Function at 0x140030dd0
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Get file size
Get system information on windows

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x28]
sub rsp, 0x128
mov r12, rcx
xor r15d, r15d
mov qword [rsp + 0x48], r15
mov esi, r15d
mov r14d, r15d
mov edi, r15d
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r9d, dword [rbp - 0x6c]
shl r9, 0x20
mov eax, dword [rbp - 0x70]
or r9, rax
movabs rax, 0x19db1ded53e8000
sub r9, rax
movabs r13, 0xcccccccccccccccd
mov rax, r13
mul r9
mov rbx, rdx
shr rbx, 3
lea rdx, [rsp + 0x48]
mov rcx, qword [r12]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x140031434
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x140030ffa
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [rsp + 0x7c]
shl rcx, 0x20
mov eax, dword [rsp + 0x78]
or rcx, rax
movabs rax, 0x19db1ded53e8000
sub rcx, rax
mov rax, r13
mul rcx
shr rdx, 3
sub rdx, rbx
cmp rdx, 0x11e1a300
ja 0x140031493
test edi, edi
jne 0x140030ee6
mov eax, dword [0x1400cf868]
test eax, eax
jne 0x140030eda
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp - 0x38]
mov edi, 0x20
cmp eax, 1
cmova edi, r15d
cmp edi, 8
jb 0x140030fa7
cmp edi, 0x20
jae 0x140030efb
pause
jmp 0x140030fa7
jne 0x140030f8a
mov ecx, 7
call fcn.1400201f0
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x70]
call rax
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
jne 0x140030f3c
mov ecx, dword [rsp + 0x44]
dec ecx
mov eax, 0xd1b71759
mul ecx
mov eax, edx
shr eax, 0xd
jmp 0x140030f64
mov eax, dword [rsp + 0x44]
imul r8, rax, 0x5f5e100
movabs rax, 0x38d7ea4c67fff
cqo
idiv qword [rbp - 0x60]
lea rcx, [rax + 1]
lea rax, [r8 - 1]
cqo
idiv rcx
lea r14d, [rax + 1]
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x140030f84
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov qword [rbp - 0x80], rsi
jmp 0x140030fa7
mov rsi, qword [rbp - 0x80]
jmp 0x140030fa7
test r14d, r14d
jne 0x140030fc5
test dil, 1
je 0x140030ff3
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
test eax, eax
jne 0x140030fa7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
lea rdx, [rsp + 0x48]
mov rcx, qword [r12]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
je 0x140031434
jmp 0x140030e70
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x140030fe1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov qword [rbp - 0x78], rcx
jmp 0x140030fe5
mov rcx, qword [rbp - 0x78]
sub rcx, rsi
mov eax, r14d
cmp rcx, rax
jb 0x140030f95
mov r14d, r15d
mov ecx, 1
jmp 0x140030fa1
cmp rax, 1
je 0x1400314c1
mov r15d, 0x80000000
movzx r13d, byte [rbp + 0x90]
test r13b, r13b
je 0x14003101c
mov r8d, r15d
jmp 0x14003102b
movzx r8d, byte [rbp + 0x98]
sub r8d, 0x40000000
mov dword [rsp + 0x30], 0xffffffff
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
xor edi, edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.14002fa40
nop
mov r12, qword [rsp + 0x50]
mov eax, dword [r12]
nop
cmp eax, 2
je 0x140031311
lea rcx, [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [rbp - 0x74]
shl rcx, 0x20
mov eax, dword [rbp - 0x78]
or rcx, rax
movabs rax, 0x19db1ded53e8000
sub rcx, rax
movabs rax, 0xcccccccccccccccd
mul rcx
mov rbx, rdx
shr rbx, 3
mov r14d, edi
mov esi, edi
mov eax, dword [r12]
nop
cmp eax, 2
je 0x14003120b
cmp eax, 3
je 0x140031465
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov ecx, dword [rbp - 0x7c]
shl rcx, 0x20
mov eax, dword [rbp - 0x80]
or rcx, rax
movabs rax, 0x19db1ded53e8000
sub rcx, rax
movabs rax, 0xcccccccccccccccd
mul rcx
shr rdx, 3
sub rdx, rbx
cmp rdx, 0x11e1a300
ja 0x140031406
test edi, edi
jne 0x14003112e
mov eax, dword [0x1400cf868]
test eax, eax
jne 0x14003111e
lea rcx, [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [rbp - 8]
mov edi, 0x20
cmp eax, 1
mov eax, 0
cmova edi, eax
cmp edi, 8
jb 0x1400311fb
cmp edi, 0x20
jae 0x140031143
pause
jmp 0x1400311fb
jne 0x1400311d7
mov ecx, 7
call fcn.1400201f0
lea r8, [rsp + 0x44]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x68]
call rax
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
test eax, eax
jne 0x140031186
mov ecx, dword [rsp + 0x44]
dec ecx
mov eax, 0xd1b71759
mul ecx
mov esi, edx
shr esi, 0xd
inc esi
jmp 0x1400311b1
movabs rax, 0x38d7ea4c67fff
cqo
idiv qword [rbp - 0x60]
lea r8, [rax + 1]
mov ecx, dword [rsp + 0x44]
imul rax, rcx, 0x5f5e100
dec rax
cqo
idiv r8
lea rsi, [rax + 1]
lea rcx, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x1400311d0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
mov qword [rsp + 0x78], r14
jmp 0x1400311fb
mov r14, qword [rsp + 0x78]
jmp 0x1400311fb
test esi, esi
jne 0x1400313c7
test dil, 1
je 0x1400313fc
call qword [sym.imp.KERNEL32.dll_SwitchToThread]
test eax, eax
jne 0x1400311fb
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
inc edi
mov eax, dword [r12]
nop
cmp eax, 2
jne 0x1400310b5
mov rcx, qword [rsp + 0x50]
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x68], r15d
mov rbx, qword [rsp + 0x70]
mov qword [rsp + 0x70], 0xffffffffffffffff
test rcx, rcx
je 0x140031247
sub rcx, rax
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
cmp rbx, 0xffffffffffffffff
je 0x140031256
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r13b, r13b
jne 0x14003126a
movzx r15d, byte [rbp + 0x98]
sub r15d, 0x40000000
mov dword [rsp + 0x30], 0xffffffff
mov rax, qword [rbp + 0x80]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, r15d
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp - 0x58]
call fcn.14002fa40
mov rax, qword [rbp - 0x58]
mov r8, qword [rsp + 0x50]
mov qword [rbp - 0x58], r8
mov qword [rsp + 0x50], rax
mov rcx, qword [rbp - 0x50]
mov rax, qword [rsp + 0x58]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x58], rcx
mov rax, qword [rbp - 0x48]
mov r9, qword [rsp + 0x60]
mov qword [rbp - 0x48], r9
mov qword [rsp + 0x60], rax
mov edx, dword [rbp - 0x40]
mov eax, dword [rsp + 0x68]
mov dword [rbp - 0x40], eax
mov dword [rsp + 0x68], edx
mov rax, qword [rbp - 0x38]
mov rcx, qword [rsp + 0x70]
mov qword [rbp - 0x38], rcx
mov qword [rsp + 0x70], rax
test r8, r8
je 0x140031305
sub r8, r9
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rbp - 0x58], rdi
mov rcx, qword [rbp - 0x38]
cmp rcx, 0xffffffffffffffff
je 0x140031311
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, dword [rsp + 0x58]
add r8d, 0xfffffff8
mov rdx, qword [rsp + 0x50]
add rdx, 8
xor r9d, r9d
lea rcx, [rbp + 0x88]
call fcn.140034550
mov r10, qword [rbp + 0x78]
mov r8, qword [r10]
mov rax, qword [rsp + 0x50]
mov qword [r10], rax
mov qword [rsp + 0x50], r8
mov rcx, qword [r10 + 8]
mov rax, qword [rsp + 0x58]
mov qword [r10 + 8], rax
mov qword [rsp + 0x58], rcx
mov r9, qword [r10 + 0x10]
mov rax, qword [rsp + 0x60]
mov qword [r10 + 0x10], rax
mov qword [rsp + 0x60], r9
mov edx, dword [r10 + 0x18]
mov eax, dword [rsp + 0x68]
mov dword [r10 + 0x18], eax
mov dword [rsp + 0x68], edx
mov rcx, qword [r10 + 0x20]
mov rax, qword [rsp + 0x70]
mov qword [r10 + 0x20], rax
mov qword [rsp + 0x70], rcx
test r8, r8
je 0x1400313a7
sub r8, r9
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rsp + 0x50], rdi
mov rcx, qword [rsp + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x1400313b3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x128
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
test eax, eax
jne 0x1400313e5
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov qword [rsp + 0x48], rcx
jmp 0x1400313ea
mov rcx, qword [rsp + 0x48]
sub rcx, r14
mov eax, esi
cmp rcx, rax
jb 0x1400311e9
xor eax, eax
mov esi, eax
mov ecx, 1
jmp 0x1400311f5
mov edx, 0x13
lea rcx, [rbp + 0x70]
call fcn.140017660
mov rdx, rax
xor r8d, r8d
lea rcx, [rbp - 0x28]
call fcn.140017790
lea rdx, [0x1400c7d30]
lea rcx, [rbp - 0x28]
call fcn.140067efc
nop
call sub.KERNEL32.dll_GetLastError
mov edx, eax
lea rcx, [rbp + 0x70]
call fcn.140017620
xor r8d, r8d
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x28]
call fcn.140017790
lea rdx, [0x1400c7d30]
lea rcx, [rbp - 0x28]
call fcn.140067efc
nop
mov edx, 0x13
lea rcx, [rbp + 0x70]
call fcn.140017660
mov rdx, rax
xor r8d, r8d
lea rcx, [rbp - 0x28]
call fcn.140017790
lea rdx, [0x1400c7d30]
lea rcx, [rbp - 0x28]
call fcn.140067efc
nop
mov edx, 0x13
lea rcx, [rbp + 0x70]
call fcn.140017660
mov rdx, rax
xor r8d, r8d
lea rcx, [rbp - 0x28]
call fcn.140017790
lea rdx, [0x1400c7d30]
lea rcx, [rbp - 0x28]
call fcn.140067efc
int3
mov edx, 0x13
lea rcx, [rbp + 0x70]
call fcn.140017660
mov rdx, rax
xor r8d, r8d
lea rcx, [rbp - 0x28]
call fcn.140017790
lea rdx, [0x1400c7d30]
lea rcx, [rbp - 0x28]
call fcn.140067efc
int3