Function at 0x4bdcd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x666078
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x6d6ec0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x18], 0
mov eax, dword fs:[0x2c]
mov ecx, dword [0x6ed72c]
mov dword [ebp - 4], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x6eb760]
cmp eax, dword [ecx + 4]
jg 0x4bdec4
mov edi, dword [ebp + 8]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov cx, word [ebp + 0xc]
mov dword [ebp - 4], eax
mov eax, 0x6d40c0
mov dword [ebp - 0x18], 1
cmp word [eax], cx
je 0x4bdd84
add eax, 0x1c
cmp eax, 0x6d4718
jne 0x4bdd62
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
lea esi, [eax + 4]
cmp edi, esi
je 0x4bdeb1
cmp dword [esi + 0x14], 7
mov ecx, esi
mov dword [ebp - 0x14], esi
jbe 0x4bdd9f
mov ecx, dword [esi]
mov dword [ebp - 0x14], ecx
mov edx, dword [edi + 0x14]
mov esi, dword [esi + 0x10]
mov dword [ebp - 0x1c], edx
cmp esi, edx
ja 0x4bdde7
mov dword [ebp + 8], edi
mov eax, edi
cmp edx, 7
jbe 0x4bddbb
mov eax, dword [edi]
mov dword [ebp + 8], eax
mov dword [edi + 0x10], esi
add esi, esi
push esi
push ecx
push eax
call fcn.006217b0
mov eax, dword [ebp + 8]
add esp, 0xc
xor ecx, ecx
mov word [esi + eax], cx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
cmp esi, 0x7ffffffe
ja 0x4be5ba
mov ecx, esi
or ecx, 7
cmp ecx, 0x7ffffffe
jbe 0x4bde07
mov ecx, SysReAllocString
jmp 0x4bde2b
mov eax, edx
shr eax, 1
mov dword [ebp - 0x10], eax
mov eax, SysReAllocString
sub eax, dword [ebp - 0x10]
cmp edx, eax
jbe 0x4bde21
mov ecx, SysReAllocString
jmp 0x4bde2b
mov eax, dword [ebp - 0x10]
add eax, edx
cmp ecx, eax
cmovb ecx, eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], ecx
push eax
push edi
call fcn.00423d90
mov dword [edi + 0x10], esi
mov ecx, eax
mov eax, dword [ebp - 0x10]
add esi, esi
push esi
push dword [ebp - 0x14]
mov dword [ebp + 8], ecx
push ecx
mov dword [edi + 0x14], eax
call fcn.006217b0
mov ecx, dword [ebp + 8]
xor eax, eax
add esp, 0x14
mov word [ecx + esi], ax
mov eax, dword [ebp - 0x1c]
cmp eax, 7
jbe 0x4bdeaf
lea ecx, [eax*2 + 2]
mov eax, dword [edi]
cmp ecx, 0x1000
jb 0x4bde8d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4be5bf
mov eax, edx
push ecx
push eax
call fcn.0061f90d
mov eax, dword [ebp + 8]
add esp, 8
mov dword [edi], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov dword [edi], ecx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 0x6eb760
call fcn.0061f507
add esp, 4
cmp dword [0x6eb760], 0xffffffff
jne 0x4bdd25
push str.Continue
mov ecx, 0x6d40c4
call fcn.00423c90
mov eax, 0x65
mov dword [ebp - 4], 1
push str.Switching_Protocols
mov ecx, 0x6d40e0
mov word [0x6d40dc], ax
call fcn.00423c90
mov eax, 0xc8
mov byte [ebp - 4], 2
push 0x6713e8
mov ecx, 0x6d40fc
mov word [0x6d40f8], ax
call fcn.00423c90
mov eax, 0xc9
mov byte [ebp - 4], 3
push str.Created
mov ecx, 0x6d4118
mov word [0x6d4114], ax
call fcn.00423c90
mov eax, 0xca
mov byte [ebp - 4], 4
push str.Accepted
mov ecx, 0x6d4134
mov word [0x6d4130], ax
call fcn.00423c90
mov eax, 0xcb
mov byte [ebp - 4], 5
push str.Non_Authoritative_Information
mov ecx, 0x6d4150
mov word [0x6d414c], ax
call fcn.00423c90
mov eax, 0xcc
mov byte [ebp - 4], 6
push str.No_Content
mov ecx, 0x6d416c
mov word [0x6d4168], ax
call fcn.00423c90
mov eax, 0xcd
mov byte [ebp - 4], 7
push str.Reset_Content
mov ecx, 0x6d4188
mov word [0x6d4184], ax
call fcn.00423c90
mov eax, 0xce
mov byte [ebp - 4], 8
push str.Partial_Content
mov ecx, 0x6d41a4
mov word [0x6d41a0], ax
call fcn.00423c90
mov eax, 0xcf
mov byte [ebp - 4], 9
push str.Multi_Status
mov ecx, 0x6d41c0
mov word [0x6d41bc], ax
call fcn.00423c90
mov eax, 0xd0
mov byte [ebp - 4], 0xa
push str.Already_Reported
mov ecx, 0x6d41dc
mov word [0x6d41d8], ax
call fcn.00423c90
mov eax, 0xe2
mov byte [ebp - 4], 0xb
push str.IM_Used
mov ecx, 0x6d41f8
mov word [0x6d41f4], ax
call fcn.00423c90
mov eax, 0x12c
mov byte [ebp - 4], 0xc
push str.Multiple_Choices
mov ecx, 0x6d4214
mov word [0x6d4210], ax
call fcn.00423c90
mov eax, 0x12d
mov byte [ebp - 4], 0xd
push str.Moved_Permanently
mov ecx, 0x6d4230
mov word [0x6d422c], ax
call fcn.00423c90
mov eax, 0x12e
mov byte [ebp - 4], 0xe
push 0x67153c
mov ecx, 0x6d424c
mov word [0x6d4248], ax
call fcn.00423c90
mov eax, 0x12f
mov byte [ebp - 4], 0xf
push str.See_Other
mov ecx, 0x6d4268
mov word [0x6d4264], ax
call fcn.00423c90
mov eax, 0x130
mov byte [ebp - 4], 0x10
push str.Not_Modified
mov ecx, 0x6d4284
mov word [0x6d4280], ax
call fcn.00423c90
mov eax, 0x131
mov byte [ebp - 4], 0x11
push str.Use_Proxy
mov ecx, 0x6d42a0
mov word [0x6d429c], ax
call fcn.00423c90
mov eax, 0x133
mov byte [ebp - 4], 0x12
push str.Temporary_Redirect
mov ecx, 0x6d42bc
mov word [0x6d42b8], ax
call fcn.00423c90
mov eax, 0x134
mov byte [ebp - 4], 0x13
push str.Permanent_Redirect
mov ecx, 0x6d42d8
mov word [0x6d42d4], ax
call fcn.00423c90
mov eax, 0x190
mov byte [ebp - 4], 0x14
push str.Bad_Request
mov ecx, 0x6d42f4
mov word [0x6d42f0], ax
call fcn.00423c90
mov eax, 0x191
mov byte [ebp - 4], 0x15
push str.Unauthorized
mov ecx, 0x6d4310
mov word [0x6d430c], ax
call fcn.00423c90
mov eax, 0x192
mov byte [ebp - 4], 0x16
push str.Payment_Required
mov ecx, 0x6d432c
mov word [0x6d4328], ax
call fcn.00423c90
mov eax, 0x193
mov byte [ebp - 4], 0x17
mov word [0x6d4344], ax
push str.Forbidden
mov ecx, 0x6d4348
call fcn.00423c90
mov eax, 0x194
mov byte [ebp - 4], 0x18
push str.Not_Found
mov ecx, 0x6d4364
mov word [0x6d4360], ax
call fcn.00423c90
mov eax, 0x195
mov byte [ebp - 4], 0x19
push str.Method_Not_Allowed
mov ecx, 0x6d4380
mov word [0x6d437c], ax
call fcn.00423c90
mov eax, 0x196
mov byte [ebp - 4], 0x1a
push str.Not_Acceptable
mov ecx, 0x6d439c
mov word [0x6d4398], ax
call fcn.00423c90
mov eax, 0x197
mov byte [ebp - 4], 0x1b
push str.Proxy_Authentication_Required
mov ecx, 0x6d43b8
mov word [0x6d43b4], ax
call fcn.00423c90
mov eax, 0x198
mov byte [ebp - 4], 0x1c
push str.Request_Time_out
mov ecx, 0x6d43d4
mov word [0x6d43d0], ax
call fcn.00423c90
mov eax, 0x199
mov byte [ebp - 4], 0x1d
push str.Conflict
mov ecx, 0x6d43f0
mov word [0x6d43ec], ax
call fcn.00423c90
mov eax, 0x19a
mov byte [ebp - 4], 0x1e
push str.Gone
mov ecx, 0x6d440c
mov word [0x6d4408], ax
call fcn.00423c90
mov eax, 0x19b
mov byte [ebp - 4], 0x1f
push str.Length_Required
mov ecx, 0x6d4428
mov word [0x6d4424], ax
call fcn.00423c90
mov eax, 0x19c
mov byte [ebp - 4], 0x20
push str.Precondition_Failed
mov ecx, 0x6d4444
mov word [0x6d4440], ax
call fcn.00423c90
mov eax, 0x19d
mov byte [ebp - 4], 0x21
push str.Request_Entity_Too_Large
mov ecx, 0x6d4460
mov word [0x6d445c], ax
call fcn.00423c90
mov eax, 0x19e
mov byte [ebp - 4], 0x22
push str.Request_Uri_Too_Large
mov ecx, 0x6d447c
mov word [0x6d4478], ax
call fcn.00423c90
mov byte [ebp - 4], 0x23
mov eax, 0x19f
mov ecx, 0x6d4498
push str.Unsupported_Media_Type
mov word [0x6d4494], ax
call fcn.00423c90
mov eax, 0x1a0
mov byte [ebp - 4], 0x24
push str.Requested_range_not_satisfiable
mov ecx, 0x6d44b4
mov word [0x6d44b0], ax
call fcn.00423c90
mov eax, 0x1a1
mov byte [ebp - 4], 0x25
push str.Expectation_Failed
mov ecx, 0x6d44d0
mov word [0x6d44cc], ax
call fcn.00423c90
mov eax, 0x1a5
mov byte [ebp - 4], 0x26
push str.Misdirected_Request
mov ecx, 0x6d44ec
mov word [0x6d44e8], ax
call fcn.00423c90
mov eax, 0x1a6
mov byte [ebp - 4], 0x27
push str.Unprocessable_Entity
mov ecx, 0x6d4508
mov word [0x6d4504], ax
call fcn.00423c90
mov eax, 0x1a7
mov byte [ebp - 4], 0x28
push str.Locked
mov ecx, 0x6d4524
mov word [0x6d4520], ax
call fcn.00423c90
mov eax, 0x1a8
mov byte [ebp - 4], 0x29
push str.Failed_Dependency
mov ecx, 0x6d4540
mov word [0x6d453c], ax
call fcn.00423c90
mov eax, 0x1aa
mov byte [ebp - 4], 0x2a
push str.Upgrade_Required
mov ecx, 0x6d455c
mov word [0x6d4558], ax
call fcn.00423c90
mov eax, 0x1ac
mov byte [ebp - 4], 0x2b
push str.Precondition_Required
mov ecx, 0x6d4578
mov word [0x6d4574], ax
call fcn.00423c90
mov eax, 0x1ad
mov byte [ebp - 4], 0x2c
push str.Too_Many_Requests
mov ecx, 0x6d4594
mov word [0x6d4590], ax
call fcn.00423c90
mov eax, 0x1af
mov byte [ebp - 4], 0x2d
push str.Request_Header_Fields_Too_Large
mov ecx, 0x6d45b0
mov word [0x6d45ac], ax
call fcn.00423c90
mov eax, 0x1c3
mov byte [ebp - 4], 0x2e
mov word [0x6d45c8], ax
mov ecx, 0x6d45cc
push str.Unavailable_For_Legal_Reasons
call fcn.00423c90
mov eax, 0x1f4
mov byte [ebp - 4], 0x2f
push str.Internal_Error
mov ecx, 0x6d45e8
mov word [0x6d45e4], ax
call fcn.00423c90
mov eax, 0x1f5
mov byte [ebp - 4], 0x30
push str.Not_Implemented
mov ecx, 0x6d4604
mov word [0x6d4600], ax
call fcn.00423c90
mov eax, 0x1f6
mov byte [ebp - 4], 0x31
push str.Bad_Gateway
mov ecx, 0x6d4620
mov word [0x6d461c], ax
call fcn.00423c90
mov eax, 0x1f7
mov byte [ebp - 4], 0x32
push str.Service_Unavailable
mov ecx, 0x6d463c
mov word [0x6d4638], ax
call fcn.00423c90
mov eax, 0x1f8
mov byte [ebp - 4], 0x33
push str.Gateway_Time_out
mov ecx, 0x6d4658
mov word [0x6d4654], ax
call fcn.00423c90
mov eax, 0x1f9
mov byte [ebp - 4], 0x34
push str.HTTP_Version_not_supported
mov ecx, 0x6d4674
mov word [0x6d4670], ax
call fcn.00423c90
mov eax, 0x1fa
mov byte [ebp - 4], 0x35
push str.Variant_Also_Negotiates
mov ecx, 0x6d4690
mov word [0x6d468c], ax
call fcn.00423c90
mov eax, 0x1fb
mov byte [ebp - 4], 0x36
push str.Insufficient_Storage
mov ecx, 0x6d46ac
mov word [0x6d46a8], ax
call fcn.00423c90
mov eax, 0x1fc
mov byte [ebp - 4], 0x37
push str.Loop_Detected
mov ecx, 0x6d46c8
mov word [0x6d46c4], ax
call fcn.00423c90
mov eax, 0x1fe
mov byte [ebp - 4], 0x38
push str.Not_Extended
mov ecx, 0x6d46e4
mov word [0x6d46e0], ax
call fcn.00423c90
mov eax, 0x1ff
mov byte [ebp - 4], 0x39
push str.Network_Authentication_Required
mov ecx, 0x6d4700
mov word [0x6d46fc], ax
call fcn.00423c90
push 0x66cd60
call fcn.0061f8f8
push 0x6eb760
call fcn.0061f4b6
add esp, 8
jmp 0x4bdd25
call fcn.00402f70
call fcn.00636c1b
int3