Function at 0x10034ddf
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x1005bd85
call fcn.1005a9e0
sub esp, 0x134
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0xa0], ecx
lea ecx, [ebp - 0x80]
push 3
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x5c], ebx
call fcn.10001b45
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], 0x6c75
cmp dword [ebp - 0x14], 0x7031
jle 0x10034e87
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
and eax, esi
mov dword [ebp - 0x38], eax
mov esi, eax
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov eax, ebx
mov ecx, 0x10076818
cdq
idiv edi
xor edx, esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a30
inc edi
cmp edi, 0x1fce
jl 0x10034e3b
inc ebx
push 0
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x1ee9
pop ebx
jl 0x10034e36
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x6138
jl 0x10034e2a
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x63de
jl 0x10034e25
push 3
lea ecx, [ebp - 0x8c]
call fcn.10001b45
push 2
pop eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x14], 0x6bc3
mov dword [ebp - 0x34], eax
jge 0x10034eb5
mov edx, str.ylspc_jwifoyh_hwo_epasy_szyqzjg_vdbkgw_ppaslusj_pghas_cgq_bbxjkr_olowq_aexhmnt
mov ecx, 0x10076818
call fcn.1000349f
xor edi, edi
inc edi
push 2
mov dword [ebp - 4], edi
pop esi
mov dword [ebp - 0x38], 0xe2b79dc8
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10034f07
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0xf5540d7f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034ef7
mov dword [ebp - 0x1c], 0x5cd
cmp dword [ebp - 0x1c], 0x857
jle 0x10034f8a
mov edx, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
add ecx, eax
mov eax, edx
shl eax, cl
lea ecx, [ebp - 0xf4]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10034f4a
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.10001e5d
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
inc ecx
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x3112
jl 0x10034f2c
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x66fc
jl 0x10034f27
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 0x78e4
jl 0x10034f22
mov dword [ebp - 0x18], ebx
jmp 0x10034fa2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034f8f
cmp dword [ebp - 0x1c], 0x567
jge 0x10034fbc
push str.uetneyeh_yjgjb_zmntm_drqwgrk_yxw
call fcn.100445e8
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x10034fce
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10034fc1
cmp dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x80]
mov dword [eax + 4], 0xfffffff8
je 0x10035007
push dword [ebp - 0x8c]
call fcn.10044367
mov eax, dword [ebp - 0x80]
pop ecx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
or dword [ebp - 4], 0xffffffff
push eax
call fcn.10044367
pop ecx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.10031329
push ecx
push eax
lea ecx, [ebp - 0x9c]
call fcn.100356af
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], 0xb18d4081
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], 0x2f63069b
mov dword [ebp - 0x1c], 0x2be6
cmp dword [ebp - 0x1c], 0x2bfa
jle 0x100350aa
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
xor eax, ecx
lea ecx, [ebp - 0x124]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035079
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x124]
call fcn.10001e5d
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x64d
jl 0x1003505f
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x292a
jl 0x1003505a
push esi
lea ecx, [ebp - 0x4c]
call fcn.10001b45
cmp dword [ebp - 0x1c], 0x2907
jge 0x100350c7
push str.rqjsxjt_vedewkleq_mikejok_nkgufnfm_etvio_qxmwwsd_tqhrsjze_jsgnhcjum_zmewcg
call fcn.100445e8
pop ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x1c], ebx
jmp 0x100350e3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], 0x5e0e2bf3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100350d3
cmp dword [ebp - 0x18], ebx
jne 0x100350f4
mov edx, ebx
cmp dword [ebp - 0x14], ebx
je 0x100350f6
mov edx, edi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0xfffffff6
jge 0x1003510c
mov edx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1003510e
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
xor eax, eax
test edx, edx
setg al
sub eax, dword [ebp - 0x14]
je 0x10035143
cmp dword [ebp - 0x24], ebx
je 0x10035143
mov ecx, edi
cmp dword [ebp - 0x18], ebx
jne 0x10035145
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
neg ecx
sub ecx, dword [eax + 4]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
test eax, eax
je 0x10035291
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x100352ac
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0xcc027682
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x1003527b
push dword [ebp - 0x94]
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1c], ebx
push eax
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x2c], 0xfefd5227
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x58], ebx
push ebx
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x54], ebx
movdqu xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0x50], ebx
call fcn.10019a9d
cmp dword [ebp - 0x28], ebx
je 0x100351c8
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xfffffffe
setne cl
cmp dword [ebp - 0x28], ecx
jle 0x100351eb
mov eax, edi
cmp dword [ebp - 0x3c], ebx
jne 0x100351ed
mov eax, ebx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x82bc
setg al
add eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], ecx
cmp eax, dword [ecx + 8]
je 0x1003522f
mov dword [ebp - 0x2c], edi
cmp dword [ebp - 0x30], ebx
jne 0x10035232
mov dword [ebp - 0x2c], ebx
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x4c]
push dword [ebp - 0x58]
mov edi, dword [eax + ecx*4]
xor ecx, ecx
cmp dword [ebp - 0x2c], 0x7c3cb878
mov dword [edx + esi*4], edi
setl cl
xor eax, eax
cmp edi, ecx
mov ecx, dword [ebp - 0x38]
sete al
mov dword [ecx + 8], eax
call fcn.10044367
pop ecx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
dec dword [ebp - 0x18]
push 1
pop edi
jns 0x10035185
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
cmp dword [eax + ecx*4], ebx
jne 0x100352ac
dec dword [ebp - 0x24]
jns 0x1003516f
jmp 0x100352ac
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100352ac
push ebx
push 0x2062
push ebx
push 0x14a2
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov byte [ebp - 4], 6
push dword [ebp - 0x4c]
call fcn.10044367
mov edx, dword [ebp - 0x9c]
mov esi, dword [ebp - 0x40]
pop ecx
add esi, 0xffffe0c6
mov dword [ebp - 0x4c], ebx
mov eax, dword [edx + 4]
mov ecx, edx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
cmp byte [eax + 0xd], 0
jne 0x10035307
cmp dword [eax + 0x10], esi
jge 0x100352e6
mov eax, dword [eax + 8]
jmp 0x100352ea
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x100352dc
cmp ecx, edx
je 0x10035307
cmp esi, dword [ecx + 0x10]
jl 0x10035307
mov dword [ebp - 0xa8], ecx
lea esi, [ebp - 0xa8]
jmp 0x10035313
mov dword [ebp - 0xa4], edx
lea esi, [ebp - 0xa4]
mov eax, dword [0x10077d08]
mov esi, dword [esi]
mov dword [ebp - 0x40], esi
test al, 1
jne 0x1003534b
or eax, edi
mov dword [0x10077d2c], 7
mov dword [0x10077d08], eax
xor eax, eax
push 0x1005c5e3
mov dword [0x10077d28], ebx
mov word [0x10077d18], ax
call fcn.1004428c
pop ecx
mov dword [ebp - 0x38], 0x5f
cmp dword [ebp - 0x38], 0x81
jle 0x100353ce
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
add eax, esi
xor eax, ecx
lea ecx, [ebp - 0xdc]
cdq
push edx
push eax
call fcn.10003aad
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003538a
mov eax, dword [eax]
push eax
call fcn.100445e8
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xdc]
call fcn.10001e5d
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1cdc
jl 0x1003536e
inc esi
cmp esi, 0x2f0c
jl 0x10035369
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x36d6
jl 0x10035367
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov esi, dword [ebp - 0x40]
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x30], 0x6ea0e402
mov dword [ebp - 0x14], ebx
jmp 0x100353f2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100353e1
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x15
jl 0x100355bb
mov dword [ebp - 0x1c], 0xc4d8e5cc
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10035425
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x90], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10035418
mov dword [ebp - 0x1c], ebx
jmp 0x1003558c
push 2
lea ecx, [ebp - 0x74]
call fcn.10001b45
push 2
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x10035454
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x74]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10035448
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2c], eax
mov dword [eax + 4], 0xfffffffb
push 3
lea ecx, [ebp - 0x68]
call fcn.10001b45
mov dword [ebp - 0x14], ebx
jmp 0x10035482
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x68]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10035475
mov esi, dword [ebp - 0x68]
mov dword [esi + 8], 0x1a
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x18], ebx
jmp 0x1003553b
mov dword [ebp - 0x30], 0xfffffff7
xor ecx, ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0xc4], 0x57a10dd6
mov eax, dword [ebp - 0x24]
cmp dword [esi + 8], eax
setge cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x74]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x68]
cmp ecx, edi
setg dl
imul edx, dword [eax]
test edx, edx
jne 0x100354f9
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
cmp dword [eax + 4], ebx
je 0x100354fb
mov ecx, edi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10035538
push 0xbe9
push 0x2060
push 0xc1f
push 0x858
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x100354a8
dec dword [esi + 8]
cmp dword [esi + 8], 0xffffffe8
jge 0x10035492
push dword [ebp - 0x68]
call fcn.10044367
mov esi, dword [ebp - 0x2c]
pop ecx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
dec dword [esi + 4]
cmp dword [esi + 4], 0xffffffed
mov dword [ebp - 0x60], ebx
jge 0x10035466
mov byte [ebp - 4], 6
push dword [ebp - 0x74]
call fcn.10044367
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
dec dword [ebp - 0x1c]
pop ecx
cmp dword [ebp - 0x1c], 0xfffffff7
je 0x10035432
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100355ab
push edi
push 0x22a2
call dword [sym.imp.USER32.dll_EnableWindow]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x15
jge 0x10035405
mov esi, dword [ebp - 0x40]
cmp dword [ebp - 0x38], 0xfffffdb0
jge 0x100355cf
push str.muurqy_slp_nrligqdd_hdt_sumpl
call fcn.100445e8
pop ecx
mov dword [ebp - 4], 6
cmp esi, dword [ebp - 0x9c]
je 0x10035600
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0x13c]
call fcn.1002bad9
pop ecx
mov ecx, eax
mov eax, edi
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x5c], eax
jmp 0x10035620
push 0x10077d18
lea ecx, [ebp - 0x10c]
call fcn.100185ae
mov ecx, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x5c], 2
mov esi, dword [ebp - 0xa0]
push ecx
mov ecx, esi
call fcn.100185ae
mov eax, dword [ebp - 0x34]
or eax, 4
test al, 2
je 0x1003564e
push ebx
and eax, 0xfffffffd
lea ecx, [ebp - 0x10c]
push edi
mov dword [ebp - 0x34], eax
call fcn.10018a82
mov eax, dword [ebp - 0x34]
test al, 1
je 0x1003565f
push ebx
push edi
lea ecx, [ebp - 0x13c]
call fcn.10018a82
lea ecx, [ebp - 0x9c]
call fcn.1003567d
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret