Function at 0x897a4e
Capabilities:
Execute anti-debugging instructions

Disassembly:
not ch
rdtsc
lea edi, [esp + eax]
lea edi, reloc.RASAPI32.dll_RasGetConnectStatusA
not ebp
jmp 0x897a6a
cld
mov bx, sp
jmp 0x897a38
mov bh, byte [esp]
lea esp, [esp + 0x10]
xchg byte [esp + 6], dh
setg ah
dec al
jmp 0x897a7e
mov di, bp
xchg dl, ah
bswap esi
mov bp, word [esp + 0x1a]
push word [esp + 0xd]
pop ecx
jmp 0x897a54
mov cx, di
pop dword [esp]
mov ah, 0x90
rdtsc
setae al
xchg cx, dx
jmp 0x897b75
stc
pushfd
xchg ecx, edi
ror ah, cl
xchg dx, bx
lea ebp, [ebp*4]
jmp 0x897af4
xchg byte [esp], dl
lea edx, [edi + edi]
mov byte [esp + 1], dl
bswap edi
lea eax, reloc.RASAPI32.dll_RasGetConnectStatusA
xchg byte [esp], bl
jmp 0x897aa6
sub esp, 0x1b
mov word [esp + 0x12], ax
cld
lea ebx, [ebx*4]
jmp 0x897b35
xchg byte [esp + 2], cl
not bx
not di
xchg dx, ax
pushfd
mov al, byte [esp + 5]
jmp 0x897ade
mov al, 0x1c
mov ebx, 0xab289e1d
mov ebx, dword [esp + 4]
pop ebp
clc
mov word [esp], bp
jmp 0x897ac7
mov esi, edi
mov word [esp + 0xe], cx
mov bx, word [esp + 8]
mov di, dx
jmp 0x897b4b
bsr eax, ebp
add esp, 0x15
mov bx, ax
rdtsc
mov ch, byte [esp + 0x10]
mov si, word [esp + 2]
jmp 0x897b1f
sub esp, 0xd
pop dword [esp + 7]
sub esp, 7
mov al, byte [esp + 0xb]
bswap ebx
shl ebp, cl
jmp 0x897c80
mov dh, bl
push si
pop word [esp + 1]
rdtsc
xchg bl, cl
ror dl, 0
jmp 0x897b0c
mov edi, ecx
mov ebp, edx
cpuid
mov ebx, 0x6e1a05f3
mov dx, di
jmp 0x897bca
mov esi, 0x30b73b44
mov cx, word [esp + 3]
xchg byte [esp], ch
sub esp, 0x10
push dword [esp + 4]
pushfd
jmp 0x897b87
push word [esp + 0xb]
cpuid
call fcn.00897bb4
add esp, 9
push dword [esp + 3]
xchg edx, esi
lea edx, [esi + 0xc5]
mov byte [esp + 0xb], al
add esp, 0x1a
jmp 0x897c34
dec al
mov word [esp + 1], si
lea eax, reloc.RASAPI32.dll_RasGetConnectStatusA
bsr bp, di
sub esp, 0
popal
jmp 0x897b9d
mov ecx, ebp
mov cx, word [esp]
xchg byte [esp], dl
bswap edx
stc
pop dx
jmp 0x897c5e
mov dh, byte [esp + 3]
pop word [esp]
setno ah
bswap esi
lea ebx, [ebx + esi]
mov cl, bh
jmp 0x897c11
lea esi, reloc.RASAPI32.dll_RasGetConnectStatusA
add esp, 2
mov esi, 0xfb4cf0b8
rdtsc
jmp 0x897cb4
mov bx, 0x609c
not ch
xchg bh, cl
xchg edi, ecx
xchg bp, dx
push ecx
jmp 0x897c48
lea esp, [esp + 4]
cmc
sub esp, 0xd
pop dword [esp + 0xc]
mov si, word [esp + 0x22]
xchg di, bx
jmp 0x897bf9
sub esp, 0x18
mov dx, 0xdb7
xchg word [esp + 0xe], dx
rdtsc
pop bx
push word [esp + 0x21]
jmp 0x897cc5
lea edx, [ebx + ebx]
sub esp, 0x11
pop dword [esp + 1]
std
mov al, 0xc8
mov cl, 0xdf
jmp 0x897c99
