Function at 0x100129ee0
Capabilities:
Check for time delay via gettickcount
Get disk size

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x60
mov r13, rdx
mov r12, rcx
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
lea rbp, [0x100002f10]
cmp rcx, r15
je 0x100129f3a
test byte [rcx + 0x1c], 1
je 0x100129f3a
cmp byte [rcx + 0x19], 4
jb 0x100129f3a
mov rcx, qword [rcx + 0x10]
mov edx, 0x34
mov r8, rbp
call fcn.10001c7b8
mov rcx, qword [0x1001653b8]
and qword [rsp + 0xa0], 0
cmp rcx, r15
je 0x100129f6d
test byte [rcx + 0x1c], 1
je 0x100129f6d
cmp byte [rcx + 0x19], 4
jb 0x100129f6d
mov rcx, qword [rcx + 0x10]
mov edx, 0x35
mov r9, r12
mov r8, rbp
mov qword [rsp + 0x20], r13
call fcn.100059300
lea r9, [rsp + 0x58]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x50]
mov rcx, r12
xor edi, edi
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x100129f9c
mov rcx, r12
call fcn.100134ad4
mov ebx, eax
jmp 0x100129fab
mov rdi, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x50]
xor ebx, ebx
test ebx, ebx
jns 0x100129fe3
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a281
test byte [rcx + 0x1c], 1
je 0x10012a281
cmp byte [rcx + 0x19], 2
jb 0x10012a281
mov edx, 0x36
mov r9d, ebx
mov r8, rbp
jmp 0x10012a271
lea rdx, [rsp + 0xa0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
mov byte [rsp + 0x20], 1
call fcn.100129a08
mov ebx, eax
test eax, eax
jns 0x10012a032
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a281
test byte [rcx + 0x1c], 1
je 0x10012a281
cmp byte [rcx + 0x19], 2
jb 0x10012a281
mov edx, 0x37
mov r9d, eax
jmp 0x100129fdb
mov r8, qword [rsp + 0xa0]
mov rax, rdi
mov rbx, rdi
sub rax, r8
sub rax, rsi
lea rbp, [rax + r13]
sub rbx, rbp
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a09d
test byte [rcx + 0x1c], 1
je 0x10012a09d
cmp byte [rcx + 0x19], 4
jb 0x10012a09d
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
lea r8, [0x100002f10]
mov edx, 0x38
mov r9, rdi
mov qword [rsp + 0x20], rsi
call fcn.100128b50
mov rcx, qword [0x1001653b8]
cmp rbp, rdi
jb 0x10012a157
mov ebx, 0x80780030
cmp rcx, r15
je 0x10012a13c
test byte [rcx + 0x1c], 1
je 0x10012a0e2
cmp byte [rcx + 0x19], 2
jb 0x10012a0e2
mov edx, 0x39
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f10]
mov r9d, 0x80780030
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a13c
test byte [rcx + 0x1c], 1
je 0x10012a116
cmp byte [rcx + 0x19], 2
jb 0x10012a116
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f10]
mov edx, 0x3d
mov r9, r12
mov dword [rsp + 0x20], ebx
call fcn.10001daa4
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a13c
test byte [rcx + 0x1c], 1
je 0x10012a13c
cmp byte [rcx + 0x19], 4
jb 0x10012a13c
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f10]
mov edx, 0x3e
call fcn.10001c7b8
lea r11, [rsp + 0x60]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
shr rdi, 3
cmp rbx, rdi
jae 0x10012a188
mov ebx, 0x80780030
cmp rcx, r15
je 0x10012a13c
test byte [rcx + 0x1c], 1
je 0x10012a0e2
cmp byte [rcx + 0x19], 2
jb 0x10012a0e2
mov edx, 0x3a
jmp 0x10012a0c5
mov r8b, 1
mov rdx, rbx
mov rcx, r12
call fcn.10012952c
mov ebx, eax
test eax, eax
jns 0x10012a1cd
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a281
test byte [rcx + 0x1c], 1
je 0x10012a281
cmp byte [rcx + 0x19], 2
jb 0x10012a281
mov edx, 0x3b
mov r9d, eax
jmp 0x10012a26a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xa0]
mov rcx, r12
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x10012a205
mov rcx, r12
call fcn.100134ad4
mov ebx, eax
jmp 0x10012a20f
mov rsi, qword [rsp + 0xa0]
xor ebx, ebx
test ebx, ebx
js 0x10012a0db
cmp rsi, r13
ja 0x10012a27a
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x3a98
jb 0x10012a1d5
mov ebx, 0x8078005b
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a13c
test byte [rcx + 0x1c], 1
je 0x10012a0e2
cmp byte [rcx + 0x19], 2
jb 0x10012a0e2
mov edx, 0x3c
mov r9d, 0x8078005b
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x10012a116
jmp 0x10012a0e2