Function at 0x10113e70
Capabilities:
Encode data using xor
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x1029e280]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x58
lea eax, [ebp - 0x1b4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x102e32c0]
add esp, 0xc
test al, 1
jne 0x10113ebd
or eax, 1
push 0
mov dword [0x102e32c0], eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [0x102e32b8], eax
mov dword [0x102e32bc], edx
push ebx
push esi
lea eax, [ebp - 0x154]
mov dword [ebp - 0x154], 0x101
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
cmp byte [0x1029dee0], 0
je 0x10113f41
cmp byte [0x1029dee1], 0
jne 0x10113f82
mov byte [0x1029dee1], 1
xor esi, esi
nop dword [eax]
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029def4]
xor ebx, dword [0x1029def0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029dee2], al
inc esi
cmp esi, 0xd
jb 0x10113f00
jmp 0x10113f82
xor esi, esi
xor edx, edx
mov ebx, esi
xor edx, dword [0x1029def4]
xor ebx, dword [0x1029def0]
xor edx, 0xd28f2c5
xor ebx, 0x1de26cd5
mov ecx, edx
mov eax, ebx
shld ecx, eax, 0xd
shl eax, 0xd
xor edx, ecx
xor ebx, eax
mov eax, ebx
shrd eax, edx, 7
xor al, bl
xor byte [esi + 0x1029dee2], al
inc esi
cmp esi, 0xd
jb 0x10113f43
lea eax, [ebp - 0x14d]
push eax
push 0x1029deee
push 0x1029dee2
lea ecx, [ebp - 0x134]
call fcn.1004f490
cmp dword [ebp - 0x120], 0xf
lea esi, [ebp - 0x134]
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 0x24c], 0x10180ef0
cmova esi, dword [ebp - 0x134]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x24c]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x24c], 0x10180eec
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x250], eax
lea ecx, [ebp - 0x248]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
lea eax, [ebp - 0x114]
mov dword [ebp - 0x248], 0x10180bd0
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x108]
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push 1
push eax
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x210], 0
push esi
push eax
mov dword [ebp - 0x20c], 4
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x110], 0x100b1000
mov dword [ebp - 0x10c], fcn.100740e0
call fcn.100791e0
add esp, 0x10
lea eax, [ebp - 0x14c]
lea ecx, [ebp - 0x24c]
push eax
call fcn.1004d5d0
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x24c], 0x10180eec
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x250], eax
lea ecx, [ebp - 0x248]
call fcn.10044cb0
lea ecx, [ebp - 0x244]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1fc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0x120]
pop esi
pop ebx
cmp ecx, 0xf
jbe 0x10114119
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1011410f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1011410f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101169da
add esp, 8
cmp dword [ebp - 0x138], 0xf
lea eax, [ebp - 0x14c]
mov ecx, dword [0x102e32bc]
cmova eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [0x102e32b8]
mov dword [ebp - 0x1ac], eax
lea eax, [ebp - 0x1b4]
push eax
mov dword [ebp - 0x198], str.Kemuri.dev
mov dword [ebp - 0x1b0], str.Counter_Strike:_Global_Offensive
mov dword [ebp - 0x19c], str.discord
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x194], 0x1017c4f2
mov dword [ebp - 0x190], 0x1017c4f2
mov dword [ebp - 0x188], str.Kemuri_Discord
mov dword [ebp - 0x184], str.https:__discord.gg_dgyjZ6cXQX
mov dword [ebp - 0x180], 0x1017c4f2
mov dword [ebp - 0x17c], 0x1017c4f2
call fcn.1010f8a0
mov ecx, dword [ebp - 0x138]
add esp, 4
cmp ecx, 0xf
jbe 0x101141ef
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x101141e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x101141e5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101169da
add esp, 8
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10116d02
mov esp, ebp
pop ebp
ret