Function at 0x42dea0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x470aa6
mov eax, dword fs:[0]
push eax
sub esp, 0x2d8
mov eax, dword [0x48b084]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x178], edi
mov eax, dword [edi + 0x20]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test eax, eax
je 0x42deec
push eax
call esi
mov dword [edi + 0x20], 0
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x42defd
push eax
call esi
mov dword [edi + 0x1c], 0
lea eax, [edi + 0x18]
mov dword [ebp - 0x174], eax
mov eax, dword [eax]
test eax, eax
je 0x42df1b
push eax
call esi
mov eax, dword [ebp - 0x174]
mov dword [eax], 0
xor eax, eax
mov word [edi + 0xe0], 0x100
mov word [edi + 0x24], ax
lea eax, [edi + 0x68]
mov dword [eax], 0
mov esi, dword [edi + 0x34]
mov dword [ebp - 0x17c], eax
mov eax, dword [edi + 0x38]
cmp esi, eax
je 0x42df5c
mov edi, eax
mov ecx, esi
call fcn.00408ab0
add esi, 0x30
cmp esi, edi
jne 0x42df45
mov edi, dword [ebp - 0x178]
mov esi, dword [edi + 0x34]
mov dword [edi + 0x38], esi
cmp dword [edi + 0x14], 8
jb 0x42df67
mov edi, dword [edi]
push 0
push 0
push 0
push 0
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
test eax, eax
jne 0x42e173
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp - 0x17c]
push 0xb0
push 0
mov dword [esi], eax
lea eax, [ebp - 0xc0]
push eax
call fcn.004493d0
add esp, 4
lea ecx, [ebp - 0xc0]
call fcn.00416ea0
mov dword [ebp - 4], 0
xor ecx, ecx
mov dword [ebp - 0x1b0], 0x17
mov dword [ebp - 0x1ac], 0x5e0061
mov dword [ebp - 0x1a8], 0x710056
mov dword [ebp - 0x1a4], 0x4f004e
mov dword [ebp - 0x1a0], 0x72004c
mov dword [ebp - 0x19c], 0x5a004e
mov dword [ebp - 0x198], 0x61002e
mov dword [ebp - 0x194], 0x22002e
mov dword [ebp - 0x190], 0x310037
mov dword [ebp - 0x18c], 0x220066
mov dword [ebp - 0x188], 0x3b003a
mov dword [ebp - 0x184], 0x390025
mov dword [ebp - 0x180], 0x4d006c
lea eax, [ecx + 0x36]
xor word [ebp + ecx*2 - 0x1ac], ax
inc ecx
mov eax, dword [ebp - 0x1b0]
cmp ecx, eax
jb 0x42e040
xor ecx, ecx
lea edx, [ebp - 0x1ac]
mov word [ebp + eax*2 - 0x1ac], cx
lea ecx, [ebp - 0xb0]
call fcn.0041cb00
push dword [esi]
mov ecx, eax
call fcn.0041c530
mov edx, dword [0x48d810]
mov dword [ebp - 0x174], edx
test edx, edx
jne 0x42e0cb
push 0x20
call fcn.0044703a
mov edx, eax
xorps xmm0, xmm0
add esp, 4
mov dword [ebp - 0x174], edx
xor eax, eax
mov dword [ebp - 0x178], edx
mov dword [0x48d810], edx
movups xmmword [edx], xmm0
movups xmmword [edx + 0x10], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], eax
lea eax, [ebp - 0x250]
push eax
call fcn.0042e360
mov edi, eax
xor ecx, ecx
mov esi, dword [edi]
lea eax, [edi + 4]
mov dword [ebp - 0x17c], eax
test esi, esi
je 0x42e10a
mov edx, eax
nop dword [eax]
lea eax, [ecx + 0x36]
xor word [edx + ecx*2], ax
