Function at 0x10030510
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0xe0
call fcn.1004e0f0
mov eax, dword [0x1006bde4]
xor eax, esp
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0xe4]
mov ecx, dword [esp + 0x104]
mov edx, dword [esp + 0xf0]
push ebx
mov ebx, dword [esp + 0xec]
push ebp
mov ebp, dword [esp + 0xfc]
push esi
mov esi, dword [esp + 0x108]
mov dword [esp + 0xc], eax
mov eax, dword [eax]
mov dword [esp + 0x14], ecx
mov ecx, eax
push edi
sub ecx, esi
mov dword [esp + 0x14], edx
xor edi, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
cmp ebx, esi
jb 0x1003058c
cmp esi, 0x40
ja 0x1003058c
test esi, esi
jne 0x100305a7
cmp dword [esp + 0x110], edi
jne 0x100307ae
xor eax, eax
mov ecx, dword [esp + 0xec]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1004e11b
add esp, 0xe0
ret
cmp dword [esp + 0x108], 1
mov eax, dword [esp + 0x10]
mov dword [eax], ecx
jne 0x100305d8
test edx, edx
je 0x100305c6
mov eax, dword [esp + 0xfc]
add eax, ecx
mov dword [edx], eax
test ebp, ebp
je 0x100307ae
mov dword [ebp], edi
mov eax, 1
jmp 0x1003058e
push 0
push esi
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x24]
call sub.libcrypto_3.dll_RAND_bytes_ex
add esp, 0x10
test eax, eax
jle 0x1003058c
cmp dword [esp + 0x14], edi
je 0x1003058c
test ebp, ebp
je 0x1003058c
push 0x104
push str.ssl_record_tls_pad.c
push esi
call sub.libcrypto_3.dll_CRYPTO_malloc
mov ecx, dword [esp + 0x20]
add esp, 0xc
mov dword [esp + 0x24], eax
mov dword [ecx], eax
test eax, eax
je 0x1003058c
lea ecx, [esp + 0x6c]
mov dword [ebp], 1
neg ecx
lea eax, [esp + 0x6c]
and ecx, 0x3f
add ecx, eax
lea eax, [esi + 0x100]
mov dword [esp + 0x14], ecx
cmp ebx, eax
jbe 0x1003064d
mov edi, ebx
sub edi, esi
sub edi, 0x100
push esi
xor ebp, ebp
mov dword [esp + 0x1c], 0
push ebp
push ecx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
xor ebx, ebx
cmp edi, dword [esp + 0xf8]
jae 0x100306f6
mov ecx, edi
sub ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], ecx
nop dword [eax + eax]
xor ecx, dword [esp + 0x1c]
mov eax, edi
xor eax, dword [esp + 0x20]
lea edx, [eax - 1]
not eax
shr eax, 0x1f
shr edx, 0x1f
and edx, eax
mov eax, edi
xor eax, dword [esp + 0x1c]
neg edx
or ecx, eax
mov eax, edx
or eax, dword [esp + 0x18]
xor ecx, edi
shr ecx, 0x1f
and edx, ebx
neg ecx
or ebp, edx
mov edx, dword [esp + 0x14]
and ecx, eax
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x18], ecx
mov al, byte [edi + eax]
inc edi
and al, cl
or byte [ebx + edx], al
inc ebx
mov ecx, ebx
mov eax, esi
sub ecx, esi
xor eax, ebx
xor ecx, esi
or ecx, eax
xor ecx, ebx
shr ecx, 0x1f
neg ecx
and ebx, ecx
mov ecx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x10], ecx
cmp edi, dword [esp + 0xf8]
jb 0x10030680
jmp 0x100306fa
mov edx, dword [esp + 0x14]
test esi, esi
je 0x100307ae
movzx eax, byte [esp + 0x110]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x18], eax
not eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x2c]
sub eax, edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x28], eax
mov eax, ebp
lea edi, [edi + 1]
and eax, 0xffffffdf
mov bl, byte [eax + edx]
mov eax, ebp
or eax, 0x20
mov cl, byte [eax + edx]
mov eax, ebp
and eax, 0x20
inc ebp
dec eax
shr eax, 0x1f
neg al
movzx eax, al
mov dword [esp + 0x20], eax
not eax
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
and al, cl
mov ecx, dword [esp + 0x28]
and dl, bl
or dl, al
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
movzx ecx, byte [ecx + edi - 1]
and cl, al
mov eax, dword [esp + 0x20]
and al, dl
mov edx, dword [esp + 0x14]
or al, cl
mov ecx, ebp
sub ecx, esi
mov byte [edi - 1], al
xor ecx, esi
mov eax, esi
xor eax, ebp
or ecx, eax
xor ecx, ebp
shr ecx, 0x1f
neg ecx
and ebp, ecx
sub dword [esp + 0x10], 1
jne 0x10030726
mov eax, 1
jmp 0x1003058e