Function at 0x10030a7d
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0xa0
mov eax, 0x10048acb
call fcn.10044ac9
mov ebx, ecx
mov cl, 0xc
mov dword [ebp - 0x54], 0x62786e0c
mov dword [ebp - 0x50], 0x63606f53
xor eax, eax
mov word [ebp - 0x4c], 0x697f
mov byte [ebp - 0x4a], 0
xor byte [ebp + eax - 0x53], cl
inc eax
cmp eax, 9
jae 0x10030ab9
mov cl, byte [ebp - 0x54]
jmp 0x10030aaa
lea eax, [ebp - 0x53]
mov byte [ebp - 0x4a], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
and dword [ebp - 4], 0
lea eax, [ebp - 0x78]
push eax
push dword [ebx]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
xor esi, esi
pop ecx
pop ecx
push 0
inc esi
mov dword [ebx + 4], eax
push esi
lea ecx, [ebp - 0x78]
call fcn.10001cd4
mov cl, 0x6d
mov dword [ebp - 0x48], 0x21f0a6d
mov dword [ebp - 0x44], 0xe321d18
xor eax, eax
mov dword [ebp - 0x40], 0x8190302
mov word [ebp - 0x3c], 0x1903
mov byte [ebp - 0x3a], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xd
jae 0x10030b21
mov cl, byte [ebp - 0x48]
jmp 0x10030b12
lea eax, [ebp - 0x47]
mov byte [ebp - 0x3a], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], esi
push eax
push dword [ebx]
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 8], eax
call fcn.10001cd4
push 5
pop eax
xor edi, edi
mov dword [ebp - 0x84], eax
lea esi, [ebx + 0xc]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], eax
push edi
mov cl, 0x5c
mov dword [ebp - 0x58], 0x2824285c
mov dword [ebp - 0x54], 0x39393203
xor eax, eax
mov dword [ebp - 0x50], 0x38790338
mov byte [ebp - 0x4c], 0
xor byte [ebp + eax - 0x57], cl
inc eax
cmp eax, 0xb
jae 0x10030b97
mov cl, byte [ebp - 0x58]
jmp 0x10030b88
sub esp, 0x18
mov byte [ebp - 0x4c], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x9c]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 8]
mov dword [ebp - 4], 2
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
add esp, 0x28
mov dword [esi + 4], eax
push 0
push 1
call fcn.10001cd4
push edi
push 0x2c
pop eax
mov cl, 0x4d
mov byte [ebp - 0x47], al
mov byte [ebp - 0x44], al
xor eax, eax
mov byte [ebp - 0x48], cl
mov word [ebp - 0x46], 0x283f
mov dword [ebp - 0x43], 0x28282312
mov dword [ebp - 0x3f], 0x29681229
mov byte [ebp - 0x3b], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xc
jae 0x10030c16
mov cl, byte [ebp - 0x48]
jmp 0x10030c07
sub esp, 0x18
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x47]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x9c]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 8]
mov dword [ebp - 4], 3
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
add esp, 0x28
mov dword [esi + 8], eax
push 0
push 1
call fcn.10001cd4
call fcn.100097bd
test eax, eax
je 0x10030d1f
mov dword [esi], eax
call fcn.1000eccc
test eax, eax
je 0x10030d1f
mov ecx, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi]
push dword [ebx]
push dword [eax]
call fcn.1000e785
and dword [esp + 4], 0
and dword [esp], 0
sub esp, 0x18
mov eax, dword [esi]
and dword [esp + 0x14], 0
and dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
and dword [esp + 4], 0
and dword [esp], 0
push dword [eax]
call fcn.1000ee2c
mov eax, dword [esi]
push 0xb
push dword [eax]
call fcn.1000e883
mov eax, dword [esi]
push pe_nt_image_headers32
push dword [eax]
call fcn.1000e85d
push dword [esi + 8]
lea eax, [ebp - 0x70]
push eax
call fcn.1000e403
mov esi, eax
lea edi, [ebp - 0x20]
lea eax, [ebp - 0x20]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x5c]
mov eax, dword [esi]
push dword [eax]
call fcn.1000ecde
add esp, 0x44
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi]
push dword [eax]
call fcn.1000e75f
mov eax, dword [esi]
push 0
push dword [eax]
call fcn.1000e8b6
mov edi, dword [ebp - 0x80]
add esp, 0x10
inc edi
add esi, 0xc
sub dword [ebp - 0x60], 1
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x5c], esi
jne 0x10030b6a
mov cl, 0x3b
mov dword [ebp - 0x48], 0x494f483b
mov dword [ebp - 0x44], 0x565e4964
xor eax, eax
mov dword [ebp - 0x40], 0x5255525a
mov word [ebp - 0x3c], 0x5c55
mov byte [ebp - 0x3a], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xd
jae 0x10030d65
mov cl, byte [ebp - 0x48]
jmp 0x10030d56
lea eax, [ebp - 0x47]
mov byte [ebp - 0x3a], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 4
push eax
push dword [ebx]
call fcn.1000e2fb
pop ecx
pop ecx
xor esi, esi
mov dword [ebx + 0x48], eax
push 0
inc esi
lea ecx, [ebp - 0x78]
or edi, 0xffffffff
push esi
mov dword [ebp - 4], edi
call fcn.10001cd4
push 0x2c
pop eax
mov cl, al
mov dword [ebp - 0x47], 0x59435e4b
mov byte [ebp - 0x48], cl
xor eax, eax
mov dword [ebp - 0x43], 0x4948735c
mov dword [ebp - 0x3f], 0x40454d58
mov byte [ebp - 0x3b], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xc
jae 0x10030dd2
mov cl, byte [ebp - 0x48]
jmp 0x10030dc3
lea eax, [ebp - 0x47]
mov byte [ebp - 0x3b], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 5
push eax
push dword [ebx]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x4c], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
movaps xmm0, xmmword [str._342]
xor ecx, ecx
movups xmmword [ebp - 0x74], xmm0
mov byte [ebp - 0x64], 0
mov al, byte [ebp - 0x74]
xor byte [ebp + ecx - 0x73], al
inc ecx
cmp ecx, 0xf
jb 0x10030e18
lea eax, [ebp - 0x73]
mov byte [ebp - 0x64], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.100012e0
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 6
push eax
push dword [ebx + 0x4c]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x28]
mov dword [ebx + 0x50], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
push 5
pop eax
mov byte [ebp - 0x52], al
mov cl, 0x71
mov byte [ebp - 0x4f], al
mov byte [ebp - 0x4a], al
xor eax, eax
mov word [ebp - 0x54], 0x271
mov word [ebp - 0x51], 0x2e03
mov dword [ebp - 0x4e], 0x141a1218
mov byte [ebp - 0x49], 0
xor byte [ebp + eax - 0x53], cl
inc eax
cmp eax, 0xa
jae 0x10030e91
mov cl, byte [ebp - 0x54]
jmp 0x10030e82
lea eax, [ebp - 0x53]
mov byte [ebp - 0x49], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 7
push eax
push dword [ebx + 0x4c]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x54], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
mov cl, 0x7e
mov dword [ebp - 0x54], 0xc0a0d7e
mov dword [ebp - 0x50], 0x1f161d21
xor eax, eax
mov dword [ebp - 0x4c], 0x1b1910
xor byte [ebp + eax - 0x53], cl
inc eax
cmp eax, 0xa
jae 0x10030eef
mov cl, byte [ebp - 0x54]
jmp 0x10030ee0
lea eax, [ebp - 0x53]
mov byte [ebp - 0x49], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 8
push eax
push dword [ebx + 0x4c]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x58], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
mov cl, 0x70
mov dword [ebp - 0x54], 0x1e041270
mov dword [ebp - 0x50], 0x191f1a2f
xor eax, eax
mov word [ebp - 0x4c], 0x1e
xor byte [ebp + eax - 0x53], cl
inc eax
cmp eax, 8
jae 0x10030f4c
mov cl, byte [ebp - 0x54]
jmp 0x10030f3d
lea eax, [ebp - 0x53]
mov byte [ebp - 0x4b], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 9
push eax
push dword [ebx + 0x4c]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x5c], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
push 0x2c
pop ecx
mov byte [ebp - 0x48], cl
xor eax, eax
mov dword [ebp - 0x47], 0x59435e4b
mov dword [ebp - 0x43], 0x495e735c
mov dword [ebp - 0x3f], 0x485e4d5b
mov byte [ebp - 0x3b], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xc
jae 0x10030fb2
mov cl, byte [ebp - 0x48]
jmp 0x10030fa3
lea eax, [ebp - 0x47]
mov byte [ebp - 0x3b], 0
push eax
lea ecx, [ebp - 0x78]
call fcn.100012e0
lea eax, [ebp - 0x78]
mov dword [ebp - 4], 0xa
push eax
push dword [ebx]
call fcn.1000e2fb
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x78]
mov dword [ebx + 0x60], eax
mov dword [ebp - 4], edi
call fcn.10001cd4
xor edi, edi
lea esi, [ebx + 0x64]
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], esi
push edi
mov cl, 0x3d
mov dword [ebp - 0x48], 0x4945493d
mov dword [ebp - 0x44], 0x4a584f62
xor eax, eax
mov dword [ebp - 0x40], 0x62594f5c
mov word [ebp - 0x3c], 0x5918
mov byte [ebp - 0x3a], 0
xor byte [ebp + eax - 0x47], cl
inc eax
cmp eax, 0xd
jae 0x10031025
mov cl, byte [ebp - 0x48]
jmp 0x10031016
sub esp, 0x18
mov byte [ebp - 0x3a], 0
lea eax, [ebp - 0x47]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x9c]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 0x60]
mov dword [ebp - 4], 0xb
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
add esp, 0x28
mov dword [esi + 4], eax
push 0
push 1
call fcn.10001cd4
movaps xmm0, xmmword [str.ezizDilzi]
xor ecx, ecx
push edi
movups xmmword [ebp - 0x58], xmm0
mov al, byte [ebp - 0x58]
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 0xe
jb 0x1003107a
sub esp, 0x18
mov byte [ebp - 0x49], 0
lea eax, [ebp - 0x57]
mov ecx, esp
push eax
call fcn.100012e0
lea eax, [ebp - 0x9c]
push eax
call fcn.1001b71b
push eax
push dword [ebx + 0x60]
mov dword [ebp - 4], 0xc
call fcn.1000e2fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
add esp, 0x28
mov dword [esi + 8], eax
push 0
push 1
call fcn.10001cd4
call fcn.100097bd
test eax, eax
je 0x10031193
mov dword [esi], eax
call fcn.1000eccc
test eax, eax
je 0x10031193
mov ecx, dword [esi]
mov dword [ecx], eax
mov eax, dword [esi]
push dword [ebx]
push dword [eax]
call fcn.1000e785
and dword [esp + 4], 0
and dword [esp], 0
sub esp, 0x18
mov eax, dword [esi]
and dword [esp + 0x14], 0
and dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x3f340000
mov dword [esp + 8], 0x3f340000
and dword [esp + 4], 0
and dword [esp], 0
push dword [eax]
call fcn.1000ee2c
mov eax, dword [esi]
push 0xb
push dword [eax]
call fcn.1000e883
mov eax, dword [esi]
push pe_nt_image_headers32
push dword [eax]
call fcn.1000e85d
push dword [esi + 8]
lea eax, [ebp - 0xac]
push eax
call fcn.1000e403
mov esi, eax
lea edi, [ebp - 0x38]
lea eax, [ebp - 0x38]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x5c]
mov eax, dword [esi]
push dword [eax]
call fcn.1000ecde
add esp, 0x44
lea eax, [ebp - 0x38]
push eax
mov eax, dword [esi]
push dword [eax]
call fcn.1000e75f
mov eax, dword [esi]
push 0
push dword [eax]
call fcn.1000e8b6
mov edi, dword [ebp - 0x60]
add esp, 0x10
inc edi
add esi, 0xc
sub dword [ebp - 0x84], 1
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], esi
jne 0x10030ff2
push 0
push dword [ebx]
call fcn.1000e85d
pop ecx
pop ecx
call fcn.10044a84
ret