Function at 0x140001400
Capabilities:
Delete file
Download url
Receive data
Terminate process

Disassembly:
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x30
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nProcurando_por_Updates...
call fcn.140001920
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nVerificando_Banco_de_Dados...
call fcn.140001920
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140006868], 7
lea rdi, [0x140006850]
mov r8, rdi
lea rdx, [0x140006750]
cmova r8, qword [0x140006850]
cmp qword [0x140006768], 7
cmova rdx, qword [0x140006750]
xor esi, esi
xor r9d, r9d
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x14000177d
cmp qword [0x140006808], 7
lea rdx, [0x140006790]
mov qword [rsp + 0x40], rbx
lea rbx, [0x1400067f0]
mov r8, rbx
mov qword [rsp + 0x20], rsi
cmova r8, qword [0x1400067f0]
cmp qword [0x1400067a8], 7
cmova rdx, qword [0x140006790]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x14000150f
mov ecx, 0x3c8c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140006808], 7
cmova rbx, qword [0x1400067f0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str._nSuccess...
jmp 0x14000151d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nError...
call fcn.140001920
cmp qword [0x1400067c8], 7
lea rbx, [0x1400067b0]
mov r8, rbx
mov qword [rsp + 0x20], rsi
cmova r8, qword [0x1400067b0]
lea rdx, [0x1400067d0]
cmp qword [0x1400067e8], 7
cmova rdx, qword [0x1400067d0]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x14000159b
mov ecx, 0x3c8c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x1400067c8], 7
cmova rbx, qword [0x1400067b0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str._nSuccess...
jmp 0x1400015a9
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nError...
call fcn.140001920
cmp qword [0x140006788], 7
lea rbx, [0x140006770]
mov r8, rbx
mov qword [rsp + 0x20], rsi
cmova r8, qword [0x140006770]
lea rdx, [0x1400068b0]
cmp qword [0x1400068c8], 7
cmova rdx, qword [0x1400068b0]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x140001627
mov ecx, 0x3c8c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140006788], 7
cmova rbx, qword [0x140006770]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str._nSuccess...
jmp 0x140001635
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nError...
call fcn.140001920
cmp qword [0x140006848], 7
lea rbx, [0x140006830]
mov r8, rbx
mov qword [rsp + 0x20], rsi
cmova r8, qword [0x140006830]
lea rdx, [0x140006810]
cmp qword [0x140006828], 7
cmova rdx, qword [0x140006810]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x1400016b3
mov ecx, 0x3c8c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140006848], 7
cmova rbx, qword [0x140006830]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str._nSuccess...
jmp 0x1400016c1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nError...
call fcn.140001920
cmp qword [0x140006888], 7
lea rbx, [0x140006870]
mov r8, rbx
mov qword [rsp + 0x20], rsi
cmova r8, qword [0x140006870]
lea rdx, [0x140006890]
cmp qword [0x1400068a8], 7
cmova rdx, qword [0x140006890]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x14000173f
mov ecx, 0x3c8c
call qword [sym.imp.KERNEL32.dll_Sleep]
cmp qword [0x140006888], 7
cmova rbx, qword [0x140006870]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str._nSuccess...
jmp 0x14000174d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nError...
call fcn.140001920
cmp qword [0x140006868], 7
cmova rdi, qword [0x140006850]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rbx, qword [rsp + 0x40]
xor eax, eax
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rdi
ret
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nFuncoes_foram_desativadas_pelo_desenvolvedor__KultzDev_...
call fcn.140001920
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nFuncoes_foram_desativadas_pelo_desenvolvedor__KultzDev_...
call fcn.140001920
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str._nFuncoes_foram_desativadas_pelo_desenvolvedor__KultzDev_...
call fcn.140001920
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3