Function at 0x10035150
Capabilities:
Encode data using xor
Get thread local storage value

Disassembly:
mov eax, 0x10058451
call fcn.10056dd0
sub esp, 0x158
cmp byte [ebp + 0x18], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, edx
je 0x1003530f
xor ebx, ebx
cmp byte [ebp + 0x24], bl
je 0x100352df
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x64]
mov esi, ebx
mov dword [ebp - 0x48], esi
call fcn.10034927
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x70]
mov dword [ebp - 4], ebx
call fcn.10034927
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x64]
sub eax, dword [ebp - 0x70]
sar ecx, 2
sar eax, 2
mov dword [ebp - 0x34], ebx
cmp ecx, eax
jbe 0x100351f4
push 0x1176
push ecx
lea eax, [ebp - 0x64]
push eax
push 1
push 0x2709
lea eax, [ebp - 0x34]
push eax
push ecx
call fcn.10037a51
add esp, 0x1c
lea eax, [ebp - 0x70]
lea edx, [ebp - 0x40]
push 0x4ce
push 0x67c6
push ecx
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
push 0x2ccf
jmp 0x10035230
lea eax, [ebp - 0x34]
mov edx, 0x37d6
push eax
lea eax, [ebp - 0x70]
mov ecx, 0x2734
push eax
push 1
push 1
call fcn.10034e8b
add esp, 0x10
lea eax, [ebp - 0x64]
mov edx, 0x34f6
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
push 0x4aa3
push 1
push 0x72d4
lea eax, [ebp - 0x34]
push eax
call fcn.10036ee1
add esp, 0x1c
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x34], 0
jle 0x100352c5
test esi, esi
jne 0x100352c5
push ebx
lea eax, [ebp - 0x64]
mov edx, 0x4b44
push eax
push 0x66e1
push 0x5a00
push 1
push 0x493e
push 0x439
lea eax, [ebp - 0x40]
mov ecx, 0x7a9a
push eax
push 0x5071
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x3d56
push 1
call fcn.10036d7c
lea eax, [ebp - 0x70]
mov dl, 1
push eax
push 0x5d7a
push 0x129c
push 0x5aab
push 1
push ebx
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x48]
call fcn.10037187
mov eax, dword [ebp - 0x40]
add esp, 0x54
mov esi, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, dword [ebp - 0x34]
jl 0x10035245
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x70]
mov dword [eax], esi
call fcn.10038758
lea ecx, [ebp - 0x64]
call fcn.10038758
jmp 0x10035b09
mov eax, dword [ecx]
mov ecx, dword [ebp + 0x1c]
inc eax
push eax
push ebx
lea eax, [ebp - 0x14c]
push eax
call fcn.10038107
mov ecx, dword [ebp + 0x1c]
push eax
call fcn.1000bc7c
lea ecx, [ebp - 0x14c]
push ebx
push 1
call fcn.1000c799
jmp 0x10035b09
cmp byte [ebp + 0x28], 0
je 0x10035af7
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 0x20]
mov dword [ebp - 0x1c], 0x8dcfd8f2
mov dword [ebp - 0x1c], 0x8e10d32d
mov dword [ebp - 0x1c], 0x5e4bc795
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x14], ebx
jmp 0x1003534f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2c], 0xbacd7953
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10035341
push 3
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1003536e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xbc], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003535d
mov dword [ebp - 0x14], ebx
jmp 0x10035389
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x10c], 0x3888ad88
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10035378
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov ecx, dword [ebp - 0x2c]
setl dl
xor eax, eax
cmp edx, 0x3623
setle al
imul ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0xb8]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
add ecx, eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xb4]
setge cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
cmp dword [ebp - 0x20], eax
setg cl
cmp ecx, 0x8ee3
jl 0x100353f5
cmp dword [ebp - 0x2c], ebx
je 0x10035402
cmp dword [ebp - 0xb8], ebx
je 0x10035402
xor eax, eax
inc eax
jmp 0x10035404
mov eax, ebx
mov dword [ebp - 0x1c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0x2b622b60
push esi
setge cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x108], eax
call fcn.1000bc41
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x80], ebx
push 4
call fcn.1000be0e
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x84], 0xf0ddd9cd
mov dword [ebp - 0x28], 0xdf9
cmp dword [ebp - 0x28], 0xe0e
jle 0x100354e7
push 0x101f
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov dword [ebp - 0x18], edi
mov ecx, esi
mov eax, ebx
sar edi, cl
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], edi
mov ecx, eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], ebx
shl edi, cl
mov eax, edi
mov ecx, 0x10070c18
xor eax, ebx
cdq
push edx
push eax
call fcn.1000bb2c
inc ebx
cmp ebx, 0x2050
jl 0x100354a1
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x1c], eax
push 0
pop ebx
cmp eax, 0x395c
jl 0x10035497
mov edi, dword [ebp - 0x14]
inc esi
cmp esi, 0x6347
jl 0x10035488
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x6732
jl 0x10035486
mov byte [ebp - 4], 4
cmp dword [ebp - 0x28], 0xa62
jge 0x10035527
mov edx, str.abwtvtgd_nnykk_auzozk_qhjfgarnm_qrkx_csoqxuel_cim_gqjike_gridbei_kuftdm_rhkrqwqfu_ptzca_qwqplh_nmygavm
mov ecx, 0x10070c18
call fcn.1000e878
jmp 0x10035527
push ecx
push ecx
lea edx, [ebp - 0xd8]
mov dword [ebp - 4], 3
lea ecx, [ebp - 0xf0]
call fcn.10034504
lea eax, [ebp + 0x1b]
mov byte [ebp + 0x1b], bl
push eax
call fcn.100349b8
add esp, 0xc
lea edx, [ebp - 0x80]
push 0x2156
push 0x765c
push ecx
lea ecx, [ebp - 0x84]
call fcn.10034652
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf0]
call fcn.1000be91
push ecx
push dword [ebp + 8]
lea ecx, [ebp - 0xd4]
call fcn.10038081
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0x2b53
cmp dword [ebp - 0x20], 0x2e11
jle 0x10035626
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x28], eax
mov esi, ebx
lea ecx, [esi + edi]
sar eax, cl
lea ecx, [ebp - 0x134]
cdq
push edx
push eax
call fcn.10001a7f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100355de
mov eax, dword [eax]
push eax
call fcn.10040493
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.1000c5c5
mov eax, dword [ebp - 0x28]
inc esi
cmp esi, 0x5f57
jl 0x100355c1
inc edi
cmp edi, 0x36e5
jl 0x100355bf
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6244
jl 0x100355b1
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x5d37
jl 0x100355ac
mov dword [ebp - 0x24], 0xffffffff
cmp dword [ebp - 0x20], 0x28f1
jge 0x10035641
push str.brefyum_lcfk_lrr_grj_fbrlhejqb_jvxyy_szy_talccyr_wjpfm_wnxg_sttp_wka_dtlasdik_ctpba
call fcn.10040493
pop ecx
push 2
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1003565a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], 0x110c93b4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003564c
mov dword [ebp - 0x3c], 0x1c
jmp 0x1003570d
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
je 0x100356eb
cmp dword [ebp - 0x3c], ebx
je 0x1003567b
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub edx, 0xf59e
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
add esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp eax, esi
setge cl
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
imul ecx, eax
mov eax, dword [ebp - 0x14]
add eax, ecx
xor ecx, ecx
cmp eax, 0xbc40
setl cl
cmp ecx, 6
jae 0x100356e1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x100356eb
xor ecx, ecx
inc ecx
jmp 0x100356ed
mov ecx, ebx
mov eax, dword [ebp - 0x3c]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x14]
cmp ecx, 0x656540f2
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffe9
je 0x1003566b
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x100357db
mov dword [ebp - 0x28], 0x16b1
cmp dword [ebp - 0x28], 0x1947
jle 0x10035785
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, esi
mov esi, 0x1170
mov eax, edi
lea ecx, [ebp - 0x164]
cdq
push edx
push eax
call fcn.10001a7f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003575d
mov eax, dword [eax]
push eax
call fcn.10040493
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.1000c5c5
dec edi
dec esi
jne 0x10035743
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x3144
jl 0x1003573c
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x28], 0x149f
jge 0x1003579c
push str.hlhtom_ayxtic_qdi_sducanxfy
call fcn.10040493
pop ecx
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], 4
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100357bf
mov edx, 0x5239
xor cl, cl
call fcn.10034ff6
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
mov dword [ebp + eax*4 - 0x3c], edx
dec dword [ebp - 0x18]
jmp 0x1003571e
cmp dword [ebp - 0x4c], 0xffffffff
je 0x10035898
mov dword [ebp - 0x28], 0x6182eac4
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x1c], 0x9565e08c
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
push 1
call fcn.1000be0e
mov dword [ebp - 0x24], 0xf29acd40
mov dword [ebp - 0x20], 0x331c587c
mov dword [ebp - 0x18], ebx
jmp 0x1003583e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0xbd0a7084
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003582b
mov eax, dword [ebp - 0x28]
mov ecx, 0xd777
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xa8]
sub ecx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
add eax, ecx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x1c], eax
call fcn.1000be91
push ecx
push ecx
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10035119
add esp, 0x10
push 4
lea ecx, [ebp - 0xe4]
call fcn.1000be0e
push 4
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100358c0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100358ad
mov dword [ebp - 0x14], ebx
jmp 0x100358db
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x32fe2236
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100358ca
mov dword [ebp - 0x98], 3
cmp dword [ebp - 0x98], ebx
jl 0x1003590e
mov dword [ebp - 0x24], 0x3d2d
mov dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x98]
dec dword [ebp - 0x98]
jns 0x100358f2
lea ecx, [ebp - 0xe4]
call fcn.1000be91
push ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0xd4]
call fcn.10037ffd
mov dword [ebp - 0x4c], eax
cmp eax, 0xffffffff
je 0x10035ad4
mov dword [ebp - 0x14], 0x8a87013d
mov dword [ebp - 0x18], ebx
jmp 0x10035951
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], 0x40d7f825
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10035940
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 3
jg 0x10035ac2
push dword [ebp + 0x18]
movdqa xmm0, xmmword [0x10064ae0]
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x100]
mov dword [ebp - 0x7c], ebx
push eax
push ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x78], ebx
movdqu xmmword [ebp - 0x100], xmm0
mov dword [ebp - 0x74], ebx
call fcn.1000f24e
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x20], 0x7eaa
cmp dword [ebp - 0x20], 0x812d
jle 0x100359ef
mov edi, ebx
mov dword [ebp - 0x44], ebx
mov esi, ebx
lea ebx, [esi + edi]
mov edi, 0x384c
mov eax, ebx
mov ecx, 0x10070c18
cdq
push edx
push eax
call fcn.1000bb2c
dec ebx
dec edi
jne 0x100359ba
mov edi, dword [ebp - 0x44]
inc esi
cmp esi, 0x1afe
jl 0x100359b2
inc edi
mov dword [ebp - 0x44], edi
push 0
pop ebx
cmp edi, 0x59aa
jl 0x100359b0
push ebx
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20], 0x7ae3
jge 0x10035a2f
mov edx, str.fdmquikdr_cwnc_wfvadilx_xfggsgn
mov ecx, 0x10070c18
call fcn.1000e878
jmp 0x10035a2f
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], ebx
jmp 0x10035a49
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0x2a727599
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10035a3b
mov ecx, dword [ebp - 0x7c]
mov dword [ecx + 0xc], ebx
mov eax, dword [ecx + 0xc]
inc dword [ecx + 0xc]
cmp dword [ecx + 0xc], 4
mov dword [ebp + eax*4 - 0x11c], 1
jl 0x10035a55
mov dword [ebp - 0x58], ebx
jmp 0x10035aa8
push ebx
push 1
push 0x5876
push 0x473d
push ebx
push 0x23b4
push 0x25d5
push 0x5302
push 0x4f6b
mov edx, 0x5247
mov ecx, 0x5529
call fcn.10035150
add esp, 0x24
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 3
jle 0x10035a71
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.1000be91
inc dword [ebp - 0x14]
jmp 0x1003595a
lea eax, [ebp - 0x4c]
xor dl, dl
push eax
lea ecx, [ebp - 0xd4]
call fcn.10034419
pop ecx
mov edi, dword [ebp + 0x20]
lea eax, [ebp - 0xd4]
cmp edi, eax
je 0x10035aec
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.1000c657
lea ecx, [ebp - 0xd4]
jmp 0x10035302
push ecx
push ecx
lea eax, [ebp - 0x2e]
mov byte [ebp - 0x2e], 0
push eax
call fcn.10034432
add esp, 0xc
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret