Function at 0x41a557
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov eax, str.Connection:_keep_alive__r_nAuthorization:_Basic__r_nAccept:_text_html_application_xhtmlxml_application_xml_q0.9___q0.8_r_nUser_Agent:_Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.31__KHTML__like_Gecko__Chrome_26.0.1410.64_Safari_537.31_r_nReferer:_http:__192.168.1.1_userRpm_SysRebootRpm.htm_r_nAccept_Encoding:_gzip_deflate_sdch_r_nAccept_Language:_zh_CN_zh_q0.8_r_nAccept_Charset:_GBK_utf_8_q0.7__q0.3
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a5a7
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 0x533ddd
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.00401e9c
add esp, 8
cmp eax, 0
jne 0x41a5e4
mov eax, str.admin
push eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a5de
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
push 0x533ddd
mov ebx, dword [ebp + 0x18]
push dword [ebx]
call fcn.00401e9c
add esp, 8
cmp eax, 0
jne 0x41a61d
mov eax, str.admin
push eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a617
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov ebx, dword [ebp + 0x18]
mov dword [ebx], eax
push 0x533ddd
mov ebx, dword [ebp + 8]
push dword [ebx]
call fcn.00401e9c
add esp, 8
cmp eax, 0
jne 0x41a656
mov eax, str.192.168.1.1
push eax
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41a650
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x18]
push dword [ebx]
push 0x533f36
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 3
call fcn.00401ccd
add esp, 0xc
mov dword [ebp - 0x20], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x41a688
mov eax, 0x533ddd
push eax
push 1
mov ebx, 0x472dc0
call fcn.00471593
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a6ae
push ebx
call fcn.0047159f
add esp, 4
lea eax, [ebp - 0x24]
push eax
call fcn.0041ad03
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a6ca
push ebx
call fcn.0047159f
add esp, 4
push dword [ebp - 0x28]
push str.Authorization:_Basic
mov ecx, 2
call fcn.00401ccd
add esp, 8
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a6f2
push ebx
call fcn.0047159f
add esp, 4
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 1
mov ebx, 6
call fcn.00401004
push VariantClear
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x41a71b
mov eax, 0x533ddd
push eax
push VariantClear
push 0
push str.Authorization:_Basic
push VariantClear
push 0
mov eax, dword [ebp - 4]
test eax, eax
jne 0x41a73b
mov eax, 0x533ddd
push eax
push 6
mov ebx, 0x472a40
call fcn.00471593
add esp, 0x4c
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a761
push ebx
call fcn.0047159f
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41a775
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 4], eax
push str._userRpm_SysRebootRpm.htm_Reboot_D6_D8_C6_F4_C2_B7_D3_C9_C6_F7
mov ebx, dword [ebp + 8]
push dword [ebx]
push str.http:__
mov ecx, 3
call fcn.00401ccd
add esp, 0xc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
push 1
lea eax, [ebp - 4]
push eax
mov dword [ebp - 0x2c], 0
push 0
lea eax, [ebp - 0x2c]
push eax
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041b763
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41a7ee
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a7fe
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a80e
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a81e
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41a82e
push ebx
call fcn.0047159f
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41a842
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], 0
push 0
push dword [ebp - 0x20]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, str.__h1_
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, str._h1_
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00403398
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41a892
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41a8a2
push ebx
call fcn.0047159f
add esp, 4
push 0x53acf3
push dword [ebp - 0x30]
call fcn.00401e9c
add esp, 8
cmp eax, 0
mov eax, 0
sete al
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41a8d0
push ebx
call fcn.0047159f
add esp, 4
cmp dword [ebp - 0x34], 0
je 0x41a8f9
mov eax, 0x53ad16
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a8f0
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x41ac8a
push 0x533ddd
push dword [ebp - 8]
call fcn.00401e9c
add esp, 8
cmp eax, 0
jne 0x41a931
mov eax, 0x53ad27
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41a928
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
jmp 0x41ac8a
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x24], 0
push 0
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x28], 0
push 0
lea eax, [ebp - 0x28]
push eax
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x38], 0
push 0
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x3c], 0
push 0
lea eax, [ebp - 0x3c]
push eax
mov dword [ebp - 0x40], 0
push 0
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x44], 0
push 0
push dword [ebp - 0x44]
mov eax, str.http:__ip.qq.com
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push eax
call fcn.0041d10f
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41a9d5
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41a9e5
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41a9f5
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41aa05
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41aa15
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41aa25
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41aa35
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x41aa45
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41aa55
push ebx
call fcn.0047159f
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x41aa68
mov eax, 0x533dde
push eax
push 1
mov ebx, 0x473680
call fcn.00471593
add esp, 0x10
mov dword [ebp - 0x50], eax
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41aa8e
push ebx
call fcn.0047159f
add esp, 4
mov eax, dword [ebp - 0x50]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41aaa2
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push VariantClear
push 0
push 0x53ad47
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x41aad7
mov eax, 0x533ddd
push eax
push 4
mov ebx, 0x472260
call fcn.00471593
add esp, 0x34
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jne 0x41ab16
mov eax, 0x533ddd
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41ab0d
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
jmp 0x41ab57
push VariantClear
push 0
push 0x53ad47
push 1
mov ebx, 0x471aa0
call fcn.00471593
add esp, 0x10
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x14]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.00401101
mov dword [ebp - 0x14], eax
push reloc.OLEAUT32.dll_SysReAllocString
push 0
push 0
push 0x80000301
push 0
push dword [ebp - 0x14]
push VariantClear
push 0
push str.__span_
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x41ab8c
mov eax, 0x533ddd
push eax
push 4
mov ebx, 0x472260
call fcn.00471593
add esp, 0x34
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jne 0x41abcb
mov eax, 0x533ddd
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41abc2
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
jmp 0x41abeb
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 0x14]
fstp qword [ebp - 0x2c]
fsub qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
call fcn.00401101
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 0x80000301
push 0
push dword [ebp - 0x14]
push VariantClear
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x41ac12
mov eax, 0x533ddd
push eax
push 3
mov ebx, 0x472000
call fcn.00471593
add esp, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41ac3c
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x533ddd
push dword [ebp - 0x18]
call fcn.00401e9c
add esp, 8
cmp eax, 0
je 0x41a931
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x41ac75
push eax
mov ebx, eax
call fcn.004015ca
inc eax
push eax
call fcn.00471599
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41ac86
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x41aca6
push eax
mov ebx, eax
call fcn.004015ca
inc eax
push eax
call fcn.00471599
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
jmp 0x41acab
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41acbc
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x41accc
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41acdc
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x41acec
push ebx
call fcn.0047159f
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41acfc
push ebx
call fcn.0047159f
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x18