Function at 0x100f0aac
Capabilities:
Check http status code
Read http header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x101fe1c0]
xor eax, esp
mov dword [esp + 0xa8], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, ecx
push esi
mov esi, dword [ebp + 0x10]
push edi
mov dword [esp + 0x1c], esi
cmp eax, dword [ebx + 0x50]
je 0x100f0b0c
lea ecx, [ebx + 0x38]
call fcn.100278ea
push eax
lea ecx, [esp + 0x2c]
call fcn.100de6be
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x20], str.HINTERNET_passed_to_WinHttp_callback_does_not_match_HINTERNET_stored_on_IRequest
push eax
push ecx
push 0xa
mov ecx, 0x109a65b
call fcn.100de39d
jmp 0x100f0d87
mov eax, dword [ebp + 0xc]
mov ecx, 0x10000
cmp eax, ecx
ja 0x100f11b1
je 0x100f1103
sub eax, 1
je 0x100f1083
sub eax, 1
je 0x100f1003
dec eax
sub eax, 1
je 0x100f0f32
sub eax, 4
je 0x100f0e61
sub eax, 8
je 0x100f0d95
sub eax, 0x7f0
je 0x100f0c4b
sub eax, 0x3800
jne 0x100f1800
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 0
push eax
mov byte [esp + 0x1b], 0
je 0x100f0ba9
lea esi, [ebx + 0x130]
mov ecx, esi
call fcn.100df125
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 1
push eax
mov ecx, esi
call fcn.100df125
jmp 0x100f0bc9
lea esi, [ebx + 0xf0]
mov ecx, esi
call fcn.100df125
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 1
push eax
mov ecx, esi
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], str.RequestId
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_REDIRECT
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499615
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
mov ecx, dword [esp + 0x1c]
push ecx
push ebx
lea ecx, [ebx + 0x98]
call fcn.100e31de
test al, al
jne 0x100f1800
mov eax, dword [ebx]
lea ecx, [esp + 0x80]
push ecx
mov ecx, ebx
call dword [eax + 0x40]
jmp 0x100f1800
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
mov edi, 0x100
lea eax, [esp + 0x14]
push edi
push eax
lea eax, [esp + 0x20]
mov esi, str.RequestId
push eax
mov dword [esp + 0x24], esi
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_HANDLE_CLOSING
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499618
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
cmp byte [ebx + 0xe], 0
jne 0x100f0cf5
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push edi
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], esi
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.WinHttpCallback:_handle_is_being_closed_without_aborting
push eax
push ecx
push 0xa
mov edx, 0x33f
mov ecx, 0x12cd423
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
xor eax, eax
lea ecx, [esp + 0x80]
push eax
push eax
mov edx, 0x28565c8
mov dword [ebx + 0x50], eax
call fcn.100e6926
push eax
lea ecx, [ebx + 0x98]
call fcn.100e3023
lea ecx, [ebx + 0xd4]
cmp dword [ecx], 0
je 0x100f0d43
call fcn.10095a46
lea ecx, [esp + 0x20]
mov dword [esp + 0x20], eax
push ecx
mov dword [esp + 0x28], ebx
lea ecx, [eax + 0x28]
call fcn.100e2238
jmp 0x100f1800
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push edi
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], esi
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.m_pRequestBroker_is_null
push eax
push ecx
push 0xa
mov ecx, 0x2693556
mov edx, 0x33f
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
jmp 0x100f1800
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
je 0x100f0de3
cmp dword [ebx + 0x148], 0xffffffff
je 0x100f0dca
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 7
push eax
lea ecx, [ebx + 0x130]
call fcn.100df125
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 8
push eax
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f0e1a
cmp dword [ebx + 0x108], 0xffffffff
je 0x100f0e03
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 7
push eax
lea ecx, [ebx + 0xf0]
call fcn.100df125
push 1
lea eax, [esp + 0x17]
mov byte [esp + 0x17], 8
push eax
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
push eax
push ecx
push 0x64
mov ecx, 0x1e499612
jmp 0x100f0d7d
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 1
push eax
mov byte [esp + 0x1b], 6
je 0x100f0e8f
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f0e9a
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_CONNECTED_TO_SERVER
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499616
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
and dword [esp + 0x1c], 0
lea ecx, [ebx + 8]
call fcn.100675a3
lea ecx, [esp + 0x1c]
push ecx
push 0xa
mov edx, dword [eax]
lea ecx, [esp + 0x58]
push ecx
mov ecx, eax
call dword [edx + 0x20]
cmp dword [esp + 0x50], 0
jne 0x100f1800
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x100f1800
mov eax, dword [ecx]
push esi
push ebx
call dword [eax + 0x10]
jmp 0x100f1800
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 0
push eax
mov byte [esp + 0x1b], 5
je 0x100f0f60
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f0f6b
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_CONNECTING_TO_SERVER
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499617
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
and dword [esp + 0x1c], 0
lea ecx, [ebx + 8]
call fcn.100675a3
lea ecx, [esp + 0x1c]
push ecx
push 0xa
mov edx, dword [eax]
lea ecx, [esp + 0x58]
push ecx
mov ecx, eax
call dword [edx + 0x20]
cmp dword [esp + 0x50], 0
jne 0x100f1800
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x100f1800
mov eax, dword [ecx]
push esi
push ebx
call dword [eax + 8]
jmp 0x100f1800
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 1
push eax
mov byte [esp + 0x1b], 4
je 0x100f1031
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f103c
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_NAME_RESOLVED
push eax
push ecx
push 0x64
mov ecx, 0x1e499613
jmp 0x100f0d7d
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 1
push eax
mov byte [esp + 0x1b], 3
je 0x100f10b1
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f10bc
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_RESOLVING_NAME
push eax
push ecx
push 0x64
mov ecx, 0x1e499614
jmp 0x100f0d7d
push 0
push 0
mov edx, 0x28565c5
lea ecx, [esp + 0x58]
call fcn.100e6da6
mov eax, dword [esi]
lea ecx, [ebx + 0x38]
cdq
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], edx
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
mov ecx, dword [esp + 0x58]
mov esi, eax
mov edx, dword [esp + 0x5c]
lea eax, [esp + 0x20]
push ecx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x8c]
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], str.SecurityError
call fcn.1009857e
push esi
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], str.Received_WINHTTP_CALLBACK_STATUS_SECURE_FAILURE
push eax
push ecx
push ecx
call fcn.100efe29
lea ecx, [esp + 0x94]
call fcn.100093c1
lea ecx, [esp + 0x38]
call fcn.100093c1
lea eax, [esp + 0x50]
jmp 0x100f17f0
cmp eax, 0x20000
je 0x100f1637
cmp eax, 0x40000
je 0x100f152b
cmp eax, 0x80000
je 0x100f1466
cmp eax, 0x100000
je 0x100f13f4
cmp eax, 0x200000
je 0x100f1259
cmp eax, 0x400000
jne 0x100f1800
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_SENDREQUEST_COMPLETE
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499623
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
mov ecx, dword [ebx + 0xcc]
lea eax, [esp + 0x50]
push eax
call fcn.100f4d6f
jmp 0x100f11a8
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
mov dword [esp + 0x18], str.RequestId
push 0x100
push eax
lea eax, [esp + 0x20]
push eax
test esi, esi
je 0x100f1817
lea ecx, [esp + 0x8c]
call fcn.1006aea5
mov ecx, dword [esi]
mov edi, eax
and dword [esp + 0x24], 0
lea eax, [esp + 0x20]
push ecx
push eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x20], str.Result
call fcn.1009857e
mov ecx, dword [esp + 0x1c]
mov esi, eax
lea eax, [esp + 0x14]
mov dword [esp + 0x18], 0x1018ef34
mov ecx, dword [ecx + 4]
push ecx
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x1c], ecx
push eax
lea ecx, [esp + 0x34]
call fcn.1006ae41
push edi
push esi
push eax
lea eax, [esp + 0x20]
mov dword [esp + 0x20], str.Received_WINHTTP_CALLBACK_STATUS_REQUEST_ERROR
push eax
push ecx
push ecx
call fcn.100efdd1
lea ecx, [esp + 0x38]
call fcn.100093c1
lea ecx, [esp + 0x64]
call fcn.100093c1
lea ecx, [esp + 0x90]
call fcn.100093c1
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi + 4]
cmp ecx, 0x2f00
jne 0x100f1380
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Got_a_ERROR_WINHTTP_RESEND_REQUEST___Resending_the_request_now
push eax
push ecx
mov ecx, 0x1e49961b
mov edx, 0x33f
push 0xf
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
jmp 0x100f1774
call fcn.100df6cb
test al, al
je 0x100f13d6
mov ecx, ebx
call fcn.100f026b
test al, al
je 0x100f13d6
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Got_a_proxy_error__but_found_a_fallback_proxy___Resending_the_request_with_new_proxy
push eax
push ecx
mov ecx, 0x1e49961a
jmp 0x100f1366
mov edx, dword [esi + 4]
lea ecx, [esp + 0x80]
push 0x28565c6
call fcn.100ea371
push eax
lea eax, [esp + 0x54]
jmp 0x100f17f8
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_WRITE_COMPLETE
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499640
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
test esi, esi
je 0x100f1244
push 0
push dword [esi]
lea ecx, [ebx + 0x98]
push ebx
call fcn.100e3262
jmp 0x100f1244
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_READ_COMPLETE
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e49961e
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
mov ecx, dword [ebx + 0xd0]
lea eax, [esp + 0x13]
push eax
push dword [ebp + 0x14]
lea eax, [esp + 0x58]
push eax
call fcn.100e7aca
cmp dword [esp + 0x50], 0
jne 0x100f14ec
push dword [ebx + 0xc8]
lea ecx, [ebx + 0x98]
push ebx
call fcn.100e30a4
lea eax, [esp + 0x50]
mov ecx, ebx
push eax
lea eax, [esp + 0x84]
push eax
call fcn.100f0396
cmp byte [esp + 0x13], 0
je 0x100f1513
mov ecx, ebx
call fcn.100f09cb
jmp 0x100f1800
mov ecx, dword [ebx + 0xd0]
lea eax, [esp + 0x80]
push eax
call fcn.100e7a29
jmp 0x100f1800
lea eax, [ebx + 0x6c]
push eax
lea ecx, [esp + 0x24]
call fcn.1006b06a
mov ecx, dword [esp + 0x20]
call fcn.100df872
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x100f154e
call fcn.10024d5e
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 1
push eax
mov byte [esp + 0x1b], 0xa
je 0x100f157c
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f1587
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
push 0x100
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], str.RequestId
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_DATA_AVAILABLE
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e49961f
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
and dword [esp + 0x1c], 0
lea ecx, [ebx + 8]
call fcn.100675a3
lea ecx, [esp + 0x1c]
push ecx
push 0xa
mov edx, dword [eax]
lea ecx, [esp + 0x58]
push ecx
mov ecx, eax
call dword [edx + 0x20]
cmp dword [esp + 0x50], 0
jne 0x100f1611
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x100f1611
mov eax, dword [ecx]
push ebx
call dword [eax + 0xc]
push dword [esi]
mov ecx, dword [ebx + 0xd0]
lea eax, [esp + 0x84]
push eax
call fcn.100e7969
lea eax, [esp + 0x80]
push eax
lea eax, [esp + 0x2c]
jmp 0x100f17f8
lea edx, [esp + 0x13]
mov ecx, 0x3a9a
call fcn.100f88c3
cmp byte [esp + 0x13], 0
lea eax, [esp + 0x13]
push 1
push eax
mov byte [esp + 0x1b], 9
je 0x100f1665
lea ecx, [ebx + 0x130]
call fcn.100df125
jmp 0x100f1670
lea ecx, [ebx + 0xf0]
call fcn.100df125
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x28]
mov edi, 0x100
lea eax, [esp + 0x14]
push edi
push eax
lea eax, [esp + 0x20]
mov esi, str.RequestId
push eax
mov dword [esp + 0x24], esi
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_HEADERS_AVAILABLE
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499622
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
call fcn.100e8eee
test al, al
je 0x100f17cd
cmp byte [ebx + 0x69], 0
je 0x100f17cd
xor eax, eax
mov dword [esp + 0x14], 4
push eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x20], eax
push ecx
lea ecx, [esp + 0x24]
push ecx
push eax
push 0x20000013
push dword [ebx + 0x50]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x100f1780
cmp dword [esp + 0x1c], 0x191
jne 0x100f17cd
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x18], eax
lea ecx, [esp + 0x28]
push edi
lea eax, [esp + 0x1c]
mov dword [esp + 0x24], esi
push eax
lea eax, [esp + 0x28]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], str.Got_a_login_failure_with_Negotiate._Retrying_with_NTLM
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499621
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
push ecx
push dword [ebx + 0x50]
mov ecx, ebx
call fcn.100eb36b
mov byte [ebx + 0x69], 0
mov ecx, ebx
call fcn.100f09a0
jmp 0x100f1800
lea ecx, [ebx + 0x38]
call fcn.100278ea
mov dword [esp + 0x20], eax
lea ecx, [esp + 0x28]
push edi
lea eax, [esp + 0x24]
mov dword [esp + 0x1c], esi
push eax
lea eax, [esp + 0x20]
push eax
call fcn.1006aea5
push eax
lea eax, [esp + 0x24]
mov dword [esp + 0x24], str.WinHttpQueryHeaders_failed
push eax
push ecx
push 0x64
mov edx, 0x33f
mov ecx, 0x1e499620
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
mov ecx, ebx
call fcn.100f0a74
push ebx
lea ecx, [ebx + 0x98]
call fcn.100e3166
mov ecx, dword [ebx + 0xd0]
lea eax, [esp + 0x28]
push eax
call fcn.100e7a29
push eax
lea eax, [esp + 0x84]
push eax
mov ecx, ebx
call fcn.100f0396
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10033218
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [esp + 0x34]
call fcn.1006aea5
push eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], str.Received_WINHTTP_CALLBACK_STATUS_REQUEST_ERROR_with_no_WINHTTP_ASYNC_RESULT
push eax
push ecx
push 0xf
mov edx, 0x33f
mov ecx, 0x1e499619
call fcn.1006ad8d
lea ecx, [esp + 0x38]
call fcn.100093c1
mov ecx, 0x597123
call fcn.1006fff3
push 0
push 0
mov edx, 0x28565c7
lea ecx, [esp + 0x88]
call fcn.100e6b49
jmp 0x100f13ea