Function at 0x10005fd5
Capabilities:
Extract http body

Disassembly:
push 0x58
mov eax, 0x10029e7f
call fcn.10016280
mov esi, ecx
mov dword [ebp - 0x30], esi
call fcn.1000eaf8
movdqa xmm0, xmmword [0x1002d340]
lea eax, [ebp - 0x20]
push 0xfffffc18
push 0xfffffaec
push eax
movdqu xmmword [ebp - 0x20], xmm0
call dword [sym.imp.USER32.dll_OffsetRect]
xor ebx, ebx
push ebx
push ecx
mov eax, esp
push ebx
push SysReAllocString
push ebx
push ecx
mov dword [eax], ebx
lea ecx, [ebp - 0x20]
mov eax, esp
push ebx
mov dword [eax], ecx
mov ecx, esi
call fcn.1000eaf8
cmp dword [esi + 4], ebx
jne 0x1000603a
mov eax, 0x80004005
jmp 0x1000635e
push ebx
push ebx
push ebx
push 0x52000000
push ebx
lea eax, [ebp - 0x20]
push eax
push dword [esi + 4]
lea edi, [esi + 0x48]
push str.AtlAxWin120
mov ecx, edi
mov dword [ebp - 0x28], edi
call fcn.1000eaf8
mov dword [ebp - 0x3c], ebx
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], ebx
push eax
push 0x1002c718
mov ecx, edi
call fcn.10001ee8
mov edi, eax
test edi, edi
js 0x1000634b
cmp dword [esi + 0x4c], ebx
je 0x10006086
call fcn.1000eaf8
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x2c]
push 0x1002ca78
call fcn.1000eaf8
mov edx, dword [ebp - 0x28]
mov ecx, dword [esi]
push ebx
mov byte [ebp - 4], 1
push dword [edx]
push dword [eax]
push esi
call dword [ecx + 0xc]
push dword [ebp - 0x2c]
mov edi, eax
mov byte [ebp - 4], bl
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test edi, edi
js 0x1000634b
mov esi, dword [ebp - 0x30]
lea eax, [esi + 0x40]
push eax
push 0x1002cd1c
lea ecx, [esi + 0x48]
call fcn.10007550
mov edi, eax
test edi, edi
js 0x1000634b
cmp dword [esi + 0x4c], ebx
je 0x100061d0
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
push eax
push 0x1002cb64
lea ecx, [esi + 0x48]
call fcn.10001ee8
mov edi, eax
test edi, edi
js 0x10006375
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], ebx
push eax
call fcn.10004f60
mov edi, eax
test edi, edi
js 0x10006375
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x8c]
mov edi, eax
test edi, edi
js 0x10006375
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 3
push eax
push 0x1002c9e8
lea ecx, [esi + 0x48]
call fcn.10001ee8
mov edi, eax
test edi, edi
js 0x10006364
push 0x18
call fcn.1000eaf8
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x10006175
push ebx
mov ecx, eax
call fcn.1000eaf8
jmp 0x10006177
mov eax, ebx
mov byte [ebp - 4], 3
lea edx, [eax + 0xc]
mov dword [esi + 0x50], eax
test eax, eax
jne 0x10006187
mov edx, ebx
mov eax, dword [ebp - 0x38]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
mov edi, eax
test edi, edi
js 0x10006364
lea eax, [esi + 0x48]
push eax
call fcn.10002111
mov edi, eax
pop ecx
test edi, edi
js 0x10006364
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 2
test eax, eax
je 0x100061c0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], bl
test eax, eax
je 0x100061d0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea edi, [esi + 0x40]
mov eax, dword [edi]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0xf0]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x50]
push eax
call esi
push 8
pop eax
push str.about:blank
mov word [ebp - 0x50], ax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x64]
push eax
call esi
mov ecx, dword [edi]
xor edi, edi
mov esi, dword [ebp - 0x30]
push 3
pop eax
push ebx
cmp dword [esi + 0x4c], ebx
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x64]
push ebx
push ebx
cmove eax, edi
mov dword [ebp - 0x5c], 0x200
mov edx, dword [ecx]
push eax
lea eax, [ebp - 0x50]
push eax
push ecx
call dword [edx + 0xd0]
mov edi, eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
test edi, edi
js 0x1000634b
mov dword [ebp - 0x34], ebx
mov eax, dword [esi + 0x40]
lea edx, [ebp - 0x34]
push edx
push eax
mov byte [ebp - 4], 5
mov ecx, dword [eax]
call dword [ecx + 0x48]
mov edi, eax
test edi, edi
js 0x1000633b
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x10006340
mov ecx, dword [eax]
lea edx, [esi + 0x44]
push edx
push str._D_3
push eax
mov dword [ebp - 0x24], edx
call dword [ecx]
mov edi, eax
test edi, edi
js 0x1000633b
add esi, 0x34
push esi
mov dword [ebp - 0x28], esi
call fcn.100050c0
mov edi, eax
test edi, edi
js 0x1000633b
mov eax, dword [esi]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov esi, dword [esi]
mov dword [ebp - 0x54], esi
test esi, esi
je 0x100062bb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
add ecx, 0x24
mov eax, dword [eax]
mov dword [eax + 8], ecx
mov dword [ebp - 0x40], ebx
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x40]
push edx
push 0x1002ca2c
mov byte [ebp - 4], 7
mov eax, dword [eax]
push eax
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
test edi, edi
js 0x1000631c
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x30]
add edx, 0x2c
push edx
mov ecx, dword [eax]
push 0x1002cf3c
push eax
mov dword [ebp - 0x24], edx
call dword [ecx + 0x10]
mov edi, eax
test edi, edi
js 0x1000631c
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
add eax, 0x30
push eax
mov ecx, dword [ecx]
push esi
push ecx
mov edx, dword [ecx]
call dword [edx + 0x14]
mov edi, eax
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 6
test eax, eax
je 0x1000632d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov byte [ebp - 4], 5
test esi, esi
je 0x1000633b
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0x34]
test eax, eax
mov byte [ebp - 4], bl
je 0x1000634b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x1000635c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
call fcn.1001622f
ret
mov eax, dword [ebp - 0x38]
mov byte [ebp - 4], 2
test eax, eax
je 0x10006375
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2c]
jmp 0x1000633e