Function at 0x40e850
Capabilities:
Create process on windows
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff4dc
push ecx
push edi
mov dword [ebp - 0xb08], 0x400
lea eax, [ebp - 0xb10]
push eax
call fcn.0040591f
mov dword [ebp - 0xb14], 0x400
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040591f
push dword [ebp + 8]
lea eax, [ebp - 0xb10]
push eax
call fcn.00405981
mov edi, dword [ebp - 0xb10]
mov ecx, dword [ebp - 0xb0c]
mov al, 0x3f
repne scasb al, byte es:[edi]
jne 0x40e8cb
dec edi
mov byte [edi], 0
inc edi
push edi
lea eax, [ebp - 0xb1c]
push eax
call fcn.00405981
push 0x41a156
lea eax, [ebp - 0xb1c]
push eax
call fcn.00405981
push dword [ebp + 0xc]
lea eax, [ebp - 0xb1c]
push eax
call fcn.00405981
push 0x75
lea eax, [ebp - 0x75]
push eax
call sub.KERNEL32.DLL_RtlZeroMemory
mov dword [ebp - 4], 2
mov dword [ebp - 0x71], 0x50
push dword [ebp - 0xb10]
pop dword [ebp - 0x18]
lea eax, [ebp - 0x304]
mov dword [ebp - 0x75], eax
mov dword [ebp - 0x5d], 0x500
lea eax, [ebp - 0x504]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x704]
mov dword [ebp - 0x24], eax
push dword [0x41bd78]
push 0xb
call fcn.0040554c
push 0x41aded
push eax
call fcn.0040ee3e
cmp eax, 0xffffffff
jne 0x40e967
push dword [0x41bd78]
push 0xe
call fcn.0040554c
push 0
push 0
push eax
push dword [0x41a004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40eb08
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x75]
push eax
call fcn.0040f817
lea eax, [ebp - 0x204]
push eax
push 0x101
call sub.WSOCK32.dll_WSAStartup
lea eax, [ebp - 0xb10]
push eax
call fcn.0040595b
mov dword [ebp - 0xb08], 0x400
lea eax, [ebp - 0xb10]
push eax
call fcn.0040591f
push dword [ebp - 0xb18]
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x504]
push eax
push str.POST
push str._s__s_HTTP_1.0_r_nHost:__s_r_nUser_Agent:_DWB_r_nConnection:_Close_r_nContent_type:_application_x_www_form_urlencoded_r_nContent_length:__lu_r_n_r_n
lea eax, [ebp - 0xb04]
push eax
call sub.USER32.dll_wsprintfA
add esp, 0x18
lea eax, [ebp - 0xb04]
push eax
lea eax, [ebp - 0xb10]
push eax
call fcn.00405981
push dword [ebp - 0xb1c]
lea eax, [ebp - 0xb10]
push eax
call fcn.00405981
push dword [ebp - 0xb10]
pop dword [ebp - 0x28]
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040595b
lea eax, [ebp - 0x75]
mov dword [0x41d2f3], eax
push 0
push 0x40ef6e
push dword [0x41a004]
push str.PostPrgsDlg
push dword [section..data]
call sub.USER32.dll_DialogBoxParamA
or eax, eax
jne 0x40ea62
push dword [0x41bd78]
push 0x10
call fcn.0040554c
push 0
push 0
push eax
push dword [0x41a004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40eb03
cmp eax, 4
jne 0x40eab1
mov byte [ebp - 0xb04], 0
push str.HTTP_error
lea eax, [ebp - 0xb04]
push eax
call sub.KERNEL32.DLL_lstrcatA
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xb04]
push eax
call sub.KERNEL32.DLL_lstrcatA
push 0
push 0
lea eax, [ebp - 0xb04]
push eax
push dword [0x41a004]
call sub.USER32.dll_MessageBoxA
mov dword [ebp - 0xb20], 1
jmp 0x40eb03
push dword [0x41bd78]
push 0xb
call fcn.0040554c
mov dword [ebp - 0xb24], eax
lea eax, [ebp - 0xb04]
push eax
push dword [0x41aded]
push dword [ebp - 0xb24]
call fcn.0040eec3
push 1
push 0
push 0
lea eax, [ebp - 0xb04]
push eax
push 0x40a3b7
push dword [0x41a004]
call sub.SHELL32.dll_ShellExecuteA
mov dword [ebp - 0xb20], 0
call sub.WSOCK32.dll_WSACleanup
lea eax, [ebp - 0xb10]
push eax
call fcn.0040595b
lea eax, [ebp - 0xb1c]
push eax
call fcn.0040595b
mov eax, dword [ebp - 0xb20]
pop edi
pop ecx
leave
ret 8