Function at 0x10035e3a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.1001a2fc
add esp, 0xc
je 0x10035e55
ja 0x10035e74
pushf
or esp, 0
lea eax, [eax + 0x2cab]
lea eax, [eax - 0x2cab]
std
cld
popf
jae 0x10035e6e
nop
je 0x10035e71
jbe 0x10035e74
xor eax, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
xor edx, 0x6580
xor edx, 0x6580
jno 0x10035ec7
xchg ecx, esi
xchg ecx, esi
ja 0x10035ec0
ja 0x10035ec2
je 0x10035ec4
jo 0x10035ec7
lcall 0x1e9, 0x80e44d8a
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
lea edi, [edi]
jl 0x10035f3c
jno 0x10035f57
mov esp, esp
jmp 0x10035f42
lea ebx, [ebx + 0x6e33]
lea ebx, [ebx - 0x6e33]
xchg edx, ecx
xchg edx, ecx
jo 0x10035f57
xor eax, 0xe7e8b5a5
int3
call fcn.10032c43
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x10035f6c
xor eax, eax
jmp 0x100361e8
je 0x10035f6e
jns 0x10035f83
pushf
cmp ecx, edx
jge 0x10035f76
jbe 0x10035f78
and edx, edx
popf
mov edx, edx
jg 0x10035f80
js 0x10035f83
mov ebp, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.1001af90
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1001a2fc
add esp, 0xc
cmp ecx, edi
jle 0x10035fc3
pushf
rol esi, 0x17
rol esi, 9
ror ebx, 0x13
ror ebx, 0xd
and esp, 0xffffffff
jle 0x10035fba
popf
lea edx, [edx]
jle 0x10035fc0
jg 0x10035fc3
call 0x10ffdd4a
cmp dword [ebp - 4], 0
jne 0x10035fd0
xor eax, eax
jmp 0x100361e8
mov eax, eax
or ecx, 0
jg 0x10035fe0
jo 0x10035fd9
mov esp, esp
jo 0x10035fdd
jle 0x10035fe0
or dword [ebx - 0x17ad03ab], 0xffffe62a
mov edx, dword [ebp - 4]
push edx
call fcn.10034613
add esp, 4
and ecx, ecx
lea ecx, [ecx]
cmp eax, 0x2be
xchg edi, esi
xchg edi, esi
jo 0x10036018
pushf
lea esp, [esp]
xchg edi, edi
push ebx
add ebx, 0x32d
ror ebx, 0x13
pop ebx
popf
xchg esp, esp
ja 0x10036013
xchg ecx, ecx
jno 0x10036018
mov edx, 0x6a0e6a
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.1001a2fc
add esp, 0xc
clc
std
cld
shr esp, 0
jbe 0x1003604a
pushf
add esp, 0
popf
xchg ebx, esi
xchg ebx, esi
lea esi, [esi + 0x773d]
lea esi, [esi - 0x773d]
ja 0x1003604a
mov ebp, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
jg 0x10036084
xchg ebx, ecx
xchg ebx, ecx
js 0x10036098
pushf
sub esp, 0
jle 0x10036091
popf
jnp 0x10036095
jns 0x10036098
jmp 0x90e7ae26
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
ror edi, 0
jno 0x10036119
xchg esi, esi
xchg edx, ecx
xchg edx, ecx
xchg esp, esp
jo 0x10036119
mov ebp, 0x3be83d83
add dword [eax], edx
add byte [ebx + ebp - 0x7d], dh
hlt
cmp dword [0x10013be8], 0
je 0x1003614d
xor esp, 0
ror esi, 0
rol edx, 8
rol edx, 0x18
dec ebx
inc ebx
jo 0x1003613b
jnp 0x10036134
ja 0x10036136
ja 0x10036138
jno 0x1003613b
xor eax, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x10013be8]
push eax
call fcn.1001af90
mov dword [ebp - 0xc], eax
jne 0x1003614f
add esp, 0
add esi, 0x397b
sub esi, 0x397b
jg 0x10036173
pushf
jnp 0x10036164
ror ecx, 0x1f
rol ecx, 0x1f
popf
jae 0x1003616e
xchg ebx, eax
xchg ebx, eax
jle 0x10036173
add eax, 0x6a0e6a
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1001a2fc
add esp, 0xc
neg edi
neg edi
push eax
add eax, 0x7e8a
ror eax, 0x11
pop eax
jp 0x100361a4
pushf
js 0x10036197
rol esp, 0
or edi, 0
popf
xchg esp, esp
jnp 0x100361a4
mov ebp, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x100361cb
lea esp, [esp]
jnp 0x100361af
je 0x100361bf
pushf
xchg ebx, ebx
xor ebx, 0
popf
lea esi, [esi]
jne 0x100361bf
sub eax, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.10034613
add esp, 4
jge 0x100361cd
rol ecx, 0x1c
rol ecx, 4
sub esp, 0
jo 0x100361d8
js 0x100361e1
mov esp, esp
jae 0x100361de
jns 0x100361e1
call 0x600ba770
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4