Function at 0x411b80
Capabilities:
Create thread
Initialize winsock library
Send data
Send data on socket
Send http request
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x49222b
mov eax, dword fs:[0]
push eax
sub esp, 0x1c0
mov eax, dword [0x4b9430]
xor eax, esp
mov dword [esp + 0x1b8], eax
push ebx
push esi
push edi
mov eax, dword [0x4b9430]
xor eax, esp
push eax
lea eax, [esp + 0x1d0]
mov dword fs:[0], eax
call fcn.00412f70
xor esi, esi
push esi
mov edi, eax
push esi
push 0x4042a0
mov dword [esp + 0x24], edi
call fcn.0045dd34
add esp, 0xc
call fcn.00402f90
push 4
lea eax, [esp + 0x18]
push eax
push 4
push str.checkupdate
push str.SoftwareAdbyby
push reloc.WS2_32.dll_accept
mov dword [esp + 0x2c], esi
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
push esi
push esi
push 0x403680
call fcn.0045dd34
add esp, 0xc
lea ecx, [esp + 0x34]
push ecx
push 2
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x411c40
push 0x52010
push str.Error
push str.Cannot_initialize_WinSock_library
push esi
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call fcn.0046039b
call fcn.0041cfc0
test eax, eax
je 0x411c6a
lea edx, [esp + 0x14]
push edx
push esi
push 0x4c5cd4
push 0x41d060
push esi
push esi
mov dword [esp + 0x2c], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4c5cf4], eax
call fcn.004031b0
call fcn.004121f0
lea eax, [esp + 0x20]
push eax
push edi
call fcn.00411a30
add esp, 8
call fcn.00413280
push 0x1b8
mov dword [esp + 0x20], eax
call fcn.0045db21
mov ebx, eax
add esp, 4
mov dword [esp + 0x14], ebx
push 0x1b8
cmp ebx, esi
je 0x411ce8
push esi
push ebx
call fcn.00463ac0
add esp, 0xc
push str.Listening_for_new_connections_...
push 2
lea edi, [ebx + 8]
call fcn.004090c0
push edi
lea ecx, [esp + 0x2c]
call fcn.0040d320
add esp, 0xc
test eax, eax
jne 0x411cfc
push str.accept_failed:__E
push 2
call fcn.004090c0
push ebx
call fcn.0045d483
add esp, 0xc
jmp 0x411c82
push str.malloc__d__for_csp_list_failed:__E
push 0x4000
call fcn.004090c0
add esp, 0xc
jmp 0x411c82
or dword [edi + 0xd8], 1
mov dword [edi + 0x90], 0xffffffff
cmp dword [0x4c5b14], esi
je 0x411d2e
call fcn.00412f70
mov dword [edi], eax
mov dword [esp + 0x18], eax
mov dword [0x4c5b14], esi
mov dword [eax + 0xa4], esi
jmp 0x411d34
mov ecx, dword [esp + 0x18]
mov dword [edi], ecx
mov edx, dword [esp + 0x18]
cmp dword [edx + 0xa4], esi
je 0x411d76
xor ebx, ebx
mov eax, dword [esp + ebx*4 + 0x20]
cmp eax, 0xffffffff
je 0x411d52
push eax
call dword [sym.imp.WS2_32.dll_closesocket]
mov dword [esp + ebx*4 + 0x20], 0xffffffff
inc ebx
cmp ebx, 2
jl 0x411d42
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x20]
push eax
push ecx
call fcn.00411a30
mov ebx, dword [esp + 0x1c]
add esp, 8
cmp dword [0x4c1f14], esi
je 0x411d85
or dword [edi + 0xd8], 0x20
call fcn.00413b30
test eax, eax
je 0x411da0
push str.a_loader_failed___must_exit
push 0x4000
call fcn.004090c0
add esp, 8
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx + 0x70]
cmp eax, esi
je 0x411e9b
cmp dword [esp + 0x1c], eax
jb 0x411e9b
mov edx, dword [edi + 0xdc]
push edx
push str.Rejecting_connection_from__s._Maximum_number_of_connections_reached.
push 2
call fcn.004090c0
mov ebx, dword [edi + 0x84]
add esp, 0xc
push str.HTTP_1.1_503_Too_many_open_connections_r_n
push 0x28
push ebx
push str.to_socket__d:__N
push 0x10
call fcn.004090c0
add esp, 0x14
push esi
push 0x28
push str.HTTP_1.1_503_Too_many_open_connections_r_n
push ebx
call dword [sym.imp.WS2_32.dll_send]
mov eax, dword [edi + 0xe4]
push 0x4c5cdc
mov dword [esp + 0x20], eax
mov dword [esp + 0x30], 0x4c5cdc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ebx, [esp + 0x1c]
lea eax, [esp + 0x28]
mov ecx, 0x4c5cf8
mov dword [esp + 0x1d8], esi
call fcn.0041d510
mov eax, dword [esp + 0x28]
cmp dword [0x4c5cfc], eax
je 0x411e4d
push eax
lea ecx, [esp + 0x34]
push ecx
push 0x4c5cf8
call fcn.0041d2b0
push 0x4c5cdc
mov dword [esp + 0x1dc], 0xffffffff
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edx, dword [edi + 0x84]
push edx
call dword [sym.imp.WS2_32.dll_closesocket]
mov eax, dword [edi + 0xdc]
cmp eax, esi
je 0x411e89
push eax
call fcn.0045d483
add esp, 4
mov dword [edi + 0xdc], esi
mov eax, dword [esp + 0x14]
push eax
call fcn.0045d483
add esp, 4
jmp 0x411c82
mov edx, dword [0x4c7220]
mov dword [ebx], edx
mov dword [0x4c7220], ebx
push edi
cmp dword [ecx + 4], esi
je 0x411f19
push 0x10000
push fcn.00411340
call fcn.0045dd34
add esp, 0xc
test eax, eax
jns 0x411c82
push str.Unable_to_take_any_additional_connections:__E
push 0x2000
call fcn.004090c0
mov ebx, dword [edi + 0x84]
push str.HTTP_1.1_503_Too_many_open_connections_r_n
push 0x28
push ebx
push str.to_socket__d:__N
push 0x10
call fcn.004090c0
add esp, 0x1c
push esi
push 0x28
push str.HTTP_1.1_503_Too_many_open_connections_r_n
push ebx
call dword [sym.imp.WS2_32.dll_send]
mov esi, edi
call fcn.00412060
and dword [edi + 0xd8], 0xfffffffe
xor esi, esi
jmp 0x411c82
call fcn.00411340
add esp, 4
jmp 0x411c82