Function at 0x1f8d4c1c
Capabilities:
Check http status code
Read http header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
mov esi, ecx
mov eax, dword [0x1f97b00c]
mov ebx, 0x1f97b00c
cmp eax, ebx
je 0x1f8d4c5c
test dword [eax + 0x1c], 0x400
je 0x1f8d4c5c
push dword [esi + 0x22dc]
mov edi, 0x1f879438
push esi
push edi
push 0x7a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f89f5b3
jmp 0x1f8d4c61
mov edi, 0x1f879438
xor eax, eax
push eax
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 8]
push ecx
push eax
push 0x20000013
push dword [esi + 0x22c4]
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], 4
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x1f8d4cd1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edi, 0x3e3
push edi
mov ecx, esi
call fcn.1f8ce9cb
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5829
test dword [eax + 0x1c], 0x200
je 0x1f8d5829
push 0x1f879438
push 0x7b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
jmp 0x1f8d5829
mov ecx, dword [ebp - 8]
cmp ecx, 0xc8
jne 0x1f8d4d42
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d4cfc
test dword [eax + 0x1c], 0x400
je 0x1f8d4cfc
push edi
push 0x7c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x1f872118
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d4d15
push 0
push 0
push edi
call fcn.1f8a751c
mov edi, 0x1f871a38
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d4d2e
push 0
push 0
push edi
call fcn.1f8a751c
and dword [esi + 0x22e4], 0
mov ecx, dword [ebp - 8]
mov edi, 0x1f879438
jmp 0x1f8d5341
cmp ecx, 0xcc
jne 0x1f8d4dac
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d4d6a
test dword [eax + 0x1c], 0x400
je 0x1f8d4d6a
push edi
push 0x7d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
mov ebx, 0x1f87a104
test al, al
je 0x1f8d4d85
push ebx
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d4d9b
push ebx
push edi
call fcn.1f8ccd14
mov dword [esi + 0x22e4], 2
push 0
jmp 0x1f8d582a
cmp ecx, 0xca
jne 0x1f8d4de6
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d4dd4
test dword [eax + 0x1c], 0x400
je 0x1f8d4dd4
push edi
push 0x7e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
mov ebx, 0x1f87a0cc
jmp 0x1f8d4d7a
cmp ecx, 0x12e
jne 0x1f8d5008
mov dword [ebp - 0xc], 0x80338199
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d4e19
test dword [eax + 0x1c], 0x400
je 0x1f8d4e19
push edi
push 0x7f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
lea ecx, [ebp - 0x10]
push ecx
xor eax, eax
lea ecx, [ebp - 0x14]
push ecx
push eax
push eax
push 0x21
push dword [esi + 0x22c4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x1f8d4e5d
mov eax, dword [esi + 0x22b0]
mov ecx, dword [eax]
push 0x4033c4d2
push 0xd
pop edi
push edi
push eax
call dword [ecx + 0x1c]
add esp, 0xc
mov dword [ebp - 0xc], edi
jmp 0x1f8d4ff6
mov eax, dword [ebp - 0x14]
push 2
shr eax, 1
pop edx
xor ecx, ecx
inc eax
mul edx
seto cl
push 0
neg ecx
or eax, ecx
lea ecx, [ebp - 1]
push ecx
push eax
call sym.WsmSvc.DLL_public:_static_void____stdcall_WSManMemory::Alloc_unsigned_int__class_TestSystem::CallSite_const___enum_TestSystem::Mode_
mov edi, eax
mov dword [ebp - 0x20], edi
test edi, edi
jne 0x1f8d4e9d
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
call dword [eax + 0xc]
mov dword [ebp - 0xc], 0xe
jmp 0x1f8d4ff6
and dword [ebp - 0x10], 0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push edi
push 0
push 0x21
push dword [esi + 0x22c4]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x1f8d4ed8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x22b0]
mov edx, dword [ecx]
push eax
mov dword [ebp - 0xc], eax
call dword [edx + 0x20]
jmp 0x1f8d4fed
push 0x1f872028
call fcn.1f8a76d7
test al, al
je 0x1f8d4ef1
push edi
push 0x1f872028
call fcn.1f8ccd14
push 0x1f871988
call fcn.1f8a76d7
test al, al
je 0x1f8d4f0a
push edi
push 0x1f871988
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d4f32
test dword [eax + 0x1c], 0x400
je 0x1f8d4f32
push edi
push 0x1f879438
push 0x80
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f8970b0
mov ebx, dword [ebp - 0x20]
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, ebx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x2c], ebx
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1f8d4f4c
push 0x3c
sub eax, edx
pop edi
sar eax, 1
push edi
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x70]
push 0
push eax
call sub.msvcrt.dll_memset
or eax, 0xffffffff
add esp, 0xc
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x70]
push eax
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x70], edi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x1f8d4fbb
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esi + 0x22b0]
cmp eax, 8
mov eax, dword [ecx]
jne 0x1f8d4fb4
call dword [eax + 0xc]
mov dword [ebp - 0xc], 0xe
jmp 0x1f8d4fed
mov edi, 0x803381b7
jmp 0x1f8d4fe6
lea eax, [ebp - 0x34]
push eax
push 0x1e
push dword [esi + 0x22b0]
mov ecx, esi
call fcn.1f8ccfaa
mov ecx, eax
call int.1f8cafb1
test al, al
je 0x1f8d4fed
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
mov edi, 0x80338199
push edi
call dword [eax + 0x20]
mov dword [ebp - 0xc], edi
push dword [ebp - 0x20]
call fcn.1f897c43
pop ecx
push dword [ebp - 0xc]
mov dword [esi + 0x22e4], 2
jmp 0x1f8d582a
cmp ecx, 0x190
jne 0x1f8d5052
push 0x1f871968
call fcn.1f8a76d7
test al, al
je 0x1f8d502d
push 0x1f87a090
push 0x1f871968
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5334
test dword [eax + 0x1c], 0x400
je 0x1f8d5334
push edi
push 0x81
jmp 0x1f8d5329
cmp ecx, 0x191
jne 0x1f8d50c1
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d5074
push 0x1f87a05c
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d508e
push 0x1f87a05c
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d50b5
test dword [eax + 0x1c], 0x400
je 0x1f8d50b5
push 0x1f879438
push 0x82
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov ecx, esi
call fcn.1f8d4763
jmp 0x1f8d5831
cmp ecx, 0x197
jne 0x1f8d5130
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d50e3
push 0x1f87a018
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d50fd
push 0x1f87a018
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5124
test dword [eax + 0x1c], 0x400
je 0x1f8d5124
push 0x1f879438
push 0x83
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov ecx, esi
call fcn.1f8d34b5
jmp 0x1f8d5831
cmp ecx, 0x194
jne 0x1f8d51a9
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d5152
push 0x1f879fdc
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d516c
push 0x1f879fdc
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5193
test dword [eax + 0x1c], 0x400
je 0x1f8d5193
push 0x1f879438
push 0x84
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x80338113
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x20]
jmp 0x1f8d581f
cmp ecx, 0x195
jne 0x1f8d522b
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d51cb
push 0x1f879fa0
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d51e5
push 0x1f879fa0
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d520c
test dword [eax + 0x1c], 0x400
je 0x1f8d520c
push 0x1f879438
push 0x85
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x80338074
mov eax, dword [esi + 0x22b0]
mov ecx, dword [eax]
push 0x4033c368
push edi
push eax
call dword [ecx + 0x1c]
add esp, 0xc
jmp 0x1f8d581f
cmp ecx, 0x19d
jne 0x1f8d5298
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d524d
push 0x1f879f58
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d5267
push 0x1f879f58
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d528e
test dword [eax + 0x1c], 0x400
je 0x1f8d528e
push 0x1f879438
push 0x86
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x80338111
jmp 0x1f8d5198
cmp ecx, 0x19f
jne 0x1f8d5305
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d52ba
push 0x1f879f10
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d52d4
push 0x1f879f10
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d52fb
test dword [eax + 0x1c], 0x400
je 0x1f8d52fb
push 0x1f879438
push 0x87
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x80338075
jmp 0x1f8d5211
cmp ecx, 0x1f4
jne 0x1f8d5739
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5337
test dword [eax + 0x1c], 0x400
je 0x1f8d5337
push edi
push 0x88
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov ecx, dword [ebp - 8]
mov dword [esi + 0x22e4], 1
cmp ecx, 0xc8
jne 0x1f8d53f4
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
test byte [eax + 0x1f0], 1
jne 0x1f8d53f4
cmp byte [esi + 0x22a5], 0
je 0x1f8d53f4
mov ecx, esi
call fcn.1f8d10b7
test eax, eax
jne 0x1f8d53a2
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d539b
test dword [eax + 0x1c], 0x200
je 0x1f8d539b
push edi
push 0x8b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
push 5
jmp 0x1f8d582a
cmp byte [esi + 0x201a], 0
jne 0x1f8d53f4
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d53ce
test dword [eax + 0x1c], 0x400
je 0x1f8d53ce
push edi
push 0x8c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov eax, dword [esi]
push 0
mov ecx, esi
mov byte [esi + 0x201a], 1
mov byte [esi + 0x22a4], 1
mov dword [esi + 0x22c8], 1
call dword [eax + 0x18]
jmp 0x1f8d5831
xor edi, edi
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x18]
push eax
push edi
push 0x20000005
push dword [esi + 0x22c4]
mov dword [ebp - 0x18], edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
cmp eax, edi
jne 0x1f8d545c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x2f76
je 0x1f8d545c
push eax
mov edi, 0x3e3
push edi
mov ecx, esi
call fcn.1f8ce9cb
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5829
test dword [eax + 0x1c], 0x200
je 0x1f8d5829
push 0x1f879438
push 0x8d
jmp 0x1f8d4cc1
lea eax, [ebp - 0x28]
push eax
mov ecx, esi
mov dword [ebp - 0x28], edi
call fcn.1f8d17aa
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x1f8d54b6
push eax
mov edi, 0x3e3
push edi
mov ecx, esi
call fcn.1f8ce9cb
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5829
test dword [eax + 0x1c], 0x200
je 0x1f8d5829
push dword [ebp - 0x20]
push 0x1f879438
push 0x8e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
jmp 0x1f8d5829
cmp dword [ebp - 0x28], edi
jne 0x1f8d5540
cmp dword [ebp - 0x18], edi
jne 0x1f8d5540
cmp dword [ebp - 8], 0x1f4
mov dword [esi + 0x22e4], 2
jne 0x1f8d551e
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
mov ebx, 0x1f879ed0
test al, al
je 0x1f8d54f2
push ebx
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d5508
push ebx
push edi
call fcn.1f8ccd14
mov edi, 0x80338170
mov ecx, dword [esi + 0x22b0]
mov eax, dword [ecx]
push edi
call dword [eax + 0x20]
jmp 0x1f8d5829
cmp dword [ebp - 8], 0x190
jne 0x1f8d552e
mov edi, 0x80338171
jmp 0x1f8d550d
cmp dword [ebp - 8], 0xc8
jne 0x1f8d5831
jmp 0x1f8d5829
mov ecx, esi
call fcn.1f8d1404
cmp eax, edi
je 0x1f8d5551
push eax
jmp 0x1f8d582a
push dword [esi + 0x2b20]
lea eax, [esi + 0x2320]
push 0x1f8750f4
push eax
call dword [sym.imp.msvcrt.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x1f8d557a
mov dword [esi + 0x22e4], 4
cmp dword [esi + 0x22e4], 4
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
je 0x1f8d56b8
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x34]
test byte [eax + 0x1f0], 1
jne 0x1f8d56b8
cmp dword [eax + 0x17c], 2
je 0x1f8d56b8
cmp byte [esi + 0xc], 0
jne 0x1f8d56b8
mov ecx, esi
call fcn.1f8cc10b
mov dword [ebp - 0x28], eax
cmp eax, 3
jne 0x1f8d55e4
push 0
push 0x54f
push 0x1f879ec4
push 0xa36
push 0x1f879448
call fcn.1f8a7bdf
mov edi, dword [ebp - 0x28]
imul edi, edi, 0x3c
lea ecx, [esi + 0x2b3c]
push ecx
lea eax, [esi + 0x2b28]
push eax
lea eax, [esi + 0x2b24]
push eax
push dword [edi + 0x1f97b1b0]
lea eax, [esi + 0x2320]
push dword [edi + 0x1f97b1ac]
push dword [esi + 0x2b20]
push eax
call fcn.1f8a9a3a
test eax, eax
jne 0x1f8d5652
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5648
test dword [eax + 0x1c], 0x200
je 0x1f8d5648
push 0x1f879438
push 0x8f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x803380f7
jmp 0x1f8d550d
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x28]
lea eax, [esi + 0x2040]
push dword [esi + 0x2b28]
lea ecx, [esi + 0x2b2c]
push dword [edi + 0x1f97b1b0]
push 0x1f8749d4
push dword [ebp - 0x20]
push eax
call fcn.1f8ac6ed
mov edi, eax
test edi, edi
je 0x1f8d56b8
push 0
push edi
mov ecx, esi
call fcn.1f8ce9cb
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5829
test dword [eax + 0x1c], 0x200
je 0x1f8d5829
push 0x1f879438
push 0x90
jmp 0x1f8d4cc1
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x1c]
jbe 0x1f8d56f8
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d56ee
test dword [eax + 0x1c], 0x200
je 0x1f8d56ee
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push ecx
push 0x1f879438
push 0x91
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f8c2446
mov edi, 0x80338026
jmp 0x1f8d550d
and dword [esi + 0x22ec], 0
mov ecx, esi
call fcn.1f8cc8a2
mov edi, eax
test edi, edi
je 0x1f8d5831
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5829
test dword [eax + 0x1c], 0x200
je 0x1f8d5829
push 0x1f879438
push 0x92
jmp 0x1f8d4cc1
cmp ecx, 0x1f7
jne 0x1f8d57a6
mov edi, 0x1f872008
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d575b
push 0x1f879e80
push edi
call fcn.1f8ccd14
mov edi, 0x1f871968
push edi
call fcn.1f8a76d7
test al, al
je 0x1f8d5775
push 0x1f879e80
push edi
call fcn.1f8ccd14
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d579c
test dword [eax + 0x1c], 0x400
je 0x1f8d579c
push 0x1f879438
push 0x89
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895ce3
mov edi, 0x80338112
jmp 0x1f8d5198
push 0x1f872018
call fcn.1f8a76d7
test al, al
je 0x1f8d57c1
push dword [ebp - 8]
push 0x1f872018
call fcn.1f89bd6b
push 0x1f871978
call fcn.1f8a76d7
test al, al
je 0x1f8d57dc
push dword [ebp - 8]
push 0x1f871978
call fcn.1f89bd6b
mov eax, dword [0x1f97b00c]
cmp eax, ebx
je 0x1f8d5802
test dword [eax + 0x1c], 0x400
je 0x1f8d5802
push dword [ebp - 8]
push edi
push 0x8a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.1f895d0a
push dword [ebp - 8]
mov eax, dword [esi + 0x22b0]
mov ecx, dword [eax]
push 0x4033c47f
mov edi, 0x8033810f
push edi
push eax
call dword [ecx + 0x1c]
add esp, 0x10
mov dword [esi + 0x22e4], 2
push edi
mov ecx, esi
call fcn.1f8d1734
pop edi
pop esi
pop ebx
leave
ret