Function at 0x4059b6
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dcbd7
mov eax, dword fs:[0]
push eax
mov eax, 0x2094
call fcn.004be980
mov eax, dword [0x513720]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov edi, ecx
and dword [esi + 0x10], 0
cmp dword [esi + 0x14], 0x10
jb 0x4059fa
mov eax, dword [esi]
jmp 0x4059fc
mov eax, esi
mov byte [eax], 0
test edi, edi
je 0x405ebc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405a0a
sub ecx, edx
cmp ecx, 5
jb 0x405ebc
push 0x3c
pop ebx
push ebx
lea eax, [ebp - 0x2084]
push 0
push eax
call fcn.004be330
xor eax, eax
mov dword [ebp - 0x2084], ebx
push 0xfe
push eax
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x22e]
push eax
call fcn.004be330
lea eax, [ebp - 0x230]
mov dword [ebp - 0x207c], 0x80
mov dword [ebp - 0x2080], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x2010], ax
lea eax, [ebp - 0x200e]
push eax
call fcn.004be330
lea eax, [ebp - 0x2010]
mov ebx, 0x400
mov dword [ebp - 0x2074], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x1810], ax
lea eax, [ebp - 0x180e]
push eax
mov dword [ebp - 0x2070], ebx
call fcn.004be330
lea eax, [ebp - 0x1810]
mov dword [ebp - 0x2054], ebx
mov dword [ebp - 0x2058], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x1010], ax
lea eax, [ebp - 0x100e]
push eax
call fcn.004be330
add esp, 0x3c
mov dword [ebp - 0x204c], ebx
lea eax, [ebp - 0x1010]
lea ecx, [ebp - 0x20a0]
mov dword [ebp - 0x2050], eax
push edi
call fcn.004018ec
xor ebx, ebx
mov dword [ebp - 4], ebx
lea edx, [ebp - 0x20a0]
push ebx
lea ecx, [ebp - 0x2030]
call fcn.004224c0
pop ecx
mov byte [ebp - 4], 2
xor edi, edi
push ebx
inc edi
lea ecx, [ebp - 0x20a0]
push edi
call fcn.004019c4
cmp dword [ebp - 0x201c], 8
lea ecx, [ebp - 0x2084]
push ecx
push bind
push dword [ebp - 0x2020]
lea eax, [ebp - 0x2030]
cmovae eax, dword [ebp - 0x2030]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x405b73
or dword [ebp - 4], 0xffffffff
push ebx
push edi
lea ecx, [ebp - 0x2030]
call fcn.00403864
jmp 0x405ebc
mov dword [ebp - 0xa6], 0x42424219
mov ecx, ebx
mov dword [ebp - 0xaa], 0x42124214
mov dword [ebp - 0xae], 0x420d4213
mov dword [ebp - 0xb2], 0x424e4254
mov dword [ebp - 0xb6], 0x425d425e
mov dword [ebp - 0xba], 0x42594250
mov dword [ebp - 0xbe], 0x426e4222
mov dword [ebp - 0xc2], 0x4207420e
mov dword [ebp - 0xc6], 0x420c426b
mov dword [ebp - 0xca], 0x4273426b
mov dword [ebp - 0xce], 0x42224207
mov dword [ebp - 0xd2], 0x42114214
mov dword [ebp - 0xd6], 0x420c4222
mov dword [ebp - 0xda], 0x426e4274
mov dword [ebp - 0xde], 0x4222424f
mov dword [ebp - 0xe2], 0x424b4253
mov dword [ebp - 0xe6], 0x425e4254
mov dword [ebp - 0xea], 0x4259426b
mov dword [ebp - 0xee], 0x42224207
mov dword [ebp - 0xf2], 0x42124214
mov dword [ebp - 0xf6], 0x42094222
mov dword [ebp - 0xfa], 0x427d4279
mov dword [ebp - 0xfe], 0x426f4275
mov dword [ebp - 0x102], 0x42224207
mov dword [ebp - 0x106], 0x425d4256
mov dword [ebp - 0x10a], 0x42604259
mov dword [ebp - 0x10e], 0x424e4261
mov dword [ebp - 0x112], 0x42524255
mov dword [ebp - 0x116], 0x4253425f
mov dword [ebp - 0x11a], 0x421a4222
mov dword [ebp - 0x11e], 0x42124214
mov dword [ebp - 0x122], 0x420d4213
mov dword [ebp - 0x126], 0x42614256
mov dword [ebp - 0x12a], 0x42564259
mov dword [ebp - 0x12e], 0x42484253
mov word [ebp - 0x130], 0x4275
mov al, byte [ebp + ecx - 0x130]
sub al, 3
xor al, 0x3f
mov byte [ebp + ecx - 0x130], al
inc ecx
cmp ecx, 0x8e
jl 0x405cdc
push ebx
push ebx
push ebx
push edi
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ebx, eax
test ebx, ebx
jne 0x405d18
or dword [ebp - 4], 0xffffffff
push eax
jmp 0x405b62
mov eax, 0x2710
push eax
push eax
push eax
push eax
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
push 0
push dword [ebp - 0x206c]
push dword [ebp - 0x2074]
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
mov dword [ebp - 0x2088], edi
test edi, edi
jne 0x405d60
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2030]
push eax
push 1
call fcn.00403864
jmp 0x405eb5
push dword [ebp - 0x2058]
lea ecx, [ebp - 0x2048]
call fcn.004034e9
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2048]
push dword [ebp - 0x2050]
call fcn.00403586
xor eax, eax
lea ecx, [ebp - 0x2048]
push eax
push eax
push eax
push eax
call fcn.004035b9
push eax
push 0x4fe804
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
test edi, edi
jne 0x405dd3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2048]
push eax
push 1
call fcn.00403864
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2030]
push edi
push 1
call fcn.00403864
jmp 0x405ea9
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x405e7c
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x405e7c
and dword [ebp - 0x2014], 0
push 0x5dc
lea eax, [ebp - 0x80f]
mov byte [ebp - 0x810], 0
push 0
push eax
call fcn.004be330
add esp, 0xc
lea eax, [ebp - 0x2014]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x405e7c
cmp dword [ebp - 0x2014], 0
je 0x405e7c
and dword [ebp - 0x2018], 0
lea eax, [ebp - 0x2018]
push eax
push 0x5dc
lea eax, [ebp - 0x810]
push eax
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x405e7c
push dword [ebp - 0x2018]
lea eax, [ebp - 0x810]
mov ecx, esi
push eax
call fcn.0040531a
cmp dword [ebp - 0x2014], 0
ja 0x405e02
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2048]
push 0
push 1
call fcn.00403864
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2030]
push 0
push 1
call fcn.00403864
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push dword [ebp - 0x2088]
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b923d
mov esp, ebp
pop ebp
ret