Function at 0x40dbaf
Capabilities:
Create process on windows
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff4dc
push ecx
push edi
mov dword [ebp - 0xb08], 0x400
lea eax, [ebp - 0xb10]
push eax
call fcn.0040532c
mov dword [ebp - 0xb14], 0x400
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040532c
push dword [ebp + 8]
lea eax, [ebp - 0xb10]
push eax
call fcn.0040538e
mov edi, dword [ebp - 0xb10]
mov ecx, dword [ebp - 0xb0c]
mov al, 0x3f
repne scasb al, byte es:[edi]
jne 0x40dc2a
dec edi
mov byte [edi], 0
inc edi
push edi
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040538e
push 0x419156
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040538e
push dword [ebp + 0xc]
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040538e
push 0x75
lea eax, [ebp - 0x75]
push eax
call sub.KERNEL32.dll_RtlZeroMemory
mov dword [ebp - 4], 2
mov dword [ebp - 0x71], 0x50
push dword [ebp - 0xb10]
pop dword [ebp - 0x18]
lea eax, [ebp - 0x304]
mov dword [ebp - 0x75], eax
mov dword [ebp - 0x5d], 0x500
lea eax, [ebp - 0x504]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x704]
mov dword [ebp - 0x24], eax
push dword [0x41acd0]
push 0xb
call fcn.00404f76
push 0x419d64
push eax
call fcn.0040e19d
cmp eax, 0xffffffff
jne 0x40dcc6
push dword [0x41acd0]
push 0xe
call fcn.00404f76
push 0
push 0
push eax
push dword [0x419004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40de67
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x75]
push eax
call fcn.0040ead2
lea eax, [ebp - 0x204]
push eax
push 0x101
call sub.WSOCK32.dll_WSAStartup
lea eax, [ebp - 0xb10]
push eax
call fcn.00405368
mov dword [ebp - 0xb08], 0x400
lea eax, [ebp - 0xb10]
push eax
call fcn.0040532c
push dword [ebp - 0xb18]
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x504]
push eax
push str.POST
push str._s__s_HTTP_1.0_r_nHost:__s_r_nUser_Agent:_DWB_r_nConnection:_Close_r_nContent_type:_application_x_www_form_urlencoded_r_nContent_length:__lu_r_n_r_n
lea eax, [ebp - 0xb04]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x18
lea eax, [ebp - 0xb04]
push eax
lea eax, [ebp - 0xb10]
push eax
call fcn.0040538e
push dword [ebp - 0xb1c]
lea eax, [ebp - 0xb10]
push eax
call fcn.0040538e
push dword [ebp - 0xb10]
pop dword [ebp - 0x28]
lea eax, [ebp - 0xb1c]
push eax
call fcn.00405368
lea eax, [ebp - 0x75]
mov dword [0x41c24b], eax
push 0
push 0x40e2cd
push dword [0x419004]
push str.PostPrgsDlg
push dword [section..data]
call sub.USER32.dll_DialogBoxParamA
or eax, eax
jne 0x40ddc1
push dword [0x41acd0]
push 0x10
call fcn.00404f76
push 0
push 0
push eax
push dword [0x419004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40de62
cmp eax, 4
jne 0x40de10
mov byte [ebp - 0xb04], 0
push str.HTTP_error
lea eax, [ebp - 0xb04]
push eax
call sub.KERNEL32.dll_lstrcatA
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xb04]
push eax
call sub.KERNEL32.dll_lstrcatA
push 0
push 0
lea eax, [ebp - 0xb04]
push eax
push dword [0x419004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40de62
push dword [0x41acd0]
push 0xb
call fcn.00404f76
mov dword [ebp - 0xb24], eax
lea eax, [ebp - 0xb04]
push eax
push dword [0x419d64]
push dword [ebp - 0xb24]
call fcn.0040e222
push 1
push 0
push 0
lea eax, [ebp - 0xb04]
push eax
push 0x409889
push dword [0x419004]
call sub.SHELL32.dll_ShellExecuteA
mov dword [ebp - 0xb20], 0
call sub.WSOCK32.dll_WSACleanup
lea eax, [ebp - 0xb10]
push eax
call fcn.00405368
lea eax, [ebp - 0xb1c]
push eax
call fcn.00405368
mov eax, dword [ebp - 0xb20]
pop edi
pop ecx
leave
ret 8