Function at 0x40ccab
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
jmp 0x40ccc0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
push ebx
mov ebx, 1
mov ebx, 2
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 5
pop ebx
push ecx
push edx
push ebx
push esi
push edi
cmp dword [ebp + 8], 0x9269b90c
jne 0x40cd42
mov eax, 1
jmp 0x40cf68
cmp dword [ebp + 8], 0x303edafe
jne 0x40cd55
mov eax, 2
jmp 0x40cf68
cmp dword [ebp + 8], 0x2bbce7f1
jne 0x40cd68
mov eax, 3
jmp 0x40cf68
cmp dword [ebp + 8], 0x34599e63
jne 0x40cd7b
mov eax, 4
jmp 0x40cf68
cmp dword [ebp + 8], 0xb004b956
jne 0x40cd8e
mov eax, 5
jmp 0x40cf68
cmp dword [ebp + 8], 0x8acc252
jne 0x40cda1
mov eax, 6
jmp 0x40cf68
cmp dword [ebp + 8], 0x6a0099ac
jne 0x40cdb4
mov eax, 7
jmp 0x40cf68
cmp dword [ebp + 8], 0x5e105803
jne 0x40cdc7
mov eax, 8
jmp 0x40cf68
cmp dword [ebp + 8], 0xd2c0ba86
jne 0x40cdda
mov eax, 9
jmp 0x40cf68
cmp dword [ebp + 8], 0xdcbbb710
jne 0x40cded
mov eax, 0xa
jmp 0x40cf68
cmp dword [ebp + 8], 0xd3a0bf22
jne 0x40ce00
mov eax, 0xb
jmp 0x40cf68
cmp dword [ebp + 8], 0x129c4865
jne 0x40ce13
mov eax, 0xc
jmp 0x40cf68
cmp dword [ebp + 8], 0x66194af9
jne 0x40ce26
mov eax, 0xd
jmp 0x40cf68
cmp dword [ebp + 8], 0x6cb8c4f4
jne 0x40ce39
mov eax, 0xe
jmp 0x40cf68
cmp dword [ebp + 8], 0xc3e8b7f4
jne 0x40ce4c
mov eax, 0xf
jmp 0x40cf68
cmp dword [ebp + 8], 0x690d1309
jne 0x40ce5f
mov eax, 0x10
jmp 0x40cf68
cmp dword [ebp + 8], 0x72501486
jne 0x40ce72
mov eax, 0x11
jmp 0x40cf68
cmp dword [ebp + 8], 0x5aa81acf
jne 0x40ce85
mov eax, 0x12
jmp 0x40cf68
cmp dword [ebp + 8], 0x42c7ba06
jne 0x40ce98
mov eax, 0x13
jmp 0x40cf68
cmp dword [ebp + 8], 0xb4421802
jne 0x40ceab
mov eax, 0x14
jmp 0x40cf68
cmp dword [ebp + 8], 0x34cf11c6
jne 0x40cebe
mov eax, 0x15
jmp 0x40cf68
cmp dword [ebp + 8], 0x3182c19
jne 0x40ced1
mov eax, 0x16
jmp 0x40cf68
cmp dword [ebp + 8], 0xe2baeb5e
jne 0x40cee4
mov eax, 0x17
jmp 0x40cf68
cmp dword [ebp + 8], 0x12225df7
jne 0x40cef7
mov eax, 0x18
jmp 0x40cf68
cmp dword [ebp + 8], 0x482b4b48
jne 0x40cf0a
mov eax, 0x19
jmp 0x40cf68
cmp dword [ebp + 8], 0xebe26754
jne 0x40cf1d
mov eax, 0x1a
jmp 0x40cf68
cmp dword [ebp + 8], 0xd695dfcb
jne 0x40cf30
mov eax, 0x1b
jmp 0x40cf68
cmp dword [ebp + 8], 0xa17bc900
jne 0x40cf43
mov eax, 0x1c
jmp 0x40cf68
cmp dword [ebp + 8], 0x44853be5
jne 0x40cf56
mov eax, 0x1d
jmp 0x40cf68
cmp dword [ebp + 8], 0xfa14f66e
jne 0x40cfea
mov eax, 0x1e
sub eax, 1
mov edi, dword fs:[0x18]
add edi, 0x400
mov edi, dword [edi + eax*4]
nop
nop
nop
nop
xor esi, esi
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
xor esi, 0x485bf0d6
xor edi, esi
nop
nop
mov eax, dword fs:[0x18]
xor ecx, ecx
xor ebx, ebx
add ebx, 1
add ecx, dword [eax + ebx*4]
cmp ebx, 0xc
jne 0x40cfb2
xor ecx, 0xbb40875d
xor edi, ecx
nop
nop
nop
rdtsc
xor eax, eax
mov al, dh
xor eax, 0xa7212701
nop
xor edi, eax
nop
nop
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x124]
xor edi, eax
mov eax, edi
jmp 0x40d064
xor esi, esi
nop
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
cmp eax, 0xf0000000
jge 0x40d01a
add esi, edx
xor esi, 0x8fa9c95a
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
add esi, edx
xor esi, 0xee19d4c5
mov eax, esi
pop edi
pop esi
pop ebx
pop edx
pop ecx
nop
mov esp, ebp
pop ebp
ret 4