Function at 0x140001980
Capabilities:
Create http request
Delete file
Download and write a file
Move file
Read data from internet
Receive and write data from server to client
Receive data
Write file on windows

Disassembly:
mov qword [rsp + 0x20], rbp
push rdi
push r14
push r15
mov eax, 0x1270
call fcn.1400070f0
sub rsp, rax
mov rax, qword [0x14000d040]
xor rax, rsp
mov qword [rsp + 0x1260], rax
mov r14, rdx
lea rcx, [rsp + 0x50]
mov r8, rdx
xor r15d, r15d
mov edx, 0x104
mov ebp, r15d
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea r8, str..zip
mov edx, 0x104
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscat_s]
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, str.DLL_Downloader
mov edx, 1
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
je 0x140001b71
mov qword [rsp + 0x28], r15
lea rdx, str.https:__www.dropbox.com_scl_fi_btil7watac3fm175dod3b_cheat.dll_rlkeykjacp9d89cg6fnqlmk1u8hxiqstv7qrcd7sdl1
xor r9d, r9d
mov dword [rsp + 0x20], 0x80000000
xor r8d, r8d
mov qword [rsp + 0x1290], rbx
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlW]
mov rbx, rax
test rax, rax
jne 0x140001a48
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor eax, eax
jmp 0x140001b69
mov qword [rsp + 0x30], r15
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 2
mov edx, 0x40000000
mov qword [rsp + 0x12a0], rsi
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
mov rcx, rbx
cmp rax, 0xffffffffffffffff
jne 0x140001a9b
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140001b5f
lea r9, [rsp + 0x40]
mov r8d, 0x1000
lea rdx, [rsp + 0x260]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140001b96
nop dword [rax]
mov r8d, dword [rsp + 0x40]
test r8d, r8d
je 0x140001b96
lea r9, [rsp + 0x44]
mov qword [rsp + 0x20], r15
lea rdx, [rsp + 0x260]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140001b39
mov eax, dword [rsp + 0x44]
cmp dword [rsp + 0x40], eax
jne 0x140001b39
lea r9, [rsp + 0x40]
mov r8d, 0x1000
lea rdx, [rsp + 0x260]
mov rcx, rbx
mov ebp, 1
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140001ac0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140001bb5
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
mov rsi, qword [rsp + 0x12a0]
mov rbx, qword [rsp + 0x1290]
mov rcx, qword [rsp + 0x1260]
xor rcx, rsp
call fcn.140006180
mov rbp, qword [rsp + 0x12a8]
add rsp, 0x1270
pop r15
pop r14
pop rdi
ret
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test ebp, ebp
je 0x140001b54
mov rdx, r14
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x140001b54
mov eax, 1
jmp 0x140001b61