Function at 0x44d5e1
Capabilities:
Read data from internet
Receive data
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x284c
call fcn.00484590
mov eax, dword [ebp + 0x10]
push ebx
push esi
xor ebx, ebx
mov dword [esp + 0x28], edx
mov esi, ecx
push edi
test eax, eax
je 0x44d60f
push dword [ebp + 0x14]
push ebx
push ebx
push 0x9478
call eax
push esi
lea ecx, [esp + 0x38]
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x24], 5
call fcn.0044da27
jmp 0x44d73e
sub esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0043999c
mov edi, eax
test edi, edi
jne 0x44da13
push ecx
push 0x440000
sub esp, 0xc
lea ecx, [esp + 0x48]
push ebx
call fcn.00439954
mov edi, eax
test edi, edi
jne 0x44da13
push 6
pop ecx
mov esi, str.Content_Type
lea edi, [esp + 0x58]
rep movsd dword es:[edi], dword [esi]
push 0x27e6
lea eax, [esp + 0x76]
push ebx
push eax
movsw word es:[edi], word [esi]
call sub.msvcrt.dll_memset
mov ecx, dword [esp + 0x38]
lea edx, [esp + 0x1c]
add esp, 0xc
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x14]
push dword [esp + 0x14]
lea eax, [esp + 0x2c]
push dword [esp + 0x14]
push str.Range:_bytes_I64d__r_n
push eax
call fcn.00449eea
mov esi, dword [esp + 0x38]
lea ecx, [esp + 0x44]
add esp, 0xc
push ebx
push ebx
push dword [esi - 0xc]
push esi
call fcn.00439900
lea ecx, [esi - 0x10]
mov edi, eax
call fcn.0043c924
test edi, edi
jne 0x44da13
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x38]
call fcn.004398b7
mov edi, eax
test edi, edi
jne 0x44da13
mov edi, dword [esp + 0x30]
mov eax, edi
sub eax, ebx
je 0x44da0e
sub eax, 0xc8
je 0x44d765
sub eax, 5
je 0x44d765
sub eax, 1
je 0x44d779
sub eax, 0xc6
jne 0x44d75c
mov ecx, dword [esp + 0x20]
mov eax, ecx
dec ecx
mov dword [esp + 0x20], ecx
test eax, eax
je 0x44da13
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x14
lea ecx, [esp + 0x48]
push dword [ebp + 8]
call fcn.00439a13
mov edi, eax
test edi, edi
je 0x44d632
jmp 0x44da13
sub eax, 0xc
jne 0x44da13
mov ecx, dword [esp + 0x2c]
push ebx
push ebx
push ecx
mov eax, dword [ecx]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call dword [eax + 0x1c]
push ebx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x2800
push eax
lea eax, [esp + 0x60]
push eax
push 5
push dword [esp + 0x4c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x44d7bf
push 0xa
lea eax, [esp + 0x5c]
push ebx
push eax
call dword [sym.imp.msvcrt.dll__wcstoui64]
mov edi, eax
add esp, 0xc
add edi, dword [esp + 0x10]
mov eax, edx
adc eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
jmp 0x44d7cc
or edi, 0xffffffff
mov dword [ebp + 0x10], ebx
or edx, 0xffffffff
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], edi
lea eax, [esp + 0x1c]
push eax
push 0x2800
lea eax, [esp + 0x60]
push eax
push dword [esp + 0x48]
call dword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x44d82e
cmp dword [esp + 0x1c], ebx
jne 0x44d957
mov ecx, dword [esp + 0x28]
mov eax, edi
and eax, ecx
cmp eax, 0xffffffff
je 0x44da15
cmp edi, dword [esp + 0x10]
jne 0x44d818
cmp ecx, dword [esp + 0x14]
je 0x44da15
cmp ecx, dword [esp + 0x14]
jb 0x44da07
ja 0x44d82e
cmp edi, dword [esp + 0x10]
jb 0x44da07
sub dword [esp + 0x20], 1
je 0x44d9fe
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x14
lea ecx, [esp + 0x48]
push str.Mozilla_5.0__Windows_NT_6.3__WOW64__Trident_7.0__rv:11.0__like_Gecko
call fcn.00439a13
mov edi, eax
test edi, edi
jne 0x44da13
sub esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0043999c
mov edi, eax
test edi, edi
jne 0x44da13
push ecx
push 0x440000
sub esp, 0xc
lea ecx, [esp + 0x48]
push ebx
call fcn.00439954
mov edi, eax
test edi, edi
jne 0x44da13
push dword [esp + 0x14]
lea eax, [esp + 0x58]
push dword [esp + 0x14]
push str.Range:_bytes_I64d__r_n
push eax
call fcn.00449eea
mov esi, dword [esp + 0x64]
lea ecx, [esp + 0x44]
add esp, 0xc
push ebx
push ebx
push dword [esi - 0xc]
push esi
call fcn.00439900
mov edi, eax
test edi, edi
jne 0x44d9f4
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x38]
call fcn.004398b7
mov edi, eax
test edi, edi
jne 0x44d9f4
mov edi, dword [esp + 0x30]
mov eax, edi
sub eax, ebx
je 0x44d9ef
sub eax, 0xc8
je 0x44d91d
sub eax, 5
je 0x44d91d
sub eax, 1
je 0x44d946
sub eax, 0xc6
jne 0x44d914
lea ecx, [esi - 0x10]
call fcn.0043c924
jmp 0x44d82e
sub eax, 0xc
jne 0x44d9f4
mov ecx, dword [esp + 0x2c]
push ebx
push ebx
push ecx
mov eax, dword [ecx]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call dword [eax + 0x1c]
lea ecx, [esi - 0x10]
call fcn.0043c924
mov edi, dword [esp + 0x24]
jmp 0x44d7ed
lea ecx, [esi - 0x10]
call fcn.0043c924
mov edi, dword [esp + 0x24]
jmp 0x44d7d0
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push edx
lea edx, [esp + 0x20]
mov dword [esp + 0x24], 5
push edx
push dword [esp + 0x24]
mov eax, dword [ecx]
lea edx, [esp + 0x64]
push edx
push ecx
call dword [eax + 0x18]
mov edi, eax
test edi, edi
jne 0x44da13
mov esi, dword [esp + 0x1c]
add esi, dword [esp + 0x10]
mov edi, dword [esp + 0x24]
adc eax, dword [esp + 0x14]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
cmp dword [ebp + 0x10], ebx
je 0x44d7d0
push dword [ebp + 0x14]
push ebx
push 0x64
pop edi
mul edi
mov ecx, eax
mov eax, esi
mul edi
mov edi, dword [esp + 0x2c]
add ecx, edx
mov edx, dword [esp + 0x30]
push edx
push edi
push ecx
push eax
call fcn.00484910
mov esi, dword [ebp + 0x10]
push eax
push 0x9478
call esi
push dword [ebp + 0x14]
push ebx
push ebx
push 0x948e
call esi
test eax, eax
je 0x44d7d0
mov ebx, 0x800704c7
jmp 0x44da15
mov edi, 0x80004005
lea ecx, [esi - 0x10]
call fcn.0043c924
jmp 0x44da13
call fcn.0044bc4b
mov edi, eax
jmp 0x44da13
mov edi, 0x8007003b
jmp 0x44da13
mov edi, 0x80004005
mov ebx, edi
lea ecx, [esp + 0x34]
call fcn.00439add
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret