Function at 0x43371a
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
jmp 0x433766
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 4], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 8], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0xc], eax
nop
nop
push ecx
push edx
rdtsc
mov ecx, 0x17
mul ecx
add eax, 7
mov ecx, 0x1000
sub ecx, 0x10
inc ecx
xor edx, edx
div ecx
add edx, 0x1000
mov eax, edx
pop edx
pop ecx
mov dword [ebp - 0x10], eax
fild dword [ebp - 4]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fmul qword [0xbf61e3]
fstp qword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [0xc6753c], eax
mov dword [0xc67540], edx
fild dword [ebp - 8]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fadd qword [0x5ca2b0]
fstp qword [ebp - 0x2c]
push 0x80000601
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x4c6e70
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push eax
mov ebx, dword [0xc67544]
test ebx, ebx
je 0x43393a
push ebx
call fcn.004c49f3
add esp, 4
pop eax
mov dword [0xc67544], eax
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fadd qword [0xbf61eb]
fstp qword [ebp - 0x2c]
push 0x80000601
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x4c6430
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [0xc67548]
test ebx, ebx
je 0x4339a3
push ebx
call fcn.004c49f3
add esp, 4
pop eax
mov dword [0xc67548], eax
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fmul qword [0xbf61f3]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
call fcn.00404a78
mov dword [0xc6754c], eax
mov dword [0xc67550], edx
push 0x80000301
push 0
push dword [ebp - 4]
push 1
mov ebx, 0x4c6e70
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push dword [ebp - 8]
push 1
mov ebx, 0x4c6e70
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp - 0xc]
push 1
mov ebx, 0x4c6e70
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x4c6e70
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push 0x5ca23a
push dword [ebp - 0x28]
push 0x5ca23a
push dword [ebp - 0x24]
push 0x5ca23a
push dword [ebp - 0x20]
push 0xbf61fb
mov ecx, 8
call fcn.004041b2
add esp, 0x20
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x433a8a
push ebx
call fcn.004c49f3
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x433a9a
push ebx
call fcn.004c49f3
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x433aaa
push ebx
call fcn.004c49f3
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x433aba
push ebx
call fcn.004c49f3
add esp, 4
lea eax, [ebp - 0x30]
push eax
call fcn.004341fe
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x433ad6
push ebx
call fcn.004c49f3
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x433ae9
mov eax, 0x59ed3c
push eax
push 1
mov ebx, 0x4c5920
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x433b12
push ebx
call fcn.004c49f3
add esp, 4
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edx
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 8]
fstp qword [ebp - 0x2c]
fmul qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fild dword [ebp - 4]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 8]
fstp qword [ebp - 0x2c]
fmul qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [0xc67554]
fadd qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
fsub qword [0xbf6202]
fstp qword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x44]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fld qword [0xc67554]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x24]
fadd qword [ebp - 0x24]
fild dword [ebp - 4]
fstp qword [ebp - 0x2c]
fadd qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fld qword [0xc67554]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fmul qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fild dword [ebp - 8]
fstp qword [ebp - 0x34]
fsub qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 4]
fstp qword [ebp - 0x2c]
fmul qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [0xc67554]
fadd qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 4]
fstp qword [ebp - 0x2c]
fmul qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [0xc67554]
fadd qword [ebp - 0x34]
fadd qword [0xbf620a]
fstp qword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 0xc]
fstp qword [ebp - 0x2c]
fmul qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [0xc67554]
fadd qword [ebp - 0x34]
fstp qword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fld qword [0xc67554]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x24]
fmul qword [ebp - 0x24]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x2c]
fadd qword [0xbf6212]
fstp qword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
push 0x80000301
push 0
push dword [ebp - 0x10]
fld qword [0xc67554]
call fcn.00404a78
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x4c8640
call fcn.004c49f9
add esp, 0x1c
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
push 0x80000301
push 0
push 0x1f202
fld qword [0xc67554]
call fcn.00404a78
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x4c4e80
