Function at 0x440250
Capabilities:
Get disk information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x478cf5
mov eax, dword fs:[0]
push eax
sub esp, 0x508
mov eax, dword [0x49ef38]
xor eax, esp
mov dword [esp + 0x504], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49ef38]
xor eax, esp
push eax
lea eax, [esp + 0x51c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x52c]
push edi
push 0x48572c
call fcn.004031a0
add esp, 8
push edi
mov ecx, 0x49f1c8
call fcn.004208f0
mov esi, eax
xor ebx, ebx
cmp esi, ebx
je 0x4402c6
mov ecx, esi
call fcn.004086f0
mov ecx, esi
call fcn.00408980
jmp 0x442795
push edi
call fcn.00429130
mov esi, eax
add esp, 4
cmp esi, ebx
jbe 0x44040b
mov dword [esp + 0x20], ebx
lea eax, [esp + 0x68]
push eax
push 0x47d9f4
push 0x17
push ebx
push 0x47e28c
mov dword [esp + 0x538], ebx
mov dword [esp + 0x64], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jl 0x44033e
mov ecx, dword [esp + 0x68]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov edi, eax
cmp edi, ebx
jl 0x44032e
mov eax, dword [esp + 0x68]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x50]
push ecx
push 0x47df78
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x440356
xor eax, eax
cmp edi, ebx
mov dword [esp + 0x50], eax
jge 0x44035a
cmp edi, 0x80004002
je 0x44035a
push edi
call fcn.004633e0
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 1
cmp eax, ebx
jne 0x440370
push 0x80004003
call fcn.004633e0
mov edi, dword [eax]
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
add edi, 0x24
call ebp
push eax
mov eax, dword [edi]
push ebx
call eax
mov ebx, dword [esp + 0x50]
test ebx, ebx
jne 0x440397
push 0x80004003
call fcn.004633e0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4403a7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x20], 0
mov edi, dword [ebx]
lea eax, [esp + 0x20]
push eax
add edi, 0x20
call ebp
mov ecx, dword [esp + 0x530]
mov edx, dword [edi]
push eax
push ecx
push ebx
call edx
mov ecx, dword [esp + 0x20]
xor ebp, ebp
cmp ecx, ebp
sete al
test al, al
je 0x440415
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 0
cmp eax, ebp
je 0x4403f4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x524], 0xffffffff
cmp ecx, ebp
je 0x44040b
mov eax, dword [ecx]
push ecx
mov ecx, dword [eax + 8]
call ecx
mov eax, 0x490
jmp 0x442797
mov edx, dword [0x49f4e4]
mov eax, dword [edx + 0xc]
mov ecx, 0x49f4e4
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x48], ebx
mov eax, dword [esp + 0x20]
mov byte [esp + 0x524], 2
cmp eax, ebp
jne 0x440446
push 0x80004003
call fcn.004633e0
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x78]
cmp eax, ebp
je 0x440483
push eax
lea ecx, [esp + 0x4c]
call fcn.004034b0
mov ecx, dword [esp + 0x78]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebx, dword [esp + 0x48]
push ebx
push str.HARDWAREID
push esi
call fcn.0040ccd0
add esp, 0xc
mov edx, dword [0x49f4e4]
mov eax, dword [edx + 0xc]
mov ecx, 0x49f4e4
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov edi, dword [esp + 0x20]
mov byte [esp + 0x524], 3
cmp edi, ebp
jne 0x4404b4
push 0x80004003
call fcn.004633e0
push 0x47e42c
lea ecx, [esp + 0x40]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 4
cmp eax, ebp
je 0x4404d4
mov eax, dword [eax]
jmp 0x4404d6
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x80]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x524], 3
call fcn.00407910
mov eax, dword [esp + 0x80]
cmp eax, ebp
je 0x44052e
push eax
lea ecx, [esp + 0x70]
call fcn.004034b0
mov ecx, dword [esp + 0x80]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [esp + 0x6c]
push edx
push 0x47e42c
push esi
call fcn.0040ccd0
add esp, 0xc
mov eax, dword [0x49f4e4]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f4e4
call edx
add eax, 0x10
mov dword [esp + 0x64], eax
mov edi, dword [esp + 0x20]
mov byte [esp + 0x524], 5
cmp edi, ebp
jne 0x44055e
push 0x80004003
call fcn.004633e0
push 0x47e55c
lea ecx, [esp + 0x40]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 6
cmp eax, ebp
je 0x44057e
mov eax, dword [eax]
jmp 0x440580
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x7c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x524], 5
call fcn.00407910
mov eax, dword [esp + 0x7c]
cmp eax, ebp
je 0x4405cf
push eax
lea ecx, [esp + 0x68]
call fcn.004034b0
mov ecx, dword [esp + 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [esp + 0x64]
push edx
push 0x47e55c
push esi
call fcn.0040ccd0
add esp, 0xc
push 0x47dd5c
push 0x483cd0
push esi
call fcn.0040ccd0
push 0x47dd5c
push str.USBSTORID
push esi
call fcn.0040ccd0
push 0x47dd5c
push str.DeviceAction
push esi
call fcn.0040ccd0
mov eax, dword [0x49f4e4]
mov edx, dword [eax + 0xc]
add esp, 0x24
mov ecx, 0x49f4e4
call edx
add eax, 0x10
mov dword [esp + 0x60], eax
mov eax, dword [0x49f4e4]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f4e4
mov byte [esp + 0x524], 7
call edx
add eax, 0x10
mov dword [esp + 0x70], eax
push ecx
lea eax, [ebx - 0x10]
mov dword [esp + 0x34], esp
mov edi, esp
push eax
mov byte [esp + 0x52c], 8
mov dword [esp + 0xb8], eax
call fcn.00401530
add eax, 0x10
add esp, 4
mov dword [edi], eax
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x52c], 9
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x52c], 8
call fcn.00416940
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0xa
call fcn.0040ccd0
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4406bf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.false
push str.IsComposite
push esi
call fcn.0040ccd0
mov edx, dword [0x49f4e4]
mov eax, dword [edx + 0xc]
add esp, 0xc
mov ecx, 0x49f4e4
mov dword [esp + 0x14], ebp
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x20]
mov byte [esp + 0x524], 0xb
cmp eax, ebp
jne 0x440707
push 0x80004003
call fcn.004633e0
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x440814
cmp eax, 0x10
je 0x440814
cmp eax, 4
je 0x44073c
cmp eax, 3
je 0x44073c
cmp eax, 0x11
jne 0x44094a
push ecx
lea edx, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
call fcn.00402440
mov byte [esp + 0x528], 0xe
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x528], 0xb
call fcn.00416b30
cmp eax, ebp
mov eax, str.true
jne 0x440777
mov eax, str.false
push eax
push str.IsComposite
push esi
call fcn.0040ccd0
mov edi, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x44079c
push 0x80004003
call fcn.004633e0
push str.StorageName
lea ecx, [esp + 0x44]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0xf
cmp eax, ebp
je 0x4407bc
mov eax, dword [eax]
jmp 0x4407be
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407910
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x30]
call fcn.00406330
mov edx, dword [esp + 0x2c]
push edx
push str.StorageName
push esi
mov byte [esp + 0x530], 0x10
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x2c]
call fcn.00401e10
jmp 0x44094a
mov edi, dword [esp + 0x20]
cmp edi, ebp
jne 0x440826
push 0x80004003
call fcn.004633e0
push str.CONMODES
lea ecx, [esp + 0x44]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0xc
cmp eax, ebp
je 0x440846
mov eax, dword [eax]
jmp 0x440848
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407910
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x64]
call fcn.004034b0
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x60]
push edi
push str.CONMODES
push esi
mov dword [esp + 0x20], ebp
call fcn.0040ccd0
add esp, 0xc
cmp dword [edi - 0xc], ebp
je 0x4408af
push str.true
push str.IsComposite
push esi
call fcn.0040ccd0
add esp, 0xc
mov edi, dword [esp + 0x20]
cmp edi, ebp
jne 0x4408c1
push 0x80004003
call fcn.004633e0
push str.CheckLock
lea ecx, [esp + 0x44]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0xd
cmp eax, ebp
je 0x4408e1
mov eax, dword [eax]
jmp 0x4408e3
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407910
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x74]
call fcn.004034b0
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x70]
push edi
push str.CheckLock
push esi
mov dword [esp + 0x20], ebp
call fcn.0040ccd0
add esp, 0xc
cmp dword [edi - 0xc], ebp
je 0x44094a
push str.true
push str.IsComposite
push esi
call fcn.0040ccd0
add esp, 0xc
lea eax, [ebx - 0x10]
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44096e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x112]
push edx
mov word [esp + 0x114], cx
call sub.MSVCR90.dll_memset
mov eax, dword [0x49f4e4]
mov edx, dword [eax + 0xc]
add esp, 0xc
mov ecx, 0x49f4e4
call edx
add eax, 0x10
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x20]
or ebp, 0xffffffff
mov byte [esp + 0x524], 0x11
mov dword [esp + 0x3c], ebp
test eax, eax
jne 0x4409c5
push 0x80004003
call fcn.004633e0
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
mov eax, dword [esp + 0x44]
cmp eax, 0x10
ja case.0x4409e6.2
movzx ecx, byte [eax + 0x4427dc]
jmp dword [ecx*4 + 0x4427c0]
mov ebp, dword [esp + 0x52c]
lea edx, [esp + 0xa8]
push esi
push edx
call fcn.0042fb10
mov eax, dword [eax]
push eax
push 0x47e47c
push esi
mov byte [esp + 0x538], 0x12
call fcn.0040ccd0
add esp, 0x14
lea ecx, [esp + 0xa8]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
lea eax, [esp + 0xb4]
push esi
push eax
call fcn.0042fc20
mov eax, dword [eax]
push eax
push 0x47e468
push esi
mov byte [esp + 0x538], 0x13
call fcn.0040ccd0
add esp, 0x14
lea ecx, [esp + 0xb4]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
lea ecx, [esp + 0xec]
push esi
push ecx
call fcn.0042fd30
mov eax, dword [eax]
push eax
push 0x47e450
push esi
mov byte [esp + 0x538], 0x14
call fcn.0040ccd0
add esp, 0x14
lea ecx, [esp + 0xec]
call fcn.00401e10
lea ecx, [esp + 0x28]
mov dword [esp + 0x34], 0
call fcn.00402420
mov eax, dword [esp + 0x20]
mov bl, 0x15
mov byte [esp + 0x524], bl
test eax, eax
jne 0x440ac9
push 0x80004003
call fcn.004633e0
push 0x482c2c
lea ecx, [esp + 0xa4]
mov edi, eax
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0x16
test eax, eax
je 0x440aee
mov eax, dword [eax]
jmp 0x440af0
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x34]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0xa0]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x34]
test eax, eax
je 0x440b36
push eax
lea ecx, [esp + 0x2c]
call fcn.004034b0
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor edi, edi
mov dword [esp + 0x34], edi
jmp 0x440b38
xor edi, edi
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], edi
jge 0x440b4b
push 0x80070057
call fcn.00401120
movzx eax, word [eax]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.00419a30
mov ecx, eax
call fcn.00412c60
mov edx, dword [esp + 0x2c]
push edx
push str.USBSTORID
push esi
mov byte [esp + 0x530], 0x17
call fcn.0040ccd0
mov eax, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x1c], edi
mov dword [esp + 0x3c], edi
cmp eax, edi
jne 0x440b95
push 0x80004003
call fcn.004633e0
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
lea edx, [esp + 0x20]
push edx
push eax
mov eax, dword [ecx + 0x7c]
call eax
lea ecx, [esp + 0x38]
call fcn.00402420
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x3c]
push str.COM_d
push edx
mov byte [esp + 0x530], 0x18
call fcn.00402eb0
mov eax, dword [esp + 0x44]
push eax
push str.ModemPort
push esi
call fcn.0040ccd0
add esp, 0x18
lea ecx, [esp + 0x38]
call fcn.00401e10
lea ecx, [esp + 0x2c]
call fcn.00401e10
lea ecx, [esp + 0x28]
jmp 0x441ecd
mov ecx, dword [esp + 0x48]
push ecx
push str.BTADDR
push esi
call fcn.0040ccd0
add esp, 0xc
jmp case.0x4409e6.2
xor ebp, ebp
lea ecx, [esp + 0x34]
mov dword [esp + 0x14], ebp
call fcn.00402420
mov edi, dword [esp + 0x20]
mov bl, 0x19
mov byte [esp + 0x524], bl
cmp edi, ebp
jne 0x440c3c
push 0x80004003
call fcn.004633e0
push 0x482c2c
lea ecx, [esp + 0x88]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0x1a
cmp eax, ebp
je 0x440c5f
mov eax, dword [eax]
jmp 0x440c61
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x84]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x14]
cmp eax, ebp
je 0x440ca3
push eax
lea ecx, [esp + 0x38]
call fcn.004034b0
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], ebp
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 0xc], ebp
jge 0x440cb6
push 0x80070057
call fcn.00401120
mov edx, dword [esp + 0x34]
movzx ebp, word [edx]
mov ecx, dword [0x47ebb4]
mov eax, dword [str..X:]
mov edx, dword [0x47ebb8]
mov dword [esp + 0xfc], ecx
mov ecx, dword [0x47eba8]
mov dword [esp + 0x100], edx
mov edx, dword [0x47ebac]
mov dword [esp + 0xf8], eax
mov ax, word [0x47ebbc]
mov dword [esp + 0xf0], ecx
push 0x47dd5c
lea ecx, [esp + 0x20]
mov word [esp + 0x108], ax
mov dword [esp + 0xf8], edx
mov word [esp + 0x104], bp
mov word [esp + 0xf4], bp
call fcn.00406330
lea eax, [esp + 0x1c]
push eax
push ebp
mov byte [esp + 0x52c], 0x1b
call fcn.00452f60
mov ecx, dword [esp + 0x24]
push ecx
push 0x47e47c
push esi
call fcn.0040ccd0
add esp, 0x14
lea edx, [esp + 0x24]
push ebp
push edx
call fcn.00419a30
mov ecx, eax
call fcn.00412c60
mov eax, dword [esp + 0x24]
push eax
push str.USBSTORID
push esi
mov byte [esp + 0x530], 0x1c
call fcn.0040ccd0
add esp, 0xc
cmp dword [esp + 0x44], 0xe
jne 0x440dc2
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00402440
push 0x47dd5c
push str.EXTERNAL
lea ecx, [esp + 0x30]
mov byte [esp + 0x52c], 0x1d
call fcn.00407b20
mov edx, dword [esp + 0x28]
push edx
push str.USBHARDWAREID
push esi
call fcn.0040ccd0
lea ecx, [esp + 0x34]
jmp 0x440e14
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.00402440
lea ecx, [esp + 0xcc]
push ecx
mov byte [esp + 0x52c], 0x1e
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x52c], 0x1c
call fcn.00416940
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0x1f
call fcn.0040ccd0
lea ecx, [esp + 0xd4]
add esp, 0xc
mov byte [esp + 0x524], 0x1c
call fcn.00401e10
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.00402440
mov byte [esp + 0x528], 0x20
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x528], 0x1c
call fcn.00416b30
mov edi, eax
mov eax, str.true
test edi, edi
jne 0x440e61
mov eax, str.false
push eax
push str.IsComposite
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x50]
add esp, 0xc
cmp eax, 3
jne 0x441337
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.00402440
lea ecx, [esp + 0x90]
push ecx
call fcn.00428f90
mov eax, dword [eax]
push eax
push str.DEVICE_UID
push esi
mov byte [esp + 0x538], 0x21
call fcn.0040ccd0
add esp, 0x14
lea ecx, [esp + 0x8c]
call fcn.00401e10
cmp edi, 1
jne 0x44108a
lea ecx, [esp + 0x18]
call fcn.00402420
lea edx, [esp + 0x18]
push edx
push str.Model_Name
push esi
mov byte [esp + 0x530], 0x22
call fcn.0040ce80
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00407d50
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
jl 0x440f4c
push str.CARD
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
mov ecx, dword [esp + 0x20]
add esp, 8
test eax, eax
je 0x440f24
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jg 0x44101a
cmp dword [ecx - 0xc], 0
jl 0x440f4c
push str.TFLASH
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x440f4c
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, 0xffffffff
jg 0x44101a
lea ecx, [esp + 0x28]
call fcn.00402420
mov edi, dword [esp + 0x20]
mov bl, 0x23
mov byte [esp + 0x524], bl
test edi, edi
jne 0x440f70
push 0x80004003
call fcn.004633e0
push str.IsInternalMemory
lea ecx, [esp + 0xec]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0x24
test eax, eax
je 0x440f93
mov eax, dword [eax]
jmp 0x440f95
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0x524], bl
call fcn.00407910
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.004034b0
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [esp + 0x28]
push str.false
push eax
mov dword [esp + 0x1c], 0
call fcn.004230c0
add esp, 8
test al, al
je 0x440ff4
push str.true
jmp 0x440ff9
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x28]
mov byte [esp + 0x524], 0x22
call fcn.00401e10
jmp 0x44102d
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x24]
call fcn.00407d50
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x441074
jl 0x441074
push str.ANDROID
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x441074
sub eax, dword [esp + 0x24]
sar eax, 1
cmp eax, 0xffffffff
jle 0x441074
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x524], 0x1c
call fcn.00401e10
jmp 0x44137c
lea ecx, [esp + 0x2c]
call fcn.00402420
mov edi, dword [esp + 0x20]
mov bl, 0x25
mov byte [esp + 0x524], bl
test edi, edi
jne 0x4410ae
push 0x80004003
call fcn.004633e0
push str.IsInternalMemory
lea ecx, [esp + 0x98]
call fcn.00406780
mov eax, dword [eax]
mov byte [esp + 0x524], 0x26
test eax, eax
je 0x4410d1
mov eax, dword [eax]
jmp 0x4410d3
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x94]
mov byte [esp + 0x524], bl
call fcn.00407910
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x30]
call fcn.004034b0
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], 0
cmp dword [eax - 0xc], 0
je 0x441144
push eax
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x2c]
mov byte [esp + 0x524], 0x1c
call fcn.00401e10
jmp 0x44137c
lea ecx, [esp + 0x18]
call fcn.00402420
lea eax, [esp + 0x18]
push eax
push str.Model_Name
push esi
mov byte [esp + 0x530], 0x27
call fcn.0040ce80
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00407d50
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
jl 0x4411c7
push str.CARD
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
mov ecx, dword [esp + 0x20]
add esp, 8
test eax, eax
je 0x44119f
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jg 0x44127f
cmp dword [ecx - 0xc], 0
jl 0x4411c7
push str.TFLASH
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x4411c7
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, 0xffffffff
jg 0x44127f
lea ecx, [esp + 0x28]
push ebp
push ecx
call fcn.00419a30
mov ecx, eax
call fcn.00412c60
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
mov byte [esp + 0x52c], 0x28
call fcn.00402440
lea eax, [esp + 0x44]
push eax
call fcn.00428f90
add esp, 4
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x50], esp
mov bl, 0x29
push edx
mov byte [esp + 0x52c], bl
call fcn.00402440
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x7c], esp
push eax
mov byte [esp + 0x530], 0x2a
call fcn.00402440
mov byte [esp + 0x52c], bl
call fcn.00425990
add esp, 8
test eax, eax
jne 0x44124b
push str.true
jmp 0x441255
cmp eax, 1
jne 0x441263
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.00401e10
lea ecx, [esp + 0x28]
mov byte [esp + 0x524], 0x27
call fcn.00401e10
jmp 0x441292
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0x208
lea ecx, [esp + 0x328]
push ecx
lea edx, [esp + 0x10c]
push edx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x44131b
lea eax, [esp + 0x310]
push eax
lea ecx, [esp + 0x2c]
call fcn.00406330
push str.Phone
lea ecx, [esp + 0x2c]
mov byte [esp + 0x528], 0x2b
call fcn.00406950
test eax, eax
jne 0x4412ed
push str.true
jmp 0x441304
push str.Card
lea ecx, [esp + 0x2c]
call fcn.00406950
test eax, eax
jne 0x441312
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x28]
call fcn.00401e10
lea ecx, [esp + 0x18]
call fcn.00401e10
lea ecx, [esp + 0x2c]
mov byte [esp + 0x524], 0x1c
call fcn.00401e10
jmp 0x44137c
cmp eax, 0xe
jne 0x44137c
mov edi, dword [esp + 0x48]
cmp dword [edi - 0xc], 0
jl 0x441362
push str.EXTERNAL
push edi
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x441362
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jne 0x441369
push str.true
jmp 0x44136e
push str.false
push str.IsInternalMemory
push esi
call fcn.0040ccd0
add esp, 0xc
mov ecx, dword [esp + 0x34]
push ecx
push 0x482c2c
push esi
call fcn.0040ccd0
lea edx, [esp + 0x44]
push ebp
push edx
call fcn.004245a0
mov eax, dword [esp + 0x4c]
push eax
push str.ENTIREDRIVE
push esi
mov byte [esp + 0x544], 0x2c
call fcn.0040ccd0
add esp, 0x20
cmp dword [esp + 0x44], 8
jne 0x4417cc
push ebp
lea ecx, [esp + 0xd8]
call fcn.0044bd90
lea ecx, [esp + 0x18]
call fcn.00402420
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0xd8]
mov byte [esp + 0x528], 0x2e
call fcn.0044c080
mov eax, dword [esp + 0x40]
cmp dword [eax - 0xc], 0
mov bl, 0x2f
mov byte [esp + 0x524], bl
je 0x441410
push eax
push str.TwoPhoneMode
push esi
call fcn.0040ccd0
add esp, 0xc
jmp 0x44141e
push str.TwoPhoneMode
push esi
call fcn.0040cdb0
add esp, 8
lea edx, [esp + 0xc4]
push edx
lea ecx, [esp + 0xd8]
call fcn.0044c1c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x30
call fcn.00404480
lea ecx, [esp + 0xc4]
mov byte [esp + 0x524], bl
call fcn.00401e10
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x441518
push eax
push str.TwoPhoneSupport
push esi
call fcn.0040ccd0
add esp, 0xc
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0xd8]
call fcn.0044c240
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x31
call fcn.00404480
lea ecx, [esp + 0x9c]
mov byte [esp + 0x524], bl
call fcn.00401e10
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x4414c6
push eax
push str.TwoPhoneService
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0xd8]
call fcn.0044c2c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x32
call fcn.00404480
lea ecx, [esp + 0xd0]
mov byte [esp + 0x524], bl
call fcn.00401e10
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x441518
push eax
push str.PhoneNumber2
push esi
call fcn.0040ccd0
add esp, 0xc
lea edx, [esp + 0xf8]
push edx
call fcn.00451f20
add esp, 4
test eax, eax
jne 0x441533
push str.true
jmp 0x441538
push str.false
push str.AnycallMusicMode
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x2c]
call fcn.00402420
push 0
lea eax, [esp + 0x30]
push 0x482a00
push eax
mov byte [esp + 0x530], 0x36
call fcn.00402eb0
mov edi, dword [esp + 0x38]
push edi
push str.UMSLockInfo
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x38]
add esp, 0x18
test eax, eax
je 0x4415ef
push edi
lea ecx, [esp + 0xd0]
mov ebx, eax
call fcn.00406780
mov edi, eax
push 0x482c38
lea ecx, [esp + 0xa8]
mov byte [esp + 0x528], 0x37
call fcn.004066f0
mov ecx, dword [edi]
mov byte [esp + 0x524], 0x38
test ecx, ecx
je 0x4415bf
mov ecx, dword [ecx]
jmp 0x4415c1
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x4415cb
mov eax, dword [eax]
jmp 0x4415cd
xor eax, eax
mov edx, dword [ebx]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push ebx
call eax
lea ecx, [esp + 0xa4]
call fcn.00407910
lea ecx, [esp + 0xcc]
call fcn.00407910
lea ecx, [esp + 0x2c]
call fcn.00401e10
lea ecx, [esp + 0x28]
call fcn.00402420
lea ecx, [esp + 0x2c]
call fcn.00402420
lea ecx, [esp + 0x4c]
call fcn.00402420
lea ecx, [esp + 0x74]
call fcn.00402420
push ecx
mov ecx, esp
mov dword [esp + 0xbc], esp
