Function at 0x1010bed6
Capabilities:
Encrypt data using speck

Disassembly:
push 0x14c
mov eax, 0x1012fe75
call fcn.10123c77
mov ebx, ecx
mov dword [ebp - 0x104], ebx
mov eax, dword [ebx + 8]
mov esi, dword [ebp + 8]
mov dword [ebp - 0xd0], esi
push 0xc
pop edx
test eax, eax
je 0x1010bf33
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
pop ecx
mov ecx, eax
mov dword [ebx + 0x30], ecx
test ecx, ecx
jne 0x1010bf23
push 0xfffffffffffffff4
pop eax
jmp 0x1010e43e
imul eax, dword [ebx + 8], 0xc
push eax
push 0
push ecx
call sub.MSVCR120.dll_memset
add esp, 0xc
call sym.rt3d.dll_public:_static_class_e3_MEM____stdcall_e3_MEM::Create_void_
mov dword [ebx + 0x34], eax
test eax, eax
je 0x1010bf1b
push 0x40
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
mov dword [ebx + 0x38], eax
pop ecx
test eax, eax
je 0x1010bf1b
push 0x40
push 0
push eax
call sub.MSVCR120.dll_memset
mov ecx, dword [ebx + 0x38]
add esp, 0xc
mov eax, dword [ebx + 4]
mov dword [ecx + 0x38], eax
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x34]
mov dword [ecx + 4], eax
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx]
mov dword [ecx], eax
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x30]
mov dword [ecx + 0x10], eax
mov eax, dword [ebx + 0x38]
mov dword [eax + 0x3c], esi
mov eax, dword [ebx + 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [ebx + 0x38]
mov dword [esi + 0x2c], eax
push dword [ebx + 0x38]
mov ecx, dword [ebx]
push esi
call fcn.1010bc15
xor edx, edx
mov edi, eax
inc edx
mov dword [ebp - 0x100], edi
cmp edi, edx
jge 0x1010bfd1
mov ecx, dword [ebx]
cmp dword [ecx + 0xbe], 0
je 0x1010bfc0
test dword [esi + 0x28], 0x800
jne 0x1010bfd1
mov eax, dword [ecx]
push esi
push ecx
call dword [eax + 0xac]
xor eax, eax
jmp 0x1010e43e
test byte [esi + 0x28], 0x40
mov dword [ebp - 0x10c], 2
je 0x1010c0a8
test edi, edi
je 0x1010c0a8
mov eax, dword [ebx]
cmp dword [eax + 0x112], 0
jne 0x1010c02d
mov eax, dword [eax + 0x122]
xor ecx, ecx
push 0xc
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
pop ecx
mov ecx, dword [ebx]
mov dword [ecx + 0x112], eax
mov eax, dword [ebx]
cmp dword [eax + 0x112], 0
je 0x1010bf1b
xor edx, edx
inc edx
test dword [esi + 0x28], 0x200
je 0x1010c08b
cmp dword [esi + 0x24], 0
je 0x1010c08b
mov eax, dword [eax + 0x66]
xor ecx, ecx
push 0xc
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov edi, eax
pop ecx
test edi, edi
je 0x1010bf1b
mov eax, dword [ebx]
push dword [eax + 0x66]
push edi
push dword [eax + 0x62]
push dword [esi + 0x24]
call sym.rt3d.dll_public:_void___stdcall_MATRIX3D::TransformPoints_struct_POINT3D_const___struct_POINT3D___int_const
push dword [esi + 0x24]
mov ecx, dword [ebx]
push edi
push 7
call fcn.100b8b71
push edi
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
mov edi, dword [ebp - 0x100]
pop ecx
jmp 0x1010c0a8
push 0
push dword [eax + 0x62]
mov ecx, eax
push edx
call fcn.100b8b71
mov ecx, dword [ebx]
push 0
push dword [ecx + 0x62]
push 2
pop eax
push eax
call fcn.100b8b71
mov eax, dword [ebx]
xor edx, edx
mov cl, dl
mov dword [ebp - 0x108], ecx
cmp dword [eax + 0x6e], edx
je 0x1010c0d4
cmp dword [eax + 0xa2], edx
je 0x1010c0d4
test byte [esi + 0x28], 0x80
push 1
movzx ecx, cl
pop eax
cmovne ecx, eax
mov dword [ebp - 0x108], ecx
push 0x64
push edx
lea eax, [ebp - 0x94]
mov dword [ebp - 0xf8], edx
push eax
mov dword [ebp - 0xcc], edx
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [ebp - 0xc4], 0x384
test dword [esi + 0x28], 0x20080
push 4
pop edx
je 0x1010c2a3
test edi, edi
je 0x1010c30f
test dword [esi + 0x28], 0x20000
je 0x1010c1cb
mov ecx, dword [ebx]
xor edi, edi
cmp dword [ecx + 0x54], edi
jbe 0x1010c19c
xor edx, edx
mov dword [ebp - 0xf0], 0x3e8
mov eax, dword [ecx + 0x50]
movzx eax, word [edx + eax]
cmp ax, word [ebp - 0xf0]
jb 0x1010c168
mov dword [ebp - 0xc0], 0x44c
cmp ax, word [ebp - 0xc0]
jae 0x1010c168
mov eax, dword [ecx + 0x50]
movzx eax, word [eax + edx]
or byte [ebp + eax - 0x47c], 1
mov eax, dword [ecx + 0x50]
movzx eax, word [edx + eax]
cmp ax, word [ebp - 0xc4]
jb 0x1010c190
cmp ax, word [ebp - 0xf0]
jae 0x1010c190
mov eax, dword [ecx + 0x50]
movzx eax, word [eax + edx]
or byte [ebp + eax - 0x418], 2
inc edi
add edx, 0x1c
cmp edi, dword [ecx + 0x54]
jb 0x1010c136
push 4
pop edx
xor eax, eax
mov esi, eax
cmp byte [ebp + eax - 0x94], 3
jne 0x1010c1ab
inc esi
inc eax
cmp eax, 0x64
jb 0x1010c1a0
mov edi, dword [ebp - 0x100]
mov dword [ebp - 0xf8], esi
mov esi, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xf8]
jmp 0x1010c1e8
cmp byte [ebp - 0x108], 0
je 0x1010c2a3
xor eax, eax
mov byte [ebp - 0x94], 3
inc eax
mov dword [ebp - 0xf8], eax
test eax, eax
je 0x1010c2a3
xor ecx, ecx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov dword [ebx + 0xc], eax
pop ecx
test eax, eax
je 0x1010bf1b
mov eax, dword [ebp - 0xf8]
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov dword [ebx + 0x10], eax
pop ecx
test eax, eax
je 0x1010bf1b
mov eax, dword [ebp - 0xf8]
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov dword [ebx + 0x14], eax
pop ecx
test eax, eax
je 0x1010bf1b
test byte [esi + 0x28], 0x10
je 0x1010c285
mov eax, dword [ebp - 0xf8]
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov dword [ebx + 0x18], eax
pop ecx
test eax, eax
je 0x1010bf1b
mov eax, dword [ebx + 0x38]
mov edx, dword [ebp - 0xf8]
mov dword [eax + 0x2c], edx
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x14]
mov dword [ecx + 0x20], eax
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x18]
mov dword [ecx + 0x24], eax
test edi, edi
je 0x1010c30f
xor edi, edi
and dword [ebp - 0xdc], edi
mov esi, edi
cmp byte [ebp + edi - 0x94], 3
jne 0x1010c2f7
mov eax, dword [ebx + 0xc]
add eax, dword [ebp - 0xdc]
mov ecx, dword [ebx]
push eax
mov eax, dword [ebx + 0x10]
add eax, dword [ebp - 0xdc]
mov edx, dword [ecx]
push eax
push edi
push ecx
call dword [edx + 0x19c]
mov eax, dword [ebx + 0x14]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx + eax], edi
test edi, edi
je 0x1010c2ec
inc esi
push 4
pop eax
add ecx, eax
mov dword [ebp - 0xdc], ecx
inc edi
cmp edi, 0x64
jb 0x1010c2b1
mov edi, dword [ebp - 0x100]
mov dword [ebp - 0xcc], esi
mov esi, dword [ebp - 0xd0]
xor ecx, ecx
test dword [esi + 0x28], 0x40000
je 0x1010c340
mov eax, dword [ebx]
cmp dword [eax + 0xaa], ecx
je 0x1010c329
cmp dword [eax + 0x7e], ecx
jne 0x1010c331
cmp dword [eax + 0x8a], ecx
je 0x1010c340
xor edx, edx
inc edx
test edi, edi
je 0x1010c343
mov eax, dword [ebx + 0x38]
mov byte [eax + 0x36], dl
jmp 0x1010c343
xor edx, edx
inc edx
test byte [esi + 0x28], 0x20
je 0x1010cbf5
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebp - 0x108]
mov byte [eax + 0x35], cl
test byte [esi + 0x28], 0x40
je 0x1010c365
mov eax, dword [ebx + 0x38]
mov byte [eax + 0x34], dl
mov eax, dword [ebx + 0x38]
push 3
pop edi
push 6
cmp byte [eax + 0x34], 0
pop ecx
cmovne edi, ecx
cmp byte [eax + 0x36], 0
je 0x1010c380
push 4
pop ecx
add edi, ecx
mov ecx, dword [ebp - 0xf8]
test ecx, ecx
je 0x1010c390
mov dword [eax + 0x30], edi
lea edi, [edi + ecx*2]
call sym.rt3d.dll_public:_static_class_e3_MEM____stdcall_e3_MEM::Create_void_
mov ecx, dword [ebx + 0x38]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 0x38]
cmp dword [eax + 8], 0
je 0x1010bf1b
push 0x20
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x10c], eax
and dword [ebp - 4], 0
test eax, eax
je 0x1010c3d0
mov ecx, dword [ebx + 0x38]
push edi
push dword [ecx + 8]
mov ecx, eax
call fcn.1010a8d0
mov ecx, eax
jmp 0x1010c3d2
xor ecx, ecx
mov eax, dword [ebx + 0x38]
or dword [ebp - 4], 0xffffffff
mov dword [eax + 0xc], ecx
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], 0
je 0x1010bf1b
xor ecx, ecx
mov eax, edi
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10123a7d
mov dword [ebx + 0x20], eax
pop ecx
test eax, eax
je 0x1010bf1b
xor edx, edx
mov dword [ebp - 0xc8], edx
cmp dword [ebx + 8], edx
jbe 0x1010cbc8
xor ecx, ecx
mov dword [ebp - 0x114], 0x11
mov dword [ebp - 0x120], ecx
mov eax, dword [ebx + 0x30]
add eax, ecx
mov dword [ebp - 0x104], eax
test byte [eax + 8], 2
jne 0x1010cba8
mov edi, dword [ebx]
mov ecx, edi
push edx
call fcn.100be7fe
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0xe4], eax
cmp byte [ecx + 0x36], 0
je 0x1010c46d
mov ecx, dword [edi + 0xaa]
lea eax, [ecx + edx*4]
jmp 0x1010c46f
xor eax, eax
mov dword [ebp - 0x108], eax
test eax, eax
je 0x1010c486
xor ecx, ecx
cmp dword [eax], ecx
cmove eax, ecx
mov dword [ebp - 0x108], eax
mov eax, dword [edi + 0x9e]
mov ecx, edx
shl ecx, 2
add eax, ecx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x104]
test byte [eax + 8], 1
je 0x1010c85a
and dword [ebp - 0xbc], 0
cmp dword [eax + 4], 0
jle 0x1010cba8
push dword [ebx + 0x3c]
push 3
push esi
call fcn.1010adb1
add esp, 0xc
test eax, eax
js 0x1010e43e
mov ecx, dword [ebx + 0x38]
push 3
push dword [ebp - 0xc8]
call fcn.1010ab93
mov edi, eax
mov dword [ebp - 0xd4], edi
test edi, edi
je 0x1010bf1b
mov ecx, dword [ebp - 0x104]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebx]
mov dword [ebp - 0xc0], eax
sub eax, dword [ecx + 0x102]
cdq
idiv dword [ebp - 0x114]
imul edx, eax, 6
add edx, dword [ecx + 0x10a]
mov dword [edi + 8], eax
xor edi, edi
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xd8], edi
mov edx, dword [ebx]
mov eax, dword [ebp - 0xcc]
cmp dword [edx + 0x10a], 0
mov ecx, dword [eax]
je 0x1010c558
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
jmp 0x1010c55b
mov eax, dword [ecx + edi*4]
test dword [esi + 0x28], 0x200
mov dword [ebp - 0xc4], eax
je 0x1010c584
imul eax, eax, 0xc
lea ecx, [ebp - 0x12c]
push 1
push ecx
add eax, dword [edx + 0x62]
push eax
push dword [esi + 0x24]
call sym.rt3d.dll_public:_void___stdcall_MATRIX3D::TransformPoints_struct_POINT3D_const___struct_POINT3D___int_const
jmp 0x1010c5b3
cmp dword [edx + 0x10a], 0
je 0x1010c59d
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + edi*2]
imul esi, dword [ecx + eax*4], 0xc
jmp 0x1010c5a1
imul esi, dword [ecx + edi*4], 0xc
add esi, dword [edx + 0x62]
lea edi, [ebp - 0x12c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xd8]
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x12c]
push 3
pop edx
movss dword [eax], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x128]
movss dword [eax + 4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x124]
movss dword [eax + 8], xmm0
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x34], 0
je 0x1010c620
mov eax, dword [ebp - 0xc0]
push 6
mov ecx, dword [eax + edi*4 + 5]
mov eax, dword [ebx]
mov eax, dword [eax + 0xf6]
mov edx, dword [eax + ecx*8]
mov ecx, dword [ebx + 0x20]
mov eax, dword [edx]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebx + 0x20]
mov eax, dword [edx + 4]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebx + 0x20]
mov eax, dword [edx + 8]
pop edx
mov dword [ecx + 0x14], eax
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x36], 0
je 0x1010c708
mov ecx, dword [ebp - 0x108]
test ecx, ecx
je 0x1010c6d8
mov eax, dword [ebx]
mov ecx, dword [ecx]
cmp dword [eax + 0x10a], 0
je 0x1010c65a
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + edi*2]
imul esi, dword [ecx + eax*4], 0xc
mov eax, dword [ebx]
jmp 0x1010c65e
imul esi, dword [ecx + edi*4], 0xc
add esi, dword [eax + 0x7e]
lea edi, [ebp - 0x1c]
mov eax, dword [ebx + 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movss xmm0, dword [ebp - 0x1c]
mov esi, dword [ebp - 0xd8]
movss dword [eax + edx*4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x18]
movss dword [eax + edx*4 + 4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x14]
movss dword [eax + edx*4 + 8], xmm0
mov eax, dword [ebx]
mov edi, dword [eax + 0x6a]
test edi, edi
je 0x1010c6c6
cmp dword [eax + 0x10a], 0
je 0x1010c6b7
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + esi*2]
mov eax, dword [ecx + eax*4]
jmp 0x1010c6ba
mov eax, dword [ecx + esi*4]
mov ecx, dword [ebx + 0x20]
mov eax, dword [edi + eax*4]
mov dword [ecx + edx*4 + 0xc], eax
jmp 0x1010c6d1
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 0xc], 0x3f800000
push 4
pop eax
add edx, eax
jmp 0x1010c70e
mov eax, dword [ebx + 0x20]
push 4
mov dword [eax + edx*4], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 4], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 8], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 0xc], 0x3f800000
pop eax
add edx, eax
mov esi, dword [ebp - 0xd8]
xor edi, edi
cmp dword [ebp - 0xf8], edi
jle 0x1010c7cc
shl edx, 2
mov dword [ebp - 0xf0], edx
mov eax, dword [ebx + 0xc]
mov edx, dword [eax + edi*4]
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + edi*4]
add eax, dword [ebp - 0xec]
mov ecx, dword [eax]
test ecx, ecx
je 0x1010c769
mov eax, dword [ebx]
cmp dword [eax + 0x10a], 0
je 0x1010c764
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + esi*2]
mov ecx, dword [ecx + eax*4]
mov eax, dword [edx + ecx*8]
mov dword [ebp - 0x110], eax
mov eax, dword [edx + ecx*8 + 4]
jmp 0x1010c789
mov ecx, dword [ecx + esi*4]
jmp 0x1010c755
and dword [ebp - 0x130], 0
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0xf0]
movss xmm0, dword [ebp - 0x110]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebx + 0x20]
movss dword [ecx + eax], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x10c]
movss dword [ecx + eax + 4], xmm0
add ecx, 8
inc edi
mov dword [ebp - 0xf0], ecx
cmp edi, dword [ebp - 0xf8]
jl 0x1010c725
push dword [ebp - 0xe4]
push dword [ebx + 0x20]
push dword [ebp - 0xc4]
push dword [ebx + 0x38]
call fcn.1010ac12
mov edi, dword [ebp - 0xd8]
add esp, 0x10
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + edi*4 + 0x14], eax
cmp eax, 0xffffffff
je 0x1010bf1b
mov ecx, dword [ecx + 0xc]
test ecx, ecx
je 0x1010c823
mov eax, dword [ebx]
cmp dword [eax + 0x10a], 0
je 0x1010c820
mov eax, dword [ebp - 0xb8]
movzx eax, word [eax + edi*2]
mov dword [ecx + edi*4], eax
jmp 0x1010c823
mov dword [ecx + edi*4], edi
mov esi, dword [ebp - 0xd0]
inc edi
mov dword [ebp - 0xd8], edi
cmp edi, 3
jl 0x1010c536
mov edi, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x104]
inc edi
mov dword [ebp - 0xbc], edi
cmp edi, dword [eax + 4]
jl 0x1010c4c0
jmp 0x1010cba2
push edx
mov ecx, edi
call fcn.100675e6
push dword [ebx + 0x3c]
movzx edi, ax
push edi
push esi
mov dword [ebp - 0xd4], edi
call fcn.1010adb1
add esp, 0xc
test eax, eax
js 0x1010e43e
mov ecx, dword [ebx + 0x38]
push edi
push dword [ebp - 0xc8]
call fcn.1010ab93
mov edi, eax
mov dword [ebp - 0xbc], edi
test edi, edi
je 0x1010bf1b
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
mov eax, dword [ecx]
mov ecx, dword [ebx]
sub eax, dword [ecx + 0x102]
cdq
idiv dword [ebp - 0x114]
imul edx, eax, 6
add edx, dword [ecx + 0x10a]
mov dword [edi + 8], eax
xor edi, edi
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xb8], edi
cmp dword [ebp - 0xd4], edi
jle 0x1010cba2
mov edx, dword [ebx]
mov eax, dword [ebp - 0xcc]
cmp dword [edx + 0x10a], 0
mov ecx, dword [eax]
je 0x1010c900
mov eax, dword [ebp - 0xc0]
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
jmp 0x1010c903
mov eax, dword [ecx + edi*4]
test dword [esi + 0x28], 0x200
mov dword [ebp - 0xc4], eax
je 0x1010c92c
imul eax, eax, 0xc
lea ecx, [ebp - 0x154]
push 1
push ecx
add eax, dword [edx + 0x62]
push eax
push dword [esi + 0x24]
call sym.rt3d.dll_public:_void___stdcall_MATRIX3D::TransformPoints_struct_POINT3D_const___struct_POINT3D___int_const
jmp 0x1010c942
imul esi, dword [ecx + edi*4], 0xc
lea edi, [ebp - 0x154]
add esi, dword [edx + 0x62]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xb8]
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x154]
push 3
pop edx
movss dword [eax], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x150]
movss dword [eax + 4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x14c]
movss dword [eax + 8], xmm0
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x34], 0
je 0x1010c9d7
mov ecx, dword [ebx]
push edi
mov eax, dword [ecx + 0x9e]
add eax, dword [ebp - 0xec]
push eax
push dword [ebp - 0x104]
push ecx
call fcn.1010ba7e
add esp, 0x10
test eax, eax
je 0x1010c9bc
mov edx, dword [ebx + 0x20]
mov ecx, dword [eax]
mov dword [edx + 0xc], ecx
mov edx, dword [ebx + 0x20]
mov ecx, dword [eax + 4]
mov dword [edx + 0x10], ecx
mov ecx, dword [ebx + 0x20]
mov eax, dword [eax + 8]
mov dword [ecx + 0x14], eax
jmp 0x1010c9d4
mov eax, dword [ebx + 0x20]
and dword [eax + 0xc], 0
mov eax, dword [ebx + 0x20]
and dword [eax + 0x10], 0
mov eax, dword [ebx + 0x20]
mov dword [eax + 0x14], 0x3f800000
push 6
pop edx
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x36], 0
je 0x1010caa2
mov eax, dword [ebp - 0x108]
test eax, eax
je 0x1010ca72
mov ecx, dword [eax]
mov eax, dword [ebx]
imul ecx, dword [ecx + edi*4], 0xc
lea edi, [ebp - 0x140]
mov esi, dword [eax + 0x7e]
mov eax, dword [ebx + 0x20]
add esi, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movss xmm0, dword [ebp - 0x140]
mov esi, dword [ebp - 0xb8]
movss dword [eax + edx*4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x13c]
movss dword [eax + edx*4 + 4], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x138]
movss dword [eax + edx*4 + 8], xmm0
mov eax, dword [ebx]
mov edi, dword [eax + 0x6a]
test edi, edi
je 0x1010ca60
mov ecx, dword [ebp - 0x108]
mov eax, dword [ecx]
mov ecx, dword [ebx + 0x20]
mov eax, dword [eax + esi*4]
mov eax, dword [edi + eax*4]
mov dword [ecx + edx*4 + 0xc], eax
jmp 0x1010ca6b
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 0xc], 0x3f800000
push 4
pop eax
add edx, eax
jmp 0x1010caa8
mov eax, dword [ebx + 0x20]
push 4
mov dword [eax + edx*4], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 4], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 8], 0x3f800000
mov eax, dword [ebx + 0x20]
mov dword [eax + edx*4 + 0xc], 0x3f800000
pop eax
add edx, eax
mov esi, dword [ebp - 0xb8]
xor edi, edi
cmp dword [ebp - 0xf8], edi
jle 0x1010cb4c
shl edx, 2
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + edi*4]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + edi*4]
add eax, dword [ebp - 0xec]
mov ecx, dword [eax]
test ecx, ecx
je 0x1010caf5
mov ecx, dword [ecx + esi*4]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + ecx*8]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax + ecx*8 + 4]
jmp 0x1010cb15
and dword [ebp - 0x144], 0
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x144]
movss xmm0, dword [ebp - 0x11c]
mov dword [ebp - 0x118], eax
mov eax, dword [ebx + 0x20]
movss dword [edx + eax], xmm0
mov eax, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0x118]
movss dword [edx + eax + 4], xmm0
add edx, 8
inc edi
cmp edi, dword [ebp - 0xf8]
jl 0x1010cab9
push dword [ebp - 0xe4]
push dword [ebx + 0x20]
push dword [ebp - 0xc4]
push dword [ebx + 0x38]
call fcn.1010ac12
mov edi, dword [ebp - 0xb8]
add esp, 0x10
mov ecx, dword [ebp - 0xbc]
mov dword [ecx + edi*4 + 0x14], eax
cmp eax, 0xffffffff
je 0x1010bf1b
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x1010cb89
mov dword [eax + edi*4], edi
mov esi, dword [ebp - 0xd0]
inc edi
mov dword [ebp - 0xb8], edi
cmp edi, dword [ebp - 0xd4]
jl 0x1010c8de
mov edx, dword [ebp - 0xc8]
push 0xc
inc edx
pop eax
add dword [ebp - 0x120], eax
mov dword [ebp - 0xc8], edx
cmp edx, dword [ebx + 8]
jae 0x1010cbc8
mov ecx, dword [ebp - 0x120]
jmp 0x1010c42e
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x1c], 0
je 0x1010cbe4
push dword [ebx + 0x3c]
push esi
call fcn.1010b315
pop ecx
pop ecx
test eax, eax
js 0x1010e43e
push dword [ebx + 0x20]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0x20], 0
jmp 0x1010df84
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0xb8], ecx
cmp dword [esi + 0x14], ecx
jg 0x1010df7a
cmp dword [esi + 0x1c], ecx
jg 0x1010df7a
push 0x164
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], 1
test eax, eax
je 0x1010cc49
push dword [ebx + 0x3c]
mov ecx, eax
call fcn.100b76ff
mov edi, eax
mov dword [ebp - 0xc8], eax
jmp 0x1010cc51
xor edi, edi
mov dword [ebp - 0xc8], edi
or dword [ebp - 4], 0xffffffff
test edi, edi
je 0x1010bf1b
mov dword [esi + 0xc], edi
mov eax, dword [edi + 0x148]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebx + 0x34]
mov dword [edi + 0x148], ecx
push ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebx + 0x38]
push dword [eax]
push edi
call fcn.1010af72
pop ecx
pop ecx
mov ecx, dword [edi]
xor eax, eax
inc eax
push eax
mov eax, dword [ebx]
push dword [eax + 0x66]
push edi
call dword [ecx + 0x118]
test eax, eax
js 0x1010e43e
cmp dword [ebp - 0xcc], 0
jne 0x1010ccb4
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x36], 0
je 0x1010ccbb
or dword [esi + 0x28], 0x3000
test dword [esi + 0x28], 0x200
je 0x1010ccd9
mov eax, dword [ebx]
push dword [eax + 0x66]
push dword [edi + 0x62]
push dword [eax + 0x62]
push dword [esi + 0x24]
call sym.rt3d.dll_public:_void___stdcall_MATRIX3D::TransformPoints_struct_POINT3D_const___struct_POINT3D___int_const
jmp 0x1010ccee
mov ecx, dword [ebx]
imul eax, dword [ecx + 0x66], 0xc
push eax
push dword [ecx + 0x62]
push dword [edi + 0x62]
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov eax, dword [edi]
push 1
push 0xffffffffffffffff
push dword [ebp - 0x100]
push edi
call dword [eax + pe_nt_image_headers32]
test eax, eax
js 0x1010e43e
and dword [ebp - 0xe8], 0
cmp dword [edi + 0xb2], 0
je 0x1010ce4d
cmp byte [ebp - 0x108], 0
je 0x1010cd5a
test byte [esi + 0x28], 0x10
je 0x1010cd45
mov eax, dword [0x107ad68c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc4]
mov dword [ebx + 0x2c], eax
test eax, eax
je 0x1010bf1b
mov eax, dword [edi]
push 1
push 0
push edi
call dword [eax + 0x12c]
test eax, eax
js 0x1010e43e
test byte [esi + 0x28], 0x40
je 0x1010cd87
mov eax, dword [0x107ad68c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc8]
xor ecx, ecx
mov dword [ebx + 0x24], eax
mov eax, dword [edi]
inc ecx
push ecx
push ecx
push edi
call dword [eax + 0x130]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx]
cmp dword [eax + 0x96], 0
je 0x1010cda3
mov eax, dword [edi]
push edi
call dword [eax + 0x14c]
test eax, eax
js 0x1010e43e
test dword [esi + 0x28], 0x1000
je 0x1010cdc4
lea eax, [ebp - 0xf0]
mov ecx, edi
push eax
push 0x14
call fcn.100c6838
test eax, eax
js 0x1010e43e
test dword [esi + 0x28], 0x4000
je 0x1010cde5
lea eax, [ebp - 0x120]
mov ecx, edi
push eax
push 0x15
call fcn.100c6838
test eax, eax
js 0x1010e43e
test dword [esi + 0x28], 0x2000
je 0x1010ce2a
xor eax, eax
mov ecx, edi
inc eax
push eax
push eax
push 0
push 0x16
call fcn.100c68aa
test eax, eax
js 0x1010e43e
mov eax, dword [edi]
push 0x16
push edi
call dword [eax + 0x158]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x1010ce23
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xb8], ecx
jmp 0x1010ce2a
and dword [ebp - 0xb8], 0
mov eax, dword [ebx]
cmp dword [eax + 0x9a], 0
je 0x1010ce47
mov eax, dword [edi]
push edi
call dword [eax + 0x13c]
test eax, eax
jns 0x1010ce4d
jmp 0x1010e43e
mov eax, dword [eax + 0x5c]
mov dword [edi + 0x5c], eax
xor edx, edx
mov dword [ebp - 0xdc], edx
cmp dword [ebx + 8], edx
jbe 0x1010d587
mov dword [ebp - 0x114], 0x11
imul eax, edx, 0xc
add eax, dword [ebx + 0x30]
mov dword [ebp - 0xec], eax
test byte [eax + 8], 2
jne 0x1010d577
mov esi, dword [ebx]
mov ecx, esi
push edx
call fcn.100be7fe
cmp byte [ebp - 0x108], 0
mov edx, dword [ebp - 0xdc]
mov dword [ebp - 0xbc], eax
je 0x1010cea8
mov ecx, dword [esi + 0xa2]
lea eax, [ecx + edx*4]
jmp 0x1010ceaa
xor eax, eax
mov dword [ebp - 0xd8], eax
test eax, eax
je 0x1010cec1
xor ecx, ecx
cmp dword [eax], ecx
cmove eax, ecx
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x9e]
mov ecx, edx
shl ecx, 2
add eax, ecx
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xec]
test byte [eax + 8], 1
je 0x1010d2c3
xor ecx, ecx
mov dword [ebp - 0xc0], ecx
cmp dword [eax + 4], ecx
jle 0x1010d577
mov eax, dword [eax]
push 3
push dword [ebp - 0xe8]
mov esi, dword [eax + ecx*4]
mov eax, esi
mov ecx, dword [ebx]
push edi
mov dword [ebp - 0xd4], esi
sub eax, dword [ecx + 0x102]
cdq
idiv dword [ebp - 0x114]
imul eax, eax, 6
add eax, dword [ecx + 0x10a]
mov dword [ebp - 0xfc], eax
mov eax, dword [edi]
call dword [eax + 0xfc]
test eax, eax
js 0x1010e43e
mov edx, dword [ebp - 0xe8]
mov eax, dword [edi + 0x9e]
shl edx, 2
add eax, edx
cmp dword [ebx + 0x24], 0
mov dword [ebp - 0xe0], eax
je 0x1010cf6c
mov eax, dword [edi + 0xa6]
add eax, edx
mov dword [ebp - 0xe4], eax
jmp 0x1010cf73
and dword [ebp - 0xe4], 0
mov ecx, dword [ebp - 0xf0]
test ecx, ecx
je 0x1010cf82
mov eax, dword [esi]
mov dword [edx + ecx], eax
mov esi, dword [ebp - 0x120]
test esi, esi
je 0x1010cfa9
mov ecx, dword [ebx]
mov eax, dword [ebp - 0xd4]
push 0x11
sub eax, dword [ecx + 0x102]
pop ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0xe8]
mov dword [esi + ecx*4], eax
mov eax, dword [ebx]
mov ebx, dword [ebp - 0xe0]
cmp dword [eax + 0x10a], 0
je 0x1010d0cd
mov edi, dword [ebp - 0xfc]
xor esi, esi
mov eax, dword [ebp - 0xc4]
movzx edx, word [edi]
mov ecx, dword [ebx]
push 2
mov eax, dword [eax]
mov eax, dword [eax + edx*4]
mov dword [esi + ecx], eax
pop eax
push 4
add edi, eax
pop eax
add esi, eax
push 0xc
pop eax
cmp esi, eax
jl 0x1010cfc6
cmp dword [ebp - 0xb8], 0
mov ebx, dword [ebp - 0x104]
mov edi, dword [ebp - 0xc8]
je 0x1010d039
mov esi, dword [ebp - 0xfc]
xor edx, edx
mov ebx, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xb8]
mov eax, dword [edi + ebx*4]
movzx ecx, word [esi]
push 2
mov dword [edx + eax], ecx
pop eax
push 4
add esi, eax
pop eax
add edx, eax
push 0xc
pop eax
cmp edx, eax
jl 0x1010d013
mov ebx, dword [ebp - 0x104]
mov edi, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xe8]
mov eax, dword [ebx]
mov eax, dword [eax + 0x96]
test eax, eax
je 0x1010d06d
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x100]
movzx ecx, byte [ecx + 4]
xor ecx, dword [eax + edx]
and ecx, 7
xor ecx, dword [eax + edx]
mov eax, dword [edi + 0x96]
mov dword [eax + esi*4], ecx
cmp dword [ebp - 0xd8], 0
je 0x1010d1f3
mov eax, dword [edi]
mov ecx, 0x384
push ecx
push esi
push edi
call dword [eax + 0x100]
mov ecx, eax
mov dword [ebp - 0xe0], ecx
test ecx, ecx
je 0x1010bf1b
mov eax, dword [ebp - 0xfc]
xor esi, esi
push 4
pop edx
cmp dword [ebx + 0x2c], 0
je 0x1010d19f
mov edx, dword [ebx]
cmp dword [edx + 0x10a], 0
mov edx, dword [edx + 0x6e]
je 0x1010d129
movzx ecx, word [eax]
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [eax + ecx*4]
jmp 0x1010d134
mov edi, dword [ebp - 0xc4]
xor edx, edx
mov eax, dword [edi]
mov ecx, dword [ebx]
push 4
mov eax, dword [edx + eax]
mov dword [edx + ecx], eax
pop eax
add edx, eax
push 0xc
pop eax
cmp edx, eax
jl 0x1010d0d5
cmp dword [ebp - 0xb8], 0
mov ebx, dword [ebp - 0x104]
mov edi, dword [ebp - 0xc8]
je 0x1010d039
mov esi, dword [ebp - 0xe8]
xor ecx, ecx
mov edi, dword [ebp - 0xb8]
mov eax, dword [edi + esi*4]
mov dword [eax + ecx*4], ecx
inc ecx
cmp ecx, 3
jl 0x1010d112
mov edi, dword [ebp - 0xc8]
jmp 0x1010d03f
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [esi + eax]
mov eax, dword [edx + ecx*8]
mov dword [ebp - 0x134], eax
mov eax, dword [edx + ecx*8 + 4]
lea edx, [ebp - 0x18]
mov ecx, dword [ebp - 0xbc]
push 0
push edx
mov dword [ebp - 0x130], eax
lea edx, [ebp - 0x134]
mov eax, dword [ecx]
push edx
push ecx
call dword [eax + 0x98]
mov eax, dword [ebx + 0x2c]
lea edx, [ebp - 0x158]
push edx
lea edx, [ebp - 0x18]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x158]
mov dword [esi + ecx], eax
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ecx]
cmp dword [esi + eax], 0xffffffff
je 0x1010bf1b
push 4
pop edx
jmp 0x1010d1d9
mov eax, dword [ebx]
mov ecx, dword [ecx]
cmp dword [eax + 0x102], 0
je 0x1010d1c5
mov eax, dword [ebp - 0xfc]
push 4
movzx edx, word [eax]
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [eax + edx*4]
pop edx
jmp 0x1010d1d0
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [esi + eax]
mov dword [esi + ecx], eax
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xfc]
add esi, edx
add eax, 2
mov dword [ebp - 0xfc], eax
cmp esi, 0xc
jl 0x1010d0a5
cmp dword [ebp - 0xe4], 0
je 0x1010d264
xor edx, edx
mov dword [ebp - 0xe0], edx
mov eax, dword [ebp - 0xd4]
lea edi, [ebp - 0x138]
push edi
mov ecx, dword [eax + edx + 5]
mov eax, dword [ebx]
mov edx, dword [ebx + 0x24]
mov eax, dword [eax + 0xf6]
mov esi, dword [edx]
push dword [eax + ecx*8]
push edx
call dword [esi + 0x10]
mov esi, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x138]
mov edi, dword [ebp - 0xc8]
mov ecx, dword [esi]
mov dword [edx + ecx], eax
mov eax, dword [esi]
cmp dword [edx + eax], 0xffffffff
je 0x1010bf1b
push 4
pop eax
add edx, eax
push 0xc
pop eax
mov dword [ebp - 0xe0], edx
cmp edx, eax
jl 0x1010d204
mov eax, dword [edi + 0x9a]
mov esi, dword [ebp - 0xe8]
test eax, eax
je 0x1010d27d
mov ecx, dword [ebp - 0xbc]
mov dword [eax + esi*4], ecx
mov ecx, dword [edi + 0x92]
test ecx, ecx
je 0x1010d29b
mov eax, dword [ebx]
mov edx, dword [ebp - 0x100]
mov eax, dword [eax + 0x92]
mov eax, dword [edx + eax]
mov dword [ecx + esi*4], eax
mov ecx, dword [ebp - 0xc0]
inc esi
mov eax, dword [ebp - 0xec]
inc ecx
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xc0], ecx
cmp ecx, dword [eax + 4]
jl 0x1010cefb
jmp 0x1010d571
push edx
mov ecx, esi
call fcn.100675e6
movzx esi, ax
mov eax, dword [edi]
push esi
push dword [ebp - 0xe8]
mov dword [ebp - 0xe0], esi
push edi
call dword [eax + 0xfc]
test eax, eax
js 0x1010e43e
mov ecx, dword [ebp - 0xe8]
mov eax, esi
shl eax, 2
push eax
mov eax, dword [ebp - 0xc4]
shl ecx, 2
mov dword [ebp - 0xfc], ecx
push dword [eax]
mov eax, dword [edi + 0x9e]
push dword [eax + ecx]
call sub.MSVCR120.dll_memcpy
mov eax, dword [ebx]
add esp, 0xc
mov eax, dword [eax + 0x96]
test eax, eax
je 0x1010d33e
mov edx, dword [ebp - 0x100]
mov ecx, dword [edi + 0x96]
mov eax, dword [eax + edx]
mov edx, dword [ebp - 0xe8]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0xf0]
mov esi, dword [ebp - 0x120]
test ecx, ecx
jne 0x1010d352
test esi, esi
je 0x1010d392
mov edx, dword [ebp - 0xec]
mov edx, dword [edx]
test edx, edx
je 0x1010d392
mov edx, dword [edx]
test ecx, ecx
je 0x1010d375
mov esi, dword [ebp - 0xe8]
mov eax, dword [edx]
mov dword [ecx + esi*4], eax
mov esi, dword [ebp - 0x120]
test esi, esi
je 0x1010d392
mov ecx, dword [ebx]
push 0x11
sub edx, dword [ecx + 0x102]
mov eax, edx
pop ecx
cdq
idiv ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ecx + esi], eax
cmp dword [ebp - 0xb8], 0
mov edx, dword [ebp - 0xe0]
je 0x1010d3ca
xor ecx, ecx
test edx, edx
je 0x1010d3ca
mov edi, dword [ebp - 0xfc]
mov ebx, dword [ebp - 0xb8]
mov eax, dword [ebx + edi]
mov dword [eax + ecx*4], ecx
inc ecx
cmp ecx, edx
jb 0x1010d3b3
mov ebx, dword [ebp - 0x104]
mov edi, dword [ebp - 0xc8]
cmp dword [ebp - 0xd8], 0
je 0x1010d4af
mov eax, dword [edi]
mov ecx, 0x384
push ecx
push dword [ebp - 0xe8]
push edi
call dword [eax + 0x100]
mov ecx, eax
mov dword [ebp - 0xc4], ecx
test ecx, ecx
je 0x1010bf1b
mov edx, dword [ebp - 0xe0]
xor esi, esi
test edx, edx
je 0x1010d4af
cmp dword [ebx + 0x2c], 0
mov eax, dword [ebp - 0xd8]
je 0x1010d496
mov ecx, dword [eax]
mov eax, dword [ebx]
push 0
mov ecx, dword [ecx + esi*4]
mov edx, dword [eax + 0x6e]
mov eax, dword [edx + ecx*8]
mov dword [ebp - 0x150], eax
mov eax, dword [edx + ecx*8 + 4]
lea edx, [ebp - 0x128]
mov ecx, dword [ebp - 0xbc]
push edx
mov dword [ebp - 0x14c], eax
lea edx, [ebp - 0x150]
push edx
mov eax, dword [ecx]
push ecx
call dword [eax + 0x98]
mov eax, dword [ebx + 0x2c]
lea edx, [ebp - 0x144]
push edx
lea edx, [ebp - 0x128]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x144]
mov dword [ecx + esi*4], eax
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ecx]
cmp dword [eax + esi*4], 0xffffffff
je 0x1010bf1b
mov edx, dword [ebp - 0xe0]
jmp 0x1010d4a6
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + esi*4]
mov dword [ecx + esi*4], eax
mov ecx, dword [ebp - 0xc4]
inc esi
cmp esi, edx
jb 0x1010d40c
cmp dword [ebx + 0x24], 0
mov ecx, dword [ebp - 0xfc]
je 0x1010d534
mov eax, dword [edi + 0xa6]
xor esi, esi
add eax, ecx
mov dword [ebp - 0xc0], eax
test edx, edx
je 0x1010d534
mov eax, dword [edi + 0x9e]
add eax, dword [ebp - 0x100]
push esi
push eax
push dword [ebp - 0xec]
push dword [ebx]
call fcn.1010ba7e
add esp, 0x10
test eax, eax
je 0x1010d525
mov ecx, dword [ebx + 0x24]
lea ebx, [ebp - 0x118]
push ebx
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x10]
mov edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x118]
mov ebx, dword [ebp - 0x104]
mov ecx, dword [edx]
mov dword [ecx + esi*4], eax
mov eax, dword [edx]
cmp dword [eax + esi*4], 0xffffffff
je 0x1010bf1b
inc esi
cmp esi, dword [ebp - 0xe0]
jb 0x1010d4cf
mov ecx, dword [ebp - 0xfc]
mov eax, dword [edi + 0x9a]
test eax, eax
je 0x1010d547
mov edx, dword [ebp - 0xbc]
mov dword [ecx + eax], edx
mov ecx, dword [edi + 0x92]
test ecx, ecx
je 0x1010d56b
mov eax, dword [ebx]
mov edx, dword [ebp - 0x100]
mov eax, dword [eax + 0x92]
mov eax, dword [edx + eax]
mov edx, dword [ebp - 0xfc]
mov dword [edx + ecx], eax
inc dword [ebp - 0xe8]
mov edx, dword [ebp - 0xdc]
inc edx
mov dword [ebp - 0xdc], edx
cmp edx, dword [ebx + 8]
jb 0x1010ce68
cmp byte [ebp - 0x108], 0
je 0x1010d5e6
mov ecx, dword [ebx + 0x2c]
test ecx, ecx
je 0x1010d5b5
mov eax, dword [ecx]
push edi
push ecx
call dword [eax + 0x18]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx + 0x2c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebx + 0x2c], 0
jmp 0x1010d5e6
mov ecx, dword [edi]
xor eax, eax
inc eax
push eax
mov eax, dword [ebx]
push dword [eax + 0x72]
push edi
call dword [ecx + 0x11c]
test eax, eax
js 0x1010e43e
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x72]
shl eax, 3
push eax
push dword [ecx + 0x6e]
push dword [edi + 0x6e]
call sub.MSVCR120.dll_memcpy
add esp, 0xc
mov ecx, dword [ebx + 0x24]
test ecx, ecx
je 0x1010d64f
mov eax, dword [ecx]
push ecx
call dword [eax + 0x14]
mov ecx, dword [ebx + 0x24]
mov esi, eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov ecx, dword [edi]
mov dword [ebp - 0x118], eax
xor eax, eax
inc eax
push eax
push esi
push edi
call dword [ecx + 0x120]
test eax, eax
js 0x1010e43e
mov eax, dword [ebp - 0x118]
test eax, eax
je 0x1010d642
push 0xc
xor ecx, ecx
pop edx
mov edi, dword [edi + 0x76]
mov esi, eax
add edi, ecx
add ecx, edx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [eax + 0xc]
mov edi, dword [ebp - 0xc8]
test eax, eax
jne 0x1010d629
mov eax, dword [ebx + 0x24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebx + 0x24], 0
mov ecx, dword [ebx]
mov esi, dword [ebp - 0xd0]
mov eax, dword [ecx + 0xbe]
test eax, eax
je 0x1010d953
test dword [esi + 0x28], 0x800
je 0x1010d953
xor edx, edx
cmp dword [esi + 0x20], 2
mov dword [ebp - 0xc0], edx
jne 0x1010d6ce
cmp dword [ecx + 0xb6], 2
je 0x1010d6ce
and dword [ebp - 0x118], edx
test eax, eax
je 0x1010d6d0
mov esi, dword [ebp - 0x118]
mov edi, ecx
push esi
mov ecx, edi
call fcn.1006907c
mov edx, dword [ebp - 0xc0]
dec edx
movzx eax, ax
add edx, eax
inc esi
mov dword [ebp - 0xc0], edx
cmp esi, dword [edi + 0xbe]
jb 0x1010d69b
mov edi, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xd0]
mov ecx, dword [ebx]
jmp 0x1010d6d0
mov edx, eax
push 2
pop eax
cmp dword [ecx + 0xb6], eax
je 0x1010d6ec
cmp dword [esi + 0x20], eax
je 0x1010d6ec
xor eax, eax
mov byte [ebp - 0xf1], 0
inc eax
jmp 0x1010d6f5
xor eax, eax
inc eax
mov byte [ebp - 0xf1], al
mov ecx, dword [edi]
push eax
or eax, 0xffffffff
cmp byte [ebp - 0xf1], 0
cmovne eax, dword [ebp - 0x10c]
push eax
push edx
push edi
call dword [ecx + 0x10c]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx]
cmp dword [eax + 0xd2], 0
je 0x1010d736
mov eax, dword [edi]
push edi
call dword [eax + 0x140]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx]
cmp dword [eax + 0xc2], 0
je 0x1010d752
mov eax, dword [edi]
push edi
call dword [eax + 0x114]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx]
xor edx, edx
and dword [ebp - 0xb8], 0
mov dword [ebp - 0xec], edx
cmp dword [eax + 0xbe], edx
jbe 0x1010d953
and dword [ebp - 0xbc], edx
mov ecx, dword [ebx]
mov eax, edx
shl eax, 2
mov dword [ebp - 0xd4], eax
push edx
mov eax, dword [ecx + 0xca]
add eax, dword [ebp - 0xd4]
mov dword [ebp - 0xe4], eax
call fcn.1006907c
movzx ecx, ax
push 2
pop eax
mov dword [ebp - 0x10c], ecx
cmp dword [esi + 0x20], eax
jne 0x1010d890
lea eax, [ecx - 1]
xor esi, esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0x118], eax
test eax, eax
jle 0x1010d929
mov ecx, dword [ebp - 0xb8]
imul eax, ecx, 0xc
mov dword [ebp - 0xc4], eax
mov edx, dword [edi + 0xca]
mov eax, ecx
shl eax, 2
add edx, eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx]
mov eax, dword [eax]
mov eax, dword [eax + esi*4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
mov ecx, dword [edx]
mov eax, dword [eax]
mov eax, dword [eax + esi*4 + 4]
mov dword [ecx + 4], eax
mov eax, dword [ebx]
mov edx, dword [eax + 0xd2]
test edx, edx
je 0x1010d82e
mov eax, dword [ebp - 0xd4]
mov ecx, dword [edi + 0xd2]
mov eax, dword [eax + edx]
mov edx, dword [ebp - 0x10c]
mov dword [edx + ecx], eax
mov eax, dword [ebx]
mov ecx, dword [eax + 0xc2]
mov eax, dword [ebp - 0xc4]
test ecx, ecx
je 0x1010d860
mov edi, dword [edi + 0xc2]
mov esi, dword [ebp - 0xbc]
add edi, eax
lea esi, [esi + ecx]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xb8]
push 0xc
inc ecx
pop edx
add eax, edx
mov dword [ebp - 0xb8], ecx
inc esi
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], esi
cmp esi, dword [ebp - 0x118]
jl 0x1010d7d7
jmp 0x1010d929
cmp byte [ebp - 0xf1], 0
mov esi, dword [ebp - 0xb8]
jne 0x1010d8b2
mov eax, dword [edi]
push ecx
push esi
push edi
call dword [eax + 0x110]
test eax, eax
js 0x1010e43e
mov eax, dword [ebp - 0x10c]
mov ecx, dword [edi + 0xca]
shl eax, 2
push eax
mov eax, dword [ebp - 0xe4]
push dword [eax]
push dword [ecx + esi*4]
call sub.MSVCR120.dll_memcpy
mov eax, dword [ebx]
add esp, 0xc
mov eax, dword [eax + 0xd2]
test eax, eax
je 0x1010d8f3
mov edx, dword [ebp - 0xd4]
mov ecx, dword [edi + 0xd2]
mov eax, dword [edx + eax]
mov dword [ecx + esi*4], eax
mov eax, dword [ebx]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [eax + 0xc2]
test eax, eax
je 0x1010d922
mov esi, dword [ebp - 0xbc]
mov edi, dword [edi + 0xc2]
lea esi, [esi + eax]
imul eax, ecx, 0xc
add edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc8]
inc ecx
mov dword [ebp - 0xb8], ecx
mov edx, dword [ebp - 0xec]
mov esi, dword [ebp - 0xd0]
inc edx
push 0xc
pop eax
add dword [ebp - 0xbc], eax
mov eax, dword [ebx]
mov dword [ebp - 0xec], edx
cmp edx, dword [eax + 0xbe]
jb 0x1010d775
test dword [esi + 0x28], 0x8000
je 0x1010d97b
push edi
call fcn.1010b2b5
pop ecx
test eax, eax
je 0x1010bf1b
xor ecx, ecx
cmp dword [edi + 0x66], ecx
jbe 0x1010d97b
mov dword [eax + ecx*4], ecx
inc ecx
cmp ecx, dword [edi + 0x66]
jb 0x1010d972
test byte [esi + 0x28], 4
je 0x1010d994
mov eax, dword [edi]
push 1
push edi
call dword [eax + 0x17c]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx + 0x38]
cmp byte [eax + 0x36], 0
jne 0x1010d9aa
cmp dword [ebp - 0xcc], 0
je 0x1010df8b
call sym.rt3d.dll_public:_static_class_e3_MEM____stdcall_e3_MEM::Create_void_
mov ecx, dword [ebx + 0x38]
mov dword [ecx + 8], eax
mov eax, dword [ebx + 0x38]
cmp dword [eax + 8], 0
je 0x1010bf1b
push 0x20
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x10c], eax
push 2
pop ecx
mov dword [ebp - 4], ecx
test eax, eax
je 0x1010d9ef
push 4
pop ecx
push ecx
mov ecx, dword [ebx + 0x38]
push dword [ecx + 8]
mov ecx, eax
call fcn.1010a8d0
mov ecx, eax
jmp 0x1010d9f1
xor ecx, ecx
mov eax, dword [ebx + 0x38]
or dword [ebp - 4], 0xffffffff
mov dword [eax + 0xc], ecx
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], 0
je 0x1010bf1b
cmp byte [eax + 0x36], 0
je 0x1010dc83
mov eax, dword [edi]
xor ecx, ecx
inc ecx
push ecx
push ecx
push edi
call dword [eax + 0x134]
test eax, eax
js 0x1010e43e
mov eax, dword [edi]
push 0x14
push edi
call dword [eax + 0x158]
mov esi, dword [eax + 0x14]
test esi, esi
je 0x1010da3f
mov esi, dword [esi + 0x10]
jmp 0x1010da41
xor esi, esi
mov eax, dword [edi]
push 0x16
push edi
mov dword [ebp - 0xd4], esi
call dword [eax + 0x158]
xor eax, eax
mov dword [ebp - 0xbc], eax
cmp dword [edi + 0xb2], eax
jbe 0x1010dbd7
push eax
mov ecx, edi
call fcn.100675e6
movzx eax, ax
xor edx, edx
mov dword [ebp - 0xc0], eax
mov eax, dword [ebx]
mov dword [ebp - 0xe4], edx
mov ecx, dword [eax + 0xaa]
test ecx, ecx
je 0x1010daa7
mov eax, dword [esi]
lea edx, [ecx + eax*4]
mov dword [ebp - 0xe4], edx
test edx, edx
je 0x1010daa7
xor eax, eax
cmp dword [edx], eax
cmove edx, eax
mov dword [ebp - 0xe4], edx
xor ecx, ecx
xor eax, eax
cmp cx, word [ebp - 0xc0]
jmp 0x1010dba7
movss xmm1, dword [0x10139268]
mov dword [ebp - 0x124], 0x3f800000
mov dword [ebp - 0x128], 0x3f800000
mov dword [ebp - 0x12c], 0x3f800000
test edx, edx
je 0x1010db0e
movzx ecx, ax
lea edi, [ebp - 0x12c]
mov eax, dword [edx]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebx]
imul esi, ecx, 0xc
add esi, dword [eax + 0x7e]
mov eax, dword [eax + 0x6a]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc8]
test eax, eax
je 0x1010db2e
movss xmm1, dword [eax + ecx*4]
jmp 0x1010db2e
mov eax, dword [ebx]
mov eax, dword [eax + 0x8a]
test eax, eax
je 0x1010db2e
imul esi, dword [esi], 0xc
lea edi, [ebp - 0x12c]
add esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc8]
movss xmm0, dword [ebp - 0x12c]
mov eax, dword [edi + 0xaa]
mov edx, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc4]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x128]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x124]
movss dword [ebp - 0x18], xmm0
movss dword [ebp - 0x14], xmm1
mov eax, dword [eax + edx*4]
movzx ecx, cx
lea eax, [eax + ecx*4]
mov ecx, dword [ebx + 0x38]
push eax
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ecx + 0xc]
call fcn.1010aa80
test eax, eax
je 0x1010bf1b
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xe4]
inc eax
cmp ax, word [ebp - 0xc0]
mov esi, dword [ebp - 0xd4]
mov dword [ebp - 0xc4], eax
jb 0x1010dab7
push 4
pop eax
add esi, eax
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xbc], eax
cmp eax, dword [edi + 0xb2]
jb 0x1010da66
mov ecx, dword [edi]
xor eax, eax
inc eax
push eax
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0xc]
push dword [eax + 0x10]
push edi
call dword [ecx + 0x124]
test eax, eax
js 0x1010e43e
mov eax, dword [edi]
push edi
call dword [eax + 0x190]
test eax, eax
js 0x1010e43e
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x14]
test edx, edx
je 0x1010dc83
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xc0], eax
mov edi, dword [edi + 0x7e]
lea esi, [ebp - 0x12c]
movss xmm0, dword [edx + 0x1c]
add edi, eax
movss xmm1, dword [edx + 0x20]
movss xmm2, dword [edx + 0x24]
movss dword [ebp - 0x12c], xmm0
movss dword [ebp - 0x128], xmm1
movss dword [ebp - 0x124], xmm2
movsd dword es:[edi], dword [esi]
push 0xc
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc8]
mov eax, dword [edx + 0x28]
mov ecx, dword [edi + 0x6a]
mov dword [ebx + ecx], eax
mov eax, dword [ebp - 0xc0]
mov edx, dword [edx]
pop ecx
add eax, ecx
push 4
pop ecx
add ebx, ecx
mov dword [ebp - 0xc0], eax
test edx, edx
jne 0x1010dc1d
mov ebx, dword [ebp - 0x104]
cmp dword [ebp - 0xcc], 0
je 0x1010df85
xor ecx, ecx
mov dword [ebp - 0xd4], ecx
cmp dword [ebp - 0xf8], ecx
jle 0x1010df85
mov esi, dword [ebp - 0xd0]
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0xcc], eax
test ecx, ecx
je 0x1010df65
mov eax, dword [edi]
and dword [ebp - 0xec], 0
and dword [ebp - 0xc4], 0
push 0x14
push edi
call dword [eax + 0x158]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x1010dce9
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x114], eax
jmp 0x1010dcf0
and dword [ebp - 0x114], 0
mov eax, dword [edi]
push 0x16
push edi
call dword [eax + 0x158]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + ecx*4]
xor ecx, ecx
inc ecx
mov dword [ebp - 0xc0], eax
mov eax, dword [edi]
push ecx
push ecx
push dword [ebp - 0xcc]
push edi
call dword [eax + 0x194]
test eax, eax
js 0x1010e43e
mov eax, dword [0x107ad68c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc4]
mov dword [ebx + 0x28], eax
test eax, eax
je 0x1010bf1b
mov eax, dword [ebp - 0xcc]
mov ecx, dword [edi]
add eax, 0x384
push eax
push edi
call dword [ecx + 0x158]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x1010dd75
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xdc], ecx
jmp 0x1010dd7c
and dword [ebp - 0xdc], 0
xor eax, eax
mov dword [ebp - 0xe4], eax
cmp dword [edi + 0xb2], eax
jbe 0x1010df42
push eax
mov ecx, edi
call fcn.100675e6
mov ecx, dword [ebp - 0x114]
movzx eax, ax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0xbc], eax
test eax, eax
je 0x1010ddc9
xor edx, edx
cmp dword [eax], edx
cmove eax, edx
mov dword [ebp - 0xbc], eax
test byte [esi + 0x28], 0x10
je 0x1010de26
push ecx
mov ecx, dword [ebx]
call fcn.100be7fe
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x118], eax
cmp edx, eax
je 0x1010de1e
and dword [ebp - 0xc4], 0
lea edx, [eax + 0x88]
xor ecx, ecx
movzx eax, word [edx]
cmp eax, dword [ebp - 0xcc]
je 0x1010de0c
inc ecx
add edx, 0x60
cmp ecx, 0x1a
jl 0x1010ddf6
jmp 0x1010de12
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0x118]
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0xbc]
jmp 0x1010de2c
mov edx, dword [ebp - 0xec]
xor ecx, ecx
mov dword [ebp - 0x100], ecx
cmp dword [ebp - 0xe0], ecx
jle 0x1010df20
test eax, eax
je 0x1010de9d
mov eax, dword [eax]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + ecx*8]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + ecx*8 + 4]
mov dword [ebp - 0x138], eax
test edx, edx
je 0x1010dec3
push dword [ebp - 0xc4]
mov eax, dword [edx]
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp - 0x13c]
push ecx
push edx
call dword [eax + 0x98]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x14c]
jmp 0x1010debd
and dword [ebp - 0x130], 0
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x138], eax
mov eax, dword [ebx + 0x28]
lea edx, [ebp - 0x144]
push edx
lea edx, [ebp - 0x13c]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov edx, dword [ebp - 0x144]
cmp edx, 0xffffffff
je 0x1010bf1b
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ecx + eax*4]
mov ecx, dword [ebp - 0x100]
mov dword [eax + ecx*4], edx
inc ecx
mov eax, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xec]
mov dword [ebp - 0x100], ecx
cmp ecx, dword [ebp - 0xe0]
jl 0x1010de40
push 4
pop eax
add dword [ebp - 0x114], eax
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp eax, dword [edi + 0xb2]
jb 0x1010dd90
mov eax, dword [ebx + 0x28]
push dword [ebp - 0xcc]
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov eax, dword [ebx + 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebx + 0x28], 0
mov ecx, dword [ebp - 0xd4]
inc ecx
mov dword [ebp - 0xd4], ecx
cmp ecx, dword [ebp - 0xf8]
jl 0x1010dcaa
jmp 0x1010df8b
push str.This_combination_of_e3_CONVERT.flags_not_yet_realized
call fcn.100b4d51
pop ecx
mov esi, dword [ebp - 0xd0]
mov eax, dword [ebx + 0x38]
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x1010dfa2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebx + 0x38]
and dword [eax + 8], 0
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0xc], 0
je 0x1010dfbb
push dword [eax + 0xc]
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
mov eax, dword [ebx + 0x38]
pop ecx
and dword [eax + 0xc], 0
cmp dword [ebx + 0x10], 0
je 0x1010dfce
push dword [ebx + 0x10]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0x10], 0
pop ecx
cmp dword [ebx + 0xc], 0
je 0x1010dfe1
push dword [ebx + 0xc]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0xc], 0
pop ecx
cmp dword [ebx + 0x14], 0
je 0x1010dff4
push dword [ebx + 0x14]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0x14], 0
pop ecx
cmp dword [ebx + 0x18], 0
je 0x1010e007
push dword [ebx + 0x18]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0x18], 0
pop ecx
cmp dword [esi + 0x18], 0
jle 0x1010e3c2
mov eax, dword [esi + 8]
test eax, eax
je 0x1010e243
mov eax, dword [eax + 0x24]
push 0x10
push eax
mov dword [ebp - 0xc0], eax
call sym.rt3d.dll_public:_static_class_e3_COLLECTION____stdcall_e3_COLLECTION::Create_int__int_
mov dword [ebx + 0x44], eax
test eax, eax
je 0x1010bf1b
xor edi, edi
cmp dword [ebp - 0xc0], edi
jle 0x1010e06d
mov eax, dword [ebx + 0x44]
push edi
mov esi, dword [eax]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
push eax
push dword [ebx + 0x44]
call dword [esi + 0x30]
inc edi
cmp edi, dword [ebp - 0xc0]
jl 0x1010e042
mov esi, dword [ebp - 0xd0]
mov eax, dword [esi + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
mov eax, dword [ebx + 0x44]
xor edx, edx
mov dword [ebp - 0xf0], edx
cmp dword [eax + 0x24], edx
jle 0x1010e214
mov eax, dword [ebx + 0x44]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
mov ecx, dword [ebx + 0x44]
mov edi, eax
push 0
push dword [ebp - 0xf0]
mov edx, dword [ecx]
push ecx
call dword [edx + 0x20]
mov ecx, dword [0x107ad68c]
push ecx
mov edx, dword [ecx]
call dword [edx + 0xa8]
mov dword [ebx + 0x40], eax
test eax, eax
je 0x1010bf1b
mov ecx, dword [edi]
push 1
push eax
push edi
call dword [ecx + 0xe4]
mov eax, dword [ebx + 0x40]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x10c], eax
cmp eax, 1
jle 0x1010e1dc
and dword [ebp - 0xbc], 0
test eax, eax
jle 0x1010e1cc
push 0x164
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x1010e11d
mov ecx, dword [ebx]
push dword [ecx + 0x28]
mov ecx, eax
call fcn.100b76ff
mov esi, eax
jmp 0x1010e11f
xor esi, esi
or dword [ebp - 4], 0xffffffff
test esi, esi
je 0x1010bf1b
mov eax, dword [ebp - 0xd0]
push esi
mov eax, dword [eax + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x1010e226
push edi
push esi
call fcn.1010af72
mov eax, dword [esi + 0x148]
pop ecx
pop ecx
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebx + 0x34]
mov dword [esi + 0x148], ecx
push ecx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebx + 0x40]
push 2
pop eax
push eax
push dword [ebp - 0xbc]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
push eax
push esi
mov ecx, edi
call fcn.1010b239
test eax, eax
js 0x1010e43e
push dword [ebp - 0xbc]
lea eax, [ebp - 0x30]
push str.sub__02d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
mov eax, dword [esi]
lea ecx, [ebp - 0x30]
add esp, 0xc
push ecx
push esi
call dword [eax + 0x48]
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp eax, dword [ebp - 0x10c]
jl 0x1010e0f1
mov esi, dword [ebp - 0xd0]
mov ecx, edi
call fcn.100b7800
push edi
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x1010e1ea
mov eax, dword [esi + 8]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x1010e239
mov ecx, dword [ebx + 0x40]
test ecx, ecx
je 0x1010e1fb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [ebx + 0x40], 0
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebx + 0x44]
inc edx
mov dword [ebp - 0xf0], edx
cmp edx, dword [eax + 0x24]
jl 0x1010e08a
mov eax, dword [ebx + 0x44]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebx + 0x44], 0
jmp 0x1010e3c2
mov ecx, esi
call fcn.100b7800
push esi
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x1010bf1b
mov ecx, edi
call fcn.100b7800
push edi
jmp 0x1010e22e
mov eax, dword [0x107ad68c]
mov edi, dword [esi + 0xc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, eax
mov dword [ebx + 0x40], ecx
test ecx, ecx
je 0x1010bf1b
mov eax, dword [edi]
push 1
push ecx
push edi
call dword [eax + 0xe4]
mov ecx, dword [ebx + 0x40]
xor eax, eax
inc eax
cmp dword [ecx + 0x24], eax
jle 0x1010e3a0
xor ecx, ecx
mov dword [esi + 0xc], ecx
mov eax, dword [ebx + 0x40]
mov dword [esi + 8], eax
mov eax, dword [ebx + 0x40]
mov dword [ebp - 0xdc], ecx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x10c], eax
mov dword [ebx + 0x40], ecx
test eax, eax
jle 0x1010e390
push 0x164
call sub.MSVCR120.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp - 0x118], eax
push 4
pop ecx
mov dword [ebp - 4], ecx
test eax, eax
je 0x1010e2cd
mov ecx, dword [ebx]
push dword [ecx + 0x28]
mov ecx, eax
call fcn.100b76ff
jmp 0x1010e2cf
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xcc], eax
test eax, eax
je 0x1010bf1b
mov eax, dword [eax + 0x148]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebx + 0x34]
mov edx, dword [ebp - 0xcc]
push ecx
mov dword [edx + 0x148], ecx
mov eax, dword [ecx]
call dword [eax + 4]
push edi
push dword [ebp - 0xcc]
call fcn.1010af72
pop ecx
pop ecx
mov ecx, dword [esi + 8]
push 2
pop eax
push eax
push dword [ebp - 0xdc]
mov eax, dword [ecx]
push ecx
call dword [eax + 0x10]
push eax
push dword [ebp - 0xcc]
mov ecx, edi
call fcn.1010b239
test eax, eax
js 0x1010e43e
mov eax, dword [esi + 8]
mov edx, dword [ebp - 0xcc]
push edx
push dword [ebp - 0xdc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push dword [ebp - 0xdc]
lea eax, [ebp - 0xb4]
push str.sub__02d
push eax
call dword [sym.imp.MSVCR120.dll_sprintf]
mov eax, dword [edi]
lea ecx, [ebp - 0xb4]
add esp, 0xc
push ecx
push edi
call dword [eax + 0x48]
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp eax, dword [ebp - 0x10c]
jl 0x1010e2a4
mov ecx, edi
call fcn.100b7800
push edi
call sub.MSVCR120.dll_void___cdecl_operator_delete_void__
pop ecx
jmp 0x1010e3c2
test ecx, ecx
je 0x1010e3c2
cmp dword [ecx + 0x24], 0
je 0x1010e3b5
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x10]
mov dword [edi + 0x5c], eax
mov eax, dword [ebx + 0x40]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebx + 0x40], 0
test dword [esi + 0x28], 0x100
je 0x1010e43b
mov ecx, dword [ebx]
cmp dword [ecx + 0xee], 0
je 0x1010e43b
cmp dword [ecx + 0xf6], 0
je 0x1010e43b
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x188]
mov dword [ebx + 0x1c], eax
test eax, eax
je 0x1010e43b
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x1010e423
xor edi, edi
cmp dword [ecx + 0x24], edi
jle 0x1010e42e
mov eax, dword [esi + 8]
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
push dword [ebx + 0x1c]
push eax
call fcn.1010ad3e
pop ecx
pop ecx
test eax, eax
js 0x1010e43e
mov eax, dword [esi + 8]
inc edi
cmp edi, dword [eax + 0x24]
jl 0x1010e3ff
jmp 0x1010e42e
push eax
push dword [esi + 0xc]
call fcn.1010ad3e
pop ecx
pop ecx
push dword [ebx + 0x1c]
call sub.MSVCR120.dll_void___cdecl_operator_delete___void__
and dword [ebx + 0x1c], 0
pop ecx
xor eax, eax
inc eax
call fcn.10123c26
ret 8