Function at 0x402d80
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2ac
mov ebx, dword [ebp + 8]
mov dword [esp], str.ANDROID_PRODUCT_OUT
call fcn.00415d40
test eax, eax
mov esi, eax
je 0x402dbd
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov ecx, 0x550020
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004dc2a0
sub esp, 8
mov dword [esp], str.ANDROID_SERIAL
call fcn.00415d40
mov dword [esp], str.ANDROID_ADB_SERVER_PORT
mov dword [ebp - 0x298], eax
call fcn.00415d40
mov dword [ebp - 0x288], 0x13ad
test eax, eax
mov esi, eax
je 0x402df4
cmp byte [eax], 0
jne 0x403480
test ebx, ebx
jle 0x4032ae
mov dword [ebp - 0x280], 0xffffffff
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0x290], 2
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0
mov dword [ebp + 8], ebx
jmp 0x402f0e
mov edi, str.nodaemon
mov ecx, 9
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x403003
mov edi, str.fork_server
mov ecx, 0xc
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x403012
mov edi, str.__reply_fd
mov ecx, 0xb
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x403021
cmp dword [ebp + 8], 1
je 0x4031ec
mov edi, dword [edx + 4]
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [ebp - 0x284], edx
mov dword [esp], edi
call sub.msvcrt.dll_strtol
mov esi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [esp], 0xfffffff6
mov ebx, eax
mov dword [ebp - 0x280], eax
call esi
sub esp, 4
cmp ebx, eax
je 0x4031d0
mov dword [esp], 0xfffffff5
call esi
sub esp, 4
cmp ebx, eax
je 0x4031d0
mov dword [esp], 0xfffffff4
call esi
sub esp, 4
cmp ebx, eax
je 0x4031d0
mov edx, dword [ebp - 0x284]
sub dword [ebp + 8], 1
add edx, 4
nop
sub dword [ebp + 8], 1
add edx, 4
mov eax, dword [ebp + 8]
test eax, eax
jle 0x402f48
mov eax, dword [edx]
mov ecx, 7
mov edi, 0x51b142
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov ebx, esi
cmp bl, cl
jne 0x402e40
sub dword [ebp + 8], 1
add edx, 4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x274], 1
test eax, eax
jg 0x402f0e
mov eax, dword [ebp - 0x298]
mov dword [ebp + 0xc], edx
mov ebx, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x290]
mov dword [esp], eax
call fcn.004073c0
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.004073e0
mov eax, dword [ebp - 0x274]
test eax, eax
je 0x4032e0
mov eax, dword [ebp - 0x278]
or eax, dword [ebp - 0x27c]
je 0x403707
cmp dword [ebp - 0x280], 0xffffffff
je 0x403550
mov eax, dword [ebp - 0x280]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00401660
mov ebx, eax
test ebx, ebx
mov dword [ebp - 0x274], 0
je 0x4031fb
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._could_not_start_server__n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], ebx
mov eax, dword [ebp - 0x274]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebp - 0x278], 1
jmp 0x402f00
mov dword [ebp - 0x27c], 1
jmp 0x402f00
mov edi, 0x5184d9
mov ecx, 2
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x403210
cmp byte [eax + 2], 0
jne 0x403250
cmp dword [ebp + 8], 1
je 0x4031ec
mov eax, dword [edx + 4]
add edx, 4
sub dword [ebp + 8], 1
mov ebx, eax
lea eax, [ebp - 0x254]
mov dword [esp + 4], eax
lea ecx, [ebp - 0x24c]
mov dword [esp], ebx
mov dword [ebp - 0x284], edx
call fcn.004dd150
mov esi, dword [ebp - 0x24c]
mov edx, dword [ebp - 0x284]
mov eax, dword [esi - 0xc]
sub esp, 8
test eax, eax
je 0x403454
movsx eax, byte [esi]
mov dword [ebp - 0x284], edx
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll_isalpha]
mov edx, dword [ebp - 0x284]
test eax, eax
jne 0x403270
mov dword [esp + 8], 2
lea ecx, [ebp - 0x24c]
mov dword [esp + 4], 0
mov dword [esp], 0x51bd23
mov dword [ebp - 0x284], edx
call fcn.004b3150
mov edx, dword [ebp - 0x284]
sub esp, 0xc
cmp eax, 0xffffffff
je 0x403588
lea edi, [ebp - 0x218]
mov dword [esp], edi
mov dword [ebp - 0x284], edx
mov dword [ebp - 0x218], 0x516f3c
call fcn.00425390
mov edx, dword [ebp - 0x284]
test al, al
je 0x4033b9
mov eax, dword [ebp - 0x24c]
lea esi, [ebp - 0x248]
mov dword [esp + 0xc], 0x5c
mov dword [esp + 4], str._s_c_s
mov dword [esp], esi
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x284], edx
mov dword [esp + 8], eax
call fcn.0042a1c0
mov edx, dword [ebp - 0x284]
mov eax, dword [ebp - 0x218]
lea edi, [eax - 0xc]
cmp edi, 0x516f30
jne 0x4036cd
mov dword [esp], esi
mov ecx, 0x550020
mov dword [ebp - 0x284], edx
call fcn.004dbcb0
mov eax, dword [ebp - 0x248]
mov edx, dword [ebp - 0x284]
lea esi, [eax - 0xc]
sub esp, 4
cmp esi, 0x516f30
jne 0x40483e
mov eax, dword [ebp - 0x24c]
lea esi, [eax - 0xc]
cmp esi, 0x516f30
jne 0x404872
mov eax, dword [0x550020]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x402f00
mov dword [esp + 8], ebx
mov dword [esp + 4], str.adb:_could_not_resolve___p__s__n
jmp 0x4031dc
mov dword [esp + 8], edi
mov dword [esp + 4], str.adb:_invalid_reply_fd___s__n
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
call fcn.004022b0
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x274]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [eax], 0x2d
je 0x403411
mov edi, 0x51b238
mov ecx, 3
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x403260
mov edi, 0x51b23b
mov ecx, 3
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40336e
mov dword [ebp - 0x290], 1
jmp 0x402f00
add eax, 2
mov ebx, eax
jmp 0x403055
mov dword [ebp - 0x290], 0
jmp 0x402f00
cmp byte [esi + 1], 0x3a
jne 0x4030ad
cmp byte [esi + 2], 0x5c
jne 0x4030ad
lea eax, [ebp - 0x24c]
lea esi, [ebp - 0x248]
mov dword [esp], eax
mov ecx, esi
mov dword [ebp - 0x284], edx
call fcn.004dd1f0
mov edx, dword [ebp - 0x284]
sub esp, 4
jmp 0x403166
mov eax, dword [ebp - 0x298]
mov dword [esp], 2
mov dword [esp + 4], eax
call fcn.004073c0
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.004073e0
mov dword [ebp - 0x290], 2
lea esi, [esi]
test ebx, ebx
je 0x4031ec
mov eax, dword [ebp + 0xc]
mov edi, 0x51b338
mov ecx, 9
mov esi, dword [eax]
mov dword [ebp - 0x27c], esi
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x40371c
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b342
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
je 0x4034cc
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b38a
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x4037b0
cmp ebx, 2
je 0x403b69
mov dword [esp + 4], str.Usage:_adb_connect__host__:_port___n
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x4031f1
mov edi, 0x5184dc
mov ecx, 3
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x4034bd
mov edi, 0x51b23e
mov ecx, 2
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x403761
cmp byte [eax + 2], 0
jne 0x403a77
cmp dword [ebp + 8], 1
je 0x4031ec
mov eax, dword [edx + 4]
add edx, 4
sub dword [ebp + 8], 1
jmp 0x403a7a
call dword [sym.imp.msvcrt.dll__errno]
lea esi, [ebp - 0x248]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
mov dword [esp + 4], str.adb:_getcwd_failed:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
lea eax, [ebp - 0x250]
mov ecx, esi
mov dword [esp + 4], eax
mov dword [esp], 0x51b038
call fcn.004dd150
mov edx, dword [ebp - 0x284]
sub esp, 8
jmp 0x403151
cmp byte [eax + 1], 0x73
jne 0x403219
movzx ecx, byte [eax + 2]
movsx esi, cl
sub esi, 0x30
cmp esi, 9
ja 0x403a50
add eax, 2
mov dword [ebp - 0x298], eax
jmp 0x402f00
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str.adb:_ANDROID_BUILD_TOP_not_set__n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
lea esi, [ebp - 0x248]
lea edi, [ebp - 0x218]
mov ecx, esi
mov dword [esp + 4], edi
mov dword [esp], 0x51b038
call fcn.004dd150
mov edx, dword [ebp - 0x284]
sub esp, 8
jmp 0x403166
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_strtol
mov dword [ebp - 0x288], eax
sub eax, 1
cmp eax, 0xfffe
jbe 0x402df4
mov dword [esp + 8], esi
mov dword [esp + 4], str.adb:_Env_var_ANDROID_ADB_SERVER_PORT_must_be_a_positive_number_less_than_65536._Got___s__n
jmp 0x4031dc
mov dword [0x562088], 1
jmp 0x402f00
cmp ebx, 1
jle 0x403db7
cmp ebx, 2
jne 0x40357b
mov eax, dword [ebp + 0xc]
mov edi, 0x51b34a
mov ecx, 3
mov edx, dword [eax + 4]
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x40357b
mov eax, dword [ebp - 0x27c]
lea esi, [ebp - 0x218]
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.host:_s_s
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.0042a1c0
mov dword [esp], str.List_of_devices_attached_n
call fcn.00415a30
mov eax, esi
call fcn.004023d0
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x218]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
je 0x4031fb
jmp 0x403a22
mov eax, dword [ebp - 0x27c]
test eax, eax
je 0x402fa1
mov dword [esp + 4], str.reply_fd_for_adb_server_to_client_communication_not_specified._n
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x4031ec
mov dword [esp + 4], str.Usage:_adb_devices___l__n
jmp 0x403359
mov dword [esp], str.ANDROID_BUILD_TOP
mov dword [ebp - 0x284], edx
call fcn.00415d40
mov edx, dword [ebp - 0x284]
test eax, eax
je 0x40343c
lea edi, [ebp - 0x218]
lea esi, [ebp - 0x248]
mov ecx, edi
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [ebp - 0x284], edx
call fcn.004dd150
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x5184d0
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 3
mov dword [esp], 0x51b1bd
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x5184d0
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 6
mov dword [esp], str.target
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x5184d0
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 7
mov dword [esp], str.product
call fcn.004dbef0
mov ecx, edi
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x5184d0
call fcn.004dbef0
lea eax, [ebp - 0x24c]
mov ecx, edi
sub esp, 8
mov dword [esp], eax
call fcn.004dc000
sub esp, 4
mov dword [esp], edi
call fcn.004253e0
mov edx, dword [ebp - 0x284]
test al, al
mov eax, dword [ebp - 0x218]
je 0x403b17
mov dword [ebp - 0x248], eax
mov eax, 0x516f3c
mov dword [ebp - 0x218], 0x516f3c
lea edi, [eax - 0xc]
cmp edi, 0x516f30
je 0x403166
sub eax, 4
mov dword [ebp - 0x284], edx
call fcn.0050db62
mov edx, dword [ebp - 0x284]
test eax, eax
jg 0x403166
lea eax, [ebp - 0x250]
mov ecx, edi
mov dword [esp], eax
call fcn.004dba20
mov edx, dword [ebp - 0x284]
sub esp, 4
jmp 0x403166
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.00417680
mov ebx, eax
jmp 0x402fc5
mov ecx, dword [ebp - 0x298]
mov edx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x27c]
call fcn.00402330
test al, al
je 0x4031f1
cmp ebx, 1
je 0x4031fb
mov eax, dword [ebp + 0xc]
sub ebx, 1
mov eax, dword [eax + 4]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 0xc]
add eax, 4
mov dword [ebp + 0xc], eax
jmp 0x403318
mov edi, 0x51b241
mov ecx, 2
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x404906
cmp byte [eax + 2], 0
jne 0x403a93
cmp dword [ebp + 8], 1
je 0x4031ec
mov esi, dword [edx + 4]
add edx, 4
sub dword [ebp + 8], 1
cmp byte [esi], 0
jne 0x403a96
mov dword [esp + 4], str.adb:_port_number_must_be_a_positive_number_less_than_65536._Got_empty_string._n
jmp 0x403566
mov esi, dword [ebp - 0x27c]
mov edi, str.disconnect
mov ecx, 0xb
repe cmpsb byte [esi], byte es:[edi]
je 0x403ae0
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b410
mov ecx, 4
repe cmpsb byte [esi], byte es:[edi]
je 0x403fae
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b414
mov ecx, 6
repe cmpsb byte [esi], byte es:[edi]
je 0x403b83
mov esi, dword [ebp - 0x27c]
mov edi, str.hell
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x403b83
mov esi, dword [ebp - 0x27c]
mov edi, str.exec_in
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x40384f
mov esi, dword [ebp - 0x27c]
mov edi, str.exec_out
mov ecx, 9
repe cmpsb byte [esi], byte es:[edi]
jne 0x4043b8
lea eax, [ebp - 0x250]
lea edx, [ebp - 0x218]
mov ecx, eax
mov dword [esp + 4], edx
mov edi, eax
mov dword [esp], str.exec:
mov dword [ebp - 0x278], edx
mov dword [ebp - 0x284], eax
call fcn.004dd150
mov eax, dword [ebp + 0xc]
mov esi, dword [eax + 4]
sub esp, 8
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov ecx, edi
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.004dbef0
sub esp, 8
cmp ebx, 2
jle 0x4039a3
lea eax, [ebp - 0x24c]
sub ebx, 2
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x248]
xor esi, esi
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], eax
lea edi, [ebp - 0x254]
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + esi*4 + 8]
mov dword [esp], eax
call fcn.004dd150
mov eax, dword [ebp - 0x288]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00425420
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 8], 1
mov dword [esp + 4], 0x51b06e
mov dword [esp], 0
call fcn.004dc5a0
mov ecx, dword [ebp - 0x284]
mov edx, dword [eax]
sub esp, 0xc
mov dword [ebp - 0x218], edx
mov dword [eax], 0x516f3c
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dc000
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
sub esp, 4
cmp ecx, 0x516f30
jne 0x404a3a
mov eax, dword [ebp - 0x248]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x4049a0
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x40496e
add esi, 1
cmp esi, ebx
jne 0x4038d5
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x218], 0x516f3c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.00407e40
test eax, eax
mov ebx, eax
js 0x404a09
mov edi, dword [ebp - 0x274]
test edi, edi
jne 0x4049fa
mov edx, eax
xor eax, eax
call fcn.0050d640
mov dword [esp], ebx
call fcn.0040e5b0
mov dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x218]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
jne 0x4049d2
mov eax, dword [ebp - 0x250]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
je 0x4031fb
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x4031fb
lea eax, [ebp - 0x248]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x4031fb
cmp dword [ebp + 8], 1
je 0x4031ec
test cl, cl
jne 0x4031ec
mov eax, dword [edx + 4]
add edx, 4
sub dword [ebp + 8], 1
mov dword [ebp - 0x298], eax
jmp 0x402f00
add eax, 2
mov dword [esp], eax
mov dword [ebp - 0x284], edx
call fcn.004073f0
mov edx, dword [ebp - 0x284]
jmp 0x402f00
lea esi, [eax + 2]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
mov dword [ebp - 0x284], edx
call sub.msvcrt.dll_strtol
mov edx, dword [ebp - 0x284]
mov dword [ebp - 0x288], eax
sub eax, 1
cmp eax, 0xfffe
jbe 0x402f00
mov dword [esp + 8], esi
mov dword [esp + 4], str.adb:_port_number_must_be_a_positive_number_less_than_65536._Got___s__n
jmp 0x4031dc
cmp ebx, 2
jg 0x403fa1
mov eax, 0x51b038
jne 0x403af6
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
lea ebx, [ebp - 0x218]
mov dword [esp + 8], eax
mov dword [esp + 4], str.host:disconnect:_s
mov dword [esp], ebx
call fcn.0042a1c0
mov eax, ebx
jmp 0x40352a
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x24c]
mov dword [esp + 4], str.adb:_Couldnt_find_a_product_dir_based_on__p__s____s__doesnt_exist_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
lea eax, [ebp - 0x250]
mov ecx, esi
mov dword [esp + 4], eax
mov dword [esp], 0x51b038
call fcn.004dd150
mov eax, dword [ebp - 0x218]
mov edx, dword [ebp - 0x284]
sub esp, 8
jmp 0x4036be
mov eax, dword [ebp + 0xc]
lea ebx, [ebp - 0x218]
mov eax, dword [eax + 4]
mov dword [esp + 4], str.host:connect:_s
mov dword [esp + 8], eax
jmp 0x403b08
mov eax, dword [ebp - 0x27c]
cmp byte [eax], 0x68
sete byte [ebp - 0x280]
je 0x403fd2
lea eax, [ebp - 0x248]
lea edx, [ebp - 0x250]
mov ecx, eax
mov dword [esp + 4], edx
mov edi, eax
mov dword [esp], str.shell_2
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], edx
call fcn.004dd150
mov edx, dword [ebp - 0x298]
lea eax, [ebp - 0x218]
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x278], eax
sub esp, 8
mov dword [esp], edx
mov edx, edi
call fcn.00402c30
mov eax, dword [ebp - 0x218]
lea edi, [eax - 0xc]
mov esi, dword [eax - 0xc]
cmp edi, 0x516f30
jne 0x40726f
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x248]
lea edi, [eax - 0xc]
cmp edi, 0x516f30
jne 0x407247
test esi, esi
jne 0x403dc1
test byte [0x561ee0], 1
mov byte [ebp - 0x274], 0
jne 0x404099
cmp ebx, 1
jle 0x403e7e
mov eax, dword [ebp - 0x278]
lea esi, [ebx - 1]
mov ecx, dword [ebp - 0x284]
mov dword [esp], str.shell:
mov dword [esp + 4], eax
call fcn.004dd150
mov eax, dword [ebp + 0xc]
lea edi, [eax + 4]
sub esp, 8
sub esi, 1
cmp esi, 0xffffffff
je 0x403cc4
add edi, 4
mov ebx, dword [edi - 4]
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov dword [esp], ebx
mov ebx, dword [ebp - 0x284]
mov ecx, ebx
mov dword [esp + 4], eax
call fcn.004dbef0
mov eax, dword [edi]
sub esp, 8
test eax, eax
je 0x403c70
mov dword [esp + 4], 1
mov ecx, ebx
sub esi, 1
mov dword [esp], 0x51b06e
call fcn.004dbef0
sub esp, 8
cmp esi, 0xffffffff
jne 0x403c78
test byte [0x561ee0], 1
jne 0x4041e9
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x24c], 0x516f3c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.00407e40
test eax, eax
mov edi, eax
js 0x4072c5
test byte [0x561ee0], 1
jne 0x404143
movzx edx, byte [ebp - 0x274]
mov eax, edi
call fcn.004024a0
test byte [0x561ee0], 1
mov dword [ebp - 0x274], eax
jne 0x404290
mov dword [esp], edi
call fcn.0040e5b0
cmp byte [ebp - 0x280], 0
je 0x403d58
mov dword [esp], str.e_0m
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
test byte [0x561ee0], 1
jne 0x403ff3
mov eax, dword [ebp - 0x24c]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
jne 0x404945
mov eax, dword [ebp - 0x250]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
je 0x4031fb
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x4031fb
mov eax, dword [ebp - 0x278]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x4031fb
mov edx, 0x51b038
jmp 0x4034f8
test byte [0x561ee0], 1
mov byte [ebp - 0x274], 1
je 0x403c3f
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov edi, dword [eax]
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.using_shell_protocol
mov dword [esp], eax
call fcn.0042a1c0
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0x4eb
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, dword [ebp - 0x27c]
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, dword [ebp - 0x27c]
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x407328
call esi
mov byte [ebp - 0x274], 1
mov dword [eax], edi
jmp 0x403c3f
test byte [0x561ee0], 1
jne 0x4046a4
mov eax, dword [ebp - 0x288]
mov edi, dword [ebp - 0x278]
mov dword [esp], str.shell:
mov dword [ebp - 0x248], 0x516f3c
mov dword [esp + 4], eax
mov ecx, edi
call fcn.004dd150
mov eax, dword [ebp - 0x27c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00407e40
mov esi, eax
mov eax, dword [ebp - 0x218]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
jne 0x40473c
test esi, esi
js 0x40480d
mov dword [esp], 0xc
call fcn.0050bf60
mov ebx, eax
mov dword [eax + 8], 0
mov dword [eax], 0
mov dword [eax + 4], esi
xor eax, eax
cmp byte [ebp - 0x274], 0
jne 0x404670
mov dword [esp], eax
call fcn.00413420
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], 0x402870
call dword [sym.imp.msvcrt.dll__beginthread]
cmp eax, 0xffffffff
je 0x404332
movzx edx, byte [ebp - 0x274]
mov eax, esi
call fcn.004024a0
mov esi, eax
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.00413570
mov dword [ebp - 0x274], esi
mov eax, dword [ebp - 0x248]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
jne 0x4048ac
cmp byte [ebp - 0x280], 0
je 0x4031fb
mov dword [esp], str.e_0m
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
jmp 0x4031fb
mov dword [esp + 4], str.Usage:_adb_disconnect___host__:_port____n
jmp 0x403359
mov eax, dword [ebp - 0x298]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
call fcn.00401c90
mov dword [ebp - 0x274], eax
jmp 0x4031fb
mov dword [esp], str.e_41_33m
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
jmp 0x403b99
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov edi, dword [eax]
mov eax, dword [ebp - 0x274]
mov dword [esp + 4], str.non_interactive_shell_loop._return_r_d
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.0042a1c0
mov ebx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov ecx, ebx
mov dword [esp + 4], 0x516
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, ebx
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, ebx
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea ebx, [eax - 0xc]
cmp ebx, 0x516f30
jne 0x40729d
call esi
mov dword [eax], edi
jmp 0x403d65
mov esi, dword [sym.imp.msvcrt.dll__errno]
nop
call esi
mov edi, dword [eax]
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.shell_protocol_not_supported__using_raw_data_transfer
mov dword [esp], eax
call fcn.0042a1c0
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0x4e8
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, dword [ebp - 0x27c]
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, dword [ebp - 0x27c]
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x4072f6
call esi
mov byte [ebp - 0x274], 0
mov dword [eax], edi
jmp 0x403c3f
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov ebx, dword [eax]
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], edi
mov dword [esp + 4], str.about_to_read_and_dump_fd_d_
mov dword [esp], eax
call fcn.0042a1c0
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0x509
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, dword [ebp - 0x27c]
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, dword [ebp - 0x27c]
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x40735a
call esi
mov dword [eax], ebx
jmp 0x403d0a
mov esi, dword [sym.imp.msvcrt.dll__errno]
nop
call esi
mov ebx, dword [eax]
mov eax, dword [ebp - 0x250]
mov dword [esp + 4], str.non_interactive_shell_loop._cmd_s
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.0042a1c0
mov edi, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov ecx, edi
mov dword [esp + 4], 0x504
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, edi
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, edi
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea edi, [eax - 0xc]
cmp edi, 0x516f30
jne 0x4050e1
call esi
mov dword [eax], ebx
jmp 0x403cd1
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov ebx, dword [eax]
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.read_and_dump___done.
mov dword [esp], eax
call fcn.0042a1c0
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0x50b
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, dword [ebp - 0x27c]
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, dword [ebp - 0x27c]
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
cmp ecx, 0x516f30
jne 0x4048d4
call esi
mov dword [eax], ebx
jmp 0x403d2b
call dword [sym.imp.msvcrt.dll__errno]
mov edi, dword [ebp - 0x278]
mov ecx, edi
mov eax, dword [eax]
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1fd
mov dword [esp + 0x10], eax
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, edi
sub esp, 0x14
call fcn.0042a6d0
mov dword [esp + 8], 0x20
mov dword [esp + 4], str.error_starting_stdin_read_thread
mov dword [esp], eax
call fcn.00505c10
mov ecx, edi
call fcn.0042a790
mov ecx, dword [ebx + 8]
test ecx, ecx
je 0x40439f
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebx + 8], 0
mov esi, 1
mov dword [esp], ebx
call fcn.0050beb0
jmp 0x403f4e
mov esi, dword [ebp - 0x27c]
mov edi, str.kill_server
mov ecx, 0xc
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x405061
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b585
mov ecx, 9
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
jne 0x404dcb
cmp ebx, 2
jne 0x4031ec
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x258], 0x10000
mov eax, dword [eax + 4]
mov dword [esp], str.loading:__s
mov dword [esp + 4], eax
mov edi, eax
mov dword [ebp - 0x27c], eax
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
lea eax, [ebp - 0x25c]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0040ff20
test eax, eax
mov dword [ebp - 0x280], eax
je 0x404d8e
mov eax, dword [ebp - 0x25c]
lea esi, [ebp - 0x254]
mov dword [esp + 0xc], 0x10000
mov dword [esp + 4], str.sideload_host:_d:_d
mov dword [esp], esi
mov dword [esp + 8], eax
call fcn.0042a1c0
lea eax, [ebp - 0x250]
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [ebp - 0x250], 0x516f3c
mov dword [ebp - 0x284], eax
call fcn.00407e40
test eax, eax
mov ebx, eax
js 0x404ae7
lea eax, [ebp - 0x258]
mov dword [esp + 0x10], 4
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1001
mov dword [esp + 4], 0xffff
mov dword [esp], ebx
call fcn.00412e30
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
jmp 0x40461d
mov edi, dword [ebp - 0x278]
mov esi, str.DONEDONE
mov ecx, 9
mov byte [ebp - 0x210], 0
repe cmpsb byte [esi], byte es:[edi]
seta al
setb dl
sub eax, edx
movsx eax, al
test eax, eax
je 0x404a87
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_strtol
mov ecx, dword [ebp - 0x25c]
mov edx, eax
shl edx, 0x10
cmp edx, ecx
jae 0x404a66
mov eax, dword [ebp - 0x280]
lea edi, [edx + 0x10000]
mov esi, ecx
sub esi, edx
mov dword [esp], ebx
add eax, edx
cmp ecx, edi
mov edx, 0x10000
cmovae esi, edx
mov dword [esp + 8], esi
mov dword [esp + 4], eax
call fcn.00424ea0
test al, al
je 0x404786
mov ecx, dword [ebp - 0x25c]
mov eax, 0x2f
xor edi, edi
add dword [ebp - 0x290], esi
mov esi, 1
mul dword [ebp - 0x290]
test ecx, ecx
je 0x4045cf
mov esi, ecx
xor edi, edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0049caa0
cmp eax, dword [ebp - 0x274]
mov esi, eax
je 0x404617
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], str._rserving:__s____d___
mov dword [esp + 4], eax
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov dword [ebp - 0x274], esi
mov eax, dword [ebp - 0x278]
mov dword [esp + 8], 8
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.004249e0
test al, al
jne 0x404518
call dword [sym.imp.msvcrt.dll__errno]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
mov dword [esp + 4], str._failed_to_read_command:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x4047ba
mov dword [esp], 0x40014
call fcn.0050bf60
mov edi, eax
mov eax, dword [ebx + 4]
mov ecx, edi
mov dword [esp], eax
call fcn.0040bc30
mov ecx, dword [ebx + 8]
mov dword [ebx + 8], edi
sub esp, 4
test ecx, ecx
je 0x40469d
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebx]
jmp 0x403f14
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov ebx, dword [eax]
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.starting_interactive_shell
mov dword [esp], eax
call fcn.0042a1c0
mov edi, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov ecx, edi
mov dword [esp + 4], 0x4f1
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, edi
sub esp, 0x14
call fcn.0042a6d0
mov edx, dword [ebp - 0x218]
mov ecx, dword [edx - 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.00505c10
mov ecx, edi
call fcn.0042a790
mov eax, dword [ebp - 0x218]
lea edi, [eax - 0xc]
cmp edi, 0x516f30
jne 0x404765
call esi
mov dword [eax], ebx
jmp 0x403e8b
sub eax, 4
nop
call fcn.0050db62
test eax, eax
jg 0x403edf
mov eax, dword [ebp - 0x284]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403edf
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x404733
mov eax, dword [ebp - 0x27c]
mov ecx, edi
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x404733
mov eax, dword [ebp - 0x284]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00407400
mov eax, dword [ebp - 0x250]
mov dword [esp + 4], str._failed_to_write_data__s__n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 1
mov dword [esp], ebx
call fcn.0040e5b0
mov eax, dword [ebp - 0x280]
mov dword [esp], eax
call fcn.004ae080
mov eax, dword [ebp - 0x250]
mov edi, dword [ebp - 0x278]
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x254]
sub esp, 4
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
sub esp, 4
jmp 0x4031fb
mov eax, dword [ebp - 0x248]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 1
jmp 0x403f5e
sub eax, 4
call fcn.0050db62
mov edx, dword [ebp - 0x284]
test eax, eax
jg 0x403197
lea edi, [ebp - 0x218]
mov ecx, esi
mov dword [esp], edi
call fcn.004dba20
mov edx, dword [ebp - 0x284]
sub esp, 4
jmp 0x403197
sub eax, 4
mov dword [ebp - 0x284], edx
call fcn.0050db62
mov edx, dword [ebp - 0x284]
test eax, eax
jg 0x4031ac
lea edi, [ebp - 0x218]
mov ecx, esi
mov dword [esp], edi
call fcn.004dba20
mov edx, dword [ebp - 0x284]
sub esp, 4
jmp 0x4031ac
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x403f73
mov eax, dword [ebp - 0x278]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403f73
sub eax, 4
mov dword [ebp - 0x284], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x284]
test eax, eax
jg 0x404329
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x404329
mov eax, dword [ebp - 0x298]
mov dword [ebp + 0xc], edx
mov ebx, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x290]
mov dword [esp], eax
call fcn.004073c0
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.004073e0
mov edx, dword [ebp - 0x274]
test edx, edx
jne 0x402f82
jmp 0x4032e8
sub eax, 4
call fcn.0050db62
test eax, eax
nop
jg 0x403d7a
mov eax, dword [ebp - 0x278]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403d7a
sub eax, 4
mov dword [ebp - 0x290], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x290]
test eax, eax
jg 0x403998
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403998
sub eax, 4
mov dword [ebp - 0x290], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x290]
test eax, eax
jg 0x403983
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403983
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x403a0d
lea eax, [ebp - 0x248]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403a0d
mov edx, 1
call fcn.0050d640
jmp 0x4039e6
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4039f8
sub eax, 4
mov dword [ebp - 0x290], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x290]
test eax, eax
jg 0x40396e
mov dword [esp], edi
call fcn.004dba20
sub esp, 4
jmp 0x40396e
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._attempt_to_read_block__d_past_end_n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x4047ba
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
movd xmm1, dword [ebp - 0x290]
movq qword [ebp - 0x270], xmm1
lea edx, [eax + 0xa]
mov eax, dword [ebp - 0x25c]
fild qword [ebp - 0x270]
test eax, eax
jne 0x404cbb
fld1
fdivp st(1)
mov dword [esp + 0x10], 0x51b038
mov dword [esp + 0xc], edx
mov dword [esp], str._rTotal_xfer:__.2fx_s_n
fstp qword [esp + 4]
call fcn.00415a30
jmp 0x4047c4
mov dword [esp], 0x51b59c
lea ebx, [ebp - 0x248]
call fcn.00415a30
mov esi, dword [ebp - 0x25c]
lea eax, [ebp - 0x218]
mov dword [esp], eax
mov edi, eax
mov dword [esp + 8], 0x51b585
mov dword [esp + 4], 0x51b5c8
mov dword [esp + 0xc], esi
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x24c], 0x516f3c
call fcn.0042a1c0
lea eax, [ebp - 0x24c]
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [ebp - 0x288], eax
call fcn.00407e40
mov dword [esp], ebx
mov edi, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
call fcn.004dba40
sub esp, 4
test edi, edi
js 0x404d49
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], 4
mov dword [esp + 8], 0x1001
mov dword [esp + 4], 0xffff
mov dword [esp], edi
mov dword [ebp - 0x248], 0x10000
call fcn.00412e30
test esi, esi
mov ebx, dword [ebp - 0x280]
mov dword [ebp - 0x298], esi
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x248], eax
je 0x404c6e
mov dword [ebp - 0x284], edi
mov edi, ebx
mov eax, dword [ebp - 0x284]
cmp esi, 0x10000
mov ebx, 0x10000
cmovbe ebx, esi
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00424ea0
test al, al
je 0x404cdc
sub esi, ebx
add edi, ebx
mov eax, esi
mov ebx, 0x64
mul ebx
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x28c], edx
mov edx, dword [ebp - 0x294]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x290]
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x28c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0049caa0
mov dword [esp], str.sending:__s__4d_______r
sub ebx, eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
call fcn.00415a30
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call sub.msvcrt.dll_fflush
test esi, esi
jne 0x404bc3
mov edi, dword [ebp - 0x284]
mov dword [esp], 0x51b59c
call fcn.00415a30
mov eax, dword [ebp - 0x288]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00407400
test al, al
je 0x404d7a
mov dword [esp], edi
call fcn.0040e5b0
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
jmp 0x4047cc
mov dword [ebp - 0x27c], eax
movd xmm0, dword [ebp - 0x27c]
movq qword [ebp - 0x270], xmm0
fild qword [ebp - 0x270]
jmp 0x404ac4
mov edi, dword [ebp - 0x284]
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x218], 0x516f3c
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00407400
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], str._failed_to_write_data__s__n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25d]
mov dword [esp], eax
call fcn.004dba40
mov dword [ebp - 0x274], 1
sub esp, 4
jmp 0x404c9c
mov eax, dword [ebp - 0x24c]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 1
jmp 0x404c9c
mov eax, dword [ebp - 0x24c]
mov dword [esp + 4], str._error_response__s__n
mov dword [esp + 8], eax
jmp 0x404d5b
mov dword [esp], 0x51b59c
call fcn.00415a30
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], str._cannot_read__s__n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 1
jmp 0x4031fb
mov esi, dword [ebp - 0x27c]
mov edi, str.tcpip
mov ecx, 6
repe cmpsb byte [esi], byte es:[edi]
jne 0x404de8
cmp ebx, 1
jg 0x404ec2
mov esi, dword [ebp - 0x27c]
mov edi, str.remount
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x404f5b
mov eax, str.reboot_bootloader
mov esi, dword [ebp - 0x27c]
mov ecx, 0x12
mov edi, eax
mov dword [ebp - 0x248], 0x516f3c
repe cmpsb byte [esi], byte es:[edi]
je 0x404f2d
lea eax, [ebp - 0x218]
cmp ebx, 1
mov edi, eax
mov dword [ebp - 0x278], eax
jle 0x404f0e
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [esp + 4], 0x51832b
mov dword [esp], edi
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], eax
call fcn.0042a1c0
lea eax, [ebp - 0x248]
mov ecx, eax
mov dword [esp], edi
mov dword [ebp - 0x27c], eax
call fcn.004dbcb0
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov eax, dword [ebp - 0x27c]
call fcn.0050db7f
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x248]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
jmp 0x4031fb
mov eax, dword [ebp + 0xc]
lea ebx, [ebp - 0x218]
mov eax, dword [eax + 4]
mov dword [esp + 4], str.tcpip:_s
mov dword [esp], ebx
mov dword [esp + 8], eax
call fcn.0042a1c0
mov eax, ebx
call fcn.0050db7f
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x248]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
jmp 0x4031fb
mov edx, dword [ebp - 0x27c]
mov dword [esp + 4], 0x51b70f
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.0042a1c0
jmp 0x404e5f
lea eax, [ebp - 0x248]
mov dword [esp], str.reboot:bootloader
mov ecx, eax
mov dword [ebp - 0x27c], eax
call fcn.004dc270
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
sub esp, 4
jmp 0x404e92
mov esi, dword [ebp - 0x27c]
mov edi, str.reboot
mov ecx, 7
mov eax, str.reboot_bootloader
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov ecx, 0x12
mov edi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b6d0
mov ecx, 4
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, str.root
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, str.unroot
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, str.disable_verity
mov ecx, 0xf
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, str.enable_verity
mov ecx, 0xe
repe cmpsb byte [esi], byte es:[edi]
je 0x404e05
mov esi, dword [ebp - 0x27c]
mov edi, str.bugreport
mov ecx, 0xa
repe cmpsb byte [esi], byte es:[edi]
jne 0x405109
cmp ebx, 1
jne 0x4031ec
lea eax, [ebp - 0x24c]
lea ecx, [ebp - 0x218]
mov dword [esp + 4], eax
mov dword [esp], str.shell:bugreport
call fcn.004dd150
mov edx, dword [ebp - 0x298]
lea ecx, [ebp - 0x218]
mov eax, dword [ebp - 0x290]
sub esp, 8
call fcn.0050dbf2
jmp 0x404ee9
lea eax, [ebp - 0x218]
mov edi, eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x250]
mov ecx, edi
mov dword [esp + 4], eax
mov dword [esp], 0x51b563
mov dword [ebp - 0x248], 0x516f3c
call fcn.004dd150
lea eax, [ebp - 0x248]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00407550
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
cmp ebx, 0xfffffffe
je 0x405258
cmp ebx, 0xffffffff
je 0x405227
mov dword [esp], ebx
call fcn.0040e5b0
jmp 0x404ea3
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x404287
mov eax, dword [ebp - 0x27c]
mov ecx, edi
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x404287
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b72d
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
mov edi, 0x51b735
mov ecx, 8
mov esi, dword [ebp - 0x27c]
seta dl
setb al
cmp dl, al
jne 0x4053b5
repe cmpsb byte [esi], byte es:[edi]
seta al
setb dl
sub eax, edx
movsx eax, al
sub ebx, 1
test ebx, ebx
jle 0x4053a1
test eax, eax
mov dword [ebp - 0x258], 0x516f3c
je 0x40540a
mov edx, dword [ebp - 0x298]
test edx, edx
je 0x405358
lea eax, [ebp - 0x218]
mov dword [esp + 8], edx
mov edi, eax
mov dword [esp], eax
mov dword [esp + 4], str.host_serial:_s
mov dword [ebp - 0x278], eax
call fcn.0042a1c0
lea eax, [ebp - 0x258]
mov ecx, eax
mov dword [esp], edi
mov dword [ebp - 0x280], eax
call fcn.004dbcb0
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x248]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov eax, dword [ebp + 0xc]
mov edi, str.__list
mov ecx, 7
mov dword [ebp - 0x254], 0x516f3c
mov edx, dword [eax + 4]
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4052cb
cmp ebx, 1
je 0x405275
call fcn.004022b0
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x254]
mov edi, dword [ebp - 0x278]
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x258]
sub esp, 4
jmp 0x4047fa
mov eax, dword [ebp - 0x248]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 1
jmp 0x404ea3
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str._server_not_running__n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x404ea3
mov edi, dword [ebp - 0x278]
mov eax, dword [ebp - 0x280]
mov ecx, edi
mov dword [esp], eax
call fcn.004dd1f0
mov ecx, edi
sub esp, 4
mov dword [esp], str.:list_forward
call fcn.004dbeb0
mov eax, edi
sub esp, 4
call fcn.004023d0
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x248]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
jmp 0x405202
mov edi, str.__remove_all
mov ecx, 0xd
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x405440
cmp ebx, 1
jne 0x4051f3
mov edi, dword [ebp - 0x278]
lea esi, [ebp - 0x254]
mov eax, dword [ebp - 0x280]
mov ecx, edi
mov dword [esp], eax
call fcn.004dd1f0
mov ecx, edi
sub esp, 4
mov dword [esp], str.:killforward_all
call fcn.004dbeb0
mov ecx, esi
sub esp, 4
mov dword [esp], edi
call fcn.004dbcb0
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x248]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov dword [esp], esi
call fcn.004084c0
xor eax, 1
movzx eax, al
mov dword [ebp - 0x274], eax
jmp 0x405202
mov esi, dword [ebp - 0x290]
lea eax, [ebp - 0x258]
test esi, esi
je 0x40542e
cmp dword [ebp - 0x290], 1
mov dword [ebp - 0x280], eax
je 0x405422
mov dword [esp], 0x518309
mov ecx, eax
call fcn.004dc270
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
sub esp, 4
jmp 0x4051c6
call fcn.004022b0
mov dword [ebp - 0x274], 1
jmp 0x4031fb
repe cmpsb byte [esi], byte es:[edi]
seta al
setb dl
sub eax, edx
movsx eax, al
test eax, eax
je 0x405146
mov esi, dword [ebp - 0x27c]
mov edi, 0x51b7c1
mov ecx, 3
repe cmpsb byte [esi], byte es:[edi]
jne 0x4054fa
cmp ebx, 2
jne 0x4031ec
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.0040aad0
xor eax, 1
movzx eax, al
mov dword [ebp - 0x274], eax
jmp 0x4031fb
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], eax
mov dword [esp], 0x51b735
jmp 0x405386
mov dword [esp], str.host_local
jmp 0x405386
mov dword [ebp - 0x280], eax
mov dword [esp], str.host_usb
jmp 0x405386
mov edi, str.__remove
mov ecx, 9
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x405629
cmp ebx, 2
jne 0x4051f3
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x248]
lea esi, [ebp - 0x254]
mov ebx, dword [eax + 8]
mov eax, dword [ebp - 0x280]
mov dword [esp], eax
call fcn.004dd1f0
lea ecx, [ebp - 0x248]
sub esp, 4
mov dword [esp], str.:killforward:
call fcn.004dbeb0
lea ecx, [ebp - 0x248]
sub esp, 4
mov dword [esp], ebx
call fcn.004dbeb0
mov edi, dword [ebp - 0x278]
mov ecx, esi
mov edx, dword [eax]
sub esp, 4
mov dword [ebp - 0x218], edx
mov dword [eax], 0x516f3c
mov dword [esp], edi
call fcn.004dbcb0
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
mov eax, dword [ebp - 0x248]
sub esp, 4
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
sub esp, 4
jmp 0x40533f
mov esi, dword [ebp - 0x27c]
mov edi, str.push
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x405c3a
mov esi, dword [ebp - 0x27c]
mov edi, str.pull
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x405906
mov esi, dword [ebp - 0x27c]
mov edi, str.install
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
jne 0x4059a2
cmp ebx, 1
jle 0x4031ec
mov edi, dword [ebp + 0xc]
lea edx, [ebx*4]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x274], str._data_local_tmp__s
mov dword [ebp - 0x27c], edx
add edi, edx
add eax, 4
mov dword [ebp - 0x278], edi
mov esi, dword [eax]
mov ecx, 3
mov edi, 0x51b7d8
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov edx, esi
cmp dl, cl
mov edx, str._sdcard_tmp__s
cmovne edx, dword [ebp - 0x274]
add eax, 4
cmp eax, dword [ebp - 0x278]
mov dword [ebp - 0x274], edx
jne 0x405573
lea eax, [ebx - 1]
mov edx, dword [ebp - 0x27c]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp + 0xc]
lea edi, [eax + edx - 4]
mov esi, dword [edi]
mov dword [esp + 4], 0x2e
mov dword [esp], esi
call sub.msvcrt.dll_strrchr
test eax, eax
je 0x4055ef
mov dword [esp + 4], str..apk
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
je 0x405742
sub dword [ebp - 0x278], 1
sub edi, 4
cmp dword [ebp - 0x278], 0xffffffff
jne 0x4055c0
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str.Missing_APK_file_n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4031fb
mov edi, str.__no_rebind
mov ecx, 0xc
mov esi, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x405a80
cmp ebx, 3
jne 0x4051f3
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x250]
mov esi, dword [eax + 8]
mov ebx, dword [eax + 0xc]
mov eax, dword [ebp - 0x280]
mov dword [esp], eax
call fcn.004dd1f0
lea ecx, [ebp - 0x250]
sub esp, 4
mov dword [esp], str.:forward:norebind:
call fcn.004dbeb0
sub esp, 4
mov dword [esp], esi
lea ecx, [ebp - 0x250]
call fcn.004dbeb0
lea ecx, [ebp - 0x24c]
lea esi, [ebp - 0x254]
mov edx, dword [eax]
sub esp, 4
mov dword [ebp - 0x24c], edx
mov dword [eax], 0x516f3c
mov dword [esp], 0x51b7b5
call fcn.004dbeb0
lea ecx, [ebp - 0x248]
mov edx, dword [eax]
sub esp, 4
mov dword [ebp - 0x248], edx
mov dword [eax], 0x516f3c
mov dword [esp], ebx
call fcn.004dbeb0
mov ecx, esi
mov edx, dword [eax]
sub esp, 4
mov dword [ebp - 0x218], edx
mov dword [eax], 0x516f3c
mov edi, dword [ebp - 0x278]
mov dword [esp], edi
call fcn.004dbcb0
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25c]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
mov eax, dword [ebp - 0x248]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x250]
sub esp, 4
jmp 0x4054e7
lea eax, [ebp - 0x218]
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00415510
cmp eax, 0xffffffff
je 0x40576a
movzx eax, word [ebp - 0x212]
and ax, 0xf000
cmp ax, 0x8000
je 0x405795
mov dword [esp + 8], esi
mov dword [esp + 4], str.Invalid_APK_file:__s_n
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4031fb
mov eax, dword [edi]
lea edx, [ebp - 0x24c]
lea esi, [ebp - 0x254]
mov ecx, edx
mov dword [esp + 4], esi
mov dword [ebp - 0x288], edx
mov dword [esp], eax
mov dword [ebp - 0x278], eax
call fcn.004dd150
mov edx, dword [ebp - 0x288]
lea eax, [ebp - 0x248]
mov dword [ebp - 0x27c], eax
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00425520
lea edx, [ebp - 0x250]
mov ecx, edx
mov dword [ebp - 0x284], edx
mov edx, dword [ebp - 0x248]
mov dword [esp], ecx
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x274]
mov dword [esp + 4], edx
call fcn.0042a1c0
mov edx, dword [ebp - 0x248]
lea ecx, [edx - 0xc]
lea edx, [ebp - 0x258]
mov dword [esp], edx
call fcn.004dba40
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x27c]
lea ecx, [edx - 0xc]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x278]
sub esp, 4
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0040ac10
test al, al
jne 0x405ce2
mov edi, 0xffffffff
mov ebx, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x284]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00425420
mov ecx, ebx
mov dword [esp + 4], str.shell:rm__f
mov dword [esp], 0
call fcn.004dc560
mov edx, dword [eax]
sub esp, 8
mov dword [ebp - 0x24c], edx
mov dword [eax], 0x516f3c
mov eax, dword [ebp - 0x248]
mov dword [esp], esi
lea ecx, [eax - 0xc]
call fcn.004dba40
mov edx, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x288]
mov eax, dword [ebp - 0x290]
sub esp, 4
call fcn.0050dbf2
mov eax, dword [ebp - 0x24c]
mov dword [esp], ebx
lea ecx, [eax - 0xc]
call fcn.004dba40
mov eax, dword [ebp - 0x250]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], ebx
call fcn.004dba40
mov dword [ebp - 0x274], edi
sub esp, 4
jmp 0x4031fb
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x24c]
mov dword [esp + 8], ecx
lea ecx, [ebp - 0x250]
mov dword [esp + 4], ecx
lea ecx, [ebp - 0x218]
mov dword [esp], ecx
lea edx, [ebx - 1]
add eax, 4
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x218], 0x51b7ce
call fcn.0050dab0
mov eax, dword [ebp - 0x248]
test eax, eax
je 0x4053a1
mov edx, dword [ebp - 0x24c]
mov dword [esp], eax
mov dword [esp + 0xc], edx
movzx edx, byte [ebp - 0x250]
mov dword [esp + 8], edx
mov edx, dword [ebp - 0x218]
mov dword [esp + 4], edx
call fcn.0040b0d0
xor eax, 1
movzx eax, al
mov dword [ebp - 0x274], eax
jmp 0x4031fb
mov esi, dword [ebp - 0x27c]
mov edi, str.install_multiple
mov ecx, 0x11
repe cmpsb byte [esi], byte es:[edi]
jne 0x405d0a
cmp ebx, 1
jle 0x4031ec
lea eax, [ebx - 1]
xor esi, esi
mov dword [ebp - 0x278], eax
xor edi, edi
mov dword [ebp - 0x274], 0xffffffff
mov edx, dword [ebp - 0x278]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + edx*4]
mov dword [esp + 4], 0x2e
mov dword [esp], eax
mov dword [ebp - 0x27c], eax
call sub.msvcrt.dll_strrchr
test eax, eax
je 0x405adb
mov dword [esp + 4], str..apk
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
jne 0x405adb
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x248]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00415510
cmp eax, 0xffffffff
je 0x405c2b
movzx eax, word [ebp - 0x242]
and ax, 0xf000
cmp ax, 0x8000
jne 0x405c2b
mov edx, dword [ebp - 0x278]
add esi, dword [ebp - 0x230]
adc edi, dword [ebp - 0x22c]
mov eax, edx
sub eax, 1
cmp eax, 0xffffffff
je 0x405acf
mov dword [ebp - 0x274], edx
mov dword [ebp - 0x278], eax
jmp 0x4059da
cmp ebx, 2
jne 0x4051f3
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x274], edx
mov ebx, dword [eax + 8]
mov eax, dword [ebp - 0x280]
mov dword [esp], eax
call fcn.004dd1f0
lea ecx, [ebp - 0x250]
sub esp, 4
mov dword [esp], str.:forward:
call fcn.004dbeb0
mov edx, dword [ebp - 0x274]
sub esp, 4
mov dword [esp], edx
jmp 0x40567e
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffff
je 0x4066ac
lea eax, [ebp - 0x25c]
mov dword [esp + 8], esi
mov dword [esp + 0xc], edi
mov dword [esp + 4], str.exec:pm_install_create__S__llu
mov dword [esp], eax
mov dword [ebp - 0x29c], eax
call fcn.0042a1c0
cmp dword [ebp - 0x274], 1
jle 0x406385
lea eax, [ebp - 0x24c]
mov edi, 1
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x250]
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x258]
lea esi, [ebp - 0x254]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x278]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + edi*4]
add edi, 1
mov dword [esp], eax
call fcn.004dd150
mov eax, dword [ebp - 0x278]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.00425420
mov ecx, dword [ebp - 0x288]
mov dword [esp + 4], 0x51b06e
mov dword [esp], 0
call fcn.004dc560
mov ecx, dword [ebp - 0x29c]
mov edx, dword [eax]
sub esp, 8
mov dword [ebp - 0x250], edx
mov edx, dword [ebp - 0x284]
mov dword [eax], 0x516f3c
mov dword [esp], edx
call fcn.004dc000
mov ecx, dword [ebp - 0x250]
sub ecx, 0xc
sub esp, 4
mov dword [esp], esi
call fcn.004dba40
mov edx, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x24c]
sub ecx, 0xc
sub esp, 4
mov dword [esp], edx
call fcn.004dba40
mov edx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x288]
lea ecx, [edx - 0xc]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
cmp edi, dword [ebp - 0x274]
jne 0x405b54
jmp 0x40639d
mov eax, dword [ebp - 0x27c]
mov dword [esp + 8], eax
jmp 0x40576e
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x24c]
mov dword [esp + 8], ecx
lea ecx, [ebp - 0x250]
mov dword [esp + 4], ecx
lea ecx, [ebp - 0x218]
mov dword [esp], ecx
lea edx, [ebx - 1]
add eax, 4
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x218], 0
call fcn.0050dab0
mov eax, dword [ebp - 0x248]
test eax, eax
je 0x4053a1
mov edx, dword [ebp - 0x218]
test edx, edx
je 0x4053a1
mov ecx, dword [ebp - 0x24c]
test ecx, ecx
jne 0x4053a1
movzx ecx, byte [ebp - 0x250]
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 8], ecx
call fcn.0040ac10
xor eax, 1
movzx eax, al
mov dword [ebp - 0x274], eax
jmp 0x4031fb
mov eax, dword [ebp - 0x250]
mov ecx, ebx
mov edx, dword [ebp - 0x298]
mov dword [edi], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov eax, dword [ebp - 0x290]
call fcn.0050dd4d
mov edi, eax
jmp 0x405869
mov esi, dword [ebp - 0x27c]
mov edi, str.uninstall
mov ecx, 0xa
repe cmpsb byte [esi], byte es:[edi]
jne 0x405d68
cmp ebx, 1
jle 0x4031ec
cmp ebx, 3
jne 0x405d44
mov eax, dword [ebp + 0xc]
mov edi, 0x51b952
mov ecx, 3
mov esi, dword [eax + 4]
repe cmpsb byte [esi], byte es:[edi]
je 0x4066b9
mov eax, dword [ebp + 0xc]
mov ecx, ebx
mov edx, dword [ebp - 0x298]
mov dword [esp], eax
mov eax, dword [ebp - 0x290]
call fcn.0050dd4d
mov dword [ebp - 0x274], eax
jmp 0x4031fb
mov esi, dword [ebp - 0x27c]
mov edi, 0x51ba81
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
jne 0x406233
cmp ebx, 1
mov dword [ebp - 0x258], 0x516f3c
jle 0x40620f
mov eax, dword [ebp + 0xc]
mov edi, 0x51b34a
mov ecx, 3
mov eax, dword [eax + 4]
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4061ea
cmp ebx, 3
lea eax, [ebp - 0x258]
je 0x4061c7
mov dword [esp], 0x51b038
mov ecx, eax
mov edi, 1
mov dword [ebp - 0x280], eax
call fcn.004dc270
sub esp, 4
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51b038
call fcn.004b3940
sub esp, 4
test eax, eax
jne 0x406133
lea esi, [ebp - 0x254]
mov edx, 0x51ba86
mov eax, esi
call fcn.0050da35
lea eax, [ebp - 0x250]
mov edx, 0x51ba8d
mov dword [ebp - 0x284], eax
call fcn.0050da35
lea eax, [ebp - 0x24c]
mov edx, str.vendor
mov dword [ebp - 0x288], eax
call fcn.0050da35
lea eax, [ebp - 0x248]
mov edx, 0x51ba99
mov dword [ebp - 0x27c], eax
call fcn.0050da35
mov eax, dword [ebp - 0x258]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x406105
lea eax, [ebp - 0x218]
mov ebx, eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x25d]
mov ecx, ebx
mov dword [esp + 4], eax
mov dword [esp], str._system
call fcn.004dd150
mov eax, edi
movzx eax, al
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], esi
call fcn.0040b940
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
test bl, bl
je 0x40602b
mov eax, dword [ebp - 0x258]
mov eax, dword [eax - 0xc]
test eax, eax
jne 0x4060bc
mov eax, dword [ebp - 0x288]
mov dword [esp], eax
call fcn.004253e0
test al, al
je 0x4060d9
mov ebx, dword [ebp - 0x278]
lea eax, [ebp - 0x25d]
mov dword [esp + 4], eax
mov dword [esp], str._vendor
mov ecx, ebx
call fcn.004dd150
mov eax, edi
movzx eax, al
sub esp, 8
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0040b940
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
test bl, bl
je 0x40602b
mov eax, dword [ebp - 0x258]
mov esi, dword [eax - 0xc]
test esi, esi
jne 0x4060e3
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004253e0
test al, al
je 0x405fbe
mov ebx, dword [ebp - 0x278]
lea eax, [ebp - 0x25d]
mov dword [esp + 4], eax
mov dword [esp], str._oem
mov ecx, ebx
call fcn.004dd150
mov eax, edi
movzx eax, al
sub esp, 8
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0040b940
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
test bl, bl
je 0x40602b
mov eax, dword [ebp - 0x258]
mov ecx, dword [eax - 0xc]
test ecx, ecx
jne 0x40609a
mov ebx, dword [ebp - 0x278]
lea eax, [ebp - 0x25d]
mov dword [esp + 4], eax
mov dword [esp], str._data
mov ecx, ebx
call fcn.004dd150
mov eax, edi
movzx edi, al
mov eax, dword [ebp - 0x284]
sub esp, 8
mov dword [esp + 4], ebx
mov dword [esp + 8], edi
mov dword [esp], eax
call fcn.0040b940
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov eax, ebx
mov edi, dword [ebp - 0x278]
xor eax, 1
movzx eax, al
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x248]
mov dword [esp], edi
lea ecx, [eax - 0xc]
call fcn.004dba40
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x250]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x254]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
sub esp, 4
mov eax, dword [ebp - 0x258]
jmp 0x404ea9
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba8d
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405fd3
jmp 0x40602b
mov ecx, dword [ebp - 0x280]
mov dword [esp], str.vendor
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405ecd
mov ebx, 1
jmp 0x405f43
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba99
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405f54
jmp 0x405fbe
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba86
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405e5a
lea eax, [ebp - 0x218]
mov dword [ebp - 0x278], eax
jmp 0x405ebc
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba86
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405df5
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba8d
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405df5
mov ecx, dword [ebp - 0x280]
mov dword [esp], str.vendor
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405df5
mov ecx, dword [ebp - 0x280]
mov dword [esp], 0x51ba99
call fcn.004b3940
sub esp, 4
test eax, eax
je 0x405df5
call fcn.004022b0
lea eax, [ebp - 0x218]
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x278], eax
jmp 0x40608f
mov ecx, eax
mov edi, 1
mov dword [ebp - 0x280], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp], eax
call fcn.004dc270
sub esp, 4
jmp 0x405dd8
cmp ebx, 2
jne 0x4061a7
lea edx, [ebp - 0x258]
xor edi, edi
mov dword [esp], eax
mov ecx, edx
mov dword [ebp - 0x280], edx
call fcn.004dc270
sub esp, 4
jmp 0x405dd8
lea eax, [ebp - 0x258]
xor edi, edi
mov dword [esp], 0x51b038
mov ecx, eax
mov dword [ebp - 0x280], eax
call fcn.004dc270
sub esp, 4
jmp 0x405dd8
mov esi, dword [ebp - 0x27c]
mov edi, 0x51baa5
mov ecx, 0xa
repe cmpsb byte [esi], byte es:[edi]
je 0x40722d
mov esi, dword [ebp - 0x27c]
mov edi, 0x51baaf
mov ecx, 0xd
repe cmpsb byte [esi], byte es:[edi]
je 0x40722d
mov esi, dword [ebp - 0x27c]
mov edi, 0x51babc
mov ecx, 0xc
repe cmpsb byte [esi], byte es:[edi]
je 0x40722d
mov esi, dword [ebp - 0x27c]
mov edi, str.logcat
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
je 0x407016
mov esi, dword [ebp - 0x27c]
mov edi, str.lolcat
mov ecx, 7
mov edx, str.longcat
repe cmpsb byte [esi], byte es:[edi]
je 0x40701b
mov esi, dword [ebp - 0x27c]
mov ecx, 8
mov edi, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x40701b
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bb28
mov ecx, 4
repe cmpsb byte [esi], byte es:[edi]
je 0x406fff
mov esi, dword [ebp - 0x27c]
mov edi, str.start_server
mov ecx, 0xd
repe cmpsb byte [esi], byte es:[edi]
je 0x406ef6
mov esi, dword [ebp - 0x27c]
mov edi, str.backup
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x406b63
mov esi, dword [ebp - 0x27c]
mov edi, str.restore
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x4069c3
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bcdf
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
jne 0x406909
cmp ebx, 1
jle 0x4031ec
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00424010
mov dword [ebp - 0x274], eax
jmp 0x4031fb
lea eax, [ebp - 0x250]
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x258], 0x516f3c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x29c]
mov dword [esp], eax
call fcn.00407e40
test eax, eax
mov esi, eax
js 0x406483
lea edi, [ebp - 0x218]
mov edx, edi
mov dword [ebp - 0x278], edi
call fcn.0050db2f
mov dword [esp], esi
mov esi, str.Success
call fcn.0040e5b0
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
jne 0x406422
mov edi, dword [ebp - 0x278]
mov dword [esp + 4], 0x5b
mov dword [esp], edi
call sub.msvcrt.dll_strrchr
mov dword [esp + 4], 0x5d
mov dword [esp], edi
mov esi, eax
call sub.msvcrt.dll_strrchr
test eax, eax
jne 0x4064b1
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str.Failed_to_create_session_n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.00415a60
mov dword [ebp - 0x274], 0xffffffff
mov eax, dword [ebp - 0x258]
mov edi, dword [ebp - 0x284]
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x25c]
sub esp, 4
jmp 0x4047fa
mov eax, dword [ebp - 0x258]
mov dword [esp + 4], str.Connect_error_for_create:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x40645e
test esi, esi
je 0x406422
mov byte [eax], 0
lea eax, [esi + 1]
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_strtol
test eax, eax
mov dword [ebp - 0x298], eax
js 0x406422
cmp ebx, dword [ebp - 0x274]
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x288], eax
jle 0x4066a2
lea eax, [ebp - 0x248]
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x274]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [ebp - 0x290], eax
call fcn.00415510
cmp eax, 0xffffffff
je 0x406870
mov esi, dword [ebp - 0x288]
lea eax, [ebp - 0x25e]
mov edi, dword [ebp - 0x290]
mov dword [esp + 4], eax
mov ecx, esi
mov dword [esp], edi
call fcn.004dd150
sub esp, 8
mov dword [esp + 4], esi
mov esi, dword [ebp - 0x284]
mov dword [esp], esi
call fcn.00425520
mov eax, dword [ebp - 0x250]
mov edx, dword [ebp - 0x22c]
mov dword [esp + 4], str.exec:pm_install_write__S__llu__d__d__s__
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x274]
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x298]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x230]
mov dword [esp + 8], eax
lea eax, [ebp - 0x254]
mov dword [esp], eax
call fcn.0042a1c0
mov eax, dword [ebp - 0x250]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x25d]
mov dword [esp], eax
call fcn.004dba40
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], esi
call fcn.004dba40
sub esp, 4
mov dword [esp + 4], 0
mov dword [esp], edi
call fcn.004136f0
test eax, eax
mov esi, eax
js 0x406835
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x24c], 0x516f3c
mov dword [esp + 4], eax
lea eax, [ebp - 0x254]
mov dword [esp], eax
call fcn.00407e40
test eax, eax
mov edi, eax
js 0x406806
mov edx, eax
mov eax, esi
call fcn.0050d640
mov edx, dword [ebp - 0x278]
mov eax, edi
call fcn.0050db2f
mov dword [esp], esi
mov esi, str.Success
call fcn.0040e5b0
mov dword [esp], edi
call fcn.0040e5b0
mov edi, dword [ebp - 0x278]
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
jne 0x4066de
mov eax, dword [ebp - 0x24c]
mov edi, dword [ebp - 0x284]
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x254]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], edi
call fcn.004dba40
add dword [ebp - 0x274], 1
sub esp, 4
cmp dword [ebp - 0x274], ebx
jne 0x406509
mov eax, str.commit
jmp 0x406753
mov dword [esp + 4], str.Missing_APK_file_n
jmp 0x403359
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp], str.The__k_option_uninstalls_the_application_while_retaining_the_data_cache._nAt_the_moment__there_is_no_way_to_remove_the_remaining_data._nYou_will_have_to_reinstall_the_application_with_the_same_signature__and_fully_uninstall_it._nIf_you_truly_wish_to_continue__execute_adb_shell_pm_uninstall__k__s_n
mov dword [esp + 4], eax
call fcn.00415a30
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4031fb
mov eax, dword [ebp - 0x290]
mov dword [esp + 4], str.Failed_to_write__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.00415a60
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov eax, dword [ebp - 0x254]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
mov eax, str.abandon
mov edx, dword [ebp - 0x298]
mov edi, dword [ebp - 0x288]
mov dword [esp + 8], eax
mov dword [esp + 4], str.exec:pm_install__s__d
mov dword [esp + 0xc], edx
mov dword [esp], edi
call fcn.0042a1c0
mov eax, dword [ebp - 0x280]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.00407e40
test eax, eax
mov ebx, eax
js 0x4068d8
mov edi, dword [ebp - 0x278]
mov esi, str.Success
mov edx, edi
call fcn.0050db2f
mov dword [esp], ebx
call fcn.0040e5b0
mov ecx, 7
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
jne 0x406897
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.00415a60
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
jmp 0x40645e
mov eax, dword [ebp - 0x24c]
mov dword [esp + 4], str.Connect_error_for_write:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [esp], esi
call fcn.0040e5b0
jmp 0x40671a
call dword [sym.imp.msvcrt.dll__errno]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
mov dword [esp + 4], str.Failed_to_open__s:__s_n
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x290]
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x406734
mov eax, dword [ebp - 0x290]
mov dword [esp + 4], str.Failed_to_stat__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
jmp 0x40674e
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], str.Failed_to_finalize_session_n
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.00415a60
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4067e7
mov eax, dword [ebp - 0x258]
mov dword [esp + 4], str.Connect_error_for_finalize:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4067e7
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bce6
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x406b34
mov esi, dword [ebp - 0x27c]
mov edi, str.help
mov ecx, 5
repe cmpsb byte [esi], byte es:[edi]
je 0x406b20
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bcf0
mov ecx, 3
repe cmpsb byte [esi], byte es:[edi]
je 0x406b20
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bcf3
mov ecx, 8
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub edx, eax
movsx eax, dl
test eax, eax
mov dword [ebp - 0x274], eax
je 0x406a73
mov esi, dword [ebp - 0x27c]
mov edi, 0x51bcfe
mov ecx, 9
repe cmpsb byte [esi], byte es:[edi]
jne 0x4031ec
mov eax, dword [ebp - 0x298]
mov edx, 0x51bcfe
mov ecx, dword [ebp - 0x290]
mov dword [esp], eax
lea eax, [ebp - 0x218]
call fcn.00402200
lea eax, [ebp - 0x218]
call fcn.004023d0
jmp 0x404ee9
cmp ebx, 2
jne 0x4031ec
mov eax, dword [ebp + 0xc]
mov esi, dword [eax + 4]
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.004136f0
test eax, eax
mov ebx, eax
js 0x406ae1
lea eax, [ebp - 0x218]
mov edi, eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x24c]
mov ecx, edi
mov dword [esp + 4], eax
mov dword [esp], str.restore:
mov dword [ebp - 0x248], 0x516f3c
call fcn.004dd150
lea eax, [ebp - 0x248]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00407e40
mov esi, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x250]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
test esi, esi
js 0x406aa8
mov dword [esp], str.Now_unlock_your_device_and_confirm_the_restore_operation._n
call fcn.00415a30
mov edx, esi
mov eax, ebx
call fcn.0050d640
mov dword [esp], esi
call fcn.0040e5b0
jmp 0x4050d4
lea eax, [ebp - 0x218]
mov dword [esp], eax
call fcn.004167b0
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], 0x51bcfb
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
mov dword [esp], eax
call fcn.00415a00
jmp 0x404eef
mov eax, dword [ebp - 0x248]
mov dword [esp + 4], str.adb:_unable_to_connect_for_restore:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [esp], ebx
call fcn.0040e5b0
mov dword [ebp - 0x274], 0xffffffff
jmp 0x404ea3
call dword [sym.imp.msvcrt.dll__errno]
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
mov dword [esp + 8], esi
mov dword [esp + 4], str.adb:_unable_to_open_file__s:__s_n
mov dword [esp + 0xc], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x4031fb
call fcn.004022b0
mov dword [ebp - 0x274], 0
jmp 0x4031fb
lea eax, [ebp - 0x24c]
mov dword [esp + 4], eax
lea ecx, [ebp - 0x218]
mov dword [esp], 0x51bce6
call fcn.004dd150
lea eax, [ebp - 0x218]
sub esp, 8
call fcn.0050db7f
jmp 0x404ee9
mov eax, dword [ebp + 0xc]
mov edx, 1
mov dword [ebp - 0x290], str.._backup.ab
sub eax, 4
cmp ebx, 1
mov dword [ebp - 0x280], eax
jle 0x4031ec
lea eax, [edx*4]
mov esi, 0x51bb7a
mov dword [ebp - 0x278], eax
mov ecx, 3
add eax, dword [ebp + 0xc]
mov edi, dword [eax]
mov dword [ebp - 0x27c], eax
repe cmpsb byte [esi], byte es:[edi]
seta cl
mov esi, ecx
setb cl
mov eax, esi
cmp al, cl
jne 0x406c0f
lea ecx, [ebx - 1]
cmp edx, ecx
je 0x406fa2
mov eax, dword [ebp + 0xc]
lea ecx, [edx + 2]
mov edi, dword [ebp - 0x278]
cmp ebx, ecx
mov eax, dword [eax + edi + 4]
mov dword [ebp - 0x290], eax
jl 0x406c02
mov edi, dword [ebp - 0x280]
mov eax, dword [ebp - 0x27c]
lea ecx, [edi + ebx*4]
mov esi, dword [eax + 8]
add eax, 4
mov dword [eax - 4], esi
cmp eax, ecx
jne 0x406bed
lea eax, [edx + ebx - 1]
sub eax, edx
mov edx, eax
mov eax, dword [ebp + 0xc]
sub ebx, 2
mov dword [eax + ebx*4], 0
add edx, 1
cmp edx, ebx
jl 0x406b87
cmp ebx, 1
jle 0x4031ec
mov edi, dword [ebp - 0x290]
mov dword [esp], edi
call fcn.004156e0
lea eax, [ebp - 0x218]
mov esi, eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x248]
mov ecx, esi
mov dword [esp + 4], eax
mov dword [esp], edi
mov dword [ebp - 0x27c], eax
call fcn.004dd150
sub esp, 8
mov dword [esp], esi
call fcn.00425650
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
mov dword [esp], eax
mov dword [ebp - 0x288], eax
call fcn.004dba40
sub esp, 4
mov dword [esp], edi
mov dword [esp + 4], 0x1a0
call fcn.00413ec0
test eax, eax
mov edi, eax
js 0x406faf
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x250]
mov ecx, eax
mov dword [esp], str.backup:
lea esi, [ebp - 0x254]
mov dword [ebp - 0x284], eax
mov dword [esp + 4], edx
call fcn.004dd150
lea eax, [ebx - 1]
xor ebx, ebx
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], eax
mov eax, esi
mov esi, edi
mov edi, eax
sub esp, 8
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], edi
mov ecx, dword [ebp - 0x288]
mov eax, dword [eax + ebx*4 + 4]
add ebx, 1
mov dword [esp], eax
call fcn.004dd150
mov eax, dword [ebp - 0x288]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00425420
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 4], 0x51b06e
mov dword [esp], 0
call fcn.004dc560
mov ecx, dword [eax]
sub esp, 8
mov dword [ebp - 0x218], ecx
mov ecx, dword [ebp - 0x284]
mov dword [eax], 0x516f3c
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dc000
mov edx, dword [ebp - 0x218]
lea ecx, [edx - 0xc]
mov edx, dword [ebp - 0x280]
sub esp, 4
mov dword [esp], edx
call fcn.004dba40
mov edx, dword [ebp - 0x248]
mov eax, dword [ebp - 0x278]
lea ecx, [edx - 0xc]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
mov edx, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x278]
lea ecx, [edx - 0xc]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
cmp ebx, dword [ebp - 0x298]
jne 0x406ce8
test byte [0x561ee0], 1
mov edi, esi
je 0x406e80
mov esi, dword [sym.imp.msvcrt.dll__errno]
call esi
mov ebx, dword [eax]
mov eax, dword [ebp - 0x250]
mov dword [esp + 4], str.backup._filename_s_cmd_s
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x290]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.0042a1c0
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0
mov dword [esp + 4], 0x36b
mov dword [esp], str.system_core_adb_commandline.cpp
call fcn.0042a560
mov ecx, dword [ebp - 0x27c]
sub esp, 0x14
call fcn.0042a6d0
mov ecx, dword [ebp - 0x218]
mov edx, dword [ecx - 0xc]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00505c10
mov ecx, dword [ebp - 0x27c]
call fcn.0042a790
mov edx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x27c]
lea ecx, [edx - 0xc]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
call esi
mov dword [eax], ebx
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x218], 0x516f3c
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x284]
mov dword [esp], eax
call fcn.00407e40
test eax, eax
mov esi, eax
js 0x406fc6
mov dword [esp], str.Now_unlock_your_device_and_confirm_the_backup_operation._n
call fcn.00415a30
mov edx, edi
mov eax, esi
call fcn.0050d640
mov dword [esp], esi
call fcn.0040e5b0
mov dword [esp], edi
call fcn.0040e5b0
mov eax, dword [ebp - 0x218]
mov edi, dword [ebp - 0x27c]
lea ecx, [eax - 0xc]
mov dword [esp], edi
call fcn.004dba40
mov eax, dword [ebp - 0x250]
sub esp, 4
jmp 0x4047fa
lea eax, [ebp - 0x218]
mov edi, eax
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0x250]
mov ecx, edi
mov dword [esp + 4], eax
mov dword [esp], 0x51bb61
mov dword [ebp - 0x248], 0x516f3c
call fcn.004dd150
lea eax, [ebp - 0x248]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00407e40
mov ebx, eax
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
mov dword [esp], eax
call fcn.004dba40
sub esp, 4
test ebx, ebx
jns 0x406f7d
mov eax, dword [ebp - 0x248]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov eax, dword [ebp - 0x248]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x278]
mov dword [esp], eax
call fcn.004dba40
mov dword [ebp - 0x274], ebx
sub esp, 4
jmp 0x4031fb
mov dword [esp + 4], str.adb:__f_passed_with_no_filename_n
jmp 0x403566
mov eax, dword [ebp - 0x290]
mov dword [esp + 4], str.adb:_unable_to_open_file__s_n
mov dword [esp + 8], eax
jmp 0x405776
mov eax, dword [ebp - 0x218]
mov dword [esp + 4], str.adb:_unable_to_connect_for_backup:__s_n
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [esp], edi
call fcn.0040e5b0
mov dword [ebp - 0x274], 0xffffffff
jmp 0x406ed1
mov eax, dword [ebp - 0x27c]
mov dword [esp + 4], str.error:_adb__s_not_implemented_on_Win32_n
mov dword [esp + 8], eax
jmp 0x405776
mov edx, str.longcat
mov dword [esp], 0x51bade
lea esi, [ebp - 0x254]
mov dword [ebp - 0x274], edx
call fcn.00415d40
mov ecx, 0x51b038
lea edx, [ebp - 0x248]
mov dword [esp + 4], edx
mov dword [ebp - 0x27c], edx
test eax, eax
cmovne ecx, eax
lea eax, [ebp - 0x218]
mov dword [esp], ecx
mov ecx, eax
mov edi, eax
mov dword [ebp - 0x278], eax
call fcn.004dd150
sub esp, 8
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00425420
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
lea eax, [ebp - 0x24c]
mov dword [esp], eax
mov dword [ebp - 0x288], eax
call fcn.004dba40
sub esp, 4
mov dword [esp + 8], esi
mov dword [esp], edi
mov dword [esp + 4], str.shell:export_ANDROID_LOG_TAGS_
call fcn.0050a070
mov ecx, edi
mov dword [esp], str.___exec_logcat
call fcn.004dbeb0
mov edx, dword [ebp - 0x27c]
mov ecx, dword [eax]
sub esp, 4
mov dword [ebp - 0x250], ecx
mov dword [eax], 0x516f3c
mov eax, dword [ebp - 0x218]
mov dword [esp], edx
lea ecx, [eax - 0xc]
call fcn.004dba40
mov eax, dword [ebp + 0xc]
mov ecx, 8
mov edx, dword [ebp - 0x274]
mov esi, dword [eax]
mov edi, edx
sub esp, 4
repe cmpsb byte [esi], byte es:[edi]
lea edi, [ebp - 0x250]
mov dword [ebp - 0x284], edi
seta dl
setb al
cmp dl, al
jne 0x40711c
mov dword [esp], str.__v_long
mov ecx, edi
call fcn.004dbeb0
sub esp, 4
cmp ebx, 1
jle 0x40720b
lea esi, [ebx - 1]
mov ebx, dword [ebp - 0x278]
xor edi, edi
lea eax, [ebp - 0x258]
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x288]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + edi*4 + 4]
add edi, 1
mov dword [esp], eax
call fcn.004dd150
mov eax, dword [ebp - 0x288]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.00425420
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 4], 0x51b06e
mov dword [esp], 0
call fcn.004dc560
mov ecx, dword [ebp - 0x284]
mov edx, dword [eax]
sub esp, 8
mov dword [ebp - 0x218], edx
mov dword [eax], 0x516f3c
mov dword [esp], ebx
call fcn.004dc000
mov eax, dword [ebp - 0x218]
lea ecx, [eax - 0xc]
mov eax, dword [ebp - 0x29c]
sub esp, 4
mov dword [esp], eax
call fcn.004dba40
mov eax, dword [ebp - 0x248]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], ebx
call fcn.004dba40
mov eax, dword [ebp - 0x24c]
lea ecx, [eax - 0xc]
sub esp, 4
mov dword [esp], ebx
call fcn.004dba40
sub esp, 4
cmp edi, esi
jne 0x407148
mov ecx, dword [ebp - 0x284]
mov edx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x290]
call fcn.0050dbf2
mov dword [ebp - 0x274], eax
jmp 0x4047da
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x290]
mov edx, dword [ebp - 0x27c]
mov dword [esp], eax
jmp 0x4069a8
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x403c23
mov eax, dword [ebp - 0x278]
mov ecx, edi
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403c23
sub eax, 4
call fcn.0050db62
lea edx, [ebp - 0x24c]
mov dword [ebp - 0x288], edx
test eax, eax
jg 0x403c0e
mov dword [esp], edx
mov ecx, edi
call fcn.004dba20
sub esp, 4
jmp 0x403c0e
sub eax, 4
call fcn.0050db62
test eax, eax
jg 0x404090
mov eax, dword [ebp - 0x27c]
mov ecx, ebx
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x404090
mov eax, dword [ebp - 0x24c]
mov dword [esp + 4], 0x51af0f
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00415a00
mov dword [ebp - 0x274], 0xffffffff
jmp 0x403d33
sub eax, 4
mov dword [ebp - 0x274], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x274]
test eax, eax
jg 0x404133
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x404133
sub eax, 4
mov dword [ebp - 0x274], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x274]
test eax, eax
jg 0x403e6e
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x403e6e
sub eax, 4
mov dword [ebp - 0x284], ecx
call fcn.0050db62
mov ecx, dword [ebp - 0x284]
test eax, eax
jg 0x4041e0
mov eax, dword [ebp - 0x27c]
mov dword [esp], eax
call fcn.004dba20
sub esp, 4
jmp 0x4041e0