Function at 0x480dc0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x5a42ff
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x61e69c]
xor eax, esp
mov dword [esp + 0x160], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x61e69c]
xor eax, esp
push eax
lea eax, [esp + 0x17c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x18c]
mov ebp, dword [esp + 0x190]
mov dword [esp + 0x30], eax
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x34]
push ecx
call fcn.0040d5c0
xor esi, esi
lea eax, [esp + 0x34]
mov dword [esp + 0x184], esi
call fcn.0047f830
mov edx, dword [0x6285c4]
mov eax, dword [edx + 0xc]
mov ecx, 0x6285c4
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], esi
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x194]
push ecx
lea ebx, [esp + 0x38]
mov byte [esp + 0x188], 1
call fcn.0048dc80
mov ecx, dword [eax]
xor ebx, ebx
mov eax, ecx
mov dword [esp + 0x170], 0xf
mov dword [esp + 0x16c], ebx
mov byte [esp + 0x15c], bl
lea esi, [eax + 1]
jmp 0x480e90
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x480e90
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x160]
call fcn.00409ea0
push edi
push 1
push 0x2710
push 2
lea edx, [esp + 0x24]
push edx
sub esp, 0x1c
mov ecx, esp
mov byte [esp + 0x1b4], 2
mov dword [esp + 0x5c], esp
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x190]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push eax
xor esi, esi
mov byte [ecx + 4], bl
call fcn.00409ca0
mov edx, dword [esp + 0x60]
mov ecx, esi
call fcn.004800a0
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], ebx
jl 0x480f1d
push str.failed:_No_such_file
push eax
call fcn.004f7373
add esp, 8
cmp eax, ebx
je 0x480f1d
sub eax, dword [esp + 0x1c]
sar eax, 1
js 0x480f1d
lea esi, [esp + 0x1c]
call fcn.00406ae0
cmp dword [esp + 0x170], 0x10
mov ecx, dword [esp + 0x15c]
jae 0x480f35
lea ecx, [esp + 0x15c]
lea edx, [esp + 0x28]
push edx
call fcn.004104a0
mov ebx, 3
mov byte [esp + 0x184], bl
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x58]
push ebx
mov dword [esp + 0x58], eax
push ecx
lea eax, [esp + 0x5c]
call fcn.00410760
lea edx, [esp + 0x2c]
mov byte [esp + 0x184], 4
mov ecx, dword [esp + 0x54]
push edx
call fcn.004066b0
mov byte [esp + 0x184], bl
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x58]
cmp eax, ecx
je 0x480f94
push eax
call fcn.004f6d01
add esp, 4
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x480fb4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x184], 2
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x480fdc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ebx, [esp + 0x1c]
call fcn.00406f40
call fcn.00406ec0
mov eax, dword [esp + 0x194]
test al, 2
je 0x481044
mov esi, dword [esp + 0x1c]
lea eax, [ebp + 0x14]
mov edx, 0x40
sub esi, eax
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x481023
movzx ecx, word [esi + eax]
test cx, cx
je 0x481023
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481003
jmp 0x481027
test edx, edx
jne 0x48102a
sub eax, 2
mov edi, dword [esp + 0x30]
xor edx, edx
mov word [eax], dx
add edi, 8
lea eax, [esp + 0x1c]
call fcn.00406fe0
jmp 0x4816ec
test al, 8
je 0x48108b
mov esi, dword [esp + 0x1c]
add ebp, 0x408
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481060
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481060
jmp 0x4816e4
test al, 0x10
je 0x4810bc
mov eax, dword [esp + 0x1c]
push eax
call fcn.004f7d3f
mov ecx, eax
add esp, 4
mov dword [ebp + 0x10], ecx
cmp ecx, 0x64
jbe 0x4816ec
mov eax, 0xcccccccd
mul ecx
shr edx, 3
mov dword [ebp + 0x10], edx
jmp 0x4816ec
test al, 0x20
jne 0x4816ec
test al, al
jns 0x4810dd
add ebp, 0x258
push ebp
lea ecx, [esp + 0x20]
call fcn.0048c870
jmp 0x4816ec
test eax, 0x100
je 0x4810f9
add ebp, 0x268
push ebp
lea ecx, [esp + 0x20]
call fcn.0048c870
jmp 0x4816ec
test eax, 0x800
je 0x481115
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004f7d3f
add esp, 4
mov dword [ebp + 8], eax
jmp 0x4816ec
test eax, 0x1000
je 0x48122f
mov edx, dword [esp + 0x1c]
cmp dword [edx - 0xc], 0
jne 0x4811dd
push edi
push 1
push 0x2710
push 2
lea eax, [esp + 0x24]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x5c], esp
push str.shell:dumpsys__iphonesubinfo_
xor esi, esi
call fcn.00409af0
mov edx, dword [esp + 0x60]
mov ecx, esi
call fcn.004800a0
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], esi
jl 0x4811dd
push str.Device_ID_
push eax
call fcn.004f7373
add esp, 8
test eax, eax
je 0x4811dd
sub eax, dword [esp + 0x1c]
sar eax, 1
mov edi, eax
test edi, edi
jle 0x4811dd
add edi, 0xb
mov ecx, edi
mov edx, 0x5d963c
lea esi, [esp + 0x1c]
call fcn.00406a50
cmp eax, edi
jle 0x4811dd
mov ecx, esi
push ecx
sub eax, edi
mov ecx, edi
lea edx, [esp + 0x2c]
call fcn.0040d440
lea eax, [esp + 0x28]
mov edi, esi
mov byte [esp + 0x184], 5
call fcn.00406fe0
mov ebx, esi
call fcn.00406ec0
mov ebx, eax
call fcn.00406f40
lea ecx, [esp + 0x28]
mov byte [esp + 0x184], 2
call fcn.00406760
mov esi, dword [esp + 0x1c]
add ebp, 0x94
mov edx, 0x40
mov eax, ebp
sub esi, ebp
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x481210
movzx ecx, word [esi + eax]
test cx, cx
je 0x481210
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4811f0
jmp 0x481214
test edx, edx
jne 0x481217
sub eax, 2
xor edx, edx
push ebp
push str._CAdbClient::adb_GetBaseInfo
mov word [eax], dx
call fcn.0049d036
add esp, 8
jmp 0x4816ec
test eax, 0x2000
je 0x48124b
mov eax, dword [esp + 0x1c]
push eax
call fcn.004f7d3f
add esp, 4
mov dword [ebp + 0xc], eax
jmp 0x4816ec
test eax, 0x4000
je 0x48129b
mov esi, dword [esp + 0x1c]
add ebp, 0x2618
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481270
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481270
jmp 0x4816e4
test eax, 0x8000
je 0x4812eb
mov esi, dword [esp + 0x1c]
add ebp, 0x2508
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x4812c0
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4812c0
jmp 0x4816e4
test eax, 0x10000
je 0x48133b
mov esi, dword [esp + 0x1c]
add ebp, 0x2588
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481310
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481310
jmp 0x4816e4
test eax, 0x20000
je 0x48138b
mov esi, dword [esp + 0x1c]
add ebp, 0x2728
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481360
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481360
jmp 0x4816e4
test eax, 0x40000
je 0x4813db
mov esi, dword [esp + 0x1c]
add ebp, 0x194
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x4813b0
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4813b0
jmp 0x4816e4
test eax, 0x80000
je 0x48142b
mov esi, dword [esp + 0x1c]
add ebp, 0x27a8
mov edx, 0xc0
mov eax, ebp
sub esi, ebp
jmp 0x481400
lea ecx, [edx + 0x7fffff3e]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481400
jmp 0x4816e4
test eax, 0x100000
je 0x48147b
mov esi, dword [esp + 0x1c]
add ebp, 0x2a2c
mov edx, 0xc0
mov eax, ebp
sub esi, ebp
jmp 0x481450
lea ecx, [edx + 0x7fffff3e]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481450
jmp 0x4816e4
test eax, 0x200000
je 0x4814cb
mov esi, dword [esp + 0x1c]
add ebp, 0x114
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x4814a0
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4814a0
jmp 0x4816e4
test eax, 0x400000
je 0x48151b
mov esi, dword [esp + 0x1c]
add ebp, 0x2bac
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x4814f0
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4814f0
jmp 0x4816e4
test eax, 0x800000
je 0x48156b
mov esi, dword [esp + 0x1c]
add ebp, 0x2c2c
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481540
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481540
jmp 0x4816e4
test eax, 0x1000000
je 0x4815bb
mov esi, dword [esp + 0x1c]
add ebp, 0x2cac
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481590
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481590
jmp 0x4816e4
test eax, 0x2000000
je 0x48160b
mov esi, dword [esp + 0x1c]
add ebp, 0x2d2c
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x4815e0
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4815e0
jmp 0x4816e4
test eax, 0x4000000
je 0x48165b
mov esi, dword [esp + 0x1c]
add ebp, 0x2dac
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481630
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481630
jmp 0x4816e4
test eax, 0x8000000
je 0x4816a4
mov esi, dword [esp + 0x1c]
add ebp, 0x2e2c
mov edx, 0x40
mov eax, ebp
sub esi, ebp
jmp 0x481680
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x481680
jmp 0x4816e4
test eax, 0x10000000
je 0x4816ec
mov esi, dword [esp + 0x1c]
add ebp, 0x2eac
mov edx, 0x40
mov eax, ebp
sub esi, ebp
mov edi, edi
lea ecx, [edx + 0x7fffffbe]
test ecx, ecx
je 0x4816e0
movzx ecx, word [esi + eax]
test cx, cx
je 0x4816e0
mov word [eax], cx
add eax, 2
sub edx, 1
jne 0x4816c0
jmp 0x4816e4
test edx, edx
jne 0x4816e7
sub eax, 2
xor edx, edx
mov word [eax], dx
cmp dword [esp + 0x170], 0x10
jb 0x481706
mov eax, dword [esp + 0x15c]
push eax
call fcn.004f6734
add esp, 4
xor eax, eax
mov dword [esp + 0x16c], eax
mov byte [esp + 0x15c], al
mov byte [esp + 0x184], al
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x170], 0xf
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x481748
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x188], 0xffffffff
call fcn.004991f0
mov eax, 1
mov ecx, dword [esp + 0x17c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x160]
xor ecx, esp
call fcn.004f673f
add esp, 0x174
ret 0xc