Function at 0x140001000
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
lea r8, str.47.76.125.98
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov esi, r15d
mov edi, r15d
mov dword [rsp + 0x88], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov rcx, rbx
add rcx, rcx
call fcn.140001618
lea r8, str.47.76.125.98
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov rbp, rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r8, str.baidu.txt
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov rcx, rbx
add rcx, rcx
call fcn.140001618
lea r8, str.baidu.txt
or r9d, 0xffffffff
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov r12, rax
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, str.WinHTTP_Example_1.0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r14, rax
test rax, rax
jne 0x1400010ff
mov rcx, rbp
call fcn.1400015d8
mov rcx, r12
call fcn.1400015d8
xor eax, eax
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r8d, 0x50
xor r9d, r9d
mov rdx, rbp
mov rcx, rax
mov qword [rsp + 0x90], r13
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r13, rax
test rax, rax
jne 0x140001144
mov rcx, rbp
call fcn.1400015d8
mov rcx, r12
call fcn.1400015d8
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
jmp 0x14000128f
mov dword [rsp + 0x30], r15d
lea rdx, [0x14000aca8]
xor r9d, r9d
mov r8, r12
mov rcx, rax
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rbx, rax
test rax, rax
jne 0x140001183
mov rcx, rbp
call fcn.1400015d8
mov rcx, r12
call fcn.1400015d8
jmp 0x1400011c0
mov qword [rsp + 0x30], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x1400011d9
mov rcx, rbp
call fcn.1400015d8
mov rcx, r12
call fcn.1400015d8
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
jmp 0x14000128f
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x140001261
nop dword [rax + rax]
lea rdx, [rsp + 0x80]
mov rcx, rbx
mov dword [rsp + 0x80], r15d
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14000125b
mov eax, dword [rsp + 0x80]
test eax, eax
je 0x14000125b
lea edx, [rax + rdi + 1]
mov rcx, rsi
call fcn.140001794
mov rsi, rax
test rax, rax
je 0x14000125b
mov r8d, dword [rsp + 0x80]
mov edx, edi
lea r9, [rsp + 0x88]
add rdx, rax
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14000125b
mov eax, dword [rsp + 0x88]
add edi, eax
test eax, eax
jne 0x1400011f0
mov eax, edi
mov byte [rax + rsi], r15b
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rbp
call fcn.1400015d8
mov rcx, r12
call fcn.1400015d8
mov rax, rsi
mov r13, qword [rsp + 0x90]
add rsp, 0x40
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret