Function at 0x44f0b7
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 0
mov eax, 3
mov ebx, 0x533410
call fcn.004c00ae
add esp, 4
mov dword [0x103f430], eax
mov eax, 0x685e5b
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x44f109
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov eax, 0x85db7e
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044f809
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f133
push ebx
call fcn.004c0096
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x44f15c
mov eax, 0x85db82
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x44f153
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [ebp - 4], eax
jmp 0x44f176
mov eax, 0x85db85
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x44f172
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [ebp - 4], eax
push str._aria2
push dword [ebp - 4]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x44f1a2
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.0044f809
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x44f28a
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x44f1cf
mov eax, 0x685e5b
push eax
push 1
mov ebx, 0x4c3230
call fcn.004c00a2
add esp, 0x10
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 1
push 0xc8
call fcn.0044fd92
lea eax, [ebp - 8]
push eax
call fcn.0044f809
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x44f28a
mov eax, 0x85db85
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x44f230
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [ebp - 4], eax
push str._aria2
push dword [ebp - 4]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x44f260
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [ebp - 8], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 8]
test eax, eax
jne 0x44f277
mov eax, 0x685e5b
push eax
push 1
mov ebx, 0x4c3230
call fcn.004c00a2
add esp, 0x10
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 1
push 0xc8
call fcn.0044fd92
push str._nzhttp.exe
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
push reloc.WS2_32.dll_getpeername
push 0
push 0x85db9b
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x44f2e3
mov eax, 0x685e5b
push eax
push 2
mov ebx, 0x4c3320
call fcn.004c00a2
add esp, 0x1c
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f306
push ebx
call fcn.004c0096
add esp, 4
push 0x912ba3
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [0x103f434]
test ebx, ebx
je 0x44f335
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov dword [0x103f434], eax
push 0x103f434
call fcn.0044ffeb
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x44f386
push reloc.WS2_32.dll_getpeername
push 0
push 0x912baf
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x103f434]
test eax, eax
jne 0x44f373
mov eax, 0x685e5b
push eax
push 2
mov ebx, 0x4c3320
call fcn.004c00a2
add esp, 0x1c
push 0x103f434
push 0x1a8e
call fcn.00450448
mov dword [ebp - 0x10], eax
push 0x685e5b
push dword [ebp - 0x10]
call fcn.00401abc
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f3c6
push ebx
call fcn.004c0096
add esp, 4
cmp dword [ebp - 0x14], 0
je 0x44f3dc
mov dword [ebp - 0xc], 1
jmp 0x44f3e3
mov dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 0
push 0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x14], 0
push 0
push dword [ebp - 0x14]
push 0x459694
call fcn.004568c3
push 1
push 0
push 1
push 1
push 5
call fcn.0044fd92
push 0xdac7b7
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0045695c
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f44f
push ebx
call fcn.004c0096
add esp, 4
push str.jk2.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0045695c
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f480
push ebx
call fcn.004c0096
add esp, 4
push str.jk3.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0045695c
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f4b1
push ebx
call fcn.004c0096
add esp, 4
push 0x764f53
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
push 1
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_50.0.2661.87_Safari_537.36
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 1
mov eax, str.jk1.ico
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, str.https:__www.baidu.com_favicon.ico
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0045699e
mov ebx, eax
test ebx, ebx
je 0x44f50b
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x44f51b
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x44f52b
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f53b
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x44f54b
push ebx
call fcn.004c0096
add esp, 4
push 0x685e5b
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.00401abc
add esp, 8
cmp eax, 0
je 0x44f5d9
push str.jk2.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_50.0.2661.87_Safari_537.36
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 0x10]
push 1
push 1
lea eax, [ebp - 0x10]
push eax
mov eax, str.https:__www.baidu.com_favicon.ico
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
call fcn.0045807c
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x44f5b9
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f5c9
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x44f5d9
push ebx
call fcn.004c0096
add esp, 4
push str.jk3.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_50.0.2661.87_Safari_537.36
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, 0x685e5b
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push 1
push 4
lea eax, [ebp - 0x10]
push eax
mov eax, str.https:__www.baidu.com_favicon.ico
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0045807c
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x44f635
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f645
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x44f655
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x44f665
push ebx
call fcn.004c0096
add esp, 4
push 1
push 0
push 1
push 1
push 5
call fcn.0044fd92
push 0xdac7b7
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044ffeb
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f6b1
push ebx
call fcn.004c0096
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x44f6f1
push 0x85da37
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x44f6eb
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
push str.jk2.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044ffeb
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f725
push ebx
call fcn.004c0096
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x44f765
push 0x85da94
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x44f75f
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
push str.jk3.ico
push dword [ebp - 8]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
call fcn.0044ffeb
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x44f799
push ebx
call fcn.004c0096
add esp, 4
cmp dword [ebp - 0x14], 1
jne 0x44f7d9
push 0x85db4a
mov ebx, dword [ebp + 8]
push dword [ebx]
mov ecx, 2
call fcn.0040106f
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x44f7d3
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov eax, dword [ebp - 0xc]
jmp 0x44f7e1
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x44f7f2
push ebx
call fcn.004c0096
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x44f802
push ebx
call fcn.004c0096
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10