Function at 0x46e950
Capabilities:
Check for time delay via gettickcount
Create http request
Delete file
Download and write a file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x45c
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, 0x84000000
push edi
mov dword [esp + 0x10], ecx
nop dword [eax + eax]
mov al, byte [esi]
cmp al, 0x20
je 0x46e97a
cmp al, 9
jne 0x46e97d
inc esi
jmp 0x46e970
cmp al, 0x2a
jne 0x46e9b4
inc esi
mov ecx, esi
call fcn.00404660
mov ebx, eax
mov edi, esi
test esi, esi
je 0x46e9b4
mov dl, byte [esi]
test dl, dl
je 0x46e9b4
mov ecx, 0x4d5ff4
mov al, 0x20
nop
cmp dl, al
je 0x46e9fd
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x46e9a0
mov dl, byte [edi + 1]
inc edi
test dl, dl
jne 0x46e997
push 0
push 0
push 0
push 4
push str.AutoHotkey
call dword [sym.imp.WININET.dll_InternetOpenA]
mov edi, eax
mov dword [esp + 0x20], edi
test edi, edi
jne 0x46ea2b
mov eax, dword [0x4e498c]
test byte [eax + 0xe0], 1
jne 0x46ea0d
mov ecx, dword [0x4e7934]
push 1
push edi
push 0xffffffffffffffff
push 0x4d07c0
call fcn.0049e6b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov esi, edi
nop
mov al, byte [esi]
cmp al, 0x20
je 0x46ea0a
cmp al, 9
jne 0x46e9b4
inc esi
jmp 0x46ea00
mov ecx, dword [esp + 0x10]
push 0x4d0335
push 0
push 0x4d07c0
call fcn.00446950
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0
push ebx
push 0
push 0
push esi
push edi
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov ebx, eax
test ebx, ebx
jne 0x46ea73
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x4e498c]
test byte [eax + 0xe0], 1
jne 0x46ea0d
mov ecx, dword [0x4e7934]
push 1
push ebx
push 0xffffffffffffffff
push 0x4d07c0
call fcn.0049e6b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push 0x4db37c
push dword [ebp + 0xc]
call fcn.004ba009
add esp, 8
mov dword [esp + 0x18], eax
test eax, eax
jne 0x46eac8
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebx
call esi
push edi
call esi
mov eax, dword [0x4e498c]
test byte [eax + 0xe0], 1
jne 0x46ea0d
mov ecx, dword [0x4e7934]
push 1
push 0
push 0xffffffffffffffff
push 0x4d07c0
call fcn.0049e6b0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
lea eax, [esp + 0x68]
mov dword [esp + 0x48], 0
mov dword [esp + 0x38], eax
xorps xmm0, xmm0
mov eax, dword fs:[0x24]
mov dword [esp + 0x1c], eax
mov al, byte [esi]
movlpd qword [esp + 0x28], xmm0
movlpd qword [esp + 0x30], xmm0
movlpd qword [esp + 0x40], xmm0
mov dword [esp + 0x24], 0x28
mov dword [esp + 0x3c], 0x400
cmp al, 0x68
je 0x46ebd4
cmp al, 0x48
je 0x46ebd4
lea eax, [esp + 0x14]
push eax
push 0x400
lea eax, [esp + 0x70]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFile]
mov edi, eax
test edi, edi
je 0x46ec85
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
nop
cmp dword [esp + 0x14], 0
je 0x46ec85
call esi
mov ecx, dword [0x4e498c]
sub eax, dword [0x4ea0c4]
cmp eax, dword [ecx + 0xb8]
jbe 0x46eb98
push 0
push 0
push 0
push 0
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x46eb91
mov eax, dword [esp + 0x1c]
cmp dword [0x4e9a38], eax
jne 0x46eb91
mov edx, 1
or ecx, 0xffffffff
call fcn.00401a30
call esi
mov dword [0x4ea0c4], eax
push dword [esp + 0x18]
lea eax, [esp + 0x6c]
push 1
push dword [esp + 0x1c]
push eax
call fcn.004bae53
add esp, 0x10
lea eax, [esp + 0x14]
push eax
push 0x400
lea eax, [esp + 0x70]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFile]
mov edi, eax
test edi, edi
jne 0x46eb40
jmp 0x46ec85
push 0
push 8
lea eax, [esp + 0x2c]
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFileExA]
mov edi, eax
test edi, edi
je 0x46ec85
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [esp + 0x3c], 0
je 0x46ec85
call esi
mov ecx, dword [0x4e498c]
sub eax, dword [0x4ea0c4]
cmp eax, dword [ecx + 0xb8]
jbe 0x46ec4c
push 0
push 0
push 0
push 0
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x46ec45
mov eax, dword [esp + 0x1c]
cmp dword [0x4e9a38], eax
jne 0x46ec45
mov edx, 1
or ecx, 0xffffffff
call fcn.00401a30
call esi
mov dword [0x4ea0c4], eax
push dword [esp + 0x18]
lea eax, [esp + 0x6c]
push 1
push dword [esp + 0x44]
push eax
call fcn.004bae53
add esp, 0x10
mov dword [esp + 0x3c], 0x400
lea eax, [esp + 0x24]
push 0
push 8
push eax
push ebx
call dword [sym.imp.WININET.dll_InternetReadFileExA]
mov edi, eax
test edi, edi
jne 0x46ebf4
mov esi, dword [sym.imp.WININET.dll_InternetCloseHandle]
push ebx
call esi
push dword [esp + 0x20]
call esi
push dword [esp + 0x18]
call fcn.004babc8
add esp, 4
test edi, edi
jne 0x46ecaf
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test edi, edi
mov ecx, dword [esp + 0x10]
sete al
movzx eax, al
push eax
call fcn.004469f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8