Function at 0x100353d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x101981c4]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x9e
mov byte [esp + 0x15], 0x35
mov byte [esp + 0x16], 0x28
mov byte [esp + 0x17], 0x22
mov byte [esp + 0x18], 0xe3
mov byte [esp + 0x19], 0xe
mov byte [esp + 0x1a], 0x59
mov byte [esp + 0x1b], 0x75
mov byte [esp + 0x1c], 0xa8
mov byte [esp + 0x1d], 0xa
mov byte [esp + 0x24], 0xec
mov byte [esp + 0x25], 0x45
mov byte [esp + 0x26], 0x4b
mov byte [esp + 0x27], 0x50
mov byte [esp + 0x28], 0x97
mov byte [esp + 0x29], 0x3a
mov byte [esp + 0x2a], 0x77
mov byte [esp + 0x2b], 0x11
mov byte [esp + 0x2c], 0xc4
mov byte [esp + 0x2d], 0x66
jne 0x100354d1
mov bl, al
push 0xb
or bl, 1
mov byte [0x101981c4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981c8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10035479
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100354a4
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10035499
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10035499
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101981c8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xa
jb 0x10035464
mov ecx, dword [0x101981c8]
push 0x10035630
mov byte [ecx + 0xa], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x101981cc]
mov edx, dword [0x101981c8]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0x6a
mov byte [esp + 0x25], 0x8b
mov byte [esp + 0x26], 0x6d
mov byte [esp + 0x27], 0xaa
mov byte [esp + 0x28], 0x6f
mov byte [esp + 0x29], 0xca
mov byte [esp + 0x2a], 0x19
mov byte [esp + 0x2b], 0xeb
mov byte [esp + 0x2c], 0x62
mov byte [esp + 0x2d], 0x74
mov byte [esp + 0x2e], 0x78
mov byte [esp + 0x2f], 0x22
mov byte [esp + 0x30], 0x99
mov byte [esp + 0x31], 0x94
mov byte [esp + 0x14], 0x38
mov byte [esp + 0x15], 0xfb
mov byte [esp + 0x16], 0xe
mov byte [esp + 0x17], 0xf9
mov byte [esp + 0x18], 0x1b
mov byte [esp + 0x19], 0xb8
mov byte [esp + 0x1a], 0x70
mov byte [esp + 0x1b], 0x85
mov byte [esp + 0x1c], 5
mov byte [esp + 0x1d], 0x32
mov byte [esp + 0x1e], 0xa
mov byte [esp + 0x1f], 0x47
mov byte [esp + 0x20], 0xfc
mov byte [esp + 0x21], 0xc3
jne 0x100355fd
mov bl, al
push 0xf
or bl, 1
mov byte [0x101981cc], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981d0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100355a5
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100355d0
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100355c5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100355c5
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101981d0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xe
jb 0x10035590
mov ecx, dword [0x101981d0]
push 0x10035640
mov byte [ecx + 0xe], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101981d0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x38]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret