Function at 0x100129f84
Capabilities:
Check for time delay via gettickcount
Get disk size

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x60
mov r13, rdx
mov r12, rcx
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
lea rbp, [0x100002ed0]
cmp rcx, r15
je 0x100129fde
test byte [rcx + 0x1c], 1
je 0x100129fde
cmp byte [rcx + 0x19], 4
jb 0x100129fde
mov rcx, qword [rcx + 0x10]
mov edx, 0x34
mov r8, rbp
call fcn.10001c854
mov rcx, qword [0x1001653b8]
and qword [rsp + 0xa0], 0
cmp rcx, r15
je 0x10012a011
test byte [rcx + 0x1c], 1
je 0x10012a011
cmp byte [rcx + 0x19], 4
jb 0x10012a011
mov rcx, qword [rcx + 0x10]
mov edx, 0x35
mov r9, r12
mov r8, rbp
mov qword [rsp + 0x20], r13
call fcn.10001e82c
lea r9, [rsp + 0x58]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x50]
mov rcx, r12
xor edi, edi
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x10012a040
mov rcx, r12
call fcn.100134b20
mov ebx, eax
jmp 0x10012a04f
mov rdi, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x50]
xor ebx, ebx
test ebx, ebx
jns 0x10012a087
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a325
test byte [rcx + 0x1c], 1
je 0x10012a325
cmp byte [rcx + 0x19], 2
jb 0x10012a325
mov edx, 0x36
mov r9d, ebx
mov r8, rbp
jmp 0x10012a315
lea rdx, [rsp + 0xa0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
mov byte [rsp + 0x20], 1
call fcn.100129aac
mov ebx, eax
test eax, eax
jns 0x10012a0d6
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a325
test byte [rcx + 0x1c], 1
je 0x10012a325
cmp byte [rcx + 0x19], 2
jb 0x10012a325
mov edx, 0x37
mov r9d, eax
jmp 0x10012a07f
mov r8, qword [rsp + 0xa0]
mov rax, rdi
mov rbx, rdi
sub rax, r8
sub rax, rsi
lea rbp, [rax + r13]
sub rbx, rbp
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a141
test byte [rcx + 0x1c], 1
je 0x10012a141
cmp byte [rcx + 0x19], 4
jb 0x10012a141
mov rcx, qword [rcx + 0x10]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r8
lea r8, [0x100002ed0]
mov edx, 0x38
mov r9, rdi
mov qword [rsp + 0x20], rsi
call fcn.100128bf4
mov rcx, qword [0x1001653b8]
cmp rbp, rdi
jb 0x10012a1fb
mov ebx, 0x80780030
cmp rcx, r15
je 0x10012a1e0
test byte [rcx + 0x1c], 1
je 0x10012a186
cmp byte [rcx + 0x19], 2
jb 0x10012a186
mov edx, 0x39
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002ed0]
mov r9d, 0x80780030
call fcn.10001c878
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a1e0
test byte [rcx + 0x1c], 1
je 0x10012a1ba
cmp byte [rcx + 0x19], 2
jb 0x10012a1ba
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002ed0]
mov edx, 0x3d
mov r9, r12
mov dword [rsp + 0x20], ebx
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a1e0
test byte [rcx + 0x1c], 1
je 0x10012a1e0
cmp byte [rcx + 0x19], 4
jb 0x10012a1e0
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002ed0]
mov edx, 0x3e
call fcn.10001c854
lea r11, [rsp + 0x60]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
shr rdi, 3
cmp rbx, rdi
jae 0x10012a22c
mov ebx, 0x80780030
cmp rcx, r15
je 0x10012a1e0
test byte [rcx + 0x1c], 1
je 0x10012a186
cmp byte [rcx + 0x19], 2
jb 0x10012a186
mov edx, 0x3a
jmp 0x10012a169
mov r8b, 1
mov rdx, rbx
mov rcx, r12
call fcn.1001295d0
mov ebx, eax
test eax, eax
jns 0x10012a271
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a325
test byte [rcx + 0x1c], 1
je 0x10012a325
cmp byte [rcx + 0x19], 2
jb 0x10012a325
mov edx, 0x3b
mov r9d, eax
jmp 0x10012a30e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
lea r9, [rsp + 0xa8]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xa0]
mov rcx, r12
xor esi, esi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x10012a2a9
mov rcx, r12
call fcn.100134b20
mov ebx, eax
jmp 0x10012a2b3
mov rsi, qword [rsp + 0xa0]
xor ebx, ebx
test ebx, ebx
js 0x10012a17f
cmp rsi, r13
ja 0x10012a31e
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, 0x3a98
jb 0x10012a279
mov ebx, 0x8078005b
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012a1e0
test byte [rcx + 0x1c], 1
je 0x10012a186
cmp byte [rcx + 0x19], 2
jb 0x10012a186
mov edx, 0x3c
mov r9d, 0x8078005b
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x10012a1ba
jmp 0x10012a186