Function at 0x476b10
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x48
mov esi, dword [ebp + 8]
mov eax, dword [0x511014]
xor eax, ebp
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
lea ecx, [esp + 0x30]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
movsd xmm0, qword [0x5211d0]
xorpd xmm1, xmm1
ucomisd xmm0, xmm1
jne 0x476b60
jnp 0x476bc5
ucomisd xmm0, xmm1
jne 0x476b6c
jnp 0x476cc6
movsd xmm1, qword [esp + 0x30]
unpcklps xmm1, xmmword [0x5049a0]
subpd xmm1, xmmword [0x5049b0]
movapd xmm2, xmm1
unpckhpd xmm2, xmm1
addsd xmm2, xmm1
divsd xmm2, xmm0
mulsd xmm2, qword [0x5049c0]
movsd qword [esp], xmm2
fld qword [esp]
fisttp qword [esp]
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x40]
xor ecx, ebp
call fcn.00496ce3
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [esp + 0x14], eax
call edi
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x5211e0]
mov ecx, dword [0x514f00]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x476ccf
mov eax, dword [0x5211f0]
mov ecx, dword [0x514f00]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x476d08
rdtsc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
xor eax, eax
lea edi, [esp + 0x38]
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [edi]
mov dword [esp + 0x10], eax
mov ebx, dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor eax, eax
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [esp + 0x10]
sub eax, dword [0x5211e8]
sbb ebx, dword [0x5211ec]
movd xmm0, ebx
movd xmm1, eax
punpckldq xmm1, xmm0
movq qword [esp + 0x20], xmm1
fild qword [esp + 0x20]
fstp qword [esp + 0x18]
movsd xmm1, qword [esp + 0x18]
fild qword [esp + 0x38]
fstp qword [esp + 0x28]
divsd xmm1, qword [esp + 0x28]
pxor xmm0, xmm0
movsd xmm2, qword [0x504990]
ucomisd xmm2, xmm1
jbe 0x476d56
xorpd xmm1, xmm1
jmp 0x476b60
xor eax, eax
xor ecx, ecx
jmp 0x476bab
push 0x5211e0
call fcn.00494ba0
add esp, 4
cmp dword [0x5211e0], 0xffffffff
jne 0x476c04
rdtsc
mov dword [0x5211d8], eax
mov dword [0x5211dc], edx
push 0x5211e0
call fcn.00495b95
add esp, 4
jmp 0x476c04
push 0x5211f0
call fcn.00494ba0
add esp, 4
cmp dword [0x5211f0], 0xffffffff
jne 0x476c25
xor eax, eax
lea edi, [esp + 0x38]
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [0x5211ec], ecx
mov dword [0x5211e8], eax
push 0x5211f0
call fcn.00495b95
add esp, 4
jmp 0x476c25
mov eax, dword [esp + 0xc]
sub eax, dword [0x5211d8]
mov ecx, dword [esp + 8]
sbb ecx, dword [0x5211dc]
movd xmm2, ecx
movd xmm0, eax
punpckldq xmm0, xmm2
punpckldq xmm0, xmmword [0x5049a0]
subpd xmm0, xmmword [0x5049b0]
haddpd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [0x5211d0], xmm0
jmp 0x476cbd