Function at 0x71c137
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ecx, dword [esp]
mov bx, word [esp]
mov dl, byte [esp]
jmp 0x71c1a4
pushfd
xchg cl, dh
xchg dword [esp + 4], edi
mov ecx, 0x9e380f1e
mov ebx, dword [esp]
call fcn.0071c178
not dh
jmp 0x71c203
mov dx, bp
jmp 0x71c279
mov esi, dword [esp + 0x2c]
mov di, word [esp]
ror di, 5
jo 0x71c1ed
jno 0x71c2b8
cmp bh, byte [esi + 0x41c64b2c]
psadbw mm2, mm6
jmp 0x71c203
mov eax, 0x5e7627cd
sub esp, 0xb8
jmp 0x71c259
jmp 0x71c222
jmp 0x71c28d
mov ebp, esp
mov bx, 0x347c
lea ebx, [esp + ecx]
shr al, cl
jno 0x71c243
jo 0x71c28d
add eax, 0x4c64012a
jmp 0x721793
lea edi, [esp]
mov cx, dx
xchg cl, bh
sub esp, 8
js 0x71c241
mov eax, 0x5e7627cd
jmp 0x71c227
mov ecx, esi
neg bx
jmp 0x71c2d3
clc
bsf bx, cx
mov bx, cx
neg edx
lea edx, [edx + 0xae]
neg dh
jmp 0x71c2f2
mov dx, bp
jmp 0x71c279
mov bx, cx
neg edx
lea edx, [edx + 0xae]
jmp 0x71c2a8
jnp 0x71c298
clc
bsf bx, cx
jmp 0x71c2bd
mov al, 0x39
jmp 0x71c3a0
rdtsc
inc ebx
jno 0x71c2dc
mov al, 0x39
jmp 0x71c3a0
pushfd
xchg dx, bx
xchg ebx, eax
sub esp, 0xf
bswap eax
lea esp, [esp + 3]
jmp 0x71c42b
sub esi, 0x10206779
call fcn.0071c329
rol esi, 0
jb 0x71c389
pushfd
jmp 0x71c3ca
xchg dx, bx
xchg ebx, eax
sub esp, 0xf
jmp 0x71c6be
rol esi, 0
rdtsc
sub esp, 2
jno 0x71c476
jo 0x71c460
lodsd eax, dword [esi]
sub dword [ecx - reloc.MSVFW32.dll_DrawDibDraw], edi
dec edx
fdivr dword [edi - 0x1092c1b6]
jg 0x71c461
jmp 0xcaf46bc
rdtsc
lea ebx, [ebp*4]
xor dword [ebp + reloc.MSVFW32.dll_DrawDibDraw], ecx
add byte [eax], al
lea esp, [esp + 2]
jmp 0x71c68a
rdtsc
lea ebx, [ebp*4]
lea esp, [esp + 2]
jmp 0x71c68a
lea esp, [esp + 2]
jmp 0x71c64a
pushal
lea edx, [ecx + edx]
pop word [esp + 0xc]
jmp 0x71c4a3
mov bx, word [esp]
jmp 0x71c569
pushal
lea edx, [ecx + edx]
pop word [esp + 0xc]
lea esp, [esp + 2]
add esi, dword [edi]
mov dh, byte [esp]
mov ebx, dword [esp]
mov edx, dword [esp]
jmp 0x71c5e6
lea esp, [esp + 0x14]
not esi
bsr bx, bx
je 0x71c63d
jne 0x71c4c0
mov word [esp + 6], bx
mov byte [esp + 0x10], ah
lea esp, [esp + 2]
xchg dword [esp + 0x34], edx
neg dh
mov dx, 0xf3fc
jmp 0x71c77a
bswap eax
call fcn.0071c491
mov edx, dword [esp + 3]
jmp 0x71c6e9
xchg dword [esp + 4], edx
cmc
lea edx, [edx - 0xe4]
push eax
push word [esp]
jmp 0x71c74a
adc dh, ah
mov dh, byte [esp]
push dword [esp + 8]
ret 0xc
mov word [esp + 2], bp
lea esp, [esp + 2]
xchg dword [esp + 8], edx
lea edx, [eax + esi]
cmc
mov dl, byte [esp]
jmp 0x71c72d
mov dx, 0xd94c
lea edx, [ecx + ebx]
setne dl
push dword [esp + 0x34]
ret 0x38
jmp 0x72179e
not ch
xchg cl, ch
shr ecx, 0x1c
jg 0x72177d
jle 0x72177d
mov esp, edi
lea ecx, [edx + 0x75]
mov cl, 0x88
lea ecx, [edx - 0x73]
jmp 0x7217d9
push eax
ret

Function at 0x71c329
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov bx, bp
jmp 0x71c34c
inc dl
jge 0x71c30f
mov bx, bp
push word [esp + 1]
mov ebx, 0xc1da11c0
lea esp, [esp + 2]
jmp 0x71c376
push word [esp + 1]
mov ebx, 0xc1da11c0
lea esp, [esp + 2]
jmp 0x71c376
bswap eax
lea eax, [edx + ebx]
rdtsc
rdtsc
jmp 0x71c3ab
ror esi, 0
lea ebx, reloc.MSVFW32.dll_DrawDibDraw
dec ax
jp 0x71c35c
jnp 0x71c3c1
rdtsc
jmp 0x71c3ab
bswap eax
lea eax, [edx + ebx]
rdtsc
jmp 0x71c385