Function at 0x140058530
Capabilities:
Check for time delay via gettickcount
Delete file
Enumerate files on windows

Disassembly:
push rbx
push r15
sub rsp, 0x4c8
mov rbx, qword [0x140138770]
mov r15, rcx
movzx r8d, word [rbx]
test r8w, r8w
jne 0x14005856f
mov rax, qword [0x14012fa58]
mov dl, 1
mov dword [rax + 0x40], 0x57
call fcn.140040b90
add rsp, 0x4c8
pop r15
pop rbx
ret
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea rdx, [0x140116778]
mov eax, 0x3f
nop dword [rax]
cmp r8w, ax
je 0x1400585ee
movzx eax, word [rdx + 2]
add rdx, 2
test ax, ax
jne 0x140058590
movzx r8d, word [rcx + 2]
add rcx, 2
test r8w, r8w
jne 0x140058580
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
sete bl
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14012fa58]
movzx edx, bl
mov dword [rcx + 0x40], eax
mov rcx, r15
call fcn.140040b90
add rsp, 0x4c8
pop r15
pop rbx
ret
xor edx, edx
mov rcx, r15
call fcn.1400303b0
cmp rax, 0x104
jb 0x140058623
mov rax, qword [0x14012fa58]
mov dl, 1
mov rcx, r15
mov dword [rax + 0x40], WSAStartup
call fcn.140040b90
add rsp, 0x4c8
pop r15
pop rbx
ret
mov qword [rsp + 0x4e0], rbp
lea rdx, [rsp + 0x270]
mov qword [rsp + 0x4f0], rdi
mov rcx, rbx
mov qword [rsp + 0x4f8], r12
xor r12d, r12d
mov edi, r12d
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x140058684
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14012fa58]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
xor edx, edx
mov dword [rcx + 0x40], eax
mov rcx, qword [0x140134400]
call fcn.140001380
lea eax, [rbp + 2]
jmp 0x14005882d
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x4e8], rsi
sub rcx, rbx
mov qword [rsp + 0x4c0], r14
nop dword [rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x1400586a0
mov edx, 0x5c
lea rcx, [rsp + 0x60]
call fcn.1400c6d90
test rax, rax
je 0x1400586dd
mov word [rax + 2], r12w
lea rcx, [rsp + 0x60]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x1400586d2
jmp 0x1400586e6
mov word [rsp + 0x60], r12w
mov rax, r12
lea r14, [rsp + 0x60]
mov ebx, 0x103
lea r14, [r14 + rax*2]
sub rbx, rax
mov rax, qword [0x14012fa58]
mov dword [rax + 0x40], r12d
mov esi, dword gs:[0x48]
nop word [rax + rax]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x14012fa58]
sub eax, dword [0x14013a19c]
cmp eax, dword [rcx + 0x118]
jbe 0x14005876f
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor r8d, r8d
lea rcx, [rsp + 0x30]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14005875c
cmp dword [0x140139538], esi
jne 0x14005875c
mov edx, 1
or ecx, 0xffffffff
call fcn.1400018b0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [0x14012fa58]
mov dword [0x14013a19c], eax
test byte [rsp + 0x270], 0x10
jne 0x1400587f1
lea rdx, [rsp + 0x29c]
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], r12w
jne 0x140058785
cmp rax, rbx
jbe 0x14005879d
mov dword [rcx + 0x40], WSAStartup
jmp 0x1400587ef
lea rax, [rsp + 0x29c]
mov rdx, r14
sub rdx, rax
lea rcx, [rsp + 0x29c]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
mov word [rdx + rcx], ax
lea rcx, [rcx + 2]
test ax, ax
jne 0x1400587c0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400587f1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14012fa58]
mov dword [rcx + 0x40], eax
inc edi
lea rdx, [rsp + 0x270]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140058710
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov edx, edi
mov rcx, r15
call fcn.140040c70
mov r14, qword [rsp + 0x4c0]
mov rsi, qword [rsp + 0x4e8]
mov rdi, qword [rsp + 0x4f0]
mov rbp, qword [rsp + 0x4e0]
mov r12, qword [rsp + 0x4f8]
add rsp, 0x4c8
pop r15
pop rbx
ret