Function at 0xdd9fc7
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov word [esp + 0x1d], bp
mov dword [esp + 0x1f], edi
mov byte [esp + 0x19], bl
jmp 0xdda05b
cmp eax, esp
dec dx
shr bl, 0
mov ah, byte [esp + 7]
mov dword [esp + 3], edi
jmp 0xdda031
push dword [esp + 0x11]
not di
xchg bh, cl
lea esp, [esp + 0xb]
mov dword [esp + 6], ecx
dec ch
jmp 0xdda006
pop cx
rdtsc
pushal
not ecx
mov edi, 0x68a0711f
clc
jmp 0xdda044
mov ecx, edx
lea eax, reloc.WINMM.dll_waveOutUnprepareHeader
xchg byte [esp + 0x12], ah
rdtsc
add esp, 0xb
jmp 0xdda06e
push word [esp + 0x2f]
setl cl
mov dword [esp + 0x16], esi
popal
mov dl, 0xe2
cpuid
jmp 0xdda01c
xchg cx, ax
pop word [esp + 0x19]
add esp, 0xd
rdtsc
mov bp, word [esp + 3]
ror cx, cl
jmp 0xdda0c3
xchg word [esp + 0x11], ax
mov byte [esp + 0xb], ch
push bp
pop edi
jmp 0xdda19e
stc
push word [esp + 0x13]
lea esp, [esp]
xchg ebp, eax
pop word [esp + 8]
pop ax
jmp 0xdda0ad
mov byte [esp + 0x11], ch
mov ax, 0x64bd
mov bh, 0x75
mov byte [esp + 6], dl
jmp 0xdda120
bsr ebp, esp
cpuid
setge al
mov byte [esp + 3], dl
or ebp, ebx
mov ax, sp
jmp 0xdda0f7
mov dh, byte [esp + 0x16]
push dword [esp + 2]
bsf ebp, ebx
lea ebx, [eax + edi]
pop word [esp + 0x11]
or al, ah
jmp 0xdda16a
xchg ch, bh
push dword [esp + 5]
xchg ebx, edx
bswap ebp
xchg byte [esp + 0x14], cl
push dword [esp + 0xc]
jmp 0xdda10d
sete ah
mov ch, bh
push dword [esp + 5]
stc
pop ebx
lea esp, [esp]
jmp 0xdda17d
mov ch, 0xbb
mov bl, ch
push word [esp + 0xc]
pop eax
lea esp, [esp + 1]
cmp cl, 0xa4
jmp 0xdda151
and ch, ah
mov cl, dl
pushfd
mov ah, 0x46
lea edx, [ebx*4]
mov ch, byte [esp + 0x1a]
jmp 0xdda1b7
pop word [esp + 2]
pop bx
mov bl, 0x5c
push dword [esp + 3]
lea ecx, [esi*4]
bts edx, ecx
jmp 0xdda13d
setge bl
bsf di, bx
bswap eax
mov dword [esp + 0xa], esp
pop dword [esp + 6]
mov byte [esp + 0xa], bh
jmp 0xdda222
bsf bx, di
lea ebp, reloc.WINMM.dll_waveOutUnprepareHeader
xchg byte [esp + 0xf], ch
jmp 0xdda24d
push dword [esp + 0xc]
lea ebx, [eax*4]
cmc
xchg word [esp + 0x16], dx
jmp 0xdda1f3
mov ch, byte [esp + 0x18]
mov bh, 0x4e
lea ecx, [ecx + 0xc2]
pop esi
mov ax, 0xa068
cpuid
jmp 0xdda209
xchg bp, ax
xchg dword [esp + 0x14], ebp
mov di, dx
btr cx, si
jmp 0xdda819
neg si
xchg word [esp + 0x11], bx
mov ecx, dword [esp + 8]
mov dword [esp + 1], edx
mov dword [esp + 1], esp
mov dword [esp + 0x10], edi
jmp 0xdda237
xchg word [esp], cx
lea esp, [esp]
mov word [esp], bp
mov dh, bh
add edi, edx
dec ebx
jmp 0xdda2a1
xchg word [esp + 0xb], dx
add esp, 0x12
rcl bl, 2
mov bp, dx
cpuid
bt ax, di
jmp 0xdda275
xchg ebp, esi
mov esi, dword [esp]
add esp, 1
mov cl, dl
and dl, bh
mov ah, byte [esp + 1]
jmp 0xdda438
xchg bp, di
btc si, cx
pop dword [esp + 8]
lea eax, [ecx*4]
xchg dword [esp + 1], edx
xchg bp, ax
jmp 0xdda28b
mov byte [esp], bh
btc ax, ax
lea esp, [esp]
call fcn.00dda347
mov bp, 0xa90e
pushal
add esp, 7
inc cx
bsf ecx, esp
bswap esi
jmp 0xdda4db
pushfd
btr ebx, eax
neg ax
lea edx, reloc.WINMM.dll_waveOutUnprepareHeader
lea ebx, [edx + ebx]
jmp 0xdda4b1
mov dword [esp], ebx
setle bh
setne dh
mov esi, dword [esp + 1]
pop edi
xchg edi, eax
jmp 0xdda470
lea edi, reloc.WINMM.dll_waveOutUnprepareHeader
mov esi, ebx
xchg bh, ah
pop dword [esp]
jmp 0xdda4ef
mov dx, word [esp + 5]
mov ecx, ebx
xchg byte [esp + 7], bh
pop eax
setb bl
mov ch, byte [esp + 2]
jmp 0xdda49b
add esp, 8
mov dh, ah
pop ebp
mov si, 0xecb8
xchg word [esp + 0xa], bx
shr esi, 0x19
jmp 0xdda489
mov esi, 0x7d9fa3b9
mov dh, byte [esp + 2]
lea esp, [esp]
lea esi, [edx + ebp]
btr eax, ebx
xchg dword [esp], esi
jmp 0xdda5bd
pop dword [esp + 9]
mov di, dx
mov word [esp], di
neg dx
mov eax, 0x3fa8bc84
mov ebp, esi
jmp 0xdda2c3
cpuid
ror edi, cl
setns al
mov edi, ebp
mov bx, word [esp + 2]
dec esi
jmp 0xdda591
bts edx, ecx
not ch
clc
mov ebx, 0x3e0ff9c1
mov byte [esp + 1], dh
xor bl, cl
jmp 0xdda532
pop word [esp]
cld
not dl
mov dx, 0xc779
xchg byte [esp], dl
neg dl
jmp 0xdda7e6
xchg cl, ch
mov bl, 0x55
lea edx, [edx*4]
rdtsc
push word [esp + 1]
xchg word [esp], ax
jmp 0xdda55b
mov ax, 0x8de3
mov cx, word [esp]
setle ah
xchg edx, eax
pop word [esp]
mov si, word [esp + 2]
jmp 0xdda571
mov word [esp + 1], dx
mov esi, 0xead7c682
lea esi, [ebx + ebp]
rcl eax, cl
mov ecx, edi
mov di, cx
jmp 0xdda548
pop bp
lea ebx, reloc.WINMM.dll_waveOutUnprepareHeader
push si
dec esi
mov cx, 0x547d
setb bh
jmp 0xdda968
mov word [esp], si
shl si, 4
mov bh, byte [esp + 2]
neg eax
call fcn.00dda7ad
push dword [esp + 4]
rdtsc
pop word [esp + 6]
mov ch, byte [esp + 3]
mov esi, ecx
mov ah, 0x5b
jmp 0xdda7ce
push dword [esp + 0xf]
xchg dword [esp + 7], ebx
xchg dx, ax
xchg word [esp + 0x10], di
mov di, word [esp + 0xc]
mov dx, 0xeaef
jmp 0xdda518
bswap esi
xchg byte [esp + 0x2d], ch
sub esp, 0x17
lea esp, [esp + 0x4b]
bswap edi
call fcn.00dda837
mov bx, bp
mov dl, byte [esp + 1]
inc cx
pop di
not edi
call fcn.00dda935
invalid
sub esp, 0x1d
pop dword [esp + 0x17]
pop ebx
sub esp, 0x1a
mov byte [esp], cl
not ecx
jmp 0xdda84d
xchg edx, ecx
pop bx
pop si
setns ch
mov dword [esp], esi
rdtsc
jmp 0xdda896