Function at 0x103e9626
Capabilities:
Execute anti-debugging instructions

Disassembly:
add eax, 0x1edf1dcf
jmp 0x103e9972
add eax, 0x8d20007b
jmp 0x103e9a1e
mov ch, 0x34
sub esp, 0x11
jmp 0x103e959e
mov ax, word [esp + 0x10]
lea esp, [esp + 1]
jmp 0x103e9549
mov ax, word [esp]
lea edx, [edi + ebp]
jmp 0x103e95e5
movzx ecx, byte [esi - 1]
bsr edx, ecx
jl 0x103e9561
bsf dx, bp
jmp 0x103e954b
jmp 0x103e9530
mov edx, dword [esp]
mov eax, 0x2c68aba5
btc ax, cx
jmp 0x103e957a
bsf dx, bp
mov edx, dword [esp]
mov eax, 0x2c68aba5
btc ax, cx
add dx, sp
jmp 0x103e95b3
add dx, sp
jmp 0x103e95b3
bsr eax, edi
jmp 0x103e95bc
bsr eax, edi
jmp 0x103e95bc
je 0x103e950d
mov ax, word [esp + 0x10]
lea esp, [esp + 1]
jmp 0x103e9549
cmc
xchg dx, ax
sub cl, bl
jl 0x103e957f
jge 0x103e9588
mov dl, cl
xor ax, cx
jmp 0x103e964b
xchg ah, al
ror ah, cl
mov ah, cl
mov ah, bl
mov eax, dword [esp]
mov ax, sp
jmp 0x103e95f1
mov ax, word [esp]
lea edx, [edi + ebp]
add edi, 4
mov cx, 0x3b10
jmp 0x103e9502
neg dl
call fcn.103e9626
mov edi, 0x23d0b121
xchg ebp, eax
jmp dword [edx - 0x10]
mov ah, cl
mov ah, bl
mov eax, dword [esp]
jmp 0x103e95d2
call 0x103e9610
xchg dword [esp], eax
jmp 0x103e9634
mov ax, bx
mov al, byte [esp + 6]
jmp 0x103e9657
jno 0x103e95c7
xchg ah, al
ror ah, cl
jmp 0x103e9607
lea esp, [esp + 8]
sub dl, 9
sets ah
adc ah, cl
jg 0x103e96ba
jle 0x103e96ba
push ebx
jno 0x103e965b
pushal
pop es
inc eax
jno 0x103e9666
add dh, cl
cmp ebp, dword [edx - 0x7b]
xor al, 0x27
dec esi
fnstenv [edi + 0x73]
jbe 0x103e96ee
jae 0x103e96f2
jno 0x103e967d
push dword [esp + 2]
jns 0x103e9695
je 0x103e96a4
add bh, byte [ecx + 0x12]
add esp, 5
lea esp, [esp + 3]
jmp 0x103e96a2
add esp, 5
lea esp, [esp + 3]
jmp 0x103e96a2
rol dl, 0
call fcn.103e96d5
add al, ch
sub eax, dword [eax]
add byte [eax], al
rcl byte [edx + ecx*8 - 0x53], cl
pop esp
cdq
inc esp
rcl dword [ecx + 0x30], 0xc3
jg 0x103e967a
jp 0x103e970e
invalid
call 0x103e9693
lea esp, [esp + 8]
dec dl
mov eax, edx
bt ax, dx
jmp 0x103e96ff
mov dword [ecx + ebp], edx
sub dh, dh
je 0x103e95de
test byte [edi], 0x84
in eax, 0xfe
invalid
jne 0x103e9524
jl 0x103e9715
shr eax, 0
xchg al, ah
jmp 0x103e971a
xchg ebp, eax
and esi, dword [ebx - reloc.KERNEL32.dll_GetFileSizeEx]
shr eax, 0
xchg al, ah
jmp 0x103e9746
mov ah, byte [esp]
neg al
jmp 0x103e97c8
neg al
mov eax, dword [esp]
bsf eax, esi
mov al, cl
jmp 0x103e9791
sub dl, 0xe7
clc
jb 0x103e971c
mov ah, byte [esp]
jmp 0x103e9727
lea esp, [esp + 1]
jmp 0x103e979c
lea esp, [esp + 1]
lea esp, [esp + 3]
jmp 0x103e97a0
sub bl, dl
mov edx, ebp
sub esp, 0x10
jae 0x103e9768
jb 0x103e9772
lea esp, [esp + 3]
dec esi
rdtsc
neg ax
jmp 0x103e9820
inc ah
xchg dl, ah
setp dl
mov dx, word [esp]
xchg edx, eax
jmp 0x103e97d2
mov eax, dword [esp]
bsf eax, esi
mov al, cl
jmp 0x103e9791
not cl
mov eax, dword [esp]
bswap eax
mov ax, 0x34b6
jmp 0x103e9809
setp dl
mov dx, word [esp]
xchg edx, eax
jmp 0x103e97d2
rdtsc
pushfd
jmp 0x103e986d
inc cl
mov al, 0xd7
lea edx, [edx + esi]
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
mov dx, cx
jmp 0x103e97f3
jle 0x103e97ac
inc ah
xchg dl, ah
jmp 0x103e97e8
stc
xchg dh, dl
not eax
jmp 0x103e9844
stc
xchg dh, dl
not eax
jmp 0x103e9890
push dword [esp + 6]
call 0x103e987a
mov edx, 0x95e9d2f6
add byte [eax], al
add dh, dh
ror byte [ebp - 0x14fedb9c], cl
imul ecx, dword [ebp + edx - reloc.KERNEL32.dll_GetFileSizeEx], 0x1e
xchg byte [ebx + esi*2], dl
invalid
not dl
lea esp, [esp + 1]
jmp 0x103e98ca
lea esp, [esp + 4]
not cl
neg dx
jb 0x103e983f
jae 0x103e9828
dec dx
cmc
cmc
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
xchg dword [esp], ebx
jmp 0x103e9b66
xor cl, 0x16
xchg dl, al
sub esp, 9
jns 0x103e9846
push dword [esp + 6]
not dl
push dword [esp + 0xa]
mov dword [esp + 1], ebp
setb ah
jmp 0x103e9857
lea esp, [esp + 0x10]
xor cl, 0x7b
not eax
lea edx, [ebp*4]
sub esp, 0x1f
jmp 0x103e98fc
jnp 0x103e9919
lea esp, [esp + 3]
jmp 0x103e991d
lea esp, [esp + 3]
mov eax, ecx
mov dh, bh
jmp 0x103e993d
mov dh, byte [esp]
jmp 0x103e9946
mov edx, esp
mov dh, cl
stc
jo 0x103e9923
jno 0x103e9923
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
shl eax, 2
jle 0x103e99c2
not dx
jmp 0x103e9988
clc
mov eax, dword [esp]
mov dx, bp
mov dh, 0x8f
push dword [esp + 8]
ret 0xc
mov dx, 0xb2c7
jmp 0x103e99ab
mov dx, si
shr dl, 2
bswap edx
jmp 0x103e8a62
mov dh, 0x76
jmp 0x103e99d2
mov dx, word [esp]
inc dl
jne 0x103e9995
mov dh, 0x76
jmp 0x103e99d2
not dx
mov dx, si
shr dl, 2
bswap edx
jmp 0x103e8a62
mov eax, dword [eax - reloc.KERNEL32.dll_GetFileSizeEx]
cmc
je 0x103e9acf
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
bts edx, esi
jmp 0x103e9a3d
lea edx, [edx - 0xaf]
push ebx
mov dword [esp], esi
xchg byte [esp + 2], dl
xchg dword [esp + 8], ebx
mov al, dl
jmp 0x103e9962
call fcn.103e9a08
mov esp, ebp
call fcn.103e9b09
dec ecx
invalid
lea edx, [esi + esi]
jmp 0x103e8a82
bts edx, esi
lea edx, [esi + esi]
jmp 0x103e8a82
lea edx, reloc.KERNEL32.dll_GetFileSizeEx
jmp 0x103e9a92
sub esp, 6
clc
mov dword [esp], ecx
mov dx, 0xee0
lea esp, [esp + 2]
lea ebx, [ebx + 1]
jmp 0x103e99ef