Function at 0x40c6e0
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42254f
mov eax, dword fs:[0]
push eax
sub esp, 0x9a8
mov eax, dword [0x42e2a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push str.HTTP_POST_Over_LSP_infomation_and_NBMediaInfo_Adv.ini_n
mov dword [ebp - 0x9b4], edi
call fcn.00414284
push 0x98
lea eax, [ebp - 0x9ac]
push 0
push eax
call fcn.0041d2d0
add esp, 0x10
lea ecx, [ebp - 0x9b0]
push ecx
mov dword [ebp - 0x9b0], 0x9c
call dword [0x423060]
mov eax, dword [ebp + 8]
xor ebx, ebx
test eax, eax
jle 0x40c7a3
lea esi, [edi + 0x24]
mov edi, eax
jmp 0x40c760
mov eax, dword [esi]
lea edx, [esi + 0x50]
push edx
push eax
push str._04d____S_n
push 0x3ff
lea ecx, [ebp - 0x430]
push 0x400
push ecx
call fcn.004137fe
add esp, 0x18
lea edx, [ebp - 0x430]
push edx
call dword [0x42303c]
add ebx, eax
add esi, 0x274
dec edi
jne 0x40c760
mov edi, dword [ebp - 0x9b4]
push 0x400
lea eax, [ebp - 0x830]
push 0
push eax
call fcn.0041d2d0
push ebx
push str.LSP_Length__d
push 0x3ff
lea ecx, [ebp - 0x830]
push 0x400
push ecx
call fcn.004137fe
lea eax, [ebp - 0x830]
add esp, 0x20
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40c7e0
sub eax, edx
lea ebx, [ebp - 0x430]
mov esi, eax
call fcn.00409bd0
mov edx, ebx
push edx
push str.LSP_Version__s
mov eax, 0x3ff
sub eax, esi
push eax
mov ecx, 0x400
sub ecx, esi
push ecx
lea edx, [ebp + esi - 0x830]
push edx
call fcn.004137fe
lea eax, [ebp - 0x830]
add esp, 0x14
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x40c827
mov edx, dword [ebp - 0x9ac]
sub eax, ecx
mov ecx, dword [ebp - 0x9a8]
mov esi, eax
mov eax, dword [ebp - 0x9a4]
push eax
push ecx
push edx
push str.Mozilla_5.0__Windows_d._d._d_
push 0x3ff
lea eax, [ebp - 0x430]
push 0x400
push eax
call fcn.004137fe
add esp, 0x1c
push 0x50
push str.xdp.51kus.com
lea ecx, [ebp - 0x914]
push ecx
call fcn.00405d50
xor eax, eax
mov dword [ebp - 4], eax
push str._xdpcfg_xdp.php
mov ecx, str.POST
lea ebx, [ebp - 0x914]
mov dword [ebp - 0x890], 0x40a250
mov dword [ebp - 0x88c], 0x40a2b0
mov dword [ebp - 0x888], 0x40a360
mov dword [ebp - 0x884], eax
call fcn.00406260
mov edx, ebx
push edx
lea edx, [ebp - 0x430]
mov ecx, str.User_Agent
call fcn.00406400
mov eax, 0xc30ef0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40c8d1
sub eax, edx
je 0x40c8f2
lea eax, [ebp - 0x914]
push eax
mov edx, 0xc30ef0
mov ecx, str.IP_MAC
call fcn.00406400
mov eax, 0xc30f70
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40c900
sub eax, edx
je 0x40c921
lea ecx, [ebp - 0x914]
push ecx
mov edx, 0xc30f70
mov ecx, str.Cookie
call fcn.00406400
push esi
lea edx, [ebp - 0x30]
push 0x429780
push edx
call fcn.0041377a
add esp, 0xc
lea eax, [ebp - 0x914]
push eax
lea edx, [ebp - 0x30]
mov ecx, str.Content_Length
call fcn.00406400
lea ebx, [ebp - 0x914]
call fcn.00406570
test ax, ax
jne 0x40c9c8
mov ecx, ebx
push ecx
call fcn.00405fb0
mov dword [0xc314ac], 0xfffff82f
mov edx, ebx
push edx
mov dword [ebp - 4], 3
call fcn.00405fb0
lea esi, [ebp - 0x848]
call fcn.00407e20
mov eax, dword [ebp - 0x848]
push eax
call fcn.0041440a
add esp, 4
lea ebx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
call fcn.00407c10
cmp dword [ebp - 0x868], 0x10
jb 0x40cc76
mov ecx, dword [ebp - 0x87c]
push ecx
call fcn.0041440a
add esp, 4
jmp 0x40cc76
mov eax, esi
lea ecx, [ebp - 0x830]
lea edx, [ebp - 0x914]
call fcn.004066c0
test ax, ax
jne 0x40ca59
lea edx, [ebp - 0x914]
push edx
call fcn.00405fb0
mov dword [0xc314ac], 0xfffff82e
lea eax, [ebp - 0x914]
push eax
mov dword [ebp - 4], 6
call fcn.00405fb0
lea esi, [ebp - 0x848]
call fcn.00407e20
mov ecx, dword [ebp - 0x848]
push ecx
call fcn.0041440a
add esp, 4
lea ebx, [ebp - 0x858]
mov dword [ebp - 0x848], 0
call fcn.00407c10
cmp dword [ebp - 0x868], 0x10
jb 0x40cc76
mov edx, dword [ebp - 0x87c]
push edx
call fcn.0041440a
add esp, 4
jmp 0x40cc76
cmp dword [ebp - 0x838], 0
je 0x40ca76
lea ecx, [ebp - 0x914]
call fcn.00406750
cmp dword [ebp - 0x838], 0
jne 0x40ca62
lea eax, [ebp - 0x914]
push eax
call fcn.00405fb0
cmp dword [ebp - 0x914], 1
jne 0x40cc59
cmp dword [0xc314b0], 2
jle 0x40cc59
cmp byte [0x4302d1], 0x7c
jne 0x40cc59
mov bl, byte [0x4302d0]
push 0x42a0c0
push 0x4302d2
call fcn.00414a00
add esp, 8
xor esi, esi
test eax, eax
jne 0x40cb4e
mov eax, 0x4302d0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40cad3
sub eax, edx
add eax, 0xfffffffe
cmp eax, 0x10
jae 0x40cb06
push eax
push 0x4302d2
push 0xc31474
call fcn.0041ae40
add esp, 0xc
push 0xc31474
push str.g_sessionid_xx_s_n
jmp 0x40cbb7
mov ecx, dword [0x4302d2]
mov edx, dword [0x4302d6]
mov eax, dword [0x4302da]
mov dword [0xc31474], ecx
mov cx, word [0x4302de]
mov dword [0xc31478], edx
mov dl, byte [0x4302e0]
push 0xc31474
mov dword [0xc3147c], eax
mov word [0xc31480], cx
mov byte [0xc31482], dl
push str.g_sessionid_xx_s_n
jmp 0x40cbb7
lea esi, [eax + 1]
sub eax, 0x4302d0
add eax, 0xfffffffe
cmp eax, 0x10
jae 0x40cb73
push eax
push 0x4302d2
push 0xc31474
call fcn.0041ae40
add esp, 0xc
jmp 0x40cbad
mov eax, dword [0x4302d2]
mov ecx, dword [0x4302d6]
mov edx, dword [0x4302da]
mov dword [0xc31474], eax
mov ax, word [0x4302de]
mov dword [0xc31478], ecx
mov cl, byte [0x4302e0]
mov dword [0xc3147c], edx
mov word [0xc31480], ax
mov byte [0xc31482], cl
push 0xc31474
push str.g_sessionid_yy_s_n
call fcn.00414284
movsx eax, bl
add eax, 0xffffffcf
add esp, 8
cmp eax, 3
ja case.default.0x40cbce
jmp dword [eax*4 + 0x40cc94]
lea edx, [ebp - 0x914]
push edx
mov dword [ebp - 4], 0xffffffff
call fcn.004061c0
mov al, 1
jmp 0x40cc78
mov ecx, dword [ebp + 8]
mov edx, edi
call fcn.0040c320
mov bl, al
lea eax, [ebp - 0x914]
push eax
mov dword [ebp - 4], 0xffffffff
call fcn.004061c0
mov al, bl
jmp 0x40cc78
mov ecx, esi
call fcn.0040bc40
lea ecx, [ebp - 0x914]
push ecx
mov bl, al
mov dword [ebp - 4], 0xffffffff
call fcn.004061c0
mov al, bl
jmp 0x40cc78
call fcn.0040bf70
lea edx, [ebp - 0x914]
push edx
mov bl, al
mov dword [ebp - 4], 0xffffffff
call fcn.004061c0
mov al, bl
jmp 0x40cc78
lea eax, [ebp - 0x914]
push eax
jmp 0x40cc6a
lea ecx, [ebp - 0x914]
mov dword [0xc314ac], 0xfffff82d
push ecx
mov dword [ebp - 4], 0xffffffff
call fcn.004061c0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041369d
mov esp, ebp
pop ebp
ret