Function at 0x10035ab0
Capabilities:
Encode data using xor
Query environment variable

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100afe7f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2b8
mov eax, dword [0x100cc380]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 0x220], 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0x13c], edx
push 0x98
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x208], 0x100bae88
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0x204]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x220], 1
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x208]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x208], 0x100bae84
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x20c], eax
lea ecx, [ebp - 0x204]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0x204], 0x100badb4
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 4
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 2
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64]
mov dword [ebp - 0x214], eax
add esp, 4
mov dword [ebp - 0x210], str._H:_M:_S
mov eax, str._H:_M:_S
mov dword [ebp - 0x20c], str._H:_M:_S
inc eax
cmp byte [eax], 0
jne 0x10035bf4
lea edx, [ebp - 0x214]
mov dword [ebp - 0x20c], eax
lea ecx, [ebp - 0x208]
call fcn.1003a4a0
mov eax, dword [0x10212f98]
test al, 1
jne 0x10035c66
or eax, 1
mov dword [0x10212f98], eax
mov byte [ebp - 4], 3
xorps xmm0, xmm0
push 3
push 0x100bc0c8
mov ecx, 0x10212f74
mov dword [0x10212f84], 0
movups xmmword [0x10212f74], xmm0
mov dword [0x10212f88], 0
call fcn.1002a660
push 0x100b7fa0
call fcn.100ad704
add esp, 4
mov byte [ebp - 4], 2
push 0x104
lea eax, [ebp - 0x120]
push eax
push str.USERNAME
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x124], 0
movups xmmword [ebp - 0x138], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035ca4
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.1002a660
mov byte [ebp - 4], 4
lea esi, [ebp - 0x228]
mov word [ebp - 0x228], 0x6b6f
lea ecx, [esi + 1]
mov byte [ebp - 0x226], 0
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x10035ce0
mov edi, dword [ebp - 0x124]
lea edx, [ebp - 0x138]
sub esi, ecx
mov ecx, dword [ebp - 0x128]
cmp edi, 0xf
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x10035da8
mov edi, ecx
lea esi, [ebp - 0x228]
sub edi, 4
jb 0x10035d31
nop word [eax + eax]
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10035d36
add edx, 4
add esi, 4
sub edi, 4
jae 0x10035d20
cmp edi, 0xfffffffc
je 0x10035d6a
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10035d63
cmp edi, 0xfffffffd
je 0x10035d6a
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10035d63
cmp edi, 0xfffffffe
je 0x10035d6a
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10035d63
cmp edi, 0xffffffff
je 0x10035d6a
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x10035d6a
sbb eax, eax
or eax, 1
jmp 0x10035d6c
xor eax, eax
test eax, eax
jne 0x10035da2
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x6472656e
mov byte [ebp - 0x20c], al
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035d90
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x238]
mov dword [ebp - 0x238], 0x72646563
mov word [ebp - 0x234], 0x69
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10035dc4
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x10035e78
mov edi, ecx
lea esi, [ebp - 0x238]
sub edi, 4
jb 0x10035e03
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10035e08
add edx, 4
add esi, 4
sub edi, 4
jae 0x10035df2
cmp edi, 0xfffffffc
je 0x10035e3c
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10035e35
cmp edi, 0xfffffffd
je 0x10035e3c
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10035e35
cmp edi, 0xfffffffe
je 0x10035e3c
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10035e35
cmp edi, 0xffffffff
je 0x10035e3c
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x10035e3c
sbb eax, eax
or eax, 1
jmp 0x10035e3e
xor eax, eax
test eax, eax
jne 0x10035e72
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x6e656465
mov byte [ebp - 0x20c], al
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035e60
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
mov dword [ebp - 0x260], 0xb2b5a78b
xor eax, eax
mov dword [ebp - 0x25c], 0x85e6b4a3
mov dword [ebp - 0x258], 0xb5afb4ae
mov byte [ebp - 0x254], 0xc6
nop
xor byte [ebp + eax - 0x260], 0xc6
inc eax
cmp eax, 0xd
jb 0x10035ea0
lea esi, [ebp - 0x260]
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10035eb7
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x10035f68
mov edi, ecx
lea esi, [ebp - 0x260]
sub edi, 4
jb 0x10035ef6
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10035efb
add edx, 4
add esi, 4
sub edi, 4
jae 0x10035ee5
cmp edi, 0xfffffffc
je 0x10035f2f
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10035f28
cmp edi, 0xfffffffd
je 0x10035f2f
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10035f28
cmp edi, 0xfffffffe
je 0x10035f2f
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10035f28
cmp edi, 0xffffffff
je 0x10035f2f
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x10035f2f
sbb eax, eax
or eax, 1
jmp 0x10035f31
xor eax, eax
test eax, eax
jne 0x10035f62
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x657a657a
mov byte [ebp - 0x20c], al
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035f50
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x240]
mov dword [ebp - 0x240], 0x6b63616a
mov word [ebp - 0x23c], 0x72
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10035f84
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x10036038
mov edi, ecx
lea esi, [ebp - 0x240]
sub edi, 4
jb 0x10035fc3
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10035fc8
add edx, 4
add esi, 4
sub edi, 4
jae 0x10035fb2
cmp edi, 0xfffffffc
je 0x10035ffc
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10035ff5
cmp edi, 0xfffffffd
je 0x10035ffc
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10035ff5
cmp edi, 0xfffffffe
je 0x10035ffc
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10035ff5
cmp edi, 0xffffffff
je 0x10035ffc
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x10035ffc
sbb eax, eax
or eax, 1
jmp 0x10035ffe
xor eax, eax
test eax, eax
jne 0x10036032
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x6b6e6970
mov byte [ebp - 0x20c], al
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036020
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x248]
mov dword [ebp - 0x248], 0x61636c6f
mov word [ebp - 0x244], 0x7a
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10036054
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x10036108
mov edi, ecx
lea esi, [ebp - 0x248]
sub edi, 4
jb 0x10036093
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10036098
add edx, 4
add esi, 4
sub edi, 4
jae 0x10036082
cmp edi, 0xfffffffc
je 0x100360cc
mov al, byte [edx]
cmp al, byte [esi]
jne 0x100360c5
cmp edi, 0xfffffffd
je 0x100360cc
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x100360c5
cmp edi, 0xfffffffe
je 0x100360cc
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x100360c5
cmp edi, 0xffffffff
je 0x100360cc
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x100360cc
sbb eax, eax
or eax, 1
jmp 0x100360ce
xor eax, eax
test eax, eax
jne 0x10036102
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x6d30726b
mov word [ebp - 0x20c], 0x64
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100360f0
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x230]
mov dword [ebp - 0x230], 0x72726554
mov byte [ebp - 0x22c], 0
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10036122
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x100361d8
mov edi, ecx
lea esi, [ebp - 0x230]
sub edi, 4
jb 0x10036161
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10036166
add edx, 4
add esi, 4
sub edi, 4
jae 0x10036150
cmp edi, 0xfffffffc
je 0x1003619a
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10036193
cmp edi, 0xfffffffd
je 0x1003619a
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10036193
cmp edi, 0xfffffffe
je 0x1003619a
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10036193
cmp edi, 0xffffffff
je 0x1003619a
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x1003619a
sbb eax, eax
or eax, 1
jmp 0x1003619c
xor eax, eax
test eax, eax
jne 0x100361d2
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x72726574
mov byte [ebp - 0x20c], al
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100361c0
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x268]
mov dword [ebp - 0x268], 0x646e7554
mov word [ebp - 0x264], 0x6172
lea edx, [esi + 1]
mov byte [ebp - 0x262], 0
nop dword [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x10036200
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x100362ba
mov edi, ecx
lea esi, [ebp - 0x268]
sub edi, 4
jb 0x10036241
nop
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10036246
add edx, 4
add esi, 4
sub edi, 4
jae 0x10036230
cmp edi, 0xfffffffc
je 0x1003627a
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10036273
cmp edi, 0xfffffffd
je 0x1003627a
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10036273
cmp edi, 0xfffffffe
je 0x1003627a
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10036273
cmp edi, 0xffffffff
je 0x1003627a
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x1003627a
sbb eax, eax
or eax, 1
jmp 0x1003627c
xor eax, eax
test eax, eax
jne 0x100362b4
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x646e7554
mov word [ebp - 0x20c], 0x6172
lea edx, [ecx + 1]
mov byte [ebp - 0x20a], al
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100362a2
lea eax, [ebp - 0x210]
jmp 0x1003639e
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x250]
mov dword [ebp - 0x250], 0x6c6c656a
mov word [ebp - 0x24c], 0x6f
lea edx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x100362d6
sub esi, edx
cmp edi, 0xf
lea edx, [ebp - 0x138]
cmova edx, dword [ebp - 0x138]
cmp ecx, esi
jne 0x1003637f
lea esi, [ebp - 0x250]
sub ecx, 4
jb 0x10036313
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x10036318
add edx, 4
add esi, 4
sub ecx, 4
jae 0x10036302
cmp ecx, 0xfffffffc
je 0x1003634c
mov al, byte [edx]
cmp al, byte [esi]
jne 0x10036345
cmp ecx, 0xfffffffd
je 0x1003634c
mov al, byte [edx + 1]
cmp al, byte [esi + 1]
jne 0x10036345
cmp ecx, 0xfffffffe
je 0x1003634c
mov al, byte [edx + 2]
cmp al, byte [esi + 2]
jne 0x10036345
cmp ecx, 0xffffffff
je 0x1003634c
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x1003634c
sbb eax, eax
or eax, 1
jmp 0x1003634e
xor eax, eax
test eax, eax
jne 0x1003637f
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x210], 0x6c6c656a
mov word [ebp - 0x20c], 0x6f
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036370
lea eax, [ebp - 0x210]
jmp 0x1003639e
lea ecx, [ebp - 0x220]
mov word [ebp - 0x220], 0x3f
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036391
lea eax, [ebp - 0x220]
sub ecx, edx
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.10029e30
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x204]
call fcn.1002fd20
mov byte [ebp - 4], 5
lea eax, [ebp - 0x298]
cmp dword [ebp - 0x284], 0xf
mov dword [ebp - 0x278], 0xebe6b5e3
cmova eax, dword [ebp - 0x298]
mov dword [ebp - 0x218], eax
xor eax, eax
mov dword [ebp - 0x274], 0xe6b5e3e6
mov dword [ebp - 0x270], 0xb5e3e6eb
mov byte [ebp - 0x26c], 0xc6
xor byte [ebp + eax - 0x278], 0xc6
inc eax
cmp eax, 0xd
jb 0x10036404
push 0x98
lea eax, [ebp - 0xb8]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xb8], 0x100bae88
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x220], 0x35
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xb8], 0x100bae84
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xbc], eax
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - 0xb4], 0x100badb4
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 4
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c4], eax
mov ecx, 3
mov dword [ebp - 0x2c0], 3
lea eax, [ebp - 0x2b4]
nop word [eax + eax]
mov dword [eax - 8], 0
lea eax, [eax + 0xc]
mov dword [eax - 0x10], 0
mov dword [eax - 0xc], 0
sub ecx, 1
jne 0x100364e0
push dword [ebp - 0x2c0]
mov dword [ebp - 0x214], 0x10212f74
lea eax, [ebp - 0x138]
push dword [ebp - 0x2c4]
mov dword [ebp - 0x210], 0x1003b4e0
lea edx, [ebp - 0x278]
movq xmm0, qword [ebp - 0x214]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0x218]
movq qword [ebp - 0x2bc], xmm0
mov dword [ebp - 0x210], 0x1003b4e0
movq xmm0, qword [ebp - 0x214]
movq qword [ebp - 0x2b0], xmm0
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], 0x10030660
movq xmm0, qword [ebp - 0x214]
mov dword [ebp - 0x2b4], fcn.10030680
mov dword [ebp - 0x2a8], fcn.10030680
movq qword [ebp - 0x2a4], xmm0
mov dword [ebp - 0x29c], fcn.10030680
call fcn.1002de10
add esp, 8
lea eax, [ebp - 0x170]
lea ecx, [ebp - 0xb4]
push eax
call fcn.1002fd20
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xb8], 0x100bae84
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xbc], eax
lea ecx, [ebp - 0xb4]
call fcn.10029940
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x284]
cmp ecx, 0xf
jbe 0x10036644
mov edx, dword [ebp - 0x298]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003663a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1003663a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov esi, dword [0x101f65bc]
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x284], 0xf
mov byte [ebp - 0x298], 0
call fcn.1002fd20
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x280]
cmp dword [ebp - 0x26c], 0xf
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x21c], 0x25202d20
cmova eax, dword [ebp - 0x280]
mov dword [ebp - 0x20c], eax
lea eax, [ebp - 0x20c]
push eax
mov word [ebp - 0x218], 0x73
call fcn.1002fed0
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x26c]
cmp ecx, 0xf
jbe 0x10036703
mov edx, dword [ebp - 0x280]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100366f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100366f9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov eax, dword [0x10212f98]
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x26c], 0xf
mov byte [ebp - 0x280], 0
test al, 2
jne 0x1003676f
or eax, 2
mov dword [0x10212f98], eax
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x21c]
push 0x10212f74
mov ecx, 0x10212f9c
mov dword [ebp - 0x21c], 0x2d207325
mov word [ebp - 0x218], 0x20
call fcn.1003a700
add esp, 4
push 0x100b7f40
call fcn.100ad704
add esp, 4
mov byte [ebp - 4], 0xd
mov ecx, dword [0x10208884]
mov edi, dword [0x101e1ce4]
push esi
add edi, 0xfffffffd
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10208884]
push 0x38
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
lea eax, [edi + 4]
push eax
push 0
push edi
call edx
mov ecx, dword [0x10208884]
mov edi, dword [0x101e1ce4]
add edi, 0xffffff41
push 0
mov eax, dword [ecx]
mov dword [ebp - 0x220], edi
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10208884]
add edi, 0xbc
push 1
push 0
push 0
mov eax, dword [ecx]
push 0x38
push edi
push 0
push dword [ebp - 0x220]
mov eax, dword [eax + 0x1ec]
call eax
mov ecx, dword [0x10208884]
push 0xe1000000
mov eax, dword [ecx]
mov eax, dword [eax + 0x38]
call eax
mov ecx, dword [0x10208884]
push 1
push 0xe1
push 0
mov eax, dword [ecx]
push 0x38
push edi
push 0
push dword [ebp - 0x220]
mov eax, dword [eax + 0x1ec]
call eax
mov eax, dword [0x101e1ce4]
lea ecx, [ebp - 0x158]
push 1
push ecx
push 0xffffffffffffffff
add eax, 0xfffffff1
mov ecx, 0x1020b318
push 0x20
push eax
call fcn.1009c8e0
lea eax, [ebp - 0x158]
mov ecx, 0x1020b318
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.1009cb70
push 1
movd xmm1, dword [eax]
lea eax, [ebp - 0x138]
push eax
mov eax, dword [0x101e1ce4]
add eax, 0xfffffff1
cvtdq2ps xmm1, xmm1
push esi
push 0x20
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [ebp - 0x218], xmm1
subss xmm0, xmm1
cvttss2si eax, xmm0
mov ecx, 0x1020b318
push eax
call fcn.1009c8e0
lea eax, [ebp - 0x138]
mov ecx, 0x1020b318
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.1009cb70
push 1
push 0x10212f9c
push 0xffffffffffffffff
movd xmm1, dword [eax]
mov ecx, 0x1020b318
mov eax, dword [0x101e1ce4]
add eax, 0xfffffff1
cvtdq2ps xmm1, xmm1
push 0x20
movd xmm0, eax
addss xmm1, dword [ebp - 0x218]
cvtdq2ps xmm0, xmm0
subss xmm0, xmm1
cvttss2si eax, xmm0
push eax
call fcn.1009c8e0
xorps xmm0, xmm0
mov dword [ebp - 0x21c], 0x414e4f4d
lea ecx, [ebp - 0x21c]
mov dword [ebp - 0x218], 0x484352
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x288], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x284], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10036920
sub ecx, edx
lea eax, [ebp - 0x21c]
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.1002a660
push 1
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 0xf
push eax
mov eax, dword [0x101e1ce4]
mov ecx, 0x1020b338
push esi
push 0
add eax, 0xffffffdc
push eax
call fcn.1009c8e0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x284]
cmp ecx, 0xf
jbe 0x1003699f
mov edx, dword [ebp - 0x298]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036995
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036995
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0x77702e
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x288], 0
movups xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x284], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100369d0
sub ecx, edx
lea eax, [ebp - 0x220]
push ecx
push eax
lea ecx, [ebp - 0x298]
call fcn.1002a660
push 1
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 0x10
push eax
mov eax, dword [0x101e1ce4]
mov ecx, 0x1020b318
push 0xffffffffffffffff
push 0xf
add eax, 0xfffffff0
push eax
call fcn.1009c8e0
mov ecx, dword [ebp - 0x284]
cmp ecx, 0xf
jbe 0x10036a4c
mov edx, dword [ebp - 0x298]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036a42
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036a42
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov ecx, dword [ebp - 0x144]
cmp ecx, 0xf
jbe 0x10036a86
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036a7c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036b1e
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
cmp ecx, 0xf
jbe 0x10036ad7
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036acd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10036b1e
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
cmp ecx, 0xf
jbe 0x10036b2e
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10036b24
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10036b24
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100ad71e
add esp, 8
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0x208], 0x100bae84
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0x20c], eax
lea ecx, [ebp - 0x204]
call fcn.10029940
lea ecx, [ebp - 0x200]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100ad1bc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret