Function at 0x10035f00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x10198184]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x2b
mov byte [esp + 0x15], 0x68
mov byte [esp + 0x16], 0xeb
mov byte [esp + 0x17], 0x98
mov byte [esp + 0x18], 0xd7
mov byte [esp + 0x19], 0xfe
mov byte [esp + 0x1a], 0x7d
mov byte [esp + 0x1b], 0x5b
mov byte [esp + 0x1c], 0x32
mov byte [esp + 0x1d], 0xb6
mov byte [esp + 0x1e], 0xab
mov byte [esp + 0x1f], 0xe8
mov byte [esp + 0x24], 0x4a
mov byte [esp + 0x25], 0xc
mov byte [esp + 0x26], 0x9d
mov byte [esp + 0x27], 0xf9
mov byte [esp + 0x28], 0xa7
mov byte [esp + 0x29], 0x97
mov byte [esp + 0x2a], 0x4e
mov byte [esp + 0x2b], 0x69
mov byte [esp + 0x2c], 0x1c
mov byte [esp + 0x2d], 0xd2
mov byte [esp + 0x2e], 0xc7
mov byte [esp + 0x2f], 0x84
jne 0x10036015
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198184], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198188], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10035fbd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10035fe8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10035fdd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10035fdd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198188]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10035fa8
mov ecx, dword [0x10198188]
push 0x10036190
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10198188]
mov al, 0x70
mov byte [esp + 0x2c], al
mov byte [esp + 0x2d], al
mov al, byte [0x1019818c]
mov cl, 0x82
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0x2a
mov byte [esp + 0x25], 0xd1
mov byte [esp + 0x26], 0x8b
mov byte [esp + 0x27], 0x8e
mov byte [esp + 0x28], cl
mov byte [esp + 0x29], 0xff
mov byte [esp + 0x2a], 0xe
mov byte [esp + 0x2b], 0x98
mov byte [esp + 0x2e], 0xfb
mov byte [esp + 0x2f], 0x32
mov byte [esp + 0x30], 0xe9
mov byte [esp + 0x31], 0x8f
mov byte [esp + 0x32], 0x4a
mov byte [esp + 0x14], 0x65
mov byte [esp + 0x15], 0xa1
mov byte [esp + 0x16], 0xee
mov byte [esp + 0x17], 0xe0
mov byte [esp + 0x18], 0xd6
mov byte [esp + 0x19], 0x97
mov byte [esp + 0x1a], 0x7c
mov byte [esp + 0x1b], 0xfd
mov byte [esp + 0x1c], 0x11
mov byte [esp + 0x1d], 0x14
mov byte [esp + 0x1e], 0xaf
mov byte [esp + 0x1f], 0x5d
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0xea
mov byte [esp + 0x22], 0x24
jne 0x1003614b
mov bl, al
push 0x10
or bl, 1
mov byte [0x1019818c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198190], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100360f3
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1003611e
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10036113
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10036113
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10198190]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xf
jb 0x100360de
mov ecx, dword [0x10198190]
push 0x100361a0
mov byte [ecx + 0xf], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198190]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret