Function at 0x440a5f
Capabilities:
Query remote server for available data
Read data from internet
Receive data

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1034
call fcn.00504b10
mov eax, dword [0x5184d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x1024], edx
xor ecx, ecx
mov dword [ebp - 0x1030], esi
mov dword [ebp - 0x1028], eax
mov ebx, ecx
mov dword [ebp - 0x1018], ecx
mov dword [ebp - 0x1014], ecx
mov dword [ebp - 0x1010], ebx
test eax, eax
je 0x440ab4
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov ecx, dword [0x518dc0]
mov dword [ebp - 0x102c], ecx
test ecx, ecx
je 0x440d64
test edi, edi
jne 0x440b56
xor esi, esi
lea eax, [ebp - 0x1018]
push esi
push esi
push esi
push esi
push eax
xor eax, eax
cmp dword [0x518ddc], eax
push esi
setne al
lea eax, [eax*2 + 3]
push eax
push 5
push edx
call dword [0x51cbac]
call dword [ebp - 0x102c]
test eax, eax
jne 0x440b23
call fcn.004c73cc
mov edi, eax
push edi
push edi
push 0x1760140
push dword [ebp - 0x1024]
call dword [sym.imp.certcli.dll_Ordinal_360]
jmp 0x440d66
mov ecx, dword [ebp - 0x1018]
xor edx, edx
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push esi
call fcn.0047a541
mov edi, eax
test edi, edi
je 0x440d64
push edi
push 0x1830140
call dword [sym.imp.certcli.dll_Ordinal_357]
jmp 0x440d66
xor eax, eax
push eax
push eax
mov dword [ebp - 0x100c], eax
lea eax, [ebp - 0x100c]
push eax
push edi
call dword [sym.imp.WININET.dll_InternetQueryDataAvailable]
test eax, eax
jne 0x440b83
call fcn.004c73cc
push eax
push 0x18f0140
call dword [sym.imp.certcli.dll_Ordinal_357]
and dword [ebp - 0x100c], ebx
lea eax, [ebp - 0x101c]
push eax
push 0x1000
lea eax, [ebp - 0x1008]
push eax
push edi
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x440bfb
mov ebx, edi
mov edx, dword [ebp - 0x101c]
test edx, edx
je 0x440c24
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebp - 0x1008]
call fcn.004409df
mov edi, eax
test edi, edi
jne 0x440c0d
mov eax, dword [ebp - 0x101c]
add dword [ebp - 0x100c], eax
lea eax, [ebp - 0x101c]
push eax
push 0x1000
lea eax, [ebp - 0x1008]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x440ba9
mov ebx, dword [ebp - 0x1010]
call fcn.004c73cc
mov edi, eax
push edi
push 0x19a0140
jmp 0x440b4b
push edi
push 0x1a10140
call dword [sym.imp.certcli.dll_Ordinal_357]
mov ebx, dword [ebp - 0x1010]
jmp 0x440d66
push dword [ebp - 0x100c]
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
mov dword [ebp - 0x1014], edi
test edi, edi
jne 0x440c4b
mov edi, 0x8007000e
push edi
push 0x1aa0140
jmp 0x440c13
mov eax, dword [ebp - 0x100c]
mov ebx, dword [ebp - 0x1010]
add eax, edi
mov dword [ebp - 0x1020], eax
mov eax, ebx
test eax, eax
je 0x440c92
mov esi, dword [ebp - 0x1020]
mov edi, ebx
push dword [edi + 4]
sub esi, dword [edi + 4]
lea eax, [edi + 8]
push eax
push esi
call sub.msvcrt.dll_memcpy
mov edi, dword [edi]
add esp, 0xc
test edi, edi
jne 0x440c6d
mov esi, dword [ebp - 0x1030]
mov edi, dword [ebp - 0x1014]
cmp dword [ebp - 0x1028], 0
jne 0x440ce7
mov ecx, dword [0x519984]
test esi, esi
je 0x440cb2
cmp dword [0x51996c], 0
jne 0x440cb2
test ecx, ecx
je 0x440d0f
neg ecx
mov edx, edi
push 0xffffffffffffffff
push dword [ebp - 0x100c]
sbb ecx, ecx
and ecx, 3
call fcn.0045c0bb
test eax, eax
je 0x440ce7
push eax
push 0x1c10140
call dword [sym.imp.certcli.dll_Ordinal_357]
push dword [ebp - 0x100c]
mov edx, edi
xor ecx, ecx
call fcn.004ca44f
test esi, esi
jne 0x440d0f
cmp dword [0x519984], esi
je 0x440d48
push 0x2f
push dword [ebp - 0x1024]
call dword [sym.imp.msvcrt.dll_wcsrchr]
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x440d48
inc esi
add esi, 1
je 0x440d48
xor eax, eax
cmp ax, word [esi]
je 0x440d48
mov eax, dword [0x518dec]
or eax, 2
push eax
push dword [ebp - 0x100c]
push edi
push esi
call dword [sym.imp.certcli.dll_Ordinal_225]
mov edi, eax
test edi, edi
je 0x440d42
push edi
push 0x1d70140
push esi
call dword [sym.imp.certcli.dll_Ordinal_359]
jmp 0x440d66
mov edi, dword [ebp - 0x1014]
mov ecx, dword [ebp - 0x1028]
test ecx, ecx
je 0x440d64
mov eax, dword [ebp - 0x100c]
and dword [ebp - 0x1014], 0
mov dword [ecx], eax
mov dword [ecx + 4], edi
xor edi, edi
cmp dword [ebp - 0x1018], 0
je 0x440d7d
push 2
push dword [ebp - 0x1018]
call dword [sym.imp.CRYPT32.dll_CertCloseStore]
test ebx, ebx
je 0x440d90
mov esi, dword [ebx]
push ebx
mov ebx, esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
test esi, esi
jne 0x440d81
mov eax, dword [ebp - 0x1014]
test eax, eax
je 0x440da1
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005036b0
leave
ret 8