Function at 0x1000d6e0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov eax, dword [0x10068040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0x48], 0x14
mov cl, 0x64
xor cl, byte [ebp - 0x48]
mov al, 0x5b
xor al, byte [ebp - 0x48]
mov ch, 0x7a
mov byte [ebp - 0x47], al
mov bl, 0x7d
mov byte [ebp - 0x1e], ch
mov dl, 0x60
mov al, byte [ebp - 0x1e]
mov dh, 0x3a
mov byte [ebp - 0x46], cl
mov ah, 0x7b
mov cl, byte [ebp - 0x48]
mov bh, 0x5d
xor al, cl
mov byte [ebp - 0x1d], bl
xor dl, cl
mov byte [ebp - 0x3f], al
mov al, byte [ebp - 0x1d]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x42], ch
xor bl, cl
mov byte [ebp - 0x3d], 0
xor ah, cl
mov byte [ebp - 0x45], dl
xor bh, cl
mov byte [ebp - 0x41], dh
mov edx, dword [0x10069f48]
xor al, cl
lea ecx, [ebp - 0x47]
mov byte [ebp - 0x44], bl
mov byte [ebp - 0x43], ah
lea esi, [ecx + 1]
mov byte [ebp - 0x40], bh
mov byte [ebp - 0x3e], al
mov byte [ebp - 0x3d], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d760
mov eax, 0x7fffffff
sub ecx, esi
sub eax, edx
cmp eax, ecx
jb 0x1000df89
cmp dword [0x10069f4c], 0xf
mov eax, 0x10069f38
push ecx
cmova eax, dword [0x10069f38]
lea ecx, [ebp - 0x47]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1c]
call fcn.1000b310
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x25
mov byte [ebp - 0x3c], 0x4a
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov byte [ebp - 0x1d], cl
mov al, 6
xor al, byte [ebp - 0x3c]
mov bl, 0x3e
xor cl, byte [ebp - 0x3c]
mov ah, 0x1d
mov byte [ebp - 0x3b], al
mov ch, 0x2f
mov al, byte [ebp - 0x1d]
mov dh, 0x2b
mov byte [ebp - 0x3a], cl
mov bh, 0x3a
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x1e], 0x24
mov byte [ebp - 0x33], al
xor dl, cl
mov al, byte [ebp - 0x1e]
xor bl, cl
xor al, cl
mov byte [ebp - 0x2c], 0x45
xor ah, cl
mov byte [ebp - 0x39], dl
xor ch, cl
mov byte [ebp - 0x37], ah
xor dh, cl
mov byte [ebp - 0x32], al
xor bh, cl
mov byte [ebp - 0x38], bl
mov cl, 0x20
mov byte [ebp - 0x36], ch
xor cl, byte [ebp - 0x2c]
mov dl, 0x31
mov ah, 0x2a
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov ch, ah
mov dh, dl
mov byte [ebp - 0x2a], cl
mov cl, byte [ebp - 0x2c]
mov al, 0x15
xor al, byte [ebp - 0x2c]
mov bl, 9
mov bh, 0x2c
mov byte [ebp - 0x31], 0
xor dl, cl
mov byte [ebp - 0x1d], 0x2b
xor bl, cl
mov byte [ebp - 0x2b], al
mov al, byte [ebp - 0x1d]
xor ah, cl
xor ch, cl
mov byte [ebp - 0x31], 0
xor dh, cl
mov byte [ebp - 0x1e], 0x22
xor bh, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x29], dl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
xor al, cl
mov byte [ebp - 0x23], al
mov al, byte [ebp - 0x1e]
xor al, cl
mov byte [ebp - 0x21], 0
push esi
mov byte [ebp - 0x22], al
lea eax, [ebp - 0x3b]
push 1
push eax
lea eax, [ebp - 0x2b]
push eax
call edi
mov byte [0x10069fc0], al
cmp al, 1
jbe 0x1000d88d
mov byte [0x10069fc0], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x69
mov al, 0x25
cmova esi, dword [ebp - 0x1c]
mov cl, 6
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bh, cl
mov al, byte [ebp - 0x38]
mov ch, 0x1b
xor cl, al
mov byte [ebp - 0x1d], ch
xor dl, al
mov byte [ebp - 0x36], cl
xor ch, al
mov byte [ebp - 0x2c], 0x73
xor bh, al
mov byte [ebp - 0x32], ch
mov ah, 0x28
mov byte [ebp - 0x1e], 0x14
xor ah, al
mov byte [ebp - 0x35], dl
mov dh, 4
mov byte [ebp - 0x33], ah
xor dh, al
mov byte [ebp - 0x30], bh
mov bl, 0x1d
mov byte [ebp - 0x31], dh
xor bl, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x16
xor al, byte [ebp - 0x38]
mov ah, 0x1c
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 7
mov al, 0x23
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bh, 0x1a
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x1d
xor dl, cl
mov al, byte [ebp - 0x1d]
xor ch, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor dh, cl
mov al, byte [ebp - 0x1e]
xor bh, cl
xor al, cl
mov byte [ebp - 0x34], bl
push esi
mov byte [ebp - 0x22], al
mov bl, 0x3f
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bl, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x10069fc1], al
cmp al, 1
jbe 0x1000d96a
mov byte [0x10069fc1], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x1e
mov dword [ebp - 0x3c], 0x7171521e
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x7d7d5f6a
mov dword [ebp - 0x34], 0x716d6d7b
mov word [ebp - 0x30], 0x676c
mov byte [ebp - 0x2e], 0
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xd
jae 0x1000d9a7
mov cl, byte [ebp - 0x3c]
jmp 0x1000d998
mov byte [ebp - 0x2c], 0x20
mov al, 0x70
xor al, byte [ebp - 0x2c]
mov cl, 0x45
xor cl, byte [ebp - 0x2c]
mov ah, 0x4f
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x54
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 0x4e
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x6c
xor al, cl
mov byte [ebp - 0x1e], 0x47
mov byte [ebp - 0x23], al
mov bh, 0x49
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x10069fc2], al
cmp al, 1
jbe 0x1000da29
mov byte [0x10069fc2], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x3e
mov byte [ebp - 0x2c], 0x51
cmova esi, dword [ebp - 0x1c]
mov dl, cl
mov ch, cl
mov byte [ebp - 0x1d], 0x30
xor cl, byte [ebp - 0x2c]
mov al, 0x1d
xor al, byte [ebp - 0x2c]
mov ah, 0x1f
mov byte [ebp - 0x2b], al
mov bl, 0x25
mov al, byte [ebp - 0x1d]
mov dh, 0x23
mov byte [ebp - 0x2a], cl
mov bh, 0x3c
mov cl, byte [ebp - 0x2c]
xor al, cl
mov byte [ebp - 0x1e], 0x3d
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x3c], 0x68
mov byte [ebp - 0x22], al
xor bl, cl
xor ch, cl
mov byte [ebp - 0x27], ah
xor dh, cl
mov byte [ebp - 0x1d], 6
xor bh, cl
mov byte [ebp - 0x29], dl
mov al, 0x38
mov byte [ebp - 0x28], bl
xor al, byte [ebp - 0x3c]
mov cl, 0xd
xor cl, byte [ebp - 0x3c]
mov ah, 7
mov byte [ebp - 0x3b], al
mov dl, 0x1c
mov al, byte [ebp - 0x1d]
mov bl, 0x24
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x26], ch
mov ch, ah
mov byte [ebp - 0x33], al
mov byte [ebp - 0x25], dh
xor ah, cl
mov byte [ebp - 0x24], bh
mov dh, dl
mov bh, 1
mov byte [ebp - 0x1e], 0xf
mov al, byte [ebp - 0x1e]
xor dl, cl
xor bl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x10069fc3], al
cmp al, 1
jbe 0x1000db13
mov byte [0x10069fc3], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x26
mov al, 0x6a
cmova esi, dword [ebp - 0x1c]
mov cl, 0x49
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 0x6b
mov al, byte [ebp - 0x38]
mov ch, 0x47
xor cl, al
mov byte [ebp - 0x1d], 0x45
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x2c], 0x56
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x41
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x31
mov bl, 0x52
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x4f
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 0x33
xor al, byte [ebp - 0x38]
