Function at 0x4753a7
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x524e3a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1c58
call fcn.004e8aa0
mov dword [ebp - 0x1c54], ecx
mov dword [ebp - 0x1c24], 0
cmp dword [0x56ccec], 1
je 0x4753eb
cmp dword [0x56cc5c], 0
je 0x4753f0
jmp 0x47727c
mov dword [0x56ccec], 1
push str._OnButtonScanusb_:_Start_r_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x5fd
mov ecx, dword [ebp - 0x1c54]
call fcn.0050c0d4
mov dword [ebp - 0x174c], eax
push str.Initial_Card_Spend_Time
mov ecx, dword [ebp - 0x174c]
call fcn.0050c36b
mov dword [ebp - 0x1760], 0
jmp 0x475446
mov eax, dword [ebp - 0x1760]
add eax, 1
mov dword [ebp - 0x1760], eax
cmp dword [ebp - 0x1760], 0x11
jge 0x47547d
mov ecx, dword [ebp - 0x1760]
mov edx, dword [ebp - 0x1c54]
cmp dword [edx + ecx*4 + 0x3d40], 0
je 0x47547b
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
mov edx, dword [ecx + eax*4 + 0x3d40]
mov byte [edx], 0xfe
jmp 0x475437
mov eax, dword [ebp - 0x1c54]
cmp dword [eax + 0x1264], 0
jne 0x4754c1
push 0
push 0
mov ecx, dword [ebp - 0x1c54]
call fcn.0047956c
push 0x54d
mov ecx, dword [ebp - 0x1c54]
call fcn.0050c0d4
mov dword [ebp - 0x1c20], eax
push str.Scanning..
mov ecx, dword [ebp - 0x1c20]
call fcn.0050c36b
mov dword [ebp - 0x1760], 1
jmp 0x4754dc
mov ecx, dword [ebp - 0x1760]
add ecx, 1
mov dword [ebp - 0x1760], ecx
cmp dword [ebp - 0x1760], 0x11
jge 0x47553a
mov edx, dword [ebp - 0x1760]
add edx, 0x608
push edx
mov ecx, dword [ebp - 0x1c54]
call fcn.0050c0d4
mov ecx, eax
call fcn.00406530
test eax, eax
je 0x475521
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
mov dword [ecx + eax*4 + 0x270], 1
jmp 0x475538
mov edx, dword [ebp - 0x1760]
mov eax, dword [ebp - 0x1c54]
mov dword [eax + edx*4 + 0x270], 0
jmp 0x4754cd
cmp dword [0x56cce8], 0
jne 0x47555d
cmp dword [0x56cea4], 0
je 0x47555d
push 0x44
push 0
push 0x56cca4
call fcn.004e8440
add esp, 0xc
mov dword [0x672ff0], 0
mov dword [0x673014], 0
mov dword [0x672ffc], 0
push 0x11
push 0
push 0x672fc8
call fcn.004e8440
add esp, 0xc
mov dword [ebp - 0x1730], 1
mov dword [ebp - 0x1748], 0
lea ecx, [ebp - 0x218]
call fcn.004046f0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1910], 0
jmp 0x4755cd
mov ecx, dword [ebp - 0x1910]
add ecx, 1
mov dword [ebp - 0x1910], ecx
cmp dword [ebp - 0x1910], 0x18
jge 0x4755e9
mov edx, dword [ebp - 0x1910]
mov dword [edx*4 + 0x673358], 1
jmp 0x4755be
call fcn.004b95ab
cmp dword [0x56c110], 0
je 0x4756ee
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xb9c]
push ecx
call fcn.004b977b
add esp, 4
mov edx, dword [ebp - 0x1c54]
cmp dword [edx + 0xb9c], 1
jne 0x4756ee
mov dword [ebp - 0x1760], 0
jmp 0x47563e
mov eax, dword [ebp - 0x1760]
add eax, 1
mov dword [ebp - 0x1760], eax
cmp dword [ebp - 0x1760], 0x10
jge 0x4756de
mov ecx, dword [ebp - 0x1760]
cmp dword [ecx*4 + 0x6733b8], 0
je 0x4756d9
mov edx, dword [ebp - 0x1760]
push edx
push str.PORTINDEX_d
lea eax, [ebp - 0x218]
push eax
call fcn.00502a32
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0xf2c]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1760]
mov eax, dword [edx*4 + 0x6733b8]
push eax
push 0x55e718
lea ecx, [ebp - 0xf2c]
push ecx
call fcn.004e894d
add esp, 0xc
mov edx, dword [ebp - 0x1c54]
add edx, 0xca4
push edx
lea eax, [ebp - 0xf2c]
push eax
lea ecx, [ebp - 0x218]
call fcn.00404710
push eax
push str.INITIAL
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
jmp 0x47562f
mov ecx, dword [ebp - 0x1c54]
mov dword [ecx + 0xb9c], 0
mov dword [ebp - 0x1760], 1
jmp 0x475709
mov edx, dword [ebp - 0x1760]
add edx, 1
mov dword [ebp - 0x1760], edx
mov eax, dword [0x56cdd8]
add eax, 1
cmp dword [ebp - 0x1760], eax
jge 0x475766
mov ecx, dword [ebp - 0x1760]
mov byte [ecx + 0x672fc8], 0
mov edx, dword [ebp - 0x1760]
mov byte [edx + 0x673000], 0xff
mov eax, dword [ebp - 0x1760]
imul eax, eax, 0x35
mov dword [eax + 0x56cf0c], 0
mov ecx, dword [ebp - 0x1760]
mov byte [ecx + 0x672fdc], 0
mov edx, dword [ebp - 0x1760]
mov dword [edx*4 + 0x56cc60], 1
jmp 0x4756fa
mov ecx, dword [ebp - 0x1c54]
call fcn.00478554
mov dword [ebp - 0x1760], 0
jmp 0x47578c
mov eax, dword [ebp - 0x1760]
add eax, 1
mov dword [ebp - 0x1760], eax
cmp dword [ebp - 0x1760], 0x18
jge 0x4758a0
cmp dword [0x56c110], 0
jne 0x4757b2
mov ecx, dword [0x6732f4]
cmp ecx, dword [ebp - 0x1760]
jne 0x4757b2
jmp 0x47577d
cmp dword [0x56c110], 0
jne 0x4757cb
mov edx, dword [0x6732f0]
cmp edx, dword [ebp - 0x1760]
jne 0x4757cb
jmp 0x47577d
push 0
mov eax, dword [ebp - 0x1730]
push eax
mov ecx, dword [ebp - 0x1760]
push ecx
call fcn.004b9e3c
add esp, 0xc
test eax, eax
je 0x4757f6
mov edx, dword [ebp - 0x1730]
add edx, 1
mov dword [ebp - 0x1730], edx
cmp dword [0x56c110], 0
je 0x47589b
cmp dword [0x673014], 0
je 0x47589b
mov dword [0x672ff0], 0
mov dword [ebp - 0x1910], 1
jmp 0x475835
mov eax, dword [ebp - 0x1910]
add eax, 1
mov dword [ebp - 0x1910], eax
mov ecx, dword [0x56cdd8]
add ecx, 1
cmp dword [ebp - 0x1910], ecx
jge 0x475882
mov edx, dword [ebp - 0x1910]
mov byte [edx + 0x672fc8], 0
mov eax, dword [ebp - 0x1910]
mov byte [eax + 0x673000], 0xff
mov ecx, dword [ebp - 0x1910]
mov byte [ecx + 0x672fdc], 0
mov edx, dword [ebp - 0x1910]
imul edx, edx, 0x35
mov dword [edx + 0x56cf0c], 0
jmp 0x475826
push 0
push str.WARNNING
push str._Fix_Usb_Port__function_only_support_Not_SMI_Tester_device.
mov ecx, dword [ebp - 0x1c54]
call fcn.0050a80e
jmp 0x4758a0
jmp 0x47577d
mov dword [ebp - 0x1808], 0
mov dword [ebp - 0x210], 0
mov byte [ebp - 0x1c28], 0
mov dword [ebp - 0x214], 0
lea ecx, [ebp - 0x1c30]
call fcn.004046f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a1c]
call fcn.00438fc0
lea ecx, [ebp - 0x228]
call fcn.0040a660
push 0xa0
push 0
lea eax, [ebp - 0x1800]
push eax
call fcn.004e8440
add esp, 0xc
mov dword [ebp - 0x1760], 1
jmp 0x47591b
mov ecx, dword [ebp - 0x1760]
add ecx, 1
mov dword [ebp - 0x1760], ecx
cmp dword [ebp - 0x1760], 0x11
jge 0x4759ff
mov edx, dword [ebp - 0x1760]
mov eax, dword [ebp - 0x1c54]
cmp dword [eax + edx*4 + 0x270], 0
jne 0x47594b
mov ecx, dword [ebp - 0x1760]
mov byte [ecx + 0x672fc8], 0
mov edx, dword [ebp - 0x1c54]
cmp dword [edx + 0x1264], 0
je 0x4759fa
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
mov dword [ecx + eax*4 + 0x12a0], 0
mov edx, dword [ebp - 0x1c54]
add edx, dword [ebp - 0x1760]
xor eax, eax
mov al, byte [edx + 0x128d]
test eax, eax
je 0x4759bf
mov ecx, dword [ebp - 0x1760]
xor edx, edx
mov dl, byte [ecx + 0x672fc8]
test edx, edx
jne 0x4759bd
push 0
push 0xff
push 0xff
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
jmp 0x4759fa
mov ecx, dword [ebp - 0x1760]
xor edx, edx
mov dl, byte [ecx + 0x672fc8]
cmp edx, 1
jne 0x4759fa
mov eax, dword [ebp - 0x1760]
mov byte [eax + 0x672fc8], 0
push 0
push 0
push 0xff
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
jmp 0x47590c
push 6
push 0
push 0x56ccf0
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1c54]
call fcn.0047b857
mov dword [ebp - 0x1760], 1
jmp 0x475a36
mov edx, dword [ebp - 0x1760]
add edx, 1
mov dword [ebp - 0x1760], edx
mov eax, dword [0x56cdd8]
add eax, 1
cmp dword [ebp - 0x1760], eax
jge 0x477070
mov ecx, dword [ebp - 0x1760]
xor edx, edx
mov dl, byte [ecx + 0x672fdc]
test edx, edx
jne 0x475ae6
push 0x104
push 0
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1c54]
cmp dword [ecx + 0x1264], 0
je 0x475ab1
mov edx, dword [ebp - 0x1c54]
add edx, dword [ebp - 0x1760]
xor eax, eax
mov al, byte [edx + 0x128d]
test eax, eax
je 0x475ab1
push str.Cant_find_device__
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e86a0
add esp, 8
push 0xb0
push 0x32
push 0x80ffff
push 0x55e784
push 1
lea edx, [ebp - 0x1a14]
push edx
push 0xa
push 1
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
jmp 0x475a27
mov ecx, dword [ebp - 0x1760]
xor edx, edx
mov dl, byte [ecx + 0x672fc8]
test edx, edx
jne 0x475bad
push 0x104
push 0
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e8440
add esp, 0xc
push str.No_Card__
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e86a0
add esp, 8
mov edx, dword [ebp - 0x1c54]
cmp dword [edx + 0x1264], 0
je 0x475b78
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
cmp dword [ecx + eax*4 + 0x12a0], 0xff0000
jne 0x475b78
push 0x104
push 0
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e8440
add esp, 0xc
push str.AutoHandler_Skip__
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e86a0
add esp, 8
push 0xb1
push 0x32
push 0x80ffff
push 0x55e7a8
push 1
lea ecx, [ebp - 0x1a14]
push ecx
push 0xa
push 1
mov edx, dword [ebp - 0x1760]
push edx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
jmp 0x475a27
push 0xb1
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + eax*4 + 0x22c]
call fcn.00439f0e
mov edx, dword [ebp - 0x1760]
xor eax, eax
mov al, byte [edx + 0x672fc8]
cmp eax, 1
jne 0x475c98
mov ecx, dword [ebp - 0x1760]
movsx edx, byte [ecx + 0x673000]
cmp edx, 0xffffffff
je 0x475c98
push 0x104
push 0
lea eax, [ebp - 0x190c]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1760]
push ecx
push str._OnButtonScanusb__:____d___Open_handle_again_____________n
lea edx, [ebp - 0x190c]
push edx
call fcn.004e894d
add esp, 0xc
lea eax, [ebp - 0x190c]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 1
lea ecx, [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
call fcn.004b9063
add esp, 0xc
mov dword [ebp - 0x1c2c], eax
push 0x104
push 0
lea eax, [ebp - 0x190c]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
push str._OnButtonScanusb__:____d___Handle__0x_lx_____________n
lea eax, [ebp - 0x190c]
push eax
call fcn.004e894d
add esp, 0x10
lea ecx, [ebp - 0x190c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp dword [ebp - 0x1c2c], 0
jne 0x475d67
push 0x104
push 0
lea edx, [ebp - 0x190c]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp - 0x1760]
push eax
push str._OnButtonScanusb__:____d___Open_handle_fail_____________n
lea ecx, [ebp - 0x190c]
push ecx
call fcn.004e894d
add esp, 0xc
lea edx, [ebp - 0x190c]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov eax, dword [ebp - 0x1760]
mov byte [eax + 0x672fc8], 0
push 0
push 0x50
push 0xff
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
push 0x104
push 0
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e8440
add esp, 0xc
push str.Card_Fail__
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e86a0
add esp, 8
push 0
push 0x32
push 0xff
push 0x55e868
push 1
lea ecx, [ebp - 0x1a14]
push ecx
push 0xa
push 1
mov edx, dword [ebp - 0x1760]
push edx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
jmp 0x475a27
cmp dword [0x56ce80], 0
je 0x475ddf
cmp dword [0x56cea4], 0
je 0x475ddf
mov eax, dword [ebp - 0x1760]
cmp dword [eax*4 + 0x56cca4], 0
jne 0x475ddf
cmp dword [0x56cd4c], 0
jle 0x475ddd
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
push 0xa
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.0040848c
push str.No_Serial_Number_in_Barcode_
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.00504bdd
jmp 0x475e33
cmp dword [0x56cd4c], 0
jle 0x475e33
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
push 7
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.0040848c
push str.Ready
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.00504bdd
lea ecx, [ebp - 0x228]
call fcn.0040a6f0
push eax
mov ecx, dword [ebp - 0x1760]
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + ecx*4 + 0x22c]
call fcn.0040aaa0
lea eax, [ebp - 0x1c40]
push eax
lea ecx, [ebp - 0x228]
call fcn.0047da30
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x1a1c], ecx
mov dword [ebp - 0x1a18], edx
push 0xf
push 0x80ffff
mov eax, dword [ebp - 0x1a18]
push eax
mov ecx, dword [ebp - 0x1a1c]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c44], esp
push 0x56d37c
call fcn.0050cecf
mov dword [ebp - 0x1c58], eax
mov edx, dword [ebp - 0x1760]
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + edx*4 + 0x22c]
call fcn.00439952
push 0x104
push 0
lea ecx, [ebp - 0x190c]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1760]
push edx
push str._OnButtonScanusb__:____d___Send_SMI_CMD_START___to_check_run_mode_____________n
lea eax, [ebp - 0x190c]
push eax
call fcn.004e894d
add esp, 0xc
lea ecx, [ebp - 0x190c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edx, dword [ebp - 0x1804]
push edx
lea eax, [ebp - 0x175c]
push eax
call fcn.004bf22c
add esp, 8
mov dword [ebp - 0x1c2c], eax
cmp dword [ebp - 0x1c2c], 0
jne 0x475fc3
push 0x104
push 0
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e8440
add esp, 0xc
push str.Command_flow_Fail__
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e86a0
add esp, 8
push 0
push 0x32
push 0xff
push 0x55e8f8
push 1
lea eax, [ebp - 0x1a14]
push eax
push 0xa
push 1
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
mov edx, dword [ebp - 0x1760]
mov byte [edx + 0x672fc8], 0
push 0
push 0x51
push 0xff
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
push 1
mov ecx, dword [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
call fcn.004b91bb
add esp, 0xc
jmp 0x475a27
mov al, byte [ebp - 0x175c]
mov byte [ebp - 0x1c28], al
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
imul ecx, ecx, 0xa
mov dl, byte [ebp - 0x1c28]
mov byte [ebp + ecx - 0x17f8], dl
mov eax, dword [ebp - 0x1c28]
and eax, 0xff
cmp eax, 2
je 0x4767b9
push 0xc00
lea ecx, [ebp - 0xe28]
push ecx
mov edx, dword [ebp - 0x1804]
push edx
lea eax, [ebp - 0x175c]
push eax
call fcn.004bf85e
add esp, 0x10
mov dword [ebp - 0x1c2c], eax
cmp dword [ebp - 0x1c2c], 0
jne 0x4760cd
push 0x104
push 0
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e8440
add esp, 0xc
push str.Read_FlashID_Fail__
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e86a0
add esp, 8
push 0
push 0x32
push 0xff
push 0x55e910
push 1
lea eax, [ebp - 0x1a14]
push eax
push 0xa
push 1
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
mov edx, dword [ebp - 0x1760]
mov byte [edx + 0x672fc8], 0
push 0
push 0x52
push 0xff
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
push 1
mov ecx, dword [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
call fcn.004b91bb
add esp, 0xc
jmp 0x475a27
mov eax, dword [ebp - 0x1c28]
and eax, 0xff
test eax, eax
jne 0x47634b
mov dword [ebp - 0x210], 0
jmp 0x4760fb
mov ecx, dword [ebp - 0x210]
add ecx, 1
mov dword [ebp - 0x210], ecx
cmp dword [ebp - 0x210], 0x20
jge 0x4762b4
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf8]
cmp eax, 0xec
je 0x47620c
mov ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx*8 - 0xdf8]
cmp edx, 0x98
je 0x47620c
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax*8 - 0xdf8]
cmp ecx, 0xc1
je 0x47620c
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf8]
cmp eax, 0x45
je 0x47620c
mov ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx*8 - 0xdf8]
cmp edx, 0xad
je 0x47620c
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax*8 - 0xdf8]
cmp ecx, 0x2c
je 0x47620c
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf8]
cmp eax, 0xb5
je 0x47620c
mov ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx*8 - 0xdf8]
cmp edx, 0x20
je 0x47620c
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax*8 - 0xdf8]
cmp ecx, 0x89
je 0x47620c
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf8]
cmp eax, 7
je 0x47620c
mov ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx*8 - 0xdf8]
cmp edx, 0x20
jne 0x4762af
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax*8 - 0xdf7]
cmp ecx, 0xff
je 0x4762af
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf6]
cmp eax, 0xff
je 0x4762af
mov ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx*8 - 0xdf5]
cmp edx, 0xff
je 0x4762af
mov eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax*8 - 0xdf4]
cmp ecx, 0xff
je 0x4762af
mov edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx*8 - 0xdf3]
cmp eax, 0xff
je 0x4762af
push 8
mov ecx, dword [ebp - 0x210]
lea edx, [ebp + ecx*8 - 0xdf8]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
imul eax, eax, 0xa
lea ecx, [ebp + eax - 0x1800]
push ecx
call fcn.004e8ae0
add esp, 0xc
jmp 0x4762b4
jmp 0x4760ec
mov edx, dword [ebp - 0xe14]
and edx, 0xff
shl edx, 0x18
mov eax, dword [ebp - 0xe13]
and eax, 0xff
shl eax, 0x10
add edx, eax
mov ecx, dword [ebp - 0xe12]
and ecx, 0xff
shl ecx, 8
add edx, ecx
mov eax, dword [ebp - 0xe11]
and eax, 0xff
add edx, eax
mov dword [ebp - 0x214], edx
cmp dword [0x56cd4c], 0
jle 0x47634b
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
push 7
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.0040848c
push str.Ready__RomMode_
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.00504bdd
mov ecx, dword [ebp - 0x1c28]
and ecx, 0xff
cmp ecx, 1
jne 0x4767b4
mov edx, dword [ebp - 0xe17]
and edx, 0xff
shl edx, 8
mov eax, dword [ebp - 0xe18]
and eax, 0xff
add edx, eax
mov word [ebp - 0x1750], dx
mov dword [ebp - 0x210], 0
jmp 0x47639e
mov ecx, dword [ebp - 0x210]
add ecx, 8
mov dword [ebp - 0x210], ecx
cmp dword [ebp - 0x210], 0x400
jge 0x47662d
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe28]
cmp eax, 0xec
je 0x47653b
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx - 0xe28]
cmp edx, 0x98
je 0x47653b
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
add eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xe28]
cmp ecx, 0xc1
je 0x47653b
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe28]
cmp eax, 0x45
je 0x47653b
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx - 0xe28]
cmp edx, 0xad
je 0x47653b
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
add eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xe28]
cmp ecx, 0x2c
je 0x47653b
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe28]
cmp eax, 0xb5
je 0x47653b
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx - 0xe28]
cmp edx, 0x20
je 0x47653b
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
add eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xe28]
cmp ecx, 0x89
je 0x47653b
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe28]
cmp eax, 7
je 0x47653b
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx - 0xe28]
cmp edx, 0x20
jne 0x476628
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
add eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xe27]
cmp ecx, 0xff
je 0x476628
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe26]
cmp eax, 0xff
je 0x476628
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
xor edx, edx
mov dl, byte [ebp + ecx - 0xe25]
cmp edx, 0xff
je 0x476628
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
add eax, dword [ebp - 0x210]
xor ecx, ecx
mov cl, byte [ebp + eax - 0xe24]
cmp ecx, 0xff
je 0x476628
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
add edx, dword [ebp - 0x210]
xor eax, eax
mov al, byte [ebp + edx - 0xe23]
cmp eax, 0xff
je 0x476628
push 8
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
add ecx, dword [ebp - 0x210]
lea edx, [ebp + ecx - 0xe28]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
imul eax, eax, 0xa
lea ecx, [ebp + eax - 0x1800]
push ecx
call fcn.004e8ae0
add esp, 0xc
jmp 0x47662d
jmp 0x47638f
push 0x800
push 0
lea edx, [ebp - 0x172c]
push edx
call fcn.004e8440
add esp, 0xc
push 0x800
lea eax, [ebp - 0x172c]
push eax
mov ecx, dword [ebp - 0x1804]
push ecx
lea edx, [ebp - 0x175c]
push edx
call fcn.004bfc3d
add esp, 0x10
mov dword [ebp - 0x1c2c], eax
cmp dword [ebp - 0x1c2c], 0
je 0x4766ba
mov eax, dword [ebp - 0x171b]
and eax, 0xff
shl eax, 8
mov ecx, dword [ebp - 0x171c]
and ecx, 0xff
add eax, ecx
mov word [ebp - 0x1750], ax
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
xor eax, eax
mov al, byte [ebp + edx - 0x163c]
test eax, eax
jne 0x4766ba
mov dword [ebp - 0x1c2c], 0
cmp dword [ebp - 0x1c2c], 0
je 0x476762
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
xor edx, edx
mov dl, byte [ebp + ecx - 0x16c9]
shl edx, 0x18
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
xor ecx, ecx
mov cl, byte [ebp + eax - 0x16ca]
shl ecx, 0x10
add edx, ecx
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
xor ecx, ecx
mov cl, byte [ebp + eax - 0x16cb]
shl ecx, 8
add edx, ecx
mov eax, dword [ebp - 0x1750]
and eax, 0xffff
xor ecx, ecx
mov cl, byte [ebp + eax - 0x16cc]
add edx, ecx
mov dword [ebp - 0x214], edx
mov edx, dword [ebp - 0x1750]
and edx, 0xffff
xor eax, eax
mov al, byte [ebp + edx - 0x16ed]
shl eax, 8
mov ecx, dword [ebp - 0x1750]
and ecx, 0xffff
xor edx, edx
mov dl, byte [ebp + ecx - 0x16ee]
add eax, edx
mov dword [ebp - 0x1c24], eax
cmp dword [0x56cd4c], 0
jle 0x4767b4
mov eax, dword [0x56cd4c]
push eax
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
push ecx
push 7
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + 0xd0]
call fcn.0040848c
push str.Ready__MPISP_
mov eax, dword [0x56cd4c]
push eax
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + 0xd0]
call fcn.00504bdd
jmp 0x4769e4
push 0x800
push 0
lea eax, [ebp - 0x172c]
push eax
call fcn.004e8440
add esp, 0xc
push 0x800
lea ecx, [ebp - 0x172c]
push ecx
mov edx, dword [ebp - 0x1804]
push edx
lea eax, [ebp - 0x175c]
push eax
call fcn.004bfc3d
add esp, 0x10
mov dword [ebp - 0x1c2c], eax
cmp dword [ebp - 0x1c2c], 0
jne 0x4768a0
push 0x104
push 0
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e8440
add esp, 0xc
push str.Read_DriveInfo_Fail__
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e86a0
add esp, 8
push 0
push 0x32
push 0xff
push 0x55e94c
push 1
lea eax, [ebp - 0x1a14]
push eax
push 0xa
push 1
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
mov edx, dword [ebp - 0x1760]
mov byte [edx + 0x672fc8], 0
push 0
push 0x53
push 0xff
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
push 1
mov ecx, dword [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
call fcn.004b91bb
add esp, 0xc
jmp 0x475a27
push 6
lea eax, [ebp - 0x163c]
push eax
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
imul ecx, ecx, 0xa
lea edx, [ebp + ecx - 0x1800]
push edx
call fcn.004e8ae0
add esp, 0xc
mov eax, dword [ebp - 0x16c9]
and eax, 0xff
shl eax, 0x18
mov ecx, dword [ebp - 0x16ca]
and ecx, 0xff
shl ecx, 0x10
add eax, ecx
mov edx, dword [ebp - 0x16cb]
and edx, 0xff
shl edx, 8
add eax, edx
mov ecx, dword [ebp - 0x16cc]
and ecx, 0xff
add eax, ecx
mov dword [ebp - 0x214], eax
mov edx, dword [ebp - 0x16ed]
and edx, 0xff
shl edx, 8
mov eax, dword [ebp - 0x16ee]
and eax, 0xff
add edx, eax
mov dword [ebp - 0x1c24], edx
push 0x11
push 0
lea ecx, [ebp - 0x1744]
push ecx
call fcn.004e8440
add esp, 0xc
push 0x10
lea edx, [ebp - 0x152c]
push edx
lea eax, [ebp - 0x1744]
push eax
call fcn.004e8ae0
add esp, 0xc
mov byte [ebp - 0x1734], 0
push 0x104
push 0
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e8440
add esp, 0xc
lea edx, [ebp - 0x1744]
push edx
push str.Ready__FW:__s_
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e894d
add esp, 0xc
cmp dword [0x56cd4c], 0
jle 0x4769e4
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
push 7
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.0040848c
lea ecx, [ebp - 0x1a14]
push ecx
mov edx, dword [0x56cd4c]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + 0xd0]
call fcn.00504bdd
mov edx, dword [ebp - 0x1760]
sub edx, 1
imul edx, edx, 0xa
xor eax, eax
mov al, byte [ebp + edx - 0x1800]
test eax, eax
jne 0x476a9d
push 0x104
push 0
lea ecx, [ebp - 0x1a14]
push ecx
call fcn.004e8440
add esp, 0xc
push str.Cant_Detect_Drive__
lea edx, [ebp - 0x1a14]
push edx
call fcn.004e86a0
add esp, 8
push 0
push 0x32
push 0xff
push 0x55e978
push 1
lea eax, [ebp - 0x1a14]
push eax
push 0xa
push 1
mov ecx, dword [ebp - 0x1760]
push ecx
mov ecx, dword [ebp - 0x1c54]
call fcn.00462eec
mov edx, dword [ebp - 0x1760]
mov byte [edx + 0x672fc8], 0
push 0
push 0x54
push 0xff
mov eax, dword [ebp - 0x1760]
push eax
mov ecx, dword [ebp - 0x1c54]
call fcn.00478e00
push 1
mov ecx, dword [ebp - 0x1804]
push ecx
mov edx, dword [ebp - 0x1760]
push edx
call fcn.004b91bb
add esp, 0xc
jmp 0x475a27
cmp dword [0x56cd4c], 0
je 0x476aec
mov eax, dword [ebp - 0x214]
shr eax, 0xb
push eax
push 0x55e97c
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e894d
add esp, 0xc
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [0x56cd50]
push eax
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + 0xd0]
call fcn.00504bdd
cmp dword [0x56cd60], 0
jle 0x476b38
mov eax, dword [ebp - 0x1c24]
push eax
push 0x55e984
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e894d
add esp, 0xc
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [0x56cd60]
push eax
