Function at 0x40c163
Capabilities:
Execute anti-debugging instructions

Disassembly:
push ebp
mov ebp, esp
jmp 0x40c178
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
mov eax, 1
mov eax, 2
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 4
mov eax, 2
mov eax, 5
mov eax, 6
popal
push ebx
mov ebx, 1
mov ebx, 2
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 4
mov ebx, 2
mov ebx, 5
mov ebx, 5
pop ebx
push ecx
push edx
push ebx
push esi
push edi
cmp dword [ebp + 8], 0x9269b90c
jne 0x40c1fa
mov eax, 1
jmp 0x40c420
cmp dword [ebp + 8], 0x303edafe
jne 0x40c20d
mov eax, 2
jmp 0x40c420
cmp dword [ebp + 8], 0x2bbce7f1
jne 0x40c220
mov eax, 3
jmp 0x40c420
cmp dword [ebp + 8], 0x34599e63
jne 0x40c233
mov eax, 4
jmp 0x40c420
cmp dword [ebp + 8], 0xb004b956
jne 0x40c246
mov eax, 5
jmp 0x40c420
cmp dword [ebp + 8], 0x8acc252
jne 0x40c259
mov eax, 6
jmp 0x40c420
cmp dword [ebp + 8], 0x6a0099ac
jne 0x40c26c
mov eax, 7
jmp 0x40c420
cmp dword [ebp + 8], 0x5e105803
jne 0x40c27f
mov eax, 8
jmp 0x40c420
cmp dword [ebp + 8], 0xd2c0ba86
jne 0x40c292
mov eax, 9
jmp 0x40c420
cmp dword [ebp + 8], 0xdcbbb710
jne 0x40c2a5
mov eax, 0xa
jmp 0x40c420
cmp dword [ebp + 8], 0xd3a0bf22
jne 0x40c2b8
mov eax, 0xb
jmp 0x40c420
cmp dword [ebp + 8], 0x129c4865
jne 0x40c2cb
mov eax, 0xc
jmp 0x40c420
cmp dword [ebp + 8], 0x66194af9
jne 0x40c2de
mov eax, 0xd
jmp 0x40c420
cmp dword [ebp + 8], 0x6cb8c4f4
jne 0x40c2f1
mov eax, 0xe
jmp 0x40c420
cmp dword [ebp + 8], 0xc3e8b7f4
jne 0x40c304
mov eax, 0xf
jmp 0x40c420
cmp dword [ebp + 8], 0x690d1309
jne 0x40c317
mov eax, 0x10
jmp 0x40c420
cmp dword [ebp + 8], 0x72501486
jne 0x40c32a
mov eax, 0x11
jmp 0x40c420
cmp dword [ebp + 8], 0x5aa81acf
jne 0x40c33d
mov eax, 0x12
jmp 0x40c420
cmp dword [ebp + 8], 0x42c7ba06
jne 0x40c350
mov eax, 0x13
jmp 0x40c420
cmp dword [ebp + 8], 0xb4421802
jne 0x40c363
mov eax, 0x14
jmp 0x40c420
cmp dword [ebp + 8], 0x34cf11c6
jne 0x40c376
mov eax, 0x15
jmp 0x40c420
cmp dword [ebp + 8], 0x3182c19
jne 0x40c389
mov eax, 0x16
jmp 0x40c420
cmp dword [ebp + 8], 0xe2baeb5e
jne 0x40c39c
mov eax, 0x17
jmp 0x40c420
cmp dword [ebp + 8], 0x12225df7
jne 0x40c3af
mov eax, 0x18
jmp 0x40c420
cmp dword [ebp + 8], 0x482b4b48
jne 0x40c3c2
mov eax, 0x19
jmp 0x40c420
cmp dword [ebp + 8], 0xebe26754
jne 0x40c3d5
mov eax, 0x1a
jmp 0x40c420
cmp dword [ebp + 8], 0xd695dfcb
jne 0x40c3e8
mov eax, 0x1b
jmp 0x40c420
cmp dword [ebp + 8], 0xa17bc900
jne 0x40c3fb
mov eax, 0x1c
jmp 0x40c420
cmp dword [ebp + 8], 0x44853be5
jne 0x40c40e
mov eax, 0x1d
jmp 0x40c420
cmp dword [ebp + 8], 0xfa14f66e
jne 0x40c4a2
mov eax, 0x1e
sub eax, 1
mov edi, dword fs:[0x18]
add edi, 0x400
mov edi, dword [edi + eax*4]
nop
nop
nop
nop
xor esi, esi
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
xor esi, 0x485bf0d6
xor edi, esi
nop
nop
mov eax, dword fs:[0x18]
xor ecx, ecx
xor ebx, ebx
add ebx, 1
add ecx, dword [eax + ebx*4]
cmp ebx, 0xc
jne 0x40c46a
xor ecx, 0xbb40875d
xor edi, ecx
nop
nop
nop
rdtsc
xor eax, eax
mov al, dh
xor eax, 0xa7212701
nop
xor edi, eax
nop
nop
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x124]
xor edi, eax
mov eax, edi
jmp 0x40c51c
xor esi, esi
nop
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
cmp eax, 0xf0000000
jge 0x40c4d2
add esi, edx
xor esi, 0x8fa9c95a
mov eax, reloc.WS2_32.dll_getsockname
cpuid
shr ecx, 0x10
add esi, ecx
nop
nop
mov eax, reloc.WS2_32.dll_getpeername
cpuid
shr edx, 0x18
shr ecx, 0x18
add edx, ecx
add esi, edx
nop
mov eax, 1
xor edx, edx
cpuid
add esi, edx
xor esi, eax
rdtsc
add esi, edx
xor esi, 0xee19d4c5
mov eax, esi
pop edi
pop esi
pop ebx
pop edx
pop ecx
nop
mov esp, ebp
pop ebp
ret 4