Function at 0x10002250
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x11c
mov eax, dword [0x100f3040]
xor eax, esp
mov dword [esp + 0x118], eax
cmp dword [0x100fa2e0], 0x18
push esi
je 0x100026d4
xorps xmm0, xmm0
lea eax, [esp + 0x18]
movups xmmword [0x100fa2e0], xmm0
push eax
movq qword [0x100fa2f0], xmm0
mov dword [0x100fa2e0], 0x18
movlpd qword [esp + 0x14], xmm0
movlpd qword [esp + 0x24], xmm0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
shrd eax, ecx, 5
mov dword [esp + 0x18], eax
lea eax, [esp + 0x108]
sar ecx, 5
push eax
mov dword [esp + 0x20], ecx
call esi
lea eax, [esp + 0x10]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
rdtsc
mov dword [ecx], eax
mov dword [ecx + 4], edx
lea eax, [esp + 0x28]
push eax
call esi
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x108]
mov eax, dword [esp + 0x2c]
sbb eax, dword [esp + 0x10c]
cmp eax, dword [esp + 0x1c]
jl 0x100022e5
jg 0x10002310
cmp ecx, dword [esp + 0x18]
jb 0x100022e5
lea eax, [esp + 0x20]
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
rdtsc
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
sbb eax, dword [esp + 0x14]
shld eax, ecx, 5
mov dword [esp + 0x10], 0
shl ecx, 5
mov dword [0x100fa2e8], ecx
mov dword [0x100fa2ec], eax
call fcn.10002180
test al, al
jne 0x1000235a
mov al, 1
jmp 0x10002385
lea eax, [esp + 0xc]
mov ecx, 1
push eax
push eax
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x18]
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x1000237e
mov al, 1
jmp 0x10002385
mov eax, dword [esp + 0x10]
shr eax, 0x10
mov byte [0x100fa2e5], al
xorps xmm0, xmm0
lea eax, [esp + 0x30]
movaps xmmword [esp + 0x30], xmm0
push eax
movaps xmmword [esp + 0x44], xmm0
mov dword [esp + 0x54], 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
movzx ecx, byte [0x100fa2e5]
xor edx, edx
mov eax, dword [esp + 0x44]
div ecx
movzx ecx, byte [0x100fa2e5]
mov dl, al
movzx eax, dl
imul eax, ecx
mov byte [0x100fa2e6], dl
mov byte [0x100fa2e5], al
test dl, dl
jne 0x100023e4
test al, al
jne 0x100023e4
mov word [0x100fa2e5], 0x101
lea eax, [esp + 0xc]
mov ecx, 1
push eax
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x24]
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x1000240c
xor cl, cl
jmp 0x10002416
mov ecx, dword [esp + 0xc]
shr ecx, 4
and cl, 1
mov al, byte [0x100fa2e4]
lea edx, [esp + 0x10]
and al, 0xfe
or al, cl
mov ecx, 1
mov byte [0x100fa2e4], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x1000244c
xor cl, cl
jmp 0x10002456
mov ecx, dword [esp + 0xc]
shr ecx, 0xf
and cl, 1
mov al, byte [0x100fa2e4]
lea edx, [esp + 0x10]
and al, 0xfd
add cl, cl
or al, cl
mov ecx, 1
mov byte [0x100fa2e4], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x1000248e
xor cl, cl
jmp 0x10002498
mov ecx, dword [esp + 0xc]
shr ecx, 0x10
and cl, 1
mov al, byte [0x100fa2e4]
lea edx, [esp + 0x10]
and al, 0xfb
shl cl, 2
or al, cl
mov ecx, 1
mov byte [0x100fa2e4], al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x100024d1
xor cl, cl
jmp 0x100024db
mov ecx, dword [esp + 0xc]
shr ecx, 0x17
and cl, 1
mov al, byte [0x100fa2e4]
and al, 0xbf
shl cl, 6
or cl, al
lea eax, [esp + 0x6c]
push 0x98
push 0
push eax
mov byte [0x100fa2e4], cl
call fcn.1007b3c0
mov esi, dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea eax, [esp + 0x74]
add esp, 0xc
mov dword [esp + 0x68], 0x9c
push eax
call esi
test eax, eax
jne 0x1000253a
lea eax, [esp + 0x68]
mov dword [esp + 0x68], 0x94
push eax
call esi
test eax, eax
jne 0x1000253a
push str.IsWin98OrOlder:__Unable_to_get_OS_version_information
call fcn.100029c0
add esp, 4
mov eax, dword [esp + 0x78]
sub eax, 0
je 0x10002578
sub eax, 1
je 0x10002578
lea eax, [esp + 0xc]
mov ecx, 1
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x28]
push eax
lea edx, [esp + 0x1c]
call fcn.100020d0
add esp, 0xc
test al, al
je 0x10002578
mov ecx, dword [esp + 0xc]
shr ecx, 0x19
and cl, 1
jmp 0x1000257a
xor cl, cl
mov al, byte [0x100fa2e4]
lea edx, [esp + 0x10]
and al, 0xf7
shl cl, 3
or cl, al
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
mov byte [0x100fa2e4], cl
push eax
lea eax, [esp + 0x28]
mov ecx, 1
push eax
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x100025b4
xor cl, cl
jmp 0x100025be
mov ecx, dword [esp + 0xc]
shr ecx, 0x1a
and cl, 1
mov al, byte [0x100fa2e4]
lea edx, [esp + 0xc]
shl cl, 4
and al, 0xef
or cl, al
lea eax, [esp + 0x10]
push eax
push eax
mov byte [0x100fa2e4], cl
mov ecx, 0x80000000
push eax
call fcn.100020d0
add esp, 0xc
test al, al
je 0x1000261d
cmp dword [esp + 0xc], 0x80000000
jbe 0x1000261d
lea eax, [esp + 0xc]
mov ecx, 0x80000001
push eax
lea eax, [esp + 0x14]
push eax
push eax
mov edx, eax
call fcn.100020d0
add esp, 0xc
test al, al
je 0x1000261d
mov ecx, dword [esp + 0xc]
shr ecx, 0x1f
jmp 0x1000261f
xor cl, cl
mov al, byte [0x100fa2e4]
lea edx, [esp + 0x18]
and al, 0xdf
shl cl, 5
or cl, al
mov dword [0x100fa2d8], 0
lea eax, [esp + 0x10c]
mov byte [0x100fa2e4], cl
push eax
lea eax, [esp + 0x114]
mov byte [0x100fa2dc], 0
push eax
lea eax, [esp + 0x110]
xorps xmm0, xmm0
push eax
xor ecx, ecx
movq qword [0x100fa2d0], xmm0
call fcn.100020d0
add esp, 0xc
test al, al
jne 0x1000268e
movq xmm0, qword [str.Generic_x86]
mov eax, dword [0x100cd1cc]
movq qword [0x100fa2d0], xmm0
jmp 0x100026ad
mov eax, dword [esp + 0x108]
mov dword [0x100fa2d0], eax
mov eax, dword [esp + 0x10c]
mov dword [0x100fa2d4], eax
mov eax, dword [esp + 0x110]
mov dword [0x100fa2d8], eax
mov dword [0x100fa2f0], 0x100fa2d0
call fcn.10002180
mov cl, byte [0x100fa2e4]
shl al, 7
and cl, 0x7f
or al, cl
mov byte [0x100fa2e4], al
mov ecx, dword [esp + 0x11c]
mov eax, 0x100fa2e0
pop esi
xor ecx, esp
call fcn.10078fd6
mov esp, ebp
pop ebp
ret