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + 0xd0]
call fcn.00504bdd
mov eax, dword [ebp - 0x1c28]
and eax, 0xff
cmp eax, 2
jne 0x476dc6
push 0x104
push 0
lea ecx, [ebp - 0x190c]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x1760]
push edx
push str._OnButtonScanusb__:____d___Read_ID_Table_to_get_Serial_Number_____________n
lea eax, [ebp - 0x190c]
push eax
call fcn.004e894d
add esp, 0xc
lea ecx, [ebp - 0x190c]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 0x200
push 0
lea edx, [ebp - 0x1c1c]
push edx
call fcn.004e8440
add esp, 0xc
lea eax, [ebp - 0x1c1c]
push eax
mov ecx, dword [ebp - 0x1804]
push ecx
lea edx, [ebp - 0x175c]
push edx
call fcn.004bfad3
add esp, 0xc
mov dword [ebp - 0x1c2c], eax
lea ecx, [ebp - 0x1c30]
call fcn.0050cdec
cmp dword [ebp - 0x1c2c], 0
je 0x476c45
mov dword [ebp - 0x1910], 0
jmp 0x476bf2
mov eax, dword [ebp - 0x1910]
add eax, 1
mov dword [ebp - 0x1910], eax
cmp dword [ebp - 0x1910], 0xa
jge 0x476c43
mov ecx, dword [ebp - 0x1910]
xor edx, edx
mov dl, byte [ebp + ecx*2 - 0x1c08]
push edx
mov eax, dword [ebp - 0x1910]
xor ecx, ecx
mov cl, byte [ebp + eax*2 - 0x1c07]
push ecx
push 0x55e9d4
lea edx, [ebp - 0x218]
push edx
call fcn.00502a32
add esp, 0x10
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x1c30]
call fcn.0050d279
jmp 0x476be3
jmp 0x476c59
push 0x55e9dc
lea ecx, [ebp - 0x1c30]
push ecx
call fcn.00502a32
add esp, 8
cmp dword [0x56cd54], 0
jle 0x476c90
lea ecx, [ebp - 0x1c30]
call fcn.00404710
push eax
mov edx, dword [0x56cd54]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + 0xd0]
call fcn.00504bdd
cmp dword [ebp - 0x1c2c], 0
je 0x476dc6
push 0x55e9e0
lea edx, [ebp - 0x1744]
push edx
call fcn.004e9170
add esp, 8
test eax, eax
jne 0x476dc6
push 0x104
push 0
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e8440
add esp, 0xc
mov ecx, dword [ebp - 0x1be8]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x1be7]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x1bea]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x1be9]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x1bec]
and edx, 0xff
push edx
mov eax, dword [ebp - 0x1beb]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0x1bee]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x1bed]
and edx, 0xff
push edx
push str.Ready___FW:__C_C_C_C_C_C_C_C_
lea eax, [ebp - 0x1a14]
push eax
call fcn.004e894d
add esp, 0x28
cmp dword [0x56cd4c], 0
jle 0x476dc6
push 0x56d380
mov ecx, dword [0x56cd4c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.00504bdd
lea ecx, [ebp - 0x1a14]
push ecx
mov edx, dword [0x56cd4c]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
push eax
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + 0xd0]
call fcn.00504bdd
mov edx, dword [0x56cd4c]
push edx
mov eax, dword [ebp - 0x1760]
sub eax, 1
push eax
push 7
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + 0xd0]
call fcn.0040848c
cmp dword [0x56cd5c], 0
jle 0x476f7c
push 0x200
push 0
lea edx, [ebp - 0x20c]
push edx
call fcn.004e8440
add esp, 0xc
mov eax, dword [ebp - 0x1760]
sub eax, 1
imul eax, eax, 0xa
xor ecx, ecx
mov cl, byte [ebp + eax - 0x1800]
mov dword [ebp - 0x1c5c], ecx
mov edx, dword [ebp - 0x1c5c]
sub edx, 7
mov dword [ebp - 0x1c5c], edx
cmp dword [ebp - 0x1c5c], 0xe5
ja case.0x476e31.10
mov ecx, dword [ebp - 0x1c5c]
xor eax, eax
mov al, byte [ecx + 0x4772b6]
jmp dword [eax*4 + 0x47728a]
push str.RENESES
push 0x55ea0c
lea edx, [ebp - 0x20c]
push edx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push 0x55ea10
push 0x55ea14
lea eax, [ebp - 0x20c]
push eax
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push 0x55ea18
push 0x55ea20
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.MICRON
push 0x55ea2c
lea edx, [ebp - 0x20c]
push edx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.SANDISK
push 0x55ea38
lea eax, [ebp - 0x20c]
push eax
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.TOSHIBA
push 0x55ea44
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.HYNIX
push 0x55ea50
lea edx, [ebp - 0x20c]
push edx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.INFINEON
push 0x55ea60
lea eax, [ebp - 0x20c]
push eax
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.SAMSUNG
push 0x55ea6c
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e894d
add esp, 0xc
jmp case.0x476e31.10
push str.INTEL
push 0x55ea78
lea edx, [ebp - 0x20c]
push edx
call fcn.004e894d
add esp, 0xc
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [0x56cd5c]
push ecx
mov edx, dword [ebp - 0x1760]
sub edx, 1
push edx
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0xd0]
call fcn.00504bdd
mov ecx, dword [ebp - 0x1760]
sub ecx, 1
imul ecx, ecx, 0xa
mov byte [ebp + ecx - 0x17f7], 1
push 1
mov edx, dword [ebp - 0x1804]
push edx
mov eax, dword [ebp - 0x1760]
push eax
call fcn.004b91bb
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x20c]
push ecx
call fcn.004e8440
add esp, 0xc
mov edx, dword [ebp - 0x214]
shr edx, 0xb
push edx
push str._d_M
lea eax, [ebp - 0x20c]
push eax
call fcn.004e894d
add esp, 0xc
lea ecx, [ebp - 0x228]
call fcn.0040a6f0
push eax
mov ecx, dword [ebp - 0x1760]
mov edx, dword [ebp - 0x1c54]
mov ecx, dword [edx + ecx*4 + 0x22c]
call fcn.0040aaa0
lea eax, [ebp - 0x1c4c]
push eax
lea ecx, [ebp - 0x228]
call fcn.0047da30
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x1a1c], ecx
mov dword [ebp - 0x1a18], edx
push 0xd
push 0x80ffff
mov eax, dword [ebp - 0x1a18]
push eax
mov ecx, dword [ebp - 0x1a1c]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x1c50], esp
lea edx, [ebp - 0x20c]
push edx
call fcn.0050cecf
mov dword [ebp - 0x1c60], eax
mov eax, dword [ebp - 0x1760]
mov ecx, dword [ebp - 0x1c54]
mov ecx, dword [ecx + eax*4 + 0x22c]
call fcn.00439952
jmp 0x475a27
mov dword [ebp - 0x1760], 0
jmp 0x47708b
mov edx, dword [ebp - 0x1760]
add edx, 1
mov dword [ebp - 0x1760], edx
cmp dword [ebp - 0x1760], 0x10
jge 0x4770cc
mov eax, dword [ebp - 0x1760]
imul eax, eax, 0xa
xor ecx, ecx
mov cl, byte [ebp + eax - 0x17f7]
test ecx, ecx
jne 0x4770ac
jmp 0x47707c
push 6
mov edx, dword [ebp - 0x1760]
imul edx, edx, 0xa
lea eax, [ebp + edx - 0x1800]
push eax
push 0x56ccf0
call fcn.004e8ae0
add esp, 0xc
mov ecx, dword [ebp - 0x1c54]
mov dword [ecx + 0x218], 0
mov edx, dword [ebp - 0x1c54]
mov dword [edx + 0x21c], 0xffff
mov eax, dword [ebp - 0x1c54]
mov dword [eax + 0x220], 0
mov dword [ebp - 0x1760], 1
jmp 0x477117
mov ecx, dword [ebp - 0x1760]
add ecx, 1
mov dword [ebp - 0x1760], ecx
mov edx, dword [0x56cdd8]
add edx, 1
cmp dword [ebp - 0x1760], edx
jge 0x477185
mov eax, dword [ebp - 0x1760]
xor ecx, ecx
mov cl, byte [eax + 0x672fc8]
test ecx, ecx
je 0x477183
mov edx, dword [ebp - 0x1760]
sub edx, 1
mov dword [ebp - 0x1c64], edx
fild dword [ebp - 0x1c64]
sub esp, 8
fstp qword [esp]
push 0x40000000
push 0
call fcn.004ea050
add esp, 0x10
call fcn.004ea2e0
mov ecx, dword [ebp - 0x1c54]
mov edx, dword [ecx + 0x218]
add edx, eax
mov eax, dword [ebp - 0x1c54]
mov dword [eax + 0x218], edx
jmp 0x477108
mov ecx, dword [ebp - 0x1c54]
xor edx, edx
mov dl, byte [ecx + 0x118]
test edx, edx
je 0x47720d
push 6
push 0
lea eax, [ebp - 0x1c38]
push eax
call fcn.004e8440
add esp, 0xc
mov byte [ebp - 0x1c38], pe_nt_image_headers32
mov byte [ebp - 0x1c37], 0x50
mov byte [ebp - 0x1c36], 1
mov ecx, dword [ebp - 0x1c54]
mov edx, dword [ecx + 0x218]
sar edx, 8
and edx, 0xff
mov byte [ebp - 0x1c35], dl
mov eax, dword [ebp - 0x1c54]
mov ecx, dword [eax + 0x218]
and ecx, 0xff
mov byte [ebp - 0x1c34], cl
lea edx, [ebp - 0x1c38]
push edx
mov eax, dword [ebp - 0x1c54]
add eax, 0x119
push eax
call fcn.004b8484
add esp, 8
mov ecx, dword [ebp - 0x1c54]
cmp dword [ecx + 0x1264], 0
jne 0x477251
push 0
push 1
mov ecx, dword [ebp - 0x1c54]
call fcn.0047956c
push 0x54d
mov ecx, dword [ebp - 0x1c54]
call fcn.0050c0d4
mov dword [ebp - 0x1c20], eax
push str.Scan_Drive
mov ecx, dword [ebp - 0x1c20]
call fcn.0050c36b
mov dword [0x56ccec], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c30]
call fcn.0050ce61
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.0050ce61
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret