Function at 0x1001d9a0
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x11c
mov eax, dword [0x1010e040]
xor eax, esp
mov dword [esp + 0x118], eax
cmp dword [0x1011c810], 0x18
push esi
je 0x1001de24
xorps xmm0, xmm0
lea eax, [esp + 0x18]
movups xmmword [0x1011c810], xmm0
push eax
movq qword [0x1011c820], xmm0
mov dword [0x1011c810], 0x18
movlpd qword [esp + 0x14], xmm0
movlpd qword [esp + 0x24], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
shrd eax, ecx, 5
mov dword [esp + 0x18], eax
lea eax, [esp + 0x108]
sar ecx, 5
push eax
mov dword [esp + 0x20], ecx
call esi
lea eax, [esp + 0x10]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
rdtsc
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea eax, [esp + 0x28]
push eax
call esi
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x2c]
sbb eax, dword [esp + 0x10c]
cmp eax, dword [esp + 0x1c]
jl 0x1001da35
jg 0x1001da60
cmp ecx, dword [esp + 0x18]
jb 0x1001da35
lea eax, [esp + 0x20]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
rdtsc
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
sbb eax, dword [esp + 0x14]
shld eax, ecx, 5
mov dword [esp + 0x10], 0
shl ecx, 5
mov dword [0x1011c818], ecx
mov dword [0x1011c81c], eax
call fcn.1001d8d0
test al, al
jne 0x1001daaa
mov al, 1
jmp 0x1001dad5
lea eax, [esp + 0xc]
mov ecx, 1
push eax
push eax
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x18]
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001dace
mov al, 1
jmp 0x1001dad5
mov eax, dword [esp + 0x10]
shr eax, 0x10
mov byte [0x1011c815], al
xorps xmm0, xmm0
lea eax, [esp + 0x30]
movaps xmmword [esp + 0x30], xmm0
push eax
movaps xmmword [esp + 0x44], xmm0
mov dword [esp + 0x54], 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, byte [0x1011c815]
xor edx, edx
mov eax, dword [esp + 0x44]
div ecx
movzx ecx, byte [0x1011c815]
mov dl, al
movzx eax, dl
imul eax, ecx
mov byte [0x1011c816], dl
mov byte [0x1011c815], al
test dl, dl
jne 0x1001db34
test al, al
jne 0x1001db34
mov word [0x1011c815], 0x101
lea eax, [esp + 0xc]
mov ecx, 1
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x24]
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001db5c
xor cl, cl
jmp 0x1001db66
mov ecx, dword [esp + 0xc]
shr ecx, 4
and cl, 1
mov al, byte [0x1011c814]
lea edx, [esp + 0x10]
and al, 0xfe
or al, cl
mov ecx, 1
mov byte [0x1011c814], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001db9c
xor cl, cl
jmp 0x1001dba6
mov ecx, dword [esp + 0xc]
shr ecx, 0xf
and cl, 1
mov al, byte [0x1011c814]
lea edx, [esp + 0x10]
and al, 0xfd
add cl, cl
or al, cl
mov ecx, 1
mov byte [0x1011c814], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001dbde
xor cl, cl
jmp 0x1001dbe8
mov ecx, dword [esp + 0xc]
shr ecx, 0x10
and cl, 1
mov al, byte [0x1011c814]
lea edx, [esp + 0x10]
and al, 0xfb
shl cl, 2
or al, cl
mov ecx, 1
mov byte [0x1011c814], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001dc21
xor cl, cl
jmp 0x1001dc2b
mov ecx, dword [esp + 0xc]
shr ecx, 0x17
and cl, 1
mov al, byte [0x1011c814]
and al, 0xbf
shl cl, 6
or cl, al
lea eax, [esp + 0x6c]
push 0x98
push 0
push eax
mov byte [0x1011c814], cl
call fcn.100a2620
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea eax, [esp + 0x74]
add esp, 0xc
mov dword [esp + 0x68], 0x9c
push eax
call esi
test eax, eax
jne 0x1001dc8a
lea eax, [esp + 0x68]
mov dword [esp + 0x68], 0x94
push eax
call esi
test eax, eax
jne 0x1001dc8a
push str.IsWin98OrOlder:__Unable_to_get_OS_version_information
call fcn.1001e0b0
add esp, 4
mov eax, dword [esp + 0x78]
sub eax, 0
je 0x1001dcc8
sub eax, 1
je 0x1001dcc8
lea eax, [esp + 0xc]
mov ecx, 1
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x1c]
call fcn.1001d820
add esp, 0xc
test al, al
je 0x1001dcc8
mov ecx, dword [esp + 0xc]
shr ecx, 0x19
and cl, 1
jmp 0x1001dcca
xor cl, cl
mov al, byte [0x1011c814]
lea edx, [esp + 0x10]
and al, 0xf7
shl cl, 3
or cl, al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
mov byte [0x1011c814], cl
push eax
lea eax, [esp + 0x28]
mov ecx, 1
push eax
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001dd04
xor cl, cl
jmp 0x1001dd0e
mov ecx, dword [esp + 0xc]
shr ecx, 0x1a
and cl, 1
mov al, byte [0x1011c814]
lea edx, [esp + 0xc]
shl cl, 4
and al, 0xef
or cl, al
lea eax, [esp + 0x10]
push eax
push eax
mov byte [0x1011c814], cl
mov ecx, 0x80000000
push eax
call fcn.1001d820
add esp, 0xc
test al, al
je 0x1001dd6d
cmp dword [esp + 0xc], 0x80000000
jbe 0x1001dd6d
lea eax, [esp + 0xc]
mov ecx, 0x80000001
push eax
lea eax, [esp + 0x14]
push eax
push eax
mov edx, eax
call fcn.1001d820
add esp, 0xc
test al, al
je 0x1001dd6d
mov ecx, dword [esp + 0xc]
shr ecx, 0x1f
jmp 0x1001dd6f
xor cl, cl
mov al, byte [0x1011c814]
lea edx, [esp + 0x18]
and al, 0xdf
shl cl, 5
or cl, al
mov dword [0x1011c808], 0
lea eax, [esp + 0x10c]
mov byte [0x1011c814], cl
push eax
lea eax, [esp + 0x114]
mov byte [0x1011c80c], 0
push eax
lea eax, [esp + 0x110]
xorps xmm0, xmm0
push eax
xor ecx, ecx
movq qword [0x1011c800], xmm0
call fcn.1001d820
add esp, 0xc
test al, al
jne 0x1001ddde
movq xmm0, qword [str.Generic_x86]
mov eax, dword [0x100e5a1c]
movq qword [0x1011c800], xmm0
jmp 0x1001ddfd
mov eax, dword [esp + 0x108]
mov dword [0x1011c800], eax
mov eax, dword [esp + 0x10c]
mov dword [0x1011c804], eax
mov eax, dword [esp + 0x110]
mov dword [0x1011c808], eax
mov dword [0x1011c820], 0x1011c800
call fcn.1001d8d0
mov cl, byte [0x1011c814]
shl al, 7
and cl, 0x7f
or al, cl
mov byte [0x1011c814], al
mov ecx, dword [esp + 0x11c]
mov eax, 0x1011c810
pop esi
xor ecx, esp
call fcn.1009ee50
mov esp, ebp
pop ebp
ret