Function at 0x10323690
Capabilities:
Execute anti-debugging instructions

Disassembly:
jmp 0x1032372b
mov ebx, dword [ebp - 0xc]
jmp 0x10322fa2
pushal
call fcn.103236b6
mov al, 0x39
test eax, 0x928f3bc8
sbb cl, byte [eax - 0x452e511]
ror byte [ebp - 0x24], cl
not ah
jmp 0x1032340e
push cx
jmp 0x10323ab1
rdtsc
jmp 0x103235ec
mov eax, dword [ebp - 4]
jmp 0x10322fe4
pushal
lea esp, [esp + 0x24]
and dword [ebp - 4], 0
sub esp, 0
pushfd
jmp 0x10323602
jmp 0x103235d0
rdtsc
adc eax, 0x8505f46c
jmp 0x1032364d
lea esp, [esp + 4]
cmp dword [esi + 0x18], 0
jbe 0x10322fb8
ja 0x10323141
or dword [edx + eax*4], reloc.KERNEL32.dll_GetStringTypeW
adc al, 0xa4
pop ss
cdq
or dword [eax - 0x65], ebp
pop ebx
js 0x1032367f
mov dl, 3
clc
lea esp, [esp + 4]
jne 0x10322fb8
je 0x10323033
add ebx, 0xfffffffc
mov ecx, dword [ebx]
pop ebx
jmp 0x10323655
mov eax, dword [ebp - 0x10]
push ebx
mov ebx, ebp
jmp 0x10323637
mov edx, dword [eax + ecx*4]
mov eax, 0x3c89d520
add edx, dword [ebp + 8]
mov al, 0xa3
jmp 0x10323669
xchg al, ah
jmp 0x1032376f
jge 0x103236bc
ret 0xb3e8
cmp eax, dword [esi + 0x18]
call 0x10323690
dec esp
lea esp, [esp + 4]
jb 0x10323141
jmp 0x10322fb8
mov esi, ebp
add esi, 0xfffffffc
mov eax, dword [esi]
pop esi
jmp 0x10323687
inc ebp
cld
movzx eax, word [ebx + eax*2]
btr ecx, ebp
jmp 0x103236ed
lea esp, [esp + 0x28]
lea ecx, [ecx + eax*4]
lea edi, [ecx + ebx]
jmp 0x10323705
inc dword [ebp - 4]
not eax
not ax
mov ax, 0xeb87
push esi
jmp 0x103236a9
mov ecx, dword [esi + 0x1c]
bswap edi
jmp 0x103236c7
mov eax, dword [ebp + 8]
lea edi, [edi + ebp]
mov edi, dword [esp]
jmp 0x10323741
push bx
lea esp, [esp + 2]
je 0x10323076
bswap eax
jmp 0x103236de
cmp edi, esi
jmp 0x1032374c
mov edi, dword [eax + ecx]
clc
add edi, eax
jmp 0x10322fb8
jb 0x10323113
push edx
mov edx, ebp
jmp 0x10323791
cmp edi, esi
push eax
pop word [esp]
lea esp, [esp + 2]
jmp 0x1032377b
mov eax, dword [ebp + 0xc]
call fcn.102e43b9
test eax, eax
jmp 0x1032371b
jae 0x10323113
bswap eax
jmp 0x1032380e
add edx, 0xffffffec
mov eax, dword [edx]
pop edx
add esi, eax
jmp 0x10323757
mov eax, edi
call fcn.1032379e
mov dword [esp + 0x10], eax
popal
lea ecx, [edx*4]
mov ecx, dword [esp]
jmp 0x103237f8
rcl ecx, 0x16
jmp 0x10323830
push 0x2e
mov ax, di
not ah
mov ah, byte [esp]
jmp 0x103237c7
je 0x102cb2d3
mov ecx, esp
mov edx, 0xe2b9fd33
jmp 0x10323854
pop ecx
pushal
lea esp, [esp + 0x20]
test ebx, ebx
jmp 0x1032381a
push bx
lea esp, [esp + 2]
jmp 0x10323876
mov esi, ebx
sub esi, edi
mov dx, word [esp]
mov ch, 0xda
jmp 0x1032383a
lea ecx, reloc.KERNEL32.dll_GetStringTypeW
jmp 0x103238a4
push esi
mov edx, edi
mov ecx, dword [esp]
jmp 0x10323860
mov ax, 0x4d4a
lea esp, [esp + 2]
lea esp, [esp + 0x10]
lea eax, reloc.KERNEL32.dll_GetStringTypeW
jmp 0x103238c7
call 0x102e4420
pop ecx
pushal
lea esp, [esp + 0xe]
jmp 0x1032387e
lea esi, reloc.KERNEL32.dll_GetStringTypeW
jmp 0x103238ee
push eax
mov byte [ebp + esi - 0x118], 0
call dword [0x102d5ca4]
jmp 0x103238b1
mov dword [esp + 4], eax
pushal
pop dword [esp + 0x17]
mov word [esp + 6], di
jmp 0x10323b67
pushal
bswap ecx
dec bl
btc ebx, ecx
rol dl, cl
jmp 0x103238d8
lea esp, [esp + 2]
jmp 0x10323ad7
test edi, edi
push di
mov word [esp], dx
lea esp, [esp + 1]
lea esp, [esp + 1]
jmp 0x10323b18
mov dword [esp + 0x1c], edi
popal
jmp 0x10323b3d
je 0x102cb2d3
mov eax, ebp
pushal
mov ax, word [esp]
jmp 0x10323b02
call fcn.102e43ef
jmp 0x102cb4ec
lea esp, [esp + 0x1c]
popal
call fcn.10323a09