Function at 0x10021a50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007177f
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x1008d200]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
xor edi, edi
mov dword [ebp - 4], edi
mov eax, dword [ebx + 0x38]
cmp eax, edi
je 0x10021aa3
cmp byte [eax], 0
jne 0x100236c2
cmp eax, edi
jne 0x10021adc
push 0xe8
call fcn.1005ce85
mov esi, eax
add esp, 4
cmp esi, edi
je 0x10021ad7
push ecx
mov ecx, dword [ebp + 0xc]
mov eax, esp
mov dword [eax], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x64], esp
cmp eax, edi
je 0x10021ad0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
call fcn.10020450
jmp 0x10021ad9
xor eax, eax
mov dword [ebx + 0x38], eax
mov ecx, dword [ebx + 0x34]
cmp byte [ecx], 0
jne 0x10021b03
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x100236d8
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x100236d8
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x98], edi
mov eax, dword [eax + 4]
cmp eax, edi
jne 0x10021b38
push 0x80004003
call fcn.10069d90
mov ecx, dword [eax]
lea edx, [ebp - 0x70]
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
cmp eax, edi
jl 0x1002364e
mov ecx, dword [ebx + 0x38]
add ecx, 0x44
push ecx
mov ecx, dword [ebp - 0x70]
push 0x10023700
push ebx
call fcn.10021550
test al, al
je 0x1002364e
mov edx, dword [ebx + 0x38]
mov ecx, dword [ebp - 0x70]
add edx, 0x48
push edx
push 0x1001e120
push ebx
call fcn.10021550
test al, al
je 0x1002364e
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebp - 0x70]
add eax, 0x4c
push eax
push 0x100238c0
push ebx
call fcn.10021550
test al, al
je 0x1002364e
mov ecx, dword [ebx + 0x38]
add ecx, 0x50
push ecx
mov ecx, dword [ebp - 0x70]
push 0x10023a10
push ebx
call fcn.10021550
test al, al
je 0x1002364e
mov edx, dword [ebx + 0x38]
mov ecx, dword [ebp - 0x70]
add edx, 0x54
push edx
push 0x1001e380
push ebx
call fcn.10021550
test al, al
je 0x1002364e
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x34]
add eax, 0xc
push eax
push edi
push edi
sub ecx, 0xffffff80
push ecx
mov ecx, dword [ebp - 0x70]
push ebx
call fcn.1001b4f0
test al, al
je 0x1002364e
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x6c], eax
cmp eax, edi
je 0x10021c13
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov ecx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x34]
add ecx, 0x10
push ecx
mov ecx, dword [ebp - 0x70]
push 1
lea edx, [ebp - 0x6c]
push edx
add eax, 0x84
push eax
push ebx
call fcn.1001b4f0
push 0x1001a260
push 1
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021c55
lea ecx, [ebp - 0x6c]
push ecx
call fcn.1005d494
jmp 0x1002364e
lea edx, [ebp - 0x6c]
push edx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x10021c73
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x10021c88
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x10021c9d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10021cb2
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 2
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x14
push eax
push 4
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x20
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 4
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021cf2
lea eax, [ebp - 0x20]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x20]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x48], eax
cmp eax, edi
je 0x10021d10
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x44], eax
cmp eax, edi
je 0x10021d25
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x40], eax
cmp eax, edi
je 0x10021d3a
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x3c], eax
cmp eax, edi
je 0x10021d4f
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x38], eax
cmp eax, edi
je 0x10021d64
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 3
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x18
push eax
push 5
lea ecx, [ebp - 0x48]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x1c
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 5
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021da4
lea eax, [ebp - 0x48]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x48]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x10021dc2
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x58]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x10021dd7
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 4
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x1c
push eax
push 2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x84
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021e1a
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x10021e38
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x10021e4d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10021e62
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 5
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x20
push eax
push 3
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x6c
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 3
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021ea2
lea eax, [ebp - 0x1c]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x10021ec0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x10021ed5
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 6
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x24
push eax
push 2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x84
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021f18
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x10021f36
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x10021f4b
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10021f60
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 7
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x28
push eax
push 3
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x64
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 3
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10021fa0
lea eax, [ebp - 0x1c]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x10021fbe
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x10021fd3
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 8
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x2c
push eax
push 2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x64
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022013
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x20], eax
cmp eax, edi
je 0x10022031
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x10022046
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x1002205b
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10022070
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 9
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x30
push eax
push 4
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x70]
add edx, 0x64
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 4
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x100220b0
lea eax, [ebp - 0x20]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x20]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x100220ce
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x100220e3
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x34
push eax
push 2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
sub edx, 0xffffff80
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022123
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x10022141
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x10022156
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x38
push eax
push 2
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x70]
sub edx, 0xffffff80
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022196
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x100221b4
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x100221c9
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x100221de
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x3c
push eax
push 3
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x70]
sub edx, 0xffffff80
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 3
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x1002221e
lea eax, [ebp - 0x1c]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x1002223c
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x10022251
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x58]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10022266
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebx + 0x38]
mov edx, dword [ebx + 0x34]
add eax, 0x40
push eax
push 3
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, dword [ebp - 0x70]
sub edx, 0xffffff80
push edx
push ebx
call fcn.1001b4f0
push 0x1001a260
push 3
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x100222a6
lea eax, [ebp - 0x1c]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1005d494
mov esi, dword [ebx + 0x38]
add esi, 0x74
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x78
call fcn.1001fb60
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x44]
cmp eax, edi
jne 0x100222d9
push 0x80004003
call fcn.10069d90
mov edx, dword [eax]
mov edx, dword [edx + 0xb8]
lea ecx, [ebp - 0xa4]
push ecx
push 0x28
push eax
call edx
cmp eax, edi
jl 0x1002364e
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x88]
push eax
push 1
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov eax, dword [ebp - 0xa4]
lea edx, [ebp - 0x74]
push edx
push 1
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa8], eax
cmp eax, dword [ebp - 0x74]
jg 0x1002244e
mov dword [ebp - 0x60], edi
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 0xe
call fcn.1001fb80
mov edx, dword [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp eax, edi
jl 0x1002246d
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x10022374
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x64]
mov dword [ebp - 0x7c], eax
cmp eax, edi
je 0x10022389
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x84], eax
cmp eax, edi
je 0x100223a5
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebx + 0x34]
push 2
lea eax, [ebp - 0x80]
sub ecx, 0xffffff80
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100223ca
mov edi, dword [ebx + 0x38]
add edi, 0x74
jmp 0x100223ec
mov eax, dword [ebx + 0x34]
push 1
lea edx, [ebp - 0x84]
push edx
sub eax, 0xffffff80
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100223f4
mov edi, dword [ebx + 0x38]
add edi, 0x78
lea eax, [ebp - 0x60]
call fcn.1001a230
push 0x1001a260
push 1
push 4
lea ecx, [ebp - 0x84]
push ecx
mov byte [ebp - 4], 0xf
call fcn.1005d494
push 0x1001a260
push 2
push 4
lea edx, [ebp - 0x80]
push edx
mov byte [ebp - 4], 0xe
call fcn.1005d494
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
xor edi, edi
cmp eax, edi
je 0x10022438
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp eax, dword [ebp - 0x74]
jle 0x10022333
mov esi, dword [ebx + 0x38]
add esi, 0x58
call fcn.1001fb60
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
cmp eax, edi
jne 0x10022489
push 0x80004003
call fcn.10069d90
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
cmp eax, edi
je 0x1002364e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x1002364e
mov ecx, dword [eax]
lea edx, [ebp - 0x9c]
push edx
push 0x26
push eax
mov eax, dword [ecx + 0xc0]
call eax
cmp eax, edi
jl 0x1002364e
mov edx, dword [ebp - 0x9c]
lea ecx, [ebp - 0x88]
push ecx
push 1
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x74]
push eax
push 1
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0x74]
jg 0x100225d3
xor edi, edi
mov dword [ebp - 0x60], edi
lea esi, [ebp - 0x60]
call fcn.1001fb80
push eax
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp eax, edi
jl 0x1002246d
mov dword [ebp - 0x6c], edi
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x60]
cmp eax, edi
je 0x10021b2e
mov edi, dword [eax]
lea esi, [ebp - 0x6c]
mov dword [ebp - 0x64], eax
call fcn.1001fb80
mov ecx, dword [ebp - 0x64]
mov edx, dword [edi + 0x48]
push eax
push ecx
call edx
test eax, eax
js 0x1002263d
mov ecx, dword [ebx + 0x38]
mov dword [ebp - 0x84], 0
cmp dword [ecx + 0x58], 0
sete al
test al, al
je 0x10022597
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x10021b2e
mov ecx, dword [ecx + 0xc]
mov edx, dword [eax]
lea esi, [ebp - 0x84]
push esi
push ecx
push eax
mov eax, dword [edx + 0x1c8]
call eax
test eax, eax
js 0x1002263d
cmp word [ebp - 0x84], 0xffff
jne 0x10022597
mov edi, dword [ebx + 0x38]
add edi, 0x58
lea eax, [ebp - 0x60]
call fcn.1001a230
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x100225aa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x100225bd
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp eax, dword [ebp - 0x74]
jle 0x100224e3
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x4c]
xor edi, edi
mov dword [ebp - 0x68], eax
cmp eax, edi
je 0x100225ea
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x100225ff
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x13
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x5c]
push ecx
lea edx, [ebp - 0x68]
push edx
add eax, 0x48
push 0x14
push eax
mov eax, 2
call fcn.10020e00
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x1002266c
lea eax, [ebp - 0x68]
push eax
call fcn.1005d494
jmp 0x1002364e
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x10022650
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x1002364e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x1002364e
lea ecx, [ebp - 0x68]
push ecx
call fcn.1005d494
mov esi, dword [ebx + 0x38]
add esi, 0x7c
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
sub esi, 0xffffff80
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x84
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x88
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x8c
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x90
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x94
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0x98
call fcn.1001fb60
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x48]
cmp eax, edi
jne 0x100226f3
push 0x80004003
call fcn.10069d90
mov edx, dword [eax]
mov edx, dword [edx + 0xb8]
lea ecx, [ebp - 0x94]
push ecx
push 0x26
push eax
call edx
cmp eax, edi
jl 0x1002364e
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x88]
push eax
push 1
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x74]
push edx
push 1
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
cmp eax, dword [ebp - 0x74]
jg 0x10022b93
lea ecx, [ecx]
mov dword [ebp - 0x60], edi
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 0x14
call fcn.1001fb80
mov edx, dword [ebp - 0x94]
push eax
lea ecx, [ebp - 0x84]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp eax, edi
jl 0x1002246d
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x8c], eax
cmp eax, edi
je 0x10022794
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x100227ad
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x100227c2
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x100227d7
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x78], eax
cmp eax, edi
je 0x100227f0
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x44], eax
cmp eax, edi
je 0x10022809
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x40], eax
cmp eax, edi
je 0x1002281e
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x3c], eax
cmp eax, edi
je 0x10022833
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x38], eax
cmp eax, edi
je 0x10022848
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x18
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x58]
mov dword [ebp - 0x90], eax
cmp eax, edi
je 0x10022864
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x19
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x1002287d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x7c], eax
cmp eax, edi
je 0x10022892
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x1a
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x6c], eax
cmp eax, edi
je 0x100228ab
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x1b
mov eax, dword [ebx + 0x34]
push edi
push edi
sub eax, 0xffffff80
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100229b4
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], edi
cmp eax, edi
je 0x10021b2e
mov ecx, dword [eax]
lea edx, [ebp - 0x64]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
cmp word [ebp - 0x64], 0xffff
jne 0x100229a9
push 0x1001a260
push 1
push 4
lea ecx, [ebp - 0x6c]
push ecx
mov byte [ebp - 4], 0x1a
call fcn.1005d494
push 0x1001a260
push 2
push 4
lea edx, [ebp - 0x80]
push edx
mov byte [ebp - 4], 0x19
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea eax, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x18
call fcn.1005d494
push 0x1001a260
push 4
push 4
lea ecx, [ebp - 0x44]
push ecx
mov byte [ebp - 4], 0x17
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea edx, [ebp - 0x78]
push edx
mov byte [ebp - 4], 0x16
call fcn.1005d494
push 0x1001a260
push 3
push 4
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0x15
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea ecx, [ebp - 0x8c]
push ecx
mov byte [ebp - 4], 0x14
call fcn.1005d494
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
cmp eax, edi
je 0x10022b7d
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x10022b7d
mov edi, dword [ebx + 0x38]
add edi, 0x7c
jmp 0x10022ac0
mov edx, dword [ebx + 0x34]
push 1
lea ecx, [ebp - 0x8c]
push ecx
add edx, 0x64
push edx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100229db
mov edi, dword [ebx + 0x38]
sub edi, 0xffffff80
jmp 0x10022ac0
mov ecx, dword [ebx + 0x34]
push 1
lea eax, [ebp - 0x78]
add ecx, 0x74
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022a02
mov edi, dword [ebx + 0x38]
add edi, 0x88
jmp 0x10022ac0
mov eax, dword [ebx + 0x34]
push 3
lea edx, [ebp - 0x1c]
push edx
add eax, 0x20
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022a29
mov edi, dword [ebx + 0x38]
add edi, 0x84
jmp 0x10022ac0
mov edx, dword [ebx + 0x34]
push 4
lea ecx, [ebp - 0x44]
push ecx
add edx, 0x1c
push edx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022a4d
mov edi, dword [ebx + 0x38]
add edi, 0x8c
jmp 0x10022ac0
mov ecx, dword [ebx + 0x34]
push 1
lea eax, [ebp - 0x90]
add ecx, 0x84
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022a77
mov edi, dword [ebx + 0x38]
add edi, 0x90
jmp 0x10022ac0
mov eax, dword [ebx + 0x34]
push 2
lea edx, [ebp - 0x80]
push edx
add eax, 0x6c
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022a9b
mov edi, dword [ebx + 0x38]
add edi, 0x94
jmp 0x10022ac0
mov edx, dword [ebx + 0x34]
push 1
lea ecx, [ebp - 0x6c]
push ecx
add edx, 0x84
push edx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10022ac8
mov edi, dword [ebx + 0x38]
add edi, 0x98
lea eax, [ebp - 0x60]
call fcn.1001a230
push 0x1001a260
push 1
push 4
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x1a
call fcn.1005d494
push 0x1001a260
push 2
push 4
lea ecx, [ebp - 0x80]
push ecx
mov byte [ebp - 4], 0x19
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea edx, [ebp - 0x90]
push edx
mov byte [ebp - 4], 0x18
call fcn.1005d494
push 0x1001a260
push 4
push 4
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0x17
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea ecx, [ebp - 0x78]
push ecx
mov byte [ebp - 4], 0x16
call fcn.1005d494
push 0x1001a260
push 3
push 4
lea edx, [ebp - 0x1c]
push edx
mov byte [ebp - 4], 0x15
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 0x14
call fcn.1005d494
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
xor edi, edi
cmp eax, edi
je 0x10022b7d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp eax, dword [ebp - 0x74]
jle 0x10022750
mov eax, dword [ebx + 0x38]
cmp dword [eax + 0x7c], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x80], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x88], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x8c], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x84], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x90], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x94], edi
sete cl
test cl, cl
jne 0x10022bff
cmp dword [eax + 0x98], edi
sete cl
test cl, cl
jne 0x10022bff
xor ecx, ecx
jmp 0x10022c04
mov ecx, 1
mov byte [eax + 8], cl
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x60]
push ecx
push edi
add eax, 0x50
push 0x34
push eax
xor eax, eax
call fcn.10020e00
test al, al
je 0x1002364e
mov esi, dword [ebx + 0x38]
add esi, 0xa4
call fcn.1001fb60
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x50]
cmp eax, edi
jne 0x10022c46
push 0x80004003
call fcn.10069d90
mov edx, dword [eax]
mov edx, dword [edx + 0xb8]
lea ecx, [ebp - 0xa0]
push ecx
push 0x26
push eax
call edx
cmp eax, edi
jl 0x1002364e
mov ecx, dword [ebp - 0xa0]
lea eax, [ebp - 0x88]
push eax
push 1
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x74]
push edx
push 1
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x8c], eax
cmp eax, dword [ebp - 0x74]
jg 0x10022d65
mov dword [ebp - 0x6c], edi
lea esi, [ebp - 0x6c]
mov byte [ebp - 4], 0x1c
call fcn.1001fb80
mov edx, dword [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x8c]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp eax, edi
jl 0x10022db8
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x10022ce1
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x7c], eax
cmp eax, edi
je 0x10022cf6
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebx + 0x34]
push 2
lea eax, [ebp - 0x80]
sub ecx, 0xffffff80
push eax
push ecx
lea ecx, [ebp - 0x6c]
call fcn.10024310
test al, al
je 0x10022d24
mov edi, dword [ebx + 0x38]
add edi, 0xa4
lea eax, [ebp - 0x6c]
call fcn.1001a230
push 0x1001a260
push 2
push 4
lea edx, [ebp - 0x80]
push edx
mov byte [ebp - 4], 0x1c
call fcn.1005d494
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x6c]
xor edi, edi
cmp eax, edi
je 0x10022d4f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp eax, dword [ebp - 0x74]
jle 0x10022ca0
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x78], eax
cmp eax, edi
je 0x10022d7a
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x1e
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x68]
push ecx
lea edx, [ebp - 0x78]
push edx
add eax, 0x54
push 0x34
push eax
mov eax, 1
call fcn.10020e00
push 0x1001a260
push 1
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022dc4
lea eax, [ebp - 0x78]
push eax
call fcn.1005d494
jmp 0x1002364e
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x6c]
jmp 0x10022474
lea ecx, [ebp - 0x78]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x10022de2
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x7c], eax
cmp eax, edi
je 0x10022df7
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x6c]
push ecx
lea edx, [ebp - 0x80]
push edx
add eax, 0x54
push 0x34
push eax
mov eax, 2
call fcn.10020e00
push 0x1001a260
push 2
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022e35
lea eax, [ebp - 0x80]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x80]
push ecx
call fcn.1005d494
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x10022e53
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x10022e68
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10022e7d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x20
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x70]
push ecx
lea edx, [ebp - 0x1c]
push edx
add eax, 0x54
push 0x34
push eax
mov eax, 3
call fcn.10020e00
push 0x1001a260
push 3
mov byte [ebp - 4], 0
push 4
test al, al
jne 0x10022ebb
lea eax, [ebp - 0x1c]
push eax
call fcn.1005d494
jmp 0x1002364e
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1005d494
mov esi, dword [ebx + 0x38]
add esi, 0xa8
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0xac
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0xb0
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0xb4
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0xb8
call fcn.1001fb60
mov esi, dword [ebx + 0x38]
add esi, 0xbc
call fcn.1001fb60
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x54]
cmp eax, edi
jne 0x10022f2c
push 0x80004003
call fcn.10069d90
mov edx, dword [eax]
mov edx, dword [edx + 0xb8]
lea ecx, [ebp - 0x98]
push ecx
push 0x26
push eax
call edx
cmp eax, edi
jl 0x1002364e
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x88]
push eax
push 1
push ecx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x74]
push edx
push 1
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x74]
jg 0x100231cf
mov dword [ebp - 0x60], edi
lea esi, [ebp - 0x60]
mov byte [ebp - 4], 0x21
call fcn.1001fb80
mov edx, dword [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayPutElement]
cmp eax, edi
jl 0x1002246d
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x6c]
mov dword [ebp - 0x6c], eax
cmp eax, edi
je 0x10022fc1
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x90], eax
cmp eax, edi
je 0x10022fdd
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x64], eax
cmp eax, edi
je 0x10022ff6
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x24
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x18], eax
cmp eax, edi
je 0x1002300f
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x14], eax
cmp eax, edi
je 0x10023024
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x25
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x2c]
mov dword [ebp - 0x80], eax
cmp eax, edi
je 0x1002303d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x34]
mov eax, dword [eax + 0x58]
mov dword [ebp - 0x7c], eax
cmp eax, edi
je 0x10023052
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x26
mov eax, dword [ebx + 0x34]
push edi
push edi
add eax, 0x64
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10023079
mov edi, dword [ebx + 0x38]
add edi, 0xa8
jmp 0x10023131
mov edx, dword [ebx + 0x34]
push 1
lea ecx, [ebp - 0x6c]
push ecx
add edx, 0x64
push edx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100230a0
mov edi, dword [ebx + 0x38]
add edi, 0xac
jmp 0x10023131
mov ecx, dword [ebx + 0x34]
push 1
lea eax, [ebp - 0x90]
sub ecx, 0xffffff80
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100230c7
mov edi, dword [ebx + 0x38]
add edi, 0xb0
jmp 0x10023131
mov eax, dword [ebx + 0x34]
push 1
lea edx, [ebp - 0x64]
push edx
sub eax, 0xffffff80
push eax
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x100230eb
mov edi, dword [ebx + 0x38]
add edi, 0xb4
jmp 0x10023131
mov edx, dword [ebx + 0x34]
push 2
lea ecx, [ebp - 0x18]
push ecx
sub edx, 0xffffff80
push edx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x1002310f
mov edi, dword [ebx + 0x38]
add edi, 0xb8
jmp 0x10023131
mov ecx, dword [ebx + 0x34]
push 2
lea eax, [ebp - 0x80]
sub ecx, 0xffffff80
push eax
push ecx
lea ecx, [ebp - 0x60]
call fcn.10024310
test al, al
je 0x10023139
mov edi, dword [ebx + 0x38]
add edi, 0xbc
lea eax, [ebp - 0x60]
call fcn.1001a230
push 0x1001a260
push 2
push 4
lea edx, [ebp - 0x80]
push edx
mov byte [ebp - 4], 0x25
call fcn.1005d494
push 0x1001a260
push 2
push 4
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x24
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea ecx, [ebp - 0x64]
push ecx
mov byte [ebp - 4], 0x23
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea edx, [ebp - 0x90]
push edx
mov byte [ebp - 4], 0x22
call fcn.1005d494
push 0x1001a260
push 1
push 4
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x21
call fcn.1005d494
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x60]
xor edi, edi
cmp eax, edi
je 0x100231bf
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x74]
jle 0x10022f83
mov eax, dword [ebx + 0x38]
lea ecx, [eax + 0x64]
push ecx
push edi
add eax, 0x4c
push 0x34
push eax
xor eax, eax
call fcn.10020e00
test al, al
je 0x1002364e
mov edx, dword [0x10098790]
mov edi, dword [ebx + 0x38]
mov eax, dword [edx + 0x5c]
lea esi, [edi + 0x9c]
call fcn.10028170
push eax
add edi, 0x2c
push edi
call fcn.10020f90
test al, al
je 0x1002364e
mov eax, dword [0x10098790]
mov edi, dword [ebx + 0x38]
mov eax, dword [eax + 0x5c]
lea esi, [edi + 0xa0]
call fcn.10028170
push eax
add edi, 0x30
push edi
call fcn.10020f90
test al, al
je 0x1002364e
mov eax, dword [ebx + 0x38]
lea ecx, [ebp - 0x64]
push ecx
lea edx, [eax + 0xb0]
push edx
add eax, 0x34
push eax
xor esi, esi
push ebx
mov dword [ebp - 0x64], esi
call fcn.100210c0
test al, al
je 0x1002364e
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebx + 0x38]
mov dword [eax + 0xd8], ecx
mov eax, dword [ebx + 0x38]
lea edx, [ebp - 0x64]
push edx
lea ecx, [eax + 0xb4]
push ecx
add eax, 0x38
push eax
push ebx
mov dword [ebp - 0x64], esi
call fcn.100210c0
test al, al
je 0x1002364e
mov eax, dword [ebp - 0x64]
mov edx, dword [ebx + 0x38]
mov dword [edx + 0xdc], eax
mov eax, dword [ebx + 0x38]
lea ecx, [ebp - 0x64]
push ecx
lea edx, [eax + 0xb8]
push edx
add eax, 0x3c
push eax
push ebx
mov dword [ebp - 0x64], esi
call fcn.100210c0
test al, al
je 0x1002364e
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebx + 0x38]
mov dword [eax + 0xe0], ecx
mov eax, dword [ebx + 0x38]
lea edx, [ebp - 0x64]
push edx
lea ecx, [eax + 0xbc]
push ecx
add eax, 0x40
push eax
push ebx
mov dword [ebp - 0x64], esi
call fcn.100210c0
test al, al
je 0x1002364e
mov eax, dword [ebp - 0x64]
mov edx, dword [ebx + 0x38]
mov dword [edx + 0xe4], eax
mov edx, dword [ebx + 0x34]
mov eax, dword [ebx + 0x38]
lea ecx, [ebp - 0x64]
push ecx
add edx, 0xb4
push edx
add eax, 0x10
push eax
push ebx
mov dword [ebp - 0x64], esi
call fcn.100210c0
test al, al
je 0x1002364e
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebp - 0x64]
mov dword [ecx + 0xc0], edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x48], eax
cmp eax, esi
je 0x10023342
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x44], eax
cmp eax, esi
je 0x10023357
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x40], eax
cmp eax, esi
je 0x1002336c
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x3c], eax
cmp eax, esi
je 0x10023381
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x38], eax
cmp eax, esi
je 0x10023396
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov byte [ebp - 4], 0x27
mov eax, dword [ebx + 0x38]
mov edi, 1
mov dword [ebp - 0x5c], 2
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], 3
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x4c], 5
cmp byte [eax + 8], 0
je 0x10023455
mov esi, dword [ebp - 0xb0]
push ebx
push 0x100253d0
push esi
add eax, 4
push eax
push ebx
call fcn.1001e770
test al, al
lea eax, [ebp - 0x48]
jne 0x10023401
push 0x1001a260
push 5
push 4
push eax
mov byte [ebp - 4], 0
call fcn.1005d494
jmp 0x1002364e
push 5
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x24]
push edx
push eax
push esi
push ebx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x14], 7
call fcn.10024c00
test al, al
jne 0x1002350a
push 0x1001a260
push 5
push 4
lea ecx, [ebp - 0x48]
push ecx
mov byte [ebp - 4], 0
call fcn.1005d494
jmp 0x1002364e
mov eax, dword [eax + 0x8c]
mov dword [ebp - 0x24], eax
cmp eax, esi
je 0x1002346a
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x84]
mov dword [ebp - 0x20], eax
cmp eax, esi
je 0x10023482
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x90]
mov dword [ebp - 0x1c], eax
cmp eax, esi
je 0x1002349a
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x94]
mov dword [ebp - 0x18], eax
cmp eax, esi
je 0x100234b2
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebx + 0x38]
mov eax, dword [eax + 0x98]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x100234ca
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
push 5
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x48]
push edx
push ebx
mov byte [ebp - 4], 0x28
call fcn.10025050
push 0x1001a260
push 5
mov byte [ebp - 4], 0x27
push 4
test al, al
jne 0x10023501
lea eax, [ebp - 0x24]
push eax
call fcn.1005d494
jmp 0x1002343a
lea edx, [ebp - 0x24]
push edx
call fcn.1005d494
push 0x1001a260
push 5
push 4
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0
call fcn.1005d494
lea eax, [ebp - 0x34]
call fcn.10010d00
mov byte [ebp - 4], 0x29
call fcn.10010df0
mov esi, eax
mov dword [ebp - 0xb0], esi
push esi
mov eax, 1
mov byte [ebp - 4], 0x2a
call fcn.10014520
mov edi, dword [ebx + 0x38]
push 0x10
add edi, 0xc0
call fcn.1005ce85
add esp, 4
test eax, eax
je 0x1002356a
mov dword [eax], 3
mov dword [eax + 8], edi
jmp 0x1002356c
xor eax, eax
push eax
call fcn.100144b0
push esi
mov eax, 1
call fcn.10014520
push 0x10
call fcn.1005ce85
add esp, 4
test eax, eax
je 0x1002359a
mov dword [eax], 2
mov dword [eax + 8], 0x18
jmp 0x1002359c
xor eax, eax
push eax
call fcn.100144b0
push 0x10
call fcn.1005ce85
add esp, 4
test eax, eax
je 0x100235bf
mov dword [eax], 2
mov dword [eax + 8], 0
jmp 0x100235c1
xor eax, eax
push eax
call fcn.100144b0
push esi
mov eax, 0x10
call fcn.10014520
mov edi, dword [ebx + 8]
push 0x10
call fcn.1005ce85
add esp, 4
test eax, eax
je 0x100235ee
mov dword [eax], 2
mov dword [eax + 8], edi
jmp 0x100235f0
xor eax, eax
push eax
call fcn.100144b0
push esi
mov eax, 6
call fcn.10014520
push esi
mov eax, 4
call fcn.10014520
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x34]
push edx
mov edx, esi
mov dword [ebp - 0x64], 0
call fcn.10011f20
test al, al
je 0x10023636
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebx + 0x38]
mov dword [ebx + 8], eax
test eax, eax
setne al
mov byte [ecx], al
lea eax, [ebp - 0xb0]
call fcn.100123f0
lea edx, [ebp - 0x34]
push edx
mov byte [ebp - 4], 0
call fcn.10010d90
mov eax, dword [ebp - 0x70]
mov esi, dword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
xor edi, edi
cmp eax, edi
je 0x10023663
push eax
call esi
mov dword [ebp - 0x70], edi
mov eax, dword [ebp - 0x9c]
cmp eax, edi
je 0x10023676
push eax
call esi
mov dword [ebp - 0x9c], edi
mov eax, dword [ebp - 0xa4]
cmp eax, edi
je 0x10023689
push eax
call esi
mov dword [ebp - 0xa4], edi
mov eax, dword [ebp - 0x94]
cmp eax, edi
je 0x1002369c
push eax
call esi
mov dword [ebp - 0x94], edi
mov eax, dword [ebp - 0xa0]
cmp eax, edi
je 0x100236af
push eax
call esi
mov dword [ebp - 0xa0], edi
mov eax, dword [ebp - 0x98]
cmp eax, edi
je 0x100236c2
push eax
call esi
mov dword [ebp - 0x98], edi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x100236d8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1005c755
mov esp, ebp
pop ebp
ret 0xc