Function at 0x44cfb5
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push 0x20
mov eax, 0x4b142a
call fcn.00473a99
xor esi, esi
inc esi
mov dword [ebp - 4], esi
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], 0x20
jg 0x44d00e
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp + 0xc]
push eax
call fcn.0040a8a7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 1
call fcn.004212e0
pop ecx
pop ecx
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp + 0xc]
call fcn.0040aac8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00409a10
mov byte [ebp - 4], 5
push 0x4f930c
lea ecx, [ebp - 0x14]
call fcn.0040a6cc
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
push str.http:__i.ruanmei.com_validateLogin.aspx_u_sp_sr_dn1d1
lea eax, [ebp - 0x14]
push eax
call fcn.0040ab53
add esp, 0x14
xor edi, edi
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 8
mov dword [ebp - 0x20], ebx
push ebx
push ebx
push ebx
cmp dword [ebp + 0x10], ebx
je 0x44d061
push ebx
jmp 0x44d062
push esi
push ebx
call dword [sym.imp.WININET.dll_InternetOpenW]
mov dword [ebp + 0x10], eax
cmp eax, ebx
je 0x44d114
mov dword [ebp - 0x28], ebx
push 4
lea eax, [ebp - 0x28]
push eax
push 2
push dword [ebp + 0x10]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push ebx
push 0x102
push ebx
push ebx
push dword [ebp - 0x14]
push dword [ebp + 0x10]
call dword [sym.imp.WININET.dll_InternetOpenUrlW]
mov dword [ebp - 0x24], eax
cmp eax, ebx
je 0x44d10b
mov esi, 0x100000
push esi
call fcn.00474aa6
mov edi, eax
push esi
push ebx
push edi
call fcn.00473120
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push esi
push edi
push dword [ebp - 0x24]
call dword [sym.imp.WININET.dll_InternetReadFile]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x1c], esi
inc esi
push esi
call fcn.00474aa6
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], eax
push esi
push ebx
push eax
call fcn.00473120
push dword [ebp - 0x1c]
push edi
push dword [ebp - 0x2c]
call fcn.004731a0
add esp, 0x1c
cmp edi, ebx
je 0x44d0ff
push edi
call fcn.00474a9b
pop ecx
push dword [ebp - 0x24]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edi, dword [ebp - 0x18]
push dword [ebp + 0x10]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [ebp - 4], 7
jmp 0x44d12f
cmp edi, ebx
je 0x44d359
mov esi, dword [ebp - 0x1c]
cmp esi, 2
jle 0x44d2bb
cmp byte [edi], 0x6f
jne 0x44d2bb
cmp byte [edi + 1], 0x6b
jne 0x44d2bb
lea eax, [ebp + 8]
push eax
mov ecx, 0x4fb31c
call fcn.0040aac8
lea eax, [ebp + 0xc]
push eax
mov ecx, 0x4fb320
call fcn.0040aac8
add esi, 0xfffffffe
push esi
call fcn.00474aa6
mov edi, eax
push esi
push ebx
push edi
call fcn.00473120
push esi
mov eax, dword [ebp - 0x18]
add eax, 3
push eax
push edi
call fcn.00478ee0
push ebx
push edi
call fcn.0041c575
add esp, 0x24
mov esi, eax
push esi
mov ecx, 0x4fb318
call fcn.004136e2
cmp edi, ebx
je 0x44d1b5
push edi
call fcn.00474a9b
pop ecx
cmp esi, ebx
je 0x44d1c0
push esi
call fcn.00474a9b
pop ecx
mov eax, dword [0x4fb284]
cmp eax, ebx
jne 0x44d1ed
push dword [0x4fb32c]
push 0x800
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov dword [0x4fb284], eax
cmp eax, ebx
je 0x44d270
cmp dword [0x4fb288], ebx
jne 0x44d20d
push ebx
push ebx
push ebx
push 0xf001f
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0x4fb288], eax
cmp eax, ebx
je 0x44d270
mov ecx, 0x4fb31c
call fcn.0042b24c
push eax
push 0x400
push dword [0x4fb288]
call fcn.0047884a
add esp, 0xc
mov ecx, 0x4fae58
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x44d235
sub eax, esi
sar eax, 1
cmp eax, ebx
jbe 0x44d270
mov eax, dword [0x4fb31c]
mov eax, dword [eax - 0xc]
lea eax, [eax + eax + 2]
push 0x428
push ecx
mov ecx, 0x800
sub ecx, eax
push ecx
push dword [0x4fb288]
call fcn.00473501
add esp, 0x10
push dword [ebp - 0x18]
call fcn.00474a9b
pop ecx
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00409a10
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], bl
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00409a10
mov dword [ebp - 4], 0xc
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00409a10
xor eax, eax
jmp 0x44d3bb
push 0x4d6f6b
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
push edi
test eax, eax
jne 0x44d314
call fcn.00474a9b
pop ecx
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00409a10
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], bl
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00409a10
mov dword [ebp - 4], 0xf
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00409a10
push 2
jmp 0x44d3ba
call fcn.00474a9b
pop ecx
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00409a10
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], bl
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00409a10
mov dword [ebp - 4], 0x12
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00409a10
push 4
jmp 0x44d3ba
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00409a10
mov dword [ebp - 4], ebx
mov ecx, dword [ebp + 8]
add ecx, 0xfffffff0
call fcn.00409a10
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00409a10
push 5
jmp 0x44d3ba
pop eax
call fcn.00473b3e
ret 0xc