Function at 0x10035970
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x34
mov al, 0xe1
push ebx
mov byte [esp + 9], al
mov byte [esp + 0x13], al
mov al, byte [0x101981a4]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x18
mov byte [esp + 0x16], 0x98
mov byte [esp + 0x17], 0xfa
mov byte [esp + 0x18], 0xe6
mov byte [esp + 0x19], 3
mov byte [esp + 0x1a], 0x9a
mov byte [esp + 0x1b], 0
mov byte [esp + 0x1c], 0xe5
mov byte [esp + 0x1d], 0xe4
mov byte [esp + 0x1e], 0xcf
mov byte [esp + 0x2c], 0x79
mov byte [esp + 0x2d], 0x85
mov byte [esp + 0x2e], 0xee
mov byte [esp + 0x2f], 0x9b
mov byte [esp + 0x30], 0x96
mov byte [esp + 0x31], 0x6a
mov byte [esp + 0x32], 0xa9
mov byte [esp + 0x33], 0x32
mov byte [esp + 0x34], 0xcb
mov byte [esp + 0x35], 0x80
mov byte [esp + 0x36], 0xa3
mov byte [esp + 0x37], 0x8d
jne 0x10035a85
mov bl, al
push 0xd
or bl, 1
mov byte [0x101981a4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981a8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x2c]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10035a2d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10035a58
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10035a4d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10035a4d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101981a8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10035a18
mov ecx, dword [0x101981a8]
push 0x10035c40
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101981a8]
mov al, 0xad
mov byte [esp + 0x39], al
mov byte [esp + 0x40], al
mov byte [esp + 0x25], al
mov al, byte [0x101981ac]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x2c], 0xa4
mov byte [esp + 0x2d], 0x6f
mov byte [esp + 0x2e], 0xbe
mov byte [esp + 0x2f], 0x88
mov byte [esp + 0x30], 0x71
mov byte [esp + 0x31], 0xcc
mov byte [esp + 0x32], 0x23
mov byte [esp + 0x33], 0xd
mov byte [esp + 0x34], 0x30
mov byte [esp + 0x35], 0xe5
mov byte [esp + 0x36], 0xd8
mov byte [esp + 0x37], 0x56
mov byte [esp + 0x38], 0x64
mov byte [esp + 0x3a], 0xaf
mov byte [esp + 0x3b], 0x24
mov byte [esp + 0x3c], 0xe2
mov byte [esp + 0x3d], 0xc8
mov byte [esp + 0x3e], 0x8d
mov byte [esp + 0x3f], 0x37
mov byte [esp + 0x14], 0xe5
mov byte [esp + 0x15], 0xb
mov byte [esp + 0x16], 0xd4
mov byte [esp + 0x17], 0xfd
mov byte [esp + 0x18], 2
mov byte [esp + 0x19], 0xb8
mov byte [esp + 0x1a], 0x77
mov byte [esp + 0x1b], 0x62
mov byte [esp + 0x1c], 0x5b
mov byte [esp + 0x1d], 0x80
mov byte [esp + 0x1e], 0xb6
mov byte [esp + 0x1f], 6
mov byte [esp + 0x20], 0x16
mov byte [esp + 0x21], 0xc4
mov byte [esp + 0x22], 0xd9
mov byte [esp + 0x23], 0x4d
mov byte [esp + 0x24], 0x8e
mov byte [esp + 0x26], 0xea
mov byte [esp + 0x27], 0x52
mov byte [esp + 0x28], 0xde
jne 0x10035bf6
mov bl, al
push 0x16
or bl, 1
mov byte [0x101981ac], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981b0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x2c]
movsx esi, bl
test esi, esi
jne 0x10035b9e
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10035bc9
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10035bbe
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10035bbe
mov al, byte [esp + edi + 0x2c]
xor bl, al
mov eax, dword [0x101981b0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x15
jb 0x10035b89
mov ecx, dword [0x101981b0]
push 0x10035c50
mov byte [ecx + 0x15], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101981b0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x58]
push ecx
mov ecx, dword [esp + 0x58]
push edx
mov edx, dword [esp + 0x58]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret