Function at 0x44db30
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Reference http user-agent string
Set http header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x474d88
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x4934d0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x19], 0
cmp dword [ebp - 0x14], 0
je 0x44dd1a
push 0
push 0x50
push str.map.baidu.com
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov dword [ebp - 0x20], eax
push 0
push 0
push 0
push 0
push str._qtipLocation
push 0x47d334
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x44dd1a
push 0x20000000
push 0xffffffffffffffff
push str.Cache_Control:_max_age0
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
push str.Upgrade_Insecure_Requests:_1
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
push str.User_Agent:_Mozilla_5.0__Windows_NT_6.1__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_75.0.3770.142_Safari_537.36
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
push str.Accept:_text_html_application_xhtmlxml_application_xml_q0.9_image_webp_image_apng___q0.8_application_signed_exchange_vb3
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
push str.Accept_Language:_zh_CN_zh_q0.9
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0x20000000
push 0xffffffffffffffff
lea ecx, [ebp + 8]
call fcn.0040de90
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
push 0
push 0
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x44dd1a
push 0
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x44dd1a
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x44dd1a
cmp dword [ebp - 0x24], 0
jne 0x44dcac
jmp 0x44dd1a
mov eax, dword [ebp - 0x24]
add eax, 1
push eax
call fcn.004547a6
add esp, 4
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x2c]
push eax
call fcn.00458400
add esp, 0xc
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x44dd03
mov edx, dword [ebp - 0x2c]
push edx
mov ecx, dword [ebp + 0x24]
call fcn.00405990
mov byte [ebp - 0x19], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.00454e4f
add esp, 4
jmp 0x44dc92
cmp dword [ebp - 0x18], 0
je 0x44dd2a
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x20], 0
je 0x44dd3a
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [ebp - 0x14], 0
je 0x44dd4a
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dl, byte [ebp - 0x19]
mov byte [ebp - 0x35], dl
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.0040de50
mov al, byte [ebp - 0x35]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret