Function at 0x10002db0
Capabilities:
Contain obfuscated stackstrings
Get graphical window text
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100aeac5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x950
mov eax, dword [0x100c83c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x2cc], edi
push edi
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x10003ab0
mov esi, dword [sym.imp.USER32.dll_GetForegroundWindow]
call esi
cmp edi, eax
jne 0x10003ab0
push 0x100
lea eax, [ebp - 0x118]
push eax
push edi
call dword [sym.imp.USER32.dll_GetWindowTextA]
call esi
mov dword [ebp - 0x2c8], eax
lea ecx, [ebp - 0x230]
lea eax, [ebp - 0x118]
push eax
call fcn.100021f0
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x250], xmm0
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x23c], 0xf
mov byte [ebp - 0x250], 0
push str.https:__discordapp.com_api_webhooks_1229379289384882177_MgeCp8_kmjSgn2mKSj4xBM4_5wJxxB06AwivO5UCoRrAOuuqd6JPYYUSlvyS1TtalW0X
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 1
call fcn.100021f0
push str.https:__i.postimg.cc_V64yQySZ_standard_1.gif
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 2
call fcn.100021f0
xorps xmm0, xmm0
mov byte [ebp - 4], 3
push str.bossb
lea ecx, [ebp - 0x960]
movlpd qword [ebp - 0x238], xmm0
call fcn.100021f0
push str.Trying_To_Open_Bossb_Engine
lea ecx, [ebp - 0x948]
mov byte [ebp - 4], 4
call fcn.100021f0
push str.Ass______s
lea ecx, [ebp - 0x930]
mov byte [ebp - 4], 5
call fcn.100021f0
push str.Trying_To_Open_Assembly_Scan
lea ecx, [ebp - 0x918]
mov byte [ebp - 4], 6
call fcn.100021f0
push str.M______V_____
lea ecx, [ebp - 0x900]
mov byte [ebp - 4], 7
call fcn.100021f0
push str.Trying_To_Open_Memory_Viewer
lea ecx, [ebp - 0x8e8]
mov byte [ebp - 4], 8
call fcn.100021f0
push str.N____1
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 4], 9
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x8b8]
mov byte [ebp - 4], 0xa
call fcn.100021f0
push str.A____ss
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 4], 0xb
call fcn.100021f0
push str.Trying_To_Find_Nat_Address
lea ecx, [ebp - 0x888]
mov byte [ebp - 4], 0xc
call fcn.100021f0
push str._Qk
lea ecx, [ebp - 0x870]
mov byte [ebp - 4], 0xd
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x858]
mov byte [ebp - 4], 0xe
call fcn.100021f0
push str.ENGINE
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0xf
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x828]
mov byte [ebp - 4], 0x10
call fcn.100021f0
push str.G7__D
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 0x11
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x7f8]
mov byte [ebp - 4], 0x12
call fcn.100021f0
push str.Haya
lea ecx, [ebp - 0x7e0]
mov byte [ebp - 4], 0x13
call fcn.100021f0
push str.Trying_to_Open_Hayabusa_Engine
lea ecx, [ebp - 0x7c8]
mov byte [ebp - 4], 0x14
call fcn.100021f0
push str.iIMvC
lea ecx, [ebp - 0x7b0]
mov byte [ebp - 4], 0x15
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x798]
mov byte [ebp - 4], 0x16
call fcn.100021f0
push 0x100c2790
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x17
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x18
call fcn.100021f0
push str.E8o_E
lea ecx, [ebp - 0x750]
mov byte [ebp - 4], 0x19
call fcn.100021f0
push str.Trying_To_Open_Cheat_Engine
lea ecx, [ebp - 0x738]
mov byte [ebp - 4], 0x1a
call fcn.100021f0
push str.onymous
lea ecx, [ebp - 0x720]
mov byte [ebp - 4], 0x1b
call fcn.100021f0
push str.Anonymouse
lea ecx, [ebp - 0x708]
mov byte [ebp - 4], 0x1c
call fcn.100021f0
mov byte [ebp - 4], 0x1d
push str.Crossfire
lea ecx, [ebp - 0x6f0]
call fcn.100021f0
push str.Trying_To_Open_Crossfire_Engine
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 0x1e
call fcn.100021f0
push str.Memory
lea ecx, [ebp - 0x6c0]
mov byte [ebp - 4], 0x1f
call fcn.100021f0
push str.Trying_To_Open_Memory_Viewer
lea ecx, [ebp - 0x6a8]
mov byte [ebp - 4], 0x20
call fcn.100021f0
push 0x100c2808
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0x21
call fcn.100021f0
push str.Trying_To_Open_Google_Thai_Engine
lea ecx, [ebp - 0x678]
mov byte [ebp - 4], 0x22
call fcn.100021f0
push str.DBG_DBG_DBG_DBG_DBG
lea ecx, [ebp - 0x660]
mov byte [ebp - 4], 0x23
call fcn.100021f0
push str.Trying_To_Use_Debugger
lea ecx, [ebp - 0x648]
mov byte [ebp - 4], 0x24
call fcn.100021f0
push str.ebugger
lea ecx, [ebp - 0x630]
mov byte [ebp - 4], 0x25
call fcn.100021f0
push str.Trying_To_Use_Debugger
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 0x26
call fcn.100021f0
push str.The_following_opcodes
lea ecx, [ebp - 0x600]
mov byte [ebp - 4], 0x27
call fcn.100021f0
push str.Trying_To_Use_Debug
lea ecx, [ebp - 0x5e8]
mov byte [ebp - 4], 0x28
call fcn.100021f0
push str.rocess
lea ecx, [ebp - 0x5d0]
mov byte [ebp - 4], 0x29
call fcn.100021f0
push str.Trying_To_Open_Process
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0x2a
call fcn.100021f0
push str.Hack
lea ecx, [ebp - 0x5a0]
mov byte [ebp - 4], 0x2b
call fcn.100021f0
push str.Trying_To_Open_Process
lea ecx, [ebp - 0x588]
mov byte [ebp - 4], 0x2c
call fcn.100021f0
mov byte [ebp - 4], 0x2d
push str.Cheat
lea ecx, [ebp - 0x570]
call fcn.100021f0
push str.Trying_To_Open_Setting
lea ecx, [ebp - 0x558]
mov byte [ebp - 4], 0x2e
call fcn.100021f0
push str.rakol
lea ecx, [ebp - 0x540]
mov byte [ebp - 4], 0x2f
call fcn.100021f0
push str.Trying_To_Open_Mirakol_Cheat_Engine
lea ecx, [ebp - 0x528]
mov byte [ebp - 4], 0x30
call fcn.100021f0
push str.address
lea ecx, [ebp - 0x510]
mov byte [ebp - 4], 0x31
call fcn.100021f0
push str.Trying_To_Add_Address
lea ecx, [ebp - 0x4f8]
mov byte [ebp - 4], 0x32
call fcn.100021f0
push str.assemb
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 0x33
call fcn.100021f0
push str.Trying_To_Make_Script
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x34
call fcn.100021f0
push str.Assembly
lea ecx, [ebp - 0x4b0]
mov byte [ebp - 4], 0x35
call fcn.100021f0
push str.Trying_To_Scan_Cheat
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x36
call fcn.100021f0
push str.Break_and_Trace
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x37
call fcn.100021f0
push str.Trying_To_Trace_Cheat
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x38
call fcn.100021f0
push str.Pointer_scan
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x39
call fcn.100021f0
push str.Trying_To_Open_Pointer
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 0x3a
call fcn.100021f0
push str.Code_inject
lea ecx, [ebp - 0x420]
mov byte [ebp - 4], 0x3b
call fcn.100021f0
push str.Trying_To_Inject_Script
lea ecx, [ebp - 0x408]
mov byte [ebp - 4], 0x3c
call fcn.100021f0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x3f0]
push str.Change_Value
call fcn.100021f0
push str.Trying_To_Change_Value
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0x3e
call fcn.100021f0
push str.Change_address
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x3f
call fcn.100021f0
push str.Trying_To_Change_Address
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x40
call fcn.100021f0
push str.hotkey
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x41
call fcn.100021f0
push str.Trying_To_Create_Hotkey_
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x42
call fcn.100021f0
push str.umper
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x43
call fcn.100021f0
push str.Trying_To_Use_Dumper
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x44
call fcn.100021f0
push str.iddler
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x45
call fcn.100021f0
push str.Trying_To_Use_Fiddler
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x46
call fcn.100021f0
push str.llocate
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0x47
call fcn.100021f0
push str.Trying_To_Locate_Memory
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x48
call fcn.100021f0
mov byte [ebp - 4], 0x49
lea esi, [ebp - 0x960]
push 0x40
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
call fcn.100acd80
mov edi, eax
add esp, 4
mov dword [edi], edi
mov dword [edi + 4], edi
mov dword [edi + 8], edi
mov word [edi + 0xc], 0x101
mov dword [ebp - 0x238], edi
lea eax, [ebp - 0x2d0]
mov byte [ebp - 4], 0x4a
cmp esi, eax
je 0x10003482
push esi
push edi
lea ecx, [ebp - 0x238]
call fcn.10006660
add esi, 0x30
lea eax, [ebp - 0x2d0]
cmp esi, eax
jne 0x10003468
push fcn.10003ad0
push 0x23
push 0x30
lea eax, [ebp - 0x960]
mov byte [ebp - 4], 0x4c
push eax
call fcn.100ad0c8
mov eax, dword [ebp - 0x238]
mov eax, dword [eax]
mov dword [ebp - 0x2c4], eax
cmp byte [eax + 0xd], 0
jne 0x10003505
mov edi, dword [ebp - 0x220]
cmp dword [eax + 0x24], 0xf
lea esi, [eax + 0x10]
mov eax, esi
jbe 0x100034c2
mov eax, dword [esi]
push dword [esi + 0x10]
cmp dword [ebp - 0x21c], 0xf
lea ecx, [ebp - 0x230]
push eax
cmova ecx, dword [ebp - 0x230]
mov edx, edi
push ecx
call fcn.10006320
add esp, 0xc
cmp eax, 0xffffffff
jne 0x100035db
lea ecx, [ebp - 0x2c4]
call fcn.10005fc0
mov eax, dword [ebp - 0x2c4]
cmp byte [eax + 0xd], 0
je 0x100034b5
mov esi, dword [ebp - 0x2c8]
test esi, esi
je 0x1000367c
push 0x100
lea eax, [ebp - 0x218]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x280]
call fcn.100021f0
mov byte [ebp - 4], 0x4d
cmp dword [ebp - 0x270], 0
jne 0x1000363c
lea eax, [ebp - 0x290]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0x288]
sub ecx, dword [ebp - 0x290]
cmp ecx, 0x23a
jl 0x1000363c
mov eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x28c]
cmp eax, 0xfa
jl 0x1000363c
cmp ecx, 0x5dc
jg 0x1000363c
cmp eax, 0x3e8
jg 0x1000363c
push str.Trying_to_open_Thai_Engine__DETECTED__
lea ecx, [ebp - 0x2c0]
call fcn.100021f0
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 0x4e
push eax
lea eax, [ebp - 0x2a8]
push eax
lea edx, [ebp - 0x2c0]
lea ecx, [ebp - 0x268]
call fcn.10002570
add esp, 8
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
add esi, 0x18
lea eax, [ebp - 0x250]
cmp eax, esi
je 0x10003505
cmp dword [esi + 0x14], 0xf
mov eax, esi
jbe 0x100035f6
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x250]
push eax
call fcn.10006020
cmp dword [ebp - 0x240], 0
je 0x10003505
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea edx, [ebp - 0x250]
lea ecx, [ebp - 0x268]
call fcn.10002570
add esp, 8
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [ebp - 4], 0x4c
mov ecx, dword [ebp - 0x26c]
cmp ecx, 0xf
jbe 0x1000367c
mov edx, dword [ebp - 0x280]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003672
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10003672
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100acdb0
add esp, 8
cmp dword [ebp - 0x21c], 0xf
lea ecx, [ebp - 0x230]
mov esi, dword [ebp - 0x220]
cmova ecx, dword [ebp - 0x230]
mov dword [ebp - 0x2c4], ecx
cmp esi, 0xc
jb 0x10003752
lea eax, [esi - 0xb]
add eax, ecx
mov dword [ebp - 0x2c8], eax
sub eax, ecx
push eax
push 0x54
push ecx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10003752
nop dword [eax + eax]
mov ecx, edi
mov edx, str.Task_Manager
mov esi, 8
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100036f5
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100036e0
xor eax, eax
jmp 0x1000371c
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10003717
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10003717
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10003717
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x10003717
xor eax, eax
jmp 0x1000371c
sbb eax, eax
or eax, 1
test eax, eax
je 0x1000373d
mov eax, dword [ebp - 0x2c8]
inc edi
sub eax, edi
push eax
push 0x54
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x100036d0
jmp 0x1000374c
sub edi, dword [ebp - 0x2c4]
cmp edi, 0xffffffff
jne 0x10003820
mov esi, dword [ebp - 0x220]
cmp dword [ebp - 0x21c], 0xf
lea ecx, [ebp - 0x230]
cmova ecx, dword [ebp - 0x230]
mov dword [ebp - 0x2c4], ecx
cmp esi, 0xe
jb 0x100039a4
lea eax, [ecx - 0xd]
add eax, esi
mov dword [ebp - 0x2c8], eax
sub eax, ecx
push eax
push 0x43
push ecx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100039a4
nop dword [eax + eax]
mov ecx, edi
mov edx, str.Command_Prompt
mov esi, 0xa
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100037c1
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100037b0
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100037e8
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100037e8
cmp esi, 0xfffffffe
je 0x100037e4
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x100037e8
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
jne 0x100037e8
xor eax, eax
jmp 0x100037ed
sbb eax, eax
or eax, 1
test eax, eax
je 0x10003811
mov eax, dword [ebp - 0x2c8]
inc edi
sub eax, edi
push eax
push 0x43
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x100037a0
jmp 0x100039a4
sub edi, dword [ebp - 0x2c4]
cmp edi, 0xffffffff
je 0x100039a4
cmp dword [ebp - 0x21c], 0xf
lea ecx, [ebp - 0x230]
mov eax, dword [ebp - 0x220]
cmova ecx, dword [ebp - 0x230]
mov dword [ebp - 0x2c4], ecx
cmp eax, 0xc
jb 0x100038df
add eax, 0xfffffff5
add eax, ecx
mov dword [ebp - 0x2c8], eax
sub eax, ecx
push eax
push 0x54
push ecx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100038df
nop dword [eax + eax]
mov edx, edi
mov ecx, str.Task_Manager
mov esi, 8
nop dword [eax]
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x10003895
add edx, 4
add ecx, 4
sub esi, 4
jae 0x10003880
xor eax, eax
jmp 0x100038bc
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x100038b7
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x100038b7
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x100038b7
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
jne 0x100038b7
xor eax, eax
jmp 0x100038bc
sbb eax, eax
or eax, 1
test eax, eax
je 0x1000398f
mov eax, dword [ebp - 0x2c8]
inc edi
sub eax, edi
push eax
push 0x54
push edi
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x10003870
or edi, 0xffffffff
mov ecx, str.Command_Prompt__DETECTED__
cmp edi, 0xffffffff
mov eax, str.Trying_to_open_Task_Manager__DETECTED__
cmove eax, ecx
lea ecx, [ebp - 0x280]
push eax
call fcn.100021f0
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x4f
push eax
push dword [ebp - 0x2cc]
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x2c4]
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x1000395d
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x268]
call fcn.10002570
add esp, 8
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x26c]
cmp ecx, 0xf
jbe 0x100039a4
mov edx, dword [ebp - 0x280]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000399a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000399a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
sub edi, dword [ebp - 0x2c4]
jmp 0x100038e2
push ecx
push edx
call fcn.100acdb0
add esp, 8
lea ecx, [ebp - 0x238]
call fcn.10005f60
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x100039e9
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100039df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003aa0
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x254]
cmp ecx, 0xf
jbe 0x10003a23
mov edx, dword [ebp - 0x268]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003a19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003aa0
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x254], 0xf
mov byte [ebp - 0x268], 0
cmp ecx, 0xf
jbe 0x10003a74
mov edx, dword [ebp - 0x250]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003a6a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10003aa0
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0x21c]
cmp ecx, 0xf
jbe 0x10003ab0
mov edx, dword [ebp - 0x230]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10003aa6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10003aa6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.100acdb0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100acd72
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret