Function at 0x4e9a80
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x50
mov eax, dword [0x754040]
xor eax, ebp
mov dword [esp + 0x48], eax
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea ecx, [esp + 0x38]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
movsd xmm0, qword [0x759c68]
xorpd xmm1, xmm1
ucomisd xmm0, xmm1
jne 0x4e9acd
jnp 0x4e9b3b
mov esi, dword [ebp + 8]
ucomisd xmm0, xmm1
jne 0x4e9ad8
jnp 0x4e9b35
movsd xmm1, qword [esp + 0x38]
unpcklps xmm1, xmmword [0x6d5e20]
subpd xmm1, xmmword [0x6d5e30]
movapd xmm2, xmm1
unpckhpd xmm2, xmm1
addsd xmm2, xmm1
divsd xmm2, xmm0
mulsd xmm2, qword [0x6d5e08]
movsd qword [esp + 8], xmm2
fld qword [esp + 8]
fisttp qword [esp + 8]
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x48]
xor ecx, ebp
call fcn.00550b46
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
xor ecx, ecx
jmp 0x4e9b1b
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [esp + 0x14], eax
call esi
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x759c78]
mov ecx, dword [0x758d88]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4e9c42
mov eax, dword [0x759c88]
mov ecx, dword [0x758d88]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4e9c7b
rdtsc
mov dword [esp + 4], eax
mov dword [esp], edx
xor eax, eax
lea esi, [esp + 0x40]
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov ebx, dword [esi]
mov edi, dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor eax, eax
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [0x759c84]
mov ecx, dword [0x759c80]
cmp ebx, ecx
mov edx, edi
sbb edx, eax
jl 0x4e9d32
sub ebx, ecx
movd xmm0, ebx
sbb edi, eax
movd xmm1, edi
punpckldq xmm0, xmm1
movq qword [esp + 0x28], xmm0
fild qword [esp + 0x28]
fstp qword [esp + 0x20]
movsd xmm1, qword [esp + 0x20]
fild qword [esp + 0x40]
fstp qword [esp + 0x30]
divsd xmm1, qword [esp + 0x30]
pxor xmm0, xmm0
movsd xmm2, qword [0x6d5e18]
ucomisd xmm2, xmm1
jbe 0x4e9cc9
xorpd xmm1, xmm1
jmp 0x4e9acd
push 0x759c78
call fcn.0054fc5d
add esp, 4
cmp dword [0x759c78], 0xffffffff
jne 0x4e9b7a
rdtsc
mov dword [0x759c70], eax
mov dword [0x759c74], edx
push 0x759c78
call fcn.0054fcd7
add esp, 4
jmp 0x4e9b7a
push 0x759c88
call fcn.0054fc5d
add esp, 4
cmp dword [0x759c88], 0xffffffff
jne 0x4e9b9b
xor eax, eax
lea esi, [esp + 0x40]
mov dword [esi + 4], eax
mov dword [esi], eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [0x759c84], ecx
mov dword [0x759c80], eax
push 0x759c88
call fcn.0054fcd7
add esp, 4
jmp 0x4e9b9b
mov eax, dword [0x759c74]
mov ecx, dword [0x759c70]
cmp dword [esp + 4], ecx
mov edx, dword [esp]
sbb edx, eax
jb 0x4e9d71
mov edx, dword [esp + 4]
sub edx, ecx
mov ecx, dword [esp]
sbb ecx, eax
movd xmm0, edx
movd xmm2, ecx
punpckldq xmm0, xmm2
punpckldq xmm0, xmmword [0x6d5e20]
subpd xmm0, xmmword [0x6d5e30]
haddpd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [esp + 0x18], xmm0
movsd xmm0, qword [esp + 0x18]
movlps qword [0x759c68], xmm0
movq xmm0, qword [0x759c68]
jmp 0x4e9c39
call fcn.005612a4
push dword [eax]
call fcn.0056a935
add esp, 4
mov esi, eax
call fcn.005612a4
mov edi, dword [eax]
push 0x6d5e40
call fcn.0058b9f0
add esp, 4
push esi
push edi
push 0x6d5e6c
push 0x6d5d24
push 0x5b
push eax
push 3
call fcn.00478250
add esp, 0x1c
int3
call fcn.005612a4
push dword [eax]
call fcn.0056a935
add esp, 4
mov esi, eax
call fcn.005612a4
mov edi, dword [eax]
push 0x6d5e40
call fcn.0058b9f0
add esp, 4
push esi
push edi
push 0x6d5ea5
push 0x6d5d24
push 0x66
jmp 0x4e9d65