Function at 0x44f040
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x56afb2
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x5c5678]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push esi
push edi
mov eax, dword [0x5c5678]
xor eax, esp
push eax
lea eax, [esp + 0x160]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov esi, ecx
xor edi, edi
mov dword [esp + 0x24], edi
mov edx, dword [ebx]
mov dword [esp + 0x18], eax
mov eax, dword [edx + 0xc]
push esi
mov ecx, ebx
mov dword [esp + 0x30], esi
call eax
test al, al
jne 0x44f0ec
cmp dword [ebx + 0x38], 0x10
jb 0x44f0af
mov edi, dword [ebx + 0x24]
jmp 0x44f0b2
lea edi, [ebx + 0x24]
mov edx, dword [ebx + 0x3c]
push 0
lea ecx, [esp + 0xf0]
push ecx
call fcn.0044e760
mov edx, dword [esp + 0x18]
mov dword [esp + 0x168], 0
push edx
lea edi, [esp + 0xf0]
call fcn.0044b540
mov esi, edi
call fcn.0043b7e0
jmp 0x44f612
mov eax, dword [ebx]
mov edx, dword [eax + 0x14]
mov ecx, ebx
mov dword [esp + 0x10], edi
call edx
test al, al
je 0x44f284
cmp dword [ebx + 0x54], edi
jne 0x44f124
call fcn.00423410
mov eax, dword [eax + 0xd4]
cmp eax, edi
je 0x44f14f
push str.Content_Type:_application_x_www_form_urlencoded
push edi
call eax
add esp, 8
mov edi, eax
jmp 0x44f14f
cmp dword [ebx + 0x58], 0x10
jb 0x44f12f
mov edi, dword [ebx + 0x44]
jmp 0x44f132
lea edi, [ebx + 0x44]
call fcn.00423410
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44f14d
push edi
push 0
call eax
add esp, 8
mov edi, eax
jmp 0x44f14f
xor edi, edi
cmp byte [ebx + 0x64], 0
je 0x44f175
call fcn.00423410
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44f173
push str.X_Content_Type:_qhsec
push edi
call eax
add esp, 8
mov edi, eax
jmp 0x44f175
xor edi, edi
call fcn.00423410
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44f195
push str.charset:_utf_8
push edi
call eax
add esp, 8
mov dword [esp + 0x10], eax
jmp 0x44f19d
mov dword [esp + 0x10], 0
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x44f26f
mov dword [esp + 0x14], edi
jmp 0x44f1d0
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x44f1f8
call fcn.0053ecd6
mov eax, dword [ebx + 0x94]
add eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 0
je 0x44f242
cmp dword [eax + 0x18], 0x10
jb 0x44f213
mov esi, dword [eax + 4]
jmp 0x44f216
lea esi, [eax + 4]
call fcn.00423410
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44f236
mov edx, dword [esp + 0x10]
push esi
push edx
call eax
add esp, 8
mov dword [esp + 0x10], eax
jmp 0x44f23e
mov dword [esp + 0x10], 0
mov esi, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
cmp edi, eax
jb 0x44f1d0
mov ecx, dword [esp + 0x10]
push ecx
push 0x2727
push esi
call fcn.00457410
add esp, 0xc
xor edi, edi
mov edx, dword [ebx]
mov eax, dword [edx + 0x10]
mov ecx, ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
call eax
test al, al
je 0x44f2d1
push 1
call fcn.0053e164
add esp, 4
push 0x44ed30
push 0x4e2b
push esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edi
call fcn.00457410
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x2711
push esi
call fcn.00457410
add esp, 0xc
cmp dword [0x5d09e8], 2
jne 0x44f2e6
push edi
push 0x40
push esi
call fcn.00457410
add esp, 0xc
push edi
push 0x2b
push esi
call fcn.00457410
add esp, 0xc
push 0x44efd0
push 0x4e58
push esi
call fcn.00457410
add esp, 0xc
push ebx
push 0x2749
push esi
call fcn.00457410
add esp, 0xc
call fcn.00423410
mov eax, dword [eax + 0x40]
cmp eax, edi
je 0x44f342
push esi
call eax
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
je 0x44f3a3
