Function at 0x10001920
Capabilities:
Reference http user-agent string

Disassembly:
push 0xffffffffffffffff
push 0x101ab818
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov eax, dword [0x1026d48c]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebp, ecx
cmp byte [ebp + 0x64], 0
jne 0x10001959
mov eax, 0x67
jmp 0x10002140
call fcn.10001670
mov eax, dword [esp + 0x4c]
mov esi, dword [esp + 0x38]
mov ecx, dword [esp + 0x48]
mov dword [ebp + 0x2c], esi
mov dword [ebp + 0x30], eax
call section..text
mov edi, str.checkConnection
mov ecx, 0x10
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
mov byte [esp + 0x4c], al
jne 0x100019a0
mov eax, dword [esp + 0x4c]
push eax
mov ecx, ebp
call fcn.10002660
mov dword [ebp + 0x84], eax
jmp 0x10002140
test byte [ebp + 0x14], 1
je 0x10001a87
mov esi, dword [esp + 0x3c]
mov ecx, dword [ebp + 0x48]
push esi
call fcn.10004840
cmp eax, 0xffffffff
je 0x10001a56
test eax, eax
je 0x10001a18
mov ecx, dword [ebp + 0x44]
push str.utf_8
push esi
call fcn.100036e0
cmp al, 1
je 0x10001a94
mov ecx, dword [ebp + 0x34]
push str.Error:_Load_File_Failed._r_n_r_nXML
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push esi
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023cd48
call fcn.10003930
mov ecx, dword [ebp + 0x68]
push 1
push str.Error:
push ecx
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov ecx, dword [ebp + 0x34]
push str.Error:_File_not_found._r_n_r_nXML
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push esi
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023ccac
call fcn.10003930
mov edx, dword [ebp + 0x68]
push 1
push str.Error:
push edx
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov ecx, dword [ebp + 0x34]
push 0x1023ccc8
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push esi
call fcn.10003930
mov eax, dword [ebp + 0x68]
push 1
push str.Error:
push eax
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov ecx, dword [esp + 0x3c]
push ecx
mov ecx, dword [ebp + 0x44]
call fcn.10003a00
mov ecx, dword [ebp + 0x50]
push str.soap_env:Envelope
call fcn.10005820
xor esi, esi
cmp dword [str.xmlns:soap_env], esi
je 0x10001ae8
xor eax, eax
mov ecx, 0x1023dbb4
mov edx, dword [eax + 0x1023dba8]
cmp edx, dword [ebp + 0x20]
jne 0x10001acf
mov eax, dword [eax + 0x1023dbb8]
mov ecx, dword [ecx]
push eax
push ecx
mov ecx, dword [ebp + 0x50]
call fcn.100058f0
add esi, 1
lea eax, [esi + esi*4]
add eax, eax
add eax, eax
cmp dword [eax + 0x1023dbb4], 0
lea ecx, [eax + 0x1023dbb4]
jne 0x10001ab2
xor ecx, ecx
cmp dword [str.xmlns:ns1], ecx
je 0x10001b42
mov edx, dword [ebp + 0x20]
xor eax, eax
cmp dword [eax + 0x1023dc10], edx
jne 0x10001b0f
mov eax, dword [eax + 0x1023dc14]
cmp eax, dword [ebp + 0x18]
je 0x10001b24
cmp eax, 0x63
je 0x10001b24
add ecx, 1
lea eax, [ecx + ecx*4]
add eax, eax
add eax, eax
cmp dword [eax + 0x1023dc1c], 0
jne 0x10001af7
jmp 0x10001b42
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp + 0x50]
add eax, eax
mov edx, dword [eax + eax + 0x1023dc20]
add eax, eax
mov eax, dword [eax + 0x1023dc1c]
push edx
push eax
call fcn.100058f0
mov ebx, dword [ebp + 0x20]
xor esi, esi
xor edi, edi
mov dword [esp + 0x3c], esi
lea ecx, [ecx]
cmp dword [esi + 0x1023dcb0], ebx
jne 0x10001b9a
mov ecx, dword [ebp + 0x2c]
mov eax, dword [esi + 0x1023dcb8]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10001b81
test dl, dl
je 0x10001b7d
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10001b81
add eax, 2
add ecx, 2
test dl, dl
jne 0x10001b61
xor eax, eax
jmp 0x10001b86
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x10001b9a
mov esi, dword [esi + 0x1023dcb4]
cmp esi, dword [ebp + 0x18]
je 0x10001baf
cmp esi, 0x63
je 0x10001baf
add edi, 1
lea esi, [edi + edi*4]
add esi, esi
add esi, esi
cmp dword [esi + 0x1023dcb8], 0
jne 0x10001b50
jmp 0x10001bd8
mov ecx, dword [ebp + 0x44]
lea esi, [edi + edi*4]
add esi, esi
add esi, esi
call fcn.10003b00
mov ecx, dword [esi + 0x1023dcbc]
push eax
push ecx
mov ecx, dword [ebp + 0x50]
call fcn.10005c70
mov edx, dword [esi + 0x1023dcc0]
mov dword [esp + 0x3c], edx
mov ecx, dword [ebp + 0x40]
push str.POST
call fcn.10006030
mov ecx, dword [ebp + 0x38]
call fcn.10004440
mov ecx, dword [ebp + 0x40]
push eax
call fcn.10006100
mov ecx, dword [ebp + 0x40]
push str.Mozilla_5.0__Windows_NT_6.3__WOW64__rv:49.0__Gecko_20100101_Firefox_49.0
push str.User_Agent
call fcn.100061e0
mov ecx, dword [ebp + 0x40]
push str.text_xml
call fcn.10005f60
mov ecx, dword [ebp + 0x40]
push str.utf_8
call fcn.10005e90
mov ecx, dword [ebp + 0x40]
push 1
call fcn.100061d0
mov ecx, dword [ebp + 0x40]
push str.close
push str.Connection
call fcn.100061e0
mov ecx, dword [ebp + 0x50]
push str.utf_8
call fcn.10005a20
mov ecx, dword [ebp + 0x40]
push eax
call fcn.10006310
cmp al, 1
je 0x10001c8d
mov ecx, dword [ebp + 0x34]
push str.Error:_Cannot_build_the_Request_from_string._r_n_r_n
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023ce2c
call fcn.10003930
mov eax, dword [ebp + 0x68]
push 1
push str.Error:
push eax
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov esi, ebp
call fcn.100021a0
test eax, eax
mov dword [ebp + 0x84], eax
je 0x10001cba
mov ecx, dword [ebp + 0x68]
push 1
push str.Error:
push ecx
push ebp
call fcn.10002af0
mov eax, dword [ebp + 0x84]
jmp 0x10002140
mov ecx, dword [ebp + 0x4c]
push 0xc
call fcn.10004b00
mov ecx, dword [ebp + 0x4c]
call fcn.100064b0
test al, al
je 0x10001ce1
cmp byte [esp + 0x4c], 0
jne 0x10001ce1
mov eax, 0x411
jmp 0x10002140
mov eax, dword [ebp + 0x68]
test eax, eax
je 0x10001d1d
mov edx, dword [ebp + 0x2c]
mov edi, str.saveAttachment
mov esi, edx
mov ecx, 0xf
xor ebx, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x10001d1d
mov esi, edx
mov edi, str.saveAttachments
mov ecx, 0x10
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x10001d1d
push 1
push str.Request:
push eax
push ebp
call fcn.10002af0
cmp byte [ebp + 0x9c], 0
je 0x10001d2d
mov esi, ebp
call fcn.10002fb0
mov eax, dword [ebp + 0x40]
mov ecx, dword [ebp + 0x38]
push eax
call fcn.100044f0
mov ecx, dword [ebp + 0x38]
push eax
call fcn.10004490
mov ecx, dword [ebp + 0x38]
push eax
call fcn.100043f0
mov ecx, dword [ebp + 0x4c]
push eax
call fcn.10005560
mov ecx, dword [ebp + 0x4c]
mov dword [ebp + 0x3c], eax
call fcn.100064b0
test al, al
jne 0x10001e00
mov ecx, dword [ebp + 0x4c]
call fcn.10004af0
test eax, eax
mov dword [ebp + 0x60], eax
je 0x10001d81
mov ebx, eax
mov edi, ebp
call fcn.100023f0
jmp 0x10001de5
mov ecx, dword [ebp + 0x3c]
call fcn.10006900
mov ecx, dword [ebp + 0x3c]
mov esi, eax
call fcn.10006910
cmp esi, 0xc8
mov ecx, dword [ebp + 0x34]
mov edi, eax
jne 0x10001dc5
push 0x1023ce68
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023cec0
call fcn.10003930
mov ecx, dword [ebp + 0x4c]
call fcn.100066f0
mov ecx, dword [ebp + 0x34]
push eax
jmp 0x10001dca
push 0x1023cf0c
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push str._r_n_r_nStatus:
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push edi
call fcn.10003930
mov ecx, dword [ebp + 0x68]
push 1
push str.Error:
push ecx
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov edx, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x3c]
push edx
call fcn.10006880
mov ecx, dword [ebp + 0x58]
push str.Fault_
mov byte [ebp + 0x66], 1
call fcn.10003b20
test al, al
jne 0x1000209c
mov ecx, dword [ebp + 0x58]
push str.fault_
call fcn.10003b20
test al, al
jne 0x1000209c
mov ecx, dword [ebp + 0x58]
push str.faultcode_
call fcn.10003b20
test al, al
jne 0x1000209c
mov ecx, dword [ebp + 0x58]
push str.HTTP_Status
call fcn.10003b20
test al, al
jne 0x1000209c
mov eax, dword [esp + 0x3c]
mov ecx, dword [ebp + 0x58]
push eax
call fcn.10003b00
push eax
call dword [sym.imp.MSVCR80.dll_strstr]
add esp, 8
test eax, eax
jne 0x10001ea4
mov ecx, dword [esp + 0x38]
mov ebx, dword [ebp + 0x68]
push ecx
call fcn.10002d80
mov edx, dword [ebp + 0x68]
push 0
push str.Response:
push edx
push ebp
call fcn.10002af0
xor eax, eax
jmp 0x10002140
xor bl, bl
mov esi, eax
xor edi, edi
lea ebx, [ebx]
mov al, byte [esi - 1]
sub esi, 1
cmp al, 0x3a
jne 0x10001ebc
mov bl, 1
cmp al, 0x3c
je 0x10001ed2
cmp al, 0x20
je 0x10001ed2
cmp al, 0x3b
je 0x10001ed2
add edi, 1
cmp edi, 0x20
jl 0x10001eb0
jmp 0x10001ed5
add esi, 1
lea ecx, [esp + 0x14]
call fcn.10003380
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0
call fcn.10003900
test bl, bl
je 0x10001efe
push edi
push esi
lea ecx, [esp + 0x1c]
call fcn.10003a10
mov eax, dword [esp + 0x3c]
push eax
lea ecx, [esp + 0x18]
call fcn.10003930
mov ecx, dword [ebp + 0x3c]
call fcn.100068b0
mov ecx, dword [ebp + 0x54]
push eax
call fcn.10005a90
cmp al, 1
jne 0x10002014
lea ecx, [esp + 0x14]
call fcn.10003b00
mov ecx, dword [ebp + 0x5c]
push ecx
mov ecx, dword [ebp + 0x54]
push eax
call fcn.10005b70
cmp al, 1
je 0x10001f96
push 0x1023d024
mov ecx, dword [ebp + 0x34]
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023d064
call fcn.10003930
mov ecx, dword [ebp + 0x54]
call fcn.10005a20
mov ecx, dword [ebp + 0x34]
push eax
call fcn.10003930
mov edx, dword [ebp + 0x68]
push 1
push str.Error:
push edx
push ebp
call fcn.10002af0
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
call fcn.10003410
mov eax, 0xa
jmp 0x10002140
mov eax, dword [ebp + 0x6c]
push 1
push str.Response:
push eax
push ebp
call fcn.10002af0
test byte [ebp + 0x14], 2
je 0x10001fcd
mov ecx, dword [esp + 0x40]
push str.utf_8
push ecx
mov ecx, dword [ebp + 0x5c]
call fcn.10003bf0
cmp al, 1
je 0x10001ffc
push 0x1023d084
jmp 0x10001f44
cmp dword [ebp + 0x2c], str.sendMessage
jne 0x10001ffc
mov ecx, dword [ebp + 0x58]
push str._OK_
call fcn.10003b20
test al, al
je 0x10001ffc
mov eax, dword [ebp + 0x68]
test eax, eax
je 0x10001ffc
push 0
push str.Response:
push eax
push ebp
call fcn.10002af0
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
call fcn.10003410
xor eax, eax
jmp 0x10002140
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x3c]
push eax
call fcn.10006880
mov ecx, dword [ebp + 0x5c]
push 0x1023d0b8
call fcn.10003930
mov ecx, dword [ebp + 0x58]
call fcn.10003b00
mov ecx, dword [ebp + 0x5c]
push eax
call fcn.10003930
test byte [ebp + 0x14], 4
je 0x10002081
mov ecx, dword [esp + 0x44]
push str.ANSI
push ecx
mov ecx, dword [ebp + 0x5c]
call fcn.10003bf0
cmp al, 1
je 0x10002081
mov ecx, dword [ebp + 0x34]
push 0x1023d0e8
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023cfa0
call fcn.10003930
mov ecx, dword [ebp + 0x58]
call fcn.10003b00
jmp 0x10001f61
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], 0xffffffff
call fcn.10003410
mov eax, 0x68
jmp 0x10002140
test byte [ebp + 0x14], 4
je 0x100020fb
mov eax, dword [esp + 0x44]
mov ecx, dword [ebp + 0x58]
push str.ANSI
push eax
call fcn.10003bf0
cmp al, 1
je 0x10002119
mov ecx, dword [ebp + 0x34]
push 0x1023cf6c
call fcn.10003930
mov ecx, dword [ebp + 0x34]
push 0x1023cfa0
call fcn.10003930
mov ecx, dword [ebp + 0x58]
call fcn.10003b00
mov ecx, dword [ebp + 0x34]
push eax
call fcn.10003930
mov ecx, dword [ebp + 0x68]
push 1
push str.Error:
push ecx
push ebp
call fcn.10002af0
mov eax, 0xa
jmp 0x10002140
mov ecx, dword [ebp + 0x5c]
push 0x1023cfc0
call fcn.10003930
mov ecx, dword [ebp + 0x58]
call fcn.10003b00
mov ecx, dword [ebp + 0x5c]
push eax
call fcn.10003930
mov edx, dword [ebp + 0x68]
push 0
push str.Response:
push edx
push ebp
call fcn.10002af0
mov eax, dword [ebp + 0x6c]
push 1
push str.Response:
push eax
push ebp
call fcn.10002af0
mov eax, 0x65
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x20
ret 0x18