Function at 0x41afea
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
jmp 0x41afff
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
push ebx
mov ebx, 1
mov ebx, 2
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 5
pop ebx
push ecx
push edx
push ebx
push esi
push edi
cmp dword [ebp + 8], 0x95f210bd
jne 0x41b081
mov eax, 1
jmp 0x41b2a7
cmp dword [ebp + 8], 0x2c2bc37a
jne 0x41b094
mov eax, 2
jmp 0x41b2a7
cmp dword [ebp + 8], 0xa8f11a1d
jne 0x41b0a7
mov eax, 3
jmp 0x41b2a7
cmp dword [ebp + 8], 0x65ea1d7f
jne 0x41b0ba
mov eax, 4
jmp 0x41b2a7
cmp dword [ebp + 8], 0x73ee86a5
jne 0x41b0cd
mov eax, 5
jmp 0x41b2a7
cmp dword [ebp + 8], 0xc9e74357
jne 0x41b0e0
mov eax, 6
jmp 0x41b2a7
cmp dword [ebp + 8], 0x91dfd695
jne 0x41b0f3
mov eax, 7
jmp 0x41b2a7
cmp dword [ebp + 8], 0x13fc7d17
jne 0x41b106
mov eax, 8
jmp 0x41b2a7
cmp dword [ebp + 8], 0x8aa6d0d0
jne 0x41b119
mov eax, 9
jmp 0x41b2a7
cmp dword [ebp + 8], 0x1039fd99
jne 0x41b12c
mov eax, 0xa
jmp 0x41b2a7
cmp dword [ebp + 8], 0x80319f13
jne 0x41b13f
mov eax, 0xb
jmp 0x41b2a7
cmp dword [ebp + 8], 0x60b60e19
jne 0x41b152
mov eax, 0xc
jmp 0x41b2a7
cmp dword [ebp + 8], 0x7df99de5
jne 0x41b165
mov eax, 0xd
jmp 0x41b2a7
cmp dword [ebp + 8], 0x772fcf13
jne 0x41b178
mov eax, 0xe
jmp 0x41b2a7
cmp dword [ebp + 8], 0x78a21b23
jne 0x41b18b
mov eax, 0xf
jmp 0x41b2a7
cmp dword [ebp + 8], 0xf5cc7e7b
jne 0x41b19e
mov eax, 0x10
jmp 0x41b2a7
cmp dword [ebp + 8], 0x569d1e4b
jne 0x41b1b1
mov eax, 0x11
jmp 0x41b2a7
cmp dword [ebp + 8], 0x30e60333
jne 0x41b1c4
mov eax, 0x12
jmp 0x41b2a7
cmp dword [ebp + 8], 0xb32ec163
jne 0x41b1d7
mov eax, 0x13
jmp 0x41b2a7
cmp dword [ebp + 8], 0x355afc83
jne 0x41b1ea
mov eax, 0x14
jmp 0x41b2a7
cmp dword [ebp + 8], 0xa88b0a25
jne 0x41b1fd
mov eax, 0x15
jmp 0x41b2a7
cmp dword [ebp + 8], 0x5c2976df
jne 0x41b210
mov eax, 0x16
jmp 0x41b2a7
cmp dword [ebp + 8], 0x6fd30a21
jne 0x41b223
mov eax, 0x17
jmp 0x41b2a7
cmp dword [ebp + 8], 0x1a6cf68c
jne 0x41b236
mov eax, 0x18
jmp 0x41b2a7
cmp dword [ebp + 8], 0x464dca30
jne 0x41b249
mov eax, 0x19
jmp 0x41b2a7
cmp dword [ebp + 8], 0x405b9f40
jne 0x41b25c
mov eax, 0x1a
jmp 0x41b2a7
cmp dword [ebp + 8], 0x53eb0a40
jne 0x41b26f
mov eax, 0x1b
jmp 0x41b2a7
cmp dword [ebp + 8], 0x1fe231a2
jne 0x41b282
mov eax, 0x1c
jmp 0x41b2a7
cmp dword [ebp + 8], 0x792b383f
jne 0x41b295
mov eax, 0x1d
jmp 0x41b2a7
cmp dword [ebp + 8], 0x2d10b84d
jne 0x41b329
mov eax, 0x1e
sub eax, 1
mov edi, dword fs:[0x18]
add edi, 0x400
mov edi, dword [edi + eax*4]
nop
nop
nop
nop
xor esi, esi
mov eax, VariantCopy
cpuid
shr ecx, 0x10
add esi, ecx
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
xor esi, 0x327f648d
xor edi, esi
nop
nop
mov eax, dword fs:[0x18]
xor ecx, ecx
xor ebx, ebx
add ebx, 1
add ecx, dword [eax + ebx*4]
cmp ebx, 0xc
jne 0x41b2f1
xor ecx, 0x1a381b15
xor edi, ecx
nop
nop
nop
rdtsc
xor eax, eax
mov al, dh
xor eax, 0xf89e6934
nop
xor edi, eax
nop
nop
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x124]
xor edi, eax
mov eax, edi
jmp 0x41b3a3
xor esi, esi
nop
mov eax, VariantCopy
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
cmp eax, 0xf0000000
jge 0x41b359
add esi, edx
xor esi, 0x354e7978
mov eax, VariantCopy
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
add esi, edx
xor esi, 0x836bd0f7
mov eax, esi
pop edi
pop esi
pop ebx
pop edx
pop ecx
nop
mov esp, ebp
pop ebp
ret 4