Function at 0x5449d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x58ca4a
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5eb3c0]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [0x5f7780]
mov edx, dword [eax + 0xc]
mov ecx, 0x5f7780
call edx
add eax, 0x10
mov dword [esp + 0x20], eax
xor ebx, ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], 0xa
mov byte [esp + 0x48], 1
call fcn.0054af2a
mov ebp, eax
cmp ebp, ebx
jne 0x544a49
lea edi, [ebx + 2]
jmp 0x544c8d
push str.Content_Type:_application_octet_stream
push ebx
call fcn.0054b076
push str.User_Agent:_Mozilla_4.0
push eax
call fcn.0054b076
push str.Accept:__
push eax
call fcn.0054b076
add esp, 0x18
cmp edi, ebx
mov esi, eax
mov dword [esp + 0x14], esi
je 0x544ad8
mov eax, dword [0x5f7780]
mov edx, dword [eax + 0xc]
mov ecx, 0x5f7780
call edx
add eax, 0x10
mov dword [esp + 0x1c], eax
push edi
push str.Cookie:__s
lea edi, [esp + 0x24]
mov byte [esp + 0x50], 2
call fcn.00479f80
mov edi, dword [esp + 0x24]
push edi
push esi
call fcn.0054b076
mov dword [esp + 0x24], eax
lea eax, [edi - 0x10]
add esp, 0x10
mov byte [esp + 0x48], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x544ad4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x14]
mov eax, str.http:__credit.wan.liebao.cn_index.php_api_index_typetasks
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x544ae0
sub eax, edx
mov edi, eax
push str.http:__credit.wan.liebao.cn_index.php_api_index_typetasks
lea eax, [esp + 0x24]
call fcn.00472930
mov ecx, dword [esp + 0x20]
push ecx
push 0x2712
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push 1
push 0x50
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push esi
push 0x2727
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push 0xa
push 0xd
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push 1
push 0x34
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push 0xa
push 0x4e
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push 0x4b38b0
push 0x4e2b
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
lea edx, [esp + 0x28]
push edx
push 0x2711
push ebp
call fcn.0054af5c
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c77
push ebp
call fcn.004b3970
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x544c77
push ebp
call fcn.0054af7d
mov edi, eax
add esp, 4
cmp edi, ebx
jne 0x544c77
lea eax, [esp + 0x24]
push eax
push 0x200002
push ebp
call fcn.0054b052
mov edi, eax
add esp, 0xc
cmp edi, ebx
jne 0x544c20
mov ecx, dword [esp + 0x54]
mov ebx, dword [esp + 0x24]
push ecx
call fcn.004b4560
xor ebx, ebx
test al, al
jne 0x544c20
mov edi, dword [esp + 0x24]
jmp 0x544c77
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x1c]
lea eax, [esp + 0x2c]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
call fcn.004b45c0
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x544c77
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x50]
push eax
push ecx
lea ecx, [eax + 1]
call fcn.0044e2f0
push eax
call fcn.0056a780
mov eax, dword [esp + 0x24]
add esp, 0xc
call fcn.00472d60
mov edx, dword [esp + 0x1c]
push edx
call fcn.005649af
mov esi, dword [esp + 0x18]
add esp, 4
cmp esi, ebx
je 0x544c84
push esi
call fcn.0054b0c4
add esp, 4
push ebp
call fcn.0054b00d
add esp, 4
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x4c], bl
call fcn.004b3820
mov dword [esp + 0x48], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x544cc3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, edi
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret