Function at 0x422de6
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff474
push ecx
push edi
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a5be
push 0xc
lea eax, [ebp - 0xb68]
push eax
call fcn.00428642
push dword [ebp + 8]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a68f
cmp dword [ebp + 0xc], 0
je 0x422e90
cmp dword [ebp + 0x10], 0
je 0x422e36
cmp dword [ebp + 0x10], 3
jne 0x422e90
mov dword [ebp - 0xb60], 0x400
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a5be
mov edi, dword [ebp - 0xb5c]
mov ecx, dword [ebp - 0xb58]
mov al, 0x3f
repne scasb al, byte es:[edi]
jne 0x422e81
dec edi
mov byte [edi], 0
inc edi
push edi
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a68f
push 0x43c5c2
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a68f
push dword [ebp + 0xc]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a68f
push 0xa5
lea eax, [ebp - 0xa5]
push eax
call fcn.00428642
cmp dword [ebp + 0x14], 0
je 0x422ec5
cmp dword [ebp + 0x10], 2
je 0x422eb3
cmp dword [ebp + 0x10], 1
jne 0x422ec5
mov edi, dword [ebp + 0x14]
push 0x14
lea eax, [ebp - 0x2c]
push eax
lea eax, [edi + 0x79]
push eax
call fcn.0042b450
cmp dword [ebp + 0x10], 0
je 0x422ed1
cmp dword [ebp + 0x10], 3
jne 0x422eda
mov dword [ebp - 0x18], 2
jmp 0x422f05
cmp dword [ebp + 0x10], 2
jne 0x422eef
mov dword [ebp - 0x18], 2
push dword [edi + 0x6d]
pop dword [ebp - 0x38]
jmp 0x422f05
cmp dword [ebp + 0x10], 1
jne 0x422f05
mov dword [ebp - 0x18], 3
push dword [edi + 0x91]
pop dword [ebp - 0x14]
mov dword [ebp - 0xa1], 0x50
push dword [ebp - 0xb5c]
pop dword [ebp - 0x40]
lea eax, [ebp - 0x334]
mov dword [ebp - 0xa5], eax
mov dword [ebp - 0x8d], 0x500
lea eax, [ebp - 0x534]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x734]
mov dword [ebp - 0x4c], eax
cmp dword [ebp + 0x10], 0
je 0x422f4c
cmp dword [ebp + 0x10], 3
jne 0x422f9a
push dword [0x44d854]
push 0xb
call fcn.0040a1e8
push 0
push 0x43df04
push eax
call fcn.00423654
cmp eax, 0xffffffff
jne 0x422f97
push dword [0x44d854]
push 0xe
call fcn.0040a1e8
push 0
push 0
push eax
push dword [0x43c160]
call fcn.004288ca
mov dword [ebp - 0xb84], 1
jmp 0x4232f8
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xa5]
push eax
call fcn.004244e0
lea eax, [ebp - 0x234]
push eax
push 0x101
call fcn.0042b4d2
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a5fa
mov dword [ebp - 0xb54], 0x400
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a5be
cmp dword [ebp + 0x10], 0
jne 0x422ff8
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb8c], str.Content_type:_application_x_www_form_urlencoded_r_n
jmp 0x4230a7
cmp dword [ebp + 0x10], 3
jne 0x423087
mov dword [ebp - 0xb88], str.POST
mov dword [ebp - 0xb78], 0x400
lea eax, [ebp - 0xb80]
push eax
call fcn.0040a5be
push 0x20
push dword [ebp - 0xb80]
call fcn.00424ef0
mov dword [ebp - 0xb6c], 0x400
lea eax, [ebp - 0xb74]
push eax
call fcn.0040a5be
push dword [ebp - 0xb80]
push str.Content_Type:_multipart_form_data__boundary_s_r_n
push dword [ebp - 0xb74]
call fcn.004286b4
add esp, 0xc
push dword [ebp - 0xb74]
pop dword [ebp - 0xb8c]
push dword [ebp - 0xb80]
push dword [ebp + 0x14]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb68]
push eax
call fcn.00423ecd
jmp 0x4230a7
cmp dword [ebp + 0x10], 1
je 0x423093
cmp dword [ebp + 0x10], 2
jne 0x4230a7
mov dword [ebp - 0xb88], 0x43cdb3
mov dword [ebp - 0xb8c], 0x43c5bb
push dword [ebp - 0xb64]
push dword [ebp - 0xb8c]
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0xb88]
push str._s__s_HTTP_1.0_r_nHost:__s_r_nUser_Agent:_DWB_r_nConnection:_Close_r_n_sContent_length:__lu_r_n_r_n
lea eax, [ebp - 0xb34]
push eax
call fcn.004286b4
add esp, 0x1c
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a68f
cmp dword [ebp + 0x10], 0
jne 0x423108
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a68f
jmp 0x423147
cmp dword [ebp + 0x10], 3
jne 0x423147
push dword [ebp - 0xb64]
push dword [ebp - 0xb68]
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a61f
push dword [ebp - 0xb58]
pop dword [ebp - 0x50]
lea eax, [ebp - 0xb74]
push eax
call fcn.0040a5fa
lea eax, [ebp - 0xb80]
push eax
call fcn.0040a5fa
push dword [ebp - 0xb5c]
pop dword [ebp - 0x54]
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a5fa
cmp dword [ebp - 0x2c], 0
jne 0x42316b
push dword [0x43c160]
pop dword [ebp - 0x2c]
cmp dword [ebp - 0x28], 1
jne 0x4231cb
lea eax, [ebp - 0xa5]
push eax
push 0x423791
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x43c15c]
call fcn.004286f6
mov dword [ebp - 0xb84], eax
push 0
push 0
push 0
lea eax, [ebp - 0xb50]
push eax
call fcn.004287fe
test eax, eax
je 0x4231c6
lea eax, [ebp - 0xb50]
push eax
call fcn.004289a8
lea eax, [ebp - 0xb50]
push eax
call fcn.00428732
jmp 0x423196
jmp 0x4232f3
lea eax, [ebp - 0xa5]
push eax
push 0x423791
push dword [ebp - 0x2c]
push str.PostPrgsDlg
push dword [0x43c15c]
call fcn.0042872c
mov dword [ebp - 4], eax
or eax, eax
jne 0x42322f
cmp dword [ebp + 0x10], 0
je 0x423203
cmp dword [ebp + 0x10], 3
je 0x423203
cmp dword [ebp + 0x10], 2
jne 0x423220
push dword [0x44d854]
push 0x10
call fcn.0040a1e8
push 0
push 0
push eax
push dword [0x43c160]
call fcn.004288ca
mov dword [ebp - 0xb84], 1
jmp 0x4232f3
cmp eax, 4
je 0x423239
cmp eax, 5
jne 0x423295
cmp dword [ebp + 0x10], 0
je 0x42324b
cmp dword [ebp + 0x10], 3
je 0x42324b
cmp dword [ebp + 0x10], 2
jne 0x423289
mov byte [ebp - 0xb34], 0
push str.HTTP_error
lea eax, [ebp - 0xb34]
push eax
call fcn.0042868a
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb34]
push eax
call fcn.0042868a
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push dword [0x43c160]
call fcn.004288ca
mov dword [ebp - 0xb84], 1
jmp 0x4232f3
cmp dword [ebp + 0x10], 0
je 0x4232a1
cmp dword [ebp + 0x10], 3
jne 0x4232e9
push dword [0x44d854]
push 0xb
call fcn.0040a1e8
mov dword [ebp - 0xb88], eax
lea eax, [ebp - 0xb34]
push eax
push dword [0x43df04]
push dword [ebp - 0xb88]
call fcn.004236e6
push 1
push 0
push 0
lea eax, [ebp - 0xb34]
push eax
push 0x413a1d
push dword [0x43c160]
call sub.8485868788898A8B8C8D8E8F909192939495969798999A9B9C9D9E9FA0A1A2A3A4A5A6A7A8A9AAABACADAEAFB0B1B2B3B4B5B6B7B8B9BABBBCBDBEBFC0
mov dword [ebp - 0xb84], 0
call fcn.0042b4c6
cmp dword [ebp + 0x14], 0
je 0x42331e
cmp dword [ebp + 0x10], 2
je 0x42330a
cmp dword [ebp + 0x10], 1
jne 0x42331e
push 0xa5
push dword [ebp + 0x14]
lea eax, [ebp - 0xa5]
push eax
call fcn.0042b450
lea eax, [ebp - 0xb5c]
push eax
call fcn.0040a5fa
lea eax, [ebp - 0xb68]
push eax
call fcn.0040a5fa
mov eax, dword [ebp - 0xb84]
pop edi
pop ecx
leave
ret 0x10