Function at 0x41e8ee
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x4a5450]
fstp qword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [0xb7baf8], eax
mov dword [0xb7bafc], edx
fild dword [ebp - 8]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x4a52d5]
fstp qword [ebp - 0x38]
push 0x80000601
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
mov ebx, 0x168
call fcn.0046dbc0
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [0xb7bb00]
test ebx, ebx
je 0x41eaf5
push ebx
call fcn.0046c645
add esp, 4
pop eax
mov dword [0xb7bb00], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fadd qword [0x4a5458]
fstp qword [ebp - 0x38]
push 0x80000601
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 1
mov ebx, 0x9dc
call fcn.0046d6b0
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x198
call fcn.0046d550
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [0xb7bb04]
test ebx, ebx
je 0x41eb5e
push ebx
call fcn.0046c645
add esp, 4
pop eax
mov dword [0xb7bb04], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fmul qword [0x4a5460]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
call fcn.004010fc
mov dword [0xb7bb08], eax
mov dword [0xb7bb0c], edx
mov eax, 0x4a5468
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00401c98
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41ebad
push ebx
call fcn.0046c645
add esp, 4
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x168
call fcn.0046dbc0
add esp, 0x10
mov dword [ebp - 0x34], eax
mov eax, 0x4a5478
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
call fcn.00401c98
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41ebf0
push ebx
call fcn.0046c645
add esp, 4
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x168
call fcn.0046dbc0
add esp, 0x10
mov dword [ebp - 0x40], eax
mov eax, 0x4a5483
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
call fcn.00401c98
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41ec33
push ebx
call fcn.0046c645
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x168
call fcn.0046dbc0
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov eax, 0x4a548e
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00401c98
mov dword [ebp - 0x54], eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41ec76
push ebx
call fcn.0046c645
add esp, 4
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x168
call fcn.0046dbc0
add esp, 0x10
mov dword [ebp - 0x58], eax
push dword [ebp - 0x58]
push dword [ebp - 0x54]
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
push dword [ebp - 0x40]
push dword [ebp - 0x3c]
push dword [ebp - 0x34]
push dword [ebp - 0x30]
mov ecx, 8
call fcn.00401413
add esp, 0x20
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41eccd
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41ecdd
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41eced
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x41ecfd
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41ed0d
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x41ed1d
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41ed2d
push ebx
call fcn.0046c645
add esp, 4
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41ed3d
push ebx
call fcn.0046c645
add esp, 4
lea eax, [ebp - 0x5c]
push eax
call fcn.0041f32f
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41ed59
push ebx
call fcn.0046c645
add esp, 4
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41ed6c
mov eax, 0x4a429f
push eax
push 1
mov ebx, 0x164
call fcn.0046fe90
add esp, 0x10
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], edx
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41ed95
push ebx
call fcn.0046c645
add esp, 4
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 8]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [0xb7bb10], eax
mov dword [0xb7bb14], edx
fild dword [ebp - 4]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 8]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [0xb7bb10]
fadd qword [ebp - 0x40]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fsub qword [0x4a5499]
fstp qword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov dword [0xb7bb10], eax
mov dword [0xb7bb14], edx
fld qword [0xb7bb10]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fild dword [ebp - 4]
fstp qword [ebp - 0x38]
fadd qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.004010fc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
fild qword [ebp - 0x20]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fild dword [ebp - 8]
fstp qword [ebp - 0x48]
fsub qword [ebp - 0x48]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.004010fc
mov dword [0xb7bb18], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 4]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fild dword [0xb7bb18]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [ebp - 0x40]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.004010fc
mov dword [0xb7bb18], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 4]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fild dword [0xb7bb18]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [ebp - 0x40]
fadd qword [0x4a54a1]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.004010fc
mov dword [0xb7bb18], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fild dword [0xb7bb18]
fstp qword [ebp - 0x48]
fld qword [ebp - 0x48]
fadd qword [ebp - 0x40]
fstp qword [ebp - 0x50]
fld qword [ebp - 0x50]
call fcn.004010fc
mov dword [0xb7bb1c], eax
mov dword [0xb7bb20], edx
fild qword [0xb7bb1c]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x38]
fmul qword [ebp - 0x38]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
fadd qword [0x4a54a9]
fstp qword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
push 0x80000301
push 0
push dword [ebp - 0x10]
fld qword [0xb7bb24]
call fcn.004010fc
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x9f8
call fcn.0046eae0
add esp, 0x1c
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fstp qword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
push 0x80000301
push 0
push 0x1f202
fld qword [0xb7bb24]
call fcn.004010fc
push 0x80000301
push 0
push eax
push 2
mov ebx, 0xc8
call fcn.0046e910
add esp, 0x1c
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fstp qword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
push 0x80000601
push dword [0xb7bb28]
push dword [0xb7bb24]
push 1
mov ebx, 0x9dc
call fcn.0046d6b0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000301
push 0
push 0x1e6c
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 2
mov ebx, 0xcc
call fcn.0046ff60
add esp, 0x1c
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
push 0x80000601
push dword [0xb7bb28]
push dword [0xb7bb24]
push 1
mov ebx, 0x9dc
call fcn.0046d6b0
add esp, 0x10
mov dword [ebp - 0x34], eax
fild dword [ebp - 0x34]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fsub qword [0x4a502b]
fstp qword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
push 0x80000601
push dword [0xb7bb28]
push dword [0xb7bb24]
push 1
mov ebx, 0x9dc
call fcn.0046d6b0
add esp, 0x10
mov dword [ebp - 0x2c], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push dword [ebp - 0x2c]
push 2
mov ebx, 0xcc
call fcn.0046ff60
add esp, 0x1c
mov dword [ebp - 0x38], eax
fild dword [ebp - 0x38]
fstp qword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [0xb7bb24], eax
mov dword [0xb7bb28], edx
fld qword [0xb7bb24]
fdiv qword [0x4a54b1]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
fsub qword [ebp - 0x18]
ftst
fnstsw ax
test ah, 1
je 0x41f107
fchs
fcomp qword [0x4a45f7]
fnstsw ax
test ah, 0x41
jne 0x41f13b
cmp dword [ebp - 0x24], 0x5f3
je 0x41f127
jmp 0x41f118
mov eax, 1
cmp eax, 2
jne 0x41f127
call fcn.0041442c
jmp 0x41f13b
call fcn.0041ca4c
push 3
call fcn.0041e5b1
mov dword [ebp - 0x2c], eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x2c]
test eax, eax
jne 0x41f160
mov eax, 0x4a429f
push eax
push 1
mov ebx, 0x9dc
call fcn.0046d6b0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41f186
push ebx
call fcn.0046c645
add esp, 4
cmp dword [ebp - 0x30], 1
jge 0x41f1c8
call fcn.00420b78
call fcn.0041442c
push 0x80000301
push 0
push 0x80ea58e3
push 1
mov ebx, 0x67c
call fcn.0046ec10
add esp, 0x10
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esp, esp
xor ebp, ebp
xor esi, esi
xor edi, edi
push 0x80000301
push 0
lea eax, [ebp - 0x28]
push eax
push 0
push 0
push 0
push reloc.WS2_32.dll_getsockname
push 0
push 0x45df73
push 3
mov ebx, 0
mov eax, 0x4730a0
call fcn.0046d0d0
add esp, 0x28
mov eax, 0x4a54b9
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00401c98
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x41f220
push ebx
call fcn.0046c645
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.0041f32f
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x41f23c
push ebx
call fcn.0046c645
add esp, 4
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [0xb7bb2c]
test ebx, ebx
je 0x41f253
push ebx
call fcn.0046c645
add esp, 4
pop eax
mov dword [0xb7bb2c], eax
call fcn.00421f76
push 0x80000301
push 0
push dword [ebp - 0x28]
push 1
mov ebx, 0x1c
mov eax, 0x4731d0
call fcn.0046d0d0
add esp, 0x10
mov esp, ebp
pop ebp
ret