Function at 0x43f400
Capabilities:
Initialize winhttp library

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40
push ebx
mov ebx, ecx
push esi
push edi
mov dword [ebp - 0xc], ebx
test ebx, ebx
je 0x43f64d
xor eax, eax
mov word [ebx], ax
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
mov eax, dword [ebp - 0x20]
mov byte [ebp - 5], 0
test eax, eax
je 0x43f4fa
push str.https
push eax
call fcn.00587f3b
mov esi, eax
add esp, 8
test esi, esi
je 0x43f44d
add esi, 0xc
jmp 0x43f464
push 0x5e9604
push dword [ebp - 0x20]
call fcn.00587f3b
add esp, 8
test eax, eax
jne 0x43f4ca
mov esi, dword [ebp - 0x20]
push 0x5e9608
push esi
call fcn.00587f3b
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x43f47d
add ecx, 6
jmp 0x43f47f
mov ecx, esi
cmp word [ecx], 0x20
jne 0x43f48e
add ecx, 2
cmp word [ecx], 0x20
je 0x43f485
movzx eax, word [ecx]
test ax, ax
je 0x43f4ca
cmp eax, 0x3a
je 0x43f4ca
mov edx, ecx
lea esi, [edx + 2]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x43f4a0
sub edx, esi
sar edx, 1
cmp edx, 0x100
jg 0x43f4ca
push ecx
push 0x100
push ebx
call fcn.00588638
add esp, 0xc
mov bl, 1
jmp 0x43f4cd
mov bl, byte [ebp - 5]
mov eax, dword [ebp - 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
je 0x43f4dd
push eax
call esi
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x43f4e7
push eax
call esi
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x43f4f1
push ecx
call esi
mov al, bl
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor edi, edi
push edi
push edi
push 0xffffffffffffffff
push dword [ebp + 8]
xorps xmm0, xmm0
push edi
xor ebx, ebx
push 0xfde9
movq qword [ebp - 0x40], xmm0
movq qword [ebp - 0x38], xmm0
movq qword [ebp - 0x30], xmm0
movq qword [ebp - 0x18], xmm0
mov dword [ebp - 0x10], ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test esi, esi
je 0x43f5f3
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00582537
add esp, 4
mov ebx, eax
push esi
push ebx
push 0xffffffffffffffff
push dword [ebp + 8]
push edi
push 0xfde9
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push edi
push edi
push edi
push 1
push 0x5e9610
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov edi, eax
test edi, edi
je 0x43f5f3
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x43f590
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x38], ecx
jmp 0x43f5a4
cmp dword [ebp - 0x28], 0
je 0x43f5bb
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x3c], 3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x40]
push eax
push ebx
push edi
mov dword [ebp - 0x2c], 1
call dword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x43f5f3
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x43f5c5
sub ecx, edx
sar ecx, 1
cmp ecx, 0x100
jg 0x43f5f3
push dword [ebp - 0x14]
push 0x100
push dword [ebp - 0xc]
call fcn.00588638
add esp, 0xc
mov byte [ebp - 5], 1
mov ecx, dword [ebp - 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test ecx, ecx
je 0x43f603
push ecx
call esi
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x43f60d
push eax
call esi
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x43f617
push eax
call esi
test ebx, ebx
je 0x43f624
push ebx
call fcn.00586d16
add esp, 4
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x43f62e
push ecx
call esi
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43f638
push eax
call esi
test edi, edi
je 0x43f643
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov al, byte [ebp - 5]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
pop edi
pop esi
xor al, al
pop ebx
mov esp, ebp
pop ebp
ret