Function at 0x40b0a9
Capabilities:
Get hostname
Initialize winsock library
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xc0c
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp + 0xc]
mov dword [0x6f6078], eax
mov dword [ebp - 0x98], 0
lea eax, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [esp], str.cydia
call fcn.0040af57
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x40b10b
mov dword [esp], str.Cydia_is_missing_from_resources
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x9c], 0
lea eax, [ebp - 0x9c]
mov dword [esp + 4], eax
mov dword [esp], str.packagelist
call fcn.0040af57
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x40b152
mov dword [esp], str.Packagelist_is_missing_from_resources
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Connecting_to_device...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.00408950
mov dword [ebp - 0x20], 0xa
jmp 0x40b186
mov dword [esp], 0x3e8
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp dword [ebp - 0x20], 0
setne al
dec dword [ebp - 0x20]
test al, al
je 0x40b19d
mov eax, dword [0x6f6070]
test eax, eax
je 0x40b177
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40b1c4
mov dword [esp], str.Could_not_find_device_in_connected_state__
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00417872
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40b20b
mov dword [esp], str.Could_not_connect_to_device_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa0]
mov dword [esp + 8], 0
lea edx, [ebp - 0xbc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00419f03
mov word [ebp - 0x4e], ax
cmp word [ebp - 0x4e], 0
je 0x40b29a
movsx eax, word [ebp - 0x4e]
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_connect_to_lockdownd___d_
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xa4]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x67250c
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xa8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x672519
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xac]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x672524
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb0]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x672530
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb4]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x67253f
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DevToolsAvailable
mov dword [esp + 4], str.com.apple.mobile.internal
mov dword [esp], eax
call fcn.00418860
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call fcn.0041909f
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x40b3ca
mov dword [esp], str.Failed_to_get_BuildVersion_from_lockdown.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0xa8]
test eax, eax
jne 0x40b3f2
mov dword [esp], str.Failed_to_get_DeviceName_from_lockdown.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0xac]
test eax, eax
jne 0x40b41a
mov dword [esp], str.Failed_to_get_ProductType_from_lockdown.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0xb0]
test eax, eax
jne 0x40b442
mov dword [esp], str.Failed_to_get_ProductVersion_from_lockdown.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0xb4]
test eax, eax
jne 0x40b46a
mov dword [esp], str.Failed_to_get_SerialNumber_from_lockdown.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x40b4f2
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call fcn.00422c6c
cmp eax, 3
jne 0x40b4f2
mov dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x9b4]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00422d34
mov eax, dword [ebp - 0x9b4]
test eax, eax
je 0x40b4f2
mov eax, dword [ebp - 0x9b4]
mov dword [esp + 4], 0x67264e
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40b4dd
mov dword [ebp - 0x24], 0
jmp 0x40b4e4
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x9b4]
mov dword [esp], eax
call fcn.005a0e48
cmp dword [ebp - 0x24], 0
je 0x40b6f3
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408b60
test eax, eax
je 0x40b541
mov dword [esp], str.Your_device_appears_to_be_using_a_semi_tether_jailbreak._Please_use_the_evasi0n_untether_package_from_Cydia_to_untether_instead.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Waiting_for_device_reboot...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.00408950
mov dword [ebp - 0x28], 0x3c
jmp 0x40b57e
mov eax, dword [0x6f6070]
test eax, eax
je 0x40b598
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6f6070]
test eax, eax
je 0x40b599
mov eax, dword [ebp - 0x28]
not eax
shr eax, 0x1f
dec dword [ebp - 0x28]
test al, al
jne 0x40b566
jmp 0x40b599
nop
mov eax, dword [0x6f6070]
test eax, eax
je 0x40b5c0
mov dword [esp], str.Device_did_not_reboot__
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x28], 0x78
jmp 0x40b5e1
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40b5fb
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40b5fc
mov eax, dword [ebp - 0x28]
not eax
shr eax, 0x1f
dec dword [ebp - 0x28]
test al, al
jne 0x40b5c9
jmp 0x40b5fc
nop
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40b623
mov dword [esp], str.Device_did_not_reconnect_after_reboot__
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Waiting_for_device_to_be_ready...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.00408950
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004091d8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jne 0x40b66b
mov dword [ebp - 0x1c], 0
mov dword [esp], 0x2710
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40b6b6
cmp dword [ebp - 0x1c], 0
jne 0x40b69b
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.hm_springboard_didnt_seem_to_load__trying_to_continue_n
call sub.msvcrt.dll_fwrite
jmp 0x40b6b6
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.error_code__d_waiting_for_springboard_to_show_up
call fcn.00408888
mov eax, dword [ebp - 0x1c]
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00417872
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40b6f3
mov dword [esp], str.Could_not_connect_to_device_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.004093a4
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.00409445
mov dword [esp + 4], 0x1ed
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.004085f3
mov dword [esp], str.Retrieving_information_from_the_device_to_generate_jailbreak_data...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 2
call fcn.00408950
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0040968e
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
test eax, eax
jne 0x40b77d
mov dword [esp], str.Could_not_get_com.apple.mobile.installation.plist
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
lea eax, [ebp - 0x2c0]
mov dword [esp], eax
call fcn.00409cf3
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c0]
lea edx, [ebp - 0x2c8]
mov dword [esp + 8], edx
lea edx, [ebp - 0x2c4]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00425ca4
mov eax, dword [ebp - 0x2c4]
test eax, eax
jne 0x40b7e9
mov dword [esp], str.Could_not_get_binary_plist_blob
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Preparing_stage_1_jailbreak_data...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 5
call fcn.00408950
lea eax, [ebp - 0x2bc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x4c8]
add eax, edx
mov dword [eax], 0x6b636168
mov dword [eax + 4], 0x2f7075
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.005a0e90
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00409445
mov dword [esp + 4], 0x1ed
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.004085f3
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.plist
mov eax, 4
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsd dword es:[edi], dword [esi]
call fcn.004222a4
mov dword [ebp - 0x54], eax
call fcn.004222d8
mov dword [esp + 8], eax
mov dword [esp + 4], str.Applications
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp + 4], 0x538
mov dword [esp + 8], 0
mov dword [esp], str.VERS
call fcn.00422460
mov dword [esp + 8], eax
mov dword [esp + 4], str.BackupKeyBag
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.004224cc
mov dword [esp + 8], eax
mov dword [esp + 4], str.Date
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0
call fcn.0042236c
mov dword [esp + 8], eax
mov dword [esp + 4], str.IsEncrypted
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
call fcn.004222a4
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xa4]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x67250c
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x672519
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x672524
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x672530
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0xb4]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x67253f
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], 0x6728bf
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
call fcn.004222a4
mov dword [ebp - 0x5c], eax
mov dword [esp], 0
call fcn.0042236c
mov dword [esp + 8], eax
mov dword [esp + 4], str.ShouldSubmit
mov eax, dword [ebp - 0x5c]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 4], str.com.apple.MobileDeviceCrashCopy
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
call fcn.004222a4
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x958]
mov dword [esp + 4], eax
mov dword [esp], 0x202
call sub.WS2_32.dll_WSAStartup
sub esp, 8
mov dword [esp + 4], 0x100
lea eax, [ebp - 0x7c8]
mov dword [esp], eax
call sub.WS2_32.dll_gethostname
sub esp, 8
test eax, eax
je 0x40baee
lea eax, [ebp - 0x7c8]
mov edx, eax
mov ebx, str.localhost
mov eax, 0xa
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x7c8]
mov dword [esp], eax
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.LastBackupComputerName
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], str.Windows
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.LastBackupComputerType
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0x60]
mov dword [esp + 8], eax
mov dword [esp + 4], str.com.apple.iTunes.backup
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Lockdown
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], str.16.0
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.SystemDomainsVersion
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0x672977
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.Version
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0
call fcn.0042236c
mov dword [esp + 8], eax
mov dword [esp + 4], str.WasPasscodeSet
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp + 8], 1
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00409e07
test eax, eax
jns 0x40bbfe
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422520
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Status.plist
mov eax, 0xe
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
call fcn.004222a4
mov dword [ebp - 0x54], eax
mov dword [esp], 0x6729a0
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.BackupState
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.004224cc
mov dword [esp + 8], eax
mov dword [esp + 4], str.Date
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 1
call fcn.0042236c
mov dword [esp + 8], eax
mov dword [esp + 4], str.IsFullBackup
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp], 0x6729bd
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], 0x6729c6
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
call fcn.00409f1e
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.UUID
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.005a0e48
mov dword [esp], 0x6729d9
call fcn.0042230c
mov dword [esp + 8], eax
mov dword [esp + 4], str.Version
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422a70
mov dword [esp + 8], 1
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00409e07
test eax, eax
jns 0x40bd89
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00422520
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.004064ca
test eax, eax
jns 0x40be2f
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
lea eax, [ebp - 0x2bc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x4c8]
add eax, edx
mov edx, eax
mov ebx, str.hackup
mov eax, 7
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.004046a4
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40bec4
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40bf19
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40bf6e
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var_mobile
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40bfc3
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40c018
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x95c], 0
mov dword [ebp - 0x960], 0
lea eax, [ebp - 0x960]
mov dword [esp + 4], eax
lea eax, [ebp - 0x95c]
mov dword [esp], eax
call fcn.0040afdb
mov eax, dword [ebp - 0x960]
mov edx, eax
mov eax, dword [ebp - 0x95c]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Info.plist
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c0b7
mov dword [esp], str.Couldnt_add_Info.plist_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x95
mov dword [esp + 0x1c], str.__bin_launchctl_submit__l_remount__o__var_mobile_Media_mount.stdout__e__var_mobile_Media_mount.stderr_____sbin_mount__v__t_hfs__o_rw__dev_disk0s1s1_n
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_DemoApp
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c124
mov dword [esp], str.Couldnt_add_executable_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x3de2
mov dword [esp + 0x1c], 0x619d00
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c191
mov dword [esp], str.Couldnt_add_Icon.png_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0xd667
mov dword [esp + 0x1c], 0x61db00
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_2x.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c1fe
mov dword [esp], str.Couldnt_add_Icon_2x.png_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x5c2d
mov dword [esp + 0x1c], 0x5ff140
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_72.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c26b
mov dword [esp], str.Couldnt_add_Icon_72.png_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x14f7a
mov dword [esp + 0x1c], 0x604d80
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_72_2x.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c2d8
mov dword [esp], str.Couldnt_add_Icon_72_2x.png_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x2c8]
mov edx, eax
mov eax, dword [ebp - 0x2c4]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x81a4
mov dword [esp + 8], str.Media_Recordings_.haxx_Library_Caches_com.apple.mobile.installation.plist
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c34b
mov dword [esp], str.Couldnt_add_install_plist_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x2c], 0
jmp 0x40c3ed
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax*4 + 0x6f9ce0]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Media_Recordings_.haxx_Library_Caches_com.apple.LaunchServices__03d.csstore
lea eax, [ebp - 0xbbc]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x20], 9
mov dword [esp + 0x1c], str.Eat_this_
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
lea eax, [ebp - 0xbbc]
mov dword [esp + 8], eax
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40c3ea
mov dword [esp], str.Couldnt_add_csstore_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
inc dword [ebp - 0x2c]
mov eax, dword [0x6f607c]
cmp dword [ebp - 0x2c], eax
jl 0x40c357
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405618
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40c42a
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_stage_1_jailbreak_data...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.00408950
mov dword [ebp - 0x980], str.idevicebackup2
mov dword [ebp - 0x97c], 0x6723d0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], 0x6723d7
mov dword [ebp - 0x970], 0x6723df
mov dword [ebp - 0x96c], 0x6723e8
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x6c], 7
mov dword [esp], 0x66
call fcn.004108d1
lea eax, [ebp - 0x980]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x6c]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40c4e3
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.hmm..._restore_failed___d___
call fcn.00408888
mov eax, dword [ebp - 0x1c]
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0040a3a6
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408b60
test eax, eax
je 0x40c525
mov dword [esp], str.Your_device_appears_to_be_using_a_semi_tether_jailbreak._Please_use_the_evasi0n_untether_package_from_Cydia_to_untether_instead.
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Waiting_for_device_reboot...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.00408950
mov dword [ebp - 0x30], 0x3c
jmp 0x40c562
mov eax, dword [0x6f6070]
test eax, eax
je 0x40c57c
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6f6070]
test eax, eax
je 0x40c57d
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40c54a
jmp 0x40c57d
nop
mov eax, dword [0x6f6070]
test eax, eax
je 0x40c5a4
mov dword [esp], str.Device_did_not_reboot__
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0x30], 0x78
jmp 0x40c5c5
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40c5df
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40c5e0
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40c5ad
jmp 0x40c5e0
nop
mov eax, dword [0x6f6070]
test eax, eax
jne 0x40c607
mov dword [esp], str.Device_did_not_reconnect_after_reboot__
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Waiting_for_device_to_be_ready...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0xd
call fcn.00408950
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004091d8
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jne 0x40c64f
mov dword [ebp - 0x1c], 0
mov dword [esp], 0x2710
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40c69a
cmp dword [ebp - 0x1c], 0
jne 0x40c67f
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.hm_springboard_didnt_seem_to_load__trying_to_continue_n
call sub.msvcrt.dll_fwrite
jmp 0x40c69a
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.error_code__d_waiting_for_springboard_to_show_up
call fcn.00408888
mov eax, dword [ebp - 0x1c]
jmp 0x40dea2
mov dword [esp], str.Preparing_stage_2_jailbreak_data...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0xf
call fcn.00408950
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.005a0e90
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.004064ca
test eax, eax
jns 0x40c798
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.004046a4
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40c7d4
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40c829
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40c87e
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var_db_
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40c8d3
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], str._var_tmp_launchd
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40c928
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40c94c
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_stage_2_jailbreak_data__step_1_3_...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x14
call fcn.00408950
mov dword [ebp - 0x9a0], str.idevicebackup2
mov dword [ebp - 0x99c], 0x6723d0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x994], 0x6723d7
mov dword [ebp - 0x990], 0x6723df
mov dword [ebp - 0x98c], 0x6723e8
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x70], 7
mov dword [esp], 0
call fcn.004108d1
lea eax, [ebp - 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40ca12
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__1_3__n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408f30
mov dword [ebp - 0x1c], 0
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040492f
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x40cb18
mov dword [esp + 4], str._var_tmp_launchd_sock
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405bd2
mov dword [esp + 4], 0xa1a4
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405e69
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ebb
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ee0
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f05
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f2a
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f4f
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405fac
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00404b5a
test eax, eax
jns 0x40cb0d
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405b1f
cmp dword [ebp - 0x1c], 0
jns 0x40cb32
mov dword [esp], str.Could_not_add_file_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40cb56
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_stage_2_jailbreak_data__step_2_3_...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x19
call fcn.00408950
mov dword [esp], 0x66
call fcn.004108d1
lea eax, [ebp - 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40cbc4
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__2_3__n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408f30
mov dword [ebp - 0x1c], 0xffffffff
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040492f
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x40ccdb
mov dword [esp + 8], 1
mov dword [esp + 4], 0x672397
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405bf7
mov dword [esp + 4], 0xa1a4
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405e69
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ebb
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ee0
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f05
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f2a
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f4f
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405fac
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00404b5a
test eax, eax
jns 0x40ccc9
mov dword [ebp - 0x1c], 0xffffffff
jmp 0x40ccd0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405b1f
cmp dword [ebp - 0x1c], 0
jns 0x40ccff
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405618
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40cd2e
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_stage_2_jailbreak_data__step_3_3_...__Do_not_touch_your_device_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x1e
call fcn.00408950
mov dword [esp], 0x66
call fcn.004108d1
lea eax, [ebp - 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40cd9c
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__3_3__n
call sub.msvcrt.dll_fwrite
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00417872
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40cde3
mov dword [esp], str.failed_to_connect_to_device_:_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa0]
mov dword [esp + 8], 0
lea edx, [ebp - 0xbc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00419f03
mov eax, dword [ebp - 0xbc]
test eax, eax
jne 0x40ce4d
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov dword [esp], str.failed_to_connect_to_lockdownd_:_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov word [ebp - 0x9a2], 0
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0x9a2]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x6730d2
mov dword [esp], eax
call fcn.0041a129
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call fcn.0041909f
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x9a8], 0
mov ax, word [ebp - 0x9a2]
movzx edx, ax
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x9a8]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0041e028
mov eax, dword [ebp - 0x9a8]
test eax, eax
jne 0x40cefe
mov dword [esp], str.failed_to_connect_to_AFC
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x9a8]
mov dword [esp + 4], str._evasi0n_install
mov dword [esp], eax
call fcn.0041e5c7
test ax, ax
je 0x40cf5d
mov dword [esp], str.failed_to_make_directory
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x9a8]
mov dword [esp], eax
call fcn.0041e0a5
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x98]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.0040abec
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x9c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp], eax
call fcn.0040abec
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], 0x9800
cmp dword [ebp - 0x80], 0xffffffff
je 0x40cfa9
cmp dword [ebp - 0x84], 0xffffffff
jne 0x40cfed
mov dword [esp], str.failed_to_get_data_files
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x9a8]
mov dword [esp], eax
call fcn.0041e0a5
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [0x6736f4]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x80]
mov edx, 0
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], edx
fild qword [ebp - 0xbd8]
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
add edx, eax
mov eax, dword [ebp - 0x88]
add eax, edx
mov edx, 0
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], edx
fild qword [ebp - 0xbd8]
fdivp st(1)
fld dword [0x6736f8]
fmulp st(1)
fld dword [0x6736f4]
faddp st(1)
fstp dword [ebp - 0x90]
mov eax, dword [ebp - 0x84]
mov edx, 0
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], edx
fild qword [ebp - 0xbd8]
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
add edx, eax
mov eax, dword [ebp - 0x88]
add eax, edx
mov edx, 0
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], edx
fild qword [ebp - 0xbd8]
fdivp st(1)
fld dword [0x6736f8]
fmulp st(1)
fadd dword [ebp - 0x90]
fstp dword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9ac], eax
mov dword [esp], str.Uploading_Cydia...__Do_not_touch_your_device_
call fcn.00416e84
mov edx, eax
fld dword [ebp - 0x9b0]
fnstcw word [ebp - 0xbca]
mov ax, word [ebp - 0xbca]
mov ah, 0xc
mov word [ebp - 0xbcc], ax
fldcw word [ebp - 0xbcc]
fistp dword [ebp - 0xbd0]
fldcw word [ebp - 0xbca]
mov eax, dword [ebp - 0xbd0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408950
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x9a8]
lea ecx, [ebp - 0x9b0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x40a872
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x48]
mov dword [esp + 8], edx
mov dword [esp + 4], str._evasi0n_install_Cydia.tar
mov dword [esp], eax
call fcn.0040ac39
test eax, eax
je 0x40d198
mov dword [esp], str.failed_to_upload_file
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x9a8]
mov dword [esp], eax
call fcn.0041e0a5
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9ac], eax
mov dword [esp], str.Uploading_Cydia_packages_list...__Do_not_touch_your_device_
call fcn.00416e84
mov edx, eax
fld dword [ebp - 0x9b0]
fnstcw word [ebp - 0xbca]
mov ax, word [ebp - 0xbca]
mov ah, 0xc
mov word [ebp - 0xbcc], ax
fldcw word [ebp - 0xbcc]
fistp dword [ebp - 0xbd0]
fldcw word [ebp - 0xbca]
mov eax, dword [ebp - 0xbd0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408950
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9a8]
lea ecx, [ebp - 0x9b0]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x40a872
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x4c]
mov dword [esp + 8], edx
mov dword [esp + 4], str._evasi0n_install_packagelist.tar
mov dword [esp], eax
call fcn.0040ac39
test eax, eax
je 0x40d27f
mov dword [esp], str.failed_to_upload_file
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x9a8]
mov dword [esp], eax
call fcn.0041e0a5
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9b0], eax
mov eax, dword [0x6736fc]
mov dword [ebp - 0x9ac], eax
mov dword [esp], str.Uploading_extra_packages...__Do_not_touch_your_device_
call fcn.00416e84
mov edx, eax
fld dword [ebp - 0x9b0]
fnstcw word [ebp - 0xbca]
mov ax, word [ebp - 0xbca]
mov ah, 0xc
mov word [ebp - 0xbcc], ax
fldcw word [ebp - 0xbcc]
fistp dword [ebp - 0xbd0]
fldcw word [ebp - 0xbca]
mov eax, dword [ebp - 0xbd0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00408950
mov eax, dword [ebp - 0x9a8]
lea edx, [ebp - 0x9b0]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x40a872
mov edx, dword [ebp - 0x88]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x65ddc0
mov dword [esp + 4], str._evasi0n_install_extras.tar
mov dword [esp], eax
call fcn.0040aaad
test eax, eax
je 0x40d366
mov dword [esp], str.failed_to_upload_file
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, dword [ebp - 0x9a8]
mov dword [esp], eax
call fcn.0041e0a5
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004178cb
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x9a8]
mov dword [esp + 4], str._mount.stderr
mov dword [esp], eax
call fcn.0041e371
mov eax, dword [ebp - 0x9a8]
mov dword [esp + 4], str._mount.stdout
mov dword [esp], eax
call fcn.0041e371
mov dword [esp], str.To_continue__please_unlock_your_device_and_tap_the_new_Jailbreak_icon._Only_tap_it_once__The_screen_will_go_black_and_then_return_to_the_home_screen.
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x4b
call fcn.00408950
mov dword [esp], 2
call fcn.00408a39
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x9a8]
lea edx, [ebp - 0x9b8]
mov dword [esp + 8], edx
mov dword [esp + 4], str._mount.stderr
mov dword [esp], eax
call fcn.0041e684
test ax, ax
jne 0x40d412
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x9b8]
mov dword [esp], eax
call fcn.00409631
call fcn.00408a67
cmp dword [ebp - 0x34], 0
je 0x40d423
jmp 0x40d441
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40d3c1
mov dword [esp], str.Timeout_waiting_for_user_to_tap_on_the_icon..._trying_to_continue_anyway...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x50
call fcn.00408950
jmp 0x40d45d
mov dword [esp], str.Alright__Remounting_will_start_now._Do_NOT_tap_the_icon_again____just_wait.
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x50
call fcn.00408950
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.005a0e90
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.004064ca
test eax, eax
jns 0x40d53f
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.004046a4
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40d57b
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40d5d0
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40d625
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40d67a
mov dword [esp], str.Error:_Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ff
mov dword [esp + 8], str.Media_Recordings_.haxx_db_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40d6cf
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x6733e3
mov dword [esp + 8], str.Media_Recordings_.haxx_mobile_DemoApp.app_DemoApp
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40d724
mov dword [esp], str.Error:_Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405618
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40d753
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_remount_payload...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x55
call fcn.00408950
mov dword [esp], 0x66
call fcn.004108d1
lea eax, [ebp - 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40d7c1
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3a
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_injecting_remount_payload_n
call sub.msvcrt.dll_fwrite
mov dword [ebp - 0x30], 0x1e
mov dword [ebp - 0x34], 0
jmp 0x40d8ad
mov dword [ebp - 0x9bc], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x9a8]
lea edx, [ebp - 0x9bc]
mov dword [esp + 8], edx
mov dword [esp + 4], str._mount.stdout
mov dword [esp], eax
call fcn.0041e684
test ax, ax
jne 0x40d89e
mov dword [ebp - 0x44], 0
jmp 0x40d867
mov eax, dword [ebp - 0x9bc]
mov edx, dword [ebp - 0x44]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp + 4], 0x673473
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40d863
mov eax, dword [ebp - 0x9bc]
mov edx, dword [ebp - 0x44]
inc edx
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00598bc0
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
jmp 0x40d87b
add dword [ebp - 0x44], 2
mov eax, dword [ebp - 0x9bc]
mov edx, dword [ebp - 0x44]
shl edx, 2
add eax, edx
mov eax, dword [eax]
test eax, eax
jne 0x40d81e
mov eax, dword [ebp - 0x9bc]
mov dword [esp], eax
call fcn.00409631
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
or eax, edx
test eax, eax
je 0x40d89e
mov dword [ebp - 0x34], 1
jmp 0x40d8c0
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40d7d4
cmp dword [ebp - 0x34], 0
jne 0x40d8e4
mov dword [esp], str.Could_not_remount_root_filesystem
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Root_Filesystem_successfully_remounted_
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x5a
call fcn.00408950
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov dword [esp], str.Preparing_final_jailbreak_data...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x5f
call fcn.00408950
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.005a0e90
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbdc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbdc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.004064ca
test eax, eax
jns 0x40da0d
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.004046a4
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40da49
mov dword [esp], str.Could_not_open_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40da9e
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40daf3
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x6733e3
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40db48
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._private_var_evasi0n_launchd.conf
mov dword [esp + 8], str.Media_Recordings_.haxx_private_etc_launchd.conf
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a267
test eax, eax
jns 0x40db9d
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a135
test eax, eax
jns 0x40dbf2
mov dword [esp], str.Couldnt_add_evasi0n_dir
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x2f300
mov dword [esp + 0x1c], 0x62eac0
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_evasi0n
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40dc5f
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x3000
mov dword [esp + 0x1c], 0x62bac0
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_amfi.dylib
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40dccc
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_udid
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40dd3f
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp + 0x20], 0x168
mov dword [esp + 0x1c], str.bsexec_..__sbin_mount__u__o_rw_suid_dev___nsetenv_DYLD_INSERT_LIBRARIES__private_var_evasi0n_amfi.dylib_nload__System_Library_LaunchDaemons_com.apple.MobileFileIntegrity.plist_nbsexec_..__private_var_evasi0n_evasi0n_nunsetenv_DYLD_INSERT_LIBRARIES_nbsexec_..__bin_rm__f__private_var_evasi0n_sock_nbsexec_..__bin_ln__f__var_tmp_launchd_sock__private_var_evasi0n_sock_n
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_launchd.conf
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00409fc7
test eax, eax
jns 0x40ddac
mov dword [esp], str.Error:_Couldnt_add_file_to_backup_
call fcn.00416e84
mov dword [esp], eax
call fcn.00408888
mov eax, 0xffffffff
jmp 0x40dea2
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405525
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405618
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408d47
test eax, eax
jns 0x40dddb
mov eax, 0xffffffff
jmp 0x40dea2
mov dword [esp], str.Injecting_final_jailbreak_data...
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x61
call fcn.00408950
mov dword [esp], 0x66
call fcn.004108d1
lea eax, [ebp - 0x9a0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410aac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40de49
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_3_data_n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0040a3a6
mov dword [esp], str.Jailbreak_complete__The_device_may_restart_a_few_times_as_it_completes_the_process.
call fcn.00416e84
mov dword [esp + 4], eax
mov dword [esp], 0x64
call fcn.00408950
mov dword [esp], 1
call fcn.00408a39
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408b60
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.00409445
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret