Function at 0x410a60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x456bc0
mov eax, dword fs:[0]
push eax
sub esp, 0x348
mov eax, dword [0x472008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x218], eax
movzx edi, word [ebp + 8]
lea ecx, [ebp - 0x74]
mov ebx, dword [edx + 0x1e]
push 0xa
push str._t_Status__n
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], 0
mov byte [ebp - 0x74], 0
call fcn.00407510
mov dword [ebp - 4], 0
mov dword [ebp - 0x1b0], 0xf
mov dword [ebp - 0x1b4], 0
mov byte [ebp - 0x1c4], 0
mov dword [ebp - 0x180], 0xf
mov dword [ebp - 0x184], 0
mov byte [ebp - 0x194], 0
mov dword [ebp - 0x198], 0xf
mov dword [ebp - 0x19c], 0
mov byte [ebp - 0x1ac], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
push 0
push 0x461999
mov dword [ebp - 0x48], 0xf
mov dword [ebp - 0x4c], 0
mov byte [ebp - 0x5c], 0
call fcn.00407510
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x17c]
push 0
push 0x461999
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
call fcn.00407510
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c]
push 0
push 0x461999
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
call fcn.00407510
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x44]
push 0
push 0x461999
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
call fcn.00407510
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x164]
push 0
push 0x461999
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
call fcn.00407510
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14c]
push 0
push 0x461999
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
call fcn.00407510
mov byte [ebp - 4], 9
mov dword [ebp - 0x120], 0xf
push 0
push 0x461999
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x124], 0
mov byte [ebp - 0x134], 0
call fcn.00407510
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x11c]
push 0
push 0x461999
mov dword [ebp - 0x108], 0xf
mov dword [ebp - 0x10c], 0
mov byte [ebp - 0x11c], 0
call fcn.00407510
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x104]
push 0
push 0x461999
mov dword [ebp - 0xf0], 0xf
mov dword [ebp - 0xf4], 0
mov byte [ebp - 0x104], 0
call fcn.00407510
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xec]
push 0
push 0x461999
mov dword [ebp - 0xd8], 0xf
mov dword [ebp - 0xdc], 0
mov byte [ebp - 0xec], 0
call fcn.00407510
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd4]
push 0
push 0x461999
mov dword [ebp - 0xc0], 0xf
mov dword [ebp - 0xc4], 0
mov byte [ebp - 0xd4], 0
call fcn.00407510
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbc]
push 0
push 0x461999
mov dword [ebp - 0xa8], 0xf
mov dword [ebp - 0xac], 0
mov byte [ebp - 0xbc], 0
call fcn.00407510
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa4]
push 0
push 0x461999
mov dword [ebp - 0x90], 0xf
mov dword [ebp - 0x94], 0
mov byte [ebp - 0xa4], 0
call fcn.00407510
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8c]
push 0
push 0x461999
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], 0
mov byte [ebp - 0x8c], 0
call fcn.00407510
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1f4]
mov dx, word [ebx]
call fcn.0040ff20
push eax
mov edx, str._t_t_fwDevice_
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__fwDevice__n
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x14
call fcn.00407910
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 2]
lea ecx, [ebp - 0x1f4]
call fcn.00410030
push eax
mov edx, str._t_t_fwMedia_
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__fwMedia__n
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x1c4]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 4]
lea ecx, [ebp - 0x1f4]
call fcn.00410110
push eax
mov edx, str._t_t_fwRetainBin_
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__fwRetainBin__n
mov edx, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x194]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 6]
lea ecx, [ebp - 0x1f4]
call fcn.004101c0
mov byte [ebp - 4], 0x19
push eax
mov edx, str._t_t_fwSecurity_
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__fwSecurity__n
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x1ac]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 8]
lea ecx, [ebp - 0x1f4]
call fcn.00401730
push eax
mov edx, str._t_t_usCards_
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__usCards__n
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x5c]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 0xa]
lea ecx, [ebp - 0x1f4]
call fcn.00410230
push eax
mov edx, str._t_t_fwChipPower_
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__fwChipPower__n
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x17c]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov esi, dword [ebx + 0xc]
test esi, esi
je 0x4110f4
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x411070
sub ecx, edx
je 0x4110f4
push 0xe
push str._t_t_lpszExtra__n
lea ecx, [ebp - 0x2c]
call fcn.00407510
cmp byte [esi], 0
je 0x4110e3
nop
push 3
push 0x462120
lea ecx, [ebp - 0x2c]
call fcn.004077e0
cmp byte [esi], 0
jne 0x4110a8
xor eax, eax
jmp 0x4110b9
mov eax, esi
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4110b0
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.004077e0
sub esp, 8
lea ecx, [ebp - 0x2c]
call fcn.00407740
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4110d3
sub ecx, edx
inc esi
add esi, ecx
cmp byte [esi], al
jne 0x411090
push 0xf
push str._t_t__lpszExtra__n
lea ecx, [ebp - 0x2c]
call fcn.004077e0
jmp 0x411103
push 0x1a
push str._t_t_lpszExtra___lpszExtra__n
lea ecx, [ebp - 0x2c]
call fcn.00407510
mov eax, 0xa03
cmp di, ax
jb 0x411de5
push 0x11
push str._t_t_dwGuidLights__n
lea ecx, [ebp - 0x44]
call fcn.00407510
xor esi, esi
lea edi, [ebx + 0x10]
nop word [eax + eax]
push dword [ebp - 0x210]
mov edx, dword [edi]
lea ecx, [ebp - 0x20c]
call fcn.00410330
add esp, 4
push eax
mov edx, str._t_t_t_GuidanceLightStates_
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__GuidanceLightStates__n
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1f4]
call fcn.00408000
add esp, 4
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x21
call fcn.00407910
mov byte [ebp - 4], 0x20
mov eax, dword [ebp - 0x1e0]
cmp eax, 0x10
jb 0x4111d8
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x4111cf
test cl, 0x1f
jne 0x411337
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x411337
sub ecx, eax
cmp ecx, 4
jb 0x411337
cmp ecx, 0x23
ja 0x411337
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x411243
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x41123a
test cl, 0x1f
jne 0x411337
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x411337
sub ecx, eax
cmp ecx, 4
jb 0x411337
cmp ecx, 0x23
ja 0x411337
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x4112ae
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x4112a5
test cl, 0x1f
jne 0x411337
mov eax, dword [ecx - 4]
cmp eax, ecx
jae 0x411337
sub ecx, eax
cmp ecx, 4
jb 0x411337
cmp ecx, 0x23
ja 0x411337
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
inc esi
add edi, 4
cmp esi, 0x20
jl 0x411130
push 0x12
push str._t_t__dwGuidLights__n
lea ecx, [ebp - 0x44]
call fcn.004077e0
mov dx, word [ebx + 0x90]
lea ecx, [ebp - 0x20c]
call fcn.00410640
push eax
mov edx, str._t_t_fwChipModule_
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__fwChipModule__n
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x164]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x411369
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x411360
test cl, 0x1f
je 0x41133c
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411348
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411354
call fcn.0044292a
cmp ecx, 0x23
jbe 0x41135e
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x4113d8
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x4113cf
test cl, 0x1f
je 0x4113ab
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4113b7
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4113c3
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4113cd
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x411447
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x41143e
test cl, 0x1f
je 0x41141a
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411426
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411432
call fcn.0044292a
cmp ecx, 0x23
jbe 0x41143c
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x92]
lea ecx, [ebp - 0x20c]
call fcn.004106e0
push eax
mov edx, str._t_t_fwMagReadModule_
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__fwMagReadModule__n
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x14c]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x4114e6
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x4114dd
test cl, 0x1f
je 0x4114b9
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4114c5
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4114d1
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4114db
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x411555
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x41154c
test cl, 0x1f
je 0x411528
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411534
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411540
call fcn.0044292a
cmp ecx, 0x23
jbe 0x41154a
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x4115c4
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x4115bb
test cl, 0x1f
je 0x411597
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4115a3
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4115af
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4115b9
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x94]
lea ecx, [ebp - 0x20c]
call fcn.004106e0
push eax
mov edx, str._t_t_fwMagWriteModule_
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__fwMagWriteModule__n
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x134]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x411663
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x41165a
test cl, 0x1f
je 0x411636
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411642
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x41164e
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411658
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x26
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x4116d2
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x4116c9
test cl, 0x1f
je 0x4116a5
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4116b1
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4116bd
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4116c7
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x411741
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x411738
test cl, 0x1f
je 0x411714
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411720
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x41172c
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411736
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x96]
lea ecx, [ebp - 0x20c]
call fcn.00410780
push eax
mov edx, str._t_t_fwFrontImageModule_
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__fwFrontImageModule__n
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x11c]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x4117e0
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x4117d7
test cl, 0x1f
je 0x4117b3
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4117bf
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4117cb
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4117d5
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x41184f
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x411846
test cl, 0x1f
je 0x411822
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x41182e
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x41183a
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411844
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x4118be
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x4118b5
test cl, 0x1f
je 0x411891
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x41189d
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4118a9
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4118b3
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x98]
lea ecx, [ebp - 0x20c]
call fcn.00410780
push eax
mov edx, str._t_t_fwBackImageModule_
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__fwBackImageModule__n
mov edx, eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0x104]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x41195d
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x411954
test cl, 0x1f
je 0x411930
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x41193c
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411948
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411952
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x2a
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x4119cc
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x4119c3
test cl, 0x1f
je 0x41199f
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x4119ab
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x4119b7
call fcn.0044292a
cmp ecx, 0x23
jbe 0x4119c1
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x411a3b
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x411a32
test cl, 0x1f
je 0x411a0e
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411a1a
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411a26
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411a30
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x9a]
lea ecx, [ebp - 0x20c]
call fcn.00410820
push eax
mov edx, str._t_t_wDevicePosition_
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__wDevicePosition__n
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0xec]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x411ada
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x411ad1
test cl, 0x1f
je 0x411aad
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411ab9
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411ac5
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411acf
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x411b49
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x411b40
test cl, 0x1f
je 0x411b1c
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411b28
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411b34
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411b3e
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1e0], 0xf
mov dword [ebp - 0x1e4], 0
mov byte [ebp - 0x1f4], 0
cmp eax, 0x10
jb 0x411bb8
mov ecx, dword [ebp - 0x20c]
inc eax
cmp eax, 0x1000
jb 0x411baf
test cl, 0x1f
je 0x411b8b
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411b97
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411ba3
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411bad
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov dx, word [ebx + 0x9c]
lea ecx, [ebp - 0x20c]
call fcn.00401730
push eax
mov edx, str._t_t_usPowerSaveRecoveryTime_
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1f4]
call fcn.00407ed0
add esp, 4
push str.__usPowerSaveRecoveryTime__n
mov edx, eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1dc]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0xd4]
push eax
call fcn.004072f0
mov eax, dword [ebp - 0x1c8]
cmp eax, 0x10
jb 0x411c57
mov ecx, dword [ebp - 0x1dc]
inc eax
cmp eax, 0x1000
jb 0x411c4e
test cl, 0x1f
je 0x411c2a
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411c36
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411c42
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411c4c
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c8], 0xf
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0x1dc], 0
cmp eax, 0x10
jb 0x411cc6
mov ecx, dword [ebp - 0x1f4]
inc eax
cmp eax, 0x1000
jb 0x411cbd
test cl, 0x1f
je 0x411c99
call fcn.0044292a
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x411ca5
call fcn.0044292a
sub ecx, eax
cmp ecx, 4
jae 0x411cb1
call fcn.0044292a
cmp ecx, 0x23
jbe 0x411cbb
call fcn.0044292a
mov ecx, eax
push ecx
call fcn.00428d58
add esp, 4
push 0
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1e0], 0xf
call fcn.00407ad0
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov eax, 0x1403
cmp word [ebp - 0x210], ax
jb 0x411de5
mov edx, dword [ebx + 0x9e]
lea ecx, [ebp - 0x1f4]
call fcn.004108c0
push eax
mov edx, str._t_t_lpwParkingStationMedia_
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__lpwParkingStationMedia__n
mov edx, eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0xbc]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
mov dx, word [ebx + 0xa2]
lea ecx, [ebp - 0x1f4]
call fcn.004109b0
push eax
mov edx, str._t_t_wAntiFraudModule_
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1dc]
call fcn.00407ed0
add esp, 4
push str.__wAntiFraudModule__n
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x20c]
call fcn.00408000
add esp, 4
lea ecx, [ebp - 0xa4]
push eax
call fcn.004072f0
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.00407280
push str._t__Status__n
lea ecx, [ebp - 0x8c]
call fcn.00407240
lea eax, [ebp - 0x1c4]
push eax
lea edx, [ebp - 0x74]
lea ecx, [ebp - 0x354]
call fcn.004080f0
add esp, 4
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x34
push ecx
mov edx, eax
lea ecx, [ebp - 0x33c]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x35
push ecx
mov edx, eax
lea ecx, [ebp - 0x324]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x36
push ecx
mov edx, eax
lea ecx, [ebp - 0x30c]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x37
push ecx
mov edx, eax
lea ecx, [ebp - 0x2f4]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x38
push ecx
mov edx, eax
lea ecx, [ebp - 0x2dc]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x39
push ecx
mov edx, eax
lea ecx, [ebp - 0x2c4]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x3a
push ecx
mov edx, eax
lea ecx, [ebp - 0x2ac]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x3b
push ecx
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x3c
push ecx
mov edx, eax
lea ecx, [ebp - 0x27c]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x3d
push ecx
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x3e
push ecx
mov edx, eax
lea ecx, [ebp - 0x24c]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x3f
push ecx
mov edx, eax
lea ecx, [ebp - 0x234]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x40
push ecx
mov edx, eax
lea ecx, [ebp - 0x1f4]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x41
push ecx
mov edx, eax
lea ecx, [ebp - 0x1dc]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x42
push ecx
mov edx, eax
lea ecx, [ebp - 0x20c]
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x43
push ecx
mov ecx, dword [ebp - 0x214]
mov edx, eax
call fcn.004080c0
add esp, 4
lea ecx, [ebp - 0x20c]
call fcn.00407280
lea ecx, [ebp - 0x1dc]
call fcn.00407280
lea ecx, [ebp - 0x1f4]
call fcn.00407280
lea ecx, [ebp - 0x234]
call fcn.00407280
lea ecx, [ebp - 0x24c]
call fcn.00407280
lea ecx, [ebp - 0x264]
call fcn.00407280
lea ecx, [ebp - 0x27c]
call fcn.00407280
lea ecx, [ebp - 0x294]
call fcn.00407280
lea ecx, [ebp - 0x2ac]
call fcn.00407280
lea ecx, [ebp - 0x2c4]
call fcn.00407280
lea ecx, [ebp - 0x2dc]
call fcn.00407280
lea ecx, [ebp - 0x2f4]
call fcn.00407280
lea ecx, [ebp - 0x30c]
call fcn.00407280
lea ecx, [ebp - 0x324]
call fcn.00407280
lea ecx, [ebp - 0x33c]
call fcn.00407280
lea ecx, [ebp - 0x354]
call fcn.00407280
lea ecx, [ebp - 0x8c]
call fcn.00407280
lea ecx, [ebp - 0xa4]
call fcn.00407280
lea ecx, [ebp - 0xbc]
call fcn.00407280
lea ecx, [ebp - 0xd4]
call fcn.00407280
lea ecx, [ebp - 0xec]
call fcn.00407280
lea ecx, [ebp - 0x104]
call fcn.00407280
lea ecx, [ebp - 0x11c]
call fcn.00407280
lea ecx, [ebp - 0x134]
call fcn.00407280
lea ecx, [ebp - 0x14c]
call fcn.00407280
lea ecx, [ebp - 0x164]
call fcn.00407280
lea ecx, [ebp - 0x44]
call fcn.00407280
lea ecx, [ebp - 0x2c]
call fcn.00407280
lea ecx, [ebp - 0x17c]
call fcn.00407280
lea ecx, [ebp - 0x5c]
call fcn.00407280
lea ecx, [ebp - 0x1ac]
call fcn.00407280
lea ecx, [ebp - 0x194]
call fcn.00407280
lea ecx, [ebp - 0x1c4]
call fcn.00407280
lea ecx, [ebp - 0x74]
call fcn.00407280
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00428bf1
mov esp, ebp
pop ebp
ret