Function at 0x4b1f30
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1058
call fcn.00460860
mov esi, ecx
mov edi, dword [ebp + 8]
mov eax, dword [0x4ef418]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ecx + 0x26d8]
mov ecx, dword [ecx + 0x26dc]
sub ecx, eax
sar ecx, 2
cmp ecx, edi
jbe 0x4b236f
mov ebx, dword [eax + edi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x26cc]
mov dword [esi + 0x26d0], eax
mov dword [ebx + 0x2c], 0
mov eax, dword [ebx + 0x20]
cmp dword [eax + 4], 1
je 0x4b2096
push ebx
call fcn.004b32f0
mov dword [esi + 0x26c8], eax
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x4b1fb0
mov dword [ecx + 0x2450], eax
mov eax, dword [esi + 0x26c8]
cmp eax, 0xc8
jne 0x4b2044
mov ecx, esi
push ebx
call fcn.004b3350
mov ecx, esi
push ebx
call fcn.004b33e0
mov ecx, esi
push ebx
call fcn.004b34f0
mov ecx, esi
push ebx
call fcn.004b3600
mov eax, dword [ebx + 0x20]
cmp dword [eax + 4], 1
je 0x4b2010
lea eax, [ebp - 0x1058]
mov dword [eax], 0
lea ecx, [ebp - 0x105c]
mov dword [ecx], 0x206
lea edx, [esi + 0x62aa0]
push eax
push ecx
push edx
push 1
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov ecx, dword [esi + 0x5d100]
mov eax, dword [esi + 0x5d104]
mov edx, dword [ebx + 0x3c]
xor edx, eax
mov edi, dword [ebx + 0x38]
xor edi, ecx
or edi, edx
mov edi, dword [ebp + 8]
jne 0x4b2044
cmp byte [esi + 0x2690], 0
je 0x4b21b9
cmp byte [ebx + 0x30], 0
jne 0x4b21b9
cmp byte [esi + 0x2690], 0
jne 0x4b20d1
mov eax, dword [esi + 0x26c8]
cmp eax, 0x194
je 0x4b2101
cmp eax, 0x12e
jne 0x4b20d1
lea eax, [ebp - 0x1058]
push 0x1048
push 0
push eax
call fcn.00463600
add esp, 0xc
mov eax, dword [ebx + 0x1c]
test eax, eax
jne 0x4b22c7
mov ecx, esi
push edi
call fcn.004b30c0
xor ebx, ebx
jmp 0x4b20e8
cmp dword [ebx], 0
jne 0x4b20a6
mov eax, dword [ebx + 4]
test eax, eax
jne 0x4b212e
lea eax, [ebx + 0x806c]
push 0x4dd9f4
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4b20d1
xor eax, eax
mov byte [esi + 0x26f0], al
mov byte [ebx + 0x30], al
mov dword [esi + 0x26d4], 0x8000000
mov dword [ebx + 0x28], 0
mov ecx, esi
push 1
push edi
call fcn.004b31c0
mov bl, 1
test al, al
je 0x4b208a
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045bb2d
mov eax, ebx
add esp, 0x1058
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov dword [esi + 0x2470], 1
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x4b2119
mov byte [eax + 0x244c], 1
mov ecx, esi
push edi
call fcn.004b30c0
mov ecx, esi
push 0
call fcn.004b12a0
mov ebx, eax
jmp 0x4b20e8
mov dword [ebx + 0x1c], eax
mov ecx, esi
push ebx
call fcn.004b33e0
mov eax, dword [esi + 0x5d104]
xor eax, dword [ebx + 0x3c]
mov ecx, dword [esi + 0x5d100]
xor ecx, dword [ebx + 0x38]
or ecx, eax
jne 0x4b20d1
cmp byte [esi + 0x2690], 0
mov al, byte [ebx + 0x30]
je 0x4b2165
test al, al
mov al, 1
je 0x4b20d1
mov byte [esi + 0x26f0], al
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x4b218d
cmp dword [eax + 0x2448], 0xffffffff
jne 0x4b218d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 8]
mov ecx, dword [ebx + 0x20]
mov dword [ecx + 0x2448], eax
mov ecx, esi
push dword [ebx + 0x1c]
push 2
call fcn.004b3b10
test al, al
je 0x4b2092
mov ecx, esi
push 0
push 3
call fcn.004b3b10
test al, al
je 0x4b2092
jmp 0x4b237e
mov dword [ebp - 0x1064], eax
mov eax, dword [esi + 0x5d108]
mov edi, dword [esi + 0x5d10c]
mov edx, eax
or edx, edi
je 0x4b21f5
xor eax, ecx
xor edi, dword [ebp - 0x1064]
or edi, eax
je 0x4b21f5
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x4b21eb
mov byte [eax + 0x244c], 1
mov ecx, esi
push dword [ebp + 8]
jmp 0x4b211c
mov al, byte [ebx + 0x30]
mov byte [esi + 0x26f0], al
push ebx
call fcn.004b3690
test al, al
mov edi, dword [ebp + 8]
je 0x4b216b
mov byte [esi + 0x2690], 1
xor eax, eax
mov byte [esi + 0x247c], al
mov byte [esi + 0x26f0], al
mov byte [ebx + 0x30], al
xor eax, eax
dec eax
mov dword [esi + 0x5d100], eax
mov dword [esi + 0x5d104], eax
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x3c], eax
lea edi, [esi + 0x5d120]
lea eax, [esi + 0x5d328]
mov edx, 0x103
push edi
mov dword [ebp - 0x1064], edi
push 0x4d820e
push edx
push eax
call fcn.004911a0
add esp, 0x10
mov eax, 0x208
push eax
xor eax, eax
push eax
push edi
call fcn.00463600
add esp, 0xc
lea ecx, [ebp - 0x1058]
mov eax, 0x208
push eax
mov edi, dword [ebp + 8]
xor eax, eax
push eax
push ecx
call fcn.00463600
add esp, 0xc
lea eax, [ebp - 0x1058]
push eax
mov eax, 0x103
push eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebp - 0x1064]
push eax
push 0x4d8548
lea eax, [ebp - 0x1058]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
jmp 0x4b216b
lea ecx, [ebp - 0x105c]
mov dword [ecx], 0
lea edx, [ebp - 0x1060]
mov dword [edx], 0x1047
push ecx
push edx
lea ecx, [ebp - 0x1058]
push ecx
push 0x21
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x4b208a
push 0
push dword [ebx + 0x20]
lea eax, [ebp - 0x1058]
push eax
call fcn.004b0180
add esp, 0xc
test al, al
je 0x4b208a
cmp byte [ebx + 0x24], 0
jne 0x4b234f
mov ebx, edi
lea edi, [esi + 0x5f5c0]
push 0x1048
push 0
push edi
call fcn.00463600
add esp, 0xc
lea eax, [ebp - 0x1058]
push eax
push 0x4d820e
push 0x823
push edi
mov edi, ebx
call fcn.00491140
add esp, 0x10
mov ecx, esi
push 0
call fcn.004b12a0
test al, al
je 0x4b208a
mov ecx, esi
push edi
call fcn.004b30c0
mov bl, 1
jmp 0x4b20e8
push str....._third_partylibc_srcinclude_vector:1393:_assertion___n___size___failed:_vector___index_out_of_bounds_n
push 0x4d745c
call fcn.00492230
mov ecx, esi
call fcn.004b3730
test al, al
je 0x4b208a
mov ecx, esi
push 0
push 4
call fcn.004b3b10
test al, al
je 0x4b2092
cmp byte [esi + 0x26f0], 0
jne 0x4b23c5
mov ecx, esi
push 0
push 5
call fcn.004b3b10
test al, al
je 0x4b2092
mov dword [ebx + 0x28], 8
jmp 0x4b2368
mov eax, dword [esi + 0x5d104]
xor eax, dword [esi + 0x5d114]
mov ecx, dword [esi + 0x5d100]
xor ecx, dword [esi + 0x5d110]
or ecx, eax
jne 0x4b23f8
mov ecx, esi
push edi
call fcn.004b30c0
mov dword [esi + 0x5d0f8], 7
jmp 0x4b2368
lea eax, [ebp - 0x1058]
mov dword [eax], 0x4e20
push 4
push eax
push 6
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
xor eax, eax
dec eax
mov ecx, esi
push eax
push eax
push 0
push ebx
call fcn.004b1470
test al, al
je 0x4b2360
mov eax, dword [ebx + 0x8040]
mov ecx, dword [eax + 8]
or ecx, dword [eax + 0xc]
je 0x4b244a
mov dword [ebx + 0x28], 4
mov ecx, esi
push 0
push edi
call fcn.004b31c0
jmp 0x4b2455
mov byte [eax + 1], 1
mov dword [ebx + 0x28], 8
cmp byte [esi + 0x2690], 0
jne 0x4b2480
cmp dword [esi + 0x2468], 2
jb 0x4b2480
xor edi, edi
inc edi
mov ecx, esi
push 4
call fcn.004b12a0
test al, al
je 0x4b2480
inc edi
cmp edi, dword [esi + 0x2468]
jb 0x4b246a
mov ecx, esi
push 0
push 5
call fcn.004b3b10
jmp 0x4b212a