Function at 0x100161a0
Capabilities:
Authenticate hmac
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x100b7040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0x48], 0x55
mov cl, 0x25
xor cl, byte [ebp - 0x48]
mov al, 0x1a
xor al, byte [ebp - 0x48]
mov ch, 0x3b
mov byte [ebp - 0x47], al
mov bl, 0x3c
mov byte [ebp - 0x1e], ch
mov dl, 0x21
mov al, byte [ebp - 0x1e]
mov dh, 0x7b
mov byte [ebp - 0x46], cl
mov ah, 0x3a
mov cl, byte [ebp - 0x48]
mov bh, 0x1c
xor al, cl
mov byte [ebp - 0x1d], bl
xor dl, cl
mov byte [ebp - 0x3f], al
mov al, byte [ebp - 0x1d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x42], ch
xor bl, cl
mov byte [ebp - 0x3d], 0
xor ah, cl
mov byte [ebp - 0x45], dl
xor bh, cl
mov byte [ebp - 0x41], dh
mov edx, dword [0x100b8f70]
xor al, cl
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x43], ah
lea esi, [ecx + 1]
mov byte [ebp - 0x40], bh
mov byte [ebp - 0x3e], al
mov byte [ebp - 0x3d], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10016220
mov eax, 0x7fffffff
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x10016a49
cmp dword [0x100b8f74], 0xf
mov eax, 0x100b8f60
push ecx
cmova eax, dword [0x100b8f60]
lea ecx, [ebp - 0x47]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
call fcn.1000f860
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x5c
mov byte [ebp - 0x3c], 0x33
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov byte [ebp - 0x1d], cl
mov al, 0x7f
xor al, byte [ebp - 0x3c]
mov bl, 0x47
xor cl, byte [ebp - 0x3c]
mov ah, 0x64
mov byte [ebp - 0x3b], al
mov ch, 0x56
mov al, byte [ebp - 0x1d]
mov dh, 0x52
mov byte [ebp - 0x3a], cl
mov bh, 0x43
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x1e], 0x5d
mov byte [ebp - 0x33], al
xor dl, cl
mov al, byte [ebp - 0x1e]
xor bl, cl
xor al, cl
mov byte [ebp - 0x2c], 0x3a
xor ah, cl
mov byte [ebp - 0x39], dl
xor ch, cl
mov byte [ebp - 0x37], ah
xor dh, cl
mov byte [ebp - 0x32], al
xor bh, cl
mov byte [ebp - 0x38], bl
mov cl, 0x5f
mov byte [ebp - 0x36], ch
xor cl, byte [ebp - 0x2c]
mov dl, 0x4e
mov ah, 0x55
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov ch, ah
mov dh, dl
mov byte [ebp - 0x2a], cl
mov cl, byte [ebp - 0x2c]
mov al, 0x6a
xor al, byte [ebp - 0x2c]
mov bl, 0x76
mov bh, 0x53
mov byte [ebp - 0x31], 0
xor dl, cl
mov byte [ebp - 0x1d], 0x54
xor bl, cl
mov byte [ebp - 0x2b], al
mov al, byte [ebp - 0x1d]
xor ah, cl
xor ch, cl
mov byte [ebp - 0x31], 0
xor dh, cl
mov byte [ebp - 0x1e], 0x5d
xor bh, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x29], dl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor al, cl
mov byte [ebp - 0x23], al
mov al, byte [ebp - 0x1e]
xor al, cl
mov byte [ebp - 0x21], 0
push esi
mov byte [ebp - 0x22], al
lea eax, [ebp - 0x3b]
push 1
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100b8fe8], al
cmp al, 1
jbe 0x1001634d
mov byte [0x100b8fe8], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 6
mov al, 0x4a
cmova esi, dword [ebp - 0x1c]
mov cl, 0x69
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bh, cl
mov al, byte [ebp - 0x38]
mov ch, 0x74
xor cl, al
mov byte [ebp - 0x1d], ch
xor dl, al
mov byte [ebp - 0x36], cl
xor ch, al
mov byte [ebp - 0x2c], 0x58
xor bh, al
mov byte [ebp - 0x32], ch
mov ah, 0x47
mov byte [ebp - 0x1e], 0x3f
xor ah, al
mov byte [ebp - 0x35], dl
mov dh, 0x6b
mov byte [ebp - 0x33], ah
xor dh, al
mov byte [ebp - 0x30], bh
mov bl, 0x72
mov byte [ebp - 0x31], dh
xor bl, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x3d
xor al, byte [ebp - 0x38]
mov ah, 0x37
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x2c
mov al, 8
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bh, 0x31
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x36
xor dl, cl
mov al, byte [ebp - 0x1d]
xor ch, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor dh, cl
mov al, byte [ebp - 0x1e]
xor bh, cl
xor al, cl
mov byte [ebp - 0x34], bl
push esi
mov byte [ebp - 0x22], al
mov bl, 0x14
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bl, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fe9], al
cmp al, 1
jbe 0x1001642a
mov byte [0x100b8fe9], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x61
mov dword [ebp - 0x3c], 0xe0e2d61
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x2022015
mov dword [ebp - 0x34], 0xe121204
mov word [ebp - 0x30], 0x1813
mov byte [ebp - 0x2e], 0
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xd
jae 0x10016467
mov cl, byte [ebp - 0x3c]
jmp 0x10016458
mov byte [ebp - 0x2c], 0x6d
mov al, 0x3d
xor al, byte [ebp - 0x2c]
mov cl, 8
xor cl, byte [ebp - 0x2c]
mov ah, 2
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x19
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 3
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x21
xor al, cl
mov byte [ebp - 0x1e], 0xa
mov byte [ebp - 0x23], al
mov bh, 4
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fea], al
cmp al, 1
jbe 0x100164e9
mov byte [0x100b8fea], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x39
mov byte [ebp - 0x2c], 0x56
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov ch, cl
mov byte [ebp - 0x1d], 0x37
xor cl, byte [ebp - 0x2c]
mov al, 0x1a
xor al, byte [ebp - 0x2c]
mov ah, 0x18
mov byte [ebp - 0x2b], al
mov bl, 0x22
mov al, byte [ebp - 0x1d]
mov dh, 0x24
mov byte [ebp - 0x2a], cl
mov bh, 0x3b
mov cl, byte [ebp - 0x2c]
xor al, cl
mov byte [ebp - 0x1e], 0x3a
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x3c], 0x7c
mov byte [ebp - 0x22], al
xor bl, cl
xor ch, cl
mov byte [ebp - 0x27], ah
xor dh, cl
mov byte [ebp - 0x1d], 0x12
xor bh, cl
mov byte [ebp - 0x29], dl
mov al, 0x2c
mov byte [ebp - 0x28], bl
xor al, byte [ebp - 0x3c]
mov cl, 0x19
xor cl, byte [ebp - 0x3c]
mov ah, 0x13
mov byte [ebp - 0x3b], al
mov dl, 8
mov al, byte [ebp - 0x1d]
mov bl, 0x30
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x26], ch
mov ch, ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x25], dh
xor ah, cl
mov byte [ebp - 0x24], bh
mov dh, dl
mov bh, 0x15
mov byte [ebp - 0x1e], 0x1b
mov al, byte [ebp - 0x1e]
xor dl, cl
xor bl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x100b8feb], al
cmp al, 1
jbe 0x100165d3
mov byte [0x100b8feb], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x72
mov al, 0x3e
cmova esi, dword [ebp - 0x1c]
mov cl, 0x1d
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 0x3f
mov al, byte [ebp - 0x38]
mov ch, 0x13
xor cl, al
mov byte [ebp - 0x1d], 0x11
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x2c], 0x26
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x15
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x41
mov bl, 6
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x1b
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x43
xor al, byte [ebp - 0x38]
mov ah, 0x49
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x52
mov al, 0x76
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x6a
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x48
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 0x4f
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bh, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fec], al
cmp al, 1
jbe 0x100166b1
mov byte [0x100b8fec], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x40
mov al, 0xc
cmova esi, dword [ebp - 0x1c]
mov cl, 0x2f
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 0x12
mov al, byte [ebp - 0x38]
mov ch, 0x21
xor cl, al
mov byte [ebp - 0x2c], 0x2f
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x1d], 0x41
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x32
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x48
mov bl, 0x34
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x25
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2f], 0
mov al, 0x7f
mov byte [ebp - 0x30], bh
xor al, byte [ebp - 0x2c]
mov cl, 0x4a
xor cl, byte [ebp - 0x2c]
mov ah, 0x40
mov byte [ebp - 0x2b], al
mov ch, ah
mov al, byte [ebp - 0x1d]
mov dl, 0x5b
mov byte [ebp - 0x2a], cl
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x63
xor al, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
mov bh, 0x46
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor dl, cl
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2f], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x29], dl
xor bl, cl
mov byte [ebp - 0x21], 0
xor ch, cl
mov byte [ebp - 0x28], bl
xor dh, cl
mov byte [ebp - 0x26], ch
xor bh, cl
mov byte [ebp - 0x25], dh
push eax
mov byte [ebp - 0x24], bh
call edi
mov byte [0x100b8fed], al
cmp al, 1
jbe 0x10016782
mov byte [0x100b8fed], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x7e
mov dword [ebp - 0x3c], 0x1111327e
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x190e2b0a
mov dword [ebp - 0x34], 0x1b1a1f0c
mov byte [ebp - 0x30], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xb
jae 0x100167bf
mov cl, byte [ebp - 0x3c]
jmp 0x100167b0
mov byte [ebp - 0x2c], 0x56
mov al, 6
xor al, byte [ebp - 0x2c]
mov cl, 0x33
xor cl, byte [ebp - 0x2c]
mov ah, 0x39
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x22
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 0x38
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x1a
xor al, cl
mov byte [ebp - 0x1e], 0x31
mov byte [ebp - 0x23], al
mov bh, 0x3f
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x30], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fee], al
cmp al, 1
jbe 0x10016841
mov byte [0x100b8fee], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x67
mov byte [ebp - 0x2c], 8
cmova esi, dword [ebp - 0x1c]
mov dl, cl
xor cl, byte [ebp - 0x2c]
mov al, 0x44
xor al, byte [ebp - 0x2c]
mov ah, 0x5d
mov byte [ebp - 0x2b], al
mov bl, 0x7c
mov byte [ebp - 0x2a], cl
mov ch, 0x66
mov cl, byte [ebp - 0x2c]
mov dh, 0x61
mov byte [ebp - 0x1d], 0x7d
xor ah, cl
mov al, byte [ebp - 0x1d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x1e], 0x6d
mov byte [ebp - 0x23], al
xor bl, cl
mov al, byte [ebp - 0x1e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x3c], 0x58
mov byte [ebp - 0x22], al
xor dh, cl
mov bh, 0x79
mov byte [ebp - 0x27], ah
xor bh, cl
mov byte [ebp - 0x1d], 0x36
mov al, 8
mov byte [ebp - 0x29], dl
xor al, byte [ebp - 0x3c]
mov cl, 0x3d
xor cl, byte [ebp - 0x3c]
mov ah, 0x37
mov byte [ebp - 0x3b], al
mov dl, 0x2c
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x33], al
mov bl, 0x14
mov byte [ebp - 0x26], ch
xor bl, cl
mov ch, ah
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov dh, dl
xor ah, cl
mov byte [ebp - 0x1e], 0x3f
mov al, byte [ebp - 0x1e]
mov bh, 0x31
xor dl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x100b8fef], al
cmp al, 1
jbe 0x1001692b
mov byte [0x100b8fef], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x42
mov al, 0xe
cmova esi, dword [ebp - 0x1c]
mov cl, 0x2d
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bl, 0x36
mov al, byte [ebp - 0x38]
mov ah, 1
xor cl, al
mov byte [ebp - 0x1d], bl
xor dl, al
mov byte [ebp - 0x36], cl
xor bl, al
mov byte [ebp - 0x2c], 0x41
xor ah, al
mov byte [ebp - 0x1e], 0x26
mov ch, 0x30
mov byte [ebp - 0x33], ah
xor ch, al
mov byte [ebp - 0x35], dl
mov dh, 0x23
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x34], bl
mov bh, 0x24
mov byte [ebp - 0x31], dh
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x24
xor al, byte [ebp - 0x38]
mov ah, 0x2e
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x35
mov al, 0x11
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0xd
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x2f
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 0x28
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bh, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8ff0], al
cmp al, 1
jbe 0x10016a08
mov byte [0x100b8ff0], 1
mov ecx, dword [ebp - 8]
cmp ecx, 0xf
jbe 0x10016a38
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016a2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016a4e
push ecx
push edx
call fcn.1007fa46
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1007f9e5
mov esp, ebp
pop ebp
ret
call fcn.10002380
call fcn.10084bdf
int3