Function at 0x10015fb0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x100b7040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0x48], 0x3e
mov cl, 0x4e
xor cl, byte [ebp - 0x48]
mov al, 0x71
xor al, byte [ebp - 0x48]
mov ch, 0x50
mov byte [ebp - 0x47], al
mov bl, 0x57
mov byte [ebp - 0x1e], ch
mov dl, 0x4a
mov al, byte [ebp - 0x1e]
mov dh, 0x10
mov byte [ebp - 0x46], cl
mov ah, 0x51
mov cl, byte [ebp - 0x48]
mov bh, 0x77
xor al, cl
mov byte [ebp - 0x1d], bl
xor dl, cl
mov byte [ebp - 0x3f], al
mov al, byte [ebp - 0x1d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x42], ch
xor bl, cl
mov byte [ebp - 0x3d], 0
xor ah, cl
mov byte [ebp - 0x45], dl
xor bh, cl
mov byte [ebp - 0x41], dh
mov edx, dword [0x100b8f48]
xor al, cl
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x43], ah
lea esi, [ecx + 1]
mov byte [ebp - 0x40], bh
mov byte [ebp - 0x3e], al
mov byte [ebp - 0x3d], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10016030
mov eax, 0x7fffffff
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x10016855
cmp dword [0x100b8f4c], 0xf
mov eax, 0x100b8f38
push ecx
cmova eax, dword [0x100b8f38]
lea ecx, [ebp - 0x47]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
call fcn.1000ed20
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0xf
mov byte [ebp - 0x3c], 0x60
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov byte [ebp - 0x1d], cl
mov al, 0x2c
xor al, byte [ebp - 0x3c]
mov bl, 0x14
xor cl, byte [ebp - 0x3c]
mov ah, 0x37
mov byte [ebp - 0x3b], al
mov ch, 5
mov al, byte [ebp - 0x1d]
mov dh, 1
mov byte [ebp - 0x3a], cl
mov bh, 0x10
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x1e], 0xe
mov byte [ebp - 0x33], al
xor dl, cl
mov al, byte [ebp - 0x1e]
xor bl, cl
xor al, cl
mov byte [ebp - 0x2c], 0x19
xor ah, cl
mov byte [ebp - 0x39], dl
xor ch, cl
mov byte [ebp - 0x37], ah
xor dh, cl
mov byte [ebp - 0x32], al
xor bh, cl
mov byte [ebp - 0x38], bl
mov cl, 0x7c
mov byte [ebp - 0x36], ch
xor cl, byte [ebp - 0x2c]
mov dl, 0x6d
mov ah, 0x76
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov ch, ah
mov dh, dl
mov byte [ebp - 0x2a], cl
mov cl, byte [ebp - 0x2c]
mov al, 0x49
xor al, byte [ebp - 0x2c]
mov bl, 0x55
mov bh, 0x70
mov byte [ebp - 0x31], 0
xor dl, cl
mov byte [ebp - 0x1d], 0x77
xor bl, cl
mov byte [ebp - 0x2b], al
mov al, byte [ebp - 0x1d]
xor ah, cl
xor ch, cl
mov byte [ebp - 0x31], 0
xor dh, cl
mov byte [ebp - 0x1e], 0x7e
xor bh, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x29], dl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor al, cl
mov byte [ebp - 0x23], al
mov al, byte [ebp - 0x1e]
xor al, cl
mov byte [ebp - 0x21], 0
push esi
mov byte [ebp - 0x22], al
lea eax, [ebp - 0x3b]
push 1
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x100b8fc0], al
cmp al, 1
jbe 0x1001615d
mov byte [0x100b8fc0], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 7
mov al, 0x4b
cmova esi, dword [ebp - 0x1c]
mov cl, 0x68
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bh, cl
mov al, byte [ebp - 0x38]
mov ch, 0x75
xor cl, al
mov byte [ebp - 0x1d], ch
xor dl, al
mov byte [ebp - 0x36], cl
xor ch, al
mov byte [ebp - 0x2c], 0x14
xor bh, al
mov byte [ebp - 0x32], ch
mov ah, 0x46
mov byte [ebp - 0x1e], 0x73
xor ah, al
mov byte [ebp - 0x35], dl
mov dh, 0x6a
mov byte [ebp - 0x33], ah
xor dh, al
mov byte [ebp - 0x30], bh
mov bl, 0x73
mov byte [ebp - 0x31], dh
xor bl, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x71
xor al, byte [ebp - 0x38]
mov ah, 0x7b
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x60
mov al, 0x44
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bh, 0x7d
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x7a
xor dl, cl
mov al, byte [ebp - 0x1d]
xor ch, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor dh, cl
mov al, byte [ebp - 0x1e]
xor bh, cl
xor al, cl
mov byte [ebp - 0x34], bl
push esi
mov byte [ebp - 0x22], al
mov bl, 0x58
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bl, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fc1], al
cmp al, 1
jbe 0x1001623a
mov byte [0x100b8fc1], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x4c
mov dword [ebp - 0x3c], 0x2323004c
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x2f2f0d38
mov dword [ebp - 0x34], 0x233f3f29
mov word [ebp - 0x30], 0x353e
mov byte [ebp - 0x2e], 0
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xd
jae 0x10016277
mov cl, byte [ebp - 0x3c]
jmp 0x10016268
mov byte [ebp - 0x2c], 0x1f
mov al, 0x4f
xor al, byte [ebp - 0x2c]
mov cl, 0x7a
xor cl, byte [ebp - 0x2c]
mov ah, 0x70
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x6b
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 0x71
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x53
xor al, cl
mov byte [ebp - 0x1e], 0x78
mov byte [ebp - 0x23], al
mov bh, 0x76
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fc2], al
cmp al, 1
jbe 0x100162f9
mov byte [0x100b8fc2], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x28
mov byte [ebp - 0x2c], 0x47
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov ch, cl
mov byte [ebp - 0x1d], 0x26
xor cl, byte [ebp - 0x2c]
mov al, 0xb
xor al, byte [ebp - 0x2c]
mov ah, 9
mov byte [ebp - 0x2b], al
mov bl, 0x33
mov al, byte [ebp - 0x1d]
mov dh, 0x35
mov byte [ebp - 0x2a], cl
mov bh, 0x2a
mov cl, byte [ebp - 0x2c]
xor al, cl
mov byte [ebp - 0x1e], 0x2b
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x3c], 0x1d
mov byte [ebp - 0x22], al
xor bl, cl
xor ch, cl
mov byte [ebp - 0x27], ah
xor dh, cl
mov byte [ebp - 0x1d], 0x73
xor bh, cl
mov byte [ebp - 0x29], dl
mov al, 0x4d
mov byte [ebp - 0x28], bl
xor al, byte [ebp - 0x3c]
mov cl, 0x78
xor cl, byte [ebp - 0x3c]
mov ah, 0x72
mov byte [ebp - 0x3b], al
mov dl, 0x69
mov al, byte [ebp - 0x1d]
mov bl, 0x51
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x26], ch
mov ch, ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x25], dh
xor ah, cl
mov byte [ebp - 0x24], bh
mov dh, dl
mov bh, 0x74
mov byte [ebp - 0x1e], 0x7a
mov al, byte [ebp - 0x1e]
xor dl, cl
xor bl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x100b8fc3], al
cmp al, 1
jbe 0x100163e3
mov byte [0x100b8fc3], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x5e
mov al, 0x12
cmova esi, dword [ebp - 0x1c]
mov cl, 0x31
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 0x13
mov al, byte [ebp - 0x38]
mov ch, 0x3f
xor cl, al
mov byte [ebp - 0x1d], 0x3d
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x2c], 0x46
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x39
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x21
mov bl, 0x2a
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x37
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x23
xor al, byte [ebp - 0x38]
mov ah, 0x29
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x32
mov al, 0x16
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0xa
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x28
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 0x2f
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bh, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fc4], al
cmp al, 1
jbe 0x100164c1
mov byte [0x100b8fc4], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x53
mov al, 0x1f
cmova esi, dword [ebp - 0x1c]
mov cl, 0x3c
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 1
mov al, byte [ebp - 0x38]
mov ch, 0x32
xor cl, al
mov byte [ebp - 0x2c], 0x31
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x1d], 0x5f
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x21
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x56
mov bl, 0x27
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x36
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2f], 0
mov al, 0x61
mov byte [ebp - 0x30], bh
xor al, byte [ebp - 0x2c]
mov cl, 0x54
xor cl, byte [ebp - 0x2c]
mov ah, 0x5e
mov byte [ebp - 0x2b], al
mov ch, ah
mov al, byte [ebp - 0x1d]
mov dl, 0x45
mov byte [ebp - 0x2a], cl
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x7d
xor al, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
mov bh, 0x58
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor dl, cl
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2f], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x29], dl
xor bl, cl
mov byte [ebp - 0x21], 0
xor ch, cl
mov byte [ebp - 0x28], bl
xor dh, cl
mov byte [ebp - 0x26], ch
xor bh, cl
mov byte [ebp - 0x25], dh
push eax
mov byte [ebp - 0x24], bh
call edi
mov byte [0x100b8fc5], al
cmp al, 1
jbe 0x10016592
mov byte [0x100b8fc5], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 9
mov dword [ebp - 0x3c], 0x66664509
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x6e795c7d
mov dword [ebp - 0x34], 0x6c6d687b
mov byte [ebp - 0x30], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xb
jae 0x100165cf
mov cl, byte [ebp - 0x3c]
jmp 0x100165c0
mov byte [ebp - 0x2c], 0xd
mov al, 0x5d
xor al, byte [ebp - 0x2c]
mov cl, 0x68
xor cl, byte [ebp - 0x2c]
mov ah, 0x62
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x79
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 0x63
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x41
xor al, cl
mov byte [ebp - 0x1e], 0x6a
mov byte [ebp - 0x23], al
mov bh, 0x64
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x30], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fc6], al
cmp al, 1
jbe 0x10016651
mov byte [0x100b8fc6], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x2d
mov byte [ebp - 0x2c], 0x42
cmova esi, dword [ebp - 0x1c]
mov dl, cl
xor cl, byte [ebp - 0x2c]
mov al, 0xe
xor al, byte [ebp - 0x2c]
mov ah, 0x17
mov byte [ebp - 0x2b], al
mov bl, 0x36
mov byte [ebp - 0x2a], cl
mov ch, 0x2c
mov cl, byte [ebp - 0x2c]
mov dh, 0x2b
mov byte [ebp - 0x1d], 0x37
xor ah, cl
mov al, byte [ebp - 0x1d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x1e], 0x27
mov byte [ebp - 0x23], al
xor bl, cl
mov al, byte [ebp - 0x1e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x3c], 0x2b
mov byte [ebp - 0x22], al
xor dh, cl
mov bh, 0x33
mov byte [ebp - 0x27], ah
xor bh, cl
mov byte [ebp - 0x1d], 0x45
mov al, 0x7b
mov byte [ebp - 0x29], dl
xor al, byte [ebp - 0x3c]
mov cl, 0x4e
xor cl, byte [ebp - 0x3c]
mov ah, 0x44
mov byte [ebp - 0x3b], al
mov dl, 0x5f
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x33], al
mov bl, 0x67
mov byte [ebp - 0x26], ch
xor bl, cl
mov ch, ah
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov dh, dl
xor ah, cl
mov byte [ebp - 0x1e], 0x4c
mov al, byte [ebp - 0x1e]
mov bh, 0x42
xor dl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x100b8fc7], al
cmp al, 1
jbe 0x1001673b
mov byte [0x100b8fc7], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0xe
mov al, 0x42
cmova esi, dword [ebp - 0x1c]
mov cl, 0x61
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bl, 0x7a
mov al, byte [ebp - 0x38]
mov ah, 0x4d
xor cl, al
mov byte [ebp - 0x1d], bl
xor dl, al
mov byte [ebp - 0x36], cl
xor bl, al
mov byte [ebp - 0x2c], 0x6f
xor ah, al
mov byte [ebp - 0x1e], 8
mov ch, 0x7c
mov byte [ebp - 0x33], ah
xor ch, al
mov byte [ebp - 0x35], dl
mov dh, 0x6f
mov byte [ebp - 0x34], bl
xor dh, al
mov byte [ebp - 0x32], ch
mov bh, 0x68
mov byte [ebp - 0x31], dh
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0xa
xor al, byte [ebp - 0x38]
xor ah, ah
xor cl, byte [ebp - 0x2c]
mov dl, 0x1b
mov byte [ebp - 0x2f], al
mov dh, dl
mov al, 0x3f
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
xor ch, ch
mov cl, byte [ebp - 0x2c]
mov bl, 0x23
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 1
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 6
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2e], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x29], dl
xor bh, cl
mov byte [ebp - 0x28], bl
push eax
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x100b8fc8], al
cmp al, 1
jbe 0x10016814
mov byte [0x100b8fc8], 1
mov ecx, dword [ebp - 8]
cmp ecx, 0xf
jbe 0x10016844
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001683a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1001685a
push ecx
push edx
call fcn.100810d6
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10081075
mov esp, ebp
pop ebp
ret
call fcn.100023c0
call fcn.1008626f
int3