Function at 0x10036970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, byte [0x10198144]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x20], 0xa7
mov byte [esp + 0x21], 0xab
mov byte [esp + 0x22], 0xea
mov byte [esp + 0x23], 0xac
mov byte [esp + 0x24], 0xc3
mov byte [esp + 0x25], 0xd5
mov byte [esp + 0x26], 0xf4
mov byte [esp + 0x27], 0x53
mov byte [esp + 0x28], 0x91
mov byte [esp + 0x29], 0x2a
mov byte [esp + 0x2a], 0x44
mov byte [esp + 0x2b], 0xf0
mov byte [esp + 0x14], 0xcc
mov byte [esp + 0x15], 0xce
mov byte [esp + 0x16], 0x98
mov byte [esp + 0x17], 0xc2
mov byte [esp + 0x18], 0xa6
mov byte [esp + 0x19], 0xb9
mov byte [esp + 0x1a], 0xc7
mov byte [esp + 0x1b], 0x61
mov byte [esp + 0x1c], 0xbf
mov byte [esp + 0x1d], 0x4e
mov byte [esp + 0x1e], 0x28
mov byte [esp + 0x1f], 0x9c
jne 0x10036a85
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198144], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198148], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x20]
movsx esi, bl
test esi, esi
jne 0x10036a2d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10036a58
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10036a4d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10036a4d
mov al, byte [esp + edi + 0x20]
xor bl, al
mov eax, dword [0x10198148]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10036a18
mov ecx, dword [0x10198148]
push 0x10036bc0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x1019814c]
mov edx, dword [0x10198148]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x9b
mov byte [esp + 0x15], 0x1f
mov byte [esp + 0x16], 0xac
mov byte [esp + 0x17], 0x3f
mov byte [esp + 0x18], 0xa2
mov byte [esp + 0x19], 0x26
mov byte [esp + 0x1a], 0x62
mov byte [esp + 0x1b], 0x9a
mov byte [esp + 0x1c], 0x3a
mov byte [esp + 0x1d], 0x29
mov byte [esp + 0x1e], 9
mov byte [esp + 0x20], 0xd8
mov byte [esp + 0x21], 0x73
mov byte [esp + 0x22], 0xc3
mov byte [esp + 0x23], 0x4c
mov byte [esp + 0x24], 0xc7
mov byte [esp + 0x25], 0x6e
mov byte [esp + 0x26], 3
mov byte [esp + 0x27], 0xf4
mov byte [esp + 0x28], 0x5e
mov byte [esp + 0x29], 0x45
mov byte [esp + 0x2a], 0x6c
jne 0x10036b93
mov bl, al
push 0xc
or bl, 1
mov byte [0x1019814c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198150], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10036b3b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10036b66
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10036b5b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10036b5b
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198150]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x10036b26
mov ecx, dword [0x10198150]
push 0x10036bd0
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198150]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x30]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret