Function at 0x44afb0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d1c60
mov eax, dword fs:[0]
push eax
sub esp, 0x390
mov eax, dword [0x651da0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x368], 0
mov ecx, 0x67b5d0
call fcn.0059f048
mov dword [ebp - 0x14], 0
push 0x5f1960
mov ecx, dword [ebp + 0x10]
call fcn.00428360
cmp dword [ebp + 8], 0
je 0x44b012
cmp dword [ebp + 0xc], 0
jne 0x44b01a
mov eax, dword [ebp - 0x14]
jmp 0x44bb6f
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00404ad0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00404b80
mov byte [ebp - 4], 1
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x5c]
call fcn.00404ad0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.0040e960
movzx eax, al
test eax, eax
jne 0x44b061
call fcn.0046e130
test eax, eax
jne 0x44b09c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
call fcn.00404fb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00404fb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00404fb0
mov eax, dword [ebp - 0x124]
jmp 0x44bb6f
cmp dword [ebp + 0x18], 0
je 0x44b5fd
cmp dword [ebp + 0x14], 0
je 0x44b4cd
push 0x3f
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
call fcn.005a54a0
add esp, 8
test eax, eax
je 0x44b2cc
lea ecx, [ebp - 0x5c]
call fcn.00429730
test eax, eax
jbe 0x44b122
push 0x5ff258
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x158]
push ecx
call fcn.00427ad0
add esp, 0xc
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x368]
or eax, 1
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x370]
mov dword [ebp - 0x374], ecx
jmp 0x44b166
push 0x5f1960
lea ecx, [ebp - 0x170]
call fcn.00404ad0
mov dword [ebp - 0x378], eax
mov edx, dword [ebp - 0x378]
mov dword [ebp - 0x37c], edx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x368]
or eax, 2
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x374]
mov dword [ebp - 0x140], edx
push str._04d_02d_02d_02d_02d_02d
lea eax, [ebp - 0x13c]
push eax
call fcn.00445c60
add esp, 8
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x384], ecx
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x384]
push edx
push 0x5ff254
mov eax, dword [ebp - 0x140]
push eax
push 0x5ff258
lea ecx, [ebp - 0x188]
push ecx
call fcn.00436ad0
add esp, 0xc
mov dword [ebp - 0x388], eax
mov edx, dword [ebp - 0x388]
mov dword [ebp - 0x38c], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.00427a50
add esp, 0xc
mov dword [ebp - 0x390], eax
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x394], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x394]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
call fcn.004367c0
add esp, 0xc
mov dword [ebp - 0x398], eax
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x39c], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00409dd0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1b8]
call fcn.00404fb0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1a0]
call fcn.00404fb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x188]
call fcn.00404fb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x13c]
call fcn.00404fb0
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x368]
and ecx, 2
je 0x44b2a3
and dword [ebp - 0x368], 0xfffffffd
lea ecx, [ebp - 0x170]
call fcn.00404fb0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x368]
and edx, 1
je 0x44b2c7
and dword [ebp - 0x368], 0xfffffffe
lea ecx, [ebp - 0x158]
call fcn.00404fb0
jmp 0x44b4c8
lea ecx, [ebp - 0x5c]
call fcn.00429730
test eax, eax
jbe 0x44b323
push 0x5ff258
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x1ec]
push ecx
call fcn.00427ad0
add esp, 0xc
mov dword [ebp - 0x36c], eax
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x368]
or eax, 4
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x370]
mov dword [ebp - 0x374], ecx
jmp 0x44b367
push 0x5f1960
lea ecx, [ebp - 0x204]
call fcn.00404ad0
mov dword [ebp - 0x378], eax
mov edx, dword [ebp - 0x378]
mov dword [ebp - 0x37c], edx
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x368]
or eax, 8
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x374]
mov dword [ebp - 0x1d4], edx
push str._04d_02d_02d_02d_02d_02d
lea eax, [ebp - 0x1d0]
push eax
call fcn.00445c60
add esp, 8
mov dword [ebp - 0x380], eax
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x384], ecx
mov dword [ebp - 4], 0xb
mov edx, dword [ebp - 0x384]
push edx
push 0x5ff254
mov eax, dword [ebp - 0x1d4]
push eax
push 0x5ff25c
lea ecx, [ebp - 0x21c]
push ecx
call fcn.00436ad0
add esp, 0xc
mov dword [ebp - 0x388], eax
mov edx, dword [ebp - 0x388]
mov dword [ebp - 0x38c], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.00427a50
add esp, 0xc
mov dword [ebp - 0x390], eax
mov edx, dword [ebp - 0x390]
mov dword [ebp - 0x394], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x394]
push eax
lea ecx, [ebp - 0x24c]
push ecx
call fcn.004367c0
add esp, 0xc
mov dword [ebp - 0x398], eax
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x39c], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x44]
call fcn.00409dd0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x24c]
call fcn.00404fb0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x234]
call fcn.00404fb0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x21c]
call fcn.00404fb0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1d0]
call fcn.00404fb0
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x368]
and ecx, 8
je 0x44b4a4
and dword [ebp - 0x368], 0xfffffff7
lea ecx, [ebp - 0x204]
call fcn.00404fb0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x368]
and edx, 4
je 0x44b4c8
and dword [ebp - 0x368], 0xfffffffb
lea ecx, [ebp - 0x1ec]
call fcn.00404fb0
jmp 0x44b5fd
push 0x3f
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
call fcn.005a54a0
add esp, 8
test eax, eax
je 0x44b575
push str._04d_02d_02d_02d_02d_02d
lea eax, [ebp - 0x264]
push eax
call fcn.00445c60
add esp, 8
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x370]
push edx
push 0x5ff260
lea eax, [ebp - 0x27c]
push eax
call fcn.00436ad0
add esp, 0xc
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
mov dword [ebp - 0x378], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x378]
push edx
lea ecx, [ebp - 0x44]
call fcn.00409dd0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x27c]
call fcn.00404fb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x264]
call fcn.00404fb0
jmp 0x44b5fd
push str._04d_02d_02d_02d_02d_02d
lea eax, [ebp - 0x294]
push eax
call fcn.00445c60
add esp, 8
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x370]
push edx
push 0x5ff264
lea eax, [ebp - 0x2ac]
push eax
call fcn.00436ad0
add esp, 0xc
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
mov dword [ebp - 0x378], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x378]
push edx
lea ecx, [ebp - 0x44]
call fcn.00409dd0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2ac]
call fcn.00404fb0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x294]
call fcn.00404fb0
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004418c0
push 0xc
lea ecx, [ebp - 0x68]
call fcn.0040d070
lea ecx, [ebp - 0x68]
call fcn.0043e660
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.0045f880
add esp, 8
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], ecx
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x370]
push edx
lea ecx, [ebp - 0x68]
call fcn.004790c0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x2c4]
call fcn.004095d0
push 0xa4
call fcn.0059ebbe
add esp, 4
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x2cc], 0
je 0x44b6ae
push 0xa4
mov ecx, dword [ebp - 0x2cc]
call fcn.0040d070
mov ecx, dword [ebp - 0x2cc]
call fcn.0054fe90
mov dword [ebp - 0x36c], eax
jmp 0x44b6b8
mov dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x2c8], eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x6c], ecx
push 2
mov ecx, dword [ebp - 0x6c]
call fcn.00550dc0
mov ecx, dword [ebp - 0x6c]
call fcn.00550900
test eax, eax
je 0x44b8cd
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x2d0], esp
lea eax, [ebp - 0x68]
push eax
call fcn.0043e6a0
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x6c]
call fcn.00550e90
mov dword [ebp - 0x70], 0
push str.Cache_Control:_no_cache
mov eax, dword [ebp - 0x70]
push eax
call sym.adsRise3_yd.exe_curl_slist_append
add esp, 8
mov dword [ebp - 0x70], eax
push str.Connection:_close
mov eax, dword [ebp - 0x70]
push eax
call sym.adsRise3_yd.exe_curl_slist_append
add esp, 8
mov dword [ebp - 0x70], eax
push str.Content_Type:_application_x_www_form_urlencoded
mov eax, dword [ebp - 0x70]
push eax
call sym.adsRise3_yd.exe_curl_slist_append
add esp, 8
mov dword [ebp - 0x70], eax
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_115.0.0.0_Safari_537.36_curl
mov eax, dword [ebp - 0x70]
push eax
call sym.adsRise3_yd.exe_curl_slist_append
add esp, 8
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
push eax
push 0x2727
mov ecx, dword [ebp - 0x6c]
call fcn.00550900
push eax
call sym.adsRise3_yd.exe_curl_easy_setopt
add esp, 0xc
cmp dword [ebp + 0x20], 0
je 0x44b832
push str.ckies
lea eax, [ebp - 0x2e8]
push eax
call fcn.004543f0
add esp, 4
mov dword [ebp - 0x36c], eax
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x370]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00427a50
add esp, 0xc
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2e8]
call fcn.00404fb0
lea ecx, [ebp - 0x88]
call fcn.0040d5e0
push eax
push 0x272f
mov ecx, dword [ebp - 0x6c]
call fcn.00550900
push eax
call sym.adsRise3_yd.exe_curl_easy_setopt
add esp, 0xc
lea ecx, [ebp - 0x88]
call fcn.0040d5e0
push eax
push 0x2762
mov ecx, dword [ebp - 0x6c]
call fcn.00550900
push eax
call sym.adsRise3_yd.exe_curl_easy_setopt
add esp, 0xc
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x88]
call fcn.00404fb0
cmp dword [ebp + 0x14], 0
je 0x44b845
mov ecx, dword [ebp - 0x6c]
call fcn.00550210
mov dword [ebp - 0x14], eax
jmp 0x44b8bc
lea ecx, [ebp - 0x5c]
call fcn.0040d5e0
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0045f880
add esp, 8
mov byte [ebp - 4], 0x1a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2ec], esp
lea eax, [ebp - 0xa0]
push eax
call fcn.004081b0
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x6c]
call fcn.00550df0
lea ecx, [ebp - 0xa0]
call fcn.004783b0
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.00550e60
mov ecx, dword [ebp - 0x6c]
call fcn.005504d0
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xa0]
call fcn.004095d0
mov ecx, dword [ebp - 0x6c]
call fcn.00550a10
push eax
mov ecx, dword [ebp + 0x10]
call fcn.0042b360
cmp dword [ebp - 0x14], 0
je 0x44b9d4
cmp dword [ebp + 0x14], 0
je 0x44b957
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x2f0], esp
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407f90
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x308]
push ecx
mov byte [ebp - 4], 0x13
call fcn.00469df0
add esp, 0x1c
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
mov dword [ebp - 0x374], edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x374]
call fcn.0040d5e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
push str.curl_Get_Success._Url:_s_Data:_s
call fcn.004787b0
add esp, 0xc
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x308]
call fcn.00404fb0
jmp 0x44b9cf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x30c], esp
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407f90
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x324]
push ecx
mov byte [ebp - 4], 0x13
call fcn.00469df0
add esp, 0x1c
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
mov dword [ebp - 0x374], edx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x374]
call fcn.0040d5e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
push str.curl_Post_Success._Url:_s_Data:_s
call fcn.004787b0
add esp, 0xc
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x324]
call fcn.00404fb0
jmp 0x44baf7
cmp dword [ebp + 0x14], 0
je 0x44ba6d
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x328], esp
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407f90
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x340]
push ecx
mov byte [ebp - 4], 0x13
call fcn.00469df0
add esp, 0x1c
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
mov dword [ebp - 0x374], edx
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x374]
call fcn.0040d5e0
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.00550a40
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.005508d0
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
push str.curl_Get_Failed__Url:_s_StatusCode:_d_ResponseCode:_d_Data:_s
call fcn.004787b0
add esp, 0x14
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x340]
call fcn.00404fb0
jmp 0x44baf7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x344], esp
mov eax, dword [ebp + 0x10]
push eax
call fcn.00407f90
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x35c]
push ecx
mov byte [ebp - 4], 0x13
call fcn.00469df0
add esp, 0x1c
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
mov dword [ebp - 0x374], edx
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x374]
call fcn.0040d5e0
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.00550a40
push eax
mov ecx, dword [ebp - 0x6c]
call fcn.005508d0
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040d5e0
push eax
push str.curl_Post_Failed__Url:_s_StatusCode:_d_ResponseCode:_d_Data:_s
call fcn.004787b0
add esp, 0x14
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x35c]
call fcn.00404fb0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0
je 0x44bb1e
push 1
mov ecx, dword [ebp - 0x360]
call fcn.00441e60
mov dword [ebp - 0x36c], eax
jmp 0x44bb28
mov dword [ebp - 0x36c], 0
call fcn.0046e450
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x68]
call fcn.00440370
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
call fcn.00404fb0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x44]
call fcn.00404fb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00404fb0
mov eax, dword [ebp - 0x364]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059f07a
mov esp, ebp
pop ebp
ret