Function at 0x14004cb50
Capabilities:
Check for time delay via gettickcount
Delete file
Enumerate files on windows

Disassembly:
push rbx
push r14
sub rsp, 0x4c8
mov rbx, qword [0x1401051e0]
mov r14, rcx
movzx r8d, word [rbx]
test r8w, r8w
jne 0x14004cb8f
mov rax, qword [0x1400fcaa8]
mov dl, 1
mov dword [rax + 0x40], 0x57
call fcn.140035720
add rsp, 0x4c8
pop r14
pop rbx
ret
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x1400e7ba8]
mov eax, 0x3f
nop dword [rax]
cmp r8w, ax
je 0x14004cc0e
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
jne 0x14004cbb0
movzx r8d, word [rcx + 2]
add rcx, 2
test r8w, r8w
jne 0x14004cba0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400fcaa8]
movzx edx, bl
mov dword [rcx + 0x40], eax
mov rcx, r14
call fcn.140035720
add rsp, 0x4c8
pop r14
pop rbx
ret
xor edx, edx
mov rcx, r14
call fcn.140025290
cmp rax, 0x104
jb 0x14004cc43
mov rax, qword [0x1400fcaa8]
mov dl, 1
mov rcx, r14
mov dword [rax + 0x40], WSAStartup
call fcn.140035720
add rsp, 0x4c8
pop r14
pop rbx
ret
mov qword [rsp + 0x4e8], rsi
lea rdx, [rsp + 0x270]
mov qword [rsp + 0x4f0], rdi
mov rcx, rbx
mov qword [rsp + 0x4c0], r15
xor r15d, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14004cca4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400fcaa8]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
xor edx, edx
mov dword [rcx + 0x40], eax
mov rcx, qword [0x140100ee0]
call fcn.140001460
lea eax, [rsi + 2]
jmp 0x14004ce25
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x4e0], rbp
sub rcx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x14004ccc0
mov edx, 0x5c
lea rcx, [rsp + 0x60]
call fcn.1400a5db4
test rax, rax
je 0x14004ccfd
mov word [rax + 2], r15w
lea rcx, [rsp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x14004ccf2
jmp 0x14004cd06
mov word [rsp + 0x60], r15w
mov rax, r15
lea rbp, [rsp + 0x60]
mov ebx, 0x103
lea rbp, [rbp + rax*2]
sub rbx, rax
mov rax, qword [0x1400fcaa8]
mov dword [rax + 0x40], r15d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x1400fcaa8]
sub eax, dword [0x140105f4c]
cmp eax, dword [rcx + 0x118]
jbe 0x14004cd7a
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14004cd67
mov edx, 1
or ecx, 0xffffffff
call fcn.1400018c0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x1400fcaa8]
mov dword [0x140105f4c], eax
test byte [rsp + 0x270], 0x10
jne 0x14004cdf1
lea rdx, [rsp + 0x29c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r15w
jne 0x14004cd90
cmp rax, rbx
jbe 0x14004cda8
mov dword [rcx + 0x40], WSAStartup
jmp 0x14004cdef
lea rax, [rsp + 0x29c]
mov rdx, rbp
sub rdx, rax
lea rcx, [rsp + 0x29c]
nop
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14004cdc0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14004cdf1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400fcaa8]
mov dword [rcx + 0x40], eax
inc edi
lea rdx, [rsp + 0x270]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14004cd23
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edx, edi
mov rcx, r14
call fcn.140035800
mov rbp, qword [rsp + 0x4e0]
mov rdi, qword [rsp + 0x4f0]
mov rsi, qword [rsp + 0x4e8]
mov r15, qword [rsp + 0x4c0]
add rsp, 0x4c8
pop r14
pop rbx
ret