Function at 0x140056840
Capabilities:
Check if file exists
Create process on windows
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x14045eb18]
xor rax, rsp
mov qword [rsp + 0xc0], rax
cmp byte [rcx], 0
jne 0x1400568ab
mov ebx, edx
mov rsi, rcx
call fcn.140049190
test al, al
je 0x1400568c6
test bl, bl
je 0x14005689f
mov rcx, rsi
call fcn.14004c7d0
test al, al
je 0x14005689f
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.14016e250
mov rcx, rsi
add rsp, 0xc8
pop rbx
pop rsi
jmp fcn.140057250
mov rcx, rsi
call fcn.140054910
mov byte [rsi + 1], 1
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.14016e250
nop
add rsp, 0xc8
pop rbx
pop rsi
ret
movabs rax, 0x40c0f564ad30e472
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x70], rax
movabs rcx, 0x93ca4747c2cdda90
lea rax, [rcx - 0x52f0]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
movabs rdx, 0x719bd516c2429637
mov qword [rsp + 0x80], rdx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov r8, qword [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [r8]
movaps xmmword [rsp + 0x70], xmm0
movabs r8, 0x2fea636b037f96e
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x30], r8
movabs r8, 0xe0ab2f67aca2b3e3
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x38], r8
movabs r8, 0xf8b0847987c44a51
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x40], r8
movabs r8, 0x52af6e5cd9e6e3b6
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x48], r8
movabs r8, 0x842804a5c26d9d3b
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x50], r8
movabs r8, 0x8b7a56f4292a35b
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x58], r8
movabs r8, 0xaedb0421665e6689
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x60], r8
movabs r8, 0x8876c37d43bbb87e
mov qword [rsp + 0x80], r8
mov r9, qword [rsp + 0x80]
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x80], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x88], rcx
movabs rcx, 0x9cd5f610f7bc2f71
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rcx
movabs rcx, 0x37dc0f39b596c39a
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x98], rcx
movabs rcx, 0xe84673caa608ef1b
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa0], rcx
movabs rcx, 0x28d2cd1b62f6c234
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa8], rcx
movabs rcx, 0xaef57644023f09e5
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x28], r8
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x50], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x60], xmm3
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x70]
xor ecx, ecx
mov r9d, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.14005bba0
xor ecx, ecx
call fcn.14034c32c
int3