mov ah, 0x39
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x22
mov al, 6
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x1a
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0x38
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 0x3f
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bh, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x10069fc4], al
cmp al, 1
jbe 0x1000dbf1
mov byte [0x10069fc4], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x2f
mov al, 0x63
cmova esi, dword [ebp - 0x1c]
mov cl, 0x40
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov ah, 0x7d
mov al, byte [ebp - 0x38]
mov ch, 0x4e
xor cl, al
mov byte [ebp - 0x2c], 0x22
xor dl, al
mov byte [ebp - 0x36], cl
xor ah, al
mov byte [ebp - 0x1d], 0x4c
xor ch, al
mov byte [ebp - 0x33], ah
mov dh, 0x5d
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x1e], 0x45
mov bl, 0x5b
mov byte [ebp - 0x35], dl
xor bl, al
mov byte [ebp - 0x31], dh
mov bh, 0x4a
mov byte [ebp - 0x34], bl
xor bh, al
mov byte [ebp - 0x2f], 0
mov al, 0x72
mov byte [ebp - 0x30], bh
xor al, byte [ebp - 0x2c]
mov cl, 0x47
xor cl, byte [ebp - 0x2c]
mov ah, 0x4d
mov byte [ebp - 0x2b], al
mov ch, ah
mov al, byte [ebp - 0x1d]
mov dl, 0x56
mov byte [ebp - 0x2a], cl
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x6e
xor al, cl
mov byte [ebp - 0x21], 0
mov byte [ebp - 0x23], al
xor ah, cl
mov al, byte [ebp - 0x1e]
mov bh, 0x4b
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor dl, cl
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x2f], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x29], dl
xor bl, cl
mov byte [ebp - 0x21], 0
xor ch, cl
mov byte [ebp - 0x28], bl
xor dh, cl
mov byte [ebp - 0x26], ch
xor bh, cl
mov byte [ebp - 0x25], dh
push eax
mov byte [ebp - 0x24], bh
call edi
mov byte [0x10069fc5], al
cmp al, 1
jbe 0x1000dcc2
mov byte [0x10069fc5], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x75
mov dword [ebp - 0x3c], 0x1a1a3975
cmova esi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x38], 0x12052001
mov dword [ebp - 0x34], 0x10111407
mov byte [ebp - 0x30], 0
nop word [eax + eax]
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xb
jae 0x1000dcff
mov cl, byte [ebp - 0x3c]
jmp 0x1000dcf0
mov byte [ebp - 0x2c], 0x1f
mov al, 0x4f
xor al, byte [ebp - 0x2c]
mov cl, 0x7a
xor cl, byte [ebp - 0x2c]
mov ah, 0x70
mov byte [ebp - 0x2b], al
mov ch, ah
mov byte [ebp - 0x2a], cl
mov dl, 0x6b
mov cl, byte [ebp - 0x2c]
mov dh, dl
mov byte [ebp - 0x1d], 0x71
xor ah, cl
mov al, byte [ebp - 0x1d]
mov bl, 0x53
xor al, cl
mov byte [ebp - 0x1e], 0x78
mov byte [ebp - 0x23], al
mov bh, 0x76
mov al, byte [ebp - 0x1e]
xor dl, cl
xor al, cl
mov byte [ebp - 0x27], ah
push esi
mov byte [ebp - 0x22], al
xor bl, cl
push 1
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x30], 0
xor ch, cl
mov byte [ebp - 0x29], dl
xor dh, cl
mov byte [ebp - 0x28], bl
xor bh, cl
mov byte [ebp - 0x26], ch
push eax
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x10069fc6], al
cmp al, 1
jbe 0x1000dd81
mov byte [0x10069fc6], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov cl, 0x26
mov byte [ebp - 0x2c], 0x49
cmova esi, dword [ebp - 0x1c]
mov dl, cl
xor cl, byte [ebp - 0x2c]
mov al, 5
xor al, byte [ebp - 0x2c]
mov ah, 0x1c
mov byte [ebp - 0x2b], al
mov bl, 0x3d
mov byte [ebp - 0x2a], cl
mov ch, 0x27
mov cl, byte [ebp - 0x2c]
mov dh, 0x20
mov byte [ebp - 0x1d], 0x3c
xor ah, cl
mov al, byte [ebp - 0x1d]
xor dl, cl
xor al, cl
mov byte [ebp - 0x1e], 0x2c
mov byte [ebp - 0x23], al
xor bl, cl
mov al, byte [ebp - 0x1e]
xor ch, cl
xor al, cl
mov byte [ebp - 0x3c], 0x43
mov byte [ebp - 0x22], al
xor dh, cl
mov bh, 0x38
mov byte [ebp - 0x27], ah
xor bh, cl
mov byte [ebp - 0x1d], 0x2d
mov al, 0x13
mov byte [ebp - 0x29], dl
xor al, byte [ebp - 0x3c]
mov cl, 0x26
xor cl, byte [ebp - 0x3c]
mov ah, 0x2c
mov byte [ebp - 0x3b], al
mov dl, 0x37
mov al, byte [ebp - 0x1d]
mov byte [ebp - 0x3a], cl
mov cl, byte [ebp - 0x3c]
xor al, cl
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x33], al
mov bl, 0xf
mov byte [ebp - 0x26], ch
xor bl, cl
mov ch, ah
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov dh, dl
xor ah, cl
mov byte [ebp - 0x1e], 0x24
mov al, byte [ebp - 0x1e]
mov bh, 0x2a
xor dl, cl
mov byte [ebp - 0x37], ah
xor ch, cl
mov byte [ebp - 0x21], 0
xor dh, cl
mov byte [ebp - 0x31], 0
xor bh, cl
mov byte [ebp - 0x21], 0
xor al, cl
mov byte [ebp - 0x39], dl
push esi
mov byte [ebp - 0x32], al
lea eax, [ebp - 0x2b]
push 1
push eax
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x38], bl
mov byte [ebp - 0x36], ch
mov byte [ebp - 0x35], dh
mov byte [ebp - 0x34], bh
mov byte [ebp - 0x31], 0
push eax
call edi
mov byte [0x10069fc7], al
cmp al, 1
jbe 0x1000de6b
mov byte [0x10069fc7], 1
cmp dword [ebp - 8], 0xf
lea esi, [ebp - 0x1c]
mov byte [ebp - 0x38], 0x6d
mov al, 0x21
cmova esi, dword [ebp - 0x1c]
mov cl, 2
xor al, byte [ebp - 0x38]
mov dl, cl
mov byte [ebp - 0x37], al
mov bl, 0x19
mov al, byte [ebp - 0x38]
mov ah, 0x2e
xor cl, al
mov byte [ebp - 0x1d], bl
xor dl, al
mov byte [ebp - 0x36], cl
xor bl, al
mov byte [ebp - 0x2c], 0x63
xor ah, al
mov byte [ebp - 0x1e], 4
mov ch, 0x1f
mov byte [ebp - 0x33], ah
xor ch, al
mov byte [ebp - 0x35], dl
mov dh, 0xc
mov byte [ebp - 0x32], ch
xor dh, al
mov byte [ebp - 0x34], bl
mov bh, 0xb
mov byte [ebp - 0x31], dh
xor bh, al
mov byte [ebp - 0x2e], 0
mov al, byte [ebp - 0x1d]
mov cl, 6
xor al, byte [ebp - 0x38]
mov ah, 0xc
xor cl, byte [ebp - 0x2c]
mov ch, ah
mov byte [ebp - 0x2f], al
mov dl, 0x17
mov al, 0x33
mov byte [ebp - 0x2a], cl
xor al, byte [ebp - 0x2c]
mov dh, dl
mov cl, byte [ebp - 0x2c]
mov bl, 0x2f
mov byte [ebp - 0x2b], al
xor ah, cl
mov byte [ebp - 0x1d], 0xd
xor dl, cl
mov al, byte [ebp - 0x1d]
xor bl, cl
xor al, cl
mov byte [ebp - 0x27], ah
mov byte [ebp - 0x23], al
xor ch, cl
mov al, byte [ebp - 0x1e]
xor dh, cl
xor al, cl
mov byte [ebp - 0x30], bh
push esi
mov byte [ebp - 0x22], al
mov bh, 0xa
push 1
lea eax, [ebp - 0x37]
mov byte [ebp - 0x21], 0
push eax
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x2e], 0
xor bh, cl
mov byte [ebp - 0x29], dl
push eax
mov byte [ebp - 0x28], bl
mov byte [ebp - 0x26], ch
mov byte [ebp - 0x25], dh
mov byte [ebp - 0x24], bh
mov byte [ebp - 0x21], 0
call edi
mov byte [0x10069fc8], al
cmp al, 1
jbe 0x1000df48
mov byte [0x10069fc8], 1
mov ecx, dword [ebp - 8]
cmp ecx, 0xf
jbe 0x1000df78
mov edx, dword [ebp - 0x1c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000df6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000df8e
push ecx
push edx
call fcn.10038006
add esp, 8
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10037fa5
mov esp, ebp
pop ebp
ret
call fcn.10001630
call fcn.1003cf4f
int3