Function at 0x41a9c2
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
push 8
call fcn.0042b1b2
add esp, 4
mov dword [ebp - 0x4c], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebp - 0x50], 0
jmp 0x41aa81
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x14], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x54], esp
push 0
mov eax, 0
call fcn.0042b1ca
cmp dword [ebp - 0x54], esp
je 0x41ac14
push 0xaaf
push 0x4069d19
push 6
call fcn.0042b1c4
add esp, 0xc
push 0x80000301
push 0
push dword [0xe1d458]
push 1
mov eax, 2
mov ebx, 0x48ddd0
call fcn.0042b1dc
add esp, 0x10
push 1
call fcn.004183d6
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x54]
push eax
call fcn.00418f8c
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41ac6d
push ebx
call fcn.0042b1b8
add esp, 4
cmp dword [ebp - 0x58], 0
jg 0x41aca8
push 0x80000301
push 0
push dword [0xe1d458]
push 1
mov eax, 2
mov ebx, 0x48ddf0
call fcn.0042b1dc
add esp, 0x10
mov eax, 0x4b7bfc
jmp 0x41b47d
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
je 0x41acc6
push eax
mov ebx, eax
call fcn.004011d1
inc eax
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41acd7
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x1c], eax
call fcn.00401508
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41acfd
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
call fcn.00417022
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x58], eax
push dword [ebp - 0x20]
push dword [ebp - 0x58]
push dword [0xe1d4a0]
mov ecx, 3
call fcn.0040123c
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41ad61
push ebx
call fcn.0042b1b8
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x41ad77
mov eax, 0x4b7bfc
push eax
push 1
mov ebx, 0x42c840
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41ada3
push ebx
call fcn.0042b1b8
add esp, 4
lea eax, [ebp - 0x60]
push eax
call fcn.00406428
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41adc8
push ebx
call fcn.0042b1b8
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41addf
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0041b546
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x2faf080
push 0x80000301
push 0
push 0x159ced57
push 1
mov ebx, 0x42be00
call fcn.0042b1be
add esp, 0x10
push 0x80000601
push edx
push eax
push 1
mov ebx, 0x42c840
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41ae4a
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x2c], 0
jne 0x41b32b
push 6
call fcn.004183d6
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push eax
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41ae7f
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x38], eax
call fcn.00417022
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x58], eax
push 0x80000301
push 0
push dword [ebp - 0x24]
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x5c], eax
push dword [0xe1d444]
push 0x4b7c1f
push dword [ebp - 0x5c]
push 0x4b7c1f
push dword [ebp - 0x58]
push 0x4b7c1f
push dword [ebp - 0x20]
push 0x4b7c1f
push dword [ebp - 0x28]
push 0x4b7c1f
push dword [ebp - 0x1c]
push 0x4b7c1f
push dword [ebp - 0x38]
push 0xdecb95
mov ecx, 0xe
call fcn.0040123c
add esp, 0x38
mov dword [ebp - 0x60], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41af31
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x5c]
test ebx, ebx
je 0x41af44
push ebx
call fcn.0042b1b8
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x41af5a
mov eax, 0x4b7bfc
push eax
push 1
mov ebx, 0x42c840
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x64], eax
mov ebx, dword [ebp - 0x60]
test ebx, ebx
je 0x41af86
push ebx
call fcn.0042b1b8
add esp, 4
mov eax, dword [ebp - 0x64]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41af9d
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x3c]
test eax, eax
jne 0x41afb4
mov eax, 0x4b7c17
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x54], eax
push dword [ebp - 0x54]
push 0xdecb9d
mov ecx, 2
call fcn.0040123c
add esp, 8
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41affe
push ebx
call fcn.0042b1b8
add esp, 4
push getpeername
push 0
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x41b014
mov eax, 0x4b7bfc
push eax
push 1
mov ebx, 0x42c840
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x5c], eax
mov ebx, dword [ebp - 0x58]
test ebx, ebx
je 0x41b040
push ebx
call fcn.0042b1b8
add esp, 4
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41b057
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0x989680
mov dword [ebp - 0x54], 0
push 0
push dword [ebp - 0x54]
mov dword [ebp - 0x58], 0
push 0
push dword [ebp - 0x58]
mov dword [ebp - 0x5c], 0
push 0
push dword [ebp - 0x5c]
lea eax, [ebp - 0x3c]
push eax
call fcn.00406863
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
push eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41b0be
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x44], eax
mov eax, 0x4b7c17
xor ecx, ecx
test eax, eax
je 0x41b0d0
mov ecx, dword [eax + 4]
push ecx
add eax, 8
push eax
mov eax, dword [ebp - 0x44]
xor ebx, ebx
test eax, eax
je 0x41b0e1
mov ebx, dword [eax + 4]
add eax, 8
push eax
cmp ebx, ecx
mov eax, 1
jne 0x41b0f8
dec eax
test ecx, ecx
je 0x41b0f8
call fcn.00403166
add esp, 0xc
test eax, eax
je 0x41b326
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x41b11d
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41b12e
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x4c]
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x41b157
push eax
mov ebx, eax
call fcn.004011d1
inc eax
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41b16d
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
mov ebx, dword [ebp - 0x4c]
add ebx, 4
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x48]
test eax, eax
je 0x41b19c
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [ebp - 0x54]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41b1b2
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov ebx, dword [ebp - 0x54]
mov dword [ebx], eax
push 0xe1d4f4
push 4
mov eax, 2
call fcn.0042b1ac
add esp, 8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x54], eax
mov ebx, dword [0xe1d4f4]
mov dword [ebp - 0x58], ebx
call fcn.00404019
mov dword [ebp - 0x5c], ecx
mov edi, dword [ebp - 0x58]
mov dword [edi], 1
add edi, 4
mov eax, ecx
inc eax
mov dword [edi], eax
add edi, 4
cmp edi, ebx
je 0x41b20e
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x5c]
inc eax
shl eax, 2
add eax, 8
push eax
push dword [ebp - 0x58]
call fcn.0042b1d0
add esp, 8
mov dword [0xe1d4f4], eax
mov edi, eax
add edi, 8
mov eax, dword [ebp - 0x5c]
shl eax, 2
add edi, eax
mov eax, dword [ebp - 0x54]
push edi
push eax
push 8
call fcn.0042b1b2
add esp, 4
pop esi
mov edi, eax
push eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41b274
push eax
mov ebx, eax
call fcn.004011d1
inc eax
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
push esi
push edi
test eax, eax
je 0x41b291
push eax
mov eax, dword [eax + 4]
add eax, 8
push eax
call fcn.0042b1b2
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
stosd dword es:[edi], eax
pop eax
pop edi
mov dword [edi], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x41b2ab
mov eax, 0x4b7c17
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x54], eax
push getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x41b2da
mov eax, 0x4b7bfc
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41b306
push ebx
call fcn.0042b1b8
add esp, 4
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41b31d
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
jmp 0x41b326
jmp 0x41b3ce
mov ebx, dword [0xe1d4f4]
call fcn.00404019
push ebx
push ecx
mov eax, dword [ebp - 0x2c]
dec eax
jns 0x41b355
push 0x1056
push 0x4069d19
push 4
call fcn.0042b1c4
add esp, 0xc
pop ecx
pop ebx
cmp eax, ecx
jl 0x41b372
push 0x1056
push 0x4069d19
push 1
call fcn.0042b1c4
add esp, 0xc
shl eax, 2
add ebx, eax
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x54], ebx
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebx]
test eax, eax
jne 0x41b39a
mov eax, 0x4b7c17
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
push eax
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41b3ca
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov dword [ebp - 0x50], eax
push 0x80000301
push 0
push dword [0xe1d458]
push 1
mov eax, 2
mov ebx, 0x48ddf0
call fcn.0042b1dc
add esp, 0x10
lea eax, [ebp - 0x50]
push eax
call fcn.00419001
mov dword [ebp - 0x54], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x54]
test eax, eax
jne 0x41b417
mov eax, 0x4b7c17
push eax
push 1
mov ebx, 0x42d190
call fcn.0042b1be
add esp, 0x10
mov dword [ebp - 0x58], eax
mov ebx, dword [ebp - 0x54]
test ebx, ebx
je 0x41b443
push ebx
call fcn.0042b1b8
add esp, 4
mov eax, dword [ebp - 0x58]
jmp 0x41b47d
push eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x41b48e
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x41b49e
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x41b4ae
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x41b4be
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x41b4ce
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x41b4de
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x41b4ee
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x41b4fe
push ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x4c]
push ebx
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41b512
push ebx
call fcn.0042b1b8
add esp, 4
pop ebx
add ebx, 4
push ebx
mov ebx, dword [ebx]
test ebx, ebx
je 0x41b526
push ebx
call fcn.0042b1b8
add esp, 4
pop ebx
call fcn.0042b1b8
add esp, 4
mov ebx, dword [ebp - 0x50]
test ebx, ebx
je 0x41b53f
push ebx
call fcn.0042b1b8
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 4