Function at 0x41a000
Capabilities:
Contain obfuscated stackstrings
Initialize winhttp library
Prepare http request
Read http header
Receive http response

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0xc8]
push ebx
mov ebx, eax
movzx ebx, bx
sub esp, 0xfc
mov eax, dword [sym.imp.kernel32.dll_GetTickCount]
mov dword [ebp - 0xe4], eax
call eax
mov dword [ebp - 0x78], 0x660049
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x74], 0x4d002d
mov dword [ebp - 0x70], 0x64006f
mov dword [ebp - 0x6c], 0x660069
mov dword [ebp - 0x68], 0x650069
mov dword [ebp - 0x64], 0x2d0064
mov dword [ebp - 0x60], 0x690053
mov dword [ebp - 0x5c], 0x63006e
mov dword [ebp - 0x58], 0x3a0065
mov dword [ebp - 0x54], 0x20
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_GetSystemTime]
lea eax, [ebp - 0x52]
sub esp, 4
mov dword [esp], esi
mov dword [esp + 4], eax
call dword [sym.imp.winhttp.dll_WinHttpTimeFromSystemTime]
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], str.winetest
call dword [sym.imp.winhttp.dll_WinHttpOpen]
sub esp, 0x14
mov edi, eax
call fcn.00431c30
mov esi, dword fs:[0x18]
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf0c
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpOpen_failed:__lu_n
mov dword [esp + 8], eax
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.00410490
mov dword [esp + 8], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 4], str.localhost
mov dword [ebp - 0xe0], edi
mov dword [esp], edi
call dword [sym.imp.winhttp.dll_WinHttpConnect]
sub esp, 0x10
mov edi, eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf0f
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpConnect_failed:__lu_n
mov dword [esp + 8], eax
xor eax, eax
test edi, edi
setne al
mov dword [esp], eax
call fcn.00410490
mov dword [esp], edi
mov dword [esp + 0x18], 0x100
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str._not_modified
mov dword [esp + 4], 0
call dword [sym.imp.winhttp.dll_WinHttpOpenRequest]
sub esp, 0x1c
mov ebx, eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf13
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpOpenrequest_failed:__lu_n
mov dword [esp + 8], eax
xor eax, eax
test ebx, ebx
setne al
mov dword [esp], eax
call fcn.00410490
lea edx, [ebp - 0x78]
mov dword [esp], ebx
mov dword [esp + 4], edx
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call dword [sym.imp.winhttp.dll_WinHttpSendRequest]
sub esp, 0x1c
mov dword [ebp - 0xe8], eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf16
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpSendRequest_failed:__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xe8]
mov dword [esp], edx
call fcn.00410490
mov dword [esp], ebx
mov dword [esp + 4], 0
call dword [sym.imp.winhttp.dll_WinHttpReceiveResponse]
sub esp, 8
mov dword [ebp - 0xe8], eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf19
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpReceiveResponse_failed:__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xe8]
mov dword [esp], edx
call fcn.00410490
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0
mov edx, dword [sym.imp.winhttp.dll_WinHttpQueryHeaders]
mov dword [ebp - 0xd4], 0x40
mov dword [esp + 0x14], eax
lea eax, [ebp - 0xd4]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0xb8]
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.If_Modified_Since
mov dword [esp + 4], 0x8000ffff
mov dword [ebp - 0xec], edx
call edx
sub esp, 0x18
mov dword [ebp - 0xe8], eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf1f
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.failed_to_get_header__lu_n
mov dword [esp + 8], eax
mov ecx, dword [ebp - 0xe8]
mov dword [esp], ecx
call fcn.00410490
lea ecx, [ebp - 0xcc]
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0xdeadbeef
mov dword [ebp - 0xcc], 4
mov dword [esp + 0x10], ecx
mov dword [esp], ebx
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x20000013
mov edx, dword [ebp - 0xec]
call edx
sub esp, 0x18
mov dword [ebp - 0xe8], eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf25
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpQueryHeaders_failed:__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xe8]
mov dword [esp], edx
call fcn.00410490
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf26
mov eax, dword [ebp - 0xd0]
mov dword [esp + 4], str.got__lu_n
cmp eax, 0x130
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00410490
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], 0xdeadbeef
mov dword [esp + 4], ecx
mov dword [esp], ebx
call dword [sym.imp.winhttp.dll_WinHttpQueryDataAvailable]
sub esp, 8
mov dword [ebp - 0xe8], eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf2a
mov eax, dword [esi + 0x34]
mov dword [esp + 4], str.WinHttpQueryDataAvailable_failed:__lu_n
mov dword [esp + 8], eax
mov edx, dword [ebp - 0xe8]
mov dword [esp], edx
call fcn.00410490
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf2b
mov eax, dword [ebp - 0xcc]
mov dword [esp + 4], str.got__lu_n
test eax, eax
mov dword [esp + 8], eax
sete al
movzx eax, al
mov dword [esp], eax
call fcn.00410490
mov dword [esp], ebx
mov ebx, dword [sym.imp.winhttp.dll_WinHttpCloseHandle]
call ebx
sub esp, 4
mov dword [esp], edi
call ebx
mov edi, dword [ebp - 0xe0]
sub esp, 4
mov dword [esp], edi
call ebx
mov ecx, dword [ebp - 0xe4]
sub esp, 4
call ecx
mov ebx, eax
mov eax, dword [ebp - 0xdc]
sub ebx, eax
call fcn.00431c30
mov dword [eax], 0x438e8a
mov dword [eax + 4], 0xf31
xor eax, eax
cmp ebx, 0x7d0
setbe al
mov dword [esp + 8], ebx
mov dword [esp + 4], str.Expected_less_than_2_seconds_for_the_test__got__lu_ms_n
mov dword [esp], eax
call fcn.00410490
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret