Function at 0x102f250
Capabilities:
Check for time delay via gettickcount
Read file via mapping

Disassembly:
mov dword [rsp + 8], ecx
push rdi
sub rsp, 0x270
mov rax, qword [0x010657f0]
xor rax, rsp
mov qword [rsp + 0x268], rax
movzx eax, word [0x01001c38]
mov word [rsp + 0x50], ax
lea rax, [rsp + 0x52]
mov rdi, rax
xor eax, eax
mov ecx, 0x1fe
rep stosb byte [rdi], al
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x260], 0
mov qword [rsp + 0x258], 0
mov dword [rsp + 0x250], 0
mov eax, dword [0x01067148]
mov ecx, dword [rsp + 0x280]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x280], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x260], eax
xor eax, eax
cmp eax, 1
je 0x102f57d
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x01065ba0]
call qword [0x01068178]
test eax, eax
jne 0x102f33e
cmp dword [0x010679c0], 0
je 0x102f331
cmp dword [0x01067484], 0
je 0x102f331
lea rdx, [0x010076f0]
lea rcx, [0x01001b70]
call qword [sym.imp.MSVCR80.dll_wprintf]
lea rcx, [0x01065ba0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x010679c0], 0
je 0x102f364
cmp dword [0x01067484], 0
je 0x102f364
lea rdx, [0x010076f0]
lea rcx, [0x01001b38]
call qword [sym.imp.MSVCR80.dll_wprintf]
cmp dword [0x01068558], 0
jne 0x102f3a5
lea rcx, [0x01065ba0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x010679c0], 0
je 0x102f3a0
cmp dword [0x01067484], 0
je 0x102f3a0
lea rdx, [0x010076f0]
lea rcx, [0x01001b00]
call qword [sym.imp.MSVCR80.dll_wprintf]
jmp 0x102f57d
lea rcx, [0x01065ba0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x010679c0], 0
je 0x102f3d8
cmp dword [0x01067484], 0
je 0x102f3d8
lea rdx, [0x010076f0]
lea rcx, [0x01001b00]
call qword [sym.imp.MSVCR80.dll_wprintf]
cmp dword [rsp + 0x280], 0
je 0x102f578
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [rsp + 0x260]
cdq
mov ecx, 0x3e8
idiv ecx
mov ecx, eax
call sub.MSVCR80.dll_abs
cmp eax, dword [rsp + 0x280]
jl 0x102f578
mov eax, dword [rsp + 0x280]
mov dword [rsp + 0x20], eax
mov r9d, dword [0x01068558]
mov r8d, pe_nt_image_headers64
xor edx, edx
mov ecx, 1
call fcn.01033fa0
mov dword [0x010679dc], 1
lea rcx, [0x01065ba0]
call qword [0x01068178]
test eax, eax
jne 0x102f481
cmp dword [0x010679c0], 0
je 0x102f474
cmp dword [0x01067484], 0
je 0x102f474
lea rdx, [0x010076f0]
lea rcx, [0x01001b70]
call qword [sym.imp.MSVCR80.dll_wprintf]
lea rcx, [0x01065ba0]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x010679c0], 0
je 0x102f4a7
cmp dword [0x01067484], 0
je 0x102f4a7
lea rdx, [0x010076f0]
lea rcx, [0x01001b38]
call qword [sym.imp.MSVCR80.dll_wprintf]
cmp dword [0x01065c54], 0
je 0x102f539
mov dword [rsp + 0x250], 0
jmp 0x102f4d2
mov eax, dword [rsp + 0x250]
add eax, 1
mov dword [rsp + 0x250], eax
mov eax, dword [0x01065c54]
cmp dword [rsp + 0x250], eax
jge 0x102f539
mov edx, dword [rsp + 0x250]
lea rcx, [0x01065c48]
call qword [sym.imp.SQLSVC.dll_SHRecMemLock]
mov qword [rsp + 0x258], rax
cmp qword [rsp + 0x258], 0
je 0x102f537
mov rax, qword [rsp + 0x258]
add rax, 4
mov rcx, qword [rsp + 0x258]
mov ecx, dword [rcx]
mov dword [rsp + 0x20], ecx
mov r9, rax
mov r8d, 0x137
xor edx, edx
mov ecx, 1
call fcn.01033fa0
jmp 0x102f4c1
mov dword [0x0106855c], 0
lea rcx, [0x01065ba0]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x010679c0], 0
je 0x102f576
cmp dword [0x01067484], 0
je 0x102f576
lea rdx, [0x010076f0]
lea rcx, [0x01001b00]
call qword [sym.imp.MSVCR80.dll_wprintf]
jmp 0x102f57d
jmp 0x102f2e4
xor edx, edx
mov rcx, qword [0x01067958]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x102f61c
mov r9d, 1
lea r8, [0x010076b0]
mov edx, 0x100
lea rcx, [rsp + 0x50]
call fcn.010158f0
lea r8, [rsp + 0x50]
xor edx, edx
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
je 0x102f61c
mov qword [rsp + 0x20], 4
xor r9d, r9d
xor r8d, r8d
mov edx, 2
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x102f611
mov rax, qword [rsp + 0x38]
mov dword [rax], 1
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [0x01067e28], 0
je 0x102f633
mov rcx, qword [0x01067e28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x268]
xor rcx, rsp
call fcn.010588f0
add rsp, 0x270
pop rdi
ret