Function at 0x1004852
Capabilities:
Check http status code
Read http header
Receive http response
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
push esi
xor ebx, ebx
xor esi, esi
push edi
inc esi
push 0x27e0
mov dword [ebp - 4], esi
mov dword [ebp - 8], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x2c], 2
call fcn.01006551
pop ecx
push 4
lea eax, [ebp - 0x2c]
push eax
push 0x4d
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x10048bd
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x277f
call fcn.01006551
add esp, 0xc
jmp 0x1004d5b
mov eax, dword [0x10094e8]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
shr eax, 1
not eax
and eax, esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esi
mov eax, dword [0x10094e4]
cmp eax, ebx
je 0x1004936
cmp dword [0x1009524], ebx
je 0x1004942
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push eax
call sub.SspiCli.dll_SspiEncodeAuthIdentityAsStrings
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x34]
call fcn.01004834
push 0x14
push dword [ebp - 0x20]
push 0x2f
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1004942
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2780
jmp 0x10048b0
cmp dword [0x1009524], ebx
jne 0x1004bb9
test byte [0x10094e8], 2
je 0x10049a7
cmp dword [0x1009524], ebx
jne 0x10049af
cmp dword [0x10094f0], ebx
je 0x1004bcb
push dword [ebp + 8]
mov eax, dword [0x100956c]
mov esi, dword [eax]
push 1
push esi
mov dword [ebp - 8], esi
call fcn.010045cb
test eax, eax
je 0x1004d5b
push 0x27e9
call fcn.01006551
pop ecx
push dword [0x10094e4]
push ebx
push ebx
push esi
push ebx
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetCredentials]
test eax, eax
je 0x1004bda
xor esi, esi
inc esi
jmp 0x10049b2
cmp dword [0x1009524], ebx
je 0x10049b2
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x24], ebx
jne 0x1004d5e
push 0x27ea
call fcn.01006551
pop ecx
push ebx
cmp dword [ebp - 0x14], ebx
je 0x10049d3
push ebx
push ebx
push ebx
push ebx
push ebx
jmp 0x10049e2
push 4
push 4
lea eax, [ebp - 0x40]
push eax
push 0xffffffffffffffff
push 0x1003670
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
cmp eax, ebx
jne 0x1004a11
call edi
mov esi, eax
mov eax, 0x2f00
cmp esi, eax
jne 0x1004bf0
cmp dword [0x1009524], ebx
jne 0x1004c14
xor esi, esi
inc esi
jmp 0x10049bb
push ebx
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1004c2a
push ebx
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
push 0x20000013
push dword [ebp + 8]
mov dword [ebp - 0xc], 4
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x1004c6f
push dword [ebp - 0x10]
push 0x27ef
call fcn.01006551
cmp dword [ebp - 0x10], 0xc8
pop ecx
pop ecx
jne 0x1004a90
test byte [0x10094e8], 1
je 0x1004a78
push dword [ebp + 8]
call fcn.0100471f
mov dword [ebp - 4], eax
jmp 0x1004a7b
mov dword [ebp - 4], esi
cmp dword [ebp - 0x14], ebx
je 0x1004a88
mov dword [ebp - 0x14], ebx
jmp 0x10049b2
mov dword [ebp - 0x24], esi
jmp 0x10049b2
cmp dword [ebp - 0x10], 0x191
jne 0x1004b0d
cmp dword [0x1009524], ebx
jne 0x1004c85
cmp dword [ebp - 0x18], ebx
je 0x1004c8f
dec dword [ebp - 0x18]
lea eax, [ebp - 8]
push eax
push esi
push dword [ebp + 8]
call fcn.010044f5
test eax, eax
je 0x1004d5b
push dword [ebp + 8]
push esi
push dword [ebp - 8]
call fcn.010045cb
test eax, eax
je 0x1004d5b
push dword [0x10094e4]
push ebx
push ebx
push dword [ebp - 8]
push ebx
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetCredentials]
test eax, eax
jne 0x10049b2
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2787
jmp 0x10048b0
cmp dword [ebp - 0x10], 0x197
jne 0x1004cd9
cmp dword [ebp - 0x1c], ebx
je 0x1004c99
dec dword [ebp - 0x1c]
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.010044f5
test eax, eax
je 0x1004d5b
push dword [ebp + 8]
push ebx
push dword [ebp - 8]
call fcn.010045cb
test eax, eax
je 0x1004d5b
cmp dword [ebp - 8], 2
mov eax, dword [0x1009530]
jne 0x1004b8d
cmp eax, ebx
jne 0x1004b8d
push 0x27de
mov dword [ebp - 0x38], esi
call fcn.01006551
pop ecx
push 4
lea eax, [ebp - 0x38]
push eax
push 0x4d
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x1004ca3
mov dword [0x1009160], esi
jmp 0x1004ba5
push eax
push ebx
push ebx
push dword [ebp - 8]
push esi
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpSetCredentials]
test eax, eax
je 0x1004cc3
cmp dword [ebp - 0x28], ebx
jne 0x10048da
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x18], esi
jmp 0x10048da
push 0x27e7
call fcn.01006518
pop ecx
push esi
call dword [sym.imp.msvcrt.dll_exit]
push 0x27e8
call fcn.01006518
jmp 0x1004d5a
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2783
jmp 0x10048b0
cmp esi, 0x2f0c
jne 0x1004c02
push 0x27eb
jmp 0x1004d55
push esi
call fcn.010065ad
push eax
push esi
push 0x2784
jmp 0x10048b0
push eax
call fcn.010065ad
push eax
push 0x2f00
push 0x2793
jmp 0x10048b0
call edi
mov esi, eax
cmp esi, 0x2f0c
jne 0x1004c5d
push 0x27ec
call fcn.01006551
pop ecx
cmp dword [0x1009524], ebx
je 0x1004c53
push 0x27ed
jmp 0x1004d55
push 0x27ee
jmp 0x1004d55
push esi
call fcn.010065ad
push eax
push esi
push 0x2785
jmp 0x10048b0
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2786
jmp 0x10048b0
push 0x27f0
jmp 0x1004d55
push 0x27f1
jmp 0x1004bd0
push 0x27f2
jmp 0x1004bd0
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2788
call fcn.01006551
add esp, 0xc
xor eax, eax
jmp 0x1004d61
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x2789
jmp 0x10048b0
push ebx
lea eax, [ebp - 0xc]
push eax
push ebx
push ebx
push 0x16
push dword [ebp + 8]
mov dword [ebp - 0xc], ebx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x1004d50
call edi
cmp eax, 0x7a
jne 0x1004d50
push dword [ebp - 0xc]
call dword [sym.imp.msvcrt.dll_malloc]
mov esi, eax
pop ecx
cmp esi, ebx
jne 0x1004d10
push 0x2725
jmp 0x1004d55
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push ebx
push 0x16
push dword [ebp + 8]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x1004d3c
call edi
mov esi, eax
push esi
call fcn.010065ad
push eax
push esi
push 0x278a
jmp 0x10048b0
mov eax, dword [ebp - 0xc]
push esi
push 0x272c
mov byte [esi + eax], bl
call fcn.01006551
pop ecx
jmp 0x1004d5a
push 0x27f3
call fcn.01006551
pop ecx
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 4