Function at 0x44b3c0
Capabilities:
Delete file
Download url
Receive data

Disassembly:
push ebp
mov ecx, 2
mov ebp, esp
push edi
push esi
mov esi, edx
push ebx
mov ebx, eax
sub esp, 0x3c
test edx, edx
setne dl
movzx edx, dl
add edx, 4
call fcn.004498c0
mov edi, dword [0x49f70c]
mov dword [0x49f86c], 0
mov dword [0x49f870], 1
mov dword [0x49f8c4], 0
mov dword [0x49f8c8], 1
mov dword [0x49f8f0], 0
mov dword [0x49f8f4], 1
test edi, edi
jne 0x44b4a0
mov eax, dword [0x49cf68]
mov dword [0x49f8a8], 0
mov dword [0x49f8ac], 1
mov dword [0x49f85c], 0
mov dword [0x49f860], 1
test eax, eax
je 0x44b801
cmp eax, 5
je 0x44b801
cmp eax, 2
je 0x44bb40
mov dword [0x49f834], 0
mov dword [0x49f838], 1
mov dword [0x49f82c], 0
mov dword [0x49f830], 1
jmp 0x44b8e6
mov eax, dword [0x49cf68]
mov dword [0x49f85c], 0
mov dword [0x49f860], 1
test eax, 0xfffffffd
jne 0x44b7e0
mov dword [0x49f730], 1
mov dword [0x49f784], 0
mov dword [0x49f788], 1
mov dword [0x49f764], 0
mov dword [0x49f768], 1
mov dword [esp + 0x10], 0x45c768
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x4962f8
mov dword [esp + 4], 0x49cf80
mov dword [esp], 0
call sub.urlmon.dll_URLDownloadToFileW
sub esp, 0x14
mov edi, eax
mov dword [esp + 4], 0xe07
mov dword [esp], 0x491720
call fcn.0045a5b0
xor eax, eax
test edi, edi
mov dword [esp + 8], edi
sete al
mov dword [esp + 4], str.URLDownloadToFile_failed:__08x_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe09
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f86c]
mov dword [esp + 4], str.expected_GetBindInfo_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe0a
mov dword [esp], 0x491720
mov dword [0x49f86c], 0
mov dword [0x49f870], 0
call fcn.0045a5b0
mov eax, dword [0x49f8c4]
mov dword [esp + 4], str.expected_QueryInterface_IInternetProtocol_n
mov dword [esp], eax
call fcn.0045a820
mov ecx, dword [0x49f70c]
mov dword [0x49f8c4], 0
mov dword [0x49f8c8], 0
test ecx, ecx
je 0x44ba45
mov dword [0x49f8f0], 0
mov dword [0x49f8f4], 0
mov dword [esp + 4], 0xe11
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f85c]
mov dword [esp + 4], str.expected_OnStartBinding_n
mov dword [esp], eax
call fcn.0045a820
mov edx, dword [0x49f70c]
mov dword [0x49f85c], 0
mov dword [0x49f860], 0
mov eax, dword [0x49cf68]
test edx, edx
je 0x44b913
test eax, 0xfffffffd
je 0x44b7f2
call fcn.00448a00
test eax, eax
jne 0x44b7f2
mov dword [esp + 4], 0xe15
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f784]
mov dword [esp + 4], str.expected_Start_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe16
mov dword [esp], 0x491720
mov dword [0x49f784], 0
mov dword [0x49f788], 0
call fcn.0045a5b0
mov eax, dword [0x49f764]
mov dword [esp + 4], str.expected_UnlockRequest_n
mov dword [esp], eax
call fcn.0045a820
mov dword [0x49f764], 0
mov dword [0x49f768], 0
mov eax, dword [sym.imp.kernel32.dll_DeleteFileA]
mov dword [esp], str.dwl.html
mov edi, dword fs:[0x18]
mov dword [ebp - 0x20], eax
call eax
sub esp, 4
mov dword [ebp - 0x1c], eax
mov dword [esp + 4], 0xe36
mov dword [esp], 0x491720
call fcn.0045a5b0
mov ecx, dword [edi + 0x34]
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], str.DeleteFile_failed:__u_n
mov dword [esp + 8], ecx
mov dword [esp], eax
call fcn.0045a820
cmp ebx, 2
jne 0x44b7ce
and esi, 1
jne 0x44b7ce
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x4962f8
mov dword [esp + 4], 0x49cf80
mov dword [esp], 0
call sub.urlmon.dll_URLDownloadToFileW
sub esp, 0x14
mov ebx, eax
mov dword [esp + 4], 0xe3c
mov dword [esp], 0x491720
call fcn.0045a5b0
xor eax, eax
test ebx, ebx
mov dword [esp + 8], ebx
sete al
mov dword [esp + 4], str.URLDownloadToFile_failed:__08x_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp], str.dwl.html
mov eax, dword [ebp - 0x20]
call eax
sub esp, 4
mov ebx, eax
mov dword [esp + 4], 0xe3f
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [edi + 0x34]
mov dword [esp + 4], str.DeleteFile_failed:__u_n
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.0045a820
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.00448a00
test eax, eax
je 0x44b4ce
jmp 0x44b4c4
mov dword [0x49f730], 0
jmp 0x44b65a
mov dword [0x49f88c], 0
mov dword [0x49f890], 1
mov dword [0x49f87c], 0
mov dword [0x49f880], 1
mov dword [0x49f874], 0
mov dword [0x49f878], 1
mov dword [0x49f8bc], 0
mov dword [0x49f8c0], 1
mov dword [0x49f84c], 0
mov dword [0x49f850], 1
mov dword [0x49f83c], 0
mov dword [0x49f840], 1
mov dword [0x49f8e8], 0
mov dword [0x49f8ec], 1
mov dword [0x49f884], 0
mov dword [0x49f888], 1
mov dword [0x49f834], 0
mov dword [0x49f838], 1
mov dword [0x49f82c], 0
mov dword [0x49f830], 1
cmp eax, 2
je 0x44bb95
mov dword [0x49f824], 0
mov dword [0x49f828], 1
mov dword [0x49f81c], 0
mov dword [0x49f820], 1
mov dword [0x49f80c], 0
mov dword [0x49f810], 1
jmp 0x44b4f6
test eax, eax
je 0x44bbb0
cmp eax, 5
je 0x44bbb0
cmp eax, 2
je 0x44bae0
mov dword [esp + 4], 0xe2b
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f834]
mov dword [esp + 4], str.expected_OnProgress_MIMETYPEAVAILABLE_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe2c
mov dword [esp], 0x491720
mov dword [0x49f834], 0
mov dword [0x49f838], 0
call fcn.0045a5b0
mov eax, dword [0x49f82c]
mov dword [esp + 4], str.expected_OnProgress_BEGINDOWNLOADDATA_n
mov dword [esp], eax
call fcn.0045a820
mov eax, dword [0x49cf68]
mov dword [0x49f82c], 0
mov dword [0x49f830], 0
cmp eax, 2
je 0x44bce4
test eax, eax
je 0x44bac4
cmp eax, 5
je 0x44bac4
mov dword [esp + 4], 0xe31
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f81c]
mov dword [esp + 4], str.expected_OnProgress_ENDDOWNLOADDATA_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe32
mov dword [esp], 0x491720
mov dword [0x49f81c], 0
mov dword [0x49f820], 0
call fcn.0045a5b0
mov eax, dword [0x49f80c]
mov dword [esp + 4], str.expected_OnStopBinding_n
mov dword [esp], eax
call fcn.0045a820
mov dword [0x49f80c], 0
mov dword [0x49f810], 0
jmp 0x44b6d4
mov dword [esp + 4], 0xe0c
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f8f0]
mov dword [esp + 4], str.expected_QueryInterface_IServiceProvider_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe0d
mov dword [esp], 0x491720
mov dword [0x49f8f0], 0
mov dword [0x49f8f4], 0
call fcn.0045a5b0
mov eax, dword [0x49f8a8]
mov dword [esp + 4], str.expected_QueryService_IInternetProtocol_n
mov dword [esp], eax
call fcn.0045a820
mov dword [0x49f8a8], 0
mov dword [0x49f8ac], 0
jmp 0x44b5f2
mov dword [0x49f824], 0
mov dword [0x49f828], 0
jmp 0x44b9c6
mov dword [esp + 4], 0xe24
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f83c]
mov dword [esp + 4], str.expected_OnProgress_SENDINGREQUEST_n
mov dword [esp], eax
call fcn.0045a820
mov eax, dword [0x49cf68]
mov dword [0x49f83c], 0
mov dword [0x49f840], 0
test eax, eax
je 0x44bc8e
cmp eax, 5
jne 0x44b92d
jmp 0x44bc8e
mov dword [0x49f83c], 0
mov dword [0x49f840], 1
mov dword [0x49f834], 0
mov dword [0x49f838], 1
mov dword [0x49f82c], 0
mov dword [0x49f830], 1
mov dword [0x49f814], 0
mov dword [0x49f818], 1
jmp 0x44b8e6
mov dword [0x49f814], 0
mov dword [0x49f818], 1
jmp 0x44b8d2
mov dword [esp + 4], 0xe19
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f8e8]
mov dword [esp + 4], str.expected_QueryInterface_IHttpNegotiate_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe1a
mov dword [esp], 0x491720
mov dword [0x49f8e8], 0
mov dword [0x49f8ec], 0
call fcn.0045a5b0
mov eax, dword [0x49f88c]
mov dword [esp + 4], str.expected_BeginningTransaction_n
mov dword [esp], eax
call fcn.0045a820
mov eax, dword [0x49f4a4]
mov dword [0x49f88c], 0
mov dword [0x49f890], 0
test eax, eax
jne 0x44bd30
mov eax, dword [0x49cf68]
mov dword [0x49f8bc], 0
mov dword [0x49f8c0], 0
mov dword [0x49f84c], 0
mov dword [0x49f850], 0
cmp eax, 2
je 0x44bae0
test eax, eax
je 0x44bc7a
cmp eax, 5
jne 0x44b92d
mov dword [0x49f83c], 0
mov dword [0x49f840], 0
mov dword [esp + 4], 0xe29
mov dword [esp], 0x491720
mov dword [0x49f8e8], 0
mov dword [0x49f8ec], 0
call fcn.0045a5b0
mov eax, dword [0x49f884]
mov dword [esp + 4], str.expected_OnResponse_n
mov dword [esp], eax
call fcn.0045a820
mov dword [0x49f884], 0
mov dword [0x49f888], 0
jmp 0x44b92d
mov dword [esp + 4], 0xe2e
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f814]
mov dword [esp + 4], str.expected_OnProgress_CACHEFILENAMEAVAILABLE_n
mov dword [esp], eax
call fcn.0045a820
mov eax, dword [0x49cf68]
mov dword [0x49f814], 0
mov dword [0x49f818], 0
jmp 0x44b9b5
mov dword [esp + 4], 0xe1d
mov dword [esp], 0x491720
call fcn.0045a5b0
mov eax, dword [0x49f87c]
mov dword [esp + 4], str.expected_QueryInterface_IHttpNegotiate2_n
mov dword [esp], eax
call fcn.0045a820
mov dword [esp + 4], 0xe1e
mov dword [esp], 0x491720
mov dword [0x49f87c], 0
mov dword [0x49f880], 0
call fcn.0045a5b0
mov eax, dword [0x49f874]
mov dword [esp + 4], str.expected_GetRootSecurityId_n
mov dword [esp], eax
call fcn.0045a820
mov dword [0x49f874], 0
mov dword [0x49f878], 0
jmp 0x44bc37