inc ecx
mov esi, dword [edi]
cmp ecx, esi
jb 0x42e0f0
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov word [eax + esi*2], cx
lea eax, [ebp - 0x2e4]
push eax
call fcn.0042a100
mov dword [ebp - 0x178], eax
mov esi, dword [eax]
lea edi, [eax + 4]
test esi, esi
je 0x42e144
mov edx, eax
nop dword [eax]
lea eax, [ecx + 0x36]
xor word [edi + ecx*2], ax
inc ecx
mov esi, dword [edx]
cmp ecx, esi
jb 0x42e130
mov edx, dword [ebp - 0x174]
xor eax, eax
mov word [edi + esi*2], ax
lea eax, [ebp - 0xc0]
push eax
push ecx
push 0x2a5
push edi
push 0
mov ecx, edx
call fcn.00426790
lea ecx, [ebp - 0xc0]
call fcn.00416ce0
xor al, al
jmp 0x42e340
push 0x7530
push 0
push 0
push 0
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x42e33e
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [ebp - 0x17c]
push 0xb0
push 0
mov dword [esi], eax
lea eax, [ebp - 0x170]
push eax
call fcn.004493d0
add esp, 4
lea ecx, [ebp - 0x170]
call fcn.00416ea0
mov dword [ebp - 4], 1
mov eax, 0x1e
mov dword [ebp - 0x1c0], eax
xor ecx, ecx
mov dword [ebp - 0x1bc], 0x5e0061
mov dword [ebp - 0x1b8], 0x710056
mov dword [ebp - 0x1b4], 0x4f004e
mov dword [ebp - 0x1b0], 0x6e004c
mov dword [ebp - 0x1ac], 0x4b005b
mov dword [ebp - 0x1a8], 0x280014
mov dword [ebp - 0x1a4], 0x26002f
mov dword [ebp - 0x1a0], 0x30002b
mov dword [ebp - 0x19c], 0x340032
mov dword [ebp - 0x198], 0x250068
mov dword [ebp - 0x194], 0x38002b
mov dword [ebp - 0x190], 0x6d0038
mov dword [ebp - 0x18c], 0x3d002b
mov dword [ebp - 0x188], 0x3e0022
mov dword [ebp - 0x184], 0x730020
mov dword [ebp - 0x180], 0x54
lea eax, [ecx + 0x36]
xor word [ebp + ecx*2 - 0x1bc], ax
inc ecx
mov eax, dword [ebp - 0x1c0]
cmp ecx, eax
jb 0x42e270
xor ecx, ecx
lea edx, [ebp - 0x1bc]
mov word [ebp + eax*2 - 0x1bc], cx
lea ecx, [ebp - 0x160]
call fcn.0041cb00
push dword [esi]
mov ecx, eax
call fcn.0041c530
call fcn.00424b90
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x250]
push eax
call fcn.0042e470
mov esi, eax
xor ecx, ecx
mov edx, dword [esi]
test edx, edx
je 0x42e2df
nop dword [eax + eax]
lea eax, [ecx + 0x36]
xor word [esi + ecx*2 + 4], ax
inc ecx
mov edx, dword [esi]
cmp ecx, edx
jb 0x42e2d0
xor eax, eax
mov word [esi + edx*2 + 4], ax
lea eax, [ebp - 0x2e4]
push eax
call fcn.0042a100
mov edi, eax
xor ecx, ecx
mov edx, dword [edi]
lea esi, [edi + 4]
test edx, edx
je 0x42e30e
nop
lea eax, [ecx + 0x36]
xor word [esi + ecx*2], ax
inc ecx
mov edx, dword [edi]
cmp ecx, edx
jb 0x42e300
xor eax, eax
mov word [esi + edx*2], ax
lea eax, [ebp - 0x170]
push eax
push ecx
mov ecx, dword [ebp - 0x178]
push 0x2ac
push esi
push 0
call fcn.00426790
lea ecx, [ebp - 0x170]
call fcn.00416ce0
xor al, al
jmp 0x42e340
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00446d97
mov esp, ebp
pop ebp
ret