Function at 0x1400b20e0
Capabilities:
Check for time delay via gettickcount
Copy file
Delete file
Enumerate files on windows
Move file

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x20590
call fcn.1401354c0
sub rsp, rax
lea rdi, [rsp + 0x30]
mov ecx, 0x8158
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x205a0]
mov rax, qword [0x14031eae8]
xor rax, rsp
mov qword [rsp + 0x20588], rax
mov r8d, 0x8000
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0x205a0]
call fcn.1400b2970
mov r8d, 0x8000
lea rdx, [rsp + 0x10060]
mov rcx, qword [rsp + 0x205a8]
call fcn.1400b2970
lea rcx, [rsp + 0x40]
call fcn.1400b2a00
movzx eax, al
test eax, eax
je 0x1400b2182
lea rdx, [0x140292370]
lea rcx, [rsp + 0x40]
call fcn.1401f81b0
lea rcx, [rsp + 0x10060]
call fcn.1400b2a00
movzx eax, al
test eax, eax
je 0x1400b21aa
lea rdx, str..
lea rcx, [rsp + 0x10060]
call fcn.1401f81b0
lea rdx, [rsp + 0x202b0]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov qword [rsp + 0x20508], rax
cmp qword [rsp + 0x20508], 0xffffffffffffffff
jne 0x1400b221d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x205c0]
mov dword [rcx], eax
lea rdx, [0x14029238c]
mov rcx, qword [rsp + 0x205a0]
call fcn.140013110
test rax, rax
je 0x1400b2206
mov dword [rsp + 0x20580], 0
jmp 0x1400b2211
mov dword [rsp + 0x20580], 1
mov eax, dword [rsp + 0x20580]
jmp 0x1400b24bb
mov rax, qword [rsp + 0x205c0]
mov dword [rax], 0
mov dx, 0x5c
lea rcx, [rsp + 0x40]
call fcn.14000cc80
add rax, 2
mov qword [rsp + 0x20510], rax
mov dx, 0x5c
lea rcx, [rsp + 0x10060]
call fcn.14000cc80
add rax, 2
mov qword [rsp + 0x20518], rax
lea rax, [rsp + 0x40]
mov rcx, qword [rsp + 0x20510]
sub rcx, rax
mov rax, rcx
sar rax, 1
mov ecx, 0x8000
sub rcx, rax
mov rax, rcx
dec rax
mov qword [rsp + 0x20520], rax
mov r8d, 0x104
mov rdx, qword [rsp + 0x20518]
lea rcx, [rsp + 0x20080]
call fcn.1400ff430
mov dword [rsp + 0x20528], 0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20574], eax
mov eax, dword [0x140322198]
mov ecx, dword [rsp + 0x20574]
sub ecx, eax
mov eax, ecx
mov rcx, qword [0x14031a1e8]
cmp eax, dword [rcx + 0x88]
jbe 0x1400b232c
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x20538]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x1400b2312
mov edx, 1
mov ecx, 0xffffffff
call fcn.1400070b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x20574], eax
mov eax, dword [rsp + 0x20574]
mov dword [0x140322198], eax
mov eax, dword [rsp + 0x202b0]
and eax, 0x10
test eax, eax
je 0x1400b233f
jmp 0x1400b2488
lea rcx, [rsp + 0x202dc]
call fcn.1401ea000
cmp rax, qword [rsp + 0x20520]
jbe 0x1400b2379
mov rax, qword [rsp + 0x205c0]
mov dword [rax], reloc.WSOCK32.dll_WSAGetLastError
mov eax, dword [rsp + 0x20528]
inc eax
mov dword [rsp + 0x20528], eax
jmp 0x1400b2488
lea rdx, [rsp + 0x202dc]
mov rcx, qword [rsp + 0x20510]
call fcn.1401e8a70
mov r8, qword [rsp + 0x20518]
lea rdx, [rsp + 0x20080]
lea rcx, [rsp + 0x202dc]
call fcn.1400b24f0
movzx eax, byte [rsp + 0x205b8]
test eax, eax
je 0x1400b2425
lea rdx, [rsp + 0x10060]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x1400b2423
movzx eax, byte [rsp + 0x205b0]
test eax, eax
je 0x1400b2403
lea rcx, [rsp + 0x10060]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
je 0x1400b2403
lea rdx, [rsp + 0x10060]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
jne 0x1400b2423
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x205c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x20528]
inc eax
mov dword [rsp + 0x20528], eax
jmp 0x1400b2488
movzx eax, byte [rsp + 0x205b0]
test eax, eax
jne 0x1400b243e
mov dword [rsp + 0x20584], 1
jmp 0x1400b2449
mov dword [rsp + 0x20584], 0
mov r8d, dword [rsp + 0x20584]
lea rdx, [rsp + 0x10060]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x1400b2488
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x205c0]
mov dword [rcx], eax
mov eax, dword [rsp + 0x20528]
inc eax
mov dword [rsp + 0x20528], eax
lea rdx, [rsp + 0x202b0]
mov rcx, qword [rsp + 0x20508]
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x1400b22b4
mov rcx, qword [rsp + 0x20508]
call qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rsp + 0x20528]
mov rdi, rax
mov rcx, rsp
lea rdx, [0x140292898]
call fcn.140134a00
mov rax, rdi
mov rcx, qword [rsp + 0x20588]
xor rcx, rsp
call fcn.140135520
add rsp, 0x20590
pop rdi
ret