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
cmp dword [ebx + 0x38], 0x10
jb 0x44f34c
mov edi, dword [ebx + 0x24]
jmp 0x44f34f
mov dword [esp + 0x14], 2
jmp 0x44f32e
lea edi, [ebx + 0x24]
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0xf0]
push edx
mov edx, dword [ebx + 0x3c]
call fcn.0044e760
mov esi, dword [esp + 0x10]
mov dword [esp + 0x168], 1
test esi, esi
je 0x44f38c
call fcn.00423410
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x44f38c
push esi
call eax
add esp, 4
mov eax, dword [esp + 0x1c]
push eax
call fcn.0053e31f
mov ecx, dword [esp + 0x1c]
add esp, 4
push ecx
jmp 0x44f0d4
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
lea ecx, [esp + 0x28]
push ecx
push 0x200002
push esi
mov dword [esp + 0x34], edi
call fcn.004573c0
add esp, 0xc
lea edx, [esp + 0x24]
push edx
push 0x100020
push esi
mov dword [esp + 0x30], edi
call fcn.004573c0
add esp, 0xc
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], edi
mov byte [esp + 0x6c], 0
mov dword [esp + 0x168], 2
mov edx, dword [esp + 0x24]
cmp edx, edi
je 0x44f41c
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44f406
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x70]
call fcn.00424270
xor edi, edi
mov esi, dword [esp + 0x10]
cmp esi, edi
je 0x44f439
call fcn.00423410
mov eax, dword [eax + 0xd8]
cmp eax, edi
je 0x44f439
push esi
call eax
add esp, 4
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], edi
mov byte [esp + 0x34], 0
cmp eax, edi
je 0x44f556
mov ecx, dword [esp + 0x20]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.00424270
lea edi, [esp + 0x30]
lea esi, [esp + 0x4c]
mov eax, ebx
mov byte [esp + 0x168], 3
call fcn.0044faf0
mov esi, 0x10
mov byte [esp + 0x168], 4
cmp dword [ebx + 0x38], esi
jb 0x44f493
mov edi, dword [ebx + 0x24]
jmp 0x44f496
lea edi, [ebx + 0x24]
mov edx, dword [ebx + 0x3c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x90]
push ecx
call fcn.0044e7f0
cmp dword [esp + 0x64], esi
jb 0x44f4c4
mov edx, dword [esp + 0x50]
push edx
call fcn.0053d782
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
mov byte [esp + 0x168], 7
cmp dword [esp + 0x48], esi
jb 0x44f4f2
mov eax, dword [esp + 0x34]
push eax
call fcn.0053d782
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0xd8]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], 0
call fcn.00424780
mov edx, dword [esp + 0x1c]
push edx
call fcn.0053e31f
mov ebx, dword [esp + 0x1c]
add esp, 4
push ebx
lea edi, [esp + 0x88]
call fcn.0044b540
mov esi, edi
call fcn.0043b7e0
cmp dword [esp + 0x80], 0x10
jb 0x44f54f
mov eax, dword [esp + 0x6c]
push eax
call fcn.0053d782
add esp, 4
mov eax, ebx
jmp 0x44f616
push edi
push 0x58c956
lea ecx, [esp + 0x38]
call fcn.00424270
mov esi, 0x10
mov byte [esp + 0x168], 8
cmp dword [ebx + 0x38], esi
jb 0x44f57c
mov edi, dword [ebx + 0x24]
jmp 0x44f57f
lea edi, [ebx + 0x24]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x90]
push ecx
call fcn.0044e7f0
mov byte [esp + 0x168], 0xa
cmp dword [esp + 0x48], esi
jb 0x44f5b9
mov edx, dword [esp + 0x34]
push edx
call fcn.0053d782
add esp, 4
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xd8]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
call fcn.00424780
mov ecx, dword [esp + 0x18]
push ecx
lea edi, [esp + 0x88]
call fcn.0044b540
mov esi, edi
call fcn.0043b7e0
cmp dword [esp + 0x80], 0x10
jb 0x44f612
mov edx, dword [esp + 0x6c]
push edx
call fcn.0053d782
add esp, 4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x148]
xor ecx, esp
call fcn.0053d78d
mov esp, ebp
pop ebp
ret 8