Function at 0x45fff0
Capabilities:
Check if file exists
Create thread
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6a42f2
mov eax, dword fs:[0]
push eax
mov eax, 0x2538
call fcn.00666cc0
mov eax, dword [0x7e2670]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24f8], ecx
cmp dword [0x7c39ec], 0x50
je 0x460049
cmp dword [0x7c39ec], 0x70
je 0x460049
cmp dword [0x7c39ec], 0x7d
je 0x460049
cmp dword [0x7c39ec], 0x24
jne 0x460050
xor eax, eax
jmp 0x4618db
mov dword [ebp - 0x10], 0
mov byte [ebp - 0x7e], 0
mov dword [ebp - 0x10], 0
jmp 0x46006d
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x41
jae 0x460091
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx edx, al
test edx, edx
je 0x46008f
mov byte [ebp - 0x7e], 1
jmp 0x460091
jmp 0x460064
movzx eax, byte [ebp - 0x7e]
test eax, eax
jne 0x4600a0
xor eax, eax
jmp 0x4618db
push str.Begin_befor_SP_paydroid_task_n
call fcn.0066610b
add esp, 4
mov byte [0x7e46a4], 0
mov byte [0x7e46a5], 0
mov byte [ebp - 0x15], 0
mov byte [ebp - 0x7d], 0
mov byte [0x7e46a6], 0
cmp dword [0x7c39ec], 0x2b
je 0x46010d
cmp dword [0x7c39ec], 0x2d
je 0x46010d
cmp dword [0x7c39ec], 0x32
je 0x46010d
push 9
call fcn.00512690
add esp, 4
movsx ecx, al
cmp ecx, 0x31
jne 0x460114
push 0x6ea40c
push 0x7e47e8
call fcn.00404520
add esp, 8
test eax, eax
je 0x460114
mov byte [0x7e46a4], 1
mov dword [ebp - 0x7c], 0x29
mov dword [ebp - 0x78], 0x33
mov dword [ebp - 0x74], 0x35
mov dword [ebp - 0x70], 0x55
mov dword [ebp - 0x6c], 0x69
mov dword [ebp - 0x68], 0x49
mov dword [ebp - 0x64], 0x43
mov dword [ebp - 0x60], 0x47
mov dword [ebp - 0x5c], 0x46
mov dword [ebp - 0x58], 0x52
mov dword [ebp - 0x54], 0x53
mov dword [ebp - 0x50], 0x51
mov dword [ebp - 0x4c], 0x67
mov dword [ebp - 0x48], 0x71
mov dword [ebp - 0x44], 0x6c
mov dword [ebp - 0x40], 0x6f
mov dword [ebp - 0x3c], 0x72
mov dword [ebp - 0x38], 0x76
mov dword [ebp - 0x34], 0x78
mov dword [ebp - 0x30], 0x7a
mov dword [ebp - 0x2c], 0x7b
mov dword [ebp - 0x28], 0x81
mov dword [ebp - 0x24], 0x83
mov dword [ebp - 0x20], 0x84
push 0x6ea410
push 0x7e47e8
call fcn.00404520
add esp, 8
test eax, eax
je 0x4601f4
push 0x18
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [0x7c39ec]
push eax
call fcn.0049fc20
add esp, 0xc
movzx ecx, al
test ecx, ecx
je 0x4601f4
mov byte [0x7e46a5], 1
push 9
call fcn.00512690
add esp, 4
movsx edx, al
cmp edx, 0x35
jne 0x46020d
mov byte [0x7e46a6], 1
mov dword [ebp - 0x14], 0
push 1
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx eax, al
test eax, eax
je 0x460adb
movzx ecx, byte [0x7e46a4]
test ecx, ecx
jne 0x460251
movzx edx, byte [0x7e46a5]
test edx, edx
jne 0x460251
movzx eax, byte [0x7e46a6]
test eax, eax
je 0x460adb
movzx ecx, byte [0x7e46a4]
test ecx, ecx
je 0x460382
push 0x6e868b
push 0x6ea414
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x84], eax
push 0x6e86a9
push 0x6ea418
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x90]
push edx
call fcn.00666cf0
add esp, 4
test eax, eax
jne 0x4602bb
push 0x6e86aa
push 0x6ea420
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x90], eax
push 0x6e86ab
push 0x6ea424
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x8c], eax
push 0x6e86c1
push 0x6ea42c
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x94], eax
push 0x6e86c2
push 0x6ea434
call fcn.005128e0
add esp, 8
mov dword [ebp - 0xc8], eax
push 0x6e86c3
push str.ppqmodelver
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x88], eax
push 0x6e86da
push str.romerase
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0xc4]
call fcn.0041a0d0
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0xc8]
push edx
mov eax, dword [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x90]
push edx
mov eax, dword [ebp - 0x84]
push eax
lea ecx, [ebp - 0xc4]
call fcn.0041a8d0
mov dword [ebp - 0x14], eax
jmp 0x460a7c
movzx ecx, byte [0x7e46a6]
test ecx, ecx
je 0x460437
push 0x6e86db
push 0x6ea454
call fcn.005128e0
add esp, 8
mov dword [ebp - 0xcc], eax
push 0x6e86f7
push 0x6ea458
call fcn.005128e0
add esp, 8
mov dword [ebp - 0xd0], eax
push 0x6e870e
push str.fibocomtype
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0xd0]
push edx
call fcn.00666cf0
add esp, 4
test eax, eax
jne 0x460404
push 0x6e870f
push 0x6ea46c
call fcn.005128e0
add esp, 8
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xfc]
call fcn.0041a0d0
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xd0]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
lea ecx, [ebp - 0xfc]
call fcn.0041ac30
mov dword [ebp - 0x14], eax
jmp 0x460a7c
movzx eax, byte [0x7e46a5]
test eax, eax
je 0x460a7c
push 0x6e8723
push 0x6ea470
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x908]
push ecx
call fcn.00666cf0
add esp, 4
test eax, eax
jne 0x460489
push 0x6e8751
push 0x6ea478
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x908], eax
push 0x6e8752
push 0x6ea47c
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x104], eax
lea ecx, [ebp - 0x934]
call fcn.0041a0d0
mov byte [ebp - 0x904], 0
push 0x7ff
push 0
lea edx, [ebp - 0x903]
push edx
call fcn.006665c0
add esp, 0xc
mov eax, dword [ebp - 0x104]
push eax
push str._s_system_SIG.img_sparse6
lea ecx, [ebp - 0x904]
push ecx
call fcn.0066926d
add esp, 0xc
cmp dword [0x7c39ec], 0x43
je 0x460503
cmp dword [0x7c39ec], 0x47
je 0x460503
cmp dword [0x7c39ec], 0x46
jne 0x4607ce
push 0x6e8753
push 0x6ea49c
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x1138], eax
push 0x800
push 0
lea edx, [ebp - 0x1134]
push edx
call fcn.006665c0
add esp, 0xc
cmp dword [0x7c39ec], 0x46
jne 0x4606bc
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x934]
call fcn.0041ba30
mov dword [ebp - 0x24fc], eax
cmp dword [ebp - 0x24fc], 5
ja case.default.0x460569
mov ecx, dword [ebp - 0x24fc]
jmp dword [ecx*4 + 0x4618f4]
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2488], esp
lea edx, [ebp - 0x904]
push edx
call fcn.0040dbe0
mov dword [ebp - 0x2500], eax
lea ecx, [ebp - 0x934]
call fcn.0041a5f0
mov dword [ebp - 0x2508], eax
mov dword [ebp - 0x2504], edx
mov eax, dword [ebp - 0x2508]
or eax, dword [ebp - 0x2504]
je 0x4605f2
push 0x6ea4a4
lea ecx, [ebp - 0x1134]
push ecx
call fcn.0066926d
add esp, 8
lea edx, [ebp - 0x1134]
push edx
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b670
mov dword [ebp - 0x14], eax
jmp 0x460615
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b4a0
mov dword [ebp - 0x14], eax
jmp 0x4606b7
push str.HeaderCfg8581_Monitor.pac
lea eax, [ebp - 0x1134]
push eax
call fcn.0066926d
add esp, 8
mov ecx, dword [str._binSpreadtrum_8581CmdDloader.exe]
push ecx
lea edx, [ebp - 0x1134]
push edx
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b850
mov dword [ebp - 0x14], eax
jmp 0x4606b7
mov eax, dword [ebp - 0x104]
push eax
push 0x6ea4e0
lea ecx, [ebp - 0x1134]
push ecx
call fcn.0066926d
add esp, 0xc
mov edx, dword [str._binSpreadtrum_8581CmdDloader.exe]
push edx
lea eax, [ebp - 0x1134]
push eax
mov ecx, dword [ebp - 0x1138]
push ecx
mov edx, dword [ebp - 0x908]
push edx
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x934]
call fcn.0041b850
mov dword [ebp - 0x14], eax
jmp 0x4606b7
or eax, 0xffffffff
jmp 0x4618db
jmp 0x4607c9
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x934]
call fcn.0041ba30
test eax, eax
jne 0x46077d
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x248c], esp
lea edx, [ebp - 0x904]
push edx
call fcn.0040dbe0
mov dword [ebp - 0x250c], eax
lea ecx, [ebp - 0x934]
call fcn.0041a5f0
mov dword [ebp - 0x2514], eax
mov dword [ebp - 0x2510], edx
mov eax, dword [ebp - 0x2514]
or eax, dword [ebp - 0x2510]
je 0x460758
push str.Header8541_android8_system6.pac
lea ecx, [ebp - 0x1134]
push ecx
call fcn.0066926d
add esp, 8
lea edx, [ebp - 0x1134]
push edx
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b670
mov dword [ebp - 0x14], eax
jmp 0x46077b
mov eax, dword [ebp - 0x1138]
push eax
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b4a0
mov dword [ebp - 0x14], eax
jmp 0x4607c9
mov eax, dword [ebp - 0x104]
push eax
push 0x6ea518
lea ecx, [ebp - 0x1134]
push ecx
call fcn.0066926d
add esp, 0xc
mov edx, dword [str._binSpreadtrum_8581CmdDloader.exe]
push edx
lea eax, [ebp - 0x1134]
push eax
mov ecx, dword [ebp - 0x1138]
push ecx
mov edx, dword [ebp - 0x908]
push edx
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x934]
call fcn.0041b850
mov dword [ebp - 0x14], eax
jmp 0x460a7c
cmp dword [0x7c39ec], 0x52
jne 0x460828
push 0x6e876a
push 0x6ea530
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x1140], eax
mov dword [ebp - 0x113c], str.HeaderCfg8541_PayDroid_NoMonitor.pac
mov ecx, dword [ebp - 0x113c]
push ecx
mov edx, dword [ebp - 0x1140]
push edx
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x934]
call fcn.0041b670
mov dword [ebp - 0x14], eax
jmp 0x460a7c
cmp dword [0x7c39ec], 0x49
je 0x46083a
cmp dword [0x7c39ec], 0x53
jne 0x4608ab
push 0x6e876b
push 0x6ea560
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x1948], eax
push 0x800
push 0
lea edx, [ebp - 0x1944]
push edx
call fcn.006665c0
add esp, 0xc
push str.HeaderCfg8541_PayDroid.pac
lea eax, [ebp - 0x1944]
push eax
call fcn.0066926d
add esp, 8
lea ecx, [ebp - 0x1944]
push ecx
mov edx, dword [ebp - 0x1948]
push edx
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x934]
call fcn.0041b670
mov dword [ebp - 0x14], eax
jmp 0x460a7c
cmp dword [0x7c39ec], 0x51
je 0x4608bd
cmp dword [0x7c39ec], 0x67
jne 0x460915
push 0x6e8786
push 0x6ea584
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x1950], eax
mov dword [ebp - 0x194c], str.HeaderCfg8581_NoMonitor.pac
mov edx, dword [str._binSpreadtrum_8581CmdDloader.exe]
push edx
mov eax, dword [ebp - 0x194c]
push eax
mov ecx, dword [ebp - 0x1950]
push ecx
mov edx, dword [ebp - 0x908]
push edx
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x934]
call fcn.0041b850
mov dword [ebp - 0x14], eax
jmp 0x460a7c
cmp dword [0x7c39ec], 0x55
je 0x460930
cmp dword [0x7c39ec], 0x69
je 0x460930
cmp dword [0x7c39ec], 0x76
jne 0x460981
push 0x6e8787
push 0x6ea5a8
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x1958], eax
mov dword [ebp - 0x1954], str.HeaderCfg8581e.pac
mov ecx, dword [ebp - 0x1954]
push ecx
mov edx, dword [ebp - 0x1958]
push edx
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x934]
call fcn.0041b670
mov dword [ebp - 0x14], eax
jmp 0x460a7c
cmp dword [0x7c39ec], 0x6c
je 0x4609e4
cmp dword [0x7c39ec], 0x6f
je 0x4609e4
cmp dword [0x7c39ec], 0x71
je 0x4609e4
cmp dword [0x7c39ec], 0x72
je 0x4609e4
cmp dword [0x7c39ec], 0x78
je 0x4609e4
cmp dword [0x7c39ec], 0x7a
je 0x4609e4
cmp dword [0x7c39ec], 0x7b
je 0x4609e4
cmp dword [0x7c39ec], 0x81
je 0x4609e4
cmp dword [0x7c39ec], 0x83
je 0x4609e4
cmp dword [0x7c39ec], 0x84
jne 0x460a60
push 0x6e87a2
push 0x6ea5c4
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2160], eax
push 0x800
push 0
lea edx, [ebp - 0x215c]
push edx
call fcn.006665c0
add esp, 0xc
mov eax, dword [ebp - 0x104]
push eax
push str._spax_sprd_scatter.cfg
lea ecx, [ebp - 0x215c]
push ecx
call fcn.0066926d
add esp, 0xc
mov edx, dword [str._binSpreadtrum_8581CmdDloader.exe]
push edx
lea eax, [ebp - 0x215c]
push eax
mov ecx, dword [ebp - 0x2160]
push ecx
mov edx, dword [ebp - 0x908]
push edx
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x934]
call fcn.0041b850
mov dword [ebp - 0x14], eax
jmp 0x460a7c
mov ecx, dword [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x104]
push edx
lea ecx, [ebp - 0x934]
call fcn.0041b2e0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x460a9f
mov eax, dword [0x7c2aa4]
push eax
push 0x6ea5e4
call fcn.004a4410
add esp, 8
mov eax, dword [ebp - 0x14]
jmp 0x4618db
mov ecx, dword [0x7c2aa4]
push ecx
push 0x6ea5f0
call fcn.004a4410
add esp, 8
cmp dword [0x7c39ec], 0x2b
jne 0x460adb
movzx edx, byte [0x7e46a4]
test edx, edx
je 0x460adb
mov eax, dword [ebp - 0x24f8]
mov dword [eax], 1
mov eax, dword [ebp - 0x14]
jmp 0x4618db
push 2
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx ecx, al
test ecx, ecx
je 0x460cb4
mov edx, dword [str.dlawfirmpack]
push edx
push 0x6ea5fc
call fcn.004a4410
add esp, 8
push 0x6e87a3
push str.awfirmpack
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2164], eax
push 0x6e87dd
push str.efusemode
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2168], eax
push 9
call fcn.00512690
add esp, 4
movsx eax, al
cmp eax, 0x33
je 0x460b5b
push 9
call fcn.00512690
add esp, 4
movsx ecx, al
cmp ecx, 0x42
jne 0x460bb9
lea ecx, [ebp - 0x2194]
call fcn.0041a0d0
push 9
call fcn.00512690
add esp, 4
movsx edx, al
cmp edx, 0x42
jne 0x460b98
push 1
mov eax, dword [ebp - 0x2168]
push eax
mov ecx, dword [ebp - 0x2164]
push ecx
lea ecx, [ebp - 0x2194]
call fcn.0041a2b0
mov dword [ebp - 0x14], eax
jmp 0x460bb4
push 0
push 0x6ea620
mov edx, dword [ebp - 0x2164]
push edx
lea ecx, [ebp - 0x2194]
call fcn.0041a2b0
mov dword [ebp - 0x14], eax
jmp 0x460c6d
push 9
call fcn.00512690
add esp, 4
movsx eax, al
cmp eax, 0x30
je 0x460bdd
push 1
call fcn.00512690
add esp, 4
movsx ecx, al
cmp ecx, 0x34
jne 0x460c3d
push 0x6e87de
push str.awreboot
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x21c8], eax
push 0x6e87df
push 0x6ea630
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x21c4], eax
lea ecx, [ebp - 0x21c0]
call fcn.0041a0d0
mov edx, dword [ebp - 0x21c4]
push edx
mov eax, dword [ebp - 0x21c8]
push eax
mov ecx, dword [ebp - 0x2164]
push ecx
lea ecx, [ebp - 0x21c0]
call fcn.0041a150
mov dword [ebp - 0x14], eax
jmp 0x460c6d
push str.ppqConfig_param_error._r_n
call fcn.0066610b
add esp, 4
mov dword [ebp - 0x14], 0xffffffff
mov edx, dword [str.dlawfirmpack]
push edx
push 0x6ea654
call fcn.004a4410
add esp, 8
mov eax, dword [ebp - 0x14]
jmp 0x4618db
push 2
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe90
test eax, eax
je 0x460ca0
mov ecx, dword [str.dlawfirmpack]
push ecx
push 0x6ea660
call fcn.004a4410
add esp, 8
mov eax, dword [ebp - 0x14]
jmp 0x4618db
mov edx, dword [str.dlawfirmpack]
push edx
push 0x6ea66c
call fcn.004a4410
add esp, 8
mov ecx, dword [ebp - 0x24f8]
call fcn.00467280
movzx eax, al
test eax, eax
je 0x4614e2
mov dword [ebp - 0x2214], 0x49
mov dword [ebp - 0x2210], 0x43
mov dword [ebp - 0x220c], 0x47
mov dword [ebp - 0x2208], 0x46
mov dword [ebp - 0x2204], 0x52
mov dword [ebp - 0x2200], 0x53
mov dword [ebp - 0x21fc], 0x51
mov dword [ebp - 0x21f8], 0x67
mov dword [ebp - 0x21f4], 0x71
mov dword [ebp - 0x21f0], 0x6c
mov dword [ebp - 0x21ec], 0x6f
mov dword [ebp - 0x21e8], 0x72
mov dword [ebp - 0x21e4], 0x78
mov dword [ebp - 0x21e0], 0x7a
mov dword [ebp - 0x21dc], 0x7b
mov dword [ebp - 0x21d8], 0x81
lea ecx, [ebp - 0x2240]
call fcn.0041a0d0
push 0x6e87f7
push 0x6ea678
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x21cc], eax
push 0x10
lea ecx, [ebp - 0x2214]
push ecx
mov edx, dword [0x7c39ec]
push edx
call fcn.0049fc20
add esp, 0xc
movzx eax, al
test eax, eax
je 0x4613fa
mov ecx, dword [ebp - 0x21cc]
push ecx
lea ecx, [ebp - 0x2240]
call fcn.0041ba30
cmp eax, 3
jge 0x4613fa
push 0x6e886d
push 0x6ea67c
call fcn.005128e0
add esp, 8
push eax
lea ecx, [ebp - 0x2244]
call fcn.0040dbe0
mov dword [ebp - 4], 0
push 0x6e886e
lea ecx, [ebp - 0x2248]
call fcn.0040dbe0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2244]
push edx
push 0x6ea680
lea eax, [ebp - 0x2248]
push eax
call fcn.004017f0
add esp, 0xc
lea ecx, [ebp - 0x2248]
call fcn.00489570
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x4613d9
lea ecx, [ebp - 0x2260]
call fcn.0054ac10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.0054ac10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.0054ac10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2260]
call fcn.00455110
lea ecx, [ebp - 0x2288]
call fcn.00455110
lea ecx, [ebp - 0x2278]
call fcn.00455110
lea ecx, [ebp - 0x2250]
call fcn.00401490
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.00401490
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2244]
push ecx
push 0x6ea690
lea edx, [ebp - 0x2250]
push edx
call fcn.004017f0
add esp, 0xc
lea eax, [ebp - 0x2288]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x2490], esp
lea edx, [ebp - 0x2250]
push edx
call fcn.004014b0
mov dword [ebp - 0x2518], eax
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fc40
mov dword [ebp - 0x251c], eax
cmp dword [ebp - 0x251c], 0xffffffff
jne 0x460f8f
push 0x6ea6b0
call fcn.0066610b
add esp, 4
mov dword [ebp - 0x2494], 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.004014d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2250]
call fcn.004014d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.00454ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.00454ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2260]
call fcn.00454ee0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2248]
call fcn.004014d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2244]
call fcn.004014d0
mov eax, dword [ebp - 0x2494]
jmp 0x4618db
mov eax, dword [ebp - 0x2244]
push eax
push 0x6ea700
lea ecx, [ebp - 0x2264]
push ecx
call fcn.004017f0
add esp, 0xc
lea edx, [ebp - 0x2278]
push edx
push ecx
mov ecx, esp
mov dword [ebp - 0x2498], esp
lea eax, [ebp - 0x2264]
push eax
call fcn.004014b0
mov dword [ebp - 0x2520], eax
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fc40
mov dword [ebp - 0x2524], eax
cmp dword [ebp - 0x2524], 0xffffffff
jne 0x461078
push 0x6ea720
call fcn.0066610b
add esp, 4
mov dword [ebp - 0x249c], 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.004014d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2250]
call fcn.004014d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.00454ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.00454ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2260]
call fcn.00454ee0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2248]
call fcn.004014d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2244]
call fcn.004014d0
mov eax, dword [ebp - 0x249c]
jmp 0x4618db
lea ecx, [ebp - 0x24ac]
push ecx
lea ecx, [ebp - 0x2260]
call fcn.004e04e0
mov edx, dword [eax]
mov dword [ebp - 0x24a8], edx
lea eax, [ebp - 0x24a0]
push eax
lea ecx, [ebp - 0x2288]
call fcn.004e04e0
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x24a4]
push edx
lea ecx, [ebp - 0x2288]
call fcn.00454f40
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x24a8]
push ecx
lea ecx, [ebp - 0x2260]
call fcn.00469260
lea edx, [ebp - 0x24bc]
push edx
lea ecx, [ebp - 0x2260]
call fcn.004e04e0
mov eax, dword [eax]
mov dword [ebp - 0x24b8], eax
lea ecx, [ebp - 0x24b0]
push ecx
lea ecx, [ebp - 0x2278]
call fcn.004e04e0
mov edx, dword [eax]
push edx
lea eax, [ebp - 0x24b4]
push eax
lea ecx, [ebp - 0x2278]
call fcn.00454f40
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x24b8]
push edx
lea ecx, [ebp - 0x2260]
call fcn.00469260
push 0x6ea758
lea ecx, [ebp - 0x24c0]
call fcn.0040dbe0
mov byte [ebp - 4], 7
lea eax, [ebp - 0x24c0]
push eax
lea ecx, [ebp - 0x2260]
call fcn.00454fa0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x24c0]
call fcn.004014d0
push 0x6ea76c
lea ecx, [ebp - 0x2250]
call fcn.00489570
push eax
call fcn.00669fd1
add esp, 8
mov dword [ebp - 0x224c], eax
cmp dword [ebp - 0x224c], 0
je 0x46120e
lea ecx, [ebp - 0x228c]
push ecx
lea ecx, [ebp - 0x2260]
call fcn.00454f40
jmp 0x4611a4
lea ecx, [ebp - 0x228c]
call fcn.00455700
lea edx, [ebp - 0x24c4]
push edx
lea ecx, [ebp - 0x2260]
call fcn.004e04e0
push eax
lea ecx, [ebp - 0x228c]
call fcn.004866e0
movzx eax, al
test eax, eax
je 0x4611ed
lea ecx, [ebp - 0x228c]
call fcn.00406590
mov ecx, eax
call fcn.00489570
push eax
mov ecx, dword [ebp - 0x224c]
push ecx
call fcn.0066b880
add esp, 8
jmp 0x461199
mov edx, dword [ebp - 0x224c]
push edx
call fcn.00669ba2
add esp, 4
push 0x6ea770
call fcn.0066610b
add esp, 4
jmp 0x46129c
push 0x6ea7a4
call fcn.0066610b
add esp, 4
mov dword [ebp - 0x24c8], 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.004014d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2250]
call fcn.004014d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.00454ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.00454ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2260]
call fcn.00454ee0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2248]
call fcn.004014d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2244]
call fcn.004014d0
mov eax, dword [ebp - 0x24c8]
jmp 0x4618db
push 0x6ea7e0
lea ecx, [ebp - 0x2248]
call fcn.00489570
push eax
call fcn.00669fd1
add esp, 8
mov dword [ebp - 0x2268], eax
cmp dword [ebp - 0x2268], 0
je 0x4612f9
push 0x6ea7e4
mov eax, dword [ebp - 0x2268]
push eax
call fcn.0066b880
add esp, 8
push 0x6ea824
call fcn.0066610b
add esp, 4
mov ecx, dword [ebp - 0x2268]
push ecx
call fcn.00669ba2
add esp, 4
jmp 0x46138e
mov edx, dword [0x7c2aa4]
push edx
push 0x6ea848
call fcn.004a4410
add esp, 8
mov dword [ebp - 0x24cc], 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.004014d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2250]
call fcn.004014d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.00454ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.00454ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2260]
call fcn.00454ee0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2248]
call fcn.004014d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2244]
call fcn.004014d0
mov eax, dword [ebp - 0x24cc]
jmp 0x4618db
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2264]
call fcn.004014d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2250]
call fcn.004014d0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2278]
call fcn.00454ee0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2288]
call fcn.00454ee0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2260]
call fcn.00454ee0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2248]
call fcn.004014d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2244]
call fcn.004014d0
push 0x7e468c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x6ea854
push 0x6ea864
call fcn.0066610b
add esp, 8
push str.dlfastbootTask
push 0x6ea880
call fcn.0066610b
add esp, 8
push 0
push 0
push 0
push 0x467370
push 0
push 0
call fcn.0066a64b
add esp, 0x18
mov dword [ebp - 0x21d4], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x21d4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [ebp - 0x21d0]
push ecx
mov edx, dword [ebp - 0x21d4]
push edx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x21d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x21d4], 0
push 0x7e468c
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [ebp - 0x21d0], 0xffffffff
je 0x4614c0
cmp dword [ebp - 0x21d0], 0
je 0x4614b1
mov ecx, dword [ebp - 0x21d0]
push ecx
push str.Has__d_device_dlfastbootTask_fail._r_n
call fcn.0066610b
add esp, 8
push str.dlfastbootTask100___r_n
call fcn.0066610b
add esp, 4
jmp 0x4614e2
push str.All_device_dlfastbootTask_fail._r_n
call fcn.0066610b
add esp, 4
push str.dlfastbootTaskFAIL_r_n
call fcn.0066610b
add esp, 4
or eax, 0xffffffff
jmp 0x4618db
push 0
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx edx, al
test edx, edx
je 0x46165a
mov eax, dword [0x7c2aa0]
push eax
push 0x6ea908
call fcn.004a4410
add esp, 8
push 0x6e886f
push 0x6ea914
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2290], eax
mov ecx, dword [ebp - 0x2290]
push ecx
call fcn.00666cf0
add esp, 4
test eax, eax
jne 0x461550
push 0x6e888e
push 0x6ea91c
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2290], eax
push 0x6e888f
push 0x6ea920
call fcn.005128e0
add esp, 8
mov dword [ebp - 0x2294], eax
lea ecx, [ebp - 0x22a4]
call fcn.00412bd0
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x2294]
push edx
mov eax, dword [ebp - 0x2290]
push eax
lea ecx, [ebp - 0x22a4]
call fcn.00412cb0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4615d6
mov ecx, dword [0x7c2aa0]
push ecx
push 0x6ea92c
call fcn.004a4410
add esp, 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x24d0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22a4]
call fcn.00412c80
mov eax, dword [ebp - 0x24d0]
jmp 0x4618db
lea ecx, [ebp - 0x22a4]
call fcn.00412f60
mov dword [ebp - 0x14], eax
push 0
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe90
test eax, eax
je 0x461635
mov ecx, dword [0x7c2aa0]
push ecx
push 0x6ea938
call fcn.004a4410
add esp, 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x24d4], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22a4]
call fcn.00412c80
mov eax, dword [ebp - 0x24d4]
jmp 0x4618db
mov eax, dword [0x7c2aa0]
push eax
push 0x6ea944
call fcn.004a4410
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22a4]
call fcn.00412c80
push 0x27
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx ecx, al
test ecx, ecx
je 0x4617a8
mov edx, dword [0x7c2b3c]
push edx
push 0x6ea950
call fcn.004a4410
add esp, 8
push 4
call fcn.00576bc2
add esp, 4
mov dword [ebp - 0x24dc], eax
mov dword [ebp - 4], 9
cmp dword [ebp - 0x24dc], 0
je 0x4616eb
push 0x6e88a2
push 0x6ea95c
call fcn.005128e0
add esp, 4
mov ecx, esp
mov dword [ebp - 0x24e0], esp
push eax
call fcn.0040dbe0
mov dword [ebp - 0x2528], eax
mov ecx, dword [ebp - 0x24dc]
call fcn.0046c670
mov dword [ebp - 0x252c], eax
mov eax, dword [ebp - 0x252c]
mov dword [ebp - 0x2530], eax
jmp 0x4616f5
mov dword [ebp - 0x2530], 0
mov ecx, dword [ebp - 0x2530]
mov dword [ebp - 0x24d8], ecx
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x24d8]
mov dword [ebp - 0x22a8], edx
mov ecx, dword [ebp - 0x22a8]
call fcn.0046c6f0
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x22a8]
mov dword [ebp - 0x24e8], eax
mov ecx, dword [ebp - 0x24e8]
mov dword [ebp - 0x24e4], ecx
cmp dword [ebp - 0x24e4], 0
je 0x461758
push 1
mov ecx, dword [ebp - 0x24e4]
call fcn.00468d50
mov dword [ebp - 0x2534], eax
jmp 0x461762
mov dword [ebp - 0x2534], 0
push 0x27
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe90
test eax, eax
je 0x461794
mov eax, dword [0x7c2b3c]
push eax
push 0x6ea968
call fcn.004a4410
add esp, 8
mov eax, dword [ebp - 0x14]
jmp 0x4618db
mov ecx, dword [0x7c2b3c]
push ecx
push 0x6ea974
call fcn.004a4410
add esp, 8
push 0x1a
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe00
movzx edx, al
test edx, edx
je 0x4618d9
mov eax, dword [str.startprolinser]
push eax
push 0x6ea980
call fcn.004a4410
add esp, 8
push 0x6e88a3
push 0x6ea98c
call fcn.005128e0
add esp, 4
mov ecx, esp
mov dword [ebp - 0x24ec], esp
push eax
call fcn.0040dbe0
mov dword [ebp - 0x2538], eax
mov ecx, dword [ebp - 0x2538]
mov dword [ebp - 0x253c], ecx
mov dword [ebp - 4], 0xa
push 0x6e88bd
push 0x6ea990
call fcn.005128e0
add esp, 4
mov ecx, esp
mov dword [ebp - 0x24f0], esp
push eax
call fcn.0040dbe0
mov dword [ebp - 0x2540], eax
mov edx, dword [0x7c39ec]
push edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2484]
call fcn.0041ef20
mov dword [ebp - 0x2544], eax
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x2484]
call fcn.004490d0
mov dword [ebp - 0x14], eax
push 0x1a
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x24f8]
call fcn.0045fe90
test eax, eax
je 0x4618b4
mov ecx, dword [str.startprolinser]
push ecx
push 0x6ea998
call fcn.004a4410
add esp, 8
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x24f4], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2484]
call fcn.0041f340
mov eax, dword [ebp - 0x24f4]
jmp 0x4618db
mov eax, dword [str.startprolinser]
push eax
push 0x6ea9a4
call fcn.004a4410
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2484]
call fcn.0041f340
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.006665ac
mov esp, ebp
pop ebp
ret