Function at 0x1336ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
movsxd r10, dword [rsp + 0x84]
cmp r10, qword [rsp + 0x120]
jae 0x1426b01
lea eax, [r8 + rdx + 1]
cdq
sub eax, edx
mov rdx, qword [rsp + 0x118]
sar eax, 1
mov byte [r10 + rdx], al
add r10d, 1
jmp 0x11d713f
mov rax, qword [rsp + 0x118]
jmp 0x11da400
test r8d, r8d
jne 0x11da3ad
test edi, edi
jne 0x11da3ad
jmp 0x1426aad
mov ecx, dword [rsp + 0x114]
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x60], esi
mov eax, ebp
lea rdx, [rsp + 0x50]
lea r8, [rsp + 0x38]
shr eax, 0x15
or ecx, 0xfff00000
lea r9, [rsp + 0x20]
shl ecx, 0xb
or ecx, eax
mov eax, ebp
shl eax, 0xb
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x54], eax
lea eax, [rbx - 0x3fe]
mov dword [rsp + 0x5c], eax
mov rax, qword [rdx]
mov qword [r8], rax
mov rax, qword [rdx + 8]
mov qword [r8 + 8], rax
mov eax, dword [rdx + 0x10]
mov rdx, qword [rsp + 0x50]
mov dword [r8 + 0x10], eax
lea r8, [rsp + 0x50]
shr rdx, 0x20
mov rax, qword [r8]
mov ebp, edx
mov qword [r9], rax
mov rax, qword [r8 + 8]
bts ebp, 0xa
cmp ecx, 0x80000000
mov qword [r9 + 8], rax
mov eax, dword [r8 + 0x10]
mov dword [r9 + 0x10], eax
mov dword [rsp + 0x3c], ebp
je 0x120dc34
mov eax, 0xfffffc00
mov ebx, dword [rsp + 0x28]
lea edi, [rdx + rax]
cmp edi, eax
mov dword [rsp + 0x24], edi
jae 0x12f892c
mov r11d, dword [rsp + 0x44]
jmp 0x11da162
cmp r11d, 0x20
jge 0x142645e
cmp r11d, 1
jl 0x11daa78
lea rcx, [rsp + 0x38]
lea rdx, [rsp + 0x68]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov eax, dword [rcx + 0x10]
mov dword [rdx + 0x10], eax
mov eax, dword [rsp + 0x48]
add eax, 1
shr eax, 1
jne 0x1426571
mov ecx, dword [rsp + 0x78]
mov dword [rsp + 0x48], esi
add ecx, 1
shr ecx, 1
jne 0x14265ca
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x78], esi
call fcn.011d9fd0
lea rcx, [rsp + 0x68]
mov ebp, eax
call fcn.011d9fd0
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x8c], eax
mov rax, qword [rcx]
lea rdx, [rsp + 0x50]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov eax, dword [rcx + 0x10]
mov ecx, dword [rsp + 0x30]
add ecx, 1
mov dword [rdx + 0x10], eax
shr ecx, 1
jne 0x1426617
test ecx, ecx
mov dword [rsp + 0x60], esi
jne 0x1426671
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x30], esi
call fcn.011d9fd0
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x94], eax
call fcn.011d9fd0
cmp ebp, 0x5f5e100
mov r11d, eax
mov r9d, 1
jae 0x14266b6
cmp ebp, 0x2710
jb 0x11da256
mov r9d, 0x2710
add r13d, 4
mov eax, r9d
imul eax, eax, 0x64
cmp ebp, eax
jb 0x11da267
mov r9d, eax
add r13d, 2
lea eax, [r9 + r9*4]
add eax, eax
cmp ebp, eax
jae 0x11daa54
mov ebx, dword [rsp + 0x70]
mov r14d, dword [rsp + 0x6c]
mov edi, dword [rsp + 0x58]
mov r12d, dword [rsp + 0x50]
xor edx, edx
mov eax, ebp
div r9d
add r13d, 1
mov r10d, esi
mov r8d, edx
mov ecx, eax
xor edx, edx
mov eax, r11d
mov r11d, dword [rsp + 0x54]
mov dword [rsp + 0x88], r13d
mov r13d, dword [rsp + 0x68]
div r9d
mov dword [rsp + 0x84], esi
cmp cl, al
mov r15d, edx
mov rdx, rsi
jne 0x11da355
mov dword [rsp + 0x80], r11d
mov r11, qword [rsp + 0x120]
nop
nop
movsxd rax, r10d
cmp rax, r11
jae 0x1426b01
mov rax, qword [rsp + 0x118]
add rdx, 1
add r10d, 1
cmp r9d, 1
mov byte [rdx + rax - 1], cl
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0x84], r10d
je 0x11da43b
mov eax, 0xcccccccd
mul r9d
mov r9d, edx
shr r9d, 3
xor edx, edx
mov eax, r8d
div r9d
mov r8d, edx
mov cl, al
xor edx, edx
mov eax, r15d
div r9d
cmp cl, al
mov r15d, edx
mov rdx, qword [rsp + 0xa0]
je 0x11da2e0
mov r11d, dword [rsp + 0x80]
mov eax, dword [rsp + 0x94]
xor edx, edx
div r9d
mov ecx, eax
mov r8d, edx
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea eax, [rdx + rdx*4]
xor edx, edx
add eax, eax
sub ecx, eax
mov eax, dword [rsp + 0x8c]
div r9d
mov r9d, eax
mov r10d, edx
mov eax, 0xcccccccd
mul r9d
shr edx, 3
lea eax, [rdx + rdx*4]
add eax, eax
sub r9d, eax
cmp cl, r9b
jae 0x1426b01
test cl, cl
je 0x11d714c
mov r11, qword [rsp + 0x110]
movzx edx, r9b
movzx r8d, cl
mov eax, edx
sub eax, r8d
cmp eax, 1
jg 0x11d710d
test r10d, r10d
jne 0x11da3d8
test ebx, ebx
je 0x1426ae2
movsxd r10, dword [rsp + 0x84]
cmp r10, qword [rsp + 0x120]
jae 0x1426b01
mov rax, qword [rsp + 0x118]
mov byte [r10 + rax], r9b
add r10d, 1
jmp 0x11da400
mov ecx, dword [rsp + 0x88]
mov rdx, qword [rsp + 0x128]
mov dword [rdx], ecx
movsxd rcx, r10d
cmp rcx, qword [rsp + 0x120]
jae 0x1426b01
lea rdx, [rcx + rax]
mov rcx, qword [rsp + 0x130]
mov qword [rcx], rdx
mov eax, 1
jmp 0x1336e0d
lea rdx, [0x011d9cac]
lea rcx, [rsp + 0x38]
mov dword [rsp + 0x98], 0x989680
call fcn.011da880
mov r11d, dword [rsp + 0x48]
mov r9d, dword [rsp + 0x38]
mov ebx, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x40]
add r11d, 1
shr r11d, 1
jne 0x14266c5
mov r10d, dword [rsp + 0x44]
test r10d, r10d
mov dword [rsp + 0x48], esi
jle 0x1426728
mov edi, r8d
mov ecx, 0x20
mov eax, 0x7fffffff
sub ecx, r10d
shr edi, cl
lea ecx, [r10 - 1]
sar eax, cl
mov dword [rsp + 0x90], edi
and r8d, eax
mov dword [rsp + 0x40], r8d
je 0x12326a6
test r8d, 0xffff0000
mov eax, r8d
mov r11d, esi
jne 0x11da4ce
mov r11d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x11da4dc
add r11d, 8
shl eax, 8
test eax, 0xf0000000
je 0x11daa30
test eax, 0xc0000000
jne 0x11da4f5
add r11d, 2
shl eax, 2
bt eax, 0x1f
jb 0x11da4ff
add r11d, 1
test r11d, r11d
je 0x11da541
mov eax, ebx
mov edx, 0x20
sub edx, r11d
mov ecx, edx
shr eax, cl
mov ecx, r11d
shl r8d, cl
mov ecx, edx
or eax, r8d
mov dword [rsp + 0x40], eax
mov eax, r9d
shr eax, cl
mov ecx, r11d
shl ebx, cl
shl r9d, cl
or eax, ebx
sub r10d, r11d
mov dword [rsp + 0x38], r9d
mov dword [rsp + 0x44], r10d
mov dword [rsp + 0x3c], eax
cmp edi, 0x5f5e100
jae 0x1426b01
lea rdx, [0x011d9cac]
lea rcx, [rsp + 0x68]
call fcn.011da880
mov r11d, dword [rsp + 0x78]
mov r13d, dword [rsp + 0x68]
mov r14d, dword [rsp + 0x6c]
mov ebx, dword [rsp + 0x70]
add r11d, 1
shr r11d, 1
jne 0x1426753
mov r9d, dword [rsp + 0x74]
test r9d, r9d
mov dword [rsp + 0x78], esi
jle 0x1426891
mov edi, ebx
mov ecx, 0x20
mov eax, 0x7fffffff
sub ecx, r9d
shr edi, cl
lea ecx, [r9 - 1]
sar eax, cl
mov dword [rsp + 0x8c], edi
and ebx, eax
mov dword [rsp + 0x70], ebx
je 0x12326d1
test ebx, 0xffff0000
mov eax, ebx
mov r10d, esi
jne 0x11da5d0
mov r10d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x11da5de
add r10d, 8
shl eax, 8
test eax, 0xf0000000
je 0x11daa3c
test eax, 0xc0000000
jne 0x11da5f7
add r10d, 2
shl eax, 2
bt eax, 0x1f
jb 0x11da601
add r10d, 1
test r10d, r10d
je 0x11da64a
mov eax, r14d
mov ecx, r10d
mov edx, r13d
shl ebx, cl
mov r8d, 0x20
sub r8d, r10d
mov ecx, r8d
shr eax, cl
shr edx, cl
mov ecx, r10d
or ebx, eax
mov eax, r14d
shl r13d, cl
shl eax, cl
mov r14d, edx
mov dword [rsp + 0x70], ebx
or r14d, eax
sub r9d, r10d
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x74], r9d
mov dword [rsp + 0x6c], r14d
lea rdx, [0x011d9cac]
lea rcx, [rsp + 0x50]
call fcn.011da880
mov r11d, dword [rsp + 0x60]
mov r12d, dword [rsp + 0x50]
mov edi, dword [rsp + 0x58]
add r11d, 1
shr r11d, 1
jne 0x14268b7
mov r11d, dword [rsp + 0x54]
mov dword [rsp + 0x80], r11d
mov r9d, dword [rsp + 0x5c]
test r9d, r9d
mov dword [rsp + 0x60], esi
jle 0x1426925
mov ebp, edi
mov ecx, 0x20
mov eax, 0x7fffffff
sub ecx, r9d
shr ebp, cl
lea ecx, [r9 - 1]
sar eax, cl
mov dword [rsp + 0x94], ebp
and edi, eax
mov dword [rsp + 0x58], edi
je 0x12326fe
test edi, 0xffff0000
mov eax, edi
mov r10d, esi
jne 0x11da6d5
mov r10d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x11da6e3
add r10d, 8
shl eax, 8
test eax, 0xf0000000
je 0x11daa60
test eax, 0xc0000000
jne 0x11da6fc
add r10d, 2
shl eax, 2
bt eax, 0x1f
jb 0x11da706
add r10d, 1
test r10d, r10d
je 0x11da759
mov edx, r11d
mov eax, edi
mov r8d, 0x20
sub r8d, r10d
mov ecx, r8d
shr edx, cl
mov ecx, r10d
shl eax, cl
shl r11d, cl
mov ecx, r8d
mov edi, edx
or edi, eax
mov eax, r12d
shr eax, cl
mov ecx, r10d
mov dword [rsp + 0x58], edi
or r11d, eax
shl r12d, cl
sub r9d, r10d
mov dword [rsp + 0x5c], r9d
mov dword [rsp + 0x80], r11d
mov dword [rsp + 0x54], r11d
mov dword [rsp + 0x50], r12d
lea rdx, [0x011d9cac]
lea rcx, [rsp + 0x20]
call fcn.011da880
mov eax, dword [rsp + 0x30]
mov r11d, dword [rsp + 0x20]
mov ebp, dword [rsp + 0x24]
mov r8d, dword [rsp + 0x28]
add eax, 1
shr eax, 1
jne 0x1426950
mov r9d, dword [rsp + 0x2c]
test r9d, r9d
mov dword [rsp + 0x30], esi
jle 0x1426a86
mov r15d, r8d
mov ecx, 0x20
mov eax, 0x7fffffff
sub ecx, r9d
shr r15d, cl
lea ecx, [r9 - 1]
sar eax, cl
and r8d, eax
mov dword [rsp + 0x28], r8d
je 0x1232734
test r8d, 0xffff0000
mov eax, r8d
mov r10d, esi
jne 0x11da7d8
mov r10d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x11da7e6
add r10d, 8
shl eax, 8
test eax, 0xf0000000
je 0x11daa6c
test eax, 0xc0000000
jne 0x11da7ff
add r10d, 2
shl eax, 2
bt eax, 0x1f
jb 0x11da809
add r10d, 1
test r10d, r10d
je 0x11da84f
mov eax, ebp
mov ecx, r10d
mov edx, 0x20
shl r8d, cl
sub edx, r10d
mov ecx, edx
shr eax, cl
mov ecx, r10d
shl ebp, cl
or r8d, eax
mov ecx, edx
mov eax, r11d
mov dword [rsp + 0x28], r8d
shr eax, cl
mov ecx, r10d
shl r11d, cl
or ebp, eax
sub r9d, r10d
mov dword [rsp + 0x2c], r9d
mov dword [rsp + 0x24], ebp
mov dword [rsp + 0x20], r11d
mov r9d, dword [rsp + 0x98]
mov r8d, dword [rsp + 0x90]
mov r10d, dword [rsp + 0x84]
mov r11, qword [rsp + 0x120]
jmp 0x11da329
add r11d, 4
shl eax, 4
jmp 0x11da4e7
add r10d, 4
shl eax, 4
jmp 0x11da5e9
mov r9d, eax
add r13d, 1
jmp 0x11da275
add r10d, 4
shl eax, 4
jmp 0x11da6ee
add r10d, 4
shl eax, 4
jmp 0x11da7f1
mov r14d, SafeArrayCopy
mov eax, 0x2916a177
lea r12, [0x01000000]
mov ecx, r14d
sub ecx, r11d
imul ecx, ecx, 0xf
imul ecx
mov r13d, edx
sar r13d, 8
mov eax, r13d
shr eax, 0x1f
add r13d, eax
test r13d, r13d
jg 0x1426527
mov r13d, esi
cmp r11d, 1
jge 0x11da176
sub r14d, r11d
mov eax, 0x4c8f8d29
shl r14d, 5
imul r14d
mov edi, edx
sar edi, 5
mov eax, edi
shr eax, 0x1f
add edi, eax
lea eax, [rdi - 1]
movsxd rcx, eax
lea rax, [rcx + rcx*4]
lea rcx, [rsp + 0x38]
lea rbx, [r12 + rax*4 + 0x1d9c20]
mov rdx, rbx
call fcn.011da880
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.011da880
sub r13d, edi
mov edi, dword [rsp + 0x24]
mov ebx, dword [rsp + 0x28]
mov ebp, dword [rsp + 0x3c]
mov r11d, dword [rsp + 0x44]
jmp 0x11da176
test edx, edx
mov eax, 0xfffffe00
je 0x11da148
jmp 0x11da143
test ebx, ebx
je 0x1426734
mov r8d, ebx
mov dword [rsp + 0x40], ebx
mov ebx, r9d
mov dword [rsp + 0x3c], ebx
sub r10d, 0x20
mov dword [rsp + 0x44], r10d
mov dword [rsp + 0x38], esi
mov r9d, esi
jmp 0x11da4b6
test r14d, r14d
je 0x142689d
mov ebx, r14d
mov dword [rsp + 0x6c], r13d
sub r9d, 0x20
mov r14d, r13d
mov dword [rsp + 0x74], r9d
mov dword [rsp + 0x68], esi
mov r13d, esi
mov dword [rsp + 0x70], ebx
jmp 0x11da5ba
test r11d, r11d
je 0x1426931
mov edi, r11d
mov dword [rsp + 0x58], r11d
mov dword [rsp + 0x80], r12d
mov r11d, r12d
mov dword [rsp + 0x54], r12d
sub r9d, 0x20
mov dword [rsp + 0x5c], r9d
mov dword [rsp + 0x50], esi
mov r12d, esi
jmp 0x11da6bf
test ebp, ebp
je 0x1426a8e
mov r8d, ebp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x24], r11d
mov ebp, r11d
sub r9d, 0x20
mov dword [rsp + 0x2c], r9d
mov dword [rsp + 0x20], esi
mov r11d, esi
jmp 0x11da7c0
add ebx, 0xffffffff
bt ebx, 0x1f
mov dword [rsp + 0x28], ebx
jb 0x11da15b
lea rcx, [rsp + 0x20]
call fcn.0120dba0
mov r11d, dword [rsp + 0x44]
mov ebx, dword [rsp + 0x28]
mov edi, dword [rsp + 0x24]
jmp 0x11da162
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
movsd qword [rax + 8], xmm0
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
mov rbp, qword [rax + 8]
xor esi, esi
movaps xmmword [rax - 0x58], xmm6
mov rbx, rbp
mov r15, r9
mov rdi, r8
movsd xmm6, xmm0
shr rbx, 0x20
mov r14, rdx
mov r13d, esi
shr ebx, 0x14
and ebx, 0x7ff
jle 0x1426221
lea eax, [rbx - 0x3ff]
cmp eax, 0x34
ja 0x11da0af
call sub.MSVCR80.dll_floor
ucomisd xmm6, xmm0
jp 0x11da0af
jne 0x11da0af
comisd xmm6, xmmword [0x01336e70]
mov ecx, esi
jae 0x1426217
lea r12, [0x01000000]
movsxd rax, ecx
comisd xmm6, xmmword [r12 + rax*8 + 0x336e50]
jae 0x1336ef0
movsxd rax, ecx
comisd xmm6, xmmword [r12 + rax*8 + 0x336e40]
jb 0x1336d57
add ecx, 2
movsxd rax, ecx
comisd xmm6, xmmword [r12 + rax*8 + 0x336e38]
jae 0x1336f8b
xorpd xmm3, xmm3
lea eax, [rcx + 1]
movsxd rdx, ecx
ucomisd xmm3, xmm6
mov dword [r15], eax
jp 0x1336d7f
je 0x1336deb
mov r8, r14
test rdx, rdx
js 0x1426b01
cmp ecx, 0xb8
ja 0x1426b01
movsd xmm2, qword [r12 + rdx*8 + 0x336e30]
movsd xmm0, xmm6
divsd xmm0, xmm2
cvttsd2si r9, xmm0
movsd xmm0, xmm3
movzx eax, r9b
cvtsi2sd xmm1, eax
movsxd rax, esi
cmp rax, rdi
mulsd xmm1, xmm2
subsd xmm0, xmm1
addsd xmm6, xmm0
jae 0x1426b01
mov byte [r8], r9b
add r8, 1
add esi, 1
sub ecx, 1
sub rdx, 1
ucomisd xmm3, xmm6
jp 0x1336d82
jne 0x1336d82
movsxd rax, esi
cmp rax, rdi
jae 0x1426b01
lea rcx, [rax + r14]
mov rax, qword [rsp + 0x130]
mov qword [rax], rcx
mov eax, 1
jmp 0x1336e0d
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
add ecx, 4
jmp 0x1336d45
add ecx, 1
jmp 0x1336d6a
mov ecx, 8
jmp 0x1336d2b
mov eax, dword [rsp + 0x114]
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x38]
and eax, 0xfffff
mov dword [rsp + 0x54], ebp
mov dword [rsp + 0x50], esi
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x5c], 0xfffffc0e
mov dword [rsp + 0x60], esi
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov eax, dword [rcx + 0x10]
lea rcx, [rsp + 0x38]
mov dword [rdx + 0x10], eax
mov dword [rsp + 0x38], 0x80000000
mov rax, qword [rcx]
mov rdi, qword [rsp + 0x38]
lea rdx, [rsp + 0x20]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
shr rdi, 0x20
mov qword [rdx + 8], rax
mov eax, dword [rcx + 0x10]
sub edi, 1
cmp edi, 0xffffffff
mov dword [rdx + 0x10], eax
mov ebx, dword [rsp + 0x28]
mov dword [rsp + 0x24], edi
jb 0x14262a9
add ebx, 0xffffffff
mov dword [rsp + 0x28], ebx
cmp dword [rsp + 0x40], esi
mov ebp, dword [rsp + 0x3c]
mov r11d, dword [rsp + 0x44]
jne 0x14262e4
test ebp, ebp
mov dword [rsp + 0x38], esi
jne 0x14262ce
mov dword [rsp + 0x40], 0x80000000
sub r11d, 0x40
jmp 0x14262df
mov dword [rsp + 0x40], ebp
mov ebp, 0x80000000
sub r11d, 0x20
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x44], r11d
mov eax, dword [rsp + 0x40]
mov r9d, esi
test eax, 0xffff0000
jne 0x14262fb
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x1426309
add r9d, 8
shl eax, 8
test eax, 0xf0000000
jne 0x1426317
add r9d, 4
shl eax, 4
test eax, 0xc0000000
jne 0x1426325
add r9d, 2
shl eax, 2
bt eax, 0x1f
jb 0x142632f
add r9d, 1
test r9d, r9d
je 0x1426374
mov edx, dword [rsp + 0x40]
mov eax, ebp
mov ecx, r9d
shl edx, cl
mov r8d, 0x20
sub r8d, r9d
mov ecx, r8d
shr eax, cl
or edx, eax
mov eax, ebp
mov dword [rsp + 0x40], edx
mov edx, dword [rsp + 0x38]
shr edx, cl
mov ecx, r9d
shl dword [rsp + 0x38], cl
shl eax, cl
mov ebp, edx
or ebp, eax
sub r11d, r9d
mov dword [rsp + 0x44], r11d
mov dword [rsp + 0x3c], ebp
test ebx, ebx
jne 0x14263c9
test edi, edi
jne 0x14263a7
cmp dword [rsp + 0x20], esi
jne 0x142638b
mov dword [rsp + 0x2c], esi
jmp 0x11da162
mov r9d, dword [rsp + 0x2c]
mov ebx, dword [rsp + 0x20]
mov dword [rsp + 0x20], esi
sub r9d, 0x40
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x2c], r9d
jmp 0x14263ce
mov r9d, dword [rsp + 0x2c]
mov ebx, edi
mov edi, dword [rsp + 0x20]
sub r9d, 0x20
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], esi
mov dword [rsp + 0x2c], r9d
mov dword [rsp + 0x24], edi
jmp 0x14263ce
mov r9d, dword [rsp + 0x2c]
test ebx, 0xffff0000
mov eax, ebx
mov r8d, esi
jne 0x14263e4
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x14263f2
add r8d, 8
shl eax, 8
test eax, 0xf0000000
jne 0x1426400
add r8d, 4
shl eax, 4
test eax, 0xc0000000
jne 0x142640e
add r8d, 2
shl eax, 2
bt eax, 0x1f
jb 0x1426418
add r8d, 1
test r8d, r8d
je 0x11da162
mov eax, edi
mov ecx, r8d
mov edx, 0x20
shl ebx, cl
sub edx, r8d
mov ecx, edx
shr eax, cl
or ebx, eax
mov eax, dword [rsp + 0x20]
shr eax, cl
mov ecx, r8d
mov dword [rsp + 0x28], ebx
shl dword [rsp + 0x20], cl
shl edi, cl
or eax, edi
sub r9d, r8d
mov dword [rsp + 0x2c], r9d
mov edi, eax
mov dword [rsp + 0x24], eax
jmp 0x11da162
lea ecx, [r11 - 0x19]
mov eax, 0x523a759
lea r12, [0x01000000]
imul ecx, ecx, 0xf
imul ecx
mov r13d, edx
sar r13d, 5
mov eax, r13d
shr eax, 0x1f
add r13d, eax
test r13d, r13d
jle 0x14264cc
lea eax, [r13 + 0x1e]
movsxd rcx, eax
lea rax, [rcx + rcx*4]
lea rcx, [rsp + 0x38]
lea rbx, [r12 + rax*4 + 0x5849e0]
mov rdx, rbx
call fcn.011da880
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.011da880
mov r11d, dword [rsp + 0x44]
mov ebp, dword [rsp + 0x3c]
mov ebx, dword [rsp + 0x28]
mov edi, dword [rsp + 0x24]
shl r13d, 5
jmp 0x14264cf
mov r13d, esi
cmp r11d, 0x20
jl 0x11da176
lea ecx, [r11 - 0x19]
mov eax, 0x4d4873ed
shl ecx, 5
imul ecx
mov edi, edx
sar edi, 5
mov eax, edi
shr eax, 0x1f
add edi, eax
lea eax, [rdi - 1]
movsxd rcx, eax
lea rax, [rcx + rcx*4]
lea rcx, [rsp + 0x38]
lea rbx, [r12 + rax*4 + 0x5849e0]
mov rdx, rbx
call fcn.011da880
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.011da880
add r13d, edi
jmp 0x11dab05
lea eax, [r13 + 0x1e]
movsxd rcx, eax
lea rax, [rcx + rcx*4]
lea rcx, [rsp + 0x38]
lea rbx, [r12 + rax*4 + 0x1d9c20]
mov rdx, rbx
call fcn.011da880
lea rcx, [rsp + 0x20]
mov rdx, rbx
call fcn.011da880
mov r11d, dword [rsp + 0x44]
mov ebp, dword [rsp + 0x3c]
mov ebx, dword [rsp + 0x28]
mov edi, dword [rsp + 0x24]
neg r13d
shl r13d, 5
jmp 0x11daab1
mov edx, dword [rsp + 0x38]
add edx, eax
cmp edx, eax
mov dword [rsp + 0x38], edx
jae 0x11da1a3
add ebp, 1
cmp ebp, 1
mov dword [rsp + 0x3c], ebp
jae 0x11da1a3
mov eax, dword [rsp + 0x40]
add eax, 1
cmp eax, 1
mov dword [rsp + 0x40], eax
jae 0x11da1a3
mov eax, edx
and edx, 1
mov dword [rsp + 0x40], 0x80000000
shr eax, 1
add eax, edx
add r11d, 1
mov dword [rsp + 0x44], r11d
mov dword [rsp + 0x38], eax
jmp 0x11da1a3
mov eax, dword [rsp + 0x68]
neg ecx
add eax, ecx
cmp eax, ecx
mov dword [rsp + 0x68], eax
jb 0x11da1b6
mov eax, dword [rsp + 0x6c]
add eax, 0xffffffff
cmp eax, 0xffffffff
mov dword [rsp + 0x6c], eax
jb 0x11da1b6
mov eax, dword [rsp + 0x70]
add eax, 0xffffffff
bt eax, 0x1f
mov dword [rsp + 0x70], eax
jb 0x11da1b6
lea rcx, [rsp + 0x68]
call fcn.0120dba0
nop
jmp 0x11da1b6
mov eax, dword [rsp + 0x20]
lea edx, [rcx + rax]
cmp edx, ecx
mov dword [rsp + 0x50], edx
jae 0x11da204
mov eax, dword [rsp + 0x54]
add eax, 1
cmp eax, 1
mov dword [rsp + 0x54], eax
jae 0x11da204
mov eax, dword [rsp + 0x58]
add eax, 1
cmp eax, 1
mov dword [rsp + 0x58], eax
jae 0x11da204
mov eax, edx
and edx, 1
mov dword [rsp + 0x58], 0x80000000
shr eax, 1
add eax, edx
add dword [rsp + 0x5c], 1
mov dword [rsp + 0x50], eax
jmp 0x11da204
mov eax, dword [rsp + 0x20]
neg ecx
add eax, ecx
cmp eax, ecx
mov dword [rsp + 0x20], eax
jb 0x11da210
add edi, 0xffffffff
cmp edi, 0xffffffff
mov dword [rsp + 0x24], edi
jb 0x11da210
add ebx, 0xffffffff
bt ebx, 0x1f
mov dword [rsp + 0x28], ebx
jb 0x11da210
lea rcx, [rsp + 0x20]
call fcn.0120dba0
nop
jmp 0x11da210
mov r9d, 0x5f5e100
add r13d, 8
jmp 0x11da267
add r9d, r11d
cmp r9d, r11d
mov dword [rsp + 0x38], r9d
jae 0x11da477
add ebx, 1
cmp ebx, 1
mov dword [rsp + 0x3c], ebx
jae 0x11da477
mov r10d, dword [rsp + 0x44]
add r8d, 1
cmp r8d, 1
mov dword [rsp + 0x40], r8d
jae 0x11da47c
mov ecx, r9d
and r9d, 1
mov r8d, 0x80000000
shr ecx, 1
mov dword [rsp + 0x40], r8d
add r9d, ecx
add r10d, 1
mov dword [rsp + 0x44], r10d
mov dword [rsp + 0x38], r9d
jmp 0x11da47c
mov dword [rsp + 0x90], esi
jmp 0x11da54d
test r9d, r9d
jne 0x1426742
mov dword [rsp + 0x44], esi
jmp 0x11da541
mov r8d, r9d
mov dword [rsp + 0x40], r9d
sub r10d, 0x40
jmp 0x12326c0
neg r11d
add r13d, r11d
cmp r13d, r11d
mov dword [rsp + 0x68], r13d
jb 0x11da57e
add r14d, 0xffffffff
cmp r14d, 0xffffffff
mov dword [rsp + 0x6c], r14d
jb 0x11da57e
add ebx, 0xffffffff
bt ebx, 0x1f
mov dword [rsp + 0x70], ebx
jb 0x11da57e
test ebx, ebx
jne 0x14267e9
test r14d, r14d
jne 0x14267c3
test r13d, r13d
jne 0x14267a5
mov r9d, esi
mov dword [rsp + 0x74], esi
jmp 0x11da583
mov r9d, dword [rsp + 0x74]
mov ebx, r13d
mov dword [rsp + 0x68], esi
sub r9d, 0x40
mov dword [rsp + 0x70], ebx
mov r13d, esi
mov dword [rsp + 0x74], r9d
jmp 0x14267ee
mov r9d, dword [rsp + 0x74]
mov ebx, r14d
mov dword [rsp + 0x6c], r13d
sub r9d, 0x20
mov r14d, r13d
mov dword [rsp + 0x70], ebx
mov dword [rsp + 0x74], r9d
mov r13d, esi
mov dword [rsp + 0x68], esi
jmp 0x14267ee
mov r9d, dword [rsp + 0x74]
test ebx, 0xffff0000
mov eax, ebx
mov r10d, esi
jne 0x1426804
mov r10d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x1426812
add r10d, 8
shl eax, 8
test eax, 0xf0000000
jne 0x1426820
add r10d, 4
shl eax, 4
test eax, 0xc0000000
jne 0x142682e
add r10d, 2
shl eax, 2
bt eax, 0x1f
jb 0x1426838
add r10d, 1
test r10d, r10d
je 0x11da583
mov edx, r14d
mov eax, ebx
mov r8d, 0x20
sub r8d, r10d
mov ecx, r8d
shr edx, cl
mov ecx, r10d
shl eax, cl
mov ebx, edx
mov ecx, r8d
or ebx, eax
mov eax, r14d
mov edx, r13d
shr edx, cl
mov ecx, r10d
mov dword [rsp + 0x70], ebx
shl eax, cl
shl r13d, cl
mov r14d, edx
or r14d, eax
sub r9d, r10d
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x74], r9d
mov dword [rsp + 0x6c], r14d
jmp 0x11da583
mov dword [rsp + 0x8c], esi
jmp 0x11da64a
test r13d, r13d
jne 0x14268ab
mov dword [rsp + 0x74], esi
jmp 0x11da64a
mov ebx, r13d
sub r9d, 0x40
jmp 0x12326e9
add r12d, r11d
cmp r12d, r11d
mov r11d, dword [rsp + 0x54]
mov dword [rsp + 0x50], r12d
jae 0x11da67b
add r11d, 1
cmp r11d, 1
mov dword [rsp + 0x80], r11d
mov dword [rsp + 0x54], r11d
jae 0x11da683
mov r9d, dword [rsp + 0x5c]
add edi, 1
cmp edi, 1
mov dword [rsp + 0x58], edi
jae 0x11da688
mov ecx, r12d
and r12d, 1
mov edi, 0x80000000
shr ecx, 1
mov dword [rsp + 0x58], edi
add r12d, ecx
add r9d, 1
mov dword [rsp + 0x5c], r9d
mov dword [rsp + 0x50], r12d
jmp 0x11da688
mov dword [rsp + 0x94], esi
jmp 0x11da759
test r12d, r12d
jne 0x142693f
mov dword [rsp + 0x5c], esi
jmp 0x11da759
mov edi, r12d
mov dword [rsp + 0x58], r12d
sub r9d, 0x40
jmp 0x1232723
neg eax
add r11d, eax
cmp r11d, eax
mov dword [rsp + 0x20], r11d
jb 0x11da787
add ebp, 0xffffffff
cmp ebp, 0xffffffff
mov dword [rsp + 0x24], ebp
jb 0x11da787
add r8d, 0xffffffff
bt r8d, 0x1f
mov dword [rsp + 0x28], r8d
jb 0x11da787
test r8d, r8d
jne 0x14269e6
test ebp, ebp
jne 0x14269c0
test r11d, r11d
jne 0x14269a1
mov r9d, esi
mov dword [rsp + 0x2c], esi
jmp 0x11da78c
mov r9d, dword [rsp + 0x2c]
mov r8d, r11d
mov dword [rsp + 0x28], r11d
sub r9d, 0x40
mov r11d, esi
mov dword [rsp + 0x20], esi
mov dword [rsp + 0x2c], r9d
jmp 0x14269eb
mov r9d, dword [rsp + 0x2c]
mov r8d, ebp
mov dword [rsp + 0x28], ebp
sub r9d, 0x20
mov ebp, r11d
mov dword [rsp + 0x24], r11d
mov dword [rsp + 0x2c], r9d
mov r11d, esi
mov dword [rsp + 0x20], esi
jmp 0x14269eb
mov r9d, dword [rsp + 0x2c]
test r8d, 0xffff0000
mov eax, r8d
mov r10d, esi
jne 0x1426a03
mov r10d, reloc.OLEAUT32.dll_SafeArrayGetDim
shl eax, 0x10
test eax, 0xff000000
jne 0x1426a11
add r10d, 8
shl eax, 8
test eax, 0xf0000000
jne 0x1426a1f
add r10d, 4
shl eax, 4
test eax, 0xc0000000
jne 0x1426a2d
add r10d, 2
shl eax, 2
bt eax, 0x1f
jb 0x1426a37
add r10d, 1
test r10d, r10d
je 0x11da78c
mov eax, ebp
mov ecx, r10d
mov edx, 0x20
shl r8d, cl
sub edx, r10d
mov ecx, edx
shr eax, cl
mov ecx, r10d
shl ebp, cl
or r8d, eax
mov ecx, edx
mov eax, r11d
mov dword [rsp + 0x28], r8d
shr eax, cl
mov ecx, r10d
shl r11d, cl
or ebp, eax
sub r9d, r10d
mov dword [rsp + 0x2c], r9d
mov dword [rsp + 0x24], ebp
mov dword [rsp + 0x20], r11d
jmp 0x11da78c
mov r15d, esi
jmp 0x11da84f
test r11d, r11d
jne 0x1426a9c
mov dword [rsp + 0x2c], esi
jmp 0x11da84f
mov r8d, r11d
mov dword [rsp + 0x28], r11d
sub r9d, 0x40
jmp 0x123274f
test r11d, r11d
mov r11, qword [rsp + 0x110]
jne 0x11da3b5
test r12d, r12d
jne 0x11da3b5
mov eax, r11d
and eax, 1
test al, al
jne 0x11da3b5
mov r10d, dword [rsp + 0x84]
jmp 0x11d713f
test r14d, r14d
jne 0x11da3d8
test r13d, r13d
jne 0x11da3d8
and r11d, 1
test r11b, r11b
je 0x11da3d8
xor eax, eax
jmp 0x1336e0d