Function at 0x14004ff50
Capabilities:
Check if file exists
Create process on windows
Delete file
Enumerate files on windows
Set file attributes

Disassembly:
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x140498128]
xor rax, rsp
mov qword [rsp + 0xc0], rax
cmp byte [rcx], 0
jne 0x14004ffbb
mov ebx, edx
mov rsi, rcx
call fcn.1400549c0
test al, al
je 0x14004ffd6
test bl, bl
je 0x14004ffaf
mov rcx, rsi
call fcn.1400591f0
test al, al
je 0x14004ffaf
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.1401702c0
mov rcx, rsi
add rsp, 0xc8
pop rbx
pop rsi
jmp fcn.1400597c0
mov rcx, rsi
call fcn.14005b580
mov byte [rsi + 1], 1
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.1401702c0
nop
add rsp, 0xc8
pop rbx
pop rsi
ret
movabs rax, 0xee6aa86008033642
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x70], rax
movabs rcx, 0x22c7fb3be186be1c
lea rax, [rcx + 0x2510]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x78], rax
movabs rdx, 0xdf31881267714407
mov qword [rsp + 0x80], rdx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x30], rcx
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov r8, qword [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [r8]
movaps xmmword [rsp + 0x70], xmm0
movabs r8, 0xac54fb3215042b5e
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x30], r8
movabs r8, 0x51a6931b8fe9d76f
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x38], r8
movabs r8, 0x75aa18d1de720741
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x40], r8
movabs r8, 0xa197ce74004b3392
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x48], r8
movabs r8, 0x704ec2c904698cfb
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x50], r8
movabs r8, 0x8e1b65fb2b144dbf
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x58], r8
movabs r8, 0xb151ab2964f20849
mov qword [rsp + 0x80], r8
mov r8, qword [rsp + 0x80]
mov qword [rsp + 0x60], r8
movabs r8, 0x69c1eca579489632
mov qword [rsp + 0x80], r8
mov r9, qword [rsp + 0x80]
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x80], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x88], rcx
movabs rcx, 0x11cf6ab8ae0a6261
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x90], rcx
movabs rcx, 0xc4e4af116c3b13be
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x98], rcx
movabs rcx, 0x1c20b5a6600cfedb
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa0], rcx
movabs rcx, 0xae7e0d8f0b702cd0
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xa8], rcx
movabs rcx, 0xb17fd94c00936725
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0x28], r8
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
movaps xmm0, xmmword [rsp + 0x30]
movaps xmm1, xmmword [rsp + 0x40]
movaps xmm2, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rax]
movaps xmm3, xmmword [rsp + 0x60]
movaps xmmword [rsp + 0x30], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x40], xmm1
xorps xmm2, xmmword [rax + 0x20]
movaps xmmword [rsp + 0x50], xmm2
xorps xmm3, xmmword [rax + 0x30]
movaps xmmword [rsp + 0x60], xmm3
lea rdx, [rsp + 0x30]
lea r8, [rsp + 0x70]
xor ecx, ecx
mov r9d, reloc.WS2_32.dll_recv
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.1400619d0
xor ecx, ecx
call fcn.1403697a8
int3