Chalange !

1016DFE4   68 90543810      PUSH    CShell.10385490                  ; ASCII "NanoAddHP"
1016DFE9   52               PUSH    EDX
1016DFEA   E8 D16C1C00      CALL    CShell.10334CC0
1016DFEF   83C4 08          ADD     ESP, 8
1016DFF2   3BC3             CMP     EAX, EBX
1016DFF4   74 19            JE      SHORT CShell.1016E00F
1016DFF6   8B40 04          MOV     EAX, DWORD PTR DS:[EAX+4]
1016DFF9   8B40 04          MOV     EAX, DWORD PTR DS:[EAX+4]
1016DFFC   8B40 04          MOV     EAX, DWORD PTR DS:[EAX+4]
1016DFFF   50               PUSH    EAX
1016E000   FFD7             CALL    EDI
1016E002   8B0D 387FC210    MOV     ECX, DWORD PTR DS:[10C27F38]
1016E008   83C4 04          ADD     ESP, 4
1016E00B   894429 0C        MOV     DWORD PTR DS:[ECX+EBP+C], EAX
1016E00F   8B4C24 30        MOV     ECX, DWORD PTR SS:[ESP+30]
1016E013   3BCB             CMP     ECX, EBX
1016E015   74 0D            JE      SHORT CShell.1016E024
1016E017   8B4424 34        MOV     EAX, DWORD PTR SS:[ESP+34]
1016E01B   2BC1             SUB     EAX, ECX
1016E01D   C1F8 02          SAR     EAX, 2
1016E020   3BF0             CMP     ESI, EAX
1016E022   72 0A            JB      SHORT CShell.1016E02E
1016E024   90               NOP
1016E025   E8 6AAA1261      CALL    MSVCR80._invalid_parameter_noinf>
1016E02A   8B4C24 30        MOV     ECX, DWORD PTR SS:[ESP+30]
1016E02E   8B14B1           MOV     EDX, DWORD PTR DS:[ECX+ESI*4]