Function at 0x10036e80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x10198124]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x5b
mov byte [esp + 0x15], 0xb5
mov byte [esp + 0x16], 0x2d
mov byte [esp + 0x17], 0xc1
mov byte [esp + 0x18], 0x2f
mov byte [esp + 0x19], 0xb8
mov byte [esp + 0x1a], 0xa7
mov byte [esp + 0x1b], 0x88
mov byte [esp + 0x1c], 0x97
mov byte [esp + 0x1d], 0x16
mov byte [esp + 0x1e], 0xf2
mov byte [esp + 0x1f], 0x91
mov byte [esp + 0x28], 0x30
mov byte [esp + 0x29], 0xd0
mov byte [esp + 0x2a], 0x5f
mov byte [esp + 0x2b], 0xaf
mov byte [esp + 0x2c], 0x4a
mov byte [esp + 0x2d], 0xd4
mov byte [esp + 0x2e], 0x94
mov byte [esp + 0x2f], 0xba
mov byte [esp + 0x30], 0xb9
mov byte [esp + 0x31], 0x72
mov byte [esp + 0x32], 0x9e
mov byte [esp + 0x33], 0xfd
jne 0x10036f95
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198124], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198128], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10036f3d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10036f68
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10036f5d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10036f5d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198128]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10036f28
mov ecx, dword [0x10198128]
push 0x10037120
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10198128]
mov al, 0xe9
mov byte [esp + 0x2f], al
mov byte [esp + 0x1f], al
mov al, byte [0x1019812c]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0x15
mov byte [esp + 0x29], 0x2e
mov byte [esp + 0x2a], 0xc0
mov byte [esp + 0x2b], 0x2f
mov byte [esp + 0x2c], 0xca
mov byte [esp + 0x2d], 0x83
mov byte [esp + 0x2e], 0xce
mov byte [esp + 0x30], 0x1a
mov byte [esp + 0x31], 0x6e
mov byte [esp + 0x32], 0xaf
mov byte [esp + 0x33], 0x85
mov byte [esp + 0x34], 0xf1
mov byte [esp + 0x35], 0x53
mov byte [esp + 0x36], 0x66
mov byte [esp + 0x37], 0x97
mov byte [esp + 0x38], 0xe7
mov byte [esp + 0x39], 0xd1
mov byte [esp + 0x3a], 3
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0x4f
mov byte [esp + 0x16], 0xa9
mov byte [esp + 0x17], 0x5b
mov byte [esp + 0x18], 0x8c
mov byte [esp + 0x19], 0xec
mov byte [esp + 0x1a], 0xbc
mov byte [esp + 0x1b], 0xba
mov byte [esp + 0x1c], 0x73
mov byte [esp + 0x1d], 0
mov byte [esp + 0x1e], 0xc8
mov byte [esp + 0x20], 0x94
mov byte [esp + 0x21], 0x1c
mov byte [esp + 0x22], 4
mov byte [esp + 0x23], 0xfd
mov byte [esp + 0x24], 0x82
mov byte [esp + 0x25], 0xb2
mov byte [esp + 0x26], 0x77
jne 0x100370f3
mov bl, al
push 0x14
or bl, 1
mov byte [0x1019812c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198130], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1003709b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100370c6
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100370bb
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100370bb
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10198130]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x10037086
mov ecx, dword [0x10198130]
push 0x10037130
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198130]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret