Function at 0x4ec230
Capabilities:
Check for time delay via queryperformancecounter
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x40
mov esi, dword [ebp + 8]
mov eax, dword [0x603024]
xor eax, ebp
mov dword [esp + 0x38], eax
lea eax, [esp + 0x24]
push eax
call fcn.004e9ac0
add esp, 4
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
lea eax, [esp + 0x28]
push eax
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
movsd xmm0, qword [0x616760]
xorpd xmm1, xmm1
ucomisd xmm0, xmm1
jne 0x4ec28a
jnp 0x4ec2ef
ucomisd xmm0, xmm1
jne 0x4ec296
jnp 0x4ec3f0
movsd xmm1, qword [esp + 0x28]
unpcklps xmm1, xmmword [0x5e8700]
subpd xmm1, xmmword [0x5e8710]
movapd xmm2, xmm1
unpckhpd xmm2, xmm1
addsd xmm2, xmm1
divsd xmm2, xmm0
mulsd xmm2, qword [0x5e8728]
movsd qword [esp], xmm2
fld qword [esp]
fisttp qword [esp]
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esi], eax
mov dword [esi + 4], ecx
mov ecx, dword [esp + 0x38]
xor ecx, ebp
call fcn.00504b53
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
call edi
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [esp + 0x14], eax
call edi
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x616770]
mov ecx, dword [0x6072f0]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4ec3f9
mov eax, dword [0x616780]
mov ecx, dword [0x6072f0]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 4]
jg 0x4ec432
rdtsc
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
xor eax, eax
lea edi, [esp + 0x30]
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [edi]
mov dword [esp + 0x10], eax
mov ebx, dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push dword [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor eax, eax
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
mov eax, dword [esp + 0x10]
sub eax, dword [0x616778]
sbb ebx, dword [0x61677c]
movd xmm0, ebx
movd xmm1, eax
punpckldq xmm1, xmm0
punpckldq xmm1, xmmword [0x5e8700]
subpd xmm1, xmmword [0x5e8710]
haddpd xmm1, xmm1
fild qword [esp + 0x30]
fstp qword [esp + 0x18]
divsd xmm1, qword [esp + 0x18]
pxor xmm0, xmm0
movsd xmm2, qword [0x5e8720]
ucomisd xmm2, xmm1
jbe 0x4ec480
xorpd xmm1, xmm1
jmp 0x4ec28a
xor eax, eax
xor ecx, ecx
jmp 0x4ec2d5
push 0x616770
call fcn.00503a17
add esp, 4
cmp dword [0x616770], 0xffffffff
jne 0x4ec32e
rdtsc
mov dword [0x616768], eax
mov dword [0x61676c], edx
push 0x616770
call fcn.00503a8d
add esp, 4
jmp 0x4ec32e
push 0x616780
call fcn.00503a17
add esp, 4
cmp dword [0x616780], 0xffffffff
jne 0x4ec34f
xor eax, eax
lea edi, [esp + 0x30]
mov dword [edi + 4], eax
mov dword [edi], eax
push edi
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [edi]
mov ecx, dword [edi + 4]
mov dword [0x61677c], ecx
mov dword [0x616778], eax
push 0x616780
call fcn.00503a8d
add esp, 4
jmp 0x4ec34f
mov eax, dword [esp + 0xc]
sub eax, dword [0x616768]
mov ecx, dword [esp + 8]
sbb ecx, dword [0x61676c]
movd xmm2, ecx
movd xmm0, eax
punpckldq xmm0, xmm2
punpckldq xmm0, xmmword [0x5e8700]
subpd xmm0, xmmword [0x5e8710]
haddpd xmm0, xmm0
divsd xmm0, xmm1
movsd qword [0x616760], xmm0
jmp 0x4ec3e7