Function at 0x417bc0
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
push 8
call fcn.0042470d
add esp, 4
mov dword [ebp - 0x4c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0x50], 0
jmp 0x417c7f
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x14], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x54], esp
push 0
mov eax, 2
call fcn.00424725
cmp dword [ebp - 0x54], esp
je 0x417e12
push 0xaaf
push 0x4021c9e
push 6
call fcn.0042471f
add esp, 0xc
push 0x80000301
push 0
push dword [0x4f5050]
push 1
mov eax, 4
mov ebx, 0x48b400
call fcn.0042472b
add esp, 0x10
push 1
call fcn.00415fb3
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.00416b6a
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x417e6b
push ebx
call fcn.00424713
add esp, 4
cmp dword [ebp - 0x58], 0
jg 0x417ea6
push 0x80000301
push 0
push dword [0x4f5050]
push 1
mov eax, 4
mov ebx, 0x48b420
call fcn.0042472b
add esp, 0x10
mov eax, 0x4c5d18
jmp 0x41867c
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x417ec4
push eax
mov ebx, eax
call fcn.00401382
inc eax
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x417ed5
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
call fcn.00402a26
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x417efb
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
call fcn.00414864
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x58], eax
push dword [ebp - 0x20]
push dword [ebp - 0x58]
push dword [0x4f5070]
mov ecx, 3
call fcn.00401464
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x417f5f
push ebx
call fcn.00424713
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x417f75
mov eax, 0x4c5d18
push eax
push 1
mov ebx, 0x425e10
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x417fa1
push ebx
call fcn.00424713
add esp, 4
lea eax, [ebp - 0x60]
push eax
call fcn.00407925
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x417fc6
push ebx
call fcn.00424713
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x417fdd
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00418745
mov dword [ebp - 0x2c], eax
mov eax, dword [0x4f4fd4]
mov dword [ebp - 0x30], eax
push 0x80000301
push 0
push 0x159ced57
push 1
mov ebx, 0x4253d0
call fcn.00424719
add esp, 0x10
push 0x80000601
push edx
push eax
push 1
mov ebx, 0x425e10
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418049
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x2c], 0
jne 0x41852a
push 6
call fcn.00415fb3
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41807e
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
call fcn.00414864
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x58], eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x5c], eax
push dword [0x4f5044]
push 0x4c6108
push dword [ebp - 0x5c]
push 0x4c6108
push dword [ebp - 0x58]
push 0x4c6108
push dword [ebp - 0x20]
push 0x4c6108
push dword [ebp - 0x28]
push 0x4c6108
push dword [ebp - 0x1c]
push 0x4c6108
push dword [ebp - 0x38]
push 0x4c66d9
mov ecx, 0xe
call fcn.00401464
add esp, 0x38
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x418130
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x418143
push ebx
call fcn.00424713
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x418159
mov eax, 0x4c5d18
push eax
push 1
mov ebx, 0x425e10
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x418185
push ebx
call fcn.00424713
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41819c
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x4181b3
mov eax, 0x4c5d28
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push 0x4c66e1
mov ecx, 2
call fcn.00401464
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x4181fd
push ebx
call fcn.00424713
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x418213
mov eax, 0x4c5d18
push eax
push 1
mov ebx, 0x425e10
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41823f
push ebx
call fcn.00424713
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x418256
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0x989680
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
lea eax, [ebp - 0x3c]
push eax
call fcn.0040866a
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4182bd
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, 0x4c5d28
xor ecx, ecx
test eax, eax
je 0x4182cf
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x44]
xor ebx, ebx
test eax, eax
je 0x4182e0
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x4182f7
dec eax
test ecx, ecx
je 0x4182f7
call fcn.00404663
add esp, 0xc
test eax, eax
je 0x418525
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x41831c
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41832d
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x418356
push eax
mov ebx, eax
call fcn.00401382
inc eax
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41836c
push ebx
call fcn.00424713
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x4c]
add ebx, 4
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x41839b
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4183b1
push ebx
call fcn.00424713
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
push 0x4f5084
push 4
mov eax, 2
call fcn.00424707
add esp, 8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov ebx, dword [0x4f5084]
mov dword [ebp - 0x58], ebx
call fcn.00405516
mov dword [ebp - 0x5c], ecx
mov edi, dword [ebp - 0x58]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41840d
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x5c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x58]
call fcn.00424731
add esp, 8
mov dword [0x4f5084], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x5c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x54]
push edi
push eax
push 8
call fcn.0042470d
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418473
push eax
mov ebx, eax
call fcn.00401382
inc eax
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x418490
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042470d
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x4184aa
mov eax, 0x4c5d28
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x54], eax
push getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x4184d9
mov eax, 0x4c5d18
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x418505
push ebx
call fcn.00424713
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41851c
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
jmp 0x418525
jmp 0x4185cd
mov ebx, dword [0x4f5084]
call fcn.00405516
push ebx
push ecx
mov eax, dword [ebp - 0x2c]
dec eax
jns 0x418554
push 0x1054
push 0x4021c9e
push 4
call fcn.0042471f
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x418571
push 0x1054
push 0x4021c9e
push 1
call fcn.0042471f
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x54], ebx
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebx]
test eax, eax
jne 0x418599
mov eax, 0x4c5d28
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x4185c9
push ebx
call fcn.00424713
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push dword [0x4f5050]
push 1
mov eax, 4
mov ebx, 0x48b420
call fcn.0042472b
add esp, 0x10
lea eax, [ebp - 0x50]
push eax
call fcn.00416bdf
mov dword [ebp - 0x54], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x418616
mov eax, 0x4c5d28
push eax
push 1
mov ebx, 0x426720
call fcn.00424719
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x418642
push ebx
call fcn.00424713
add esp, 4
mov eax, dword [ebp - 0x58]
jmp 0x41867c
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41868d
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41869d
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4186ad
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4186bd
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4186cd
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4186dd
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x4186ed
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x4186fd
push ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x4c]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x418711
push ebx
call fcn.00424713
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x418725
push ebx
call fcn.00424713
add esp, 4
pop ebx
call fcn.00424713
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41873e
push ebx
call fcn.00424713
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4