Function at 0x41dd68
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
jmp 0x41dd7d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
push ebx
mov ebx, 1
mov ebx, 2
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 5
pop ebx
push ecx
push edx
push ebx
push esi
push edi
cmp dword [ebp + 8], 0xbe890935
jne 0x41ddff
mov eax, 1
jmp 0x41e025
cmp dword [ebp + 8], 0x5969d3a5
jne 0x41de12
mov eax, 2
jmp 0x41e025
cmp dword [ebp + 8], 0xebe0c0f7
jne 0x41de25
mov eax, 3
jmp 0x41e025
cmp dword [ebp + 8], 0xc05fe26f
jne 0x41de38
mov eax, 4
jmp 0x41e025
cmp dword [ebp + 8], 0x58ee73d2
jne 0x41de4b
mov eax, 5
jmp 0x41e025
cmp dword [ebp + 8], 0xd633ecbf
jne 0x41de5e
mov eax, 6
jmp 0x41e025
cmp dword [ebp + 8], 0x735e33b5
jne 0x41de71
mov eax, 7
jmp 0x41e025
cmp dword [ebp + 8], 0xe36ea423
jne 0x41de84
mov eax, 8
jmp 0x41e025
cmp dword [ebp + 8], 0x56c0832d
jne 0x41de97
mov eax, 9
jmp 0x41e025
cmp dword [ebp + 8], 0x5c7ac57
jne 0x41deaa
mov eax, 0xa
jmp 0x41e025
cmp dword [ebp + 8], 0xd0cf7b32
jne 0x41debd
mov eax, 0xb
jmp 0x41e025
cmp dword [ebp + 8], 0x61c009fc
jne 0x41ded0
mov eax, 0xc
jmp 0x41e025
cmp dword [ebp + 8], 0x83d4801e
jne 0x41dee3
mov eax, 0xd
jmp 0x41e025
cmp dword [ebp + 8], 0x9d914825
jne 0x41def6
mov eax, 0xe
jmp 0x41e025
cmp dword [ebp + 8], 0x69f5f358
jne 0x41df09
mov eax, 0xf
jmp 0x41e025
cmp dword [ebp + 8], 0x5fe2bab0
jne 0x41df1c
mov eax, 0x10
jmp 0x41e025
cmp dword [ebp + 8], 0x1302a54c
jne 0x41df2f
mov eax, 0x11
jmp 0x41e025
cmp dword [ebp + 8], 0x157967e5
jne 0x41df42
mov eax, 0x12
jmp 0x41e025
cmp dword [ebp + 8], 0x3cb8128c
jne 0x41df55
mov eax, 0x13
jmp 0x41e025
cmp dword [ebp + 8], 0x543b4251
jne 0x41df68
mov eax, 0x14
jmp 0x41e025
cmp dword [ebp + 8], 0xccce54c7
jne 0x41df7b
mov eax, 0x15
jmp 0x41e025
cmp dword [ebp + 8], 0x3ffc81b1
jne 0x41df8e
mov eax, 0x16
jmp 0x41e025
cmp dword [ebp + 8], 0xf6380d4c
jne 0x41dfa1
mov eax, 0x17
jmp 0x41e025
cmp dword [ebp + 8], 0xe66e381a
jne 0x41dfb4
mov eax, 0x18
jmp 0x41e025
cmp dword [ebp + 8], 0x512ab4b
jne 0x41dfc7
mov eax, 0x19
jmp 0x41e025
cmp dword [ebp + 8], 0xcd6b9051
jne 0x41dfda
mov eax, 0x1a
jmp 0x41e025
cmp dword [ebp + 8], 0x9f09c1e0
jne 0x41dfed
mov eax, 0x1b
jmp 0x41e025
cmp dword [ebp + 8], 0xe773544f
jne 0x41e000
mov eax, 0x1c
jmp 0x41e025
cmp dword [ebp + 8], 0x4cd6d08a
jne 0x41e013
mov eax, 0x1d
jmp 0x41e025
cmp dword [ebp + 8], 0x28259ccc
jne 0x41e0a7
mov eax, 0x1e
sub eax, 1
mov edi, dword fs:[0x18]
add edi, 0x400
mov edi, dword [edi + eax*4]
nop
nop
nop
nop
xor esi, esi
mov eax, reloc.WSOCK32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
mov eax, getsockname
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
xor esi, 0xfa997d16
xor edi, esi
nop
nop
mov eax, dword fs:[0x18]
xor ecx, ecx
xor ebx, ebx
add ebx, 1
add ecx, dword [eax + ebx*4]
cmp ebx, 0xc
jne 0x41e06f
xor ecx, 0x69aa6ad0
xor edi, ecx
nop
nop
nop
rdtsc
xor eax, eax
mov al, dh
xor eax, 0xb8216502
nop
xor edi, eax
nop
nop
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x124]
xor edi, eax
mov eax, edi
jmp 0x41e121
xor esi, esi
nop
mov eax, reloc.WSOCK32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, getsockname
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
cmp eax, 0xf0000000
jge 0x41e0d7
add esi, edx
xor esi, 0xb94f70cd
mov eax, reloc.WSOCK32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, getsockname
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
add esi, edx
xor esi, 0x84806cb7
mov eax, esi
pop edi
pop esi
pop ebx
pop edx
pop ecx
nop
mov esp, ebp
pop ebp
ret 4