Function at 0x48a1cc
Capabilities:
Check for time delay via gettickcount
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x125c
call fcn.004933d0
mov eax, dword [0x4f51d0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push dword [ebp + 8]
mov esi, ecx
lea ecx, [esi + 0x26e4]
call fcn.0048438e
mov edi, dword [eax]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0x26d8]
xor ebx, ebx
mov dword [esi + 0x26dc], eax
mov eax, dword [edi + 0x20]
mov dword [edi + 0x2c], ebx
cmp dword [eax + 4], 1
je 0x48a55c
push edi
mov ecx, esi
call fcn.00483e94
mov dword [esi + 0x26d4], eax
mov ecx, dword [edi + 0x20]
cmp ecx, ebx
je 0x48a237
mov dword [ecx + 0x2450], eax
cmp dword [esi + 0x26d4], 0xc8
jne 0x48a465
push edi
mov ecx, esi
call fcn.004852ab
push edi
mov ecx, esi
call fcn.00483da5
push edi
mov ecx, esi
call fcn.004840f7
push edi
mov ecx, esi
call fcn.00483ed9
mov eax, dword [edi + 0x38]
mov edx, dword [esi + 0x5d120]
mov ecx, dword [edi + 0x3c]
cmp edx, eax
jne 0x48a465
mov eax, dword [esi + 0x5d124]
cmp eax, ecx
jne 0x48a465
xor ecx, ecx
xor eax, eax
cmp dword [esi + 0x2690], ebx
je 0x48a29e
inc eax
cmp dword [edi + 0x30], eax
sete cl
jmp 0x48a2a0
inc ecx
inc eax
cmp ecx, ebx
je 0x48a468
mov ecx, dword [esi + 0x5d128]
mov edx, dword [esi + 0x5d12c]
cmp ecx, ebx
jne 0x48a2bc
cmp edx, ebx
je 0x48a2f0
cmp ecx, dword [edi + 0x38]
jne 0x48a2cc
mov ecx, dword [esi + 0x5d12c]
cmp ecx, dword [edi + 0x3c]
je 0x48a2f0
mov edi, dword [edi + 0x20]
cmp edi, ebx
je 0x48a2d9
mov dword [edi + 0x244c], eax
push dword [ebp + 8]
mov ecx, esi
call fcn.00487224
push ebx
mov ecx, esi
call fcn.00489b22
jmp 0x48a6b2
mov eax, dword [edi + 0x30]
push edi
mov ecx, esi
mov dword [esi + 0x2714], eax
call fcn.00483f7a
test eax, eax
je 0x48a3b6
or eax, 0xffffffff
mov dword [esi + 0x2690], 1
mov dword [esi + 0x247c], ebx
mov dword [esi + 0x2714], ebx
mov dword [edi + 0x30], ebx
mov dword [esi + 0x5d120], eax
mov dword [esi + 0x5d124], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
lea eax, [esi + 0x5d140]
push eax
push 0x4d8558
lea eax, [esi + 0x5d348]
push 0x103
push eax
call fcn.0048e74d
push 0x208
lea eax, [esi + 0x5d140]
push ebx
push eax
call fcn.00492200
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push ebx
push eax
call fcn.00492200
add esp, 0x28
lea eax, [ebp - 0x20c]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [esi + 0x5d140]
push eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x4cd234
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov eax, dword [edi + 0x20]
cmp eax, ebx
je 0x48a3d8
cmp dword [eax + 0x2448], 0xffffffff
jne 0x48a3d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 8]
mov ecx, dword [edi + 0x20]
mov dword [ecx + 0x2448], eax
push dword [edi + 0x1c]
mov eax, dword [esi]
push 2
mov ecx, esi
call dword [eax + 4]
test eax, eax
je 0x48a6b0
mov eax, dword [esi]
push ebx
push 3
mov ecx, esi
call dword [eax + 4]
test eax, eax
je 0x48a6b0
mov ecx, esi
call fcn.00489e82
test eax, eax
je 0x48a6a6
mov eax, dword [esi]
push ebx
push 4
mov ecx, esi
call dword [eax + 4]
test eax, eax
je 0x48a6b0
cmp dword [esi + 0x2714], ebx
je 0x48a68c
mov eax, dword [esi + 0x5d120]
cmp eax, dword [esi + 0x5d130]
jne 0x48a5de
mov eax, dword [esi + 0x5d124]
cmp eax, dword [esi + 0x5d134]
jne 0x48a5de
push dword [ebp + 8]
mov ecx, esi
call fcn.00487224
mov dword [esi + 0x5d118], 7
jmp 0x48a486
xor eax, eax
inc eax
cmp dword [esi + 0x2690], ebx
je 0x48a48e
push eax
push dword [ebp + 8]
mov ecx, esi
mov dword [edi + 0x28], ebx
call fcn.00489dae
test eax, eax
je 0x48a6a6
xor eax, eax
inc eax
jmp 0x48a6b2
mov ecx, dword [esi + 0x26d4]
cmp ecx, 0x12e
jne 0x48a545
xor eax, eax
push 0x1046
mov word [ebp - 0x1254], ax
lea eax, [ebp - 0x1252]
push ebx
push eax
call fcn.00492200
add esp, 0xc
push 0x1048
lea eax, [ebp - 0x1254]
push eax
push edi
mov ecx, esi
call fcn.00483f3f
test eax, eax
je 0x48a6a6
push ebx
push dword [edi + 0x20]
lea eax, [ebp - 0x1254]
push eax
call fcn.00483828
add esp, 0xc
test eax, eax
je 0x48a6a6
cmp dword [edi + 0x24], ebx
jne 0x48a526
push 0x1048
lea edi, [esi + 0x5f5e0]
push ebx
push edi
call fcn.00492200
lea eax, [ebp - 0x1254]
push eax
push 0x4d8558
push 0x823
push edi
call fcn.0048e74d
add esp, 0x1c
push ebx
mov ecx, esi
call fcn.00489b22
test eax, eax
je 0x48a6a6
push dword [ebp + 8]
mov ecx, esi
call fcn.00487224
jmp 0x48a486
cmp ecx, 0x194
jne 0x48a470
mov dword [esi + 0x2470], eax
jmp 0x48a2cc
cmp dword [edi], ebx
jne 0x48a5ae
mov eax, dword [edi + 4]
cmp eax, ebx
je 0x48a5ae
push edi
mov ecx, esi
mov dword [edi + 0x1c], eax
call fcn.00483da5
mov eax, dword [esi + 0x5d120]
cmp eax, dword [edi + 0x38]
jne 0x48a5d7
mov eax, dword [esi + 0x5d124]
cmp eax, dword [edi + 0x3c]
jne 0x48a5d7
xor eax, eax
cmp dword [esi + 0x2690], ebx
je 0x48a59b
cmp dword [edi + 0x30], 1
sete al
jmp 0x48a59c
inc eax
cmp eax, ebx
je 0x48a5d7
mov eax, dword [edi + 0x30]
mov dword [esi + 0x2714], eax
jmp 0x48a3b6
push 0x4ce160
lea eax, [edi + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x48a5d7
mov dword [esi + 0x2714], ebx
mov dword [edi + 0x30], ebx
mov dword [esi + 0x26e0], 0x8000000
push 1
jmp 0x48a471
push 4
lea eax, [ebp - 0x125c]
push eax
push 6
push dword [edi + 0x1c]
mov dword [ebp - 0x125c], 0x4e20
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push edi
mov ecx, esi
call fcn.00489380
test eax, eax
je 0x48a536
mov eax, dword [edi + 0x8040]
cmp dword [eax + 8], ebx
jne 0x48a630
cmp dword [eax + 0xc], ebx
jne 0x48a630
xor ecx, ecx
inc ecx
mov dword [eax + 4], ecx
mov dword [edi + 0x28], 8
jmp 0x48a645
push ebx
push dword [ebp + 8]
mov ecx, esi
mov dword [edi + 0x28], 4
call fcn.00489dae
xor ecx, ecx
inc ecx
cmp dword [esi + 0x2690], ebx
jne 0x48a67a
lea edi, [esi + 0x2468]
mov dword [ebp - 0x1258], ecx
cmp dword [edi], ecx
jbe 0x48a67a
push 4
mov ecx, esi
call fcn.00489b22
test eax, eax
je 0x48a67a
inc dword [ebp - 0x1258]
mov eax, dword [ebp - 0x1258]
cmp eax, dword [edi]
jb 0x48a65d
mov eax, dword [esi]
push ebx
push 5
mov ecx, esi
call dword [eax + 4]
neg eax
sbb eax, eax
neg eax
jmp 0x48a6b2
mov eax, dword [esi]
push ebx
push 5
mov ecx, esi
call dword [eax + 4]
test eax, eax
je 0x48a6b0
mov dword [edi + 0x28], 8
jmp 0x48a486
push dword [ebp + 8]
mov ecx, esi
call fcn.00487224
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0048c64c
leave
ret 4