Function at 0x6411ed
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov cx, bp
mov ah, byte [esp + 0x15]
setne dh
push word [esp + 0x19]
pushfd
mov dl, ch
jmp 0x641035
mov byte [esp + 0x20], dl
add esp, 0x12
dec cx
bsf dx, di
push word [esp + 0xb]
sub esp, 0
jmp 0x640fef
mov cl, 0x4d
rdtsc
pop dword [esp + 0x17]
push dword [esp + 0xa]
jmp 0x641088
mov dl, byte [esp]
mov cx, si
push word [esp + 0x14]
stc
mov byte [esp + 0x1c], dl
rdtsc
jmp 0x64101f
xchg word [esp + 0xb], ax
pop dword [esp + 4]
lea eax, [ecx*4]
not ax
push word [esp + 9]
bswap eax
jmp 0x641008
mov dh, 0x11
mov eax, ecx
mov eax, dword [esp + 0x14]
sub esp, 0x11
xchg cx, ax
jmp 0x641127
mov ecx, 0x20fa4abb
bt ax, dx
bsf dx, sp
xchg al, ah
xchg byte [esp + 0x14], dh
cld
jmp 0x641072
cld
ror ecx, cl
mov ax, dx
btr ax, cx
bsf edx, ebx
push dword [esp + 8]
jmp 0x641056
pop dx
mov ax, word [esp + 0xe]
shr dl, 7
add esp, 2
push word [esp + 0x1d]
jmp 0x641105
xchg byte [esp + 1], cl
xchg dx, ax
btr ecx, ebx
mov dword [esp + 0x24], esp
mov ecx, 0xc165700
lea eax, [edx + edi]
jmp 0x6410bf
lea eax, [edx*4]
pop edx
rdtsc
xchg word [esp + 5], cx
jmp 0x64115c
xchg dword [esp + 0x25], ecx
std
cld
xchg ecx, eax
mov edx, 0x81eea8d4
pop eax
jmp 0x6410ef
mov ecx, dword [esp + 0x16]
btr eax, eax
mov edx, dword [esp + 0x1d]
push dword [esp + 0xf]
or ch, 0x19
pop word [esp + 0xf]
jmp 0x6410d8
mov dx, 0xdfad
mov dx, bp
pop dword [esp + 0x18]
lea ecx, [ebp*4]
mov ax, cx
jmp 0x64118a
mov cx, word [esp + 6]
bsf ecx, esp
mov eax, dword [esp + 0x26]
xchg cx, ax
add esp, 1
pop eax
jmp 0x641140
mov word [esp + 2], ax
call fcn.006411b4
insd dword es:[edi], dx
imul esp, dword [ecx + ebp*2 + 0x53], 0x61657274
insd dword es:[edi], dx
dec edi
jne 0x6411fc
add byte [edi + 0x24548766], bh
invalid
xchg word [esp + 0xf], dx
bsf ecx, ebx
bsr ax, si
pushfd
pop cx
sub esp, 0x14
jmp 0x641171
rol dx, cl
mov ch, byte [esp + 0x1e]
jmp 0x6410ac
mov byte [esp], bh
mov ah, byte [esp + 6]
xchg edx, ecx
pop dword [esp]
lea ecx, [eax - 0xa3]
jmp 0x641367
xchg ah, ch
pop dword [esp + 7]
mov al, byte [esp + 5]
pop word [esp + 9]
pop cx
sub esp, 0x13
jmp 0x641271
lea eax, [ebp*4]
cld
push bp
cld
mov cl, dh
neg al
jmp 0x641229
sub esp, 2
xchg word [esp + 0xc], ax
push dword [esp + 8]
mov edx, dword [esp + 0xd]
jmp 0x6412c0
stc
mov eax, ebx
mov byte [esp + 0x18], bl
neg ax
lea edx, [edi*4]
cld
jmp 0x64125b
bsf eax, eax
mov dl, bl
mov cx, word [esp + 9]
std
xchg cx, ax
setge dl
jmp 0x64124a
mov dh, byte [esp + 9]
mov edx, ecx
rdtsc
mov dl, byte [esp + 0xa]
xchg edx, eax
jmp 0x64132b
mov cx, di
std
dec cx
pop dword [esp + 0x12]
cld
rdtsc
jmp 0x6412aa
mov word [esp + 3], si
push word [esp + 0x1d]
mov ch, 0x60
stc
jmp 0x64130c
rdtsc
bt cx, ax
cld
bsr edx, ebp
push ecx
push dword [esp + 0x13]
jmp 0x6412cf
dec cl
mov dl, bh
cmc
pop edx
dec cx
not ax
jmp 0x64133f
xchg byte [esp + 0x20], cl
push dword [esp + 5]
pop cx
pop dword [esp + 0xd]
mov cx, dx
shl ah, 2
jmp 0x6412f6
lea eax, [edx*4]
mov dword [esp + 2], edi
pop ecx
xchg dword [esp + 0x13], ecx
pushfd
clc
jmp 0x6412e5
bswap eax
add esp, 0x22
btc ax, cx
xchg dl, al
lea eax, [esp + 0x4b]
rcl ah, cl
jmp 0x641394
mov eax, dword [esp]
rdtsc
xchg byte [esp + 4], ch
push dword [esp + 3]
push dword [esp + 9]
stc
jmp 0x641297
lea edx, [ebx*4]
bt edx, esp
setge ah
xchg byte [esp], dl
jmp 0x6413c1
mov ecx, dword [esp]
lea eax, reloc.WINMM.dll_midiStreamStop
xchg ecx, edx
mov dx, 0x9e6c
mov al, cl
bsf dx, sp
jmp 0x64137e
cmp cx, 0x7d88
lea esp, [esp]
rdtsc
bsr edx, esi
mov dl, dh
call fcn.006413db
add eax, eax
lea eax, [esp + ebp]
add esp, 0
lea eax, reloc.WINMM.dll_midiStreamStop
mov byte [esp], dl
btc dx, dx
and cx, 0x55c1
jmp 0x6413ab