Function at 0x410f40
Capabilities:
Initialize winhttp library
Prepare http request

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x464988
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x483068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0
push 0
push 4
mov dword [ebp - 4], 0
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpOpen]
push str.Malwarebytes_Installer
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x41112d
call ebx
mov esi, eax
cmp esi, 0x57
jne 0x411078
push 0
push 0
push 0
push 0
push str.Malwarebytes_Installer
call edi
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x41112d
lea ecx, [ebp - 0x30]
call fcn.0041f060
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x410fda
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x379
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpen:
mov ecx, eax
call fcn.004073d0
mov esi, eax
call ebx
push eax
mov ecx, esi
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x411126
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41111c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411450
jmp 0x41111c
lea ecx, [ebp - 0x30]
call fcn.0041f060
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41108f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x37e
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpen:
mov ecx, eax
call fcn.004073d0
push esi
mov ecx, eax
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x411126
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41111c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x411455
push edx
push ecx
call fcn.004290dc
add esp, 8
xor bl, bl
jmp 0x411432
push 0
push 0
push str.www.malwarebytes.com
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 3
test edi, edi
jne 0x411208
lea ecx, [ebp - 0x30]
call fcn.0041f060
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x411165
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x385
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpConnect:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
call eax
push eax
mov ecx, ebx
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x411372
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x411368
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41145a
jmp 0x411368
push 0x800000
push 0
push 0
push 0
push 0x476f0c
push 0x4781ec
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov ebx, eax
test ebx, ebx
jne 0x41128b
lea ecx, [ebp - 0x30]
call fcn.0041f060
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x411241
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x38b
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpenRequest:
jmp 0x4111aa
push 0x3e8
push 0x3e8
push 0x3e8
push 0x3e8
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x41130b
lea ecx, [ebp - 0x30]
call fcn.0041f060
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x4112c1
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x390
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpSendRequest:
jmp 0x4111aa
push 0
push 0
push 0
push 0
push 0
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
lea ecx, [ebp - 0x30]
test eax, eax
jne 0x411379
call fcn.0041f060
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x411339
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x395
jmp 0x4112ee
push edx
push ecx
call fcn.004290dc
add esp, 8
xor bl, bl
jmp 0x41141a
call fcn.0041f060
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41138d
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_a_mb4_mbsetup_srcmbsetupmbsetup.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x399
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.System_is_online
mov ecx, eax
call fcn.004073d0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp edx, 8
jb 0x411418
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41140e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41145a
push edx
push ecx
call fcn.004290dc
add esp, 8
mov bl, 1
mov eax, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test edi, edi
je 0x41142b
push edi
call eax
mov eax, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test esi, esi
je 0x411432
push esi
call eax
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004290a8
mov esp, ebp
pop ebp
ret
call fcn.00443bfc
call fcn.00443bfc
call fcn.00443bfc
int3