Function at 0x6fdf8820
Capabilities:
Reference http user-agent string

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x6fdf8fd7
sub esp, 0xac
lea eax, [0x6fe63040]
mov dword [esp], eax
call fcn.6fc0ba30
mov edi, dword [esp + 4]
mov eax, dword [esp + 0xb8]
mov dword [edi + 4], eax
mov ecx, dword [esp + 0xbc]
mov dword [edi + 8], ecx
mov edx, dword [0x700a7770]
test edx, edx
jne 0x6fdf887b
mov edx, dword [esp + 0xb4]
mov dword [edi], edx
jmp 0x6fdf8887
mov eax, dword [esp + 0xb4]
call fcn.6fc61f00
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xffffffff
mov eax, dword [esp + 0xb0]
test byte [eax], al
lea ecx, [0x6feded5c]
mov dword [esp], ecx
mov dword [esp + 4], edi
lea edx, [0x6fee0214]
mov dword [esp + 8], edx
lea ebx, [0x700a7564]
mov dword [esp + 0xc], ebx
lea ebp, [0x6fe558c0]
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], eax
call fcn.6fc88530
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x6fdf8c09
lea edi, [esp + 0x50]
mov esi, dword [esp + 0xb0]
call fcn.6fc62638
lea edi, [esp + 0x44]
lea esi, [esp + 0x50]
call fcn.6fc62692
lea eax, [esp + 0x44]
mov dword [esp], eax
lea eax, str.NTLMSSP
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.6fc02ba0
movzx eax, byte [esp + 0xc]
test al, al
je 0x6fdf8b74
mov ebx, dword [esp + 0x4c]
dec ebx
cmp ebx, 3
jae 0x6fdf8b74
cmp dword [esp + 0x58], 2
jne 0x6fdf8b74
mov ebx, dword [esp + 0xb0]
movzx ebp, word [ebx + 0xc]
test bp, bp
jbe 0x6fdf89eb
mov eax, dword [ebx + 0x10]
movzx ecx, word [ebx + 0xe]
mov edx, dword [ebx + 0x14]
mov word [esp], bp
mov word [esp + 2], cx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0xc], ecx
mov ebp, dword [esp + 0xbc]
mov dword [esp + 0x10], ebp
test edx, 1
setne dl
mov byte [esp + 0x14], dl
call fcn.6fdf9d40
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov esi, dword [esp + 0xb0]
mov dword [esi + 0x34], ecx
mov ecx, dword [0x700a7770]
test ecx, ecx
jne 0x6fdf89d9
mov dword [esi + 0x30], eax
jmp 0x6fdf89e1
lea edi, [esi + 0x30]
call fcn.6fc61f00
test edx, edx
jne 0x6fdf8b5f
mov ebx, esi
movzx ebp, word [ebx + 0x28]
test bp, bp
jbe 0x6fdf8c1e
mov eax, dword [ebx + 0x2c]
movzx ebp, bp
lea ecx, [eax + ebp]
mov esi, dword [esp + 0xb8]
cmp esi, ecx
jl 0x6fdf8a3d
mov edx, dword [esp + 0xbc]
cmp edx, ecx
jb 0x6fdf8fd1
cmp eax, ecx
ja 0x6fdf8fcc
sub edx, eax
mov ecx, edx
neg edx
sar edx, 0x1f
and eax, edx
mov edx, dword [esp + 0xb4]
add edx, eax
xor eax, eax
xor esi, esi
jmp 0x6fdf8a73
lea eax, [0x6fe587c0]
mov dword [esp], eax
call fcn.6fc0ba30
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x32
lea ecx, [0x6fe8bb30]
mov dword [eax], ecx
mov ebx, dword [esp + 0xb0]
xor edx, edx
xor ebp, ebp
xor ecx, ecx
mov esi, eax
lea eax, [0x6fededfc]
mov dword [esp + 0x34], ecx
mov dword [ebx + 0x40], ebp
mov dword [ebx + 0x44], ecx
mov edi, ecx
mov ecx, dword [0x700a7770]
test ecx, ecx
jne 0x6fdf8a8e
mov dword [ebx + 0x3c], edx
jmp 0x6fdf8aa6
mov dword [esp + 0x2c], eax
lea ecx, [ebx + 0x3c]
mov edi, ecx
mov eax, edx
call fcn.6fc61f00
mov eax, dword [esp + 0x2c]
mov edi, dword [esp + 0x34]
test eax, eax
jne 0x6fdf8b4a
mov dword [esp + 0x30], ebp
mov dword [esp + 0x80], edx
call fcn.6fc0c510
mov eax, dword [0x700a7770]
mov ecx, dword [esp]
test eax, eax
jne 0x6fdf8ad7
mov eax, dword [esp + 0xb0]
mov dword [eax + 0x38], ecx
jmp 0x6fdf8ae8
mov edx, dword [esp + 0xb0]
lea edi, [edx + 0x38]
mov eax, ecx
call fcn.6fc61f00
lea eax, [0x6fe63040]
mov dword [esp], eax
call fcn.6fc0ba30
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x30]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x34]
mov dword [edi + 8], eax
mov eax, dword [0x700a7770]
test eax, eax
jne 0x6fdf8b1d
mov eax, dword [esp + 0x80]
mov dword [edi], eax
jmp 0x6fdf8b29
mov eax, dword [esp + 0x80]
call fcn.6fc61f00
mov dword [esp + 0x84], edi
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xffffffff
jmp 0x6fdf8c3b
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], esi
add esp, 0xac
ret
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], ebp
add esp, 0xac
ret
mov dword [esp + 0x94], 0
mov dword [esp + 0x98], 0
lea eax, [0x6fe64660]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
call fcn.6fc09220
mov eax, dword [esp + 8]
lea ecx, [0x6fe64660]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x98], eax
lea eax, [0x6fe8a501]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
lea eax, [esp + 0x94]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.6fcba2a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
add esp, 0xac
ret
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], edx
add esp, 0xac
ret
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
add esp, 0xac
ret
lea eax, [0x6fe502c0]
mov dword [esp], eax
call fcn.6fc0ba30
mov eax, dword [esp + 4]
mov dword [esp + 0x90], eax
lea ecx, [0x6fe51780]
mov dword [esp], ecx
call fcn.6fc0ba30
mov eax, dword [esp + 4]
mov dword [esp + 0x8c], eax
lea ecx, [0x6feded5c]
mov dword [esp], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
lea ebx, [0x6fee0214]
mov dword [esp + 8], ebx
lea ebp, [0x700a7564]
mov dword [esp + 0xc], ebp
lea esi, [0x6fe46120]
mov dword [esp + 0x10], esi
mov edi, dword [esp + 0x90]
mov dword [esp + 0x14], edi
call fcn.6fc88530
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x6fdf8fa7
mov eax, dword [esp + 0x90]
movzx ecx, word [eax]
test cx, cx
je 0x6fdf8c1e
lea eax, [0x6feded5c]
mov dword [esp], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
lea edx, [0x6fee0214]
mov dword [esp + 8], edx
lea ebx, [0x700a7564]
mov dword [esp + 0xc], ebx
lea ebp, [0x6fe48620]
mov dword [esp + 0x10], ebp
mov esi, dword [esp + 0x8c]
mov dword [esp + 0x14], esi
call fcn.6fc88530
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
test eax, eax
jne 0x6fdf8f92
mov eax, dword [esp + 0x8c]
movzx ecx, word [eax]
lea edx, [0x6fe51840]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.6fc4adf0
mov eax, dword [esp + 0x84]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 4]
mov ebx, edx
sar edx, 0x1f
cmp ecx, edx
xchg ebp, ebx
setg bl
xchg ebp, ebx
cmp dword [eax + 0xc], ebx
setae bl
cmp ecx, edx
sete cl
mov edx, dword [esp + 0x8c]
movzx esi, word [edx]
mov dword [esp + 0x40], esi
mov edi, dword [esp + 0xc]
mov dword [esp + 0x88], edi
and ecx, ebx
or ebp, ecx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x6fdf8da8
mov ecx, dword [0x700807b8]
mov ebx, dword [0x700807bc]
xor ebp, ebp
jmp 0x6fdf8e3e
mov dword [eax + 0x14], 0xffffffff
mov ecx, dword [eax + 4]
mov ebx, dword [eax + 8]
mov ebp, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
mov edi, dword [eax]
test edx, edx
jne 0x6fdf8fc3
cmp ecx, ebp
jb 0x6fdf8fbc
sub ecx, ebp
sub ebx, ebp
neg ebx
sar ebx, 0x1f
and ebx, ebp
lea edx, [edi + ebx]
cmp esi, ecx
jg 0x6fdf8de1
mov ecx, esi
mov ebx, dword [esp + 0x88]
cmp ebx, edx
je 0x6fdf8e16
mov dword [esp + 0x3c], ecx
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.6fc62890
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0x88]
mov esi, dword [esp + 0x40]
mov edx, dword [eax + 0xc]
mov ebp, edx
add edx, ecx
mov edi, dword [eax + 0x10]
mov dword [eax + 0xc], edx
mov edx, ecx
sar ecx, 0x1f
add ebp, edx
adc edi, ecx
mov dword [eax + 0x10], edi
mov edi, ebx
xor ecx, ecx
mov ebp, edx
xor ebx, ebx
mov edx, dword [esp + 0x8c]
test ecx, ecx
jne 0x6fdf8f7d
movzx ecx, word [edx]
cmp ebp, ecx
jne 0x6fdf8eb7
mov eax, dword [esp + 0x90]
movzx eax, word [eax]
mov word [esp + 0x2a], ax
mov eax, dword [esp + 0xb0]
mov ecx, dword [eax + 0x38]
lea edx, [0x6fe52740]
mov dword [esp], edx
mov dword [esp + 4], ecx
lea ecx, [esp + 0x2a]
mov dword [esp + 8], ecx
call fcn.6fc0ce30
mov edi, dword [esp + 0xc]
mov eax, dword [esp + 0x40]
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov eax, dword [0x700a7770]
test eax, eax
jne 0x6fdf8ea6
mov eax, dword [esp + 0x88]
mov dword [edi], eax
jmp 0x6fdf8c3b
mov eax, dword [esp + 0x88]
call fcn.6fc61f00
jmp 0x6fdf8c3b
mov dword [esp + 0x38], ebp
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa8], 0
movzx eax, word [edx]
mov word [esp], ax
call fcn.6fc09290
mov eax, dword [esp + 4]
lea ecx, [0x6fe51780]
mov dword [esp + 0x9c], ecx
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.6fc09300
mov eax, dword [esp + 4]
lea ecx, [0x6fe50d80]
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], eax
lea eax, [0x6fe8837e]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0x9c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.6fcba2a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
add esp, 0xac
ret
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], ebx
add esp, 0xac
ret
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], edx
add esp, 0xac
ret
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], edx
add esp, 0xac
ret
mov eax, ebp
call fcn.6fc61fe0
mov esi, edx
mov eax, ebp
call fcn.6fc620e0
call fcn.6fc61ff0
call fcn.6fc61fd0
nop
call fcn.6fc60ad0
jmp fcn.6fdf8820