Function at 0x1400558a6
Capabilities:
Check for time delay via gettickcount
Delete file
Enumerate files on windows

Disassembly:
push rbx
push r14
sub rsp, 0x4c8
mov rbx, qword [0x14018e190]
mov r14, rcx
movzx r8d, word [rbx]
test r8w, r8w
jne 0x1400558e9
mov rax, qword [0x140185a58]
mov dl, 1
mov dword [rax + 0x40], 0x57
call fcn.14003be1c
add rsp, 0x4c8
pop r14
pop rbx
ret
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x14010cb68]
mov eax, 0x3f
nop dword [rax]
cmp r8w, ax
je 0x140055974
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
jne 0x14005590a
movzx r8d, word [rcx + 2]
add rcx, 2
test r8w, r8w
jne 0x1400558fa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x140185a58]
movzx edx, bl
mov dword [rcx + 0x40], eax
mov rcx, r14
call fcn.14003be1c
add rsp, 0x4c8
pop r14
pop rbx
ret
xor edx, edx
mov rcx, r14
call fcn.140029b01
cmp rax, 0x104
jb 0x1400559ad
mov rax, qword [0x140185a58]
mov dl, 1
mov rcx, r14
mov dword [rax + 0x40], 0x6f
call fcn.14003be1c
add rsp, 0x4c8
pop r14
pop rbx
ret
mov qword [rsp + 0x4e8], rsi
lea rdx, [rsp + 0x270]
mov qword [rsp + 0x4f0], rdi
mov rcx, rbx
mov qword [rsp + 0x4c0], r15
xor r15d, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140055a12
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x140185a58]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
xor edx, edx
mov dword [rcx + 0x40], eax
mov rcx, qword [0x140189e90]
call fcn.14000128c
lea eax, [rsi + 2]
jmp 0x140055bc1
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x4e0], rbp
sub rcx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x140055a2e
mov edx, 0x5c
lea rcx, [rsp + 0x60]
call fcn.1400b8e8f
test rax, rax
je 0x140055a7a
mov word [rax + 2], r15w
lea rcx, [rsp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x140055a68
jmp 0x140055a83
mov word [rsp + 0x60], r15w
mov rax, r15
lea rbp, [rsp + 0x60]
mov ebx, 0x103
lea rbp, [rbp + rax*2]
sub rbx, rax
mov rax, qword [0x140185a58]
mov dword [rax + 0x40], r15d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140185a58]
sub eax, dword [0x14018eefc]
cmp eax, dword [rcx + 0x118]
jbe 0x140055aff
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x140055aec
mov edx, 1
or ecx, 0xffffffff
call fcn.14000177b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x140185a58]
mov dword [0x14018eefc], eax
test byte [rsp + 0x270], 0x10
jne 0x140055b8d
lea rdx, [rsp + 0x29c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r15w
jne 0x140055b19
cmp rax, rbx
jbe 0x140055b3c
mov dword [rcx + 0x40], 0x6f
jmp 0x140055b8b
lea rax, [rsp + 0x29c]
mov rdx, rbp
sub rdx, rax
lea rcx, [rsp + 0x29c]
nop
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x140055b54
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x140055b8d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x140185a58]
mov dword [rcx + 0x40], eax
inc edi
lea rdx, [rsp + 0x270]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140055aa0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edx, edi
mov rcx, r14
call fcn.14003bf10
mov rbp, qword [rsp + 0x4e0]
mov rdi, qword [rsp + 0x4f0]
mov rsi, qword [rsp + 0x4e8]
mov r15, qword [rsp + 0x4c0]
add rsp, 0x4c8
pop r14
pop rbx
ret