Function at 0x10bf8980
Capabilities:
Execute anti-debugging instructions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10e28055
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6bc]
push ebx
push esi
push edi
lea ecx, [eax + ecx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edi, dword [ecx]
mov edx, dword [0x10fab80c]
sub edi, edx
mov dword [ecx], edi
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6b4]
lea ecx, [eax + ecx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov esi, dword [ecx]
mov edx, dword [0x10fab80c]
sub esi, edx
mov dword [ecx], esi
mov esi, dword [ebp + 8]
mov eax, dword [esi]
mov dword [esp + 0x34], eax
mov eax, dword [eax + 0x40]
mov ecx, dword [eax + 0x6c]
test ecx, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], 0
je 0x10bfaba0
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x350]
test ah, ah
mov ebx, dword [ebp + 0x18]
mov edi, dword [ebp + 0xc]
jns 0x10bf8a9a
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
test dword [ecx + 0x5ac], 0x20000
je 0x10bf8a9a
sub esp, 0x10
lea eax, [esi + 0xa8]
mov ecx, esp
mov edx, eax
mov edi, dword [edx]
mov esi, ecx
mov dword [esi], edi
mov edi, dword [edx + 4]
mov dword [esi + 4], edi
mov edx, dword [edx + 8]
mov edi, dword [ebp + 0xc]
mov dword [esi + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
mov esi, dword [ecx + 0x5b8]
mov edx, dword [ebx]
xor eax, eax
cmp esi, 7
sete al
mov dword [esp + 0x2c], esp
mov ecx, ebx
push eax
push 0
push 0
push 1
push 1
call dword [edx + 0x24]
mov al, 0x66
mov byte [esp + 0xc], al
mov byte [esp + 0xe], al
jmp 0x10bf8dd3
mov eax, dword [edi + 4]
mov eax, dword [eax + 0x34]
test eax, eax
je 0x10bf8ab1
cmp dword [eax + 0x5b8], 0x22
je 0x10bf8dec
test byte [edx + 0x2ac], 8
je 0x10bf8ac8
mov ecx, dword [edx + 0x48]
test ecx, ecx
je 0x10bf8ac8
call fcn.10a3a0a0
jmp 0x10bf8aca
mov eax, edx
test byte [eax + 0x2ac], 1
jne 0x10bf8d79
mov ecx, dword [edi + 4]
call fcn.10a9e5d0
test eax, eax
je 0x10bf8d79
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bf8dec
mov eax, dword [0x10fceeec]
test eax, eax
jne 0x10bf8b30
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx + 0x254]
test eax, eax
je 0x10bf8b23
mov edx, dword [esp + 0x14]
mov ecx, dword [eax + 0x40]
cmp ecx, dword [edx + 0x6c]
jne 0x10bf8b23
mov dword [esp + 0x20], eax
jmp 0x10bf8c11
mov dword [esp + 0x20], 0
jmp 0x10bf8c11
mov eax, dword [esp + 0x34]
mov esi, dword [eax + 0x254]
test esi, esi
je 0x10bf8c11
mov edx, dword [esp + 0x14]
mov ecx, dword [esi + 0x40]
mov eax, dword [edx + 0x6c]
cmp ecx, eax
jne 0x10bf8c11
mov ecx, dword [esi + 0x30]
xor edi, edi
test ecx, ecx
jle 0x10bf8b83
mov ecx, dword [esi + 0x2c]
add eax, 7
cdq
and edx, 7
add eax, edx
sar eax, 3
add ecx, 8
nop
cmp dword [ecx], eax
jne 0x10bf8c11
mov edx, dword [esi + 0x30]
inc edi
add ecx, 0x14
cmp edi, edx
jl 0x10bf8b70
mov eax, esi
mov ecx, dword [eax + 0x30]
xor esi, esi
test ecx, ecx
mov dword [esp + 0x20], eax
jle 0x10bf8c11
add eax, 0x2c
mov dword [esp + 0x24], eax
jmp 0x10bf8ba3
mov eax, dword [esp + 0x24]
mov edx, dword [eax]
lea ecx, [esi + esi*4]
lea edi, [edx + ecx*4]
mov ecx, dword [edi]
test ecx, ecx
jne 0x10bf8bc8
push 1
push esi
mov ecx, eax
call fcn.109a3720
dec esi
xor eax, eax
test esi, esi
setge al
dec eax
and esi, eax
jmp 0x10bf8bed
call fcn.10a39840
test eax, eax
je 0x10bf8be3
cmp word [eax + 0x34], 0
jne 0x10bf8be3
cmp word [eax + 0x36], 0
jne 0x10bf8be3
xor eax, eax
jmp 0x10bf8be8
mov eax, 1
cmp eax, dword [edi + 0x10]
je 0x10bf8bfb
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx + 0x30]
inc esi
cmp esi, eax
jl 0x10bf8b9f
jmp 0x10bf8c11
mov edx, dword [ebp + 8]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x14]
push edx
push eax
push ecx
call fcn.10bf66b0
add esp, 0xc
mov esi, dword [ebp + 8]
fld dword [esi + 0xb4]
lea eax, [esi + 0xa8]
mov ecx, eax
mov edx, dword [ecx]
mov edi, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov eax, dword [esi]
mov dword [esp + 0x54], ecx
test byte [eax + 0x6c], 1
je 0x10bf8c47
test byte [eax + 0x2ac], 4
jne 0x10bf8c47
fstp st(0)
fld dword [0x10e49260]
mov eax, dword [eax + 0x5c]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 0x5c]
je 0x10bf8c9d
sub esp, 0x10
mov eax, esp
mov ecx, eax
fstp dword [eax + 0xc]
mov dword [ecx], edx
mov edx, dword [esp + 0x64]
mov dword [ecx + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [ecx + 8], edx
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x34]
mov eax, dword [ebx]
xor ecx, ecx
cmp dword [edx + 0x5b8], 7
mov dword [esp + 0x2c], esp
sete cl
push ecx
push 0
push 1
push 1
push 1
mov ecx, ebx
call dword [eax + 0x24]
mov eax, dword [esi + 0xb8]
jmp 0x10bf8d22
mov eax, dword [ebp + 0x10]
xor esi, esi
test eax, eax
je 0x10bf8ccc
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x10bf8cc7
mov ecx, dword [eax]
cmp word [ecx + 0x34], 0
jne 0x10bf8cc7
cmp word [ecx + 0x36], 0
jne 0x10bf8cc7
mov eax, dword [eax + 4]
test eax, eax
jne 0x10bf8ca6
jmp 0x10bf8ccc
mov esi, 1
sub esp, 0x10
mov eax, esp
mov ecx, eax
fstp dword [eax + 0xc]
mov dword [ecx], edx
mov edx, dword [esp + 0x64]
mov dword [ecx + 4], edi
mov edi, dword [ebp + 0xc]
mov dword [ecx + 8], edx
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x34]
mov eax, dword [ebx]
xor ecx, ecx
cmp dword [edx + 0x5b8], 7
mov dword [esp + 0x2c], esp
sete cl
push ecx
push 0
push 1
push 1
push esi
mov ecx, ebx
call dword [eax + 0x24]
mov byte [esp + 0xc], 0
mov byte [esp + 0xd], 0
mov byte [esp + 0xe], 0
mov byte [esp + 0xf], 0xff
mov eax, dword [esp + 0xc]
mov edx, dword [ebx]
mov ecx, ebx
push eax
call dword [edx + 0x20]
mov esi, dword [ebp + 0x10]
mov eax, esi
test eax, eax
mov dword [esp + 0x10], 0
je 0x10bf8de9
nop
mov eax, dword [esp + 0x20]
test eax, eax
je 0x10bf8d58
mov eax, dword [esi]
cmp word [eax + 0x34], 0
jne 0x10bf8d58
cmp word [eax + 0x36], 0
je 0x10bf8d70
mov eax, dword [esi]
mov ecx, dword [esp + 0x10]
mov edx, dword [ebx]
push 0x3f800000
push eax
push ecx
mov ecx, ebx
call dword [edx + 0x28]
inc dword [esp + 0x10]
mov esi, dword [esi + 4]
test esi, esi
jne 0x10bf8d40
jmp 0x10bf8de9
sub esp, 0x10
lea eax, [esi + 0xa8]
mov ecx, esp
mov edx, eax
mov edi, dword [edx]
mov esi, ecx
mov dword [esi], edi
mov edi, dword [edx + 4]
mov dword [esi + 4], edi
mov edx, dword [edx + 8]
mov edi, dword [ebp + 0xc]
mov dword [esi + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
mov esi, dword [ecx + 0x5b8]
mov edx, dword [ebx]
xor eax, eax
cmp esi, 7
sete al
mov dword [esp + 0x2c], esp
mov ecx, ebx
push eax
push 0
push 0
push 1
push 1
call dword [edx + 0x24]
mov byte [esp + 0xc], 0xff
mov byte [esp + 0xe], 0xff
mov edx, dword [ebx]
mov byte [esp + 0xf], 0xff
mov byte [esp + 0xd], 0xff
mov eax, dword [esp + 0xc]
mov ecx, ebx
push eax
call dword [edx + 0x20]
mov esi, dword [ebp + 8]
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
je 0x10bf91ab
mov edx, dword [ebx]
lea eax, [esi + 8]
push eax
push 0
mov ecx, ebx
call dword [edx + 0x38]
mov ecx, dword [edi + 4]
mov eax, dword [ecx + 0x1c]
mov ecx, dword [0x110b962c]
test ecx, ecx
mov edi, dword [eax + 0x2c]
jne 0x10bf8e39
push 0x10e44b40
call fcn.10a9e0f0
add esp, 4
mov dword [0x110b962c], eax
call fcn.10a9dd90
mov ecx, dword [0x110b962c]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x28]
test eax, eax
je 0x10bf8e4f
cmp eax, ecx
je 0x10bf8e5a
mov eax, dword [eax + 0x2c]
test eax, eax
jne 0x10bf8e44
xor eax, eax
test ecx, ecx
sete al
test eax, eax
je 0x10bf8e62
lea eax, [edi + 0xf8]
jmp 0x10bf8e68
lea eax, [edi + 0x100]
mov eax, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x20], eax
lea eax, [esi + 0xa8]
mov edx, eax
mov edi, dword [edx]
mov dword [esp + 0x2c], esp
mov esi, ecx
mov dword [esi], edi
mov edi, dword [edx + 4]
push 0
mov dword [esi + 4], edi
mov edx, dword [edx + 8]
push 0
mov dword [esi + 8], edx
mov eax, dword [eax + 0xc]
push 0
mov dword [ecx + 0xc], eax
mov edx, dword [ebx]
push 0
push 1
mov ecx, ebx
call dword [edx + 0x24]
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 0x350]
test ch, ch
jns 0x10bf8ed4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
mov eax, dword [edx + 0x34]
test dword [eax + 0x5ac], 0x20000
je 0x10bf8ed4
mov eax, dword [esp + 0x10]
jmp 0x10bf8f71
mov ax, word [esp + 0x12]
movzx ecx, ah
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x10]
fild dword [esp + 0x24]
movzx edx, cl
fmul dword [0x10e4e9dc]
mov dword [esp + 0x24], edx
movzx ecx, ch
fild dword [esp + 0x24]
mov dword [esp + 0x24], ecx
fmul dword [0x10e4e9dc]
movzx edx, al
fstp dword [esp + 0x28]
lea eax, [esp + 0x4c]
fild dword [esp + 0x24]
mov dword [esp + 0x24], edx
push eax
lea ecx, [esp + 0x20]
fmul dword [0x10e4e9dc]
fstp dword [esp + 0x14]
fild dword [esp + 0x28]
fmul dword [0x10e4e9dc]
fstp dword [esp + 0x50]
fmul dword [0x10e4708c]
fld dword [esp + 0x2c]
fmul dword [0x10e4708c]
fld dword [esp + 0x14]
fmul dword [0x10e4708c]
fld dword [esp + 0x50]
fmul dword [0x10e4708c]
fstp dword [esp + 0x50]
fstp dword [esp + 0x54]
fstp dword [esp + 0x58]
fstp dword [esp + 0x5c]
call fcn.1097fa00
mov eax, dword [eax]
mov edx, dword [ebx]
mov ecx, ebx
push eax
call dword [edx + 0x20]
test byte [0x11205b90], 1
jne 0x10bf8fcf
or dword [0x11205b90], 1
mov byte [esp + 0xc], 0xff
mov byte [esp + 0xd], 0xff
mov byte [esp + 0xe], 0xff
mov byte [esp + 0xf], 0xff
mov ecx, dword [esp + 0xc]
push ecx
mov ecx, 0x11205b7c
mov dword [esp + 0xf8], 0
call fcn.10b87d40
push 0x10e42490
call fcn.10dde7e6
add esp, 4
mov dword [esp + 0xf4], 0xffffffff
mov eax, dword [0x11205b78]
test eax, eax
jne 0x10bf906f
push 0
push ecx
mov eax, esp
mov dword [eax], 0
mov eax, dword [0x110b8a6c]
test eax, eax
mov dword [esp + 0x24], esp
jne 0x10bf900b
push 0x10e44b40
call fcn.10a1ef70
add esp, 4
mov dword [0x110b8a6c], eax
call fcn.10a1f020
mov edx, dword [0x110b8a6c]
push 0xffffffffffffffff
push edx
call fcn.10aaaa50
mov esi, dword [0x110b84a0]
add esi, 0x2c
mov dword [0x11205b78], eax
mov edi, dword [esi + 4]
mov eax, dword [esi + 8]
lea ecx, [edi + 1]
add esp, 0x10
cmp ecx, eax
mov dword [esi + 4], ecx
jle 0x10bf9056
lea eax, [ecx + ecx*2]
cdq
and edx, 7
add eax, edx
sar eax, 3
lea eax, [eax + ecx + 0x20]
push 4
mov ecx, esi
mov dword [esi + 8], eax
call fcn.109b8e40
mov ecx, dword [esi]
mov dword [ecx + edi*4], 0x11205b78
mov ecx, dword [0x11205b78]
push 0x11205b7c
call fcn.10aa7bd0
mov eax, dword [0x11205b74]
test eax, eax
jne 0x10bf910d
push 0
push ecx
mov eax, esp
mov dword [eax], 0
mov eax, dword [0x110b8acc]
test eax, eax
mov dword [esp + 0x24], esp
jne 0x10bf90ab
push 0x10e44b40
call fcn.10a1d1a0
add esp, 4
mov dword [0x110b8acc], eax
call fcn.10a1e730
mov edx, dword [0x110b8acc]
push 0xffffffffffffffff
push edx
call fcn.10a2bdf0
mov esi, dword [0x110b84a0]
add esi, 0x2c
mov dword [0x11205b74], eax
mov edi, dword [esi + 4]
mov eax, dword [esi + 8]
lea ecx, [edi + 1]
add esp, 0x10
cmp ecx, eax
mov dword [esi + 4], ecx
jle 0x10bf90f6
lea eax, [ecx + ecx*2]
cdq
and edx, 7
add eax, edx
sar eax, 3
lea eax, [eax + ecx + 0x20]
push 4
mov ecx, esi
mov dword [esi + 8], eax
call fcn.109b8e40
mov ecx, dword [esi]
mov dword [ecx + edi*4], 0x11205b74
mov edx, dword [0x11205b78]
mov eax, dword [0x11205b74]
mov dword [eax + 0x40], edx
mov eax, dword [0x11205b74]
mov edx, dword [ebx]
push 0
push 0
push 0
push eax
mov ecx, ebx
call dword [edx + 0x3c]
mov esi, dword [esp + 0x14]
mov edx, dword [ebx]
push 1
lea eax, [esp + 0x1c]
lea ecx, [esi + 0x64]
push eax
mov dword [esp + 0x20], ecx
push 0
mov ecx, ebx
call dword [edx + 0x4c]
mov edx, dword [ebx]
push 0
lea eax, [esi + 0xe0]
push eax
mov ecx, ebx
call dword [edx + 0x54]
mov eax, dword [esi + 0xe8]
mov ecx, dword [esi + 0x6c]
mov edi, dword [ebx]
cdq
dec ecx
push ecx
push 0
sub eax, edx
sar eax, 1
push eax
push 0
push 4
mov ecx, ebx
call dword [edi + 0x5c]
mov ecx, dword [esi + 0x5c]
xor eax, eax
test ecx, ecx
jle 0x10bfa4cc
xor ecx, ecx
mov edi, esi
lea ebx, [ebx]
mov edi, dword [edi + 0x58]
movzx edi, word [ecx + edi + 0xe]
mov edx, dword [0x110bb4b0]
mov esi, dword [0x110bb6b8]
add dword [edx + esi*4], edi
mov edi, dword [esp + 0x14]
mov edx, dword [edi + 0x5c]
inc eax
add ecx, 0x14
cmp eax, edx
jl 0x10bf9180
jmp 0x10bfa4cc
mov ecx, dword [esi]
mov eax, dword [ecx + 0x5c]
mov edx, dword [esp + 0x14]
cmp eax, dword [edx + 0x5c]
mov ecx, ebx
jne 0x10bf9b32
mov eax, dword [ebx]
push 0
call dword [eax + 0x1c]
mov dword [esp + 0x28], 0
mov edi, edi
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x5c]
test eax, eax
mov dword [esp + 0x30], 0
jle 0x10bf9b1b
mov dword [esp + 0xc], 0
nop
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov edx, dword [esp + 0x30]
mov eax, dword [ecx + 0x58]
lea eax, [eax + edx*8]
cmp dword [eax + 4], 0xffffffff
mov dword [esp + 0x18], eax
je 0x10bf9af8
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x1bc]
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov edx, dword [edx + 0x1118]
lea eax, [eax + eax*8]
lea edi, [edx + eax*8]
mov edx, dword [esp + 0x30]
mov eax, dword [ecx]
push edx
call dword [eax + 0xb0]
mov esi, eax
test esi, esi
jne 0x10bf92ca
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x30]
cmp ecx, dword [eax + 0x100]
jge 0x10bf9260
mov edx, dword [eax + 0xfc]
mov eax, dword [esp + 0xc]
mov esi, dword [eax + edx]
test esi, esi
jne 0x10bf92ca
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bf9287
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx]
mov esi, dword [ecx + 0x4f0]
mov dword [esp + 0x24], ecx
call dword [edx + 0x80]
cmp esi, eax
je 0x10bf92b4
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x4ec]
push ecx
call fcn.10939b80
mov esi, dword [eax + 0x30]
add esp, 4
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x88]
test eax, eax
je 0x10bf9352
mov eax, dword [ebp + 0xc]
add eax, 0x194
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0xd0], eax
mov eax, dword [ebp + 8]
fld dword [eax + 0xb0]
mov dword [esp + 0xcc], edx
fsub dword [esp + 0xd0]
mov dword [esp + 0xc8], ecx
fld dword [eax + 0xac]
mov dword [esp + 0x10], 1
fsub dword [esp + 0xcc]
fld dword [eax + 0xa8]
fsub dword [esp + 0xc8]
fld st(0)
fmul st(1)
fld st(2)
fmul st(3)
faddp st(1)
fld st(3)
fmul st(4)
faddp st(1)
fcomp dword [0x10eaafe0]
fstp st(0)
fnstsw ax
fstp st(0)
test ah, 5
fstp st(0)
jnp 0x10bf935a
mov dword [esp + 0x10], 0
mov ecx, dword [esp + 0x34]
push esi
push ecx
call fcn.10bf5970
mov edx, dword [ebx]
add esp, 8
push 0
push 0
push 0
push eax
mov ecx, ebx
call dword [edx + 0x3c]
mov ecx, dword [ebp + 0xc]
lea eax, [edi + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [ecx + 4]
mov ecx, dword [eax + 0x168]
test ecx, ecx
jne 0x10bf939e
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax + 0x60]
test ecx, ecx
je 0x10bf939e
mov esi, 1
jmp 0x10bf93a0
xor esi, esi
mov edx, dword [ebx]
push 1
lea eax, [esp + 0x24]
push eax
push 0
mov ecx, ebx
call dword [edx + 0x4c]
test eax, eax
je 0x10bf93eb
test esi, esi
je 0x10bf93eb
mov esi, dword [ebp + 8]
mov ecx, dword [esi]
mov ecx, dword [ecx + 0x40]
push eax
push 0
push 0
call fcn.109c3600
mov ecx, dword [esi]
push eax
push 0
push 0
call fcn.109c3600
mov edx, dword [0x10f43370]
push eax
push str.Uploading_Batched_StaticMesh:_Actor__s__StaticMesh__s___Size__i_
push edx
call fcn.109baf50
add esp, 0x14
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 4]
mov edx, dword [edi + 8]
lea ecx, [eax + eax*4]
mov eax, dword [edx + ecx*4 + 0xc]
test eax, eax
lea esi, [edx + ecx*4]
mov dword [esp + 0x18], esi
jle 0x10bf9af8
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x10bf9464
mov eax, dword [esp + 0x10]
test eax, eax
jne 0x10bf9af8
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6ac]
inc dword [eax + ecx*4]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6b0]
mov edx, dword [esi + 0xc]
add dword [eax + ecx*4], edx
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6b8]
mov edx, dword [esi + 0xc]
add dword [eax + ecx*4], edx
mov eax, dword [ebx]
push 0
add edi, 0x34
push edi
mov ecx, ebx
call dword [eax + 0x54]
mov eax, dword [esi + 8]
jmp 0x10bf9631
cmp eax, 1
jne 0x10bf9af8
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10bf9af8
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6a0]
inc dword [eax + ecx*4]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6a4]
mov edi, dword [eax + ecx*4]
mov edx, dword [esi + 0xc]
add edi, edx
mov dword [eax + ecx*4], edi
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6b8]
mov edx, dword [esi + 0xc]
add dword [eax + ecx*4], edx
mov eax, dword [ebp + 8]
fld dword [eax + 0x88]
fcomp dword [0x10e4500c]
fnstsw ax
test ah, 5
jp 0x10bf94cb
mov ecx, 1
jmp 0x10bf94cd
xor ecx, ecx
mov eax, dword [ebp + 0xc]
fld dword [eax + 0x19c]
mov edx, dword [ebp + 8]
fld dword [eax + 0x198]
mov eax, dword [eax + 0x194]
add edx, 0x48
fstp dword [esp + 0x7c]
mov dword [esp + 0x24], edx
lea edx, [esp + 0x78]
fstp dword [esp + 0x80]
mov dword [esp + 0x78], eax
mov dword [esp + 0x84], 0x3f800000
mov dword [esp + 0x10], edx
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
lea edi, [esp + 0x4c]
fld dword [esi]
fmul dword [edx]
fld dword [esi]
fmul dword [edx + 4]
fld dword [esi]
fmul dword [edx + 8]
fld dword [esi]
fmul dword [edx + 0xc]
fld dword [esi + 4]
fmul dword [edx + 0x10]
fld dword [esi + 4]
fmul dword [edx + 0x14]
fld dword [esi + 4]
fmul dword [edx + 0x18]
fld dword [esi + 4]
fmul dword [edx + 0x1c]
fxch st(3)
faddp st(7)
faddp st(4)
faddp st(4)
faddp st(1)
fld dword [esi + 8]
fmul dword [edx + 0x20]
fld dword [esi + 8]
fmul dword [edx + 0x24]
fld dword [esi + 8]
fmul dword [edx + 0x28]
fld dword [esi + 8]
fmul dword [edx + 0x2c]
fxch st(3)
faddp st(7)
faddp st(4)
faddp st(4)
faddp st(1)
fld dword [esi + 0xc]
fmul dword [edx + 0x30]
fld dword [esi + 0xc]
fmul dword [edx + 0x34]
fld dword [esi + 0xc]
fmul dword [edx + 0x38]
fld dword [esi + 0xc]
fmul dword [edx + 0x3c]
fxch st(3)
faddp st(7)
faddp st(4)
faddp st(4)
faddp st(1)
fxch st(3)
fstp dword [edi]
fxch st(1)
fstp dword [edi + 4]
fstp dword [edi + 8]
fstp dword [edi + 0xc]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ax, word [eax + 0x10]
mov dword [esp + 0x8c], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 0x90], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x94], edx
mov edx, dword [esp + 0x50]
mov dword [esp + 0x98], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x88], 0x10eaaec8
mov dword [esp + 0x9c], edx
mov word [esp + 0xb0], ax
mov dword [esp + 0xb4], ecx
mov eax, dword [ebx]
push 0
lea ecx, [esp + 0x8c]
push ecx
mov ecx, ebx
mov dword [esp + 0xfc], 1
call dword [eax + 0x58]
mov esi, dword [esp + 0x18]
mov dword [esp + 0xf4], 0xffffffff
mov dword [esp + 0x88], 0x10e5e8a4
movzx ecx, word [esi + 0x12]
mov edx, dword [ebx]
push ecx
movzx ecx, word [esi + 0x10]
push ecx
mov ecx, dword [esi + 0xc]
push ecx
push eax
push 0
mov ecx, ebx
mov dword [esp + 0x24], eax
call dword [edx + 0x5c]
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 0x1a0]
mov ecx, dword [eax + 0x23c]
test ecx, ecx
mov edi, dword [ebp + 0xc]
mov dword [esp + 0x18], eax
je 0x10bf98c9
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bf98c9
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 0x34]
test dword [edx + 0x5ac], 0x20000000
je 0x10bf98c9
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov eax, dword [0x10fab80c]
mov edx, dword [ebx]
mov ecx, ebx
mov dword [esp + 0x1c], eax
call dword [edx]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x23c]
xor edi, edi
test ecx, ecx
mov dword [esp + 0x24], edi
jle 0x10bf9892
lea esp, [esp]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x238]
mov edx, dword [ebp + 8]
mov ecx, dword [ecx + edi*4]
add eax, 0x238
mov eax, dword [edx]
mov edx, dword [eax + 0x94]
fld dword [edx + 0x454]
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x40], ecx
call fcn.10a29760
test eax, eax
jne 0x10bf971e
mov ecx, dword [esp + 0x18]
push 1
push edi
add ecx, 0x238
call fcn.10a33440
dec edi
jmp 0x10bf987b
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x4c], esp
push 0
mov ecx, eax
mov dword [esp + 0x80], 0
mov edx, dword [esp + 0x80]
mov dword [ecx], edx
push 0
mov dword [esp + 0x88], 0
mov edx, dword [esp + 0x88]
mov dword [ecx + 4], edx
push 0
mov dword [esp + 0x90], 0
mov edx, dword [esp + 0x90]
mov dword [ecx + 8], edx
push 0
mov dword [eax + 0xc], 0
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0x24]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edi, dword [esp + 0x30]
mov edx, dword [ecx]
push edi
call dword [edx + 0xb0]
test eax, eax
jne 0x10bf9820
mov eax, dword [esp + 0x14]
cmp edi, dword [eax + 0x100]
jge 0x10bf97b6
mov eax, dword [eax + 0xfc]
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + eax]
test eax, eax
jne 0x10bf9820
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bf97dd
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx]
mov edi, dword [ecx + 0x4f0]
mov dword [esp + 0x3c], ecx
call dword [edx + 0x80]
cmp edi, eax
je 0x10bf980a
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 0x4ec]
push ecx
call fcn.10939b80
mov eax, dword [eax + 0x30]
add esp, 4
mov edx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x38]
mov edi, dword [ebx]
push 0
push 0
push 0
push eax
push edx
call fcn.10a9a9b0
push eax
mov ecx, ebx
call dword [edi + 0x3c]
movzx ecx, word [esi + 0x12]
movzx edx, word [esi + 0x10]
mov eax, dword [ebx]
push ecx
mov ecx, dword [esi + 0xc]
push edx
mov edx, dword [esp + 0x18]
push ecx
push edx
push 0
mov ecx, ebx
call dword [eax + 0x5c]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb600]
inc dword [eax + ecx*4]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb604]
mov edx, dword [esi + 0xc]
add dword [eax + ecx*4], edx
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x23c]
inc edi
cmp edi, ecx
mov dword [esp + 0x24], edi
jl 0x10bf96d0
mov edx, dword [ebx]
mov ecx, ebx
call dword [edx + 4]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb5f8]
lea ecx, [eax + ecx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edx, dword [0x10fab80c]
mov edi, dword [esp + 0x1c]
mov eax, dword [ecx]
sub edx, edi
mov edi, dword [ebp + 0xc]
add eax, edx
mov dword [ecx], eax
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bf9af8
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
test dword [ecx + 0x5ac], 0x20000000
je 0x10bf9af8
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edx, dword [0x10fab80c]
mov eax, dword [ebx]
mov ecx, ebx
mov dword [esp + 0x38], edx
call dword [eax]
mov edi, dword [ebp + 0x14]
mov eax, edi
test eax, eax
mov dword [esp + 0x18], edi
je 0x10bf9ac4
lea ecx, [ecx]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov edx, dword [eax + 0x94]
mov ecx, dword [edi]
fld dword [edx + 0x454]
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x2c], ecx
call fcn.10a29760
test eax, eax
je 0x10bf9ab5
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
test byte [eax + 0x398], 2
je 0x10bf996a
mov eax, dword [eax + 0x44]
test eax, eax
je 0x10bf996a
cmp eax, dword [esp + 0x34]
je 0x10bf9ab5
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x2c], esp
push 0
mov ecx, eax
mov dword [esp + 0x54], 0
mov edx, dword [esp + 0x54]
mov dword [ecx], edx
push 0
mov dword [esp + 0x5c], 0
mov edx, dword [esp + 0x5c]
mov dword [ecx + 4], edx
push 0
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0x64]
mov dword [ecx + 8], edx
push 0
mov dword [eax + 0xc], 0
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0x24]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edi, dword [esp + 0x30]
mov edx, dword [ecx]
push edi
call dword [edx + 0xb0]
test eax, eax
jne 0x10bf9a5a
mov eax, dword [esp + 0x14]
cmp edi, dword [eax + 0x100]
jge 0x10bf99f0
mov eax, dword [eax + 0xfc]
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + eax]
test eax, eax
jne 0x10bf9a5a
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bf9a17
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx]
mov edi, dword [ecx + 0x4f0]
mov dword [esp + 0x1c], ecx
call dword [edx + 0x80]
cmp edi, eax
je 0x10bf9a44
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x4ec]
push ecx
call fcn.10939b80
mov eax, dword [eax + 0x30]
add esp, 4
mov edx, dword [ebp + 0xc]
mov ecx, dword [esp + 0x24]
mov edi, dword [ebx]
push 0
push 0
push 0
push eax
push edx
call fcn.10a9a9b0
push eax
mov ecx, ebx
call dword [edi + 0x3c]
movzx ecx, word [esi + 0x12]
movzx edx, word [esi + 0x10]
mov eax, dword [ebx]
push ecx
mov ecx, dword [esi + 0xc]
push edx
mov edx, dword [esp + 0x18]
push ecx
push edx
push 0
mov ecx, ebx
call dword [eax + 0x5c]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb600]
inc dword [eax + ecx*4]
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb604]
mov edx, dword [esi + 0xc]
add dword [eax + ecx*4], edx
mov edi, dword [esp + 0x18]
mov edi, dword [edi + 4]
test edi, edi
mov dword [esp + 0x18], edi
jne 0x10bf9920
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov ecx, dword [0x110bb4b0]
mov edx, dword [0x110bb5f8]
lea ecx, [ecx + edx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov eax, dword [0x10fab80c]
mov esi, dword [esp + 0x38]
mov edx, dword [ecx]
sub eax, esi
add edx, eax
mov dword [ecx], edx
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x5c]
inc eax
add esi, 0xc
cmp eax, edx
mov dword [esp + 0x30], eax
mov dword [esp + 0xc], esi
jl 0x10bf91f0
mov eax, dword [esp + 0x28]
inc eax
cmp eax, 2
mov dword [esp + 0x28], eax
jl 0x10bf91d0
jmp 0x10bfa4cc
mov eax, dword [ebp + 8]
mov edx, dword [ebx]
add eax, 8
push eax
push 0
call dword [edx + 0x38]
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x100]
xor esi, esi
test eax, eax
mov byte [esp + 0x2f], 0
jle 0x10bf9c2d
mov dword [esp + 0x28], esi
lea ecx, [ecx]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ecx]
push esi
call dword [edx + 0xb0]
test eax, eax
jne 0x10bf9bff
cmp esi, dword [edi + 0x100]
jge 0x10bf9b8f
mov eax, dword [edi + 0xfc]
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx + eax]
test eax, eax
jne 0x10bf9bff
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bf9bb6
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx + 0x4f0]
mov eax, dword [ecx]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x1c], edx
call dword [eax + 0x80]
cmp dword [esp + 0x1c], eax
je 0x10bf9be9
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x4ec]
push edx
call fcn.10939b80
mov eax, dword [eax + 0x30]
add esp, 4
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x90]
mov cl, byte [esp + 0x2f]
or cl, al
mov eax, dword [edi + 0x100]
mov byte [esp + 0x2f], cl
mov ecx, dword [esp + 0x28]
inc esi
add ecx, 0xc
cmp esi, eax
mov dword [esp + 0x28], ecx
jl 0x10bf9b60
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x2a0]
test eax, eax
je 0x10bf9c41
or byte [esp + 0x2f], 2
mov eax, dword [edi + 0x12c]
test eax, eax
lea edx, [edi + 0x64]
mov dword [esp + 0x88], edx
mov dword [esp + 0xc], 2
je 0x10bf9c6c
lea eax, [edi + 0x80]
mov dword [esp + 0x8c], eax
jmp 0x10bf9c79
lea ecx, [edi + 0x9c]
mov dword [esp + 0x8c], ecx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x10bf9c93
add eax, 0x38
mov dword [esp + 0x90], eax
mov dword [esp + 0xc], 3
mov ecx, dword [edi + 0xbc]
or al, 0xff
xor esi, esi
test ecx, ecx
mov dword [esp + 0x1c], ecx
jle 0x10bf9cd9
xor edi, edi
mov dl, byte [esp + 0x2f]
test dl, al
je 0x10bf9ccf
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0xb8]
mov ecx, dword [esp + 0xc]
add edx, edi
mov dword [esp + ecx*4 + 0x88], edx
inc ecx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x1c]
inc esi
add edi, 0x20
shl al, 1
cmp esi, ecx
jl 0x10bf9ca7
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x168]
test ecx, ecx
jne 0x10bf9cfa
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax + 0x60]
test ecx, ecx
je 0x10bf9cfa
mov esi, 1
jmp 0x10bf9cfc
xor esi, esi
mov eax, dword [esp + 0xc]
mov edx, dword [ebx]
push eax
lea ecx, [esp + 0x8c]
push ecx
push 0
mov ecx, ebx
call dword [edx + 0x4c]
test eax, eax
je 0x10bf9d4c
test esi, esi
je 0x10bf9d4c
mov esi, dword [ebp + 8]
mov edx, dword [esi]
mov ecx, dword [edx + 0x40]
push eax
push 0
push 0
call fcn.109c3600
mov ecx, dword [esi]
push eax
push 0
push 0
call fcn.109c3600
push eax
mov eax, dword [0x10f43370]
push str.Uploading_StaticMesh:_Actor__s__StaticMesh__s___Size__i_
push eax
call fcn.109baf50
add esp, 0x14
mov eax, dword [esp + 0x14]
mov edx, dword [ebx]
add eax, 0xc4
push 0
push eax
mov ecx, ebx
mov dword [esp + 0x38], eax
call dword [edx + 0x54]
mov dword [esp + 0x18], 0
jmp 0x10bf9d70
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x5c]
xor edi, edi
test ecx, ecx
jle 0x10bf9f14
mov dword [esp + 0x10], edi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ecx]
push edi
call dword [edx + 0xb0]
mov esi, eax
test esi, esi
jne 0x10bf9e24
mov eax, dword [esp + 0x14]
cmp edi, dword [eax + 0x100]
jge 0x10bf9dba
mov eax, dword [eax + 0xfc]
mov ecx, dword [esp + 0x10]
mov esi, dword [ecx + eax]
test esi, esi
jne 0x10bf9e24
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bf9de1
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx]
mov esi, dword [ecx + 0x4f0]
mov dword [esp + 0x1c], ecx
call dword [edx + 0x80]
cmp esi, eax
je 0x10bf9e0e
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x4ec]
push ecx
call fcn.10939b80
mov esi, dword [eax + 0x30]
add esp, 4
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 0x88]
test eax, eax
je 0x10bf9e9a
mov eax, dword [ebp + 0xc]
add eax, 0x194
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x54], eax
mov eax, dword [ebp + 8]
fld dword [eax + 0xb0]
mov dword [esp + 0x50], edx
fsub dword [esp + 0x54]
mov dword [esp + 0x4c], ecx
fld dword [eax + 0xac]
mov dword [esp + 0x28], 1
fsub dword [esp + 0x50]
fld dword [eax + 0xa8]
fsub dword [esp + 0x4c]
fld st(0)
fmul st(1)
fld st(2)
fmul st(3)
faddp st(1)
fld st(3)
fmul st(4)
faddp st(1)
fcomp dword [0x10eaafe0]
fstp st(0)
fnstsw ax
fstp st(0)
test ah, 5
fstp st(0)
jnp 0x10bf9ea2
mov dword [esp + 0x28], 0
mov ecx, dword [esp + 0x34]
push esi
push ecx
call fcn.10bf5970
mov ecx, dword [esp + 0x20]
add esp, 8
test ecx, ecx
jne 0x10bf9ed2
mov ecx, dword [esp + 0x28]
test ecx, ecx
jne 0x10bf9ef9
mov edx, dword [esp + 0x14]
push ebx
push eax
push edi
push edx
call fcn.10bf50e0
add esp, 0x10
jmp 0x10bf9ef9
cmp dword [esp + 0x18], 1
jne 0x10bf9ef9
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x10bf9ef9
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
push ebx
push eax
mov eax, dword [esp + 0x1c]
push edi
push eax
push ecx
push edx
call fcn.10bf5180
add esp, 0x18
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x5c]
inc edi
add edx, 0xc
cmp edi, ecx
mov dword [esp + 0x10], edx
jl 0x10bf9d85
mov eax, dword [esp + 0x18]
inc eax
cmp eax, 2
mov dword [esp + 0x18], eax
jl 0x10bf9d70
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ecx]
call dword [edx + 0x1a0]
mov edi, dword [ebp + 0xc]
mov esi, eax
mov eax, dword [esi + 0x23c]
test eax, eax
mov dword [esp + 0x24], esi
je 0x10bfa250
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bfa250
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
test dword [ecx + 0x5ac], 0x20000000
je 0x10bfa250
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [0x10fab80c]
mov eax, dword [ebx]
push 0
push ecx
mov ecx, ebx
mov dword [esp + 0x28], edx
call dword [eax + 0x54]
mov eax, dword [esi + 0x23c]
test eax, eax
mov dword [esp + 0x18], 0
jle 0x10bfa220
mov dword [esp + 0xc], 1
jmp 0x10bf9fc0
mov esi, dword [esp + 0x24]
mov edx, dword [esi + 0x238]
mov edi, dword [esp + 0x18]
mov ecx, dword [edx + edi*4]
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov eax, dword [edx + 0x94]
fld dword [eax + 0x454]
add esi, 0x238
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x44], ecx
call fcn.10a29760
test eax, eax
jne 0x10bfa071
test edi, edi
jge 0x10bfa016
push 0x248
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.Index_0
call fcn.109bb190
add esp, 0xc
cmp edi, dword [esi + 4]
jle 0x10bfa032
push 0x249
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.Index_ArrayNum
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0xc]
cmp ecx, dword [esi + 4]
jle 0x10bfa052
push 0x24a
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.IndexCount_ArrayNum
call fcn.109bb190
add esp, 0xc
push 4
push 1
push edi
mov ecx, esi
call fcn.109b8e70
mov eax, dword [esp + 0xc]
dec edi
dec eax
mov dword [esp + 0x18], edi
mov dword [esp + 0xc], eax
jmp 0x10bfa1fc
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x5c]
xor esi, esi
test eax, eax
jle 0x10bfa1fc
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov eax, edx
mov edi, edi
mov edi, dword [eax + 0x58]
add edi, dword [esp + 0x28]
cmp word [edi + 0x10], 0
jbe 0x10bfa1da
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x2c], esp
push 0
mov ecx, eax
mov dword [esp + 0x54], 0
mov edx, dword [esp + 0x54]
mov dword [ecx], edx
push 0
mov dword [esp + 0x5c], 0
mov edx, dword [esp + 0x5c]
mov dword [ecx + 4], edx
push 0
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0x64]
mov dword [ecx + 8], edx
push 0
mov dword [eax + 0xc], 0
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0x24]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ecx]
push esi
call dword [edx + 0xb0]
test eax, eax
jne 0x10bfa194
mov eax, dword [esp + 0x14]
cmp esi, dword [eax + 0x100]
jge 0x10bfa124
mov eax, dword [eax + 0xfc]
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + eax]
test eax, eax
jne 0x10bfa194
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bfa14b
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx + 0x4f0]
mov eax, dword [ecx]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x1c], edx
call dword [eax + 0x80]
cmp dword [esp + 0x1c], eax
je 0x10bfa17e
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x4ec]
push edx
call fcn.10939b80
mov eax, dword [eax + 0x30]
add esp, 4
mov ecx, dword [esp + 0x3c]
push ebx
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.10a9a9b0
mov ecx, dword [esp + 0x18]
push eax
push esi
push ecx
call fcn.10bf50e0
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb600]
mov edx, dword [eax + ecx*4]
add esp, 0x10
inc edx
mov dword [eax + ecx*4], edx
mov eax, dword [0x110bb4b0]
movzx edx, word [edi + 0x10]
mov ecx, dword [0x110bb604]
add dword [eax + ecx*4], edx
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
mov ecx, dword [eax + 0x5c]
inc esi
add edi, 0x14
add edx, 0xc
cmp esi, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x10], edx
jl 0x10bfa090
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx + 0x23c]
inc eax
inc esi
cmp eax, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], esi
jl 0x10bf9fc0
mov edx, dword [0x110bb4b0]
mov eax, dword [0x110bb5f8]
lea ecx, [edx + eax*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edx, dword [0x10fab80c]
mov esi, dword [esp + 0x20]
mov eax, dword [ecx]
mov edi, dword [ebp + 0xc]
sub edx, esi
add eax, edx
mov dword [ecx], eax
mov ecx, dword [edi + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bfa4cc
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
test dword [ecx + 0x5ac], 0x20000000
je 0x10bfa4cc
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov ecx, dword [esp + 0x30]
mov edx, dword [0x10fab80c]
mov eax, dword [ebx]
push 0
push ecx
mov ecx, ebx
mov dword [esp + 0x44], edx
call dword [eax + 0x54]
mov eax, dword [ebp + 0x14]
test eax, eax
mov dword [esp + 0x18], eax
je 0x10bfa49f
lea ebx, [ebx]
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov eax, dword [edx + 0x94]
fld dword [eax + 0x454]
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x2c], ecx
call fcn.10a29760
test eax, eax
je 0x10bfa48c
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx]
test byte [eax + 0x398], 2
je 0x10bfa2fe
mov eax, dword [eax + 0x44]
test eax, eax
je 0x10bfa2fe
cmp eax, dword [esp + 0x34]
je 0x10bfa48c
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x5c]
xor esi, esi
test eax, eax
jle 0x10bfa48c
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x28], eax
mov eax, edx
jmp 0x10bfa320
mov edi, dword [eax + 0x58]
add edi, dword [esp + 0x28]
cmp word [edi + 0x10], 0
jbe 0x10bfa46a
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x2c], esp
push 0
mov ecx, eax
mov dword [esp + 0x54], 0
mov edx, dword [esp + 0x54]
mov dword [ecx], edx
push 0
mov dword [esp + 0x5c], 0
mov edx, dword [esp + 0x5c]
mov dword [ecx + 4], edx
push 0
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0x64]
mov dword [ecx + 8], edx
push 0
mov dword [eax + 0xc], 0
mov eax, dword [ebx]
push 0
mov ecx, ebx
call dword [eax + 0x24]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
mov edx, dword [ecx]
push esi
call dword [edx + 0xb0]
test eax, eax
jne 0x10bfa424
mov eax, dword [esp + 0x14]
cmp esi, dword [eax + 0x100]
jge 0x10bfa3b4
mov eax, dword [eax + 0xfc]
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + eax]
test eax, eax
jne 0x10bfa424
mov ecx, dword [0x110b8a64]
test ecx, ecx
jne 0x10bfa3db
push 0x10e44b40
call fcn.10a196a0
add esp, 4
mov dword [0x110b8a64], eax
call fcn.10a19760
mov ecx, dword [0x110b8a64]
mov edx, dword [ecx + 0x4f0]
mov eax, dword [ecx]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x1c], edx
call dword [eax + 0x80]
cmp dword [esp + 0x1c], eax
je 0x10bfa40e
push 0x206
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnClass.h
push str.Defaults.Num__GetPropertiesSize__
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0x38]
mov edx, dword [ecx + 0x4ec]
push edx
call fcn.10939b80
mov eax, dword [eax + 0x30]
add esp, 4
mov ecx, dword [esp + 0x24]
push ebx
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.10a9a9b0
mov ecx, dword [esp + 0x18]
push eax
push esi
push ecx
call fcn.10bf50e0
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb600]
mov edx, dword [eax + ecx*4]
add esp, 0x10
inc edx
mov dword [eax + ecx*4], edx
mov eax, dword [0x110bb4b0]
movzx edx, word [edi + 0x10]
mov ecx, dword [0x110bb604]
add dword [eax + ecx*4], edx
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
mov ecx, dword [eax + 0x5c]
inc esi
add edi, 0x14
add edx, 0xc
cmp esi, ecx
mov dword [esp + 0x28], edi
mov dword [esp + 0x10], edx
jl 0x10bfa320
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 4]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x10bfa2b0
mov ecx, dword [0x110bb4b0]
mov edx, dword [0x110bb5f8]
lea ecx, [ecx + edx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov eax, dword [0x10fab80c]
mov esi, dword [esp + 0x3c]
mov edx, dword [ecx]
sub eax, esi
add edx, eax
mov dword [ecx], edx
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 4]
call fcn.10b278b0
test eax, eax
jne 0x10bfa864
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
mov ecx, dword [eax + 0x34]
test dword [ecx + 0x5ac], 0x20000000
je 0x10bfa864
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x248]
test eax, eax
mov dword [esp + 0x10], 0
jle 0x10bfa864
mov eax, edx
add eax, 0x244
mov dword [esp + 0xc], eax
mov dword [esp + 0x20], 1
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx]
mov eax, dword [esp + 0x10]
mov edi, dword [edx + eax*4]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x94]
fld dword [eax + 0x454]
mov ecx, dword [edi]
sub esp, 8
fstp qword [esp]
mov dword [esp + 0x20], edi
call fcn.10a29760
test eax, eax
jne 0x10bfa62f
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx]
mov edi, dword [esp + 0x10]
mov esi, dword [edx + edi*4]
test esi, esi
mov dword [esp + 0x1c], esi
je 0x10bfa5b3
lea ecx, [esi + 0x20]
mov dword [esp + 0xf4], 3
call fcn.109148d0
lea ecx, [esi + 0x14]
mov byte [esp + 0xf4], 2
call fcn.10a2bb50
lea ecx, [esi + 8]
mov dword [esp + 0xf4], 0xffffffff
call fcn.10a2baa0
mov ecx, dword [0x10f43380]
mov eax, dword [ecx]
push esi
call dword [eax + 8]
test edi, edi
jge 0x10bfa5ce
push 0x248
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.Index_0
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0xc]
cmp edi, dword [ecx + 4]
jle 0x10bfa5ee
push 0x249
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.Index_ArrayNum
call fcn.109bb190
add esp, 0xc
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x20]
cmp eax, dword [edx + 4]
jle 0x10bfa612
push 0x24a
push str.d:kingsoft_svn_foxprogram_branchescambodia_tftenginecoreincUnTemplate.h
push str.IndexCount_ArrayNum
call fcn.109bb190
add esp, 0xc
mov ecx, dword [esp + 0xc]
push 4
push 1
push edi
call fcn.109b8e70
mov eax, dword [esp + 0x20]
dec edi
dec eax
mov dword [esp + 0x20], eax
jmp 0x10bfa844
mov ecx, dword [0x112052d8]
test ecx, ecx
mov dword [esp + 0x30], 0
je 0x10bfa68f
mov edx, dword [edi]
mov eax, dword [ecx]
mov esi, dword [edx + 0x24]
cmp dword [eax + 0x10], esi
jne 0x10bfa67c
movzx esi, byte [edx + 0x2d]
cmp dword [eax + 0x18], esi
jne 0x10bfa67c
movzx esi, byte [edx + 0x2c]
cmp dword [eax + 0x14], esi
jne 0x10bfa67c
mov esi, dword [eax + 0xc]
cmp esi, dword [edi + 4]
jne 0x10bfa67c
mov esi, dword [eax + 0x1c]
cmp esi, dword [edi + 0x2c]
jne 0x10bfa67c
cmp dword [eax + 0x24], 0x186a0
jge 0x10bfa67c
mov dword [esp + 0x30], eax
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x10bfa643
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x10bfa7b6
mov ecx, dword [0x110bb890]
mov edx, dword [0x110bb894]
mov esi, 7
lea eax, [ecx + esi]
and eax, 0xfffffff8
lea ecx, [eax + 0x2c]
cmp ecx, edx
mov dword [0x110bb890], ecx
jbe 0x10bfa6d4
push 0x34
mov ecx, 0x110bb890
call fcn.109fe4d0
mov edx, dword [0x110bb890]
lea eax, [edx + esi]
and eax, 0xfffffff8
lea ecx, [eax + 0x2c]
mov dword [0x110bb890], ecx
test eax, eax
je 0x10bfa74c
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0x2c]
mov ecx, dword [ecx]
movzx edx, byte [ecx + 0x2d]
mov dword [esp + 0x38], edx
movzx edx, byte [ecx + 0x2c]
mov ecx, dword [ecx + 0x24]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x18]
mov edx, dword [edx + 4]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0x18], ecx
xor ecx, ecx
cmp edx, ecx
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], edx
mov dword [eax + 0x1c], edi
mov dword [eax + 0x24], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x20], 0x1c
je 0x10bfa740
mov dword [eax + 0x20], 0x24
mov ecx, dword [0x110bb890]
mov dword [esp + 0x30], eax
jmp 0x10bfa754
mov dword [esp + 0x30], 0
mov edx, dword [0x110bb894]
lea eax, [ecx + esi]
and eax, 0xfffffff8
lea ecx, [eax + 8]
cmp ecx, edx
mov dword [0x110bb890], ecx
jbe 0x10bfa78e
push 0x10
mov ecx, 0x110bb890
call fcn.109fe4d0
mov edx, dword [0x110bb890]
lea eax, [edx + esi]
and eax, 0xfffffff8
lea ecx, [eax + 8]
mov dword [0x110bb890], ecx
test eax, eax
mov edi, dword [esp + 0x18]
je 0x10bfa7ac
mov ecx, dword [0x112052d8]
mov edx, dword [esp + 0x30]
mov dword [eax], edx
mov dword [eax + 4], ecx
mov dword [0x112052d8], eax
jmp 0x10bfa7b6
mov dword [0x112052d8], 0
mov eax, dword [0x110bb890]
mov edx, dword [0x110bb894]
mov esi, 7
add eax, esi
and eax, 0xfffffff8
lea ecx, [eax + 0x10]
cmp ecx, edx
mov dword [0x110bb890], ecx
jbe 0x10bfa7f9
push 0x18
mov ecx, 0x110bb890
call fcn.109fe4d0
mov ecx, dword [0x110bb890]
lea eax, [ecx + esi]
and eax, 0xfffffff8
lea edx, [eax + 0x10]
mov dword [0x110bb890], edx
test eax, eax
je 0x10bfa816
mov dword [eax], 0x10e960d4
mov dword [eax + 0xc], edi
mov ecx, dword [edi + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [edi + 0x24]
mov dword [eax + 4], ecx
mov esi, eax
jmp 0x10bfa818
xor esi, esi
mov edi, dword [esp + 0x30]
push esi
mov ecx, edi
call fcn.10ac0520
mov eax, dword [esi + 8]
imul eax, dword [edi + 0x20]
mov ecx, dword [edi + 0x24]
add ecx, eax
mov eax, dword [edi + 0x28]
mov dword [edi + 0x24], ecx
mov ecx, dword [esi + 4]
shl ecx, 1
add eax, ecx
mov dword [edi + 0x28], eax
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 0x248]
inc edi
inc ecx
cmp edi, eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x20], ecx
jl 0x10bfa525
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x11c]
test ecx, ecx
je 0x10bfa975
push 1
push ebx
lea ecx, [esp + 0x54]
call fcn.10b87f70
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x6c]
xor esi, esi
test eax, eax
mov dword [esp + 0xf4], 4
jle 0x10bfa95e
mov byte [esp + 0x10], 0
mov byte [esp + 0x11], 0xff
mov byte [esp + 0x12], 0xff
mov byte [esp + 0x13], 0xff
xor edi, edi
jmp 0x10bfa8c0
mov edx, dword [esp + 0x14]
mov eax, dword [edx + 0x68]
fld dword [eax + edi + 0x14]
add eax, edi
fmul dword [0x10e7ecd4]
mov ecx, dword [esp + 0x10]
fld dword [eax + 0x10]
push ecx
fmul dword [0x10e7ecd4]
sub esp, 0xc
mov edx, esp
sub esp, 0xc
fstp dword [esp + 0x38]
fld dword [eax + 0xc]
fmul dword [0x10e7ecd4]
fstp dword [esp + 0x88]
fadd dword [eax + 8]
fld dword [esp + 0x38]
fadd dword [eax + 4]
fld dword [esp + 0x88]
fadd dword [eax]
fstp dword [esp + 0x5c]
mov ecx, dword [esp + 0x5c]
mov dword [edx], ecx
fstp dword [esp + 0x60]
mov ecx, dword [esp + 0x60]
mov dword [edx + 4], ecx
fstp dword [esp + 0x64]
mov ecx, dword [esp + 0x64]
mov dword [edx + 8], ecx
mov ecx, dword [eax]
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [edx + 4], ecx
lea ecx, [esp + 0x68]
mov dword [edx + 8], eax
call fcn.10b83900
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 0x6c]
inc esi
add edi, 0x28
cmp esi, eax
jl 0x10bfa8c0
lea ecx, [esp + 0x4c]
mov dword [esp + 0xf4], 0xffffffff
call fcn.10b892c0
mov edi, dword [ebp + 0xc]
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x170]
test eax, eax
mov ecx, dword [esp + 0x34]
je 0x10bfa9d4
mov eax, dword [ecx + 0x2d4]
test ah, 4
je 0x10bfa9d4
mov edx, dword [ecx]
call dword [edx + 0x158]
test eax, eax
je 0x10bfa9bb
mov ecx, dword [0x112052ac]
mov edx, dword [ecx + 0x15220]
push fcn.10b6d3b0
push edx
push eax
call fcn.10bcd8e0
add esp, 0xc
jmp 0x10bfa9d4
mov eax, dword [edi + 4]
mov ecx, dword [eax + 0x34]
mov edx, dword [ecx + 0x5ac]
mov ecx, dword [esi + 0x170]
push edx
push ebx
call fcn.10bce520
mov ecx, dword [edi + 4]
mov eax, dword [ecx + 0x34]
mov edx, dword [eax + 0x5ac]
test edx, edx
jns 0x10bfab4c
mov eax, dword [esi + 0x108]
xor edx, edx
cmp eax, edx
je 0x10bfab4c
cmp dword [esi + 0x128], edx
jne 0x10bfaa14
cmp dword [esi + 0x124], edx
jne 0x10bfaa14
cmp dword [esi + 0x130], edx
je 0x10bfab4c
mov ecx, dword [ecx + 0x1c]
mov ecx, dword [ecx + 0x2c]
mov dword [esp + 0x1c], ecx
cmp dword [eax + 0x60], edx
mov dword [esp + 0x24], edx
jle 0x10bfab4c
mov dword [esp + 0x28], edx
nop
mov edi, dword [eax + 0x5c]
mov ecx, dword [esp + 0x28]
mov al, byte [edi + ecx + 0x46]
add edi, ecx
xor esi, esi
test al, al
jbe 0x10bfab23
jmp 0x10bfaa50
push 1
push ebx
lea ecx, [esp + 0xd0]
call fcn.10b87f70
mov dword [esp + 0x38], eax
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + 0xf0]
push ecx
movzx ecx, byte [edi + 0x46]
lea eax, [esi + 1]
mov dword [esp + 0x40], eax
cdq
idiv ecx
mov ecx, dword [edi + 0x18]
mov eax, dword [esp + 0x18]
sub esp, 0xc
mov dword [esp + 0x104], 5
add edx, ecx
mov ecx, dword [eax + 0x108]
mov eax, dword [ecx + 0x6c]
mov eax, dword [eax + edx*8]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0x8c]
lea ecx, [eax + edx*4]
mov eax, dword [ecx]
mov edx, esp
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 4], eax
mov eax, dword [edi + 0x18]
mov dword [edx + 8], ecx
mov edx, dword [esp + 0x24]
mov ecx, dword [edx + 0x108]
mov edx, dword [ecx + 0x6c]
mov ecx, dword [ecx + 0x8c]
add eax, esi
mov eax, dword [edx + eax*8]
lea eax, [eax + eax*2]
lea edx, [ecx + eax*4]
mov ecx, dword [edx]
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], edx
call fcn.10b83900
lea ecx, [esp + 0xc8]
mov dword [esp + 0xf4], 0xffffffff
call fcn.10b892c0
movzx eax, byte [edi + 0x46]
mov esi, dword [esp + 0x3c]
cmp esi, eax
jl 0x10bfaa50
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x28]
mov eax, dword [edx + 0x108]
mov edx, dword [eax + 0x60]
inc ecx
add esi, 0x68
cmp ecx, edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], esi
jl 0x10bfaa30
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6b4]
lea ecx, [eax + ecx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edx, dword [0x10fab80c]
mov esi, dword [ecx]
add edx, 0xfffffff4
add esi, edx
mov dword [ecx], esi
mov eax, dword [0x110bb4b0]
mov ecx, dword [0x110bb6bc]
lea ecx, [eax + ecx*4]
rdtsc
mov dword [0x10fab810], edx
mov dword [0x10fab80c], eax
mov edx, dword [0x10fab80c]
mov eax, dword [ecx]
add edx, 0xfffffff4
add eax, edx
mov dword [ecx], eax
mov ecx, dword [esp + 0xec]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret