Function at 0xda943e
Capabilities:
Execute anti-debugging instructions

Disassembly:
sub di, 0x56aa
jmp 0xda9400
lea esi, reloc.MSVFW32.dll_DrawDibDraw
setge dh
mov ah, 0x46
mov ecx, 0xbe3662f9
mov al, cl
mov di, dx
jmp 0xda9490
pop edx
pop word [esp + 3]
call 0xda943e
mov al, 0x8b
jl 0xda9465
or byte [esi - 0x75], ah
inc esp
and al, 8
cld
mov eax, 0x8d2b97ec
jmp 0xda9473
push dword [esp + 5]
xchg word [esp + 0xb], cx
mov eax, esp
lea ecx, [esi + edi]
xchg byte [esp + 2], al
les ecx, [ebp + 0x44863e0c]
and al, 2
xchg dword [esp + 1], ebx
jmp 0xda9432
mov word [esp + 9], bp
bswap ebx
add esp, 0xa
clc
not ax
not ecx
jmp 0xda94ba
mov word [esp], dx
mov al, 0x7a
mov dx, word [esp]
pushfd
push word [esp + 7]
pop si
jmp 0xda945b
neg bh
not edi
mov esi, 0x9daa38b5
inc ebp
bsr di, si
jmp 0xda9605
mov si, word [esp]
pop ax
btr bp, bp
xchg bx, ax
inc ax
mov ecx, dword [esp]
jmp 0xda94a4
shl ch, 0
xor di, sp
rdtsc
not esi
jmp 0xda9550
lea eax, [edx + edx]
xchg edx, eax
mov ch, byte [esp]
setle al
setnp dh
mov ah, 0x80
jmp 0xda94e6
push edi
mov edi, 0x836256df
std
not ecx
mov di, 0x206f
setg ah
jmp 0xda9533
mov bh, 0x1e
dec dl
not ecx
mov cx, si
mov bh, al
xchg edx, esi
jmp 0xda950e
mov edx, edi
push bx
bswap edi
mov byte [esp + 2], al
inc di
setbe ch
jmp 0xda957d
lea ebx, [edi*4]
xchg bp, si
lea ecx, [edx + ebx]
std
mov di, 0x21c2
bts edx, edi
jmp 0xda9524
push word [esp]
push word [esp + 7]
bt esi, esp
mov dl, byte [esp + 2]
jmp 0xda9595
lea edx, reloc.MSVFW32.dll_DrawDibDraw
mov word [esp + 1], bx
cld
xchg byte [esp + 2], bh
lea ebp, [esi + ebp]
shl dx, cl
jmp 0xda9567
std
mov byte [esp + 3], al
lea edi, [esi*4]
mov ch, 0x5d
xchg dx, bx
pop word [esp]
jmp 0xda95d9
xchg bp, cx
lea eax, [eax + edi]
dec eax
bswap esi
std
mov ax, word [esp]
jmp 0xda94fc
xchg dword [esp + 5], ecx
bswap edx
xchg word [esp + 3], si
mov di, dx
jmp 0xda95ed
bsr si, di
mov dword [esp + 2], edi
rdtsc
pushfd
mov bx, 0x484b
neg cx
jmp 0xda95c3
mov ebp, dword [esp + 2]
sub esp, 0x1d
ror ebx, 4
add esp, 0x17
rdtsc
bt ecx, edx
jmp 0xda9669
btc bp, dx
rcl bp, 8
bswap eax
ror bx, 6
setp bl
xchg edx, eax
jmp 0xda95b0
mov ah, bl
xchg ebp, eax
setne cl
mov dl, 0xb4
clc
lea ebx, [edx + edi]
jmp 0xda964e
cpuid
mov ebx, dword [esp + 0xa]
setae bl
mov si, 0x44f4
mov di, 0xb7fe
xchg esi, edx
jmp 0xda961a
rdtsc
mov dword [esp + 4], esi
dec bp
add esp, 0xc
bswap edx
mov bx, 0xa7ad
jmp 0xda9692
cpuid
mov edx, dword [esp + 0xf]
ror dx, cl
bswap edx
mov byte [esp + 6], bl
pop si
jmp 0xda9639
mov byte [esp], bh
call fcn.00da967c
not ax
xchg ecx, edi
setg bl
xchg word [esp + 2], di
pop dword [esp]
jmp 0xda97d8
xor ebp, 0x8dca628
mov dh, cl
bswap edx
cpuid
mov dword [esp], edi
jmp 0xda96ed
lea esi, [esp + 0x8c]
rdtsc
bswap ebx
xchg dword [esp], ebp
rdtsc
xchg byte [esp + 3], dh
jmp 0xda96c1
mov al, byte [esp + 5]
mov eax, dword [esp + 3]
ror ax, 2
not ah
lea eax, [ebx*4]
cpuid
jmp 0xda9762
rdtsc
push sp
pop dword [esp]
mov eax, 0x24f314a5
lea ebp, reloc.MSVFW32.dll_DrawDibDraw
rdtsc
jmp 0xda96d7
xchg bp, dx
mov cx, 0x8309
dec cl
cpuid
btr bp, di
jmp 0xda978b
pop word [esp]
bt ax, ax
xchg byte [esp], cl
rdtsc
mov edi, dword [esp]
mov word [esp], di
jmp 0xda972c
mov ecx, dword [esp + 3]
pop ecx
mov esi, edx
setle ah
push word [esp]
xchg byte [esp], al
jmp 0xda9742
inc bh
std
push word [esp + 1]
xchg byte [esp + 4], bl
mov byte [esp + 6], dh
jmp 0xda97b5
push word [esp + 1]
mov bx, di
mov ch, bh
btr edx, ebp
sub esp, 3
mov ch, dh
jmp 0xda9775
xchg cx, bp
call fcn.00da979f
mov bl, 0x41
cpuid
cpuid
xchg edi, ebp
mov dh, dl
mov cx, 0x5832
jmp 0xda9805
cpuid
xchg byte [esp + 1], al
bswap esi
mov ebx, dword [esp + 6]
mov bh, dl
xchg dword [esp + 3], edi
jmp 0xda9716
mov dx, word [esp + 7]
sub esp, 0xc
bswap ecx
cpuid
jmp 0xda9837
mov ebp, dword [esp + 0xb]
setl ch
xchg bx, ax
mov word [esp + 5], bp
lea esi, [ecx*4]
cpuid
jmp 0xda97ef
sub esp, 3
xchg byte [esp + 8], cl
not cx
call fcn.00da9862
mov ecx, 0x22d7b022
mov esp, ebx
sbb dh, byte [ebp + 0x66]
push dword [esp + 0xc]
push word [esp + 0xc]
xchg byte [esp + 0x10], al
mov cl, ch
rcl ebx, cl
push word [esp + 1]
push eax
jmp 0xda981f