Function at 0x14004c560
Capabilities:
Check for time delay via gettickcount
Delete file
Enumerate files on windows

Disassembly:
push rbx
push r14
sub rsp, 0x4c8
mov rbx, qword [0x140103190]
mov r14, rcx
movzx r8d, word [rbx]
test r8w, r8w
jne 0x14004c59f
mov rax, qword [0x1400faa58]
mov dl, 1
mov dword [rax + 0x40], 0x57
call fcn.1400354c0
add rsp, 0x4c8
pop r14
pop rbx
ret
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x1400e6b48]
mov eax, 0x3f
nop dword [rax]
cmp r8w, ax
je 0x14004c61e
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
jne 0x14004c5c0
movzx r8d, word [rcx + 2]
add rcx, 2
test r8w, r8w
jne 0x14004c5b0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400faa58]
movzx edx, bl
mov dword [rcx + 0x40], eax
mov rcx, r14
call fcn.1400354c0
add rsp, 0x4c8
pop r14
pop rbx
ret
xor edx, edx
mov rcx, r14
call fcn.140025330
cmp rax, 0x104
jb 0x14004c653
mov rax, qword [0x1400faa58]
mov dl, 1
mov rcx, r14
mov dword [rax + 0x40], WSAStartup
call fcn.1400354c0
add rsp, 0x4c8
pop r14
pop rbx
ret
mov qword [rsp + 0x4e8], rsi
lea rdx, [rsp + 0x270]
mov qword [rsp + 0x4f0], rdi
mov rcx, rbx
mov qword [rsp + 0x4c0], r15
xor r15d, r15d
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14004c6b4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400faa58]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
xor edx, edx
mov dword [rcx + 0x40], eax
mov rcx, qword [0x1400fee90]
call fcn.140001280
lea eax, [rsi + 2]
jmp 0x14004c835
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x4e0], rbp
sub rcx, rbx
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x14004c6d0
mov edx, 0x5c
lea rcx, [rsp + 0x60]
call fcn.1400a595c
test rax, rax
je 0x14004c70d
mov word [rax + 2], r15w
lea rcx, [rsp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x14004c702
jmp 0x14004c716
mov word [rsp + 0x60], r15w
mov rax, r15
lea rbp, [rsp + 0x60]
mov ebx, 0x103
lea rbp, [rbp + rax*2]
sub rbx, rax
mov rax, qword [0x1400faa58]
mov dword [rax + 0x40], r15d
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x1400faa58]
sub eax, dword [0x140103efc]
cmp eax, dword [rcx + 0x118]
jbe 0x14004c78a
xor r9d, r9d
mov dword [rsp + 0x20], r15d
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14004c777
mov edx, 1
or ecx, 0xffffffff
call fcn.1400016e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x1400faa58]
mov dword [0x140103efc], eax
test byte [rsp + 0x270], 0x10
jne 0x14004c801
lea rdx, [rsp + 0x29c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r15w
jne 0x14004c7a0
cmp rax, rbx
jbe 0x14004c7b8
mov dword [rcx + 0x40], WSAStartup
jmp 0x14004c7ff
lea rax, [rsp + 0x29c]
mov rdx, rbp
sub rdx, rax
lea rcx, [rsp + 0x29c]
nop
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x14004c7d0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14004c801
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1400faa58]
mov dword [rcx + 0x40], eax
inc edi
lea rdx, [rsp + 0x270]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14004c733
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edx, edi
mov rcx, r14
call fcn.1400355a0
mov rbp, qword [rsp + 0x4e0]
mov rdi, qword [rsp + 0x4f0]
mov rsi, qword [rsp + 0x4e8]
mov r15, qword [rsp + 0x4c0]
add rsp, 0x4c8
pop r14
pop rbx
ret