Function at 0x45391e
Capabilities:
Contain obfuscated stackstrings
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push 0x4cc
mov eax, 0x5c1359
call fcn.00589338
mov edi, ecx
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0x14]
mov dword [ebp - 0x4d8], ecx
mov ecx, dword [ebp + 0x10]
push 0xf
mov dword [ebp - 0x4d0], ecx
xor ecx, ecx
pop edx
mov byte [ebp - 0x4c1], cl
mov dword [ebp - 0x494], edx
mov dword [ebp - 0x498], ecx
mov byte [ebp - 0x4a8], cl
mov dword [ebp - 4], ecx
mov dword [ebp - 0x44c], edx
mov dword [ebp - 0x450], ecx
mov byte [ebp - 0x460], cl
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 1
push ecx
lea ecx, [ebp - 0x4a8]
push ecx
lea ecx, [ebp - 0x4cc]
push ecx
lea ecx, [ebp - 0x4c8]
push ecx
push eax
call fcn.0045325c
add esp, 0x14
test al, al
je 0x453c53
push dword [ebp - 0x4c8]
xor esi, esi
inc esi
call fcn.00454073
pop ecx
test al, al
je 0x4539cb
mov ecx, edi
call fcn.00453f87
xor ecx, ecx
test al, al
cmove esi, ecx
push esi
push dword [ebp - 0x4cc]
lea eax, [ebp - 0x4a8]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.004169c0
mov ecx, edi
call fcn.00453840
cmp byte [edi + 0x18], 0
je 0x453c4c
push dword [ebp - 0x4d0]
xor esi, esi
mov eax, 0x803000
cmp dword [ebp - 0x4c8], 1
cmove esi, eax
lea eax, [ebp - 0x4c0]
push eax
call fcn.004538eb
cmp dword [ebp - 0x44c], 0x10
pop ecx
pop ecx
lea ecx, [ebp - 0x460]
cmovae ecx, dword [ebp - 0x460]
cmp dword [eax + 0x14], 0x10
jb 0x453a35
mov eax, dword [eax]
xor edx, edx
push edx
push esi
push edx
push edx
push str.HTTP_1.0
push ecx
push eax
push dword [edi + 0x20]
call dword [sym.imp.WININET.dll_HttpOpenRequestA]
push 0
push 1
lea ecx, [ebp - 0x4c0]
mov esi, eax
call fcn.00417350
test esi, esi
je 0x453c45
cmp dword [ebp - 0x4c8], 1
jne 0x453aaa
lea eax, [ebp - 0x4d4]
mov dword [ebp - 0x4d4], 4
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x1f
push esi
call dword [sym.imp.WININET.dll_InternetQueryOptionA]
or dword [ebp - 0x4c8], 0x100
lea eax, [ebp - 0x4c8]
push 4
push eax
push 0x1f
push esi
call dword [sym.imp.WININET.dll_InternetSetOptionA]
mov eax, dword [ebp - 0x4d0]
cmp eax, 1
jne 0x453b83
lea eax, [ebp - 0x44]
mov word [ebp - 0x2d], 0x6e6f
push eax
lea ecx, [ebp - 0x490]
mov word [ebp - 0x2a], 0x2d78
mov dword [ebp - 0x39], 0x61203a65
mov dword [ebp - 0x43], 0x65746e6f
mov word [ebp - 0x3c], 0x7954
mov dword [ebp - 0x23], 0x2d6d726f
mov dword [ebp - 0x1c], 0x6f636e65
mov dword [ebp - 0x27], 0x662d7777
mov dword [ebp - 0x18], 0x646564
mov word [ebp - 0x33], 0x696c
mov word [ebp - 0x3f], 0x746e
mov word [ebp - 0x30], 0x7461
mov byte [ebp - 0x28], 0x77
mov byte [ebp - 0x31], 0x63
mov word [ebp - 0x1e], 0x6c72
mov byte [ebp - 0x3d], 0x2d
mov byte [ebp - 0x44], 0x43
mov word [ebp - 0x35], 0x7070
mov byte [ebp - 0x2b], 0x2f
mov byte [ebp - 0x3a], 0x70
mov byte [ebp - 0x2e], 0x69
mov byte [ebp - 0x1f], 0x75
call fcn.00417240
cmp dword [ebx + 0x14], 0x10
mov ecx, dword [ebx + 0x10]
jb 0x453b4d
mov ebx, dword [ebx]
cmp dword [ebp - 0x47c], 0x10
lea eax, [ebp - 0x490]
push ecx
cmovae eax, dword [ebp - 0x490]
push ebx
push dword [ebp - 0x480]
push eax
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
xor ebx, ebx
lea ecx, [ebp - 0x490]
push ebx
push 1
call fcn.00417350
jmp 0x453b94
xor ebx, ebx
test eax, eax
jne 0x453b94
push ebx
push ebx
push ebx
push ebx
push esi
call dword [sym.imp.WININET.dll_HttpSendRequestA]
mov dword [ebp - 0x464], 0xf
mov dword [ebp - 0x468], ebx
mov byte [ebp - 0x478], bl
mov dword [ebp - 0x4cc], ebx
mov ebx, dword [sym.imp.WININET.dll_InternetReadFile]
mov byte [ebp - 4], 2
jmp 0x453bf9
mov eax, dword [ebp - 0x4cc]
test eax, eax
je 0x453c13
cmp eax, 0x401
jae 0x453c7f
mov byte [ebp + eax - 0x448], 0
lea eax, [ebp - 0x448]
push eax
call fcn.00417220
pop ecx
push eax
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x478]
call fcn.00415ba0
lea eax, [ebp - 0x4cc]
push eax
push 0x400
lea eax, [ebp - 0x448]
push eax
push esi
call ebx
test eax, eax
jne 0x453bbc
mov eax, dword [ebp - 0x4d8]
lea ecx, [ebp - 0x478]
cmp eax, ecx
je 0x453c2f
push 0xffffffffffffffff
push 0
push ecx
mov ecx, eax
call fcn.00416d10
push 0
push 1
lea ecx, [ebp - 0x478]
mov byte [ebp - 0x4c1], 1
call fcn.00417350
push esi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, edi
call fcn.004538a3
push 0
push 1
lea ecx, [ebp - 0x460]
call fcn.00417350
push 0
push 1
lea ecx, [ebp - 0x4a8]
call fcn.00417350
mov al, byte [ebp - 0x4c1]
call fcn.005892e2
ret 0x10
call fcn.00589efb
int3