Function at 0x41d9d0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x465448
mov eax, dword fs:[0]
push eax
sub esp, 0x10c
mov eax, dword [0x483068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x118], esi
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 0
call fcn.0041f060
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41da3a
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x28
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Downloading
mov ecx, eax
call fcn.004073d0
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x41da8d
mov edx, dword [esi]
push dword [esi + 0x10]
mov ecx, eax
call fcn.00408830
push eax
call fcn.00407a20
mov byte [ebp - 4], 0
add esp, 8
mov edx, dword [ebp - 0xfc]
cmp edx, 8
jb 0x41dae4
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41dada
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7e5
push edx
push ecx
call fcn.004290dc
add esp, 8
cmp dword [ebx + 0x30], 0
jne 0x41dcba
cmp dword [ebx + 0x48], 0
jne 0x41dcba
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpOpen]
push 0
push 0
push 0
push 4
push str.Malwarebytes_Installer
call edi
mov esi, eax
mov dword [ebp - 0x18], esi
test esi, esi
jne 0x41dd44
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp esi, 0x57
jne 0x41dc06
push 0
push 0
push 0
push 0
push str.Malwarebytes_Installer
call edi
mov esi, eax
mov dword [ebp - 0x18], esi
test esi, esi
jne 0x41dd44
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
mov esi, dword [eax + 0x10]
jb 0x41db61
mov eax, dword [eax]
push esi
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x3d
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpen:
mov ecx, eax
call fcn.004073d0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, esi
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41dd3d
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41dd33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
jmp 0x41dd33
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41dc20
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x42
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpen:
mov ecx, eax
call fcn.004073d0
push esi
mov ecx, eax
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41dd3d
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41dd33
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ef
jmp 0x41dd33
cmp dword [ebx + 0x4c], 8
lea eax, [ebx + 0x38]
jb 0x41dcc5
mov eax, dword [eax]
cmp dword [ebx + 0x34], 8
lea ecx, [ebx + 0x20]
jb 0x41dcd0
mov ecx, dword [ecx]
push 0
push eax
push ecx
push 3
push str.Malwarebytes_Installer
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov esi, eax
mov dword [ebp - 0x18], esi
test esi, esi
jne 0x41dd44
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 2
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41dd04
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x2f
jmp 0x41db8b
push edx
push ecx
call fcn.004290dc
add esp, 8
xor bl, bl
jmp 0x41e6e9
cmp byte [ebx + 4], 0
mov ecx, str.ark.mwbsys.com
push 0
push 0
mov eax, str.ark_stage.mwbsys.com
cmove eax, ecx
push eax
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov edi, eax
mov dword [ebp - 0x40], edi
mov byte [ebp - 4], 5
test edi, edi
jne 0x41de3b
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41dd8c
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x4a
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpConnect:
mov ecx, eax
call fcn.004073d0
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, edi
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41de2e
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41de24
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor bl, bl
jmp 0x41e6e2
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x3c]
call fcn.00405520
mov byte [ebp - 4], 7
lea eax, [ebx + 8]
cmp dword [ebx + 0x1c], 8
jb 0x41de59
mov eax, dword [ebx + 8]
push dword [ebx + 0x18]
lea ecx, [ebp - 0x3c]
push eax
call fcn.004053f0
cmp dword [ebp - 0x28], 8
lea eax, [ebp - 0x3c]
push 0x800000
cmovae eax, dword [ebp - 0x3c]
push 0
push 0
push 0
push eax
push 0x4781ec
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov ebx, eax
mov dword [ebp - 0x114], ebx
test ebx, ebx
jne 0x41df5f
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41deb2
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x56
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpOpenRequest:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41e383
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41df4e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
xor bl, bl
jmp 0x41e68b
mov dword [ebp - 0xf4], 0
nop dword [eax]
push 0
push 0
push 0
push 0
push 0
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x41e077
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 9
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41dfa5
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x5e
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpSendRequest:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00405610
push eax
call fcn.00407a20
mov byte [ebp - 4], 7
add esp, 4
mov edx, dword [ebp - 0xfc]
cmp edx, 8
jb 0x41e04b
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e041
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7e5
push edx
push ecx
call fcn.004290dc
add esp, 8
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp eax, 0x1e
jae 0x41e383
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [ebp - 0x114]
jmp 0x41df70
push 0
push ebx
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x41e0e5
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e09e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x6a
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpReceiveResponse:
jmp 0x41def4
push 4
push 0x1000
push 0x100000
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ebx, eax
mov dword [ebp - 0xf4], ebx
test ebx, ebx
jne 0x41e166
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e11f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x72
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_allocating_memory_for_download:
jmp 0x41def4
push 0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0x100000
push eax
push ebx
push 0
push 1
push dword [ebp - 0x114]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x41e265
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e1a6
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x78
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_on_WinHttpReceiveResponse:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00405610
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41e248
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e23e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
push 0x8000
push 0x100000
push dword [ebp - 0xf4]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor bl, bl
jmp 0x41e68b
mov ecx, ebx
mov dword [ebp - 0x24], ebx
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e270
sub ecx, edx
sub esp, 8
mov eax, esp
sar ecx, 1
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x24]
mov dword [eax], str.application
mov dword [eax + 4], 0xb
call fcn.0041e800
test al, al
jne 0x41e38a
sub esp, 8
lea ecx, [ebp - 0x24]
mov eax, esp
mov dword [eax], str.binary
mov dword [eax + 4], 6
call fcn.0041e800
test al, al
jne 0x41e38a
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e2e0
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x7f
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Invalid_content_type_received
mov ecx, eax
call fcn.004073d0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41e372
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e368
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
push 0x8000
push 0x100000
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor bl, bl
jmp 0x41e68b
push 0
call fcn.00446afc
push 0xb0
lea eax, [ebp - 0xf0]
push 0
push eax
call fcn.00440c40
add esp, 4
lea ecx, [ebp - 0xf0]
push dword [ebp - 0x118]
call fcn.0041e8a0
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
test byte [ebp + eax - 0xe4], 6
je 0x41e4d4
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e3ed
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x89
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_creating
mov ecx, eax
call fcn.004073d0
mov edx, dword [ebp - 0x118]
mov ecx, eax
call fcn.00407740
mov edx, str._on_disk__
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call fcn.00446ae9
mov ecx, ebx
push dword [eax]
call fcn.00405950
mov edx, 0x478e30
mov ecx, eax
call fcn.004073d0
push eax
call fcn.00407a20
mov edx, dword [ebp - 0xfc]
add esp, 4
cmp edx, 8
jb 0x41e4b7
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e4ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
push 0x8000
push 0x100000
push dword [ebp - 0xf4]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
xor bl, bl
jmp 0x41e680
mov byte [ebp - 0xf5], 1
nop dword [eax + eax]
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 0
push eax
push dword [ebp - 0x114]
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x41e784
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x41e56a
mov eax, 0x100000
cmp ecx, eax
cmovb eax, ecx
lea ecx, [ebp - 0x1c]
push ecx
push eax
push ebx
push dword [ebp - 0x114]
mov dword [ebp - 0x14], eax
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x41e709
push 0
call fcn.00446afc
add esp, 4
lea ecx, [ebp - 0xf0]
push 0
push dword [ebp - 0x1c]
push ebx
call fcn.0041e8f0
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + 4]
mov eax, dword [ebp + eax - 0xe4]
shr eax, 2
test al, 1
jne 0x41e575
mov ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x41e4e0
mov bl, byte [ebp - 0xf5]
jmp 0x41e65f
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e58f
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0xa5
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_writing
mov ecx, eax
call fcn.004073d0
mov edx, dword [ebp - 0x118]
mov ecx, eax
call fcn.00407740
mov edx, str._to_disk__
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call fcn.00446ae9
mov ecx, ebx
push dword [eax]
call fcn.00405950
mov edx, 0x478e30
mov ecx, eax
call fcn.004073d0
push eax
call fcn.00407a20
mov byte [ebp - 4], 0xe
add esp, 4
mov edx, dword [ebp - 0xfc]
cmp edx, 8
jb 0x41e65d
mov ecx, dword [ebp - 0x110]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e653
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
xor bl, bl
lea ecx, [ebp - 0xf0]
call fcn.0041e830
push 0x8000
push 0x100000
push dword [ebp - 0xf4]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0xf0]
call fcn.0040cda0
mov edx, dword [ebp - 0x28]
cmp edx, 8
jb 0x41e6c5
mov ecx, dword [ebp - 0x3c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e6bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ea
push edx
push ecx
call fcn.004290dc
add esp, 8
xor eax, eax
mov dword [ebp - 0x2c], 0
push edi
mov edi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
call edi
test esi, esi
je 0x41e6e9
push esi
call edi
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004290a8
mov esp, ebp
pop ebp
ret 8
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e723
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x9e
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_in_WinHttpReadData:
mov ecx, eax
call fcn.004073d0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.00405610
jmp 0x41e610
lea ecx, [ebp - 0x110]
call fcn.0041f060
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
jb 0x41e79e
mov eax, dword [eax]
push ecx
mov edx, eax
mov ecx, 0x4858e0
call fcn.00408830
add esp, 4
mov edx, str.d:jenkinsworkspace_n_sucommon_src_sucommonpermalinkdownloader.cpp
mov ecx, eax
call fcn.004073d0
mov edx, 0x476f7c
mov ecx, eax
call fcn.004073d0
push 0x95
mov ecx, eax
call fcn.00405950
mov edx, 0x4778b4
mov ecx, eax
call fcn.004073d0
mov edx, str.Error_in_WinHttpQueryDataAvailable:
jmp 0x41e768
call fcn.00443bfc
call fcn.00443bfc
call fcn.00443bfc
int3