Function at 0x10036420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0xe3
push ebx
mov byte [esp + 8], al
mov byte [esp + 0x12], al
mov al, 0x32
push ebp
mov byte [esp + 0x20], al
mov byte [esp + 0x23], al
mov al, byte [0x10198164]
mov cl, 0x86
push esi
push edi
test al, 1
mov byte [esp + 0x15], 0x39
mov byte [esp + 0x16], 0x1b
mov byte [esp + 0x17], 0xe7
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0xaa
mov byte [esp + 0x1a], 0xb0
mov byte [esp + 0x1b], 0
mov byte [esp + 0x1c], 0x40
mov byte [esp + 0x1d], 0xe2
mov byte [esp + 0x1f], 7
mov byte [esp + 0x24], 0x82
mov byte [esp + 0x25], 0x5d
mov byte [esp + 0x26], 0x6d
mov byte [esp + 0x27], cl
mov byte [esp + 0x29], 0xc3
mov byte [esp + 0x2a], 0x83
mov byte [esp + 0x2c], 0x6e
mov byte [esp + 0x2d], cl
mov byte [esp + 0x2e], 0x8f
mov byte [esp + 0x2f], 0x6b
jne 0x10036535
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198164], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198168], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100364dd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10036508
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100364fd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100364fd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198168]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100364c8
mov ecx, dword [0x10198168]
push 0x100366a0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10198168]
mov al, 0x3c
mov byte [esp + 0x1c], al
mov byte [esp + 0x1d], al
mov al, byte [0x1019816c]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x24], 0x11
mov byte [esp + 0x25], 0xc9
mov byte [esp + 0x26], 0x79
mov byte [esp + 0x27], 0xa9
mov byte [esp + 0x28], 0x46
mov byte [esp + 0x29], 0x30
mov byte [esp + 0x2a], 0x3e
mov byte [esp + 0x2b], 0xf8
mov byte [esp + 0x2c], 0x5d
mov byte [esp + 0x2d], 0x48
mov byte [esp + 0x2e], 0xfb
mov byte [esp + 0x2f], 0x4d
mov byte [esp + 0x30], 7
mov byte [esp + 0x31], 0x38
mov byte [esp + 0x32], 0xe7
mov byte [esp + 0x14], 0x58
mov byte [esp + 0x15], 0xa4
mov byte [esp + 0x16], 9
mov byte [esp + 0x17], 0xcc
mov byte [esp + 0x18], 0x34
mov byte [esp + 0x19], 0x43
mov byte [esp + 0x1a], 0x51
mov byte [esp + 0x1b], 0x96
mov byte [esp + 0x1e], 0x9e
mov byte [esp + 0x1f], 0x1e
mov byte [esp + 0x20], 0x62
mov byte [esp + 0x21], 0x54
mov byte [esp + 0x22], 0x81
jne 0x1003666b
mov bl, al
push 0x10
or bl, 1
mov byte [0x1019816c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198170], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x10036613
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1003663e
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10036633
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10036633
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10198170]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xf
jb 0x100365fe
mov ecx, dword [0x10198170]
push 0x100366b0
mov byte [ecx + 0xf], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198170]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x38]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret