Function at 0x10148bb2
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x94
mov eax, dword [0x101cc284]
xor eax, esp
mov dword [esp + 0x90], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, ecx
mov dword [esp + 4], eax
mov ecx, dword [ebp + 8]
mov dword [esp + 0x3c], ebx
mov dword [esp + 8], ecx
push esi
push edi
test ecx, ecx
jne 0x10148bf6
test eax, eax
jne 0x1014a4f0
jmp 0x1014a4f5
cmp dword [ecx + 4], 0xd
jne 0x1014a4f0
mov edi, dword [ecx + 0x14]
xor eax, eax
imul edi, dword [ecx + 0x18]
mov esi, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x24], eax
mov eax, dword [ecx + 0x20]
mov dword [esp + 0x4c], edi
mov dword [esp + 0x18], esi
test eax, eax
je 0x10148c45
cmp dword [eax + 4], 0xd
jne 0x10148c45
mov esi, eax
mov dword [esp + 0x18], eax
mov edx, dword [esi + 0x18]
imul edx, dword [esi + 0x14]
mov dword [esp + 0x2c], edx
mov eax, dword [ecx + 0x24]
test eax, eax
je 0x10148c61
cmp dword [eax + 4], 0xd
jne 0x10148c61
mov edx, dword [eax + 0x18]
imul edx, dword [eax + 0x14]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edx
test esi, esi
je 0x10148c7c
push dword [esp + 0x2c]
mov ecx, ebx
call fcn.10155ec2
mov dword [esp + 0x14], eax
test eax, eax
je 0x1014a074
cmp dword [esp + 0x24], 0
je 0x10148c9a
push dword [esp + 0x20]
mov ecx, ebx
call fcn.10155ec2
mov dword [esp + 0x1c], eax
test eax, eax
je 0x1014a074
mov eax, dword [esp + 0x10]
xor edx, edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x48], 1
mov ecx, dword [eax + 0x1c]
test ecx, ecx
js 0x10148cce
cmp ecx, 3
jle 0x10148cc7
cmp ecx, 0x13
jle 0x10148cce
cmp ecx, 0x15
jle 0x10148d00
cmp ecx, 0x17
jg 0x10148cce
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x28], edx
cmp dword [eax + 0x28], 0
je 0x10148d06
test esi, esi
je 0x10148cef
push edx
push dword [esp + 0x18]
mov ecx, ebx
push esi
call fcn.10148bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0x24]
test esi, esi
je 0x10148d50
push 0
push dword [esp + 0x20]
push esi
jmp 0x10148d3b
mov edx, dword [esp + 0x48]
jmp 0x10148cca
mov esi, dword [esp + 0x24]
test esi, esi
je 0x10148d2a
push 0
push dword [esp + 0x20]
mov ecx, ebx
push esi
call fcn.10148bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x10148d54
push dword [esp + 0x28]
push dword [esp + 0x18]
push ecx
mov ecx, ebx
call fcn.10148bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x1c]
cmp eax, 0x1a
ja case.default.0x10148d72
fldz
fstp qword [esp + 0x50]
mov dword [esp + 0x28], 4
jmp dword [eax*4 + 0x1014a50e]
test ecx, ecx
je 0x10148e55
mov esi, dword [esp + 0xc]
test esi, esi
je 0x1014a4b4
mov eax, dword [esp + 0x2c]
cmp eax, 1
jne 0x10148db3
xor ecx, ecx
test edi, edi
je 0x10148e72
mov ebx, dword [esp + 0x14]
mov eax, dword [ebx]
mov dword [esi + ecx*4], eax
inc ecx
cmp ecx, edi
jb 0x10148da4
jmp 0x10149bcc
cmp edi, eax
je 0x10148e40
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x48]
cmp dword [edx + 0x14], ebx
mov ebx, dword [esp + 0x44]
jne 0x10148dd3
cmp edi, eax
jb 0x10148e40
mov eax, dword [edx + 0x14]
cmp eax, dword [ecx + 0x14]
ja 0x1014a4d1
mov eax, dword [edx + 0x18]
cmp eax, dword [ecx + 0x18]
ja 0x1014a4d1
xor edx, edx
mov dword [esp + 0x20], edx
cmp dword [esp + 0x30], edx
jbe 0x10148e72
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x10]
mov ecx, dword [edi + 0x18]
mov eax, ecx
mov esi, dword [esp + 0x14]
shl eax, 2
push eax
mov eax, dword [ebx + 0x18]
imul eax, edx
imul ecx, edx
lea eax, [esi + eax*4]
mov esi, dword [esp + 0x10]
push eax
lea eax, [esi + ecx*4]
push eax
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x2c]
add esp, 0xc
inc edx
mov dword [esp + 0x20], edx
cmp edx, dword [edi + 0x14]
jb 0x10148dff
mov edi, dword [esp + 0x4c]
jmp 0x10149bcc
mov eax, edi
shl eax, 2
push eax
push dword [esp + 0x18]
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x10148e72
push edi
push dword [esp + 0x10]
mov ecx, ebx
push dword [edx + 0x20]
call fcn.10155fb3
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0xc]
test esi, esi
je 0x1014a4b4
mov esi, dword [ebx + 0x9c]
cmp edi, esi
jbe 0x10149e52
test esi, esi
jne 0x10149e0e
push 0x10
pop esi
jmp 0x10149e10
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
test edi, edi
je 0x10148e6e
mov esi, dword [esp + 0x14]
mov eax, dword [ebx + 8]
mov ecx, dword [esi]
cmp ecx, dword [eax + 8]
jae 0x10148ec5
lfence
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + ecx*4]
jmp 0x10148ec7
xor ecx, ecx
test ecx, ecx
je 0x10148f23
mov esi, dword [ebx + 8]
mov eax, dword [esi + 0x74]
cmp eax, dword [ecx + 4]
jne 0x10148f1f
xor ecx, ecx
test edi, edi
je 0x10148ef4
mov esi, dword [esi + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
mov eax, dword [esi + eax*4]
cmp dword [eax + 0x30], 0xffffffff
je 0x10148f44
inc ecx
cmp ecx, edi
jb 0x10148edf
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x20]
and eax, 0xfffff
or eax, 0x10000000
push eax
push edx
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x1014a4b4
mov eax, edi
shl eax, 2
push eax
push esi
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x10148e6e
push 0x10032dc0
push 0
push edx
jmp 0x1014a4c8
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
test edi, edi
je 0x10148e6e
xor ecx, ecx
test edi, edi
je 0x10148f8a
mov eax, dword [ebx + 8]
mov esi, dword [eax + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
mov eax, dword [esi + eax*4]
cmp dword [eax + 0x30], 0xffffffff
je 0x10148f44
inc ecx
cmp ecx, edi
jb 0x10148f75
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
push dword [esp + 0x20]
and eax, 0xfffff
or eax, 0x10000000
push eax
push edx
mov ecx, ebx
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x1014a4b4
mov eax, edi
shl eax, 2
push eax
push dword [esp + 0x18]
jmp 0x10148f36
test ecx, ecx
je 0x1014a4d1
push edi
mov ecx, ebx
call fcn.10155e5c
mov edx, eax
test edx, edx
je 0x1014a074
xor ecx, ecx
test edi, edi
je 0x10148ffb
mov eax, dword [ebx + 0x20]
mov dword [edx + ecx*4], eax
inc ecx
cmp ecx, edi
jb 0x10148ff0
mov eax, dword [esp + 0x14]
push 0
push edx
push eax
push eax
mov eax, edi
and eax, 0xfffff
or eax, 0x20400000
push eax
push dword [esp + 0x24]
jmp 0x10148fa4
test ecx, ecx
je 0x1014a4d1
push edi
mov ecx, ebx
call fcn.10155e5c
mov edx, eax
test edx, edx
je 0x1014a074
xor ecx, ecx
test edi, edi
je 0x10148ffb
mov eax, dword [ebx + 0x28]
mov dword [edx + ecx*4], eax
inc ecx
cmp ecx, edi
jb 0x10149037
jmp 0x10148ffb
test ecx, ecx
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
lea eax, [edi + edi]
mov ecx, ebx
push eax
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, edi
xor ecx, ecx
shl edx, 2
mov dword [esp + ecx*4 + 0x30], eax
inc ecx
add eax, edx
cmp ecx, 2
jb 0x10149071
push edi
push dword [esp + 0x34]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x38]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x18]
mov ecx, ebx
push dword [esp + 0x3c]
push dword [esp + 0x3c]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x34]
mov eax, edi
push dword [esp + 0x3c]
and eax, 0xfffff
or eax, 0x20300000
push dword [esp + 0x18]
push eax
push dword [esp + 0x24]
mov ecx, ebx
call fcn.1015619d
mov esi, eax
test esi, esi
jns 0x10148e6e
jmp 0x1014a4d6
test ecx, ecx
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, edi
push 0
and eax, 0xfffff
push 0
or eax, 0x10100000
push dword [esp + 0x1c]
push edx
push eax
push dword [esp + 0x24]
mov ecx, ebx
call fcn.1015619d
jmp 0x10148e64
test ecx, ecx
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x1c]
mov eax, edi
and eax, 0xfffff
or eax, 0x10000000
jmp 0x10149149
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, edi
push 0
push dword [esp + 0x20]
and eax, 0xfffff
or eax, 0x20400000
jmp 0x10149145
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
push edi
mov ecx, ebx
call fcn.10155e5c
mov edx, eax
mov dword [esp + 0x30], edx
test edx, edx
je 0x1014a074
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
mov ecx, ebx
and eax, 0xfffff
mov dword [esp + 0x4c], eax
or eax, 0x10100000
push edx
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x40]
push 0
push dword [esp + 0x34]
or eax, 0x20400000
push dword [esp + 0x1c]
jmp 0x101490f1
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x20]
push dword [esp + 0x1c]
mov eax, edi
and eax, 0xfffff
or eax, 0x20200000
jmp 0x10149149
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x18]
push dword [esp + 0x24]
jmp 0x101492ae
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x18]
push dword [esp + 0x24]
mov eax, edi
and eax, 0xfffff
or eax, 0x20300000
jmp 0x10149149
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x20]
push dword [esp + 0x1c]
jmp 0x1014932f
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
mov esi, edi
mov ecx, ebx
shl esi, 2
push esi
call fcn.10155e5c
test eax, eax
je 0x1014a074
xor ecx, ecx
mov edx, eax
mov dword [esp + ecx*4 + 0x58], edx
inc ecx
add edx, esi
cmp ecx, 4
jb 0x101493ad
push esi
push eax
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x64]
and eax, 0xfffff
mov dword [esp + 0x30], eax
or eax, 0x10100000
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
mov ecx, ebx
push 0
push dword [esp + 0x5c]
or eax, 0x20400000
push dword [esp + 0x1c]
push dword [esp + 0x68]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x60]
mov ecx, ebx
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
push 0x17
push dword [esp + 0x64]
push dword [esp + 0x6c]
jmp 0x101490ec
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
mov esi, edi
mov ecx, ebx
shl esi, 2
push esi
call fcn.10155e5c
test eax, eax
je 0x1014a074
xor ecx, ecx
mov edx, eax
mov dword [esp + ecx*4 + 0x58], edx
inc ecx
add edx, esi
cmp ecx, 4
jb 0x101494a6
push esi
push eax
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x64]
and eax, 0xfffff
mov dword [esp + 0x30], eax
or eax, 0x10100000
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
mov ecx, ebx
push 0
push dword [esp + 0x5c]
or eax, 0x20400000
push dword [esp + 0x1c]
push dword [esp + 0x68]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x60]
mov ecx, ebx
push dword [esp + 0x6c]
push dword [esp + 0x6c]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
push 0x17
push dword [esp + 0x64]
push dword [esp + 0x6c]
or eax, 0x20200000
jmp 0x101490f1
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
xor esi, esi
test edi, edi
je 0x101495dc
mov eax, dword [ebx + 8]
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
sub eax, ecx
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x20]
mov eax, dword [eax + ecx]
mov eax, dword [edx + eax*4]
mov edx, dword [esp + 0xc]
test byte [eax], 1
je 0x10149609
mov ebx, dword [esp + 0x20]
mov eax, dword [ecx]
mov eax, dword [ebx + eax*4]
mov ebx, dword [esp + 0x44]
test byte [eax], 1
je 0x10149609
add ecx, dword [esp + 0x28]
inc esi
mov eax, dword [esp + 0x30]
cmp esi, edi
jb 0x101495aa
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x20]
mov eax, edi
push dword [esp + 0x1c]
and eax, 0xfffff
push edx
or eax, 0x20500000
jmp 0x101490f5
imul eax, edi, 3
mov ecx, ebx
push eax
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, edi
xor ecx, ecx
shl edx, 2
mov dword [esp + ecx*4 + 0x58], eax
inc ecx
add eax, edx
cmp ecx, 3
jb 0x10149623
push edi
push dword [esp + 0x5c]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x60]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x64]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push dword [esp + 0x20]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x1c]
and eax, 0xfffff
push dword [esp + 0x64]
mov dword [esp + 0x40], eax
or eax, 0x20500000
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x5c]
mov ecx, ebx
push dword [esp + 0x68]
push dword [esp + 0x68]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x30]
push 0x17
push dword [esp + 0x60]
push dword [esp + 0x68]
jmp 0x10149566
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
mov esi, edi
mov ecx, ebx
shl esi, 2
push esi
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, dword [esp + 0x28]
xor ecx, ecx
mov dword [esp + ecx*4 + 0x58], eax
inc ecx
add eax, esi
cmp ecx, edx
jb 0x1014971e
push edi
push dword [esp + 0x5c]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x60]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x64]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x68]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x18]
mov ecx, ebx
push 0
push dword [esp + 0x64]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x20]
mov ecx, ebx
push 0
push dword [esp + 0x68]
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
push dword [esp + 0x28]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x60]
and eax, 0xfffff
push dword [esp + 0x60]
mov dword [esp + 0x2c], eax
or eax, 0x20400000
push dword [esp + 0x6c]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
mov ecx, ebx
push 8
push 0
push dword [esp + 0x68]
or eax, 0x10100000
push dword [esp + 0x70]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x20]
jmp 0x1014955c
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
mov edx, dword [esp + 0xc]
test edx, edx
je 0x1014a4b4
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, edi
push 0
push dword [esp + 0x20]
and eax, 0xfffff
or eax, 0x20500000
jmp 0x10149145
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
push edi
mov ecx, ebx
call fcn.10155e5c
mov edx, eax
mov dword [esp + 0x30], edx
test edx, edx
je 0x1014a074
push edi
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x24]
mov eax, edi
mov ecx, ebx
and eax, 0xfffff
mov dword [esp + 0x4c], eax
or eax, 0x10300000
push edx
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x40]
push 0
push dword [esp + 0x34]
push dword [esp + 0x1c]
push dword [esp + 0x18]
jmp 0x101495ff
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
mov eax, edi
mov ecx, ebx
shl eax, 3
push eax
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, edi
xor ecx, ecx
shl edx, 2
mov dword [esp + ecx*4 + 0x68], eax
inc ecx
add eax, edx
cmp ecx, 8
jb 0x1014994e
xor edx, edx
push edi
push dword [esp + edx*4 + 0x6c]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
inc edx
cmp edx, 8
jb 0x1014995c
push edi
push dword [esp + 0x10]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push dword [esp + 0x20]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x1c]
and eax, 0xfffff
push dword [esp + 0x74]
mov dword [esp + 0x28], eax
or eax, 0x20500000
push eax
push dword [esp + 0x24]
mov dword [esp + 0x38], eax
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x18]
mov ecx, ebx
push 0
push 0
push dword [esp + 0x70]
or eax, 0x10100000
push dword [esp + 0x78]
mov dword [esp + 0x40], eax
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x18]
mov ecx, ebx
push 0x17
push dword [esp + 0x70]
or eax, 0x20300000
push dword [esp + 0x70]
push dword [esp + 0x7c]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x24]
mov ecx, ebx
push dword [esp + 0x80]
push dword [esp + 0x40]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x74]
mov ecx, ebx
push dword [esp + 0x24]
push dword [esp + 0x80]
push dword [esp + 0x88]
push dword [esp + 0x24]
call fcn.101551fa
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x18]
mov ecx, ebx
push 0x40
push 0
push dword [esp + 0x80]
or eax, 0x10300000
push dword [esp + 0x88]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push dword [esp + 0x80]
mov ecx, ebx
push dword [esp + 0x1c]
push dword [esp + 0x8c]
push dword [esp + 0x30]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push dword [esp + 0x28]
mov eax, dword [esp + 0x1c]
mov ecx, ebx
push 0
push dword [esp + 0x88]
or eax, 0x10400000
push dword [esp + 0x90]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push dword [esp + 0x88]
push dword [esp + 0x80]
push dword [esp + 0x18]
push dword [esp + 0x30]
jmp 0x101490f6
test esi, esi
je 0x1014a4d1
push dword [ebp + 0x10]
push dword [esp + 0x20]
push dword [ecx + 0x10]
mov ecx, ebx
push dword [esp + 0x38]
push dword [esp + 0x24]
push edi
push dword [esp + 0x24]
push edx
call fcn.101522d1
jmp 0x10148e64
test ecx, ecx
je 0x1014a4d1
mov edx, dword [edx + 0x24]
test edx, edx
je 0x1014a4d1
cmp dword [edx + 4], 0xe
jne 0x10149b91
cmp dword [edx + 0x10], 2
jne 0x1014a4d1
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x1014a4b4
mov eax, edi
shl eax, 2
push eax
mov eax, dword [edx + 0x18]
mov edx, dword [esp + 0x18]
lea eax, [edx + eax*4]
push eax
jmp 0x10148f36
mov eax, dword [esp + 0x48]
cmp dword [edx + 4], eax
jne 0x1014a4d1
mov esi, dword [esp + 0xc]
test esi, esi
je 0x1014a4b4
xor ecx, ecx
test edi, edi
je 0x10148e72
mov ebx, dword [esp + 0x14]
mov eax, dword [edx + 8]
mov eax, dword [eax + 0x18]
mov eax, dword [ebx + eax*4]
mov dword [esi + ecx*4], eax
inc ecx
mov edx, dword [edx + 0xc]
cmp ecx, edi
jb 0x10149bb8
mov ebx, dword [esp + 0x44]
jmp 0x10148e72
test ecx, ecx
je 0x1014a4d1
test esi, esi
je 0x1014a4d1
cmp dword [esp + 0xc], 0
je 0x1014a4b4
imul eax, edi, 3
mov ecx, ebx
push eax
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, edi
xor ecx, ecx
shl edx, 2
mov dword [esp + ecx*4 + 0x58], eax
inc ecx
add eax, edx
cmp ecx, 3
jb 0x10149c0a
mov edx, dword [esp + 0x58]
xor esi, esi
mov dword [esp + 0x24], edx
test edi, edi
je 0x10149cd7
mov eax, dword [esp + 0x1c]
mov ecx, edx
mov dword [esp + 0x20], ecx
lea eax, [eax + edi*4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
sub eax, dword [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x1c]
sub eax, edx
mov dword [esp + 0x3c], eax
add eax, ecx
lea ecx, [esp + 0x68]
push ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x44], eax
push dword [eax + ecx]
mov ecx, ebx
call fcn.10157a32
test eax, eax
js 0x10149cd3
fld qword [esp + 0x68]
fld qword [esp + 0x50]
fcom st(1)
fnstsw ax
test ah, 5
jnp 0x10149ca6
fld qword [esp + 0x70]
fcom st(1)
fnstsw ax
test ah, 5
jnp 0x10149ca4
fxch st(2)
fucomp st(1)
fnstsw ax
test ah, 0x44
jp 0x10149ccf
fucompp
fnstsw ax
test ah, 0x44
jp 0x10149cd3
mov eax, dword [esp + 0x18]
jmp 0x10149cae
fstp st(2)
mov eax, dword [esp + 0x40]
fstp st(1)
fstp st(0)
mov ecx, dword [esp + 0x20]
inc esi
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [esp + 0x28]
add ecx, eax
add dword [esp + 0x18], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x20], ecx
cmp esi, edi
jb 0x10149c4f
jmp 0x10149cd3
fstp st(1)
fstp st(0)
mov edx, dword [esp + 0x24]
push edi
cmp esi, edi
jne 0x10149cfd
mov edx, dword [esp + 0x10]
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x2c]
jmp 0x10149188
push edx
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x60]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x64]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edi
push dword [esp + 0x18]
mov ecx, ebx
push dword [esp + 0x64]
push edx
push dword [esp + 0x20]
call fcn.10155bb2
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x28]
mov eax, edi
mov ecx, ebx
push dword [esp + 0x64]
and eax, 0xfffff
push dword [esp + 0x6c]
or eax, 0x20200000
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x1c]
mov ecx, ebx
push edi
push dword [esp + 0x64]
push eax
lea eax, [eax + edi*4]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x24]
call fcn.101551fa
jmp 0x10149101
lea eax, [esp + 0x30]
mov ecx, ebx
push eax
push dword [edx + 0x20]
call fcn.10159229
mov ecx, eax
mov eax, dword [esp + 0x10]
test ecx, ecx
jne 0x10149ddb
push dword [eax + 0x38]
push 0x10032de4
push 0xdb6
push eax
push ebx
call fcn.10159548
add esp, 0x14
jmp 0x1014a4d1
inc dword [ebx + 0x38]
push 0
push 0
push dword [esp + 0x14]
push dword [eax + 0x24]
push ecx
push dword [esp + 0x44]
mov ecx, ebx
call fcn.1015175e
dec dword [ebx + 0x38]
jmp 0x10148e64
push dword [esp + 0xc]
mov ecx, ebx
push edx
call fcn.1014a57a
jmp 0x10149101
add esi, esi
cmp esi, edi
jb 0x10149e0e
xor ecx, ecx
lea eax, [esi + esi]
mul dword [esp + 0x28]
seto cl
neg ecx
or ecx, eax
call fcn.1010328d
mov dword [esp + 0x30], eax
test eax, eax
je 0x1014a074
push dword [ebx + 0x98]
call dword [sym.imp.PhotoBase.dll_void___cdecl_BasePrivate::Delete_void__]
mov eax, dword [esp + 0x34]
pop ecx
mov dword [ebx + 0x98], eax
mov dword [ebx + 0x9c], esi
mov eax, dword [ebx + 0x98]
mov ecx, ebx
mov dword [esp + 0x24], eax
lea esi, [eax + edi*4]
mov eax, dword [esp + 0x10]
push esi
mov dword [esp + 0x24], esi
push dword [eax + 0x10]
call fcn.10156b23
xor edx, edx
and dword [esp + 0x2c], edx
and dword [esp + 0x38], edx
mov dword [esp + 0x18], edx
test edi, edi
je 0x1014a4b4
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x24]
sub ecx, esi
mov dword [esp + 0x30], ecx
mov eax, dword [ebx + 8]
lea esi, [edx + edi*4]
mov ecx, dword [esi + ecx]
cmp ecx, dword [eax + 8]
jae 0x10149eaf
lfence
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + ecx*4]
jmp 0x10149eb1
xor ecx, ecx
test ecx, ecx
je 0x1014a4b8
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x74]
cmp eax, dword [ecx + 4]
je 0x10149ef5
test byte [esi], 1
je 0x10149edf
test byte [ecx], 1
jne 0x10149edf
mov eax, dword [esp + 0x48]
mov dword [edx], eax
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
jmp 0x10149efc
test byte [esi], 2
je 0x10149ef5
test byte [ecx], 2
jne 0x10149ef5
inc dword [esp + 0x2c]
mov dword [edx], 2
jmp 0x10149ef8
and dword [edx], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x38]
add edx, dword [esp + 0x28]
inc ecx
mov dword [esp + 0x38], ecx
cmp ecx, edi
mov ecx, dword [esp + 0x30]
jb 0x10149e96
test eax, eax
je 0x1014a057
mov esi, eax
mov ecx, ebx
shl esi, 2
push esi
call fcn.10155e5c
test eax, eax
je 0x1014a074
mov edx, dword [esp + 0x28]
xor ecx, ecx
mov dword [esp + ecx*4 + 0x58], eax
inc ecx
add eax, esi
cmp ecx, edx
jb 0x10149f34
mov edx, dword [esp + 0x18]
push edx
push dword [esp + 0x60]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
push edx
push dword [esp + 0x64]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0xc]
sub edi, ecx
mov eax, dword [esp + 0x58]
mov esi, dword [esp + 0x64]
sub eax, esi
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x38], edi
mov edx, edi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x40]
mov dword [esp + 0x3c], eax
cmp dword [edx + ecx], 1
jne 0x10149fbb
mov eax, dword [ecx]
mov dword [edi + esi], eax
cmp dword [ebx + 0x1c], 0
je 0x10149fae
mov eax, dword [ecx]
jmp 0x10149fb1
or eax, 0xffffffff
mov dword [esi], eax
add esi, dword [esp + 0x28]
mov eax, dword [esp + 0x3c]
add ecx, 4
sub eax, 1
mov dword [esp + 0x3c], eax
jne 0x10149f99
mov edx, dword [esp + 0x18]
push edx
push dword [esp + 0x5c]
push dword [esp + 0x68]
push dword [esp + 0x68]
push ebx
mov ebx, dword [esp + 0x58]
mov ecx, ebx
call fcn.10155bb2
mov edi, dword [esp + 0x4c]
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x18]
mov ecx, ebx
push 0x17
push dword [esp + 0x60]
and eax, 0xfffff
push dword [esp + 0x68]
or eax, 0x20200000
push dword [esp + 0x70]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov ecx, dword [esp + 0xc]
mov edx, edi
mov ebx, dword [esp + 0x64]
mov eax, dword [esp + 0x38]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x28]
cmp dword [ecx + eax], esi
jne 0x1014a049
mov eax, dword [ebx]
add ebx, edi
mov dword [ecx], eax
mov eax, dword [esp + 0x38]
add ecx, edi
sub edx, esi
jne 0x1014a03a
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x1014a454
imul eax, esi, 0xb
mov ecx, ebx
push eax
call fcn.10155e5c
mov ecx, eax
test ecx, ecx
jne 0x1014a092
push 0x1002bc44
push 0
push dword [esp + 0x18]
push ebx
call fcn.10159548
add esp, 0x10
mov esi, 0x8007000e
jmp 0x1014a4d6
mov edx, esi
xor eax, eax
shl edx, 2
mov dword [esp + eax*4 + 0x68], ecx
inc eax
add ecx, edx
cmp eax, 0xb
jb 0x1014a099
mov eax, dword [esp + 0xc]
mov esi, edi
sub dword [esp + 0x24], eax
mov ecx, eax
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0x90]
sub eax, edx
mov edi, dword [esp + 0x10]
mov ebx, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x24]
cmp dword [ecx + eax], 2
jne 0x1014a0ee
mov eax, dword [ecx]
mov dword [ebx + edx], eax
cmp dword [edi + 0x1c], 0
je 0x1014a0e1
mov eax, dword [ecx]
jmp 0x1014a0e4
or eax, 0xffffffff
mov dword [edx], eax
add edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
add ecx, 4
sub esi, 1
jne 0x1014a0cc
mov edi, dword [esp + 0x4c]
mov ebx, dword [esp + 0x44]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x48]
push edx
push dword [esp + eax*4 + 0x6c]
call fcn.10155f97
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x48]
inc eax
mov dword [esp + 0x48], eax
cmp eax, 0xa
jb 0x1014a106
push 0
push 0
push dword [esp + 0x70]
and edx, 0xfffff
mov ecx, ebx
push dword [esp + 0x78]
mov dword [esp + 0x3c], edx
or edx, 0x10200000
push edx
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x2c]
mov ecx, ebx
push 0x14
push 0
push dword [esp + 0x74]
or eax, 0x10400000
push dword [esp + 0x7c]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x2c]
mov ecx, ebx
push 0x18
push 0
push dword [esp + 0x78]
or eax, 0x10100000
push dword [esp + 0x80]
mov dword [esp + 0x4c], eax
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x2c]
mov ecx, ebx
push 2
push dword [esp + 0x70]
or eax, 0x20400000
push dword [esp + 0x7c]
mov dword [esp + 0x24], eax
push dword [esp + 0x84]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x70]
mov ecx, ebx
push dword [esp + 0x88]
push dword [esp + 0x4c]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x2c]
mov ecx, ebx
push 0x17
push dword [esp + 0x80]
or eax, 0x20200000
push dword [esp + 0x70]
mov dword [esp + 0x44], eax
push dword [esp + 0x8c]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0
push 0
push dword [esp + 0x78]
mov ecx, ebx
push dword [esp + 0x90]
push dword [esp + 0x4c]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 0x17
push dword [esp + 0x74]
mov ecx, ebx
push dword [esp + 0x8c]
push dword [esp + 0x94]
push dword [esp + 0x48]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov eax, dword [esp + 0x2c]
mov ecx, ebx
push 0x17
push dword [esp + 0x8c]
or eax, 0x20500000
push dword [esp + 0x88]
push dword [esp + 0x98]
push eax
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
push 2
push dword [esp + 0x90]
mov ecx, ebx
push dword [esp + 0x80]
push dword [esp + 0x9c]
push dword [esp + 0x28]
push dword [esp + 0x24]
call fcn.1015619d
mov esi, eax
test esi, esi
js 0x1014a4d6
mov esi, dword [esp + 0xc]
mov eax, edi
mov edi, dword [esp + 0x90]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
cmp dword [ecx + esi], 2
jne 0x1014a441
mov eax, dword [ebx + 8]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x40]
mov eax, dword [eax + edi]
mov edx, dword [ecx + eax*4]
mov eax, dword [edi]
mov dword [esp + 0x38], edx
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x18], eax
mov eax, dword [edx]
test al, al
jns 0x1014a358
fld qword [edx + 0x20]
or eax, 0x100
fstp qword [edx + 0x28]
mov dword [edx], eax
test eax, 0x100
je 0x1014a42d
fld qword [edx + 0x20]
push ecx
push ecx
fstp qword [esp]
call sub.msvcrt.dll__finite
pop ecx
pop ecx
mov ecx, dword [esp + 0x38]
fld qword [ecx + 0x20]
test eax, eax
je 0x1014a3ac
fld qword [ebx + 0xb0]
fld qword [esp + 0x50]
fcomp st(2)
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x1014a39e
faddp st(1)
fstp qword [esp]
call sub.msvcrt.dll_floor
jmp 0x1014a3aa
fsubrp st(1)
fstp qword [esp]
call sub.msvcrt.dll_floor
fchs
pop ecx
pop ecx
mov eax, dword [esp + 0x18]
push ecx
push ecx
fstp qword [eax + 0x20]
mov eax, dword [esp + 0x40]
fld qword [eax + 0x28]
fstp qword [esp]
call sub.msvcrt.dll__finite
pop ecx
pop ecx
mov ecx, dword [esp + 0x38]
fld qword [ecx + 0x28]
test eax, eax
je 0x1014a400
fld qword [ebx + 0xb0]
fld qword [esp + 0x50]
fcomp st(2)
fnstsw ax
push ecx
push ecx
test ah, 0x41
jp 0x1014a3f2
faddp st(1)
fstp qword [esp]
call sub.msvcrt.dll_floor
jmp 0x1014a3fe
fsubrp st(1)
fstp qword [esp]
call sub.msvcrt.dll_floor
fchs
pop ecx
pop ecx
mov edx, dword [esp + 0x18]
mov ecx, dword [edx]
fst qword [edx + 0x28]
fld qword [edx + 0x20]
or ecx, 0x100
fucompp
mov dword [edx], ecx
fnstsw ax
test ah, 0x44
jp 0x1014a425
or ecx, 0x80
jmp 0x1014a42b
and ecx, 0xffffff7f
mov dword [edx], ecx
mov eax, dword [edi]
add edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esi], eax
mov eax, dword [esp + 0x3c]
add esi, edx
sub eax, 1
mov dword [esp + 0x3c], eax
jne 0x1014a31e
mov edi, dword [esp + 0x4c]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + edx]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x14]
mov esi, dword [eax + ecx*4]
mov ecx, dword [edx]
and ecx, 0xf1ffffff
or ecx, dword [esi]
mov dword [esi], ecx
mov eax, ecx
mov edx, dword [edx]
and edx, 0xe000000
and eax, 0xe000000
jne 0x1014a487
mov eax, edx
cmp dword [esi + 0x5c], 0
jne 0x1014a493
cmp eax, edx
jb 0x1014a499
jmp 0x1014a497
cmp eax, edx
ja 0x1014a499
mov eax, edx
mov edx, dword [esp + 0x20]
and ecx, 0xf1ffffff
add edx, dword [esp + 0x28]
or ecx, eax
mov dword [esi], ecx
mov dword [esp + 0x20], edx
sub edi, 1
jne 0x1014a458
xor esi, esi
jmp 0x1014a4d6
push 0x10032e34
jmp 0x1014a4c4
push 0x10032e0c
push 0
push 0
push ebx
call fcn.10159548
add esp, 0x10
mov esi, 0x80004005
push dword [esp + 0x1c]
mov ecx, ebx
call fcn.10155f5d
push dword [esp + 0x14]
mov ecx, ebx
call fcn.10155f5d
mov eax, esi
jmp 0x1014a4f5
mov eax, 0x80004005
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.101b6170
mov esp, ebp
pop ebp
ret 0xc