Function at 0x6da901
Capabilities:
Execute anti-debugging instructions

Disassembly:
btc ebx, eax
xchg ebp, eax
pop bx
xchg dl, bl
bsf dx, bx
jmp 0x6da91d
btc bx, di
jmp 0x6da8eb
xchg dword [esp + 9], edx
cpuid
rdtsc
not eax
sub esp, 0x12
jmp 0x6da966
mov byte [esp + 1], ch
mov edi, 0x889b69a0
mov dl, byte [esp + 0xc]
mov dx, word [esp + 6]
setno dl
mov dl, bl
jmp 0x6da907
lea esp, [esp + 0x29]
mov dh, dl
sete dl
neg ecx
mov ch, bl
shr bx, cl
jmp 0x6da9bc
mov word [esp + 0x28], bx
mov dword [esp + 9], edi
pop dword [esp + 0x10]
setnp dl
mov cx, word [esp + 9]
btc ebp, ebx
jmp 0x6da950
neg cx
seto ch
bswap eax
mov byte [esp], ah
bsf eax, eax
jmp 0x6dab1b
cmc
mov dl, 0x9e
rdtsc
or bx, dx
mov bp, word [esp]
mov byte [esp], dh
jmp 0x6da9a6
add esp, 5
pop bp
mov bl, 0xfa
mov edi, eax
mov byte [esp + 9], cl
lea eax, [edx*4]
jmp 0x6daaa4
cld
lea edx, reloc.WINMM.dll_midiStreamOut
sub esp, 0x11
lea ecx, [edx*4]
mov word [esp + 0xc], sp
mov ebp, 0xd659ba14
jmp 0x6da9e5
pop word [esp + 5]
xchg dword [esp + 2], edi
neg eax
mov bp, cx
jmp 0x6daa76
mov dx, 0x5498
mov bh, 0xa9
xchg si, ax
mov si, word [esp + 8]
push cx
not cl
jmp 0x6daa23
xchg edi, eax
pop ecx
xchg byte [esp], cl
mov dl, cl
bts cx, bp
mov bx, si
jmp 0x6daa8c
lea esp, [esp]
cld
mov byte [esp], al
mov byte [esp], dh
dec dh
xchg byte [esp], dh
jmp 0x6daad5
xchg dword [esp + 3], ebp
pop word [esp + 4]
bt dx, bp
xchg cx, bp
cld
lea edi, [edx + edi]
jmp 0x6daa4c
rdtsc
clc
pop eax
mov byte [esp], dl
clc
lea esp, [esp]
jmp 0x6daa5d
btc bx, sp
lea edi, [ebx*4]
shr bh, cl
rdtsc
btr bx, bx
cpuid
jmp 0x6daa39
mov ch, byte [esp]
xchg di, si
xchg ecx, esi
call fcn.006daabe
mov edi, 0x2f671718
push si
xchg al, ah
std
bsr cx, bp
jmp 0x6daddf
lea ebp, [esi*4]
mov edi, dword [esp]
lea edi, [ecx + esi]
inc ax
mov byte [esp], dh
rdtsc
jmp 0x6daa06
mov ebx, 0x8df082ab
not ah
mov al, ch
xchg dword [esp + 1], ecx
mov ebx, dword [esp]
jmp 0x6dab84
mov dh, byte [esp + 8]
lea ebx, [eax + ecx]
xchg byte [esp + 2], bh
bswap esi
pop dword [esp]
cpuid
jmp 0x6dab34
push word [esp + 0xc]
push dword [esp + 0xe]
pop bx
mov edi, 0x42963676
lea esi, reloc.WINMM.dll_midiStreamOut
add esp, 0xc
jmp 0x6dabb2
lea ebp, reloc.WINMM.dll_midiStreamOut
xchg dword [esp + 4], eax
push dword [esp + 0xc]
pop dword [esp + 2]
cpuid
rdtsc
jmp 0x6dab5e
mov ebp, eax
btc dx, si
xchg word [esp + 0x10], cx
mov dx, bx
jmp 0x6dabdd
lea eax, [ecx + ebx]
mov byte [esp + 3], ah
pushal
mov dx, word [esp + 8]
mov dh, 0x57
xchg dword [esp + 0x20], eax
jmp 0x6dab9c
not ebx
mov dh, 0xa0
mov ch, 0x76
lea ebp, reloc.WINMM.dll_midiStreamOut
mov bx, word [esp]
jmp 0x6dac2c
lea edx, [esi*4]
sub esp, 0x1e
lea esp, [esp + 0x43]
bsr ebp, ecx
mov ecx, dword [esp]
mov ah, byte [esp]
jmp 0x6dabc7
mov al, byte [esp + 6]
ror ch, 6
mov dh, ch
pop esi
pushfd
mov edx, 0x1e408ff3
jmp 0x6dab4a
cld
lea ecx, reloc.WINMM.dll_midiStreamOut
rdtsc
bswap esi
neg ebx
setno bl
jmp 0x6dac5e
cpuid
bswap eax
cld
xchg bx, si
clc
cmc
jmp 0x6dac15
lea edx, [edi + edi]
sbb ecx, esp
mov si, 0x4c6d
mov byte [esp + 2], bl
mov bp, sp
push bx
jmp 0x6dac82
mov edx, ebx
btr bp, bx
push ebp
mov ebx, esi
mov bh, dl
cld
jmp 0x6dac38
push word [esp + 6]
btr cx, sp
lea ecx, [edi*4]
jmp 0x6dacc8
mov ebx, ecx
mov bp, 0xdaa1
push ebx
mov ch, 0x5e
mov byte [esp + 1], dh
xchg word [esp + 5], cx
jmp 0x6dac6c
rol bl, 4
not cl
cmc
popal
mov word [esp + 5], ax
bsr di, si
jmp 0x6dac00
inc di
lea ecx, [edx + esi]
pop ebp
cmc
call fcn.006dacdb
aad 0x59
leave
test al, 0x5b
mov bh, 0x38
sbb esi, dword [edx + 0x6d]
mov cl, 0x85
xchg dword [esp + 3], ebx
dec ebp
bswap ebp
mov dword [esp + 2], esp
mov byte [esp + 8], dh
jmp 0x6dacb2
not bl
xor edx, 0x6ce8eb12
mov di, sp
pop word [esp + 0x25]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], esi
jmp 0x6dac9d
mov dl, byte [esp + 3]
lea edi, [eax + ebp]
pop word [esp + 9]
rol si, 8
sub esp, 0xd
push di
jmp 0x6dacf5