Function at 0x71de3c
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x71ded3
lea edi, [ebp*4]
inc cl
inc bl
xchg ecx, esi
jmp 0x71deb0
rdtsc
lea esp, [esp]
not bx
xchg bh, cl
not dh
lea ebp, [ecx + 0xfb]
jmp 0x71df52
lea eax, [ecx*4]
mov ah, byte [esp + 5]
bsf ax, ax
lea esp, [esp + 1]
pop ebp
not ah
jmp 0x71de84
mov ebx, ebp
bswap ebp
bsr si, cx
xchg byte [esp + 3], dl
stc
mov edi, 0x55b6408a
jmp 0x71de41
sub esp, 6
mov dword [esp + 2], esi
xchg word [esp + 6], dx
bsf dx, ax
lea edi, [ecx*4]
xchg word [esp + 1], bx
jmp 0x71df98
mov dl, 0xb4
push esp
mov si, word [esp]
mov word [esp + 2], sp
mov ax, dx
not ebx
jmp 0x71df16
lea esp, [esp]
mov ebx, ecx
mov byte [esp], bh
mov edx, 0x896566c
lea esp, [esp]
cld
jmp 0x71df3a
mov bx, 0x1739
mov dx, word [esp + 3]
neg edx
mov al, 0x3e
lea esp, [esp + 6]
jmp 0x71dfdd
push dword [esp + 6]
mov ecx, eax
lea edi, [ebp*4]
cmc
setp ch
jmp 0x71df65
neg bh
mov word [esp + 8], dx
mov cx, dx
cpuid
mov ax, sp
cpuid
jmp 0x71df7d
pop dword [esp]
not edx
btc eax, ebx
mov cl, ch
xchg word [esp + 1], cx
xchg dword [esp], ebp
jmp 0x71e6c4
pop ebx
shl bp, cl
xchg dword [esp + 4], ecx
xchg ebp, esi
mov word [esp + 2], di
bswap ebx
jmp 0x71dfab
mov ebp, esi
mov ax, 0x4085
mov cl, 0x72
push word [esp + 8]
push word [esp + 4]
push word [esp + 0xb]
jmp 0x71dfc5
setne dh
mov dword [esp + 0x1f], ebp
mov ebx, ebp
inc bl
cmc
stc
jmp 0x71e030
shl dx, cl
mov eax, 0xa3989a98
neg ecx
bswap ebp
rcr edi, 0x15
rdtsc
jmp 0x71e3d5
ror bh, 3
lea esi, [ecx + edi]
neg ch
push dword [esp + 3]
xchg ecx, ebp
mov bp, 0x120d
jmp 0x71dff6
cmc
pop di
mov ch, byte [esp + 0x10]
mov byte [esp + 5], dh
mov ebp, ecx
inc edi
jmp 0x71e005
bswap edx
not ebx
pop edi
cpuid
xchg byte [esp + 0xa], cl
pop dword [esp + 0x15]
jmp 0x71e01c
bswap esi
mov byte [esp + 5], dh
pushal
inc bl
lea edx, reloc.KERNEL32.dll_DuplicateHandle
not bh
jmp 0x71e046
mov ax, word [esp + 0x22]
cpuid
mov ecx, 0x124b4f18
pop word [esp + 0x11]
pop ecx
xchg bx, si
jmp 0x71e0c4
lea esp, [esp]
pop word [esp]
rdtsc
mov ax, word [esp + 1]
cpuid
pushal
jmp 0x71e074
bswap ecx
setg dh
cmc
btc ebp, edi
push word [esp + 1]
cld
jmp 0x71e135
pop dword [esp + 0xc]
bsf bx, si
mov byte [esp + 0xd], bh
mov ebx, dword [esp + 0xd]
jmp 0x71e0ad
mov bp, word [esp]
xchg ch, dl
push esp
lea esi, [ebp*4]
mov dword [esp], ecx
mov ecx, 0xa899bcf4
jmp 0x71e09a
sub esp, 0x1e
cmc
add bx, 0x87ae
mov dword [esp + 8], ecx
lea esp, [esp + 0x1e]
jmp 0x71e183
cmc
not dx
lea ebx, [ebx*4]
mov dword [esp + 0x12], eax
push word [esp + 6]
cpuid
jmp 0x71e0f3
mov ch, byte [esp + 4]
xchg byte [esp + 6], cl
mov bl, bh
mov ebx, 0x353311e4
pop ecx
mov bl, bh
jmp 0x71e10a
mov esi, 0x5bfefad4
push word [esp + 0xc]
mov ebp, esi
mov dword [esp + 5], ebp
jmp 0x71e1d7
sub esp, 0x18
cld
pop dword [esp]
lea edx, reloc.KERNEL32.dll_DuplicateHandle
lea esp, [esp + 9]
mov ebp, ecx
jmp 0x71e149
xchg dword [esp + 0x10], ebx
xchg dword [esp + 0xb], ebp
xchg dword [esp + 0xf], eax
mov bp, dx
add esp, 0x15
mov dh, byte [esp + 3]
jmp 0x71e160
xchg ecx, eax
btr edx, edx
bsf di, si
call fcn.0071e370
inc esp
jne 0x71e21c
insb byte es:[edi], dx
imul esp, dword [ebx + 0x61], 0x61486574
outsb dx, byte [esi]
insb byte es:[edi], dx
add byte gs:[ecx - 0x7e6db94], cl
mov dword [esp + 0x19], ebp
clc
mov cx, 0xd67b
push dword [esp + 0x10]
lea edi, reloc.KERNEL32.dll_DuplicateHandle
xor ax, 0x54a4
jmp 0x71e19b
mov word [esp + 3], dx
neg esi
mov dword [esp + 5], eax
mov ecx, dword [esp + 3]
pushal
setae ah
jmp 0x71e1b9
shr edx, 0x17
popal
xchg dword [esp], esi
pop edi
bsf dx, ax
not bp
jmp 0x71e0db
mov di, word [esp + 0xc]
mov dh, byte [esp + 9]
rcl si, cl
lea eax, [ebx + ebp]
setae bh
push word [esp + 0x17]
jmp 0x71e26c
dec edi
inc esi
outsd dx, dword [esi]
jb 0x71e28e
popal
je 0x71e271
jae 0x71e29a
popal
inc ecx
add byte [edi], cl
xor dword [ebx - reloc.KERNEL32.dll_DuplicateHandle], eax
shl byte [esi + 0xf], cl
mov ebp, 0x3bb66c5
mov dword [reloc.KERNEL32.dll_DuplicateHandle], eax
and al, 0x13
rdtsc
sub esp, 0x10
btr edx, edx
bsr ax, bp
mov bx, 0xa303
stc
jmp 0x71e204
mov ah, byte [esp + 0x13]
xchg dh, al
bswap ebp
lea esi, [ecx + 0xe3]
jmp 0x71e311
mov edi, ecx
push word [esp + 0x15]
mov bp, 0x3829
btc eax, edi
jmp 0x71e23f
mov ah, byte [esp + 2]
lea edx, [ebp*4]
adc al, 0xad
add byte [eax], al
add byte [eax], al
xchg byte [esp + 0x22], bl
xchg word [esp + 0x25], ax
pop edx
jmp 0x71e255
je 0x71e2b4
psadbw mm3, mm6
inc esi
bswap ebx
inc dx
jmp 0x71e22c
cpuid
cpuid
mov dl, dh
mov byte [esp + 0x11], ah
btc ecx, ebx
pop eax
jmp 0x71e2ee
dec eax
popal
jo 0x71e30c
imul edi, dword [edx + 0x65], reloc.KERNEL32.dll_DuplicateHandle
cpuid
mov dl, dh
xchg dword [esp + 0xd], eax
lea ecx, reloc.KERNEL32.dll_DuplicateHandle
sub si, 0x2118
mov dl, 0x5c
jmp 0x71e29a
mov ch, byte [esp + 5]
xchg edx, edi
mov dword [esp + 1], ecx
cpuid
inc edx
setle bh
jmp 0x71e341
add ebx, ebp
add esp, 0xb
mov word [esp], bx
xchg edi, eax
mov dh, byte [esp + 7]
xchg word [esp + 5], di
jmp 0x71e2d5
popal
add ch, bh
xchg bp, bx
lea eax, [esi + 0x5d]
xchg word [esp + 0x1b], si
neg cx
xchg ebx, edx
add esp, 0x10
jmp 0x71e2be
mov si, word [esp + 2]
cpuid
mov di, word [esp + 6]
lea esp, [esp + 3]
xchg byte [esp], cl
jmp 0x71e354
mov si, 0xfc67
xchg bx, ax
bswap ecx
setge dh
btc ecx, edi
mov al, ah
jmp 0x71e326
mov byte [esp + 1], dh
lea edx, [ebp*4]
pop word [esp]
neg ah
mov byte [esp + 1], bh
jmp 0x71e3b8
mov ax, 0xffcf
not dh
mov esi, ebp
xchg word [esp], bx
shr ch, 5
call fcn.0071e39a
push edx
popal
inc esi
imul ebp, dword [ebp], reloc.KERNEL32.dll_DuplicateHandle
lock xchg word [esp + 1], di
neg dx
mov bl, pe_nt_image_headers32
xchg word [esp + 1], di
xchg byte [esp + 8], cl
setl dh
mov esi, dword [esp + 0x19]
jmp 0x71e1f0
setge ch
neg di
lea ebx, [edi*4]
push edx
xchg bp, ax
lea edi, [ebx + ebx]
jmp 0x71e061