Function at 0x100336a5
Capabilities:
Encode data using xor
Suspend thread

Disassembly:
mov eax, 0x100533af
call fcn.10052218
sub esp, 0x18
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x18], edi
je 0x100337aa
mov dword [ebp - 0x14], 0x2af8
xor ebx, ebx
cmp dword [ebp - 0x14], 0x2ed3
jle 0x1003370c
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1006a318
cdq
push edx
push eax
call fcn.10001c75
inc edi
cmp edi, 0x6f08
jl 0x100336e7
inc esi
cmp esi, 0x46b5
jl 0x100336e5
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x14], 0x2820
jge 0x10033727
mov edx, str.utjh_pkrq_gsrorgwvx_ehirhpji
mov ecx, 0x1006a318
call fcn.10003644
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0x14], 0
je 0x10033799
mov esi, dword [ebp + 0xc]
cmp dword [esi], ebx
jbe 0x10033766
xor edi, edi
inc edi
push dword [ebp + 0x1c]
xor dl, dl
mov ecx, 0x62b5
push 0x42e7
push edi
push 0x2241
push dword [ebp + 0x30]
push 0x35c3
push edi
call fcn.1003319f
add esp, 0x1c
inc ebx
cmp ebx, dword [esi]
jb 0x1003373b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
push ecx
lea edx, [ebp + 0xb]
mov byte [ebp + 0xb], bl
call fcn.10033a3d
pop ecx
pop ecx
jmp 0x10033766
mov dword [ebp - 0x1c], 0x30ab
xor esi, esi
cmp dword [ebp - 0x1c], 0x31f2
jle 0x100337fa
mov ebx, esi
mov edi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], 0xd12
mov eax, esi
mov ecx, 0x1006a318
xor eax, ebx
cdq
push edx
push eax
call fcn.10001c75
add esi, edi
dec dword [ebp - 0x14]
jne 0x100337ca
inc edi
push 0
pop esi
cmp edi, 0x1451
jl 0x100337c0
inc ebx
cmp ebx, 0x29a
jl 0x100337be
mov edi, dword [ebp - 0x18]
cmp byte [ebp + 0x2c], 0
je 0x1003386b
mov ebx, dword [ebp + 0x10]
cmp dword [ebx], esi
je 0x1003383e
mov eax, dword [ebx]
xor edi, edi
sub eax, 0xfffe
inc edi
mov ecx, edi
cmp eax, 0x191b
jg 0x1003381c
mov ecx, esi
mov eax, dword [ebx]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebx]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebx]
jg 0x10033836
cmp dword [ebx], esi
jne 0x10033838
mov edi, esi
cmp edi, dword [ebx]
je 0x1003383e
mov eax, dword [ebx]
mov eax, dword [ebx]
xor edx, edx
test eax, eax
mov eax, dword [ebp + 0x24]
setne dl
xor ecx, ecx
cmp edx, 0xdfb
setne cl
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [eax]
cmp eax, 3
mov eax, dword [ebp - 0x24]
setle cl
mov dword [eax], ecx
jmp 0x100338f0
mov edx, dword [ebp + 0x28]
xor ecx, ecx
mov eax, dword [edx]
mov eax, dword [edx]
mov eax, dword [edx]
mov eax, dword [edi]
mov eax, dword [edx]
mov eax, dword [edi]
cmp eax, 0xffffe2f6
setle cl
mov dword [edx], ecx
mov ecx, dword [edi]
mov eax, dword [edx]
xor edx, edx
cmp eax, ecx
mov eax, dword [edi]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [edi]
mov edx, dword [edi]
setne cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [edi]
setle bl
xor ecx, ecx
imul edx, ebx
cmp edx, eax
setl cl
lea eax, [ecx - 0x25e4]
cmp eax, dword [edi]
jne 0x100338c6
cmp dword [edi], esi
je 0x100338c6
xor edi, edi
inc edi
mov esi, edi
jmp 0x100338c9
xor edi, edi
inc edi
mov eax, dword [ebp + 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov dword [eax], esi
mov eax, dword [edx]
cmp esi, eax
mov eax, dword [edx]
setg cl
imul eax, ecx
cmp eax, 0x5043c4ab
jg 0x100338eb
mov eax, dword [ebp + 0x28]
mov eax, dword [eax]
mov eax, dword [ebp + 0x18]
mov dword [eax], edi
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1c], 0x2d50
jge 0x10033766
mov edx, str.okxrh_hxxealvxh_dtmsmvnky_rmswmses_tggjaages_pyjcligpc_oexxgtznm_wrkza
mov ecx, 0x1006a318
call fcn.10003644
jmp 0x10033766