Function at 0x140001cd0
Capabilities:
Initialize winhttp library

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
sub rsp, 0xd0
mov qword [rsp + 0x98], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov rax, qword [0x1401423c0]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov rbp, rdx
mov rdi, rcx
xor r13d, r13d
mov dword [rsp + 0x50], r13d
xor eax, eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], eax
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x64], eax
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], eax
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
xor r12b, r12b
mov qword [r11 - 0x38], 7
mov qword [r11 - 0x40], r13
mov word [r11 - 0x50], r13w
xor r8d, r8d
lea rdx, [0x140111764]
lea rcx, [r11 - 0x58]
call fcn.140004ab0
nop
lea rcx, [rsp + 0x30]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x140001fd1
cmp dword [rsp + 0x30], 0
setne bl
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x140001d99
mov bl, 1
mov qword [rsp + 0x58], rdx
jmp 0x140001da6
test bl, bl
je 0x140001eb5
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x140001db5
mov dword [rsp + 0x50], 2
jmp 0x140001dc5
mov dword [rsp + 0x50], 1
mov dword [rsp + 0x54], 3
mov dword [rsp + 0x6c], 1
mov dword [rsp + 0x20], 0x10000000
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
test rax, rax
je 0x140001eae
mov dword [rsp + 0x70], r13d
xor eax, eax
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rax
cmp qword [rdi + 0x20], 8
jb 0x140001e12
mov rdx, qword [rdi + 8]
jmp 0x140001e16
lea rdx, [rdi + 8]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
setne bl
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r11, qword [rsp + 0x78]
test r11, r11
je 0x140001eae
mov rcx, qword [rsp + 0x80]
test rcx, rcx
jne 0x140001e81
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r11
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, r11
lea rcx, [rsp + 0xa0]
call fcn.140004ab0
mov r12b, 1
mov rcx, qword [rsp + 0x80]
mov r11, qword [rsp + 0x78]
test r11, r11
je 0x140001e9c
mov rcx, r11
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [rsp + 0x78], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140001eae
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rdx, qword [rsp + 0x38]
jmp 0x140001eea
mov rdx, qword [rsp + 0x38]
jmp 0x140001eea
mov r9, qword [rsp + 0x40]
test r9, r9
je 0x140001eea
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r9
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, r9
lea rcx, [rsp + 0xa0]
call fcn.140004ab0
mov r12b, 1
mov rdx, qword [rsp + 0x38]
mov byte [rbp], bl
test rdx, rdx
je 0x140001f0e
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp + 8]
call fcn.140004ab0
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x140001f34
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp + 0x30]
call fcn.140004ab0
mov qword [rsp + 0x90], 7
mov qword [rsp + 0x88], r13
mov word [rsp + 0x78], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x70]
call fcn.140003f90
lea rdx, [rbp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.140001350
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140001f8a
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [rsp + 0x38], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140001f9f
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140001fb4
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [rsp + 0x48], r13
cmp qword [rsp + 0xc0], 8
jb 0x140001fcc
mov rcx, qword [rsp + 0xa8]
call fcn.1400cfe04
mov al, r12b
jmp 0x140001feb
cmp qword [rsp + 0xc0], 8
jb 0x140001fe9
mov rcx, qword [rsp + 0xa8]
call fcn.1400cfe04
xor al, al
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.1400e2890
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret