Function at 0x44d950
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5697c2
mov eax, dword fs:[0]
push eax
sub esp, 0x150
mov eax, dword [0x5c3678]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push esi
push edi
mov eax, dword [0x5c3678]
xor eax, esp
push eax
lea eax, [esp + 0x160]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov esi, ecx
xor edi, edi
mov dword [esp + 0x24], edi
mov edx, dword [ebx]
mov dword [esp + 0x18], eax
mov eax, dword [edx + 0xc]
push esi
mov ecx, ebx
mov dword [esp + 0x30], esi
call eax
test al, al
jne 0x44d9fc
cmp dword [ebx + 0x38], 0x10
jb 0x44d9bf
mov edi, dword [ebx + 0x24]
jmp 0x44d9c2
lea edi, [ebx + 0x24]
mov edx, dword [ebx + 0x3c]
push 0
lea ecx, [esp + 0xf0]
push ecx
call fcn.0044d070
mov edx, dword [esp + 0x18]
mov dword [esp + 0x168], 0
push edx
lea edi, [esp + 0xf0]
call fcn.00449e00
mov esi, edi
call fcn.00439f30
jmp 0x44df22
mov eax, dword [ebx]
mov edx, dword [eax + 0x14]
mov ecx, ebx
mov dword [esp + 0x10], edi
call edx
test al, al
je 0x44db94
cmp dword [ebx + 0x54], edi
jne 0x44da34
call fcn.00421d00
mov eax, dword [eax + 0xd4]
cmp eax, edi
je 0x44da5f
push str.Content_Type:_application_x_www_form_urlencoded
push edi
call eax
add esp, 8
mov edi, eax
jmp 0x44da5f
cmp dword [ebx + 0x58], 0x10
jb 0x44da3f
mov edi, dword [ebx + 0x44]
jmp 0x44da42
lea edi, [ebx + 0x44]
call fcn.00421d00
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44da5d
push edi
push 0
call eax
add esp, 8
mov edi, eax
jmp 0x44da5f
xor edi, edi
cmp byte [ebx + 0x64], 0
je 0x44da85
call fcn.00421d00
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44da83
push str.X_Content_Type:_qhsec
push edi
call eax
add esp, 8
mov edi, eax
jmp 0x44da85
xor edi, edi
call fcn.00421d00
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44daa5
push str.charset:_utf_8
push edi
call eax
add esp, 8
mov dword [esp + 0x10], eax
jmp 0x44daad
mov dword [esp + 0x10], 0
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
xor edi, edi
add eax, edx
je 0x44db7f
mov dword [esp + 0x14], edi
jmp 0x44dae0
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp edi, ecx
jb 0x44db08
call fcn.0053d6a6
mov eax, dword [ebx + 0x94]
add eax, dword [esp + 0x14]
cmp dword [eax + 0x14], 0
je 0x44db52
cmp dword [eax + 0x18], 0x10
jb 0x44db23
mov esi, dword [eax + 4]
jmp 0x44db26
lea esi, [eax + 4]
call fcn.00421d00
mov eax, dword [eax + 0xd4]
test eax, eax
je 0x44db46
mov edx, dword [esp + 0x10]
push esi
push edx
call eax
add esp, 8
mov dword [esp + 0x10], eax
jmp 0x44db4e
mov dword [esp + 0x10], 0
mov esi, dword [esp + 0x2c]
mov ecx, dword [ebx + 0x98]
sub ecx, dword [ebx + 0x94]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc edi
add eax, edx
cmp edi, eax
jb 0x44dae0
mov ecx, dword [esp + 0x10]
push ecx
push 0x2727
push esi
call fcn.00455db0
add esp, 0xc
xor edi, edi
mov edx, dword [ebx]
mov eax, dword [edx + 0x10]
mov ecx, ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], edi
call eax
test al, al
je 0x44dbe1
push 1
call fcn.0053cb34
add esp, 4
push 0x44d640
push 0x4e2b
push esi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edi
call fcn.00455db0
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
push 0x2711
push esi
call fcn.00455db0
add esp, 0xc
cmp dword [0x5ce9a8], 2
jne 0x44dbf6
push edi
push 0x40
push esi
call fcn.00455db0
add esp, 0xc
push edi
push 0x2b
push esi
call fcn.00455db0
add esp, 0xc
push 0x44d8e0
push 0x4e58
push esi
call fcn.00455db0
add esp, 0xc
push ebx
push 0x2749
push esi
call fcn.00455db0
add esp, 0xc
call fcn.00421d00
mov eax, dword [eax + 0x40]
cmp eax, edi
je 0x44dc52
push esi
call eax
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, edi
je 0x44dcb3
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
cmp dword [ebx + 0x38], 0x10
jb 0x44dc5c
mov edi, dword [ebx + 0x24]
jmp 0x44dc5f
mov dword [esp + 0x14], 2
jmp 0x44dc3e
lea edi, [ebx + 0x24]
mov ecx, dword [esp + 0x14]
push ecx
lea edx, [esp + 0xf0]
push edx
mov edx, dword [ebx + 0x3c]
call fcn.0044d070
mov esi, dword [esp + 0x10]
mov dword [esp + 0x168], 1
test esi, esi
je 0x44dc9c
call fcn.00421d00
mov eax, dword [eax + 0xd8]
test eax, eax
je 0x44dc9c
push esi
call eax
add esp, 4
mov eax, dword [esp + 0x1c]
push eax
call fcn.0053ccef
mov ecx, dword [esp + 0x1c]
add esp, 4
push ecx
jmp 0x44d9e4
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
lea ecx, [esp + 0x28]
push ecx
push 0x200002
push esi
mov dword [esp + 0x34], edi
call fcn.00455d60
add esp, 0xc
lea edx, [esp + 0x24]
push edx
push 0x100020
push esi
mov dword [esp + 0x30], edi
call fcn.00455d60
add esp, 0xc
mov dword [esp + 0x80], 0xf
mov dword [esp + 0x7c], edi
mov byte [esp + 0x6c], 0
mov dword [esp + 0x168], 2
mov edx, dword [esp + 0x24]
cmp edx, edi
je 0x44dd2c
mov eax, edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x44dd16
sub eax, edi
push eax
push edx
lea ecx, [esp + 0x70]
call fcn.00422b90
xor edi, edi
mov esi, dword [esp + 0x10]
cmp esi, edi
je 0x44dd49
call fcn.00421d00
mov eax, dword [eax + 0xd8]
cmp eax, edi
je 0x44dd49
push esi
call eax
add esp, 4
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x48], 0xf
mov dword [esp + 0x44], edi
mov byte [esp + 0x34], 0
cmp eax, edi
je 0x44de66
mov ecx, dword [esp + 0x20]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.00422b90
lea edi, [esp + 0x30]
lea esi, [esp + 0x4c]
mov eax, ebx
mov byte [esp + 0x168], 3
call fcn.0044e410
mov esi, 0x10
mov byte [esp + 0x168], 4
cmp dword [ebx + 0x38], esi
jb 0x44dda3
mov edi, dword [ebx + 0x24]
jmp 0x44dda6
lea edi, [ebx + 0x24]
mov edx, dword [ebx + 0x3c]
push edx
mov edx, dword [esp + 0x2c]
push eax
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x90]
push ecx
call fcn.0044d100
cmp dword [esp + 0x64], esi
jb 0x44ddd4
mov edx, dword [esp + 0x50]
push edx
call fcn.0053c152
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
mov byte [esp + 0x168], 7
cmp dword [esp + 0x48], esi
jb 0x44de02
mov eax, dword [esp + 0x34]
push eax
call fcn.0053c152
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x70]
push ecx
lea ecx, [esp + 0xd8]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], 0
call fcn.00423020
mov edx, dword [esp + 0x1c]
push edx
call fcn.0053ccef
mov ebx, dword [esp + 0x1c]
add esp, 4
push ebx
lea edi, [esp + 0x88]
call fcn.00449e00
mov esi, edi
call fcn.00439f30
cmp dword [esp + 0x80], 0x10
jb 0x44de5f
mov eax, dword [esp + 0x6c]
push eax
call fcn.0053c152
add esp, 4
mov eax, ebx
jmp 0x44df26
push edi
push 0x58a5d6
lea ecx, [esp + 0x38]
call fcn.00422b90
mov esi, 0x10
mov byte [esp + 0x168], 8
cmp dword [ebx + 0x38], esi
jb 0x44de8c
mov edi, dword [ebx + 0x24]
jmp 0x44de8f
lea edi, [ebx + 0x24]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [esp + 0x14]
push ecx
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x30]
push eax
lea ecx, [esp + 0x90]
push ecx
call fcn.0044d100
mov byte [esp + 0x168], 0xa
cmp dword [esp + 0x48], esi
jb 0x44dec9
mov edx, dword [esp + 0x34]
push edx
call fcn.0053c152
add esp, 4
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0xd8]
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
call fcn.00423020
mov ecx, dword [esp + 0x18]
push ecx
lea edi, [esp + 0x88]
call fcn.00449e00
mov esi, edi
call fcn.00439f30
cmp dword [esp + 0x80], 0x10
jb 0x44df22
mov edx, dword [esp + 0x6c]
push edx
call fcn.0053c152
add esp, 4
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x148]
xor ecx, esp
call fcn.0053c15d
mov esp, ebp
pop ebp
ret 8