Function at 0x4f48c0
Capabilities:
Initialize winhttp library

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6116db
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x78
mov eax, dword [0x6ba394]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x64], edx
mov esi, ecx
mov edi, dword [ebx + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x70], 0
movq qword [ebp - 0x78], xmm0
mov dword [ebp - 0x6c], 0
push 0
push 0
push 0
push 0
push 0
mov dword [ebp - 4], 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x6c], eax
test eax, eax
je 0x4f4bf2
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x4f4bf2
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x4f49ff
push eax
lea ecx, [ebp - 0x44]
call fcn.004347d0
mov ecx, dword [ebp - 0x64]
push eax
call fcn.0041aab0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x68], 0
call fcn.00413860
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x4f49b3
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x1c], eax
mov word [ebp - 0x2c], ax
lea ecx, [ebp - 0x2c]
mov eax, 4
jmp 0x4f49c3
push eax
lea ecx, [ebp - 0x44]
call fcn.004347d0
mov ecx, eax
mov eax, 8
push ecx
mov ecx, edi
mov dword [ebp - 0x64], eax
call fcn.0041aab0
mov eax, dword [ebp - 0x64]
test al, 8
je 0x4f49e6
and eax, 0xfffffff7
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x64], eax
call fcn.00413860
mov eax, dword [ebp - 0x64]
test al, 4
je 0x4f4bd8
lea ecx, [ebp - 0x2c]
call fcn.00413860
mov byte [ebp - 0x5d], 1
jmp 0x4f4bf6
mov eax, dword [ebp - 0x84]
mov ecx, dword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x4f4af2
cmp dword [esi + 0x14], 8
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 1
jb 0x4f4a3c
mov eax, dword [esi]
jmp 0x4f4a3e
mov eax, esi
lea edx, [ebp - 0x78]
push edx
lea edx, [ebp - 0x2c]
push edx
push eax
push dword [ebp - 0x6c]
call ecx
test eax, eax
je 0x4f4bf2
cmp dword [ebp - 0x78], 3
jne 0x4f4aec
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4f4aec
push eax
lea ecx, [ebp - 0x44]
call fcn.004347d0
mov ecx, dword [ebp - 0x64]
push eax
call fcn.0041aab0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x68], 0
call fcn.00413860
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x4f4ab0
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], eax
mov word [ebp - 0x44], ax
lea ecx, [ebp - 0x44]
mov eax, 0x40
jmp 0x4f4ac0
push eax
lea ecx, [ebp - 0x5c]
call fcn.004347d0
mov ecx, eax
mov eax, 0x80
push ecx
mov ecx, edi
mov dword [ebp - 0x64], eax
call fcn.0041aab0
mov eax, dword [ebp - 0x64]
test al, al
jns 0x4f4ae5
and eax, 0xffffff7f
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x64], eax
call fcn.00413860
mov eax, dword [ebp - 0x64]
test al, 0x40
jmp 0x4f4bce
mov ecx, dword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
cmp dword [ebp - 0x88], 0
je 0x4f4bde
cmp dword [esi + 0x14], 8
xorps xmm0, xmm0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x18], 1
jb 0x4f4b2a
mov esi, dword [esi]
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c]
push eax
push esi
push dword [ebp - 0x6c]
call ecx
test eax, eax
je 0x4f4bf2
cmp dword [ebp - 0x78], 3
jne 0x4f4bde
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4f4bde
push eax
lea ecx, [ebp - 0x5c]
call fcn.004347d0
mov ecx, dword [ebp - 0x64]
push eax
call fcn.0041aab0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x68], 0
call fcn.00413860
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x4f4b9c
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], eax
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x44]
mov esi, 0x400
jmp 0x4f4baa
push eax
lea ecx, [ebp - 0x5c]
call fcn.004347d0
mov esi, 0x800
push eax
mov ecx, edi
call fcn.0041aab0
test esi, 0x800
je 0x4f4bc8
lea ecx, [ebp - 0x5c]
and esi, 0xfffff7ff
call fcn.00413860
test esi, 0x400
je 0x4f4bd8
lea ecx, [ebp - 0x44]
call fcn.00413860
mov byte [ebp - 0x5d], 1
jmp 0x4f4bf6
push str.Could_not_find_proxy_for_url
push str.GWEventResolver::GetProxyForUrl
push 4
call fcn.00587c13
add esp, 0xc
mov byte [ebp - 0x5d], 0
mov eax, dword [ebp - 0x84]
mov esi, dword [sym.imp.KERNEL32.dll_GlobalFree]
test eax, eax
je 0x4f4c09
push eax
call esi
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x4f4c13
push eax
call esi
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x4f4c1d
push eax
call esi
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x4f4c27
push eax
call esi
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x4f4c31
push eax
call esi
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x4f4c3f
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov al, byte [ebp - 0x5d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005b168a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret