Function at 0x1008c00d
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x102f90a8
mov eax, dword fs:[0]
push eax
mov eax, 0x1c4c
call fcn.102928d0
mov eax, dword [case.0x100be6e1.80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 8]
mov ecx, eax
movzx edi, ax
mov eax, 0x1195
shr ecx, 0x10
cmp di, ax
jb 0x1008a743
mov eax, 0x11a7
cmp di, ax
jbe 0x1008a762
lea eax, [edi - 0x1005]
cmp ax, 0x12
ja 0x1008a777
mov eax, 0x300
cmp cx, ax
jne 0x1008a777
cmp dword [esi + 0xa8], 0
je 0x1008a777
push 1
push 0x11f9
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100ccd96
mov eax, edi
cmp eax, 0x11f9
ja 0x1008a7f3
je 0x1008a79d
sub eax, 1
jne case.0x1008a808.4608
push dword [esi + 0xac]
mov ecx, esi
call fcn.1008dda0
jmp case.0x1008a808.4608
push dword [esi + 0xac]
call fcn.10039d80
add esp, 4
mov dword [esi + 0xa8], 0
mov ecx, esi
call fcn.1008e8d0
push 0x1195
mov ecx, esi
mov dword [esi + 0xa8], 1
call fcn.100ccf47
mov ecx, eax
call fcn.100cdb31
push 0
push 0x11f9
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100ccd96
jmp case.0x1008a808.4608
sub eax, 0x11fa
cmp eax, 0xe
ja case.0x1008a808.4608
movzx eax, byte [eax + 0x1008dc70]
jmp dword [eax*4 + 0x1008dc4c]
push 1
mov ecx, 0x103c8e30
call fcn.100d2b35
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov edi, eax
push 0
test edi, edi
je 0x1008c86b
lea eax, [ebp - 0x16d4]
push eax
lea eax, [ebp - 0x1450]
push eax
call fcn.10038500
add esp, 0xc
test eax, eax
jne 0x1008a868
push eax
push 0x10
push str.Cant_get_mode_setings
call fcn.100d2df0
push edi
call sym.VADAV.dll_VDACQ_Close
jmp case.0x1008a808.4608
movsx eax, byte [ebp - 0x142f]
mov ecx, esi
push eax
push 0x1195
mov dword [esi + 0xa8], 0
call fcn.100ccd1c
movsx eax, byte [ebp - 0x142e]
mov ecx, esi
push eax
push 0x1196
call fcn.100ccd1c
movsx eax, byte [ebp - 0x142d]
mov ecx, esi
push eax
push 0x1197
call fcn.100ccd1c
movsx eax, byte [ebp - 0x142c]
mov ecx, esi
push eax
push 0x1198
call fcn.100ccd1c
movsx eax, byte [ebp - 0x142b]
mov ecx, esi
push eax
push 0x1199
call fcn.100ccd1c
movsx eax, byte [ebp - 0x142a]
mov ecx, esi
push eax
push 0x119a
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1429]
mov ecx, esi
push eax
push 0x119b
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1428]
mov ecx, esi
push eax
push 0x119c
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1427]
mov ecx, esi
push eax
push 0x119d
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1426]
mov ecx, esi
push eax
push 0x119e
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1425]
mov ecx, esi
push eax
push 0x119f
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1424]
mov ecx, esi
push eax
push 0x11a0
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1423]
mov ecx, esi
push eax
push 0x11a1
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1422]
mov ecx, esi
push eax
push 0x11a2
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1421]
mov ecx, esi
push eax
push 0x11a3
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1420]
mov ecx, esi
push eax
push 0x11a4
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141f]
mov ecx, esi
push eax
push 0x11a5
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141e]
mov ecx, esi
push eax
push 0x11a6
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141d]
mov ecx, esi
push eax
push 0x11a7
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141c]
mov ecx, esi
push eax
push 0x11a8
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141b]
mov ecx, esi
push eax
push 0x11a9
call fcn.100ccd1c
movsx eax, byte [ebp - 0x141a]
mov ecx, esi
push eax
push 0x11aa
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1419]
mov ecx, esi
push eax
push 0x11ab
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1418]
mov ecx, esi
push eax
push 0x11ac
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1417]
mov ecx, esi
push eax
push 0x11ad
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1416]
mov ecx, esi
push eax
push 0x11ae
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1415]
mov ecx, esi
push eax
push 0x11af
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1414]
mov ecx, esi
push eax
push 0x11b0
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1413]
mov ecx, esi
push eax
push 0x11b1
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1412]
mov ecx, esi
push eax
push 0x11b2
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1411]
mov ecx, esi
push eax
push 0x11b3
call fcn.100ccd1c
movsx eax, byte [ebp - 0x1410]
mov ecx, esi
push eax
push 0x11b4
call fcn.100ccd1c
push 1
push dword [ebp - 0x1660]
mov ecx, esi
push 0x1005
call fcn.100cdab1
push 1
push dword [ebp - 0x165c]
mov ecx, esi
push 0x1006
call fcn.100cdab1
push 1
push dword [ebp - 0x1658]
mov ecx, esi
push 0x1007
call fcn.100cdab1
push 1
push dword [ebp - 0x1654]
mov ecx, esi
push 0x1008
call fcn.100cdab1
push 1
push dword [ebp - 0x1650]
mov ecx, esi
push 0x1009
call fcn.100cdab1
push 1
push dword [ebp - 0x164c]
mov ecx, esi
push 0x100a
call fcn.100cdab1
push 1
push dword [ebp - 0x1648]
mov ecx, esi
push 0x100b
call fcn.100cdab1
push 1
push dword [ebp - 0x1644]
mov ecx, esi
push 0x100c
call fcn.100cdab1
push 1
push dword [ebp - 0x1640]
mov ecx, esi
push 0x100d
call fcn.100cdab1
push 1
push dword [ebp - 0x163c]
mov ecx, esi
push 0x100e
call fcn.100cdab1
push 1
push dword [ebp - 0x1638]
mov ecx, esi
push 0x100f
call fcn.100cdab1
push 1
push dword [ebp - 0x1634]
mov ecx, esi
push 0x1010
call fcn.100cdab1
push 1
push dword [ebp - 0x1630]
mov ecx, esi
push 0x1011
call fcn.100cdab1
push 1
push dword [ebp - 0x162c]
mov ecx, esi
push 0x1012
call fcn.100cdab1
push 1
push dword [ebp - 0x1628]
mov ecx, esi
push 0x1013
call fcn.100cdab1
push 1
push dword [ebp - 0x1624]
mov ecx, esi
push 0x1014
call fcn.100cdab1
push 1
push dword [ebp - 0x1620]
push 0x1015
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x161c]
mov ecx, esi
push 0x1016
call fcn.100cdab1
push 1
push dword [ebp - 0x1618]
mov ecx, esi
push 0x1017
call fcn.100cdab1
push 1
push dword [ebp - 0x1614]
mov ecx, esi
push 0x1018
call fcn.100cdab1
push 1
push dword [ebp - 0x1610]
mov ecx, esi
push 0x1019
call fcn.100cdab1
push 1
push dword [ebp - 0x160c]
mov ecx, esi
push 0x101a
call fcn.100cdab1
push 1
push dword [ebp - 0x1608]
mov ecx, esi
push 0x101b
call fcn.100cdab1
push 1
push dword [ebp - 0x1604]
mov ecx, esi
push 0x101c
call fcn.100cdab1
push 1
push dword [ebp - 0x1600]
mov ecx, esi
push 0x101d
call fcn.100cdab1
push 1
push dword [ebp - 0x15fc]
mov ecx, esi
push 0x101e
call fcn.100cdab1
push 1
push dword [ebp - 0x15f8]
mov ecx, esi
push 0x101f
call fcn.100cdab1
push 1
push dword [ebp - 0x15f4]
mov ecx, esi
push 0x1020
call fcn.100cdab1
push 1
push dword [ebp - 0x15f0]
mov ecx, esi
push 0x1021
call fcn.100cdab1
push 1
push dword [ebp - 0x15ec]
mov ecx, esi
push 0x1022
call fcn.100cdab1
push 1
push dword [ebp - 0x15e8]
mov ecx, esi
push 0x1023
call fcn.100cdab1
push 1
push dword [ebp - 0x15e4]
mov ecx, esi
push 0x1024
call fcn.100cdab1
mov eax, dword [ebp - 0x1650]
and eax, 0x100
push eax
push 0x119a
mov ecx, esi
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x200
push eax
push 0x119b
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x400
push eax
push 0x119c
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x800
push eax
push 0x119d
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x1000
push eax
push 0x119e
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x2000
push eax
push 0x119f
call fcn.100ccd1c
mov eax, dword [ebp - 0x1650]
mov ecx, esi
and eax, 0x4000
push eax
push 0x11a0
call fcn.100ccd1c
push 1
push dword [ebp - 0x15e0]
mov ecx, esi
push 0x1027
call fcn.100cdab1
push 1
push dword [ebp - 0x15dc]
mov ecx, esi
push 0x1028
call fcn.100cdab1
push 1
push dword [ebp - 0x15d8]
mov ecx, esi
push 0x1029
call fcn.100cdab1
push 1
push dword [ebp - 0x15d4]
mov ecx, esi
push 0x102a
call fcn.100cdab1
push 1
push dword [ebp - 0x15d0]
mov ecx, esi
push 0x102b
call fcn.100cdab1
push 1
push dword [ebp - 0x15cc]
mov ecx, esi
push 0x102c
call fcn.100cdab1
push 1
push dword [ebp - 0x15c8]
mov ecx, esi
push 0x102d
call fcn.100cdab1
push 1
push dword [ebp - 0x15c4]
mov ecx, esi
push 0x102e
call fcn.100cdab1
push 1
push dword [ebp - 0x15c0]
push 0x102f
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x15bc]
mov ecx, esi
push 0x1030
call fcn.100cdab1
push 1
push dword [ebp - 0x15b8]
mov ecx, esi
push 0x1031
call fcn.100cdab1
push 1
push dword [ebp - 0x15b4]
mov ecx, esi
push 0x1032
call fcn.100cdab1
push 1
push dword [ebp - 0x15b0]
mov ecx, esi
push 0x1033
call fcn.100cdab1
push 1
push dword [ebp - 0x15ac]
mov ecx, esi
push 0x1034
call fcn.100cdab1
push 1
push dword [ebp - 0x15a8]
mov ecx, esi
push 0x1035
call fcn.100cdab1
push 1
push dword [ebp - 0x15a4]
mov ecx, esi
push 0x1036
call fcn.100cdab1
push 1
push dword [ebp - 0x15a0]
mov ecx, esi
push 0x1037
call fcn.100cdab1
push 1
push dword [ebp - 0x159c]
mov ecx, esi
push 0x1038
call fcn.100cdab1
push 1
push dword [ebp - 0x1598]
mov ecx, esi
push 0x1039
call fcn.100cdab1
push 1
push dword [ebp - 0x1594]
mov ecx, esi
push 0x103a
call fcn.100cdab1
push 1
push dword [ebp - 0x1590]
mov ecx, esi
push 0x103b
call fcn.100cdab1
push 1
push dword [ebp - 0x158c]
mov ecx, esi
push 0x103c
call fcn.100cdab1
push 1
push dword [ebp - 0x1588]
mov ecx, esi
push 0x103d
call fcn.100cdab1
push 1
push dword [ebp - 0x1584]
mov ecx, esi
push 0x103e
call fcn.100cdab1
push 1
push dword [ebp - 0x1580]
push 0x103f
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x157c]
mov ecx, esi
push 0x1040
call fcn.100cdab1
push 1
push dword [ebp - 0x1578]
mov ecx, esi
push 0x1041
call fcn.100cdab1
push 1
push dword [ebp - 0x1574]
mov ecx, esi
push 0x1042
call fcn.100cdab1
push 1
push dword [ebp - 0x1570]
mov ecx, esi
push 0x1043
call fcn.100cdab1
push 1
push dword [ebp - 0x156c]
mov ecx, esi
push 0x1044
call fcn.100cdab1
push 1
push dword [ebp - 0x1568]
mov ecx, esi
push 0x1045
call fcn.100cdab1
push 1
push dword [ebp - 0x1564]
mov ecx, esi
push 0x1046
call fcn.100cdab1
push 1
push dword [ebp - 0x1560]
mov ecx, esi
push 0x1047
call fcn.100cdab1
push 1
push dword [ebp - 0x155c]
mov ecx, esi
push 0x1048
call fcn.100cdab1
push 1
push dword [ebp - 0x1558]
mov ecx, esi
push 0x1049
call fcn.100cdab1
push 1
push dword [ebp - 0x1554]
mov ecx, esi
push 0x104a
call fcn.100cdab1
push 1
push dword [ebp - 0x1550]
mov ecx, esi
push 0x104b
call fcn.100cdab1
push 1
push dword [ebp - 0x154c]
mov ecx, esi
push 0x104c
call fcn.100cdab1
push 1
push dword [ebp - 0x1548]
mov ecx, esi
push 0x104d
call fcn.100cdab1
push 1
push dword [ebp - 0x1544]
mov ecx, esi
push 0x104e
call fcn.100cdab1
push 1
push dword [ebp - 0x1540]
mov ecx, esi
push 0x104f
call fcn.100cdab1
push 1
push dword [ebp - 0x153c]
mov ecx, esi
push 0x1050
call fcn.100cdab1
push 1
push dword [ebp - 0x1538]
mov ecx, esi
push 0x1051
call fcn.100cdab1
push 1
push dword [ebp - 0x1534]
mov ecx, esi
push 0x1052
call fcn.100cdab1
push 1
push dword [ebp - 0x1530]
mov ecx, esi
push 0x1053
call fcn.100cdab1
push 1
push dword [ebp - 0x152c]
mov ecx, esi
push 0x1054
call fcn.100cdab1
push 1
push dword [ebp - 0x1528]
mov ecx, esi
push 0x1055
call fcn.100cdab1
push 1
push dword [ebp - 0x1524]
mov ecx, esi
push 0x1056
call fcn.100cdab1
push 1
push dword [ebp - 0x1520]
mov ecx, esi
push 0x1057
call fcn.100cdab1
push 1
push dword [ebp - 0x151c]
mov ecx, esi
push 0x1058
call fcn.100cdab1
push 1
push dword [ebp - 0x1518]
mov ecx, esi
push 0x1059
call fcn.100cdab1
push 1
push dword [ebp - 0x1514]
mov ecx, esi
push 0x105a
call fcn.100cdab1
push 1
push dword [ebp - 0x1510]
mov ecx, esi
push 0x105b
call fcn.100cdab1
push 1
push dword [ebp - 0x150c]
mov ecx, esi
push 0x105c
call fcn.100cdab1
push 1
push dword [ebp - 0x1508]
mov ecx, esi
push 0x105d
call fcn.100cdab1
push 1
push dword [ebp - 0x1504]
mov ecx, esi
push 0x105e
call fcn.100cdab1
push 1
push dword [ebp - 0x1500]
mov ecx, esi
push 0x105f
call fcn.100cdab1
push 1
push dword [ebp - 0x14fc]
mov ecx, esi
push 0x1060
call fcn.100cdab1
push 1
push dword [ebp - 0x14f8]
mov ecx, esi
push 0x1061
call fcn.100cdab1
push 1
push dword [ebp - 0x14f4]
mov ecx, esi
push 0x1062
call fcn.100cdab1
push 1
push dword [ebp - 0x14f0]
mov ecx, esi
push 0x1063
call fcn.100cdab1
push 1
push dword [ebp - 0x14ec]
mov ecx, esi
push 0x1064
call fcn.100cdab1
push 1
push dword [ebp - 0x14e8]
mov ecx, esi
push 0x1065
call fcn.100cdab1
push 1
push dword [ebp - 0x14e4]
mov ecx, esi
push 0x1066
call fcn.100cdab1
push edi
mov dword [esi + 0xa8], 1
call sym.VADAV.dll_VDACQ_Close
jmp case.0x1008a808.4608
push 1
mov ecx, 0x103c8e30
call fcn.100d2b35
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov edi, eax
test edi, edi
je 0x1008c869
push 1
jmp 0x1008a836
push 1
mov ecx, 0x103c8e30
call fcn.100d2b35
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov edi, eax
test edi, edi
je 0x1008c869
push 2
jmp 0x1008a836
push str.Parameter_file_.par_
lea ecx, [ebp - 0x1c54]
call fcn.10008de0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1c58]
push str..par__.ini
call fcn.10008de0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x17c0]
mov eax, dword [ebp - 0x1c54]
push 0
push 0
push esi
push eax
push 0x1a00
push dword [ebp - 0x1c58]
push eax
push 1
call fcn.100e9cf6
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c0]
call fcn.100eac14
cmp eax, 1
jne 0x1008beb6
lea eax, [ebp - 0x1c50]
push eax
lea ecx, [ebp - 0x17c0]
call fcn.100eb6fd
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c50]
mov eax, dword [ebp - 0x1c50]
push dword [eax - 0xc]
call fcn.1003da60
push eax
lea eax, [ebp - 0x1c4c]
push eax
push 1
call fcn.10039a30
add esp, 0xc
mov dword [esi + 0xa8], 0
mov ecx, esi
push dword [ebp - 0x1b60]
push 0x1195
call fcn.100ccd1c
push dword [ebp - 0x1b5c]
mov ecx, esi
push 0x1196
call fcn.100ccd1c
push dword [ebp - 0x1b58]
mov ecx, esi
push 0x1197
call fcn.100ccd1c
push dword [ebp - 0x1b54]
mov ecx, esi
push 0x1198
call fcn.100ccd1c
push dword [ebp - 0x1b50]
mov ecx, esi
push 0x1199
call fcn.100ccd1c
push dword [ebp - 0x1b4c]
mov ecx, esi
push 0x119a
call fcn.100ccd1c
push dword [ebp - 0x1b48]
mov ecx, esi
push 0x119b
call fcn.100ccd1c
push dword [ebp - 0x1b44]
mov ecx, esi
push 0x119c
call fcn.100ccd1c
push dword [ebp - 0x1b40]
mov ecx, esi
push 0x119d
call fcn.100ccd1c
push dword [ebp - 0x1b3c]
mov ecx, esi
push 0x119e
call fcn.100ccd1c
push dword [ebp - 0x1b38]
mov ecx, esi
push 0x119f
call fcn.100ccd1c
push dword [ebp - 0x1b34]
mov ecx, esi
push 0x11a0
call fcn.100ccd1c
push dword [ebp - 0x1b30]
mov ecx, esi
push 0x11a1
call fcn.100ccd1c
push dword [ebp - 0x1b2c]
mov ecx, esi
push 0x11a2
call fcn.100ccd1c
push dword [ebp - 0x1b28]
mov ecx, esi
push 0x11a3
call fcn.100ccd1c
push dword [ebp - 0x1b24]
mov ecx, esi
push 0x11a4
call fcn.100ccd1c
push dword [ebp - 0x1b20]
mov ecx, esi
push 0x11a5
call fcn.100ccd1c
push dword [ebp - 0x1b1c]
mov ecx, esi
push 0x11a6
call fcn.100ccd1c
push dword [ebp - 0x1b18]
mov ecx, esi
push 0x11a7
call fcn.100ccd1c
push dword [ebp - 0x1b14]
mov ecx, esi
push 0x11a8
call fcn.100ccd1c
push dword [ebp - 0x1b10]
mov ecx, esi
push 0x11a9
call fcn.100ccd1c
push dword [ebp - 0x1b0c]
mov ecx, esi
push 0x11aa
call fcn.100ccd1c
push dword [ebp - 0x1b08]
mov ecx, esi
push 0x11ab
call fcn.100ccd1c
push dword [ebp - 0x1b04]
mov ecx, esi
push 0x11ac
call fcn.100ccd1c
push dword [ebp - 0x1b00]
mov ecx, esi
push 0x11ad
call fcn.100ccd1c
push dword [ebp - 0x1afc]
mov ecx, esi
push 0x11ae
call fcn.100ccd1c
push dword [ebp - 0x1af8]
mov ecx, esi
push 0x11af
call fcn.100ccd1c
push dword [ebp - 0x1af4]
mov ecx, esi
push 0x11b0
call fcn.100ccd1c
push dword [ebp - 0x1af0]
mov ecx, esi
push 0x11b1
call fcn.100ccd1c
push dword [ebp - 0x1aec]
mov ecx, esi
push 0x11b2
call fcn.100ccd1c
push dword [ebp - 0x1ae8]
mov ecx, esi
push 0x11b3
call fcn.100ccd1c
push dword [ebp - 0x1ae4]
mov ecx, esi
push 0x11b4
call fcn.100ccd1c
push 1
push dword [ebp - 0x1960]
mov ecx, esi
push 0x1005
call fcn.100cdab1
push 1
push dword [ebp - 0x195c]
mov ecx, esi
push 0x1006
call fcn.100cdab1
push 1
push dword [ebp - 0x1958]
mov ecx, esi
push 0x1007
call fcn.100cdab1
push 1
push dword [ebp - 0x1954]
push 0x1008
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x1950]
mov ecx, esi
push 0x1009
call fcn.100cdab1
push 1
push dword [ebp - 0x194c]
mov ecx, esi
push 0x100a
call fcn.100cdab1
push 1
push dword [ebp - 0x1948]
mov ecx, esi
push 0x100b
call fcn.100cdab1
push 1
push dword [ebp - 0x1944]
mov ecx, esi
push 0x100c
call fcn.100cdab1
push 1
push dword [ebp - 0x1940]
mov ecx, esi
push 0x100d
call fcn.100cdab1
push 1
push dword [ebp - 0x193c]
mov ecx, esi
push 0x100e
call fcn.100cdab1
push 1
push dword [ebp - 0x1938]
mov ecx, esi
push 0x100f
call fcn.100cdab1
push 1
push dword [ebp - 0x1934]
mov ecx, esi
push 0x1010
call fcn.100cdab1
push 1
push dword [ebp - 0x1930]
mov ecx, esi
push 0x1011
call fcn.100cdab1
push 1
push dword [ebp - 0x192c]
mov ecx, esi
push 0x1012
call fcn.100cdab1
push 1
push dword [ebp - 0x1928]
mov ecx, esi
push 0x1013
call fcn.100cdab1
push 1
push dword [ebp - 0x1924]
mov ecx, esi
push 0x1014
call fcn.100cdab1
push 1
push dword [ebp - 0x1920]
mov ecx, esi
push 0x1015
call fcn.100cdab1
push 1
push dword [ebp - 0x191c]
mov ecx, esi
push 0x1016
call fcn.100cdab1
push 1
push dword [ebp - 0x1918]
mov ecx, esi
push 0x1017
call fcn.100cdab1
push 1
push dword [ebp - 0x1914]
push 0x1018
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x1910]
mov ecx, esi
push 0x1019
call fcn.100cdab1
push 1
push dword [ebp - 0x190c]
mov ecx, esi
push 0x101a
call fcn.100cdab1
push 1
push dword [ebp - 0x1908]
mov ecx, esi
push 0x101b
call fcn.100cdab1
push 1
push dword [ebp - 0x1904]
mov ecx, esi
push 0x101c
call fcn.100cdab1
push 1
push dword [ebp - 0x1900]
mov ecx, esi
push 0x101d
call fcn.100cdab1
push 1
push dword [ebp - 0x18fc]
mov ecx, esi
push 0x101e
call fcn.100cdab1
push 1
push dword [ebp - 0x18f8]
mov ecx, esi
push 0x101f
call fcn.100cdab1
push 1
push dword [ebp - 0x18f4]
mov ecx, esi
push 0x1020
call fcn.100cdab1
push 1
push dword [ebp - 0x18f0]
mov ecx, esi
push 0x1021
call fcn.100cdab1
push 1
push dword [ebp - 0x18ec]
mov ecx, esi
push 0x1022
call fcn.100cdab1
push 1
push dword [ebp - 0x18e8]
mov ecx, esi
push 0x1023
call fcn.100cdab1
push 1
push dword [ebp - 0x18e4]
mov ecx, esi
push 0x1024
call fcn.100cdab1
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x100
push eax
push 0x119a
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x200
push eax
push 0x119b
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x400
push eax
push 0x119c
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
and eax, 0x800
mov ecx, esi
push eax
push 0x119d
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x1000
push eax
push 0x119e
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x2000
push eax
push 0x119f
call fcn.100ccd1c
mov eax, dword [ebp - 0x1950]
mov ecx, esi
and eax, 0x4000
push eax
push 0x11a0
call fcn.100ccd1c
push 1
push dword [ebp - 0x18e0]
mov ecx, esi
push 0x1027
call fcn.100cdab1
push 1
push dword [ebp - 0x18dc]
mov ecx, esi
push 0x1028
call fcn.100cdab1
push 1
push dword [ebp - 0x18d8]
mov ecx, esi
push 0x1029
call fcn.100cdab1
push 1
push dword [ebp - 0x18d4]
mov ecx, esi
push 0x102a
call fcn.100cdab1
push 1
push dword [ebp - 0x18d0]
mov ecx, esi
push 0x102b
call fcn.100cdab1
push 1
push dword [ebp - 0x18cc]
mov ecx, esi
push 0x102c
call fcn.100cdab1
push 1
push dword [ebp - 0x18c8]
mov ecx, esi
push 0x102d
call fcn.100cdab1
push 1
push dword [ebp - 0x18c4]
mov ecx, esi
push 0x102e
call fcn.100cdab1
push 1
push dword [ebp - 0x18c0]
mov ecx, esi
push 0x102f
call fcn.100cdab1
push 1
push dword [ebp - 0x18bc]
mov ecx, esi
push 0x1030
call fcn.100cdab1
push 1
push dword [ebp - 0x18b8]
mov ecx, esi
push 0x1031
call fcn.100cdab1
push 1
push dword [ebp - 0x18b4]
push 0x1032
mov ecx, esi
call fcn.100cdab1
push 1
push dword [ebp - 0x18b0]
mov ecx, esi
push 0x1033
call fcn.100cdab1
push 1
push dword [ebp - 0x18ac]
mov ecx, esi
push 0x1034
call fcn.100cdab1
push 1
push dword [ebp - 0x18a8]
mov ecx, esi
push 0x1035
call fcn.100cdab1
push 1
push dword [ebp - 0x18a4]
mov ecx, esi
push 0x1036
call fcn.100cdab1
push 1
push dword [ebp - 0x18a0]
mov ecx, esi
push 0x1037
call fcn.100cdab1
push 1
push dword [ebp - 0x189c]
mov ecx, esi
push 0x1038
call fcn.100cdab1
push 1
push dword [ebp - 0x1898]
mov ecx, esi
push 0x1039
call fcn.100cdab1
push 1
push dword [ebp - 0x1894]
mov ecx, esi
push 0x103a
call fcn.100cdab1
push 1
push dword [ebp - 0x1890]
mov ecx, esi
push 0x103b
call fcn.100cdab1
push 1
push dword [ebp - 0x188c]
mov ecx, esi
push 0x103c
call fcn.100cdab1
push 1
push dword [ebp - 0x1888]
mov ecx, esi
push 0x103d
call fcn.100cdab1
push 1
push dword [ebp - 0x1884]
mov ecx, esi
push 0x103e
call fcn.100cdab1
push 1
push dword [ebp - 0x1880]
mov ecx, esi
push 0x103f
call fcn.100cdab1
push 1
push dword [ebp - 0x187c]
mov ecx, esi
push 0x1040
call fcn.100cdab1
push 1
push dword [ebp - 0x1878]
mov ecx, esi
push 0x1041
call fcn.100cdab1
push 1
push dword [ebp - 0x1874]
mov ecx, esi
push 0x1042
call fcn.100cdab1
push 1
push dword [ebp - 0x1870]
mov ecx, esi
push 0x1043
call fcn.100cdab1
push 1
push dword [ebp - 0x186c]
mov ecx, esi
push 0x1044
call fcn.100cdab1
push 1
push dword [ebp - 0x1868]
mov ecx, esi
push 0x1045
call fcn.100cdab1
push 1
push dword [ebp - 0x1864]
mov ecx, esi
push 0x1046
call fcn.100cdab1
push 1
push dword [ebp - 0x1860]
mov ecx, esi
push 0x1047
call fcn.100cdab1
push 1
push dword [ebp - 0x185c]
mov ecx, esi
push 0x1048
call fcn.100cdab1
push 1
push dword [ebp - 0x1858]
mov ecx, esi
push 0x1049
call fcn.100cdab1
push 1
push dword [ebp - 0x1854]
mov ecx, esi
push 0x104a
call fcn.100cdab1
push 1
push dword [ebp - 0x1850]
mov ecx, esi
push 0x104b
call fcn.100cdab1
push 1
push dword [ebp - 0x184c]
mov ecx, esi
push 0x104c
call fcn.100cdab1
push 1
push dword [ebp - 0x1848]
mov ecx, esi
push 0x104d
call fcn.100cdab1
push 1
push dword [ebp - 0x1844]
mov ecx, esi
push 0x104e
call fcn.100cdab1
push 1
push dword [ebp - 0x1840]
mov ecx, esi
push 0x104f
call fcn.100cdab1
push 1
push dword [ebp - 0x183c]
mov ecx, esi
push 0x1050
call fcn.100cdab1
push 1
push dword [ebp - 0x1838]
mov ecx, esi
push 0x1051
call fcn.100cdab1
push 1
push dword [ebp - 0x1834]
mov ecx, esi
push 0x1052
call fcn.100cdab1
push 1
push dword [ebp - 0x1830]
mov ecx, esi
push 0x1053
call fcn.100cdab1
push 1
push dword [ebp - 0x182c]
mov ecx, esi
push 0x1054
call fcn.100cdab1
push 1
push dword [ebp - 0x1828]
mov ecx, esi
push 0x1055
call fcn.100cdab1
push 1
push dword [ebp - 0x1824]
mov ecx, esi
push 0x1056
call fcn.100cdab1
push 1
push dword [ebp - 0x1820]
mov ecx, esi
push 0x1057
call fcn.100cdab1
push 1
push dword [ebp - 0x181c]
mov ecx, esi
push 0x1058
call fcn.100cdab1
push 1
push dword [ebp - 0x1818]
mov ecx, esi
push 0x1059
call fcn.100cdab1
push 1
push dword [ebp - 0x1814]
mov ecx, esi
push 0x105a
call fcn.100cdab1
push 1
push dword [ebp - 0x1810]
mov ecx, esi
push 0x105b
call fcn.100cdab1
push 1
push dword [ebp - 0x180c]
mov ecx, esi
push 0x105c
call fcn.100cdab1
push 1
push dword [ebp - 0x1808]
mov ecx, esi
push 0x105d
call fcn.100cdab1
push 1
push dword [ebp - 0x1804]
mov ecx, esi
push 0x105e
call fcn.100cdab1
push 1
push dword [ebp - 0x1800]
mov ecx, esi
push 0x105f
call fcn.100cdab1
push 1
push dword [ebp - 0x17fc]
mov ecx, esi
push 0x1060
call fcn.100cdab1
push 1
push dword [ebp - 0x17f8]
mov ecx, esi
push 0x1061
call fcn.100cdab1
push 1
push dword [ebp - 0x17f4]
mov ecx, esi
push 0x1062
call fcn.100cdab1
push 1
push dword [ebp - 0x17f0]
mov ecx, esi
push 0x1063
call fcn.100cdab1
push 1
push dword [ebp - 0x17ec]
mov ecx, esi
push 0x1064
call fcn.100cdab1
push 1
push dword [ebp - 0x17e8]
mov ecx, esi
push 0x1065
call fcn.100cdab1
push 1
push dword [ebp - 0x17e4]
mov ecx, esi
push 0x1066
call fcn.100cdab1
mov dword [esi + 0xa8], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c50]
call fcn.10002aa0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x17c0]
call fcn.100ea052
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c58]
call fcn.10002aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c54]
call fcn.10002aa0
jmp case.0x1008a808.4608
push str.Parameter_file_.par_
lea ecx, [ebp - 0x1c58]
call fcn.10008de0
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x1c54]
push str..par
call fcn.10008de0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x17c0]
mov eax, dword [ebp - 0x1c58]
push 0
push 0
push esi
push eax
push 0x1a00
push dword [ebp - 0x1c54]
push eax
push 0
call fcn.100e9cf6
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x17c0]
call fcn.100eac14
cmp eax, 1
jne 0x1008bfd8
lea eax, [ebp - 0x1c50]
push eax
lea ecx, [ebp - 0x17c0]
call fcn.100eb6fd
mov byte [ebp - 4], 7
lea eax, [ebp - 0x49c]
push 0x46c
push 0
push eax
call fcn.10296750
add esp, 0xc
mov dword [esi + 0xa8], 0
lea eax, [ebp - 0x49c]
mov ecx, esi
push eax
call fcn.1008dda0
mov eax, dword [ebp - 0x1c50]
lea ecx, [ebp - 0x1c50]
push 0
mov dword [esi + 0xa8], 1
push dword [eax - 0xc]
call fcn.1003da60
push eax
lea eax, [ebp - 0x49c]
push eax
push 1
call fcn.10039a60
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c50]
call fcn.10002aa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x17c0]
call fcn.100ea052
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c54]
call fcn.10002aa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c58]
call fcn.10002aa0
jmp case.0x1008a808.4608
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x17e0], eax
lea eax, [ebp - 0x1be0]
mov dword [ebp - 0x17d8], eax
lea eax, [ebp - 0x17e0]
push eax
mov dword [ebp - 0x17dc], 0
mov dword [ebp - 0x17d4], str.Folder_for_save_binary_file
mov dword [ebp - 0x17d0], 0x30
mov dword [ebp - 0x17cc], 0
mov dword [ebp - 0x17c8], 0
mov dword [ebp - 0x17c4], 0
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderA]
test eax, eax
je case.0x1008a808.4608
lea ecx, [ebp - 0x1be0]
push ecx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
push 0x46c
lea eax, [ebp - 0x49c]
push 0
push eax
call fcn.10296750
add esp, 0xc
mov dword [esi + 0xa8], 0
lea eax, [ebp - 0x49c]
mov ecx, esi
push eax
call fcn.1008dda0
movzx eax, byte [ebp - 0x3b0]
xor ecx, ecx
mov byte [ebp - 0x30], al
movzx eax, byte [ebp - 0x3ac]
mov byte [ebp - 0x2f], al
movzx eax, byte [ebp - 0x3a8]
mov byte [ebp - 0x2e], al
movzx eax, byte [ebp - 0x3a4]
mov byte [ebp - 0x2d], al
movzx eax, byte [ebp - 0x3a0]
mov byte [ebp - 0x2c], al
movzx eax, byte [ebp - 0x39c]
mov byte [ebp - 0x2b], al
movzx eax, byte [ebp - 0x398]
mov byte [ebp - 0x2a], al
movzx eax, byte [ebp - 0x394]
mov byte [ebp - 0x29], al
movzx eax, byte [ebp - 0x390]
mov byte [ebp - 0x28], al
movzx eax, byte [ebp - 0x38c]
mov byte [ebp - 0x27], al
movzx eax, byte [ebp - 0x388]
mov byte [ebp - 0x26], al
movzx eax, byte [ebp - 0x384]
mov byte [ebp - 0x25], al
movzx eax, byte [ebp - 0x380]
mov byte [ebp - 0x24], al
movzx eax, byte [ebp - 0x37c]
mov byte [ebp - 0x23], al
movzx eax, byte [ebp - 0x378]
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x374]
mov byte [ebp - 0x21], al
movzx eax, byte [ebp - 0x370]
mov byte [ebp - 0x20], al
movzx eax, byte [ebp - 0x36c]
mov byte [ebp - 0x1f], al
movzx eax, byte [ebp - 0x368]
mov byte [ebp - 0x1e], al
movzx eax, byte [ebp - 0x364]
mov byte [ebp - 0x1d], al
movzx eax, byte [ebp - 0x360]
mov byte [ebp - 0x1c], al
movzx eax, byte [ebp - 0x35c]
mov byte [ebp - 0x1b], al
movzx eax, byte [ebp - 0x358]
mov byte [ebp - 0x1a], al
movzx eax, byte [ebp - 0x354]
mov byte [ebp - 0x19], al
movzx eax, byte [ebp - 0x350]
mov byte [ebp - 0x18], al
movzx eax, byte [ebp - 0x34c]
mov byte [ebp - 0x17], al
movzx eax, byte [ebp - 0x348]
mov byte [ebp - 0x16], al
movzx eax, byte [ebp - 0x344]
mov byte [ebp - 0x15], al
movzx eax, byte [ebp - 0x340]
mov byte [ebp - 0x14], al
movzx eax, byte [ebp - 0x33c]
mov byte [ebp - 0x13], al
movzx eax, byte [ebp - 0x338]
mov byte [ebp - 0x12], al
movzx eax, byte [ebp - 0x334]
mov dword [esi + 0xa8], 1
mov byte [ebp - 0x11], al
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x1be0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x13d1], al
test al, al
jne 0x1008c200
lea ecx, [ebp - 0x13d0]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1008c220
mov eax, dword [str..initcfg]
mov dword [ecx], eax
mov eax, dword [0x10329028]
mov dword [ecx + 4], eax
mov ax, word [0x1032902c]
mov word [ecx + 8], ax
lea eax, [ebp - 0x13d0]
push 0x10329030
push eax
call fcn.102be73d
mov edi, eax
add esp, 8
test edi, edi
je case.0x1008a808.4608
push edi
push 0x20
lea eax, [ebp - 0x30]
push 1
push eax
call fcn.102bec6b
push edi
call fcn.102bdded
mov eax, dword [ebp - 0x1b0]
add esp, 0x14
mov dword [ebp - 0x1450], eax
xor ecx, ecx
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x144c], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1448], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1440], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x143c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1438], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1434], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x142c], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1428], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1424], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1420], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x141c], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1418], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1410], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x140c], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1408], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1404], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1400], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x13fc], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x13f8], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x13f4], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x13f0], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x13e8], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x13e4], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13d8], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13d4], eax
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x1be0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x13d1], al
test al, al
jne 0x1008c400
lea ecx, [ebp - 0x13d0]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1008c420
mov eax, dword [str..elsetcfg]
mov dword [ecx], eax
mov eax, dword [0x10329038]
mov dword [ecx + 4], eax
mov ax, word [0x1032903c]
mov word [ecx + 8], ax
mov al, byte [0x1032903e]
mov byte [ecx + 0xa], al
lea eax, [ebp - 0x13d0]
push 0x10329030
push eax
call fcn.102be73d
mov edi, eax
add esp, 8
test edi, edi
je case.0x1008a808.4608
push edi
push 0x20
lea eax, [ebp - 0x1450]
push 4
push eax
call fcn.102bec6b
push edi
call fcn.102bdded
mov eax, dword [ebp - 0x130]
add esp, 0x14
mov dword [ebp - 0x14d0], eax
xor ecx, ecx
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x14cc], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x14c8], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x14c4], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x14c0], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x14bc], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x14b8], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x14b4], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x14b0], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x14ac], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x14a8], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x14a4], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x14a0], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x149c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1498], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1494], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1490], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x148c], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1488], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1484], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x1480], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x147c], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x1478], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1474], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1470], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x146c], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1468], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1464], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x1460], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x145c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1458], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1454], eax
mov al, byte [ebp + ecx - 0x1be0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x13d1], al
test al, al
jne 0x1008c605
lea ecx, [ebp - 0x13d0]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1008c621
mov eax, dword [str..elsetcfg2]
mov dword [ecx], eax
mov eax, dword [0x10329044]
mov dword [ecx + 4], eax
mov eax, dword [0x10329048]
mov dword [ecx + 8], eax
lea eax, [ebp - 0x13d0]
push 0x10329030
push eax
call fcn.102be73d
mov edi, eax
add esp, 8
test edi, edi
je case.0x1008a808.4608
push edi
push 0x20
lea eax, [ebp - 0x14d0]
push 4
push eax
call fcn.102bec6b
push edi
call fcn.102bdded
mov eax, dword [ebp - 0xb0]
add esp, 0x14
mov dword [ebp - 0x1560], eax
xor ecx, ecx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x155c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1558], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1554], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1550], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x154c], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1548], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1544], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x153c], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1538], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1534], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1530], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x152c], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1528], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1524], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1520], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x151c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1518], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1514], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x150c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1508], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1504], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1500], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14fc], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x14f4], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x14f0], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14ec], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14e8], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x14e4], eax
mov al, byte [ebp + ecx - 0x1be0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x13d1], al
test al, al
jne 0x1008c7c0
lea ecx, [ebp - 0x13d0]
dec ecx
nop dword [eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1008c7e0
mov eax, dword [str..elsetcfg3]
mov dword [ecx], eax
mov eax, dword [0x10329050]
mov dword [ecx + 4], eax
mov eax, dword [0x10329054]
mov dword [ecx + 8], eax
lea eax, [ebp - 0x13d0]
push 0x10329030
push eax
call fcn.102be73d
mov edi, eax
add esp, 8
test edi, edi
je case.0x1008a808.4608
push edi
push 0x20
lea eax, [ebp - 0x1560]
push 4
push eax
call fcn.102bec6b
push edi
call fcn.102bdded
add esp, 0x14
jmp case.0x1008a808.4608
push 1
mov ecx, 0x103c8e30
call fcn.100d2b35
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
mov dword [esi + 0xa8], 0
call sym.VADAV.dll_VDACQ_Connect
mov ebx, eax
test ebx, ebx
jne 0x1008c87c
push 0
push 0x10
push str.Cant_connect_detector
call fcn.100d2df0
jmp case.0x1008a808.4608
push 0x80
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x1564], 0xc
push 0
push eax
call fcn.10296750
add esp, 0xc
mov ecx, esi
push 0x1195
call fcn.100cd5f9
push 0x1196
mov ecx, esi
mov byte [ebp - 0x1560], al
call fcn.100cd5f9
push 0x1197
mov ecx, esi
mov byte [ebp - 0x155f], al
call fcn.100cd5f9
push 0x1198
mov ecx, esi
mov byte [ebp - 0x155e], al
call fcn.100cd5f9
push 0x1199
mov ecx, esi
mov byte [ebp - 0x155d], al
call fcn.100cd5f9
push 0x119a
mov ecx, esi
mov byte [ebp - 0x155c], al
call fcn.100cd5f9
push 0x119b
mov ecx, esi
mov byte [ebp - 0x155b], al
call fcn.100cd5f9
push 0x119c
mov ecx, esi
mov byte [ebp - 0x155a], al
call fcn.100cd5f9
push 0x119d
mov ecx, esi
mov byte [ebp - 0x1559], al
call fcn.100cd5f9
push 0x119e
mov ecx, esi
mov byte [ebp - 0x1558], al
call fcn.100cd5f9
push 0x119f
mov ecx, esi
mov byte [ebp - 0x1557], al
call fcn.100cd5f9
push 0x11a0
mov ecx, esi
mov byte [ebp - 0x1556], al
call fcn.100cd5f9
push 0x11a1
mov ecx, esi
mov byte [ebp - 0x1555], al
call fcn.100cd5f9
push 0x11a2
mov ecx, esi
mov byte [ebp - 0x1554], al
call fcn.100cd5f9
push 0x11a3
mov ecx, esi
mov byte [ebp - 0x1553], al
call fcn.100cd5f9
push 0x11a4
mov ecx, esi
mov byte [ebp - 0x1552], al
call fcn.100cd5f9
movzx edi, byte [ebp - 0x1555]
add edi, edi
mov byte [ebp - 0x1551], al
movzx eax, byte [ebp - 0x1556]
or edi, eax
movzx eax, byte [ebp - 0x1557]
add edi, edi
or edi, eax
movzx eax, byte [ebp - 0x1558]
add edi, edi
or edi, eax
movzx eax, byte [ebp - 0x1559]
add edi, edi
or edi, eax
mov ecx, esi
movzx eax, byte [ebp - 0x155a]
add edi, edi
or edi, eax
movzx eax, byte [ebp - 0x155b]
add edi, edi
or edi, eax
push 0x11a5
shl edi, 8
call fcn.100cd5f9
push 0x11a6
mov ecx, esi
mov byte [ebp - 0x1550], al
call fcn.100cd5f9
push 0x11a7
mov ecx, esi
mov byte [ebp - 0x154f], al
call fcn.100cd5f9
push 0x11a8
mov ecx, esi
mov byte [ebp - 0x154e], al
call fcn.100cd5f9
push 0x11a9
mov ecx, esi
mov byte [ebp - 0x154d], al
call fcn.100cd5f9
push 0x11aa
mov ecx, esi
mov byte [ebp - 0x154c], al
call fcn.100cd5f9
push 0x11ab
mov ecx, esi
mov byte [ebp - 0x154b], al
call fcn.100cd5f9
push 0x11ac
mov ecx, esi
mov byte [ebp - 0x154a], al
call fcn.100cd5f9
push 0x11ad
mov ecx, esi
mov byte [ebp - 0x1549], al
call fcn.100cd5f9
push 0x11ae
mov ecx, esi
mov byte [ebp - 0x1548], al
call fcn.100cd5f9
push 0x11af
mov ecx, esi
mov byte [ebp - 0x1547], al
call fcn.100cd5f9
push 0x11b0
mov ecx, esi
mov byte [ebp - 0x1546], al
call fcn.100cd5f9
push 0x11b1
mov ecx, esi
mov byte [ebp - 0x1545], al
call fcn.100cd5f9
push 0x11b2
mov ecx, esi
mov byte [ebp - 0x1544], al
call fcn.100cd5f9
push 0x11b3
mov ecx, esi
mov byte [ebp - 0x1543], al
call fcn.100cd5f9
push 0x11b4
mov ecx, esi
mov byte [ebp - 0x1542], al
call fcn.100cd5f9
mov byte [ebp - 0x1541], al
lea eax, [ebp - 0x1560]
push 0x80
push eax
push dword [ebp - 0x1564]
call fcn.10039af0
add esp, 0xc
test eax, eax
jne 0x1008cb5a
push eax
push str.s1_send_cmd_init_save
push 1
push 0x14
push 4
call fcn.10044560
add esp, 0x14
push str.INIT_SAVE
call fcn.10025e80
add esp, 4
push ebx
call sym.VADAV.dll_VDACQ_Close
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f4
call ebx
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov dword [ebp - 0x1c54], eax
test eax, eax
je 0x1008c869
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x1564], 0xd
push eax
push 1
push 0
push 0x1005
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x155c]
mov ecx, esi
push eax
push 1
push 0
push 0x1006
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1558]
mov ecx, esi
push eax
push 1
push 0
push 0x1007
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1554]
mov ecx, esi
push eax
push 1
push 0
push 0x1008
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
mov ecx, esi
push 1
push 0
push 0x1009
call fcn.100ccfbd
and eax, 0xffff80ff
lea ecx, [ebp - 0x1550]
or eax, edi
push ecx
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x154c]
mov ecx, esi
push eax
push 1
push 0
push 0x100a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1548]
mov ecx, esi
push eax
push 1
push 0
push 0x100b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1544]
mov ecx, esi
push eax
push 1
push 0
push 0x100c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1540]
mov ecx, esi
push eax
push 1
push 0
push 0x100d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x153c]
mov ecx, esi
push eax
push 1
push 0
push 0x100e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1538]
mov ecx, esi
push eax
push 1
push 0
push 0x100f
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1534]
mov ecx, esi
push eax
push 1
push 0
push 0x1010
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1530]
mov ecx, esi
push eax
push 1
push 0
push 0x1011
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x152c]
mov ecx, esi
push eax
push 1
push 0
push 0x1012
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1528]
mov ecx, esi
push eax
push 1
push 0
push 0x1013
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1524]
mov ecx, esi
push eax
push 1
push 0
push 0x1014
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1520]
mov ecx, esi
push eax
push 1
push 0
push 0x1015
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x151c]
mov ecx, esi
push eax
push 1
push 0
push 0x1016
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1518]
mov ecx, esi
push eax
push 1
push 0
push 0x1017
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1514]
mov ecx, esi
push eax
push 1
push 0
push 0x1018
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1510]
mov ecx, esi
push eax
push 1
push 0
push 0x1019
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x150c]
mov ecx, esi
push eax
push 1
push 0
push 0x101a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1508]
mov ecx, esi
push eax
push 1
push 0
push 0x101b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1504]
mov ecx, esi
push eax
push 1
push 0
push 0x101c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1500]
mov ecx, esi
push eax
push 1
push 0
push 0x101d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14fc]
mov ecx, esi
push eax
push 1
push 0
push 0x101e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f8]
mov ecx, esi
push eax
push 1
push 0
push 0x101f
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f4]
mov ecx, esi
push eax
push 1
push 0
push 0x1020
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f0]
mov ecx, esi
push eax
push 1
push 0
push 0x1021
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14ec]
mov ecx, esi
push eax
push 1
push 0
push 0x1022
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e8]
mov ecx, esi
push eax
push 1
push 0
push 0x1023
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e4]
mov ecx, esi
push eax
push 1
push 0
push 0x1024
call fcn.100ccfbd
push eax
call fcn.1008dd70
push 0x80
lea eax, [ebp - 0x1560]
push eax
push dword [ebp - 0x1564]
call fcn.10039af0
add esp, 0x14
test eax, eax
jne 0x1008cfd7
push eax
push str.s1_send_cmd_elset_save
push 1
push 0x14
push 4
call fcn.10044560
add esp, 0x14
push str.ELSET_SAVE
call fcn.10025e80
add esp, 4
push dword [ebp - 0x1c54]
call sym.VADAV.dll_VDACQ_Close
push 0x1f4
call ebx
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov edi, eax
test edi, edi
je 0x1008c869
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x1564], 0x32
push eax
push 1
push 0
push 0x1027
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x155c]
mov ecx, esi
push eax
push 1
push 0
push 0x1028
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1558]
mov ecx, esi
push eax
push 1
push 0
push 0x1029
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1554]
mov ecx, esi
push eax
push 1
push 0
push 0x102a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1550]
mov ecx, esi
push eax
push 1
push 0
push 0x102b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x154c]
mov ecx, esi
push eax
push 1
push 0
push 0x102c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1548]
mov ecx, esi
push eax
push 1
push 0
push 0x102d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1544]
mov ecx, esi
push eax
push 1
push 0
push 0x102e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1540]
mov ecx, esi
push eax
push 1
push 0
push 0x102f
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x153c]
mov ecx, esi
push eax
push 1
push 0
push 0x1030
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1538]
mov ecx, esi
push eax
push 1
push 0
push 0x1031
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1534]
mov ecx, esi
push eax
push 1
push 0
push 0x1032
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1530]
mov ecx, esi
push eax
push 1
push 0
push 0x1033
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x152c]
mov ecx, esi
push eax
push 1
push 0
push 0x1034
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1528]
mov ecx, esi
push eax
push 1
push 0
push 0x1035
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1524]
mov ecx, esi
push eax
push 1
push 0
push 0x1036
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1520]
push eax
push 1
push 0
push 0x1037
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x151c]
mov ecx, esi
push eax
push 1
push 0
push 0x1038
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1518]
mov ecx, esi
push eax
push 1
push 0
push 0x1039
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1514]
mov ecx, esi
push eax
push 1
push 0
push 0x103a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1510]
mov ecx, esi
push eax
push 1
push 0
push 0x103b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x150c]
mov ecx, esi
push eax
push 1
push 0
push 0x103c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1508]
mov ecx, esi
push eax
push 1
push 0
push 0x103d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1504]
mov ecx, esi
push eax
push 1
push 0
push 0x103e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1500]
push eax
push 1
push 0
push 0x103f
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14fc]
mov ecx, esi
push eax
push 1
push 0
push 0x1040
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f8]
mov ecx, esi
push eax
push 1
push 0
push 0x1041
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f4]
mov ecx, esi
push eax
push 1
push 0
push 0x1042
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f0]
mov ecx, esi
push eax
push 1
push 0
push 0x1043
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14ec]
mov ecx, esi
push eax
push 1
push 0
push 0x1044
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e8]
mov ecx, esi
push eax
push 1
push 0
push 0x1045
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e4]
mov ecx, esi
push eax
push 1
push 0
push 0x1046
call fcn.100ccfbd
push eax
call fcn.1008dd70
push 0x80
lea eax, [ebp - 0x1560]
push eax
push dword [ebp - 0x1564]
call fcn.10039af0
add esp, 0x14
test eax, eax
jne 0x1008d448
push eax
push str.s1_send_cmd_elset_save2
push 1
push 0x14
push 4
call fcn.10044560
add esp, 0x14
push str.ELSET_SAVE2
call fcn.10025e80
add esp, 4
push edi
call sym.VADAV.dll_VDACQ_Close
push 0x1f4
call ebx
push 0xffffffffffffffff
push 0
push 0
push 0
push 0
call sym.VADAV.dll_VDACQ_Connect
mov edi, eax
test edi, edi
je 0x1008c869
lea eax, [ebp - 0x1560]
mov dword [ebp - 0x1564], 0x33
push eax
push 1
push 0
push 0x1047
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x155c]
mov ecx, esi
push eax
push 1
push 0
push 0x1048
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1558]
mov ecx, esi
push eax
push 1
push 0
push 0x1049
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1554]
mov ecx, esi
push eax
push 1
push 0
push 0x104a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1550]
mov ecx, esi
push eax
push 1
push 0
push 0x104b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x154c]
mov ecx, esi
push eax
push 1
push 0
push 0x104c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1548]
mov ecx, esi
push eax
push 1
push 0
push 0x104d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1544]
mov ecx, esi
push eax
push 1
push 0
push 0x104e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1540]
mov ecx, esi
push eax
push 1
push 0
push 0x104f
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x153c]
mov ecx, esi
push eax
push 1
push 0
push 0x1050
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1538]
mov ecx, esi
push eax
push 1
push 0
push 0x1051
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1534]
mov ecx, esi
push eax
push 1
push 0
push 0x1052
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1530]
mov ecx, esi
push eax
push 1
push 0
push 0x1053
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x152c]
mov ecx, esi
push eax
push 1
push 0
push 0x1054
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1528]
mov ecx, esi
push eax
push 1
push 0
push 0x1055
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1524]
mov ecx, esi
push eax
push 1
push 0
push 0x1056
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1520]
push eax
push 1
push 0
push 0x1057
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x151c]
mov ecx, esi
push eax
push 1
push 0
push 0x1058
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1518]
mov ecx, esi
push eax
push 1
push 0
push 0x1059
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1514]
mov ecx, esi
push eax
push 1
push 0
push 0x105a
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1510]
mov ecx, esi
push eax
push 1
push 0
push 0x105b
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x150c]
mov ecx, esi
push eax
push 1
push 0
push 0x105c
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1508]
mov ecx, esi
push eax
push 1
push 0
push 0x105d
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1504]
mov ecx, esi
push eax
push 1
push 0
push 0x105e
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x1500]
push eax
push 1
push 0
push 0x105f
mov ecx, esi
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14fc]
mov ecx, esi
push eax
push 1
push 0
push 0x1060
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f8]
mov ecx, esi
push eax
push 1
push 0
push 0x1061
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f4]
mov ecx, esi
push eax
push 1
push 0
push 0x1062
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14f0]
mov ecx, esi
push eax
push 1
push 0
push 0x1063
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14ec]
mov ecx, esi
push eax
push 1
push 0
push 0x1064
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e8]
mov ecx, esi
push eax
push 1
push 0
push 0x1065
call fcn.100ccfbd
push eax
call fcn.1008dd70
add esp, 8
lea eax, [ebp - 0x14e4]
mov ecx, esi
push eax
push 1
push 0
push 0x1066
call fcn.100ccfbd
push eax
call fcn.1008dd70
push 0x80
lea eax, [ebp - 0x1560]
push eax
push dword [ebp - 0x1564]
call fcn.10039af0
add esp, 0x14
test eax, eax
jne 0x1008d8b4
push eax
push str.s1_send_cmd_elset_save3
push 1
push 0x14
push 4
call fcn.10044560
add esp, 0x14
push str.ELSET_SAVE3
call fcn.10025e80
add esp, 4
push edi
call sym.VADAV.dll_VDACQ_Close
push 0x1f4
call ebx
push 0x1f40
call ebx
mov dword [esi + 0xa8], 1
jmp case.0x1008a808.4608
cmp dword [esi + 0xb8], 0
lea eax, [ebp - 0x20]
mov edi, dword [sym.imp.USER32.dll_GetWindowRect]
xorps xmm0, xmm0
push eax
push dword [esi + 0x20]
movups xmmword [ebp - 0x20], xmm0
movups xmmword [ebp - 0x14e0], xmm0
movups xmmword [ebp - 0x17d0], xmm0
je 0x1008d9eb
call edi
sub dword [ebp - 0x18], 0x12c
lea eax, [ebp - 0x20]
push 1
push eax
mov ecx, esi
call fcn.100674b0
push 0
push 0x1025
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100cdc87
push 0
push 0x1026
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100cdc87
push 0x1025
mov ecx, esi
call fcn.100ccf47
lea ecx, [ebp - 0x14e0]
push ecx
push dword [eax + 0x20]
call edi
push 0x1026
mov ecx, esi
call fcn.100ccf47
lea ecx, [ebp - 0x17d0]
push ecx
push dword [eax + 0x20]
call edi
lea eax, [ebp - 0x14e0]
mov ecx, esi
push eax
call fcn.100d157f
lea eax, [ebp - 0x17d0]
mov ecx, esi
push eax
call fcn.100d157f
push 0x103267d8
push 0x1207
mov ecx, esi
call fcn.100cdaf4
sub dword [ebp - 0x14d8], 0x12c
lea eax, [ebp - 0x14e0]
sub dword [ebp - 0x17c8], 0x12c
mov ecx, esi
push 1
push eax
push 0x1025
call fcn.100ccf47
mov ecx, eax
call fcn.100674b0
lea eax, [ebp - 0x17d0]
jmp 0x1008dbfa
call edi
add dword [ebp - 0x18], 0x12c
lea eax, [ebp - 0x20]
push 1
push eax
mov ecx, esi
call fcn.100674b0
push 1
push 0x1025
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100cdc87
push 1
push 0x1026
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100cdc87
push 0x1025
mov ecx, esi
call fcn.100ccf47
lea ecx, [ebp - 0x17d0]
push ecx
push dword [eax + 0x20]
call edi
push 0x1026
mov ecx, esi
call fcn.100ccf47
lea ecx, [ebp - 0x14e0]
push ecx
push dword [eax + 0x20]
call edi
lea eax, [ebp - 0x17d0]
mov ecx, esi
push eax
call fcn.100d157f
lea eax, [ebp - 0x14e0]
mov ecx, esi
push eax
call fcn.100d157f
push 0x103267dc
push 0x1207
mov ecx, esi
call fcn.100cdaf4
cmp dword [0x103c9a1c], 9
jne 0x1008dac2
lea eax, [ebp - 0xfd0]
push str.0_:_Auto_Exposure_r_n1_:_Dynamic_BackBias_Enable_r_n3_:_Test_Pattern_col__r_n4_:_Test_Pattern_row__r_nf_:_Auto_Trigger_r_n10_:_Dark_r_n11_:_Dynamic_Offset_r_n12_:_AGI_Auto_r_n13_:_16bit_r_n14_:_Preview_Enable_r_n15_:_Preview_Down_Sampling_r_n16_:_AGI_r_n17_:_Dynamic_Offset_r_n1c_:_Anti_Shock_Disable_r_n1d_:_Wireless_Message_Enable_r_n1e_:_Storage_Function_Disable_r_n
push eax
call fcn.100029e0
add esp, 8
lea eax, [ebp - 0xfd0]
mov ecx, esi
push eax
push 0x1025
call fcn.100cdaf4
push str.0_:_rEXPOSE_SIZE_r_n1_:_fsm_opt_reg_r_n2_:_op_mode_reg_r_n3_:_set_gate_r_n4_:_RESERVED_r_n5_:_ready_delay_r_n6_:_Back_bias_widthH_r_n7_:_image_Width_r_n8_:_ADC_clock_delay_r_n9_:_Back_bias_repeat_Dynamic_mode_Manual_Back_bias__r_na_:_Flush_repeat_Dynamic_mode_Manual_Back_bias__r_nb_:_RESERVED_r_nc_:_back_bias_siz_r_nd_:_image_height_r_ne_:_cycle_width_flush_r_nf_:_anti_shock_threshold_r_n10_:_cycle_widht_read_r_n11_:_repeat_back_bias_r_n12_:_repeat_flush_r_n13_:_repeat_read_r_n14_:_MCU_DYNAMIC_TM_r_n15_:_up_back_bias_neg_r_n16_:_RESERVED_r_n17_:_up_back_bias_opr_r_n18_:_down_back_bias_opr_r_n19_:_RESERVED_r_n1a_:_MCU_INIT_TYPE_r_n1b_:_MCU_INIT_DARK_CNT_r_n1c_:_down_back_bias_neg_r_n1d_:_TRIGGER_TH_r_n1e_:_up_gate_stv_read_r_n1f_:_down_gate_stv_read_r_n20_:_up_gate_cpv1_read_r_n21_:_down_gate_cpv1_read_r_n22_:_RESERVED_r_n23_:_RESERVED_r_n24_:_up_gate_oe1_read_r_n25_:_down_gate_oe1_read_r_n26_:_up_gate_oe_backbias_r_n27_:_down_gate_oe_backbias_r_n28_:_adi_config_reg0_r_n29_:_adi_config_reg1_r_n2a_:_adi_config_reg2_r_n2b_:_adi_config_reg3_r_n2c_:_adi_config_reg4_r_n2d_:_adi_config_reg5_r_n2e_:_adi_config_reg6_r_n2f_:_adi_config_reg7_r_n30_:_adi_config_reg8_r_n31_:_adi_config_reg9_r_n32_:_adi_config_reg10_r_n33_:_adi_config_reg11_r_n34_:_adi_config_reg12_r_n35_:_adi_config_reg13_r_n36_:_adi_config_reg14_r_n37_:_adi_config_reg15_r_n38_:_RESERVED_r_n39_:_RESERVED_r_n3a_:_RESERVED_r_n3b_:_RESERVED_r_n3c_:_RESERVED_r_n3d_:_RESERVED_r_n3e_:_RESERVED_r_n3f_:_RESERVED_r_n40_:_ADI_ACLK_NUM_1_r_n41_:_ADI_ACLK_NUM_2_r_n42_:_ADI_ACLK_NUM_3_r_n43_:_ADI_ACLK_NUM_4_r_n44_:_ADI_ACLK_NUM_5_r_n45_:_ADI_ACLK_NUM_6_r_n46_:_ADI_ACLK_NUM_7_r_n47_:_ADI_ACLK_NUM_8_r_n48_:_ADI_ACLK_NUM_0_r_n49_:_ADI_ACLK_NUM_9_r_n4a_:_RESERVED_r_n4b_:_RESERVED_r_n4c_:_exp_delay_r_n4d_:_RESERVED_r_n4e_:_RESERVED_r_n4f_:_RESERVED_r_n50_:_RESERVED_r_n51_:_RESERVED_r_n52_:_RESERVED_r_n53_:_RESERVED_r_n54_:_SHOCK_DELAY_r_n55_:_SLEEP_CTRL_r_n56_:_trigger_mode_r_n57_:_shock_xray_th_r_n58_:_shock_th_r_n59_:_shock_stability_r_n5a_:_offset_th_r_n5b_:_offset_stability_r_n5c_:_RESERVED_r_n5d_:_RESERVED_r_n5e_:_RESERVED_r_n5f_:_RESERVED_r_n
jmp 0x1008dba2
mov eax, dword [0x103c9a24]
cmp eax, 0x11
jge 0x1008db76
cmp eax, 8
je 0x1008db76
cmp eax, 0xc
je 0x1008db36
cmp eax, 0xd
je 0x1008db36
cmp eax, 0xf
je 0x1008db36
cmp eax, 0x10
je 0x1008db36
cmp eax, 5
jne 0x1008dbc4
lea eax, [ebp - 0x800]
push str.0_:_F_Ctrl_r_n1_:_intb_r_n2_:_OE_r_n5_:_2nd_EL_enable_r_n6_:_AG0_r_n7_:_AG1_r_n8_:_AG2_r_nb_:_Auto_Exposure_r_nc_:_F1_r_nd_:_F2_r_ne_:_F3_r_nf_:_STV1L_r_n11_:_Auto_Trigger_r_n12_:_AGI_Auto_r_n13_:_16bit_r_n16_:_AGI_r_n17_:_Dynamic_offset_r_n18_:_Dynamic_offset_neg_shift_r_n
push eax
call fcn.100029e0
add esp, 8
lea eax, [ebp - 0x800]
mov ecx, esi
push eax
push 0x1025
call fcn.100cdaf4
lea eax, [ebp - 0x800]
push str.0_:_window_time_r_n1_:_ROIC_1st_time_r_n2_:_Sample_0_time_r_n3_:_Sample_1_time_r_n4_:_Gate_High_time_r_n5_:_Ready_delay_r_n6_:_OC_Gate_rd_count_r_n7_:_OC_start_delay_r_n8_:_OC_floating_time_r_n9_:_OC_Neg_delay_r_na_:_OC_gate_high_time_r_nb_:_OC_gate_high_time2_r_nc_:_OC_gate2gate_delay_r_nd_:_3rd_gate_rd_count_r_ne_:_Sleep_time_r_nf_:_2nd_3rd_EL_run_time_r_n10_:_3rd_EL_delay_r_n11_:_3rd_Dark_count_r_n12_:_3rd_EL_loop_r_n13_:_3rd_gate_delay_r_n14_:_Auto_trigger_threshold_r_n15_:_Auto_trigger_timeout_r_n16_:_Idle_gate_delay_r_n
push eax
call fcn.100029e0
lea eax, [ebp - 0x800]
jmp 0x1008dbb4
lea eax, [ebp - 0x800]
push str.0_:_Auto_Exposure_r_n10_:_Dark_r_n12_:_AGI_Auto_r_n16_:_AGI_r_n
push eax
call fcn.100029e0
add esp, 8
lea eax, [ebp - 0x800]
mov ecx, esi
push eax
push 0x1025
call fcn.100cdaf4
lea eax, [ebp - 0x800]
push str.0_:_window_time_r_n1_:_OC_GateRdCnt_1st_r_n2_:_OC_GateRdCnt_2nd_r_n3_:_OC_GateONWidth_A_r_n4_:_OC_GateOnWidth_B_r_n5_:_Ready_Delay_r_n6_:_OC_Start_Delay_r_n7_:_OC_Floating_r_n8_:_OC_Neg_Delay_r_n9_:_OC_Gate2Gate_Delay_r_na_:_B_GateONWidth_r_nb_:_AF_GateRdCnt_r_nc_:_CH_A_Integ_r_nd_:_CH_B_CDS_r_ne_:_CH_C_ADC_Ref_r_nf_:_CH_D_Set_r_n10_:_CH_E_Lpf_r_n11_:_CH_F_Ramp_r_n12_:_CH_G_VCAL_r_n13_:_CH_H_VTH_r_n14_:_TRG_CON_IN_r_n15_:_ROIC_OP_Mode_r_n16_:_ROIC_INT_Gain_r_n17_:_ROIC_LPF_Time_r_n18_:_ROIC_CDS_Gain_r_n19_:_ROIC_RAMP_Select_r_n1a_:_ROIC_Calib_Addr_r_n1b_:_ROIC_Test_Mode_r_n1c_:_ROIC_Master_Reset_r_n
push eax
call fcn.100029e0
lea eax, [ebp - 0x800]
jmp 0x1008dbb4
lea eax, [ebp - 0xfd0]
push str.0_:_Auto_Exposure_r_n3_:_Test_Pattern_col__r_n4_:_Test_Pattern_row__r_n5_:_FCTRL0_r_n6_:_FCTRL1_r_n7_:_GAIN0_r_n8_:_GAIN1_r_n9_:_GAIN2_r_na_:_GAIN3_r_nb_:_OE_r_nf_:_Auto_Trigger_r_n10_:_Dark_r_n11_:_Dynamic_Offset_r_n12_:_AGI_Auto_r_n13_:_16bit_r_n14_:_Preview_Enable_r_n15_:_Preview_Down_Sampling_r_n16_:_AGI_r_n17_:_Dynamic_Offset_r_n1c_:_Anti_Shock_Disable_r_n1d_:_Wireless_Message_Enable_r_n1e_:_Storage_Function_Disable_r_n
push eax
call fcn.100029e0
add esp, 8
lea eax, [ebp - 0xfd0]
mov ecx, esi
push eax
push 0x1025
call fcn.100cdaf4
push str.0_:_rEXPOSE_SIZE_r_n1_:_FSM_OPT_REG_r_n2_:_OP_MODE_REG_r_n3_:_SET_GATE_r_n4_:_SET_ROIC_r_n5_:_READY_DELAY_r_n6_:_GATE_SIZE_r_n7_:_ROIC_SIZE_r_n8_:_NUM_r_n9_:_CLK_ADC_WIDTH_r_na_:_CLK_ADC_DUTY_r_nb_:_CLK_ADC_CTRL_r_nc_:_BACK_BIAS_SIZE_r_nd_:_IMAGE_HEIGHT_r_ne_:_CYCLE_WIDTH_FLUSH_r_nf_:_anti_shock_threshold_r_n10_:_CYCLE_WIDTH_READ_r_n11_:_REPEAT_BACK_BIAS_r_n12_:_REPEAT_FLUSH_r_n13_:_REPEAT_READ_r_n14_:_MCU_DYNAMIC_TM_r_n15_:_UP_BACK_BIAS_NEG_r_n16_:_UP_BACK_BIAS_POS_r_n17_:_UP_BACK_BIAS_OPR_r_n18_:_DOWN_BACK_BIAS_OPR_r_n19_:_DOWN_BACK_BIAS_POS_r_n1a_:_MCU_INIT_TYPE_r_n1b_:_MCU_INIT_DARK_CNT_r_n1c_:_DOWN_BACK_BIAS_NEG_r_n1d_:_TRIGGER_TH_r_n1e_:_UP_GATE_STV_READ_r_n1f_:_DOWN_GATE_STV_READ_r_n20_:_UP_GATE_CPV1_READ_r_n21_:_DOWN_GATE_CPV1_READ_r_n22_:_UP_GATE_CPV2_READ_r_n23_:_DOWN_GATE_CPV2_READ_r_n24_:_UP_GATE_OE1_READ_r_n25_:_DOWN_GATE_OE1_READ_r_n26_:_UP_GATE_OE1_READ_r_n27_:_DOWN_GATE_OE2_READ_r_n28_:_UP_INTB_r_n29_:_DOWN_INTB_r_n2a_:_UP_ROIC_RST_r_n2b_:_DOWN_ROIC_RST_r_n2c_:_UP_ROIC_FRST_r_n2d_:_DOWN_ROIC_FRST_r_n2e_:_UP_ROIC_SRCLR_r_n2f_:_DOWN_ROIC_SRCLR_r_n30_:_UP_ROIC_SH00_1_r_n31_:_DOWN_ROIC_SH00_1_r_n32_:_UP_ROIC_SH00_2_r_n33_:_DOWN_ROIC_SH00_2_r_n34_:_UP_ROIC_SH10_1_r_n35_:_DOWN_ROIC_SH10_1_r_n36_:_UP_ROIC_SH10_2_r_n37_:_DOWN_ROIC_SH10_2_r_n38_:_UP_ROIC_SH20_1_r_n39_:_DOWN_ROIC_SH20_1_r_n3a_:_UP_ROIC_SH20_2_r_n3b_:_DOWN_ROIC_SH20_2_r_n3c_:_UP_ROIC_SH01_1_r_n3d_:_DOWN_ROIC_SH01_1_r_n3e_:_UP_ROIC_SH01_2_r_n3f_:_DOWN_ROIC_SH01_2_r_n40_:_UP_ROIC_SH11_1_r_n41_:_DOWN_ROIC_SH11_1_r_n42_:_UP_ROIC_SH11_2_r_n43_:_DOWN_ROIC_SH11_2_r_n44_:_UP_ROIC_SH21_1_r_n45_:_DOWN_ROIC_SH21_1_r_n46_:_UP_ROIC_SH21_2_r_n47_:_DOWN_ROIC_SH21_2_r_n48_:_UP_ROIC_EOSUP_r_n49_:_DOWN_ROIC_EOSUP_r_n4a_:_UP_ROIC_OE_r_n4b_:_DOWN_ROIC_OE_r_n4c_:_EXP_DELAY_r_n4d_:_SUM_TRIGGERING_r_n4e_:_PRE_DELAY_r_n4f_:_POST_DELAY_r_n50_:_SHOCK_TRIGGER_TH_r_n51_:_SHOCK_FLAG_r_n52_:_NUM_LINE_SHOCK_r_n53_:_SHOCK_CTRL_r_n54_:_SHOCK_DELAY_r_n55_:_SLEEP_CTRL_r_n56_:_DOWN_GATE_STV_FLUSH_r_n57_:_DOWN_GATE_CPV_FLUSH_r_n58_:_UP_GATE_OE_FLUSH_r_n59_:_DOWN_GATE_STV_BB_r_n5a_:_DOWN_GATE_CPV_BB_r_n5b_:_UP_GATE_OE_BB_r_n5c_:_CYCLE_WIDTH_BB_r_n5d_:_RESERVED_2_0xA2__r_n5e_:_RESERVED_3_0xA4__r_n5f_:_REPEAT_3rd_BB_RD_r_n
lea eax, [ebp - 0xfd0]
push eax
call fcn.100029e0
lea eax, [ebp - 0xfd0]
add esp, 8
mov ecx, esi
push eax
push 0x1026
call fcn.100cdaf4
add dword [ebp - 0x17c8], 0x12c
lea eax, [ebp - 0x17d0]
add dword [ebp - 0x14d8], 0x12c
mov ecx, esi
push 1
push eax
push 0x1025
call fcn.100ccf47
mov ecx, eax
call fcn.100674b0
lea eax, [ebp - 0x14e0]
push 1
push eax
push 0x1026
mov ecx, esi
call fcn.100ccf47
mov ecx, eax
call fcn.100674b0
xor eax, eax
cmp dword [esi + 0xb8], eax
sete al
mov dword [esi + 0xb8], eax
push dword [ebp + 0xc]
mov ecx, esi
push dword [ebp + 8]
call fcn.100c7f36
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10291e04
mov esp, ebp
pop ebp
ret 8