Function at 0x5a7ec0
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions
Get cpu information
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0xfe4]
push 0xffffffffffffffff
push 0x6a00b8
mov eax, dword fs:[0]
push eax
mov eax, 0x1058
mov dword fs:[0], esp
call fcn.005b89a0
mov eax, dword [0x6f872c]
xor eax, ebp
push ebx
push edi
mov dword [ebp + 0xfd4], eax
call fcn.005a7960
test al, al
je 0x5a815a
xor eax, eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
push ebx
push ecx
push edx
xor eax, eax
cpuid
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ecx
mov eax, 1
cpuid
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x74], edx
mov eax, 0x80000000
cpuid
cmp eax, 0x80000000
jb 0x5a7f52
mov eax, 0x80000001
cpuid
mov dword [ebp - 0x6c], edx
pop ecx
pop ebx
pop edx
mov eax, dword [ebp - 0x74]
test eax, 0x800000
je 0x5a7f63
or dword [esi + 0x5c], 1
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
jns 0x5a7f6e
or dword [esi + 0x5c], 2
test eax, 0x2000000
je 0x5a7f79
or dword [esi + 0x5c], 4
test eax, 0x4000000
je 0x5a7f84
or dword [esi + 0x5c], 8
mov eax, dword [ebp - 0x5c]
mov ecx, eax
shr ecx, 8
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x50], cx
jne 0x5a7fa8
mov ecx, eax
shr ecx, 0x10
and ecx, 0xff0
mov word [esi + 0x52], cx
mov ecx, eax
shr ecx, 4
and ecx, 0xf
cmp cx, 0xf
mov word [esi + 0x54], cx
jne 0x5a7fc6
mov edx, eax
shr edx, 0xc
and edx, 0xf
mov word [esi + 0x56], dx
and eax, 0xf
mov word [esi + 0x58], ax
lea eax, [ebp - 0x3c]
lea ebx, [esi + 0x33]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a7fd6
sub eax, edx
mov edi, eax
cmp edi, 0xd
jbe 0x5a7feb
mov edi, 0xd
push edi
lea eax, [ebp - 0x3c]
push eax
push ebx
call fcn.005b87f0
add esp, 0xc
lea ecx, [ebp - 0x70]
push ecx
mov byte [edi + ebx], 0
call dword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
rdtsc
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], edx
mov edi, dword [sym.imp.kernel32.dll_QueryPerformanceCounter]
lea edx, [ebp - 0x68]
push edx
call edi
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x68]
add ecx, eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x6c]
adc eax, ecx
mov dword [ebp - 0x64], eax
lea edx, [ebp - 0x60]
push edx
call edi
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x64]
jb 0x5a8031
ja 0x5a8049
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x68]
jb 0x5a8031
rdtsc
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], edx
mov ebx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x7c]
sub edx, ebx
sbb eax, edi
xor ebx, ebx
mov dword [esi + 0x48], edx
mov dword [esi + 0x4c], eax
mov dword [ebp - 0x40], 0xf
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x54], bl
mov byte [ebp - 0x2c], bl
xor eax, eax
mov ecx, 0x3ff
lea edi, [ebp - 0x2b]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x5c]
push ecx
push 0x20019
push ebx
stosw word es:[edi], ax
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push 0x80000002
mov dword [ebp + 0xfe0], ebx
stosb byte es:[edi], al
mov dword [ebp - 0x6c], 0x1000
mov dword [ebp - 0x74], ebx
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x5a8100
lea edx, [ebp - 0x6c]
push edx
mov edx, dword [ebp - 0x5c]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x74]
push ecx
push ebx
push str.ProcessorNameString
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x5a80f6
lea eax, [ebp - 0x2c]
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a80e0
sub eax, edx
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x58]
call fcn.00405710
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
lea edx, [ebp - 0x58]
push edx
call fcn.005a9740
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x54]
add esp, 4
cmp eax, 0x10
jae 0x5a811a
lea ebx, [ebp - 0x54]
mov eax, ebx
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x5a8120
sub eax, edx
mov edi, eax
cmp edi, 0x32
jbe 0x5a8135
mov edi, 0x32
push edi
push ebx
push esi
call fcn.005b87f0
mov byte [edi + esi], 0
mov eax, dword [ebp - 0x40]
add esp, 0xc
cmp eax, 0x10
jb 0x5a8158
mov eax, dword [ebp - 0x54]
push eax
call fcn.005b806d
add esp, 4
mov al, 1
mov ecx, dword [ebp + 0xfd8]
mov dword fs:[0], ecx
mov ecx, dword [ebp + 0xfd4]
pop edi
xor ecx, ebp
pop ebx
call fcn.005bbd6d
add ebp, 0xfe4
mov esp, ebp
pop ebp
ret