Function at 0x44ef60
Capabilities:
Check for time delay via gettickcount
Delete file
Link many functions at runtime
Write file on windows

Disassembly:
sub esp, 0x464
push ebx
push ebp
push esi
push edi
mov ebx, ecx
push str.wininet
mov dword [esp + 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebp, eax
mov dword [esp + 0x28], ebp
test ebp, ebp
jne 0x44efbd
mov eax, dword [0x4aa1d8]
test byte [eax + 0xe0], 1
jne 0x44efb6
mov ecx, dword [0x4ad0c8]
push 1
push 0
push 0xffffffffffffffff
push 0x49e628
call fcn.004744e0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x464
ret 8
mov ecx, ebx
jmp 0x44f30e
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.InternetOpenA
push ebp
call esi
push str.InternetOpenUrlA
mov ebx, eax
push ebp
mov dword [esp + 0x1c], ebx
call esi
push str.InternetCloseHandle
push ebp
mov edi, eax
call esi
push str.InternetReadFileExA
push ebp
mov dword [esp + 0x24], eax
call esi
push str.InternetReadFile
push ebp
mov dword [esp + 0x18], eax
call esi
mov dword [esp + 0x24], eax
test ebx, ebx
je 0x44f2f1
test edi, edi
je 0x44f2f1
cmp dword [esp + 0x1c], 0
je 0x44f2f1
cmp dword [esp + 0x10], 0
je 0x44f2f1
test eax, eax
je 0x44f2f1
mov esi, dword [esp + 0x478]
mov ebx, 0x84000000
lea esp, [esp]
mov al, byte [esi]
cmp al, 0x20
je 0x44f04a
cmp al, 9
jne 0x44f04d
inc esi
jmp 0x44f040
cmp byte [esi], 0x2a
jne 0x44f07d
inc esi
mov ecx, esi
call fcn.004133c0
mov edx, 0x49e8b4
mov ecx, esi
mov ebx, eax
call fcn.00409840
test eax, eax
je 0x44f07d
mov esi, eax
mov edi, edi
mov al, byte [esi]
cmp al, 0x20
je 0x44f07a
cmp al, 9
jne 0x44f07d
inc esi
jmp 0x44f070
push 0
push 0
push 0
push 4
push str.AutoHotkey
call dword [esp + 0x28]
mov dword [esp + 0x20], eax
test eax, eax
je 0x44f0af
push 0
push ebx
push 0
push 0
push esi
push eax
call edi
mov ebx, eax
test ebx, ebx
jne 0x44f0cc
push dword [esp + 0x20]
call dword [esp + 0x20]
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [esp + 0x18]
call fcn.0042f240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x464
ret 8
mov edi, dword [esp + 0x47c]
push 0x4a2e10
push edi
call fcn.004870d5
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
jne 0x44f113
push ebx
mov ebx, dword [esp + 0x20]
call ebx
push dword [esp + 0x20]
call ebx
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [esp + 0x18]
call fcn.0042f240
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x464
ret 8
xorps xmm0, xmm0
mov dword [esp + 0x50], 0
movdqu xmmword [esp + 0x40], xmm0
lea eax, [esp + 0x70]
mov dword [esp + 0x2c], 0x28
movdqu xmmword [esp + 0x30], xmm0
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], 0x400
mov al, byte [esi]
cmp al, 0x68
je 0x44f202
cmp al, 0x48
je 0x44f202
lea eax, [esp + 0x10]
push eax
push 0x400
lea eax, [esp + 0x78]
push eax
push ebx
call dword [esp + 0x34]
mov esi, eax
test esi, esi
je 0x44f2a7
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x44f180
cmp dword [esp + 0x10], 0
je 0x44f2a0
call edi
mov ecx, dword [0x4aa1d8]
sub eax, dword [0x4aefdc]
cmp eax, dword [ecx + 0xb8]
jbe 0x44f1cc
push 0
push 0
push 0
push 0
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x44f1c5
mov edx, 1
or ecx, 0xffffffff
call fcn.00401790
call edi
mov dword [0x4aefdc], eax
push dword [esp + 0x14]
lea eax, [esp + 0x74]
push 1
push dword [esp + 0x18]
push eax
call fcn.00487243
add esp, 0x10
lea eax, [esp + 0x10]
push eax
push 0x400
lea eax, [esp + 0x78]
push eax
push ebx
call dword [esp + 0x34]
mov esi, eax
test esi, esi
jne 0x44f180
jmp 0x44f2a0
push 0
push 8
lea eax, [esp + 0x34]
push eax
push ebx
call dword [esp + 0x20]
mov esi, eax
test esi, esi
je 0x44f2a7
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0x14]
cmp dword [esp + 0x44], 0
je 0x44f29c
call edi
mov ecx, dword [0x4aa1d8]
sub eax, dword [0x4aefdc]
cmp eax, dword [ecx + 0xb8]
jbe 0x44f26c
push 0
push 0
push 0
push 0
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x44f265
mov edx, 1
or ecx, 0xffffffff
call fcn.00401790
call edi
mov dword [0x4aefdc], eax
push ebp
push 1
push dword [esp + 0x4c]
lea eax, [esp + 0x7c]
push eax
call fcn.00487243
add esp, 0x10
mov dword [esp + 0x44], 0x400
lea eax, [esp + 0x2c]
push 0
push 8
push eax
push ebx
call dword [esp + 0x20]
mov esi, eax
test esi, esi
jne 0x44f224
mov ebp, dword [esp + 0x28]
mov edi, dword [esp + 0x47c]
push ebx
mov ebx, dword [esp + 0x20]
call ebx
push dword [esp + 0x20]
call ebx
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [esp + 0x14]
call fcn.00487331
add esp, 4
test esi, esi
jne 0x44f2d4
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test esi, esi
mov ecx, dword [esp + 0x18]
sete al
movzx eax, al
push eax
call fcn.0042c990
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x464
ret 8
push ebp
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x4aa1d8]
test byte [eax + 0xe0], 1
je 0x44ef93
mov ecx, dword [esp + 0x18]
push 0x49bc4d
push 0
push 0x49e628
call fcn.0042c8f0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x464
ret 8