Function at 0x1400587c0
Capabilities:
Check if file exists
Create process on windows
Delete file
Enumerate files on windows
Get file attributes
Set file attributes

Disassembly:
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x140462cc0]
xor rax, rsp
mov qword [rsp + 0xc0], rax
cmp byte [rcx], 0
jne 0x14005882b
mov ebx, edx
mov rsi, rcx
call fcn.14004b8a0
test al, al
je 0x140058846
test bl, bl
je 0x14005881f
mov rcx, rsi
call fcn.14004c010
test al, al
je 0x14005881f
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.140170e40
mov rcx, rsi
add rsp, 0xc8
pop rbx
pop rsi
jmp fcn.140057050
mov rcx, rsi
call fcn.140058b10
mov byte [rsi + 1], 1
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.140170e40
nop
add rsp, 0xc8
pop rbx
pop rsi
ret
movabs rax, 0xff0263041f821c2
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x70], rax
movabs rcx, 0xa0996c3b4e1c0a9c
lea rax, [rcx + 0x4d10]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
movabs rdx, 0x3eab06422e8a5387
mov qword [rsp + 0x80], rdx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov r8, qword [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [r8]
movaps xmmword [rsp + 0x70], xmm0
movabs r8, 0x4dce75625cff3cde
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x30], r8
movabs r8, 0xd3f8041b207363ef
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x38], r8
movabs r8, 0xdfa0e413ed6e9f1
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x40], r8
movabs r8, 0xcc22f25471f31812
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x48], r8
movabs r8, 0x6cbec3c9770b647b
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x50], r8
movabs r8, 0x5ef79aabe844c6ff
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x58], r8
movabs r8, 0xd3a890a9c6c87b99
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x60], r8
movabs r8, 0x4c0995f5e822b5d2
mov qword [rsp + 0x80], r8
mov r9, qword [rsp + 0x80]
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x80], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x88], rcx
movabs rcx, 0x699f7c284eae8cd1
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rcx
movabs rcx, 0xa95193311d83383e
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x98], rcx
movabs rcx, 0xd0b4a6136e165b
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa0], rcx
movabs rcx, 0x7e92f2dfc820a790
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa8], rcx
movabs rcx, 0xd386e2cca2a914f5
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x28], r8
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x50], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x60], xmm3
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x70]
xor ecx, ecx
mov r9d, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.14005ea60
xor ecx, ecx
call fcn.14034debc
int3