Function at 0x4255cb
Capabilities:
Create process on windows
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff474
push ecx
push edi
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c5a8
push 0xc
lea eax, [ebp - 0xb68]
push eax
call sub.KERNEL32.dll_RtlZeroMemory
push dword [ebp + 8]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c679
cmp dword [ebp + 0xc], 0
je 0x425675
cmp dword [ebp + 0x10], 0
je 0x42561b
cmp dword [ebp + 0x10], 3
jne 0x425675
mov dword [ebp - 0xb60], 0x400
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c5a8
mov edi, dword [ebp - 0xb5c]
mov ecx, dword [ebp - 0xb58]
mov al, 0x3f
repne scasb al, byte es:[edi]
jne 0x425666
dec edi
mov byte [edi], 0
inc edi
push edi
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c679
push 0x4415c2
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c679
push dword [ebp + 0xc]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c679
push 0xa5
lea eax, [ebp - 0xa5]
push eax
call sub.KERNEL32.dll_RtlZeroMemory
cmp dword [ebp + 0x14], 0
je 0x4256aa
cmp dword [ebp + 0x10], 2
je 0x425698
cmp dword [ebp + 0x10], 1
jne 0x4256aa
mov edi, dword [ebp + 0x14]
push 0x14
lea eax, [ebp - 0x2c]
push eax
lea eax, [edi + 0x79]
push eax
call fcn.0042e300
cmp dword [ebp + 0x10], 0
je 0x4256b6
cmp dword [ebp + 0x10], 3
jne 0x4256bf
mov dword [ebp - 0x18], 2
jmp 0x4256ea
cmp dword [ebp + 0x10], 2
jne 0x4256d4
mov dword [ebp - 0x18], 2
push dword [edi + 0x6d]
pop dword [ebp - 0x38]
jmp 0x4256ea
cmp dword [ebp + 0x10], 1
jne 0x4256ea
mov dword [ebp - 0x18], 3
push dword [edi + 0x91]
pop dword [ebp - 0x14]
mov dword [ebp - 0xa1], 0x50
push dword [ebp - 0xb5c]
pop dword [ebp - 0x40]
lea eax, [ebp - 0x334]
mov dword [ebp - 0xa5], eax
mov dword [ebp - 0x8d], 0x500
lea eax, [ebp - 0x534]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x734]
mov dword [ebp - 0x4c], eax
cmp dword [ebp + 0x10], 0
je 0x425731
cmp dword [ebp + 0x10], 3
jne 0x42577f
push dword [0x451adc]
push 0xb
call fcn.0040c1be
push 0
push 0x442f1d
push eax
call fcn.00425e39
cmp eax, 0xffffffff
jne 0x42577c
push dword [0x451adc]
push 0xe
call fcn.0040c1be
push 0
push 0
push eax
push dword [0x441160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x425add
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xa5]
push eax
call fcn.00426cd1
lea eax, [ebp - 0x234]
push eax
push 0x101
call sub.WSOCK32.dll_WSAStartup
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c5e4
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c5a8
cmp dword [ebp + 0x10], 0
jne 0x4257dd
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb8c], str.Content_type:_application_x_www_form_urlencoded_r_n
jmp 0x42588c
cmp dword [ebp + 0x10], 3
jne 0x42586c
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb78], 0x400
lea eax, [ebp - 0xb80]
push eax
call fcn.0040c5a8
push 0x20
push dword [ebp - 0xb80]
call fcn.004276e1
mov dword [ebp - 0xb6c], 0x400
lea eax, [ebp - 0xb74]
push eax
call fcn.0040c5a8
push dword [ebp - 0xb80]
push str.Content_Type:_multipart_form_data__boundary_s_r_n
push dword [ebp - 0xb74]
call sub.USER32.dll_wsprintfA
add esp, 0xc
push dword [ebp - 0xb74]
pop dword [ebp - 0xb8c]
push dword [ebp - 0xb80]
push dword [ebp + 0x14]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb68]
push eax
call fcn.004266be
jmp 0x42588c
cmp dword [ebp + 0x10], 1
je 0x425878
cmp dword [ebp + 0x10], 2
jne 0x42588c
mov dword [ebp - 0xb88], 0x441dcc
mov dword [ebp - 0xb8c], 0x4415bb
push dword [ebp - 0xb64]
push dword [ebp - 0xb8c]
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0xb88]
push str._s__s_HTTP_1.0_r_nHost:__s_r_nUser_Agent:_DWB_r_nConnection:_Close_r_n_sContent_length:__lu_r_n_r_n
lea eax, [ebp - 0xb34]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x1c
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c679
cmp dword [ebp + 0x10], 0
jne 0x4258ed
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c679
jmp 0x42592c
cmp dword [ebp + 0x10], 3
jne 0x42592c
push dword [ebp - 0xb64]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c609
push dword [ebp - 0xb58]
pop dword [ebp - 0x50]
lea eax, [ebp - 0xb74]
push eax
call fcn.0040c5e4
lea eax, [ebp - 0xb80]
push eax
call fcn.0040c5e4
push dword [ebp - 0xb5c]
pop dword [ebp - 0x54]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c5e4
cmp dword [ebp - 0x2c], 0
jne 0x425950
push dword [0x441160]
pop dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 1
jne 0x4259b0
lea eax, [ebp - 0xa5]
push eax
push 0x425f76
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x44115c]
call sub.USER32.dll_CreateDialogParamA
mov dword [ebp - 0xb84], eax
push 0
push 0
push 0
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_GetMessageA
test eax, eax
je 0x4259ab
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_TranslateMessage
lea eax, [ebp - 0xb50]
push eax
call sub.USER32.dll_DispatchMessageA
jmp 0x42597b
jmp 0x425ad8
lea eax, [ebp - 0xa5]
push eax
push 0x425f76
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x44115c]
call sub.USER32.dll_DialogBoxParamA
mov dword [ebp - 4], eax
or eax, eax
jne 0x425a14
cmp dword [ebp + 0x10], 0
je 0x4259e8
cmp dword [ebp + 0x10], 3
je 0x4259e8
cmp dword [ebp + 0x10], 2
jne 0x425a05
push dword [0x451adc]
push 0x10
call fcn.0040c1be
push 0
push 0
push eax
push dword [0x441160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x425ad8
cmp eax, 4
je 0x425a1e
cmp eax, 5
jne 0x425a7a
cmp dword [ebp + 0x10], 0
je 0x425a30
cmp dword [ebp + 0x10], 3
je 0x425a30
cmp dword [ebp + 0x10], 2
jne 0x425a6e
mov byte [ebp - 0xb34], 0
push str.HTTP_error
lea eax, [ebp - 0xb34]
push eax
call sub.KERNEL32.dll_lstrcatA
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb34]
push eax
call sub.KERNEL32.dll_lstrcatA
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push dword [0x441160]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb84], 1
jmp 0x425ad8
cmp dword [ebp + 0x10], 0
je 0x425a86
cmp dword [ebp + 0x10], 3
jne 0x425ace
push dword [0x451adc]
push 0xb
call fcn.0040c1be
mov dword [ebp - 0xb88], eax
lea eax, [ebp - 0xb34]
push eax
push dword [0x442f1d]
push dword [ebp - 0xb88]
call fcn.00425ecb
push 1
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push 0x415e15
push dword [0x441160]
call sub.SHELL32.dll_ShellExecuteA
mov dword [ebp - 0xb84], 0
call sub.WSOCK32.dll_WSACleanup
cmp dword [ebp + 0x14], 0
je 0x425b03
cmp dword [ebp + 0x10], 2
je 0x425aef
cmp dword [ebp + 0x10], 1
jne 0x425b03
push 0xa5
push dword [ebp + 0x14]
lea eax, [ebp - 0xa5]
push eax
call fcn.0042e300
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040c5e4
lea eax, [ebp - 0xb68]
push eax
call fcn.0040c5e4
mov eax, dword [ebp - 0xb84]
pop edi
pop ecx
leave
ret 0x10