Function at 0x44ace0
Capabilities:
Get common file path
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x218
mov eax, dword [0x46ab5c]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x214], ecx
mov word [ebp - 0x210], 0
push 0x206
push 0
lea eax, [ebp - 0x20e]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.winhttp.dll
lea edx, [ebp - 0x210]
push edx
call fcn.0044b580
add esp, 8
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ecx, dword [ebp - 0x214]
mov dword [ecx + 0x60], eax
mov edx, dword [ebp - 0x214]
cmp dword [edx + 0x60], 0
je 0x44af88
push str.WinHttpOpen
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 4], eax
push str.WinHttpConnect
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 8], eax
push str.WinHttpOpenRequest
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0xc], eax
push str.WinHttpAddRequestHeaders
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x10], eax
push str.WinHttpSendRequest
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x14], eax
push str.WinHttpReceiveResponse
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x18], eax
push str.WinHttpQueryHeaders
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x1c], eax
push str.WinHttpReadData
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x20], eax
push str.WinHttpCloseHandle
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x24], eax
push str.WinHttpCrackUrl
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x28], eax
push str.WinHttpSetOption
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x2c], eax
push str.WinHttpSetTimeouts
mov eax, dword [ebp - 0x214]
mov ecx, dword [eax + 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [ebp - 0x214]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 0x214]
cmp dword [eax + 4], 0
je 0x44af70
mov ecx, dword [ebp - 0x214]
cmp dword [ecx + 0x10], 0
je 0x44af70
mov edx, dword [ebp - 0x214]
cmp dword [edx + 0x24], 0
je 0x44af70
mov eax, dword [ebp - 0x214]
cmp dword [eax + 8], 0
je 0x44af70
mov ecx, dword [ebp - 0x214]
cmp dword [ecx + 0xc], 0
je 0x44af70
mov edx, dword [ebp - 0x214]
cmp dword [edx + 0x1c], 0
je 0x44af70
mov eax, dword [ebp - 0x214]
cmp dword [eax + 0x20], 0
je 0x44af70
mov ecx, dword [ebp - 0x214]
cmp dword [ecx + 0x18], 0
je 0x44af70
mov edx, dword [ebp - 0x214]
cmp dword [edx + 0x14], 0
je 0x44af70
mov eax, dword [ebp - 0x214]
cmp dword [eax + 0x28], 0
je 0x44af70
mov ecx, dword [ebp - 0x214]
cmp dword [ecx + 0x2c], 0
je 0x44af70
mov edx, dword [ebp - 0x214]
cmp dword [edx + 0x30], 0
je 0x44af70
mov dword [ebp - 0x218], 1
jmp 0x44af7a
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x218]
mov dword [eax], ecx
mov edx, dword [ebp - 0x214]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044be2c
mov esp, ebp
pop ebp
ret