Function at 0x48d970
Capabilities:
Check for time delay via gettickcount
Check http status code
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1078
call fcn.005514a0
mov eax, dword [0x60f074]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, ecx
mov dword [ebp - 0x1074], esi
mov eax, dword [edi + 0x26d8]
mov ebx, dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi + 0x26cc]
mov dword [edi + 0x26d0], eax
mov eax, dword [ebx + 0x20]
mov dword [ebx + 0x2c], 0
cmp dword [eax + 4], 1
je 0x48df8b
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x48da16
lea ecx, [ebp - 0x1070]
mov dword [ebp - 0x1068], 0
push ecx
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x1070], 0
push ecx
lea ecx, [ebp - 0x1068]
mov dword [ebp - 0x106c], 4
push ecx
push 0x20000013
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48da16
mov eax, dword [ebp - 0x1068]
jmp 0x48da18
xor eax, eax
mov dword [edi + 0x26c8], eax
mov ecx, dword [ebx + 0x20]
test ecx, ecx
je 0x48da31
mov dword [ecx + 0x2450], eax
mov eax, dword [edi + 0x26c8]
cmp eax, 0xc8
jne 0x48de40
cmp dword [ebx + 0x24], 0
jne 0x48daa4
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x48da8e
lea edx, [ebp - 0x106c]
mov dword [ebp - 0x1068], 0x208
push edx
lea edx, [ebp - 0x1068]
mov dword [ebp - 0x106c], 0
push edx
lea ecx, [edi + 0x62898]
push ecx
push 0x2f
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48da8e
lea ecx, [edi + 0x62898]
call fcn.00490000
test eax, eax
jne 0x48daa4
push 0x208
lea eax, [edi + 0x62898]
push 0
push eax
call fcn.0056f6e0
add esp, 0xc
push ebx
mov ecx, edi
call fcn.0048f3a0
cmp dword [ebx + 0x1c], 0
je 0x48dbb9
push 0x208
lea eax, [ebp - 0x214]
push 0
push eax
call fcn.0056f6e0
add esp, 0xc
mov dword [ebp - 0x1068], 0x208
cmp dword [edi + 0x5d100], 0xffffffff
mov dword [ebp - 0x1070], 0
jne 0x48daf6
cmp dword [edi + 0x5d104], 0xffffffff
je 0x48dbb9
cmp dword [edi + 0x2480], 0
jne 0x48dbb9
lea eax, [ebp - 0x1070]
push eax
lea eax, [ebp - 0x1068]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x12
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48dbb9
mov ecx, str.HTTP_1.1
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48db5c
test dx, dx
je 0x48db58
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48db5c
add eax, 4
add ecx, 4
test dx, dx
jne 0x48db36
xor eax, eax
jmp 0x48db61
sbb eax, eax
or eax, 1
test eax, eax
jne 0x48dbb9
push 0x208
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.0056f6e0
add esp, 0xc
mov dword [ebp - 0x1068], 0x208
lea eax, [ebp - 0x1070]
mov dword [ebp - 0x1070], 0
push eax
lea eax, [ebp - 0x1068]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x2a
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48dbb9
mov dword [ebx + 0x30], 1
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x48dc20
cmp dword [edi + 0x62cb0], 0
jne 0x48dc20
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x106c], 0
push ecx
lea ecx, [ebp - 0x1068]
mov dword [ebp - 0x1068], 0x10
push ecx
lea ecx, [ebp - 0x1064]
push ecx
push 0x4000000b
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48dc20
lea eax, [edi + 0x62ca8]
push eax
lea eax, [ebp - 0x1064]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [edi + 0x62cb0], 1
mov eax, dword [ebx + 0x20]
cmp dword [eax + 4], 1
je 0x48dc5d
lea eax, [ebp - 0x106c]
mov dword [ebp - 0x106c], 0
push eax
lea eax, [ebp - 0x1068]
mov dword [ebp - 0x1068], 0x206
push eax
lea eax, [edi + 0x62aa0]
push eax
push 1
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
cmp dword [edi + 0x5d100], eax
jne 0x48de40
cmp dword [edi + 0x5d104], edx
jne 0x48de40
cmp dword [edi + 0x2690], 0
je 0x48dc8e
cmp dword [ebx + 0x30], 1
jne 0x48de40
mov ecx, dword [edi + 0x5d108]
mov eax, dword [edi + 0x5d10c]
test ecx, ecx
jne 0x48dca2
test eax, eax
je 0x48dcb3
cmp ecx, dword [ebx + 0x38]
jne 0x48de0b
cmp eax, edx
jne 0x48de0b
mov eax, dword [ebx + 0x30]
mov dword [edi + 0x26f0], eax
cmp dword [ebx + 0x1c], 0
je 0x48dfe3
push 0x208
lea eax, [ebp - 0x214]
mov dword [ebp - 0x106c], 0
push 0
push eax
call fcn.0056f6e0
add esp, 0xc
mov dword [ebp - 0x1068], 0x103
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x1068]
push eax
lea eax, [ebp - 0x214]
push eax
push 1
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48dfe3
mov ecx, str.application_metalinkxml
lea eax, [ebp - 0x214]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48dd49
test dx, dx
je 0x48dd45
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48dd49
add eax, 4
add ecx, 4
test dx, dx
jne 0x48dd23
xor eax, eax
jmp 0x48dd4e
sbb eax, eax
or eax, 1
test eax, eax
jne 0x48dfe3
mov dword [edi + 0x247c], eax
lea esi, [edi + 0x5d120]
mov dword [edi + 0x26f0], eax
push esi
mov dword [edi + 0x2690], 1
mov dword [ebx + 0x30], eax
lea eax, [edi + 0x5d328]
push 0x5d3b70
mov dword [edi + 0x5d100], 0xffffffff
mov dword [edi + 0x5d104], 0xffffffff
push 0x103
push eax
mov dword [ebx + 0x38], 0xffffffff
mov dword [ebx + 0x3c], 0xffffffff
call fcn.0047def0
push 0x208
push 0
push esi
call fcn.0056f6e0
add esp, 0x1c
lea eax, [ebp - 0x214]
push 0x208
push 0
push eax
call fcn.0056f6e0
add esp, 0xc
lea eax, [ebp - 0x214]
push eax
push 0x103
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push 0x5d46d4
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov esi, dword [ebp - 0x1074]
jmp 0x48dfe3
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x48de1c
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.0048e9f0
push 0
mov ecx, edi
call fcn.0048cf30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
cmp dword [edi + 0x2690], 0
jne 0x48e1ad
mov eax, dword [edi + 0x26c8]
cmp eax, 0x12e
jne 0x48df41
push 0x1048
lea eax, [ebp - 0x1054]
push 0
push eax
call fcn.0056f6e0
mov eax, dword [ebx + 0x1c]
add esp, 0xc
test eax, eax
je 0x48e1c6
lea ecx, [ebp - 0x106c]
mov dword [ebp - 0x106c], 0
push ecx
lea ecx, [ebp - 0x1068]
mov dword [ebp - 0x1068], 0x1047
push ecx
lea ecx, [ebp - 0x1054]
push ecx
push 0x21
push eax
call dword [sym.imp.WININET.dll_HttpQueryInfoW]
test eax, eax
je 0x48e1c6
mov edx, dword [ebx + 0x20]
lea ecx, [ebp - 0x1054]
push 0
call fcn.0048c5f0
add esp, 4
test eax, eax
je 0x48e1c6
cmp dword [ebx + 0x24], 0
jne 0x48df10
push 0x1048
lea esi, [edi + 0x5f5c0]
push 0
push esi
call fcn.0056f6e0
add esp, 0xc
lea eax, [ebp - 0x1054]
push eax
push 0x5d3b70
push 0x823
push esi
call fcn.00483470
mov esi, dword [ebp - 0x1074]
add esp, 0x10
push 0
mov ecx, edi
call fcn.0048cf30
test eax, eax
je 0x48e1c6
push esi
mov ecx, edi
call fcn.0048e9f0
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
cmp eax, 0x194
jne 0x48e1ad
mov dword [edi + 0x2470], 1
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x48df67
mov dword [eax + 0x244c], 1
push esi
mov ecx, edi
call fcn.0048e9f0
push 0
mov ecx, edi
call fcn.0048cf30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
cmp dword [ebx], 0
jne 0x48e17c
mov eax, dword [ebx + 4]
test eax, eax
je 0x48e17c
push ebx
mov ecx, edi
mov dword [ebx + 0x1c], eax
call fcn.0048f3a0
mov eax, dword [edi + 0x5d100]
cmp eax, dword [ebx + 0x38]
jne 0x48e1ad
mov eax, dword [edi + 0x5d104]
cmp eax, dword [ebx + 0x3c]
jne 0x48e1ad
cmp dword [edi + 0x2690], 0
mov eax, dword [ebx + 0x30]
je 0x48dfdd
cmp eax, 1
jne 0x48e1ad
mov dword [edi + 0x26f0], eax
mov eax, dword [ebx + 0x20]
test eax, eax
je 0x48e005
cmp dword [eax + 0x2448], 0xffffffff
jne 0x48e005
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebx + 0x20]
sub eax, dword [ebx + 8]
mov dword [ecx + 0x2448], eax
push dword [ebx + 0x1c]
mov eax, dword [edi]
mov ecx, edi
push 2
call dword [eax + 4]
test eax, eax
je 0x48e1ce
mov eax, dword [edi]
mov ecx, edi
push 0
push 3
call dword [eax + 4]
test eax, eax
je 0x48e1ce
mov ecx, edi
call fcn.0048f4b0
test eax, eax
je 0x48e1c6
mov eax, dword [edi]
mov ecx, edi
push 0
push 4
call dword [eax + 4]
test eax, eax
je 0x48e1ce
cmp dword [edi + 0x26f0], 0
je 0x48e14e
mov eax, dword [edi + 0x5d100]
cmp eax, dword [edi + 0x5d110]
jne 0x48e0a1
mov eax, dword [edi + 0x5d104]
cmp eax, dword [edi + 0x5d114]
jne 0x48e0a1
push esi
mov ecx, edi
call fcn.0048e9f0
mov dword [edi + 0x5d0f8], 7
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
push 4
lea eax, [ebp - 0x106c]
mov dword [ebp - 0x106c], 0x4e20
push eax
push 6
push dword [ebx + 0x1c]
call dword [sym.imp.WININET.dll_InternetSetOptionW]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push ebx
mov ecx, edi
call fcn.0048fcd0
test eax, eax
je 0x48df21
mov eax, dword [ebx + 0x8040]
cmp dword [eax + 8], 0
jne 0x48e0f7
cmp dword [eax + 0xc], 0
jne 0x48e0f7
mov dword [eax + 4], 1
mov dword [ebx + 0x28], 8
jmp 0x48e108
push 0
push esi
mov ecx, edi
mov dword [ebx + 0x28], 4
call fcn.0048eef0
cmp dword [edi + 0x2690], 0
jne 0x48e136
mov esi, 1
cmp dword [edi + 0x2468], esi
jbe 0x48e136
nop
push 4
mov ecx, edi
call fcn.0048cf30
test eax, eax
je 0x48e136
inc esi
cmp esi, dword [edi + 0x2468]
jb 0x48e120
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x48e1ce
jmp 0x48df29
mov eax, dword [edi]
mov ecx, edi
push 0
push 5
call dword [eax + 4]
test eax, eax
je 0x48e1ce
mov dword [ebx + 0x28], 8
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00550156
mov esp, ebp
pop ebp
ret 4
push 0x5d46b4
lea eax, [ebx + 0x806c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x48e1ad
mov dword [edi + 0x26f0], 0
mov dword [ebx + 0x30], 0
mov dword [edi + 0x26d4], 0x8000000
push 1
push esi
mov ecx, edi
mov dword [ebx + 0x28], 0
call fcn.0048eef0
test eax, eax
jne 0x48df29
push esi
mov ecx, edi
call fcn.0048e9f0
mov ecx, dword [ebp - 8]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00550156
mov esp, ebp
pop ebp
ret 4