Function at 0x100361ef
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
xor ebx, ebx
mov dword [ebp - 0x18], 0x56545d31
mov cl, 0x31
mov dword [ebp - 0x14], 0x5e534558
mov word [ebp - 0x10], 0x45
mov eax, ebx
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 8
jae 0x1003621f
mov cl, byte [ebp - 0x18]
jmp 0x10036210
lea eax, [ebp - 0x17]
mov byte [ebp - 0xf], bl
push 0x100e0ce4
push eax
call fcn.1006327a
pop ecx
pop ecx
cmp byte [0x100e0ce4], bl
je 0x1003662e
push ecx
push ecx
mov dword [esp + 4], 0xbf800000
and dword [esp], ebx
call fcn.10049b54
pop ecx
pop ecx
mov cl, 0x49
mov dword [ebp - 0x1c], 0x2e2c2549
mov dword [ebp - 0x18], 0x262b3d20
mov eax, ebx
mov dword [ebp - 0x14], 0x202b693d
mov word [ebp - 0x10], 0x2d27
mov byte [ebp - 0xe], bl
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 0xd
jae 0x10036283
mov cl, byte [ebp - 0x1c]
jmp 0x10036274
push esi
push edi
push 0x100df048
lea eax, [ebp - 0x1b]
mov byte [ebp - 0xe], bl
push 0x100df044
push eax
call fcn.1006c225
add esp, 0xc
mov dword [ebp - 8], 0x1e5f7a
mov cl, 0x7a
mov eax, ebx
push 2
pop esi
xor byte [ebp + eax - 7], cl
inc eax
cmp eax, esi
jae 0x100362ba
mov cl, byte [ebp - 8]
jmp 0x100362ac
push 0x3e
mov byte [ebp - 5], bl
xor edx, edx
pop ebx
mov cl, 0x51
mov word [ebp - 0x14], 0x3751
mov byte [ebp - 0x12], bl
mov eax, edx
mov word [ebp - 0x11], 0x27
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 3
jae 0x100362e4
mov cl, byte [ebp - 0x14]
jmp 0x100362d5
mov edi, 0x80
mov byte [ebp - 0x10], dl
push edi
lea eax, [ebp - 7]
push eax
push 0xb4
push 1
lea eax, [ebp - 0x13]
push 0x100df04c
push eax
call fcn.1006e6dc
add esp, 0x18
mov dword [ebp - 8], 0x206144
xor edx, edx
mov cl, 0x44
mov eax, edx
xor byte [ebp + eax - 7], cl
inc eax
cmp eax, esi
jae 0x10036324
mov cl, byte [ebp - 8]
jmp 0x10036316
mov byte [ebp - 5], dl
mov cl, 0x1c
mov dword [ebp - 0x18], 0x73716f1c
mov eax, edx
mov dword [ebp - 0x14], 0x746873
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 6
jae 0x10036348
mov cl, byte [ebp - 0x18]
jmp 0x10036339
push edi
lea eax, [ebp - 7]
mov byte [ebp - 0x11], dl
push eax
push 0x64
push 1
lea eax, [ebp - 0x17]
push 0x100df050
push eax
call fcn.1006e6dc
add esp, 0x18
mov dword [ebp - 8], 0x3f7e5b
xor edx, edx
mov cl, 0x5b
mov eax, edx
xor byte [ebp + eax - 7], cl
inc eax
cmp eax, esi
jae 0x10036380
mov cl, byte [ebp - 8]
jmp 0x10036372
mov byte [ebp - 5], dl
mov eax, edx
mov byte [ebp - 0x14], bl
mov dword [ebp - 0x13], 0x4d5d4c
xor byte [ebp + eax - 0x13], bl
inc eax
cmp eax, 3
jae 0x1003639e
mov bl, byte [ebp - 0x14]
jmp 0x1003638f
push edi
lea eax, [ebp - 7]
xor ebx, ebx
push eax
push 0x64
push ebx
lea eax, [ebp - 0x13]
mov byte [ebp - 0x10], bl
push 0x100df054
push eax
call fcn.1006e6dc
add esp, 0x18
mov dword [ebp - 0x17], 0x3233373f
mov dword [ebp - 0x13], 0x353d31
mov eax, ebx
push 0x5e
pop ecx
pop edi
mov byte [ebp - 0x18], cl
pop esi
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 7
jae 0x100363e3
mov cl, byte [ebp - 0x18]
jmp 0x100363d4
lea eax, [ebp - 0x17]
mov byte [ebp - 0x10], bl
push 0x100e0ce5
push eax
call fcn.1006327a
pop ecx
pop ecx
mov cl, 0x4f
mov dword [ebp - 0x18], 0x3b3a2e4f
mov dword [ebp - 0x14], 0x232e3820
mov eax, ebx
mov word [ebp - 0x10], 0x23
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 8
jae 0x1003641d
mov cl, byte [ebp - 0x18]
jmp 0x1003640e
lea eax, [ebp - 0x17]
mov byte [ebp - 0xf], bl
push 0x100e0854
push eax
call fcn.1006327a
pop ecx
pop ecx
mov cl, 0x47
mov dword [ebp - 0x18], 0x2b2e3447
mov dword [ebp - 0x14], 0x332922
mov eax, ebx
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 6
jae 0x10036451
mov cl, byte [ebp - 0x18]
jmp 0x10036442
lea eax, [ebp - 0x17]
mov byte [ebp - 0x11], bl
push 0x100e0855
push eax
call fcn.1006327a
pop ecx
pop ecx
mov cl, 0x63
mov dword [ebp - 0x14], 0x4d4d4d63
mov byte [ebp - 0x10], bl
mov eax, ebx
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 3
jae 0x10036481
mov cl, byte [ebp - 0x14]
jmp 0x10036472
mov byte [ebp - 0x10], bl
mov cl, 0x21
mov dword [ebp - 0xc], 0x55484921
mov eax, ebx
mov dword [ebp - 8], 0x44594e43
mov word [ebp - 4], 0x52
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 8
jae 0x100364ab
mov cl, byte [ebp - 0xc]
jmp 0x1003649c
push ebx
lea eax, [ebp - 0x13]
mov byte [ebp - 3], bl
push eax
lea eax, [ebp - 0xb]
push eax
call fcn.10062421
add esp, 0xc
test al, al
je 0x10036593
and dword [ebp - 0xc], ebx
mov cl, 0xc
and dword [ebp - 8], ebx
mov eax, ebx
mov dword [ebp - 0x14], 0x6d69640c
mov word [ebp - 0x10], 0x68
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 4
jae 0x100364ed
mov cl, byte [ebp - 0x14]
jmp 0x100364de
lea eax, [ebp - 0xc]
mov byte [ebp - 0xf], bl
push eax
push 1
lea eax, [ebp - 0x13]
push 0x100df058
push eax
call fcn.1006d84a
and dword [ebp - 0xc], ebx
add esp, 0x10
and dword [ebp - 8], ebx
mov cl, 0x1a
mov dword [ebp - 0x14], 0x7f72791a
mov eax, ebx
mov word [ebp - 0x10], 0x6e69
mov byte [ebp - 0xe], bl
xor byte [ebp + eax - 0x13], cl
inc eax
cmp eax, 5
jae 0x10036530
mov cl, byte [ebp - 0x14]
jmp 0x10036521
lea eax, [ebp - 0xc]
mov byte [ebp - 0xe], bl
push eax
push 1
lea eax, [ebp - 0x13]
push 0x100e0856
push eax
call fcn.1006d84a
and dword [ebp - 0x18], ebx
add esp, 0x10
and dword [ebp - 0x14], ebx
mov cl, 0x7b
mov dword [ebp - 0xc], 0x140f087b
mov eax, ebx
mov dword [ebp - 8], 0x13181a16
mov byte [ebp - 4], bl
xor byte [ebp + eax - 0xb], cl
inc eax
cmp eax, 7
jae 0x10036574
mov cl, byte [ebp - 0xc]
jmp 0x10036565
lea eax, [ebp - 0x18]
mov byte [ebp - 4], bl
push eax
push 1
lea eax, [ebp - 0xb]
push 0x100e0857
push eax
call fcn.1006d84a
add esp, 0x10
call fcn.10068eba
push 2
pop ecx
mov byte [ebp - 0x18], cl
mov eax, ebx
mov dword [ebp - 0x17], 0x75637066
mov dword [ebp - 0x13], 0x746d6422
mov byte [ebp - 0xf], bl
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 8
jae 0x100365bb
mov cl, byte [ebp - 0x18]
jmp 0x100365ac
lea eax, [ebp - 0x17]
mov byte [ebp - 0xf], bl
push 0x100e0d5e
push eax
call fcn.1006327a
pop ecx
pop ecx
cmp byte [0x100e0d5e], bl
je 0x1003662e
push ecx
push ecx
mov dword [esp + 4], 0xbf800000
and dword [esp], ebx
call fcn.10049b54
pop ecx
pop ecx
push 0x26
pop ecx
mov byte [ebp - 0x18], cl
mov eax, ebx
mov dword [ebp - 0x17], 0x6504940
mov dword [ebp - 0x13], 0x494a4945
mov word [ebp - 0xf], 0x54
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 9
jae 0x10036615
mov cl, byte [ebp - 0x18]
jmp 0x10036606
push 0x200e0
lea eax, [ebp - 0x17]
mov byte [ebp - 0xe], bl
push 0x100df05c
push eax
call fcn.1006410f
add esp, 0xc
pop ebx
leave
ret