Function at 0x4bd430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x665608
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x6d5ec0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x6ec72c]
mov dword [ebp - 4], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x6ea760]
cmp eax, dword [ecx + 4]
jg 0x4bd624
mov edi, dword [ebp + 8]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov cx, word [ebp + 0xc]
mov dword [ebp - 4], eax
mov eax, 0x6d30c0
mov dword [ebp - 0x18], 1
cmp word [eax], cx
je 0x4bd4e4
add eax, 0x1c
cmp eax, 0x6d3718
jne 0x4bd4c2
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
lea esi, [eax + 4]
cmp edi, esi
je 0x4bd611
cmp dword [esi + 0x14], 7
mov ecx, esi
mov dword [ebp - 0x14], esi
jbe 0x4bd4ff
mov ecx, dword [esi]
mov dword [ebp - 0x14], ecx
mov edx, dword [edi + 0x14]
mov esi, dword [esi + 0x10]
mov dword [ebp - 0x1c], edx
cmp esi, edx
ja 0x4bd547
mov dword [ebp + 8], edi
mov eax, edi
cmp edx, 7
jbe 0x4bd51b
mov eax, dword [edi]
mov dword [ebp + 8], eax
mov dword [edi + 0x10], esi
add esi, esi
push esi
push ecx
push eax
call fcn.00620e40
mov eax, dword [ebp + 8]
add esp, 0xc
xor ecx, ecx
mov word [esi + eax], cx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp esi, 0x7ffffffe
ja 0x4bdd1a
mov ecx, esi
or ecx, 7
cmp ecx, 0x7ffffffe
jbe 0x4bd567
mov ecx, SysReAllocString
jmp 0x4bd58b
mov eax, edx
shr eax, 1
mov dword [ebp - 0x10], eax
mov eax, SysReAllocString
sub eax, dword [ebp - 0x10]
cmp edx, eax
jbe 0x4bd581
mov ecx, SysReAllocString
jmp 0x4bd58b
mov eax, dword [ebp - 0x10]
add eax, edx
cmp ecx, eax
cmovb ecx, eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ecx
push eax
push edi
call fcn.00423d90
mov dword [edi + 0x10], esi
mov ecx, eax
mov eax, dword [ebp - 0x10]
add esi, esi
push esi
push dword [ebp - 0x14]
mov dword [ebp + 8], ecx
push ecx
mov dword [edi + 0x14], eax
call fcn.00620e40
mov ecx, dword [ebp + 8]
xor eax, eax
add esp, 0x14
mov word [ecx + esi], ax
mov eax, dword [ebp - 0x1c]
cmp eax, 7
jbe 0x4bd60f
lea ecx, [eax*2 + 2]
mov eax, dword [edi]
cmp ecx, 0x1000
jb 0x4bd5ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4bdd1f
mov eax, edx
push ecx
push eax
call fcn.0061ef9d
mov eax, dword [ebp + 8]
add esp, 8
mov dword [edi], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov dword [edi], ecx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x6ea760
call fcn.0061eb97
add esp, 4
cmp dword [0x6ea760], 0xffffffff
jne 0x4bd485
push str.Continue
mov ecx, 0x6d30c4
call fcn.00423c90
mov eax, 0x65
mov dword [ebp - 4], 1
push str.Switching_Protocols
mov ecx, 0x6d30e0
mov word [0x6d30dc], ax
call fcn.00423c90
mov eax, 0xc8
mov byte [ebp - 4], 2
push 0x6703e8
mov ecx, 0x6d30fc
mov word [0x6d30f8], ax
call fcn.00423c90
mov eax, 0xc9
mov byte [ebp - 4], 3
push str.Created
mov ecx, 0x6d3118
mov word [0x6d3114], ax
call fcn.00423c90
mov eax, 0xca
mov byte [ebp - 4], 4
push str.Accepted
mov ecx, 0x6d3134
mov word [0x6d3130], ax
call fcn.00423c90
mov eax, 0xcb
mov byte [ebp - 4], 5
push str.Non_Authoritative_Information
mov ecx, 0x6d3150
mov word [0x6d314c], ax
call fcn.00423c90
mov eax, 0xcc
mov byte [ebp - 4], 6
push str.No_Content
mov ecx, 0x6d316c
mov word [0x6d3168], ax
call fcn.00423c90
mov eax, 0xcd
mov byte [ebp - 4], 7
push str.Reset_Content
mov ecx, 0x6d3188
mov word [0x6d3184], ax
call fcn.00423c90
mov eax, 0xce
mov byte [ebp - 4], 8
push str.Partial_Content
mov ecx, 0x6d31a4
mov word [0x6d31a0], ax
call fcn.00423c90
mov eax, 0xcf
mov byte [ebp - 4], 9
push str.Multi_Status
mov ecx, 0x6d31c0
mov word [0x6d31bc], ax
call fcn.00423c90
mov eax, 0xd0
mov byte [ebp - 4], 0xa
push str.Already_Reported
mov ecx, 0x6d31dc
mov word [0x6d31d8], ax
call fcn.00423c90
mov eax, 0xe2
mov byte [ebp - 4], 0xb
push str.IM_Used
mov ecx, 0x6d31f8
mov word [0x6d31f4], ax
call fcn.00423c90
mov eax, 0x12c
mov byte [ebp - 4], 0xc
push str.Multiple_Choices
mov ecx, 0x6d3214
mov word [0x6d3210], ax
call fcn.00423c90
mov eax, 0x12d
mov byte [ebp - 4], 0xd
push str.Moved_Permanently
mov ecx, 0x6d3230
mov word [0x6d322c], ax
call fcn.00423c90
mov eax, 0x12e
mov byte [ebp - 4], 0xe
push 0x67053c
mov ecx, 0x6d324c
mov word [0x6d3248], ax
call fcn.00423c90
mov eax, 0x12f
mov byte [ebp - 4], 0xf
push str.See_Other
mov ecx, 0x6d3268
mov word [0x6d3264], ax
call fcn.00423c90
mov eax, 0x130
mov byte [ebp - 4], 0x10
push str.Not_Modified
mov ecx, 0x6d3284
mov word [0x6d3280], ax
call fcn.00423c90
mov eax, 0x131
mov byte [ebp - 4], 0x11
push str.Use_Proxy
mov ecx, 0x6d32a0
mov word [0x6d329c], ax
call fcn.00423c90
mov eax, 0x133
mov byte [ebp - 4], 0x12
push str.Temporary_Redirect
mov ecx, 0x6d32bc
mov word [0x6d32b8], ax
call fcn.00423c90
mov eax, 0x134
mov byte [ebp - 4], 0x13
push str.Permanent_Redirect
mov ecx, 0x6d32d8
mov word [0x6d32d4], ax
call fcn.00423c90
mov eax, 0x190
mov byte [ebp - 4], 0x14
push str.Bad_Request
mov ecx, 0x6d32f4
mov word [0x6d32f0], ax
call fcn.00423c90
mov eax, 0x191
mov byte [ebp - 4], 0x15
push str.Unauthorized
mov ecx, 0x6d3310
mov word [0x6d330c], ax
call fcn.00423c90
mov eax, 0x192
mov byte [ebp - 4], 0x16
push str.Payment_Required
mov ecx, 0x6d332c
mov word [0x6d3328], ax
call fcn.00423c90
mov eax, 0x193
mov byte [ebp - 4], 0x17
mov word [0x6d3344], ax
push str.Forbidden
mov ecx, 0x6d3348
call fcn.00423c90
mov eax, 0x194
mov byte [ebp - 4], 0x18
push str.Not_Found
mov ecx, 0x6d3364
mov word [0x6d3360], ax
call fcn.00423c90
mov eax, 0x195
mov byte [ebp - 4], 0x19
push str.Method_Not_Allowed
mov ecx, 0x6d3380
mov word [0x6d337c], ax
call fcn.00423c90
mov eax, 0x196
mov byte [ebp - 4], 0x1a
push str.Not_Acceptable
mov ecx, 0x6d339c
mov word [0x6d3398], ax
call fcn.00423c90
mov eax, 0x197
mov byte [ebp - 4], 0x1b
push str.Proxy_Authentication_Required
mov ecx, 0x6d33b8
mov word [0x6d33b4], ax
call fcn.00423c90
mov eax, 0x198
mov byte [ebp - 4], 0x1c
push str.Request_Time_out
mov ecx, 0x6d33d4
mov word [0x6d33d0], ax
call fcn.00423c90
mov eax, 0x199
mov byte [ebp - 4], 0x1d
push str.Conflict
mov ecx, 0x6d33f0
mov word [0x6d33ec], ax
call fcn.00423c90
mov eax, 0x19a
mov byte [ebp - 4], 0x1e
push str.Gone
mov ecx, 0x6d340c
mov word [0x6d3408], ax
call fcn.00423c90
mov eax, 0x19b
mov byte [ebp - 4], 0x1f
push str.Length_Required
mov ecx, 0x6d3428
mov word [0x6d3424], ax
call fcn.00423c90
mov eax, 0x19c
mov byte [ebp - 4], 0x20
push str.Precondition_Failed
mov ecx, 0x6d3444
mov word [0x6d3440], ax
call fcn.00423c90
mov eax, 0x19d
mov byte [ebp - 4], 0x21
push str.Request_Entity_Too_Large
mov ecx, 0x6d3460
mov word [0x6d345c], ax
call fcn.00423c90
mov eax, 0x19e
mov byte [ebp - 4], 0x22
push str.Request_Uri_Too_Large
mov ecx, 0x6d347c
mov word [0x6d3478], ax
call fcn.00423c90
mov byte [ebp - 4], 0x23
mov eax, 0x19f
mov ecx, 0x6d3498
push str.Unsupported_Media_Type
mov word [0x6d3494], ax
call fcn.00423c90
mov eax, 0x1a0
mov byte [ebp - 4], 0x24
push str.Requested_range_not_satisfiable
mov ecx, 0x6d34b4
mov word [0x6d34b0], ax
call fcn.00423c90
mov eax, 0x1a1
mov byte [ebp - 4], 0x25
push str.Expectation_Failed
mov ecx, 0x6d34d0
mov word [0x6d34cc], ax
call fcn.00423c90
mov eax, 0x1a5
mov byte [ebp - 4], 0x26
push str.Misdirected_Request
mov ecx, 0x6d34ec
mov word [0x6d34e8], ax
call fcn.00423c90
mov eax, 0x1a6
mov byte [ebp - 4], 0x27
push str.Unprocessable_Entity
mov ecx, 0x6d3508
mov word [0x6d3504], ax
call fcn.00423c90
mov eax, 0x1a7
mov byte [ebp - 4], 0x28
push str.Locked
mov ecx, 0x6d3524
mov word [0x6d3520], ax
call fcn.00423c90
mov eax, 0x1a8
mov byte [ebp - 4], 0x29
push str.Failed_Dependency
mov ecx, 0x6d3540
mov word [0x6d353c], ax
call fcn.00423c90
mov eax, 0x1aa
mov byte [ebp - 4], 0x2a
push str.Upgrade_Required
mov ecx, 0x6d355c
mov word [0x6d3558], ax
call fcn.00423c90
mov eax, 0x1ac
mov byte [ebp - 4], 0x2b
push str.Precondition_Required
mov ecx, 0x6d3578
mov word [0x6d3574], ax
call fcn.00423c90
mov eax, 0x1ad
mov byte [ebp - 4], 0x2c
push str.Too_Many_Requests
mov ecx, 0x6d3594
mov word [0x6d3590], ax
call fcn.00423c90
mov eax, 0x1af
mov byte [ebp - 4], 0x2d
push str.Request_Header_Fields_Too_Large
mov ecx, 0x6d35b0
mov word [0x6d35ac], ax
call fcn.00423c90
mov eax, 0x1c3
mov byte [ebp - 4], 0x2e
mov word [0x6d35c8], ax
mov ecx, 0x6d35cc
push str.Unavailable_For_Legal_Reasons
call fcn.00423c90
mov eax, 0x1f4
mov byte [ebp - 4], 0x2f
push str.Internal_Error
mov ecx, 0x6d35e8
mov word [0x6d35e4], ax
call fcn.00423c90
mov eax, 0x1f5
mov byte [ebp - 4], 0x30
push str.Not_Implemented
mov ecx, 0x6d3604
mov word [0x6d3600], ax
call fcn.00423c90
mov eax, 0x1f6
mov byte [ebp - 4], 0x31
push str.Bad_Gateway
mov ecx, 0x6d3620
mov word [0x6d361c], ax
call fcn.00423c90
mov eax, 0x1f7
mov byte [ebp - 4], 0x32
push str.Service_Unavailable
mov ecx, 0x6d363c
mov word [0x6d3638], ax
call fcn.00423c90
mov eax, 0x1f8
mov byte [ebp - 4], 0x33
push str.Gateway_Time_out
mov ecx, 0x6d3658
mov word [0x6d3654], ax
call fcn.00423c90
mov eax, 0x1f9
mov byte [ebp - 4], 0x34
push str.HTTP_Version_not_supported
mov ecx, 0x6d3674
mov word [0x6d3670], ax
call fcn.00423c90
mov eax, 0x1fa
mov byte [ebp - 4], 0x35
push str.Variant_Also_Negotiates
mov ecx, 0x6d3690
mov word [0x6d368c], ax
call fcn.00423c90
mov eax, 0x1fb
mov byte [ebp - 4], 0x36
push str.Insufficient_Storage
mov ecx, 0x6d36ac
mov word [0x6d36a8], ax
call fcn.00423c90
mov eax, 0x1fc
mov byte [ebp - 4], 0x37
push str.Loop_Detected
mov ecx, 0x6d36c8
mov word [0x6d36c4], ax
call fcn.00423c90
mov eax, 0x1fe
mov byte [ebp - 4], 0x38
push str.Not_Extended
mov ecx, 0x6d36e4
mov word [0x6d36e0], ax
call fcn.00423c90
mov eax, 0x1ff
mov byte [ebp - 4], 0x39
push str.Network_Authentication_Required
mov ecx, 0x6d3700
mov word [0x6d36fc], ax
call fcn.00423c90
push 0x66c2f0
call fcn.0061ef88
push 0x6ea760
call fcn.0061eb46
add esp, 8
jmp 0x4bd485
call fcn.00402f70
call fcn.0063629b
int3