xor ch, 0x6f
rcr ax, cl
pop dword [esp + 0x14]
xchg dword [esp + 0x13], ebp
pop dx
mov word [esp + 1], dx
jmp 0x897dc3
mov ebx, esp
xchg dword [esp + 7], edx
add esp, 0x18
not ch
pop dword [esp]
mov ebp, eax
jmp 0x897d4b
mov ebx, esi
mov dword [esp + 0x1c], esi
xchg word [esp + 0x10], bp
cld
pop eax
std
jmp 0x897d06
cpuid
seto bl
cpuid
neg ah
xchg dword [esp], eax
mov dword [esp], edi
jmp 0x897d72
mov al, 0xed
mov dl, 0xd8
inc di
push dword [esp + 1]
pop word [esp]
stc
jmp 0x897d35
pop dx
mov si, word [esp + 1]
neg cl
mov bh, ch
bswap ebx
setbe bl
jmp 0x897f8b
mov bl, 8
lea esp, [esp + 2]
neg bx
not ebx
xchg cl, dh
lea edi, reloc.RASAPI32.dll_RasGetConnectStatusA
jmp 0x897d5c
pop dword [esp + 1]
rdtsc
mov ecx, dword [esp + 4]
mov ch, 0x1a
push dword [esp + 0x18]
push word [esp + 4]
jmp 0x897d25
push word [esp + 0x1e]
bsf bx, dx
mov word [esp + 0x1d], bp
lea esi, [ebp*4]
pop word [esp + 0x15]
lea ebp, [eax + ecx]
jmp 0x897d97
lea ebx, [ebp - 4]
mov byte [esp + 4], dl
xchg byte [esp + 3], bh
lea esp, [esp + 4]
jmp 0x897e42
lea esp, [esp + 1]
xchg di, dx
xchg ebx, ebp
mov dl, byte [esp + 5]
neg ch
neg ax
jmp 0x897de2
push dword [esp + 5]
std
add esp, 8
mov edi, 0xebc10394
mov dword [esp], edi
and si, di
jmp 0x897df8
bswap ebx
mov dh, bh
mov ebx, dword [esp + 0x18]
add esp, 5
xchg word [esp + 1], di
jmp 0x897e7c
sub esp, 0x1b
dec al
dec dx
bswap ebx
mov word [esp + 0x11], di
pop cx
jmp 0x897e2c
cmc
not si
xchg word [esp + 1], si
neg eax
pop word [esp + 1]
mov word [esp + 5], sp
jmp 0x897e17
pop word [esp + 4]
cpuid
mov bh, byte [esp + 0xd]
push word [esp]
pop bp
rcl di, 0xc
jmp 0x897ece
xchg bl, al
pop word [esp + 3]
clc
pop word [esp + 2]
pop dword [esp + 1]
xchg cl, dh
jmp 0x897e65
mov bx, word [esp + 0x11]
bsr si, cx
xchg byte [esp + 1], ch
lea ecx, [ebx + 0x8d]
mov word [esp + 5], sp
jmp 0x897f24
bsr cx, cx
mov si, cx
mov dword [esp + 0xc], ebx
mov cl, byte [esp + 0xd]
push word [esp + 3]
mov dx, 0xe098
jmp 0x897eae
cld
sub esp, 4
mov cl, 0x43
xchg si, bp
sub esp, 0xf
pop word [esp + 0xc]
jmp 0x897e99
not ebp
mov ebx, edi
xchg dword [esp + 8], edx
xchg word [esp + 0xc], ax
mov dx, sp
jmp 0x897f4f
sets ch
bswap edi
mov eax, 0x70eda7d5
mov byte [esp + 1], ch
add esp, 4
pop bx
jmp 0x897f0e
mov di, bx
bswap ebp
xchg byte [esp + 0x10], ch
not si
sub bx, sp
jmp 0x897f62
sub esp, 0xe
pop word [esp + 0x12]
cld
xchg ebp, ebx
add esp, 5
sbb ax, sp
jmp 0x897f39
bt ebx, ebp
xchg bp, bx
lea edx, [esi*4]
mov ch, byte [esp + 3]
push word [esp + 9]
mov bp, word [esp + 5]
jmp 0x897fb6
lea edx, [ecx + ebp]
cpuid
lea esp, [esp]
mov byte [esp], dh
lea eax, [ebx + esi]
push cx
jmp 0x897efb
pop edi
mov ecx, dword [esp + 0xe]
pop esi
bt eax, esp
lea ecx, reloc.RASAPI32.dll_RasGetConnectStatusA
mov ebx, 0xdbe5ceb4
call fcn.00897fa0
lea eax, [ebx + ebx]
mov dword [esp + 7], ebp
and eax, edx
lea ebp, [edi + ebp]
cld
jmp 0x898aab
not edi
sub esp, 9
mov eax, edx
mov ebx, eax
mov edi, dword [esp + 0x33]
jmp 0x89803a
rdtsc
push word [esp + 0x27]
cpuid
pop di
cpuid
lea ebx, [edx + edi]
jmp 0x897ffc
mov ebp, dword [esp + 0x27]
mov dl, 0x40
pop word [esp + 2]
rdtsc
jmp 0x89808d
mov di, 0xfaa4
lea ecx, [esi*4]
xchg ebx, esi
mov dword [esp + 0x2c], edi
lea edi, [ebp*4]
pop word [esp + 0xf]
jmp 0x898024
setns bl
xchg edx, eax
clc
mov cl, byte [esp + 0xf]
dec dx
cpuid
jmp 0x898012
push word [esp + 7]
std
call fcn.00898077
mov byte [esp + 0xc], bl
xchg dh, ch
xchg dword [esp + 0x28], ecx
xchg cx, dx
lea esi, [edi + ebp]
jmp 0x898113
mov edi, 0x910a1e
mov bh, byte [esp + 0x12]
lea eax, reloc.RASAPI32.dll_RasGetConnectStatusA
lea esp, [esp + 0x27]
pop dword [esp]
call fcn.008980e8
mov dh, ch
xchg ecx, eax
mov bh, byte [esp]
neg di
mov bp, word [esp + 2]
jmp 0x89820e
setle cl
mov byte [esp + 0x1b], al
mov si, bx
mov ch, byte [esp + 0x1d]
mov dh, ah
push word [esp + 0x18]
jmp 0x898068
push word [esp + 7]
stc
push dword [esp + 0xb]
push word [esp + 0xd]
jmp 0x8981a3
xchg ah, ch
cpuid
push dword [esp + 5]
lea edi, reloc.RASAPI32.dll_RasGetConnectStatusA
mov byte [esp + 4], bh
bsf cx, sp
jmp 0x898175
mov al, byte [esp + 8]
mov word [esp + 9], di
add esp, 0
rol dl, 5
push esi
jmp 0x8981ea
bswap esi
pop word [esp]
push word [esp + 5]
lea edx, reloc.RASAPI32.dll_RasGetConnectStatusA
mov ebp, 0x6643901c
stc
jmp 0x89818b
rdtsc
sub esp, 0x1e
cpuid
mov bl, ch
pop dword [esp]
jmp 0x898369
bsr eax, ecx
mov byte [esp + 0x11], dl
mov dword [esp + 0x13], ebp
add esp, 0x11
mov edi, dword [esp]
add esp, 0
jmp 0x8981d4
mov ah, ch
mov esi, 0x6346b143
cmc
btc ebx, ebx
lea edi, [edi + ebp]
setnp dl
jmp 0x8981bb
xchg dword [esp + 0x1f], edx
call 0x898221
btc si, ax
dec bx
mov bh, byte [esp + 0x21]
rdtsc
jmp 0x89825c
lea esp, [esp + 0x1c]
cmc
push dword [esp + 7]
xchg byte [esp + 0x10], dl
mov bh, 0xd
call 0x89827e
outsb dx, byte [esi]
jns 0x8982cb
mov ebx, 0x87c28766
cli
call 0x89824a
lea esp, [esp + 0xb]
jmp 0x898288
mov esi, dword [esp + 4]
pushfd
cpuid
bts di, sp
push dword [esp + 2]
inc eax
jmp 0x8982e3
rdtsc
inc bp
xchg ch, cl
sub esp, 0x1f
mov ecx, ebp
bt si, sp
jmp 0x898308
mov dword [esp + 2], eax
inc esp
and al, 2
bswap edx
not edx
neg ebx
push dword [esp + 8]
xchg esi, eax
jmp 0x8982f2
pop ebx
mov esi, dword [esp + 1]
pop dword [esp]
stc
rdtsc
xchg dl, cl
jmp 0x8982b9
pop di
clc
xchg dword [esp + 2], edx
pop dword [esp + 1]
lea ebp, [edi + edi]
rdtsc
jmp 0x89831b
pop di
add esp, 0x1d
rcr dx, 1
not edi
mov edi, ebp
xchg word [esp + 6], dx
jmp 0x8982ca
bsr cx, bp
inc si
mov esi, edx
add esp, 4
mov bl, byte [esp + 2]
mov bx, sp
jmp 0x8983c8
lea ebx, reloc.RASAPI32.dll_RasGetConnectStatusA
xchg edi, eax
push dword [esp + 8]
xchg word [esp + 0x15], bp
mov esi, dword [esp + 0x17]
pop ax
jmp 0x898241
pop eax
sub bh, bh
add eax, 0x20ffea33
bswap ebp
call fcn.00898386
mov word [esp + 0xd], ax
mov byte [esp + 6], cl
mov bh, dl
mov byte [esp + 0x23], cl
mov bl, 0x2b
mov ebp, edx
jmp 0x8983f1
mov dword [esp], esp
sub esp, 0x1e
bswap eax
xchg byte [esp + 0x19], bl
mov ah, 0x93
sub esp, 0xb
jmp 0x89839c
bswap ebp
neg bx
mov word [esp + 1], si
lea esp, [esp + 6]
inc esi
jmp 0x898475
mov edi, 0xc10053e7
mov edx, dword [esp + 9]
xchg byte [esp + 6], bl
xchg esi, ebx
mov ecx, dword [esp + 5]
inc dx
jmp 0x8983db
lea esp, [esp + 0x10]
call 0x898438
mov edx, dword [esp + 0xa]
sub ax, 0xa713
xchg dh, cl
mov bx, word [esp + 6]
jmp 0x89879e
sub esp, 0x1e
lea edx, [esp - 0x4e]
mov ax, 0xc57d
lea ebp, [eax + ebp]
sbb si, 0x8a41
bswap ebx
jmp 0x89815b
push edx
mov cl, dl
pop dword [esp + 0xb]
mov si, 0xf60b
pop cx
popal
call fcn.008984d1
add esp, 3
rcr ebp, 0x13
lea ebp, [eax*4]
cpuid
lea eax, [edx*4]
xchg dx, di
jmp 0x8985d1
mov word [esp + 0x18], ax
inc si
mov dx, 0x3195
neg cl
xchg byte [esp + 0x1b], cl
xchg dl, al
jmp 0x8984e7
xchg si, bx
std
setp al
mov byte [esp], dh
mov ch, byte [esp]
jmp 0x89858e
mov cx, 0x7e9c
xchg bl, bh
setle ah
dec cx
rdtsc
cpuid
jmp 0x898533
bsr ax, bp
mov di, 0x60c0
call fcn.008985b6
xor ah, byte [ecx + 0x50a35031]
pushal
mov dword [reloc.RASAPI32.dll_RasGetConnectStatusA], eax
mov bh, byte [esp]
setno bl
cmc
mov cl, dl
mov byte [esp], cl
sub esp, 0x13
jmp 0x89855a
mov ebx, 0x6c12cff5
neg bx
sbb edi, esi
cpuid
xchg ah, bh
ror bh, cl
jmp 0x898570
bswap edi
setns cl
mov cx, bx
bsr ebp, edx
bsf ebx, edx
xchg si, dx
jmp 0x898549
lea ecx, reloc.RASAPI32.dll_RasGetConnectStatusA
mov word [esp + 0x14], bp
pop cx
xchg byte [esp + 0x1a], dl
btc ax, di
mov ebx, 0xaa5df93f
jmp 0x89851e
mov ecx, dword [esp + 0x15]
bt di, dx
mov edx, dword [esp + 0xe]
xchg byte [esp + 0x1b], bl
push dword [esp + 0x1c]
pop word [esp + 0x1c]
jmp 0x898605
mov byte [esp + 0xc], bl
push dx
not di
neg edi
btr dx, sp
xchg esi, eax
jmp 0x8984b7