Function at 0x422c02
Capabilities:
Create process on windows
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff474
push ecx
push edi
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a537
push 0xc
lea eax, [ebp - 0xb68]
push eax
call sub.KERNEL32.dll_RtlZeroMemory
push dword [ebp + 8]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a608
cmp dword [ebp + 0xc], 0
je 0x422cac
cmp dword [ebp + 0x10], 0
je 0x422c52
cmp dword [ebp + 0x10], 3
jne 0x422cac
mov dword [ebp - 0xb60], 0x400
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a537
mov edi, dword [ebp - 0xb5c]
mov ecx, dword [ebp - 0xb58]
mov al, 0x3f
repne scasb al, byte es:[edi]
jne 0x422c9d
dec edi
mov byte [edi], 0
inc edi
push edi
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a608
push 0x43b5c2
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a608
push dword [ebp + 0xc]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a608
push 0xa5
lea eax, [ebp - 0xa5]
push eax
call sub.KERNEL32.dll_RtlZeroMemory
cmp dword [ebp + 0x14], 0
je 0x422ce1
cmp dword [ebp + 0x10], 2
je 0x422ccf
cmp dword [ebp + 0x10], 1
jne 0x422ce1
mov edi, dword [ebp + 0x14]
push 0x14
lea eax, [ebp - 0x2c]
push eax
lea eax, [edi + 0x79]
push eax
call fcn.0042b270
cmp dword [ebp + 0x10], 0
je 0x422ced
cmp dword [ebp + 0x10], 3
jne 0x422cf6
mov dword [ebp - 0x18], 2
jmp 0x422d21
cmp dword [ebp + 0x10], 2
jne 0x422d0b
mov dword [ebp - 0x18], 2
push dword [edi + 0x6d]
pop dword [ebp - 0x38]
jmp 0x422d21
cmp dword [ebp + 0x10], 1
jne 0x422d21
mov dword [ebp - 0x18], 3
push dword [edi + 0x91]
pop dword [ebp - 0x14]
mov dword [ebp - 0xa1], 0x50
push dword [ebp - 0xb5c]
pop dword [ebp - 0x40]
lea eax, [ebp - 0x334]
mov dword [ebp - 0xa5], eax
mov dword [ebp - 0x8d], 0x500
lea eax, [ebp - 0x534]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x734]
mov dword [ebp - 0x4c], eax
cmp dword [ebp + 0x10], 0
je 0x422d68
cmp dword [ebp + 0x10], 3
jne 0x422db6
push dword [0x44b854]
push 0xb
call fcn.0040a161
push 0
push 0x43cefc
push eax
call fcn.00423470
cmp eax, 0xffffffff
jne 0x422db3
push dword [0x44b854]
push 0xe
call fcn.0040a161
push 0
push 0
push eax
push dword [0x43b160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x423114
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xa5]
push eax
call fcn.004242fc
lea eax, [ebp - 0x234]
push eax
push 0x101
call sub.WSOCK32.dll_WSAStartup
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a573
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a537
cmp dword [ebp + 0x10], 0
jne 0x422e14
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb8c], str.Content_type:_application_x_www_form_urlencoded_r_n
jmp 0x422ec3
cmp dword [ebp + 0x10], 3
jne 0x422ea3
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb78], 0x400
lea eax, [ebp - 0xb80]
push eax
call fcn.0040a537
push 0x20
push dword [ebp - 0xb80]
call fcn.00424d0c
mov dword [ebp - 0xb6c], 0x400
lea eax, [ebp - 0xb74]
push eax
call fcn.0040a537
push dword [ebp - 0xb80]
push str.Content_Type:_multipart_form_data__boundary_s_r_n
push dword [ebp - 0xb74]
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebp - 0xb74]
pop dword [ebp - 0xb8c]
push dword [ebp - 0xb80]
push dword [ebp + 0x14]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb68]
push eax
call fcn.00423ce9
jmp 0x422ec3
cmp dword [ebp + 0x10], 1
je 0x422eaf
cmp dword [ebp + 0x10], 2
jne 0x422ec3
mov dword [ebp - 0xb88], 0x43bdab
mov dword [ebp - 0xb8c], 0x43b5bb
push dword [ebp - 0xb64]
push dword [ebp - 0xb8c]
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0xb88]
push str._s__s_HTTP_1.0_r_nHost:__s_r_nUser_Agent:_DWB_r_nConnection:_Close_r_n_sContent_length:__lu_r_n_r_n
lea eax, [ebp - 0xb34]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x1c
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a608
cmp dword [ebp + 0x10], 0
jne 0x422f24
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a608
jmp 0x422f63
cmp dword [ebp + 0x10], 3
jne 0x422f63
push dword [ebp - 0xb64]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a598
push dword [ebp - 0xb58]
pop dword [ebp - 0x50]
lea eax, [ebp - 0xb74]
push eax
call fcn.0040a573
lea eax, [ebp - 0xb80]
push eax
call fcn.0040a573
push dword [ebp - 0xb5c]
pop dword [ebp - 0x54]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a573
cmp dword [ebp - 0x2c], 0
jne 0x422f87
push dword [0x43b160]
pop dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 1
jne 0x422fe7
lea eax, [ebp - 0xa5]
push eax
push 0x4235ad
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x43b15c]
call sub.USER32.dll_CreateDialogParamA
mov dword [ebp - 0xb84], eax
push 0
push 0
push 0
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_GetMessageA
test eax, eax
je 0x422fe2
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_TranslateMessage
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_DispatchMessageA
jmp 0x422fb2
jmp 0x42310f
lea eax, [ebp - 0xa5]
push eax
push 0x4235ad
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x43b15c]
call sub.USER32.dll_DialogBoxParamA
mov dword [ebp - 4], eax
or eax, eax
jne 0x42304b
cmp dword [ebp + 0x10], 0
je 0x42301f
cmp dword [ebp + 0x10], 3
je 0x42301f
cmp dword [ebp + 0x10], 2
jne 0x42303c
push dword [0x44b854]
push 0x10
call fcn.0040a161
push 0
push 0
push eax
push dword [0x43b160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x42310f
cmp eax, 4
je 0x423055
cmp eax, 5
jne 0x4230b1
cmp dword [ebp + 0x10], 0
je 0x423067
cmp dword [ebp + 0x10], 3
je 0x423067
cmp dword [ebp + 0x10], 2
jne 0x4230a5
mov byte [ebp - 0xb34], 0
push str.HTTP_error
lea eax, [ebp - 0xb34]
push eax
call sub.KERNEL32.dll_lstrcatA
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb34]
push eax
call sub.KERNEL32.dll_lstrcatA
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push dword [0x43b160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x42310f
cmp dword [ebp + 0x10], 0
je 0x4230bd
cmp dword [ebp + 0x10], 3
jne 0x423105
push dword [0x44b854]
push 0xb
call fcn.0040a161
mov dword [ebp - 0xb88], eax
lea eax, [ebp - 0xb34]
push eax
push dword [0x43cefc]
push dword [ebp - 0xb88]
call fcn.00423502
push 1
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push 0x41387e
push dword [0x43b160]
call sub.SHELL32.dll_ShellExecuteA
mov dword [ebp - 0xb84], 0
call sub.WSOCK32.dll_WSACleanup
cmp dword [ebp + 0x14], 0
je 0x42313a
cmp dword [ebp + 0x10], 2
je 0x423126
cmp dword [ebp + 0x10], 1
jne 0x42313a
push 0xa5
push dword [ebp + 0x14]
lea eax, [ebp - 0xa5]
push eax
call fcn.0042b270
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a573
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a573
mov eax, dword [ebp - 0xb84]
pop edi
pop ecx
leave
ret 0x10