Function at 0x416ce9
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
jmp 0x416cfe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
push ebx
mov ebx, 1
mov ebx, 2
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 5
pop ebx
push ecx
push edx
push ebx
push esi
push edi
cmp dword [ebp + 8], 0x119666bd
jne 0x416d80
mov eax, 1
jmp 0x416fa6
cmp dword [ebp + 8], 0x6fbc4ea9
jne 0x416d93
mov eax, 2
jmp 0x416fa6
cmp dword [ebp + 8], 0xdc4c1d7a
jne 0x416da6
mov eax, 3
jmp 0x416fa6
cmp dword [ebp + 8], 0x9e5a4810
jne 0x416db9
mov eax, 4
jmp 0x416fa6
cmp dword [ebp + 8], 0x4c8c77c7
jne 0x416dcc
mov eax, 5
jmp 0x416fa6
cmp dword [ebp + 8], 0x534b9823
jne 0x416ddf
mov eax, 6
jmp 0x416fa6
cmp dword [ebp + 8], 0x4caeeb7e
jne 0x416df2
mov eax, 7
jmp 0x416fa6
cmp dword [ebp + 8], 0x5f82cbe5
jne 0x416e05
mov eax, 8
jmp 0x416fa6
cmp dword [ebp + 8], 0xcd567f78
jne 0x416e18
mov eax, 9
jmp 0x416fa6
cmp dword [ebp + 8], 0x1621e7b2
jne 0x416e2b
mov eax, 0xa
jmp 0x416fa6
cmp dword [ebp + 8], 0x4fc35983
jne 0x416e3e
mov eax, 0xb
jmp 0x416fa6
cmp dword [ebp + 8], 0x4ce2041d
jne 0x416e51
mov eax, 0xc
jmp 0x416fa6
cmp dword [ebp + 8], 0x26aa6d38
jne 0x416e64
mov eax, 0xd
jmp 0x416fa6
cmp dword [ebp + 8], 0x7c2d8512
jne 0x416e77
mov eax, 0xe
jmp 0x416fa6
cmp dword [ebp + 8], 0x5e9dbea3
jne 0x416e8a
mov eax, 0xf
jmp 0x416fa6
cmp dword [ebp + 8], 0xd5d12cc0
jne 0x416e9d
mov eax, 0x10
jmp 0x416fa6
cmp dword [ebp + 8], 0x52bc3735
jne 0x416eb0
mov eax, 0x11
jmp 0x416fa6
cmp dword [ebp + 8], 0xd0ed532a
jne 0x416ec3
mov eax, 0x12
jmp 0x416fa6
cmp dword [ebp + 8], 0x32ec0a42
jne 0x416ed6
mov eax, 0x13
jmp 0x416fa6
cmp dword [ebp + 8], 0x6b9c16c4
jne 0x416ee9
mov eax, 0x14
jmp 0x416fa6
cmp dword [ebp + 8], 0x94687333
jne 0x416efc
mov eax, 0x15
jmp 0x416fa6
cmp dword [ebp + 8], 0x84a62f94
jne 0x416f0f
mov eax, 0x16
jmp 0x416fa6
cmp dword [ebp + 8], 0x188a0fb1
jne 0x416f22
mov eax, 0x17
jmp 0x416fa6
cmp dword [ebp + 8], 0xbeca8163
jne 0x416f35
mov eax, 0x18
jmp 0x416fa6
cmp dword [ebp + 8], 0x46269df8
jne 0x416f48
mov eax, 0x19
jmp 0x416fa6
cmp dword [ebp + 8], 0xfb202ffd
jne 0x416f5b
mov eax, 0x1a
jmp 0x416fa6
cmp dword [ebp + 8], 0xec06741e
jne 0x416f6e
mov eax, 0x1b
jmp 0x416fa6
cmp dword [ebp + 8], 0x538241f2
jne 0x416f81
mov eax, 0x1c
jmp 0x416fa6
cmp dword [ebp + 8], 0x5b5702be
jne 0x416f94
mov eax, 0x1d
jmp 0x416fa6
cmp dword [ebp + 8], 0x1795fc2c
jne 0x417028
mov eax, 0x1e
sub eax, 1
mov edi, dword fs:[0x18]
add edi, 0x400
mov edi, dword [edi + eax*4]
nop
nop
nop
nop
xor esi, esi
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
xor esi, 0x478f3499
xor edi, esi
nop
nop
mov eax, dword fs:[0x18]
xor ecx, ecx
xor ebx, ebx
add ebx, 1
add ecx, dword [eax + ebx*4]
cmp ebx, 0xc
jne 0x416ff0
xor ecx, 0x886f6849
xor edi, ecx
nop
nop
nop
rdtsc
xor eax, eax
mov al, dh
xor eax, 0x707c7166
nop
xor edi, eax
nop
nop
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x124]
xor edi, eax
mov eax, edi
jmp 0x4170a2
xor esi, esi
nop
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
cmp eax, 0xf0000000
jge 0x417058
add esi, edx
xor esi, 0x6c72938e
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
add esi, edx
xor esi, 0x7fe44dec
mov eax, esi
pop edi
pop esi
pop ebx
pop edx
pop ecx
nop
mov esp, ebp
pop ebp
ret 4