Function at 0x870207
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov word [esp + 0x17], bx
mov byte [esp + 3], ah
lea ebx, [edx*4]
jmp 0x870252
mov al, ah
xchg dh, al
push edx
mov cl, ch
lea eax, [eax - 0x79]
mov ax, 0xd60d
jmp 0x870265
pop cx
not dh
xchg dword [esp + 3], eax
bswap edi
sub esp, 0x1c
lea esp, [esp + 0x43]
jmp 0x870239
rdtsc
pop bp
mov word [esp], sp
xchg byte [esp], al
lea esi, [ebx + edi]
lea eax, [eax - 0x19]
jmp 0x87075f
mov ch, byte [esp]
setbe ch
mov ax, sp
add esp, 0
bsr bp, cx
cmc
jmp 0x8702e7
mov bl, 0x18
add esp, 0
mov cl, ch
shr eax, 0x11
mov edi, esi
mov al, ah
jmp 0x870292
mov byte [esp], ah
mov bp, 0x4969
not dh
setno ah
not dx
bswap esi
jmp 0x8702b4
ror bh, 3
xchg byte [esp], bl
inc esi
stc
xchg ebp, edi
add esp, 0
jmp 0x870382
mov edi, esi
lea esp, [esp]
lea ebp, [ebx*4]
lea ecx, [eax - 0x99]
cpuid
lea edx, [esp + ebx]
jmp 0x8702d4
lea ebp, [edx*4]
inc bp
xchg byte [esp], al
mov bh, byte [esp]
xchg ebp, edx
call fcn.0087032e
bsf dx, ax
mov esi, eax
xchg byte [esp], al
btc ecx, edi
xchg byte [esp], al
mov cl, 0x22
jmp 0x8703b0
rdtsc
mov cl, ch
add si, 0xff9e
mov cl, 0xc2
mov esi, dword [esp]
sub di, 0x26d0
jmp 0x870345
mov byte [esp], dh
lea esp, [esp + 1]
xor dl, ch
mov byte [esp], ah
cpuid
mov si, word [esp]
jmp 0x8703e1
bsr bp, bp
pop word [esp]
push word [esp + 1]
lea esp, [esp + 3]
bsr di, cx
cpuid
jmp 0x870397
add ebx, ebp
mov bx, word [esp]
call fcn.00870532
insd dword es:[edi], dx
imul esp, dword [ecx + ebp*2 + 0x4f], 0x65527475
jae 0x870444
je 0x8703e1
cld
mov ax, word [esp]
lea edi, [eax - 0x71]
neg dx
ror esi, 0x19
xchg byte [esp], cl
jmp 0x8703c9
lea esp, [esp]
mov ax, sp
mov edx, ebp
lea ebx, [ecx - 0x3b]
mov ecx, ebp
mov edx, dword [esp]
jmp 0x8702ff
xchg dword [esp + 3], ecx
cmc
mov bx, dx
mov ch, byte [esp + 6]
jmp 0x87047b
setge dh
cpuid
mov dword [esp + 1], esi
xchg bp, ax
mov dl, dh
xchg word [esp + 6], bx
jmp 0x8704d0
mov dx, 0x7e73
xchg edx, ecx
mov edx, 0x99b6a400
cpuid
push esp
inc edi
jmp 0x8704fe
push word [esp + 3]
shr ch, 5
lea edi, [eax + edi]
push dword [esp + 6]
btr eax, edx
bsr si, bp
jmp 0x8704b6
xchg word [esp + 0xc], dx
add esp, 0x16
mov ax, 0x6067
rdtsc
jmp 0x870514
mov cx, sp
xchg ecx, eax
mov dl, dh
push dword [esp + 0xc]
mov bp, word [esp + 0x15]
xchg byte [esp + 0x16], dl
jmp 0x8704e8
xchg cx, ax
sete ah
mov edx, 0x3f930d08
mov ecx, esi
xchg ebp, esi
mov dx, 0xb453
jmp 0x87055b
btc ebp, edi
lea esp, [esp]
xchg bh, cl
lea ebp, [eax + 0x29]
bsf di, si
jmp 0x87066e
mov di, word [esp]
bsf di, ax
mov bp, bx
cpuid
pop dx
lea ebp, reloc.RASAPI32.dll_RasHangUpA
jmp 0x870545
mov bp, word [esp]
inc al
not ax
mov bx, di
mov dl, dh
mov ebx, 0x62fa4d80
jmp 0x8703fe
mov dl, dh
xchg word [esp + 1], si
xor eax, esi
bswap ebx
xchg bh, cl
call fcn.008705a8
invalid
bswap edx
xchg cx, bp
bswap edi
pop dword [esp]
btc esi, ebx
pop edi
jmp 0x870595
mov bl, 0x68
btr esi, edx
bsf si, si
mov ebx, dword [esp + 0x15]
pop di
inc dl
jmp 0x8705c0
lea esi, [ecx*4]
sub esp, 0x14
mov cx, word [esp + 0x10]
pop word [esp + 7]
and di, 0xdd1a
push dword [esp + 7]
jmp 0x87061e
xchg word [esp], bp
add esp, 1
cpuid
setae bh
mov edi, dword [esp]
add esp, 0
jmp 0x87057d
stc
btr edi, edx
xchg word [esp], ax
xchg di, bp
rdtsc
cpuid
jmp 0x87071b