Function at 0x41849b
Capabilities:
Create directory
Delete file

Disassembly:
push 0x434
mov eax, 0x46a846
call fcn.00450951
mov eax, dword [ebp + 8]
mov esi, ecx
push str.DownloadFilesWithBITs...
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x3e0], esi
call fcn.004012e2
xor ebx, ebx
push ebx
lea eax, [ebp - 0x3e4]
push eax
push 2
mov dword [ebp - 4], ebx
call fcn.00410d56
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x3e4]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [0x4b27ec]
mov edi, 0x4b27e4
mov ecx, esi
mov dword [ebp - 0x424], 0x12
mov dword [ebp - 0x3f4], edi
mov dword [ebp - 0x418], eax
call fcn.00401522
cmp dword [ebp - 0x418], ebx
mov dword [ebp - 0x3f0], ebx
jle 0x4185e6
push dword [ebp - 0x3f0]
mov ecx, edi
call fcn.00406a88
mov esi, eax
cmp dword [esi], ebx
je 0x4185c8
mov ebx, dword [ebp - 0x414]
mov ecx, esi
call fcn.00416e9b
test eax, eax
je 0x41859d
push str.File_already_exist_and_valid:
lea ecx, [ebp - 0x3e4]
call fcn.004012e2
xor ebx, ebx
inc ebx
mov dword [ebp - 4], ebx
mov eax, dword [esi]
push 0
add eax, 8
push eax
lea eax, [ebp - 0x3e4]
push eax
push 2
call fcn.00410886
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x3e4]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov esi, dword [esi]
mov dword [esi + 0x18], ebx
jmp 0x4185c6
mov ecx, dword [ebp - 0x3e0]
mov eax, dword [ecx]
cmp dword [eax - 0xc], 0
je 0x4185b5
push 0x4903a0
call fcn.00406a25
mov esi, dword [esi]
mov ecx, dword [ebp - 0x3e0]
add esi, 4
push esi
call fcn.00401103
xor ebx, ebx
inc dword [ebp - 0x3f0]
mov eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x418]
jl 0x41852d
mov esi, dword [ebp - 0x3e0]
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x418650
push str.No_files_scheduled_for_download
lea ecx, [ebp - 0x3e4]
call fcn.004012e2
push 2
pop eax
push ebx
lea ecx, [ebp - 0x3e4]
push ecx
push eax
mov dword [ebp - 4], eax
call fcn.00410d56
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x3e4]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [ebp - 0x3d9]
push eax
push ebx
push str.AlreadyDownloaded
push str.Payload_Download_Status
mov esi, 0x4b26d8
mov byte [ebp - 0x3d9], bl
call fcn.00406bc3
push 0x12
pop eax
jmp 0x4191dd
lea eax, [ebp - 0x3d9]
push eax
push ebx
push str.Started
push str.Payload_Download_Status
mov esi, 0x4b26d8
mov byte [ebp - 0x3d9], bl
call fcn.00406bc3
mov eax, dword [ebp - 0x414]
mov eax, dword [eax + 8]
push ebx
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
cmp dword [0x4b2bec], ebx
je 0x41869a
mov dword [ebp - 0x3e8], ebx
cmp dword [0x4b2788], ebx
je 0x4186a4
mov dword [ebp - 0x3e8], 2
mov dword [ebp - 0x440], ebx
mov dword [ebp - 0x43c], ebx
xor eax, eax
lea edi, [ebp - 0x438]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0x4b2880
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x3f8], ebx
mov dword [ebp - 0x3ec], ebx
mov dword [ebp - 0x3fc], ebx
stosd dword es:[edi], eax
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x3f0], ebx
mov dword [ebp - 4], 3
call fcn.00401326
lea eax, [ebp - 0x410]
mov byte [ebp - 4], 4
push eax
lea edi, [ebp - 0x3e4]
mov dword [ebp - 0x3e4], ebx
call fcn.0041b7e7
cmp dword [ebp - 0x3e4], ebx
jne 0x41875c
call fcn.0043ce9a
push eax
lea ecx, [ebp - 0x3e0]
call fcn.00413a25
lea eax, [ebp - 0x3e0]
push eax
mov ecx, 0x4b27dc
mov byte [ebp - 4], 5
call fcn.00415729
mov edi, dword [ebp - 0x3e0]
push edi
lea eax, [ebp - 0x410]
push eax
xor eax, eax
call fcn.00406746
lea ecx, [edi - 0x10]
mov byte [ebp - 4], 4
call fcn.004017ba
push 0x40
call fcn.0043caa0
pop ecx
mov dword [ebp - 0x404], eax
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x418788
push dword [ebp - 0x410]
push eax
call fcn.0040e1de
mov edi, eax
mov dword [ebp - 0x40c], edi
jmp 0x418790
mov dword [ebp - 0x40c], ebx
mov edi, ebx
mov byte [ebp - 4], 4
cmp edi, ebx
je 0x41911c
cmp dword [edi], ebx
je 0x41911c
cmp dword [edi + 0xc], ebx
jge 0x4187e3
push str.armDownloader_mErrorCode:
lea ecx, [ebp - 0x3e0]
call fcn.004012e2
mov byte [ebp - 4], 8
push dword [edi + 0xc]
lea eax, [ebp - 0x3e0]
push eax
push 2
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e0]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [ebp - 0x440]
push eax
lea ebx, [ebp - 0x3ec]
mov ecx, edi
call fcn.0040ea30
mov esi, eax
mov dword [ebp - 0x3f0], esi
test esi, esi
jge 0x4189bd
cmp esi, 0x80200001
je 0x418847
push str.isComplete_HRESULT:
lea ecx, [ebp - 0x3e0]
call fcn.004012e2
push esi
lea eax, [ebp - 0x3e0]
push eax
push 2
mov byte [ebp - 4], 9
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e0]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [ebp - 0x418]
xor ecx, ecx
push 8
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043cacf
and dword [ebp - 0x3e0], 0
pop ecx
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3e0]
cmp eax, dword [ebp - 0x418]
jge 0x418b47
mov ecx, dword [ebp - 0x3f4]
push eax
call fcn.00406a88
mov ebx, eax
call fcn.0043ce9a
push eax
lea ecx, [ebp - 0x400]
call fcn.00413a25
mov byte [ebp - 4], 0xb
mov eax, dword [ebx]
test eax, eax
je 0x418b2a
cmp dword [eax + 0x18], 0
jne 0x418b2a
mov esi, dword [ebp - 0x414]
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0x408]
call fcn.00401326
mov byte [ebp - 4], 0xc
mov eax, dword [ebx]
add eax, 4
mov eax, dword [eax]
push dword [eax - 0xc]
lea ecx, [ebp - 0x408]
push eax
call fcn.00401163
mov eax, dword [ebx]
lea ecx, [eax + 8]
lea eax, [ebp - 0x408]
push eax
call fcn.00406b64
mov eax, dword [ebx]
add eax, 0xc
push eax
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x41c], 1
call fcn.00406b64
push 8
push dword [ebp - 0x400]
push str.https:__
call fcn.0044f5c1
add esp, 0xc
test eax, eax
jne 0x418a24
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0
je 0x418a1d
mov ebx, dword [ebx]
lea eax, [ebp - 0x400]
add ebx, 4
push eax
mov ecx, ebx
mov edx, esi
call fcn.004171b2
test eax, eax
jne 0x418a24
push str.fallback_not_available__exiting_BITs
lea ecx, [ebp - 0x3e4]
call fcn.004012e2
push 0
lea eax, [ebp - 0x3e4]
push eax
push 1
mov byte [ebp - 4], 0xd
call fcn.00410d56
mov ecx, dword [ebp - 0x3e4]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [ebp - 0x408]
add ecx, 0xfffffff0
mov dword [ebp - 0x3ec], 4
call fcn.004017ba
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x400]
add ecx, 0xfffffff0
call fcn.004017ba
jmp 0x419043
cmp dword [ebp - 0x3ec], 2
je 0x4189d3
cmp dword [ebp - 0x3ec], 1
jne 0x418847
push str.last_BITs_job_still_downloading__taking_over_ownership
lea ecx, [ebp - 0x3e4]
call fcn.004012e2
push 0
lea eax, [ebp - 0x3e4]
push eax
push 2
mov byte [ebp - 4], 0xa
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e4]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
push dword [0x4b27ec]
push edi
call fcn.0040e336
jmp 0x418bd3
mov dword [edi + 0x14], 1
mov ebx, dword [ebp - 0x408]
mov eax, dword [ebx - 0xc]
lea edi, [eax + 2]
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043cacf
mov edx, dword [ebp - 0x3fc]
pop ecx
mov ecx, dword [ebp - 0x3f8]
push ebx
lea esi, [edx + ecx*8]
push edi
push eax
mov dword [esi + 4], eax
call fcn.0044f468
add esp, 0xc
push str.Creating_BITS_job_LocalFileName:
lea ecx, [ebp - 0x420]
call fcn.004012e2
push 0
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x420]
push eax
push 2
mov byte [ebp - 4], 0xe
call fcn.00410886
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x420]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov ebx, dword [ebp - 0x400]
mov eax, dword [ebx - 0xc]
lea edi, [eax + 2]
xor ecx, ecx
push 2
pop edx
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0043cacf
pop ecx
push ebx
push edi
push eax
mov dword [esi], eax
call fcn.0044f468
add esp, 0xc
push str.Creating_BITS_job_RemoteName:
lea ecx, [ebp - 0x404]
call fcn.004012e2
push 0
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x404]
push eax
push 2
mov byte [ebp - 4], 0xf
call fcn.00410886
mov ecx, dword [ebp - 0x404]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
mov ecx, dword [ebp - 0x408]
inc dword [ebp - 0x3f8]
add ecx, 0xfffffff0
call fcn.004017ba
mov edi, dword [ebp - 0x40c]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x400]
add ecx, 0xfffffff0
call fcn.004017ba
inc dword [ebp - 0x3e0]
jmp 0x41886f
xor esi, esi
cmp dword [ebp - 0x41c], esi
je 0x419043
cmp dword [ebp - 0x3f8], esi
je 0x418bd3
push dword [ebp - 0x3e8]
mov ecx, edi
push dword [ebp - 0x3fc]
push dword [ebp - 0x3f8]
call fcn.0040e698
cmp eax, esi
mov dword [ebp - 0x3f0], eax
jge 0x418bbf
push str.downLoadFileSet___returned_error:
lea ecx, [ebp - 0x3e8]
call fcn.004012e2
push dword [ebp - 0x3f0]
lea eax, [ebp - 0x3e8]
push eax
push 1
mov byte [ebp - 4], 0x10
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e8]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
jmp 0x418bd3
cmp dword [ebp - 0x3e4], esi
je 0x418bd3
lea eax, [ebp - 0x410]
push eax
call fcn.0041b201
lea eax, [ebp - 0x440]
push eax
lea ebx, [ebp - 0x3ec]
mov ecx, edi
call fcn.0040ea30
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x3f0], esi
cmp dword [0x4b2798], ebx
jne 0x419043
mov eax, dword [ebp + 0xc]
cmp byte [eax], bl
jne 0x418cb6
cmp dword [edi + 0x14], ebx
je 0x418cb6
cmp esi, ebx
jge 0x418d67
cmp esi, 0x801901f8
ja 0x418cb6
cmp dword [ebp - 0x3ec], 1
jne 0x418cb6
cmp esi, 0x80072efd
je 0x418c42
cmp esi, 0x80072ee2
jne 0x418c9d
push str.reporting_https_payload_error
lea ecx, [ebp - 0x3e8]
call fcn.004012e2
push ebx
lea eax, [ebp - 0x3e8]
push eax
push 2
mov byte [ebp - 4], 0x11
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e8]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [ebp - 0x3d9]
push eax
push ebx
push 0x4731d4
push str.HTTPS_Failed
mov esi, 0x4b26d8
mov byte [ebp - 0x3d9], 0
call fcn.00406bc3
mov dword [ebp - 0x3ec], 4
mov dword [ebp - 0x424], 0x4d5
jmp 0x419043
cmp esi, ebx
jge 0x418d67
push str.DownloadFiles:isComplete_returns_error
lea ecx, [ebp - 0x3e8]
call fcn.004012e2
push esi
lea eax, [ebp - 0x3e8]
push eax
push 1
mov byte [ebp - 4], 0x12
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e8]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
lea ecx, [ebp - 0x3e8]
cmp esi, 0x80190194
jne 0x418d21
push str.Missing_file_on_server__HTTP_Error_404_
call fcn.004012e2
mov byte [ebp - 4], 0x13
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x223a8
mov ecx, eax
jmp 0x418d36
push str.General_Download_File_failure
call fcn.004012e2
mov byte [ebp - 4], 0x14
push 0x2240c
mov ecx, esi
lea edx, [ebp - 0x3e8]
mov ebx, 0x4b2bac
call fcn.0040f2d9
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xfffffff0
call fcn.004017ba
mov dword [ebp - 0x3ec], 4
jmp 0x419043
cmp dword [ebp - 0x3ec], 2
je 0x418e9f
cmp dword [ebp - 0x3ec], 1
je 0x418e9f
cmp dword [ebp - 0x3ec], 6
jne 0x419029
mov dword [ebp - 0x3e0], ebx
mov eax, dword [ebp - 0x3e0]
cmp eax, dword [ebp - 0x418]
jge 0x419020
mov ecx, dword [ebp - 0x3f4]
push eax
call fcn.00406a88
mov esi, eax
mov eax, dword [esi]
mov dword [ebp - 0x3e8], esi
test eax, eax
je 0x418e12
cmp dword [eax + 0x18], 0
jne 0x418e12
add eax, 4
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.004157ad
mov byte [ebp - 4], 0x18
mov ebx, dword [eax]
mov eax, dword [esi]
mov edi, dword [eax + 0x14]
mov eax, dword [eax + 8]
mov esi, eax
call fcn.00420f8b
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x414]
add ecx, 0xfffffff0
mov esi, eax
call fcn.004017ba
test esi, esi
jne 0x418e23
mov eax, dword [ebp - 0x3e8]
mov eax, dword [eax]
mov dword [eax + 0x18], 1
inc dword [ebp - 0x3e0]
mov edi, dword [ebp - 0x40c]
jmp 0x418d94
mov edi, dword [ebp - 0x3e8]
mov eax, dword [edi]
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push str.invalid_after_BITs_download:
lea ecx, [ebp - 0x41c]
call fcn.004012e2
mov byte [ebp - 4], 0x19
mov eax, dword [edi]
push esi
add eax, 8
push eax
lea eax, [ebp - 0x41c]
push eax
push 1
call fcn.00410886
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x41c]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004017ba
lea eax, [ebp - 0x3d9]
push eax
push esi
push str.Signature_Validation_Error
mov ecx, 0x4b26d8
mov byte [ebp - 0x3d9], 0
call fcn.00406c2e
mov dword [ebp - 0x3ec], 4
jmp 0x41901a
mov eax, dword [0x4b2788]
neg eax
sbb eax, eax
and eax, 0x3b6
add eax, 0x32
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x43c], ebx
ja 0x418ecb
cmp dword [ebp - 0x440], ebx
jbe 0x419020
cmp dword [ebp - 0x434], ebx
ja 0x418edf
cmp dword [ebp - 0x438], ebx
jbe 0x419020
mov ebx, dword [0x4b2bec]
test ebx, ebx
je 0x419020
cmp dword [0x4b2798], 0
jne 0x419043
mov edi, dword [ebx]
xor esi, esi
push esi
push 0x64
push dword [ebp - 0x434]
push dword [ebp - 0x438]
call fcn.004542a0
push dword [ebp - 0x43c]
push dword [ebp - 0x440]
push edx
push eax
call fcn.00459260
push eax
mov ecx, ebx
call dword [edi + 0x188]
push 0x3b8
lea eax, [ebp - 0x3d4]
push esi
push eax
mov dword [ebp - 0x3d8], esi
call fcn.0044e740
add esp, 0xc
call fcn.0043ce9a
push eax
lea ecx, [ebp - 0x3e4]
call fcn.00413a25
push str.IDS_BAL_DOWNLOADPROGRESS
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0x15
call fcn.004012e2
lea edi, [ebp - 0x3e4]
lea ecx, [ebp - 0x404]
mov esi, 0x4b26d8
mov byte [ebp - 4], 0x16
call fcn.00409ce0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x404]
add ecx, 0xfffffff0
call fcn.004017ba
push 0
push 0x64
push dword [ebp - 0x434]
push dword [ebp - 0x438]
call fcn.004542a0
push dword [ebp - 0x43c]
push dword [ebp - 0x440]
push edx
push eax
call fcn.00459260
push eax
push dword [ebp - 0x3e4]
mov eax, 0x100
lea edi, [ebp - 0x3c0]
call fcn.0041b9ad
pop ecx
pop ecx
mov eax, edi
push eax
lea ecx, [ebp - 0x420]
call fcn.004012e2
lea eax, [ebp - 0x420]
mov ecx, ebx
mov byte [ebp - 4], 0x17
call fcn.00427c79
mov ecx, dword [ebp - 0x420]
add ecx, 0xfffffff0
call fcn.004017ba
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xfffffff0
call fcn.004017ba
mov edi, dword [ebp - 0x40c]
cmp dword [0x4b2798], 0
jne 0x419043
cmp dword [ebp - 0x3ec], 2
je 0x418bd3
cmp dword [ebp - 0x3ec], 1
je 0x418bd3
cmp dword [ebp - 0x3f8], 0
je 0x419086
xor ebx, ebx
cmp ebx, dword [ebp - 0x3f8]
jge 0x419086
cmp dword [ebp - 0x3fc], 0
je 0x419083
mov eax, dword [ebp - 0x3fc]
lea esi, [eax + ebx*8]
mov eax, dword [esi + 4]
test eax, eax
je 0x419076
push eax
call fcn.0043cada
pop ecx
mov esi, dword [esi]
test esi, esi
je 0x419083
push esi
call fcn.0043cada
pop ecx
inc ebx
jmp 0x41904e
test edi, edi
je 0x4190b1
cmp dword [0x4b2798], 0
jne 0x41909c
cmp dword [ebp - 0x3ec], 4
jne 0x4190a2
push edi
call fcn.0040e95c
mov eax, dword [ebp - 0x3ec]
push edi
mov dword [edi + 0x38], eax
call fcn.00415fd9
cmp dword [ebp - 0x3fc], 0
je 0x4190c6
push dword [ebp - 0x3fc]
call fcn.0043cada
pop ecx
mov ecx, dword [ebp - 0x410]
add ecx, 0xfffffff0
call fcn.004017ba
or dword [ebp - 4], 0xffffffff
mov eax, 0x4d5
cmp dword [ebp - 0x424], eax
je 0x4191dd
cmp dword [ebp - 0x3ec], 6
lea eax, [ebp - 0x3d9]
mov byte [ebp - 0x3d9], 0
mov ecx, 0x4b26d8
push eax
jne 0x4191c8
push 0
push str.BITS_Result_Payloads
call fcn.00406c2e
xor eax, eax
jmp 0x4191dd
push str.Null_armDownloader_or_IBackgroundCopyManager__BITs_failed_with_error_code:
lea ecx, [ebp - 0x3f4]
call fcn.004012e2
mov byte [ebp - 4], 7
push dword [edi + 0xc]
lea eax, [ebp - 0x3f4]
push eax
push 1
call fcn.00410d56
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3f4]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004017ba
mov eax, dword [edi + 0xc]
lea ecx, [ebp - 0x3d9]
push ecx
push eax
push str.BITS_Result_Payloads
mov ecx, esi
mov byte [ebp - 0x3d9], bl
call fcn.00406c2e
push edi
call fcn.00415fd9
mov ecx, dword [ebp - 0x410]
add ecx, 0xfffffff0
call fcn.004017ba
jmp 0x4191d8
push dword [ebp - 0x3f0]
push str.BITS_Result_Payloads
call fcn.00406c2e
mov eax, 0x4de
call fcn.004509ad
ret 8