Function at 0x6ee36d
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov ebx, dword [esp + 0x1b]
mov ax, 0x2853
mov ax, word [esp + 0x24]
jmp 0x6ee3dc
setae ah
mov al, ah
pop dword [esp + 5]
mov dx, word [esp + 1]
neg eax
push dword [esp + 0xb]
jmp 0x6ee3f4
pop word [esp + 1]
pop dx
xchg ch, dl
lea edi, [ebx*4]
mov byte [esp + 0x11], bh
not edx
jmp 0x6ee3ba
sub esp, 2
xchg ah, bl
pop edi
popal
lea ebx, reloc.WINMM.dll_midiStreamOut
mov word [esp], di
jmp 0x6ee598
mov bp, word [esp + 5]
mov esi, dword [esp + 0x10]
mov di, word [esp + 0x10]
push word [esp + 0xe]
mov si, 0x7259
jmp 0x6ee4c8
cld
stc
rdtsc
push word [esp + 0xd]
mov bh, byte [esp]
cmc
jmp 0x6ee42a
sub esp, 0x14
lea ebx, [esi*4]
xchg word [esp + 0x11], di
cld
pop dword [esp + 2]
xchg word [esp + 0xa], dx
jmp 0x6ee449
rdtsc
mov byte [esp], dh
setp dh
mov bl, bh
rol cx, cl
neg ebx
jmp 0x6ee467
mov byte [esp + 5], bh
pop word [esp + 0x10]
not esi
xchg esi, edi
push word [esp + 0xc]
mov ebp, dword [esp + 0x16]
jmp 0x6ee56f
lea esi, [esi + 0xed]
mov dword [esp + 0xc], ecx
lea ebp, [esp + edi]
lea ebp, [edx + ebp]
push esp
mov edx, eax
jmp 0x6ee4a7
setne dh
inc edx
not bh
lea ecx, reloc.WINMM.dll_midiStreamOut
setp bh
mov bp, word [esp]
jmp 0x6ee496
sub bp, 0x67e0
bsr cx, cx
not dx
mov bx, di
cpuid
jmp 0x6ee4ec
mov ecx, dword [esp]
xchg byte [esp], cl
add esp, 0
mov dl, dh
setne ah
bsf di, si
jmp 0x6ee505
add esp, 0xc
cpuid
add esp, 3
add esp, 0xd
mov edx, ebp
inc bl
jmp 0x6ee628
mov al, ah
mov si, 0x92d1
pop dword [esp + 0x10]
mov byte [esp + 9], ah
mov cl, ch
xchg ebp, ecx
jmp 0x6ee532
sub esp, 0x10
mov si, sp
mov bp, word [esp + 0x17]
pop word [esp]
mov di, 0xb783
push esp
jmp 0x6ee550
setae dh
pop ecx
cmc
xchg ebx, ecx
xchg bh, cl
mov cx, dx
jmp 0x6ee51e
sub esp, 0x10
push word [esp + 7]
push dword [esp + 0x18]
mov al, 0xf6
xchg di, ax
xchg edi, esi
call fcn.006ee5a9
mov eax, 0xcb307560
sub edi, eax
pop si
mov edi, 0x6c013dea
xchg byte [esp + 0xa], dl
clc
jmp 0x6ee656
rdtsc
lea edx, [eax*4]
xchg ch, dl
neg ah
xchg ecx, eax
mov esi, dword [esp + 7]
jmp 0x6ee5c6
mov dword [esp + 8], esi
lea ecx, [ebx*4]
neg ebp
pushal
btr ecx, edx
jmp 0x6ee93c
xchg bh, cl
pop dword [esp + 0xf]
mov word [esp + 0x12], di
rdtsc
cld
mov ebx, dword [esp + 0x17]
jmp 0x6ee63c
and ax, 0x1bd2
neg edx
mov cl, ch
bswap eax
lea ebp, reloc.WINMM.dll_midiStreamOut
neg edi
jmp 0x6ee747
lea edx, [ecx + 3]
mov cx, word [esp]
bswap edi
pushal
xchg ch, dl
lea esp, [esp + 0x19]
jmp 0x6ee68b
lea esi, [edx*4]
not bx
bsr ax, cx
mov cx, word [esp]
jmp 0x6ee6a7
mov cx, di
mov cl, ch
mov dl, dh
rdtsc
not si
bswap ebx
jmp 0x6ee6c0
mov esi, 0x93c08db6
xchg dh, al
bsr bx, bp
mov ebp, dword [esp]
shr dh, 7
and di, 0x6172
jmp 0x6ee6d9
mov di, word [esp]
clc
shr dh, 7
neg ebp
xchg ch, dl
call fcn.006ee774
mov edx, 0x9eb70495
rdtsc
xchg bh, cl
mov cx, word [esp + 1]
cpuid
pop cx
mov byte [esp], ch
jmp 0x6ee711
mov bl, 0xb8
lea ecx, [edx*4]
xchg word [esp + 2], bx
pop eax
lea esp, [esp]
not bh
jmp 0x6ee727
lea esp, [esp + 0x59]
setae dh
lea edi, reloc.WINMM.dll_midiStreamOut
xchg di, ax
bswap eax
not esi
jmp 0x6ee6f9
mov si, 0xbbbf
stc
mov dword [esp + 3], ecx
xchg dword [esp + 0x35], edi
push dword [esp + 0x34]
sub esp, 0x1a
jmp 0x6ee78b