Function at 0x103f2eb4
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dx, 0x485f
mov ebx, dword [esp]
xor bh, cl
push si
mov ax, 0xc569
jmp 0x103f2e6e
pop dword [esp + 0x12]
pushal
sub esp, 0x15
lea esp, [esp + 0x55]
or dl, 0x58
mov bx, sp
jmp 0x103f2e44
pop bx
mov bl, 0x71
mov eax, dword [esp]
bsf ax, si
xchg ah, dl
rdtsc
jmp 0x103f2e9d
mov dword [esp + 3], eax
bswap ebx
pop ax
mov edx, 0xf142fb96
push dword [esp + 0xa]
push dword [esp + 0x13]
jmp 0x103f2e5a
neg eax
neg edx
sub bx, 0x129f
rdtsc
sub esp, 1
mov ebx, dword [esp]
jmp 0x103f2ed6
push dword [esp + 0x16]
mov ah, 0x2e
mov dl, byte [esp + 0x11]
jmp 0x103f2e86
lea esp, [esp + 0x17]
lea eax, reloc.KERNEL32.dll_GetStringTypeW
pop dx
bsr dx, si
jmp 0x103f2f43
lea ebx, [eax + ecx]
lea esp, [esp]
rcr ebx, cl
mov ax, word [esp]
sub esp, 0x1d
mov bx, 0xa51b
jmp 0x103f2ec0
cld
lea edx, [edx + ebp]
pushfd
pop edx
mov ax, word [esp + 8]
push ebp
jmp 0x103f2f2d
stc
bsf bx, dx
pop ebx
bts ebx, ecx
xchg dword [esp + 3], edx
mov dword [esp], esp
jmp 0x103f2f5b
mov word [esp + 1], si
xor bx, 0x5fb1
mov byte [esp + 2], ah
pushfd
mov dword [esp + 4], edi
setge bh
jmp 0x103f2f1b
xchg dword [esp + 2], eax
sub ebx, 0xa2906ec1
push dword [esp + 6]
std
xchg dword [esp + 8], edx
rdtsc
jmp 0x103f2fd3
add esp, 9
lea edx, [ebp*4]
bsr bx, bp
xchg al, bl
jmp 0x103f2fe3
clc
stc
rdtsc
xchg dx, ax
mov bx, word [esp + 1]
pop bx
jmp 0x103f2fbd
mov dl, 0xe5
lea ebx, [eax + edi]
not bl
xchg ah, dh
mov bl, bh
mov byte [esp], cl
jmp 0x103f36be
lea eax, [esi + ebp]
cld
sub esp, 0x15
call 0x103f3053
or al, bh
not bl
shr ax, cl
mov eax, dword [esp + 8]
pushal
inc bh
jmp 0x103f30da
cld
bsr bx, bp
pop eax
xchg byte [esp], bl
pop word [esp]
jmp 0x103f30f1
xchg dx, ax
neg ax
lea esp, [esp + 0x25]
neg ax
mov dx, word [esp + 5]
mov dx, word [esp]
jmp 0x103f30c4
mov word [esp], si
mov ah, 0x64
add esp, 1
btr dx, bp
call fcn.103f315a
dec eax
popal
jo 0x103f315b
imul edi, dword [edx + 0x65], reloc.KERNEL32.dll_GetStringTypeW
std
mov dl, cl
mov edx, dword [esp]
lea ebx, [edx + ebx]
mov ax, word [esp]
cld
jmp 0x103f3089
xchg byte [esp], ah
xchg ebx, edx
mov ah, bl
mov ax, 0x7f70
mov ax, word [esp + 3]
jmp 0x103f3163
mov ah, 0xb6
lea ebx, [edi*4]
pop word [esp]
mov bx, word [esp + 1]
stc
bsf ax, cx
jmp 0x103f3121
pop ebx
push word [esp + 4]
jmp 0x103f3137
lea edx, [ebp*4]
bsr edx, esp
mov ebx, dword [esp]
not dl
lea ebx, [edx + edx]
btr edx, edi
jmp 0x103f319d
neg dh
mov bh, 0x26
xchg ebx, eax
mov byte [esp + 1], dh
xchg bx, ax
cmp ax, ax
jmp 0x103f310e
sub esp, 3
mov dh, byte [esp + 7]
neg eax
rdtsc
lea eax, [ebx*4]
add esp, 2
jmp 0x103f330c
mov bx, word [esp + 5]
mov ebx, dword [esp + 3]
lea esp, [esp + 3]
xchg dx, ax
xchg bx, ax
bts bx, di
jmp 0x103f3189
mov eax, dword [esp]
lea esp, [esp]
bswap eax
call fcn.103f3210
dec eax
popal
jo 0x103f3227
jb 0x103f3248
add byte gs:[edi], cl
mov bl, 0xf2
btr edx, esi
add esp, 6
mov ax, word [esp]
rcl bh, cl
mov bx, 0x76bf
mov byte [esp], ch
jmp 0x103f31cf
outsb dx, byte [esi]
jae 0x103f3299
insb byte es:[edi], dx
inc ebx
push eax
add byte [edi + eax*4], dl
mov ax, 0x84b5
mov bl, byte [esp]
pop dx
mov ah, bh
call fcn.103f321c
inc ebx
jb 0x103f32aa
popal
je 0x103f32ad
inc esi
imul ebp, dword [ebp + 0x57], 0x8b5b6600
inc esp
and al, 1
pop bx
mov eax, dword [esp + 1]
pop dx
push dword [esp + 1]
lea eax, reloc.KERNEL32.dll_GetStringTypeW
or bl, bh
jmp 0x103f31e5
xchg bx, ax
bswap ebx
std
clc
pop word [esp + 5]
mov word [esp + 2], bx
jmp 0x103f324e
lea esp, [esp + 0x1b]
and al, 0x1b
mov ax, 0x3f7c
xchg ah, al
mov dx, 0x6f4a
jmp 0x103f32c3
pop esp
scasd eax, dword es:[edi]
mov dh, 0x66
xchg edx, ebx
xchg dx, bx
inc bx
mov dx, word [esp + 0x14]
mov ebx, 0xb83e59b8
mov ah, byte [esp + 5]
cld
jmp 0x103f3297
sub esp, 0xc
neg eax
mov al, byte [esp + 0x13]
xor dl, 0xe
xchg dword [esp + 1], ebx
mov dh, 0xb5
jmp 0x103f32f2
add esp, 0x12
pop ax
ror ax, cl
and al, 6
sub esp, 0xd
add esp, 4
jmp 0x103f347b
xchg bl, ah
shl dh, cl
push esp
stc
lea esp, [esp]
xchg word [esp + 2], dx
jmp 0x103f3284
mov dh, cl
call fcn.103f336b
bswap edx
mov dx, si
push word [esp]
mov word [esp], di
not bl
push word [esp + 1]
jmp 0x103f31b8