call fcn.004c49f9
add esp, 0x1c
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
push 0x80000601
push dword [0xc67558]
push dword [0xc67554]
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push 0x1e6c
push 0x80000301
push 0
push dword [ebp - 0x20]
push 2
mov ebx, 0x4c4ea0
call fcn.004c49f9
add esp, 0x1c
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
push 0x80000601
push dword [0xc67558]
push dword [0xc67554]
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fsub qword [0xbf621a]
fstp qword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
push 0x80000601
push dword [0xc67558]
push dword [0xc67554]
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x80000301
push 0
push dword [ebp - 4]
push 0x80000301
push 0
push dword [ebp - 0x20]
push 2
mov ebx, 0x4c4ea0
call fcn.004c49f9
add esp, 0x1c
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
fstp qword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [0xc67554], eax
mov dword [0xc67558], edx
fld qword [0xc6753c]
fdiv qword [0xbf61e3]
fstp qword [ebp - 0x24]
fild dword [ebp - 4]
fstp qword [ebp - 0x2c]
fld qword [ebp - 0x24]
fsub qword [ebp - 0x2c]
ftst
fnstsw ax
test ah, 1
je 0x433e7c
fchs
fcomp qword [0x5ca154]
fnstsw ax
test ah, 0x41
jne 0x433ebf
cmp dword [ebp - 0x1c], 0
jne 0x433eab
push 0
mov ebx, 0x4c80d0
call fcn.004c49f9
add esp, 4
jmp 0x433e8d
call fcn.00427d19
push 0
call fcn.004c4a17
add esp, 4
call fcn.0043585b
push VariantClear
push 0
mov eax, dword [0xc67544]
test eax, eax
jne 0x433ed4
mov eax, 0x59ed3c
push eax
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x28]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fsub qword [0x5ca2b0]
fstp qword [ebp - 0x30]
fild dword [ebp - 8]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x30]
fsub qword [ebp - 0x38]
ftst
fnstsw ax
test ah, 1
je 0x433f13
fchs
fcomp qword [0x5ca154]
fnstsw ax
test ah, 0x41
jne 0x433f56
cmp dword [ebp - 0x1c], 0
jne 0x433f42
push 0
mov ebx, 0x4c80d0
call fcn.004c49f9
add esp, 4
jmp 0x433f24
call fcn.00427d19
push 0
call fcn.004c4a17
add esp, 4
call fcn.0043585b
push 0
push 0
push 0
push 0x80000301
push 0
push 3
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [0xc67548]
test eax, eax
jne 0x433f7d
mov eax, 0x59ed23
push eax
push 3
mov ebx, 0x4c6660
call fcn.004c49f9
add esp, 0x28
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x80000101
jne 0x433fb1
and eax, 0xff
jmp 0x433fd7
cmp ecx, 0x80000201
jne 0x433fbc
cwde
jmp 0x433fd7
mov dword [ebp - 0x30], eax
cmp ecx, 0x80000301
je 0x433fda
cmp ecx, 0x80000401
jne 0x433fdf
mov dword [ebp - 0x2c], edx
fild qword [ebp - 0x30]
jmp 0x434001
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x30]
jmp 0x434001
cmp ecx, 0x80000501
jne 0x433fec
fld dword [ebp - 0x30]
jmp 0x434001
cmp ecx, 0x80000601
je 0x43400a
push 2
call fcn.004c49ff
add esp, 4
fstp qword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
fld qword [ebp - 0x30]
fsub qword [0xbf61eb]
fstp qword [ebp - 0x38]
mov ecx, dword [ebp - 0x20]
cmp ecx, 0x80000004
je 0x434033
cmp ecx, reloc.WS2_32.dll_getpeername
jne 0x434043
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x434043
push ebx
call fcn.004c49f3
add esp, 4
fild dword [ebp - 0xc]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x38]
fsub qword [ebp - 0x40]
ftst
fnstsw ax
test ah, 1
je 0x43405a
fchs
fcomp qword [0x5ca154]
fnstsw ax
test ah, 0x41
jne 0x43409d
cmp dword [ebp - 0x1c], 0
jne 0x434089
push 0
mov ebx, 0x4c80d0
call fcn.004c49f9
add esp, 4
jmp 0x43406b
call fcn.00427d19
push 0
call fcn.004c4a17
add esp, 4
call fcn.0043585b
fild qword [0xc6754c]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fdiv qword [0xbf61f3]
fstp qword [ebp - 0x2c]
fild dword [ebp - 0x10]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x2c]
fsub qword [ebp - 0x34]
ftst
fnstsw ax
test ah, 1
je 0x4340c9
fchs
fcomp qword [0x5ca154]
fnstsw ax
test ah, 0x41
jne 0x43410c
cmp dword [ebp - 0x1c], 0
jne 0x4340f8
push 0
mov ebx, 0x4c80d0
call fcn.004c49f9
add esp, 4
jmp 0x4340da
call fcn.00427d19
push 0
call fcn.004c4a17
add esp, 4
call fcn.0043585b
push 1
push 1
call fcn.00436c59
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x43415d
call fcn.00427d19
push 0x80000301
push 0
push 0x80ea58e3
push 1
mov ebx, 0x4c8210
call fcn.004c49f9
add esp, 0x10
call fcn.0043585b
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esp, esp
xor ebp, ebp
xor esi, esi
xor edi, edi
call fcn.004261b4
push 3
call fcn.00433536
mov dword [ebp - 0x20], eax
push VariantClear
push 0
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x434182
mov eax, 0x59ed3c
push eax
push 1
mov ebx, 0x4c5ca0
call fcn.004c49f9
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4341a8
push ebx
call fcn.004c49f3
add esp, 4
cmp dword [ebp - 0x24], 1
jge 0x4341ea
call fcn.0043585b
call fcn.00427d19
push 0x80000301
push 0
push 0x80ea58e3
push 1
mov ebx, 0x4c8210
call fcn.004c49f9
add esp, 0x10
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
xor esp, esp
xor ebp, ebp
xor esi, esi
xor edi, edi
jmp 0x4341fa
mov esp, ebp
pop ebp
ret