax
sbb eax, eax
neg eax
jmp 0x44ed71
mov eax, dword [ebx]
push esi
push 5
mov ecx, ebx
call dword [eax + 4]
test eax, eax
je 0x44ed6f
mov dword [edi + 0x28], 8
jmp 0x44e8a5
push dword [ebp + 8]
mov ecx, ebx
call fcn.0044c2e7
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0045759d
leave
ret 4