mov bl, 0x3c
push 0x47dd5c
mov byte [esp + 0x52c], bl
call fcn.00406330
push ecx
mov ecx, esp
mov dword [esp + 0xc8], esp
push 0x47dd5c
mov byte [esp + 0x530], 0x3d
call fcn.00406330
push ecx
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x534], 0x3e
call fcn.00402440
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x534], bl
call fcn.0044c340
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x528], 0x3f
call fcn.00404480
lea ecx, [esp + 0xac]
mov byte [esp + 0x524], bl
call fcn.00401e10
push ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
push 0x47dd5c
call fcn.00406330
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0x530], 0x40
call fcn.00402440
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0xc4], esp
push eax
mov byte [esp + 0x534], 0x41
call fcn.00402440
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x534], bl
call fcn.0044c990
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x528], 0x42
call fcn.00404480
mov byte [esp + 0x524], bl
lea ecx, [esp + 0xe4]
call fcn.00401e10
mov edi, dword [esp + 0x28]
push edi
push str.MMC1Drive
push esi
call fcn.0040ccd0
mov ebx, dword [esp + 0x38]
push ebx
push str.MMC2Drive
push esi
call fcn.0040ccd0
push ebx
push 0x483cd0
push esi
call fcn.0040ccd0
add esp, 0x24
cmp dword [edi - 0xc], 0
jne 0x441773
mov edx, dword [esp + 0x34]
push edx
jmp 0x441774
push edi
push 0x483cf4
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x74]
call fcn.00401e10
lea ecx, [esp + 0x4c]
call fcn.00401e10
lea ecx, [esp + 0x2c]
call fcn.00401e10
lea ecx, [esp + 0x28]
call fcn.00401e10
lea ecx, [esp + 0x40]
call fcn.00401e10
lea ecx, [esp + 0x18]
call fcn.00401e10
lea ecx, [esp + 0xd4]
mov byte [esp + 0x524], 0x2c
call fcn.0040e5e0
lea ecx, [esp + 0x38]
call fcn.00401e10
lea ecx, [esp + 0x24]
call fcn.00401e10
lea ecx, [esp + 0x1c]
call fcn.00401e10
lea ecx, [esp + 0x34]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
mov ebp, dword [esp + 0x3c]
jmp case.0x4409e6.2
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.00402440
call fcn.0042b790
add esp, 4
mov ebp, eax
mov dword [0x49f280], 1
jmp case.0x4409e6.2
xor ebp, ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], ebp
call fcn.00402420
lea ecx, [esp + 0x24]
call fcn.00402420
mov edi, dword [esp + 0x20]
mov bl, 0x44
mov byte [esp + 0x524], bl
cmp edi, ebp
jne 0x44185e
push 0x80004003
call fcn.004633e0
push str.Count
lea ecx, [esp + 0xc0]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x45
cmp eax, ebp
je 0x441881
mov eax, dword [eax]
jmp 0x441883
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x4418c5
push eax
lea ecx, [esp + 0x18]
call fcn.004034b0
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x18], ebp
lea ecx, [esp + 0x1c]
call fcn.00402420
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x528], 0x46
call fcn.0042b450
mov eax, dword [esp + 0x20]
push eax
push 0x47e55c
push esi
call fcn.0040ccd0
mov ebp, dword [esp + 0x24]
push ebp
push str.StorageCount
push esi
call fcn.0040ccd0
push ebp
call dword [sym.imp.MSVCR90.dll__wtoi]
add esp, 0x20
mov dword [esp + 0x4c], eax
mov dword [esp + 0x34], 0
test eax, eax
jle 0x441bb2
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x28]
push str.IsInternalMemory_d
push edx
call fcn.00402eb0
mov eax, dword [esp + 0x2c]
add esp, 0xc
test eax, eax
je 0x440366
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00423c40
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441985
push eax
lea ecx, [esp + 0x18]
call fcn.004034b0
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040ccd0
mov ecx, dword [esp + 0x40]
push ecx
lea edx, [esp + 0x34]
push str.HARDWAREID_d
push edx
call fcn.00402eb0
mov eax, dword [esp + 0x38]
add esp, 0x18
test eax, eax
je 0x440366
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00423c40
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4419f8
push eax
lea ecx, [esp + 0x18]
call fcn.004034b0
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov edi, dword [esp + 0x34]
test edi, edi
jne 0x441b21
push str.HARDWAREID
lea ecx, [esp + 0x28]
call fcn.004034b0
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040ccd0
add esp, 0xc
push str.USBHARDWAREID
lea ecx, [esp + 0x28]
call fcn.004034b0
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00402440
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0x52c], 0x47
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x52c], 0x46
call fcn.00416940
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
push eax
push ecx
push esi
mov byte [esp + 0x530], 0x48
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x88]
mov byte [esp + 0x524], 0x46
call fcn.00401e10
lea edx, [esp + 0x24]
push str.StorageName0
push edx
call fcn.00402eb0
mov eax, dword [esp + 0x28]
add esp, 8
test eax, eax
je 0x440366
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00423c40
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441af3
push eax
lea ecx, [esp + 0x18]
call fcn.004034b0
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
lea eax, [esp + 0x24]
push str.StorageName
push eax
call fcn.00402eb0
mov ecx, dword [esp + 0x2c]
push ebp
push ecx
push esi
call fcn.0040ccd0
add esp, 0x14
push str.DeviceSN
lea ecx, [esp + 0x28]
call fcn.004034b0
jmp 0x441b40
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040ccd0
push edi
lea ecx, [esp + 0x34]
push str.StorageName_d
push ecx
call fcn.00402eb0
add esp, 0x18
mov eax, dword [esp + 0x20]
test eax, eax
je 0x440366
mov edi, dword [eax]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x28]
add edi, 0x68
mov ebx, eax
call fcn.00423c40
push eax
mov eax, dword [edi]
push ebx
call eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441b90
push eax
lea ecx, [esp + 0x18]
call fcn.004034b0
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov edx, dword [esp + 0x24]
push ebp
push edx
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x40]
inc eax
add esp, 0xc
cmp eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
jl 0x44191e
lea ecx, [esp + 0x1c]
call fcn.00401e10
lea ecx, [esp + 0x24]
call fcn.00401e10
lea ecx, [esp + 0x14]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
mov ebp, dword [esp + 0x3c]
jmp case.0x4409e6.2
mov ebp, dword [esp + 0x52c]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
lea ecx, [ecx]
push edi
push str.CDeviceDB::setDeviceProperty_dwDID___T_HARDWAREID__d
call fcn.004031a0
push 0x483cb0
push 0x49f1f8
call fcn.0042c390
add esp, 0x10
test al, al
je 0x441c27
push 0x483cb0
push 0x49f1fc
call fcn.0042c390
add esp, 8
test al, al
jne 0x441c39
push 0x3e8
call ebx
inc edi
cmp edi, 0x64
jl 0x441bf0
jmp 0x441ce7
mov eax, dword [0x49f1f4]
push eax
push str.HARDWAREID
push esi
call fcn.0040ccd0
mov ecx, dword [0x49f1f8]
push ecx
push 0x47e47c
push esi
call fcn.0040ccd0
mov edx, dword [0x49f1fc]
push edx
push 0x47e450
push esi
call fcn.0040ccd0
add esp, 0x20
mov ecx, esp
mov dword [esp + 0x5c], esp
push 0x49f1f4
call fcn.00402440
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x52c], 0x49
call fcn.00419a30
mov ecx, eax
mov byte [esp + 0x52c], 0x11
call fcn.00416940
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0x4a
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x90]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
mov ecx, dword [0x49f200]
push ecx
push str.IMSI
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x38]
mov dword [esp + 0x14], 0
call fcn.00402420
lea ecx, [esp + 0x2c]
call fcn.00402420
lea ecx, [esp + 0x1c]
call fcn.00402420
mov edi, dword [esp + 0x20]
mov bl, 0x4d
mov byte [esp + 0x524], bl
test edi, edi
jne 0x441d25
push 0x80004003
call fcn.004633e0
push str.DRIVE
lea ecx, [esp + 0x9c]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x4e
test eax, eax
je 0x441d48
mov eax, dword [eax]
jmp 0x441d4a
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x98]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x14]
test eax, eax
je 0x441d90
push eax
lea ecx, [esp + 0x3c]
call fcn.004034b0
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x38]
push ecx
push 0x482c2c
push esi
call fcn.0040ccd0
mov edi, dword [esp + 0x2c]
add esp, 0xc
test edi, edi
jne 0x441db5
push 0x80004003
call fcn.004633e0
push str.ExternalDrive
lea ecx, [esp + 0x60]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x4f
test eax, eax
je 0x441dd5
mov eax, dword [eax]
jmp 0x441dd7
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x14]
test eax, eax
je 0x441e1a
push eax
lea ecx, [esp + 0x30]
call fcn.004034b0
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x2c]
push ecx
push 0x483cd0
push esi
call fcn.0040ccd0
mov edi, dword [esp + 0x2c]
add esp, 0xc
test edi, edi
jne 0x441e3f
push 0x80004003
call fcn.004633e0
push str.InternalDrive
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x50
test eax, eax
je 0x441e5f
mov eax, dword [eax]
jmp 0x441e61
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], bl
call fcn.00407910
mov eax, dword [esp + 0x14]
test eax, eax
je 0x441ea4
push eax
lea ecx, [esp + 0x20]
call fcn.004034b0
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x1c]
push ecx
push 0x483cf4
push esi
call fcn.0040ccd0
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.00401e10
lea ecx, [esp + 0x2c]
call fcn.00401e10
lea ecx, [esp + 0x38]
mov byte [esp + 0x524], 0x11
call fcn.00401e10
mov edx, dword [esp + 0x44]
push edx
lea eax, [esp + 0x2c]
push esi
push eax
call fcn.0042f4b0
mov ecx, dword [esp + 0x50]
push ecx
lea edx, [esp + 0x44]
push esi
push edx
mov byte [esp + 0x53c], 0x51
call fcn.0043fda0
lea eax, [esp + 0x4c]
push 0x47e2bc
push eax
mov byte [esp + 0x544], 0x52
call fcn.00404130
add esp, 0x20
test al, al
je 0x441f42
cmp dword [esp + 0x44], 3
jne 0x441f42
mov ecx, dword [esp + 0x28]
cmp dword [ecx - 0xc], 0
jne 0x441f42
lea edx, [esp + 0x108]
push edx
lea ecx, [esp + 0x2c]
call fcn.004034b0
mov eax, dword [esp + 0x28]
push eax
push str.NAME
push esi
call fcn.0040ccd0
mov ecx, dword [esp + 0x40]
push ecx
push str.TYPE
push esi
call fcn.0040ccd0
mov edi, dword [esp + 0x60]
add esp, 0x18
cmp dword [edi - 0xc], 0
mov dword [esp + 0x24], 0
jl 0x441fc4
mov ebx, dword [sym.imp.MSVCR90.dll_wcsstr]
push str.VID_04E8
push edi
call ebx
add esp, 8
test eax, eax
je 0x441fc4
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jle 0x441fc4
cmp dword [edi - 0xc], 0
jl 0x441fc4
push str.PID_6651
push edi
call ebx
add esp, 8
test eax, eax
je 0x441fc4
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jle 0x441fc4
cmp dword [esp + 0x44], 0
jne 0x441fc4
mov dword [esp + 0x24], 1
jmp 0x441fef
mov edx, dword [esp + 0x44]
push edx
call fcn.00421de0
push eax
push str.CONNECTIONTYPE
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x54]
add esp, 0x10
cmp eax, 8
je 0x441fef
test eax, eax
je 0x441fef
cmp eax, 0x10
jne 0x441ff8
push esi
call fcn.0042be60
add esp, 4
mov eax, dword [0x49f4e4]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f4e4
call edx
add eax, 0x10
mov dword [esp + 0x14], eax
cmp ebp, 0xffffffff
mov byte [esp + 0x524], 0x53
jle 0x442264
mov eax, dword [esp + 0x52c]
cmp ebp, eax
jne 0x4420b8
push eax
lea eax, [esp + 0x18]
push 0x482a00
push eax
call fcn.00402eb0
mov ecx, dword [esp + 0x20]
push ecx
push str.ModemCID
push esi
call fcn.0040ccd0
add esp, 0x18
cmp dword [esp + 0x44], 9
jne 0x442090
push 9
lea edx, [esp + 0x34]
push esi
push edx
call fcn.0042f4b0
add esp, 0xc
mov byte [esp + 0x524], 0x54
push eax
lea ecx, [esp + 0x58]
call fcn.00404480
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00401e10
jmp 0x4422ac
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.00402440
lea ecx, [esp + 0x34]
push ecx
call fcn.0042e590
add esp, 8
mov byte [esp + 0x524], 0x55
jmp 0x442070
mov dword [esp + 0x38], 0
push ebp
lea edx, [esp + 0x18]
push 0x482a00
push edx
mov byte [esp + 0x530], 0x56
call fcn.00402eb0
mov eax, dword [esp + 0x20]
push eax
push str.ModemCID
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x68]
add esp, 0x18
test eax, eax
jne 0x4420fd
push 0x80004003
call fcn.004633e0
mov edi, dword [eax]
lea ecx, [esp + 0x38]
mov ebx, eax
add edi, 0x20
call fcn.00406a10
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [edi]
push eax
push ebp
push ebx
call ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], 0
call fcn.00402420
mov eax, dword [esp + 0x38]
mov byte [esp + 0x524], 0x57
test eax, eax
jne 0x442146
push 0x80004003
call fcn.004633e0
mov edx, dword [eax]
mov edx, dword [edx + 0x3c]
lea ecx, [esp + 0x1c]
push ecx
push eax
call edx
mov eax, dword [esp + 0x1c]
xor ebp, ebp
cmp eax, ebp
je 0x442172
push eax
lea ecx, [esp + 0x30]
call fcn.004034b0
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0x52c]
push ecx
lea edx, [esp + 0x18]
push 0x482a00
push edx
call fcn.00402eb0
mov edi, dword [esp + 0x44]
add esp, 0xc
cmp edi, ebp
jne 0x44219e
push 0x80004003
call fcn.004633e0
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x60]
call fcn.00406780
mov ebx, eax
push str.LINKEDCONNECTION
lea ecx, [esp + 0x34]
mov byte [esp + 0x528], 0x58
call fcn.00406780
mov ecx, dword [ebx]
mov byte [esp + 0x524], 0x59
cmp ecx, ebp
je 0x4421d6
mov ecx, dword [ecx]
jmp 0x4421d8
xor ecx, ecx
mov eax, dword [eax]
cmp eax, ebp
je 0x4421e2
mov eax, dword [eax]
jmp 0x4421e4
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x30]
call fcn.00407910
lea ecx, [esp + 0x5c]
mov byte [esp + 0x524], 0x57
call fcn.00407910
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.00402440
lea eax, [esp + 0x34]
push eax
call fcn.0042e590
add esp, 8
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x528], 0x5a
call fcn.00404480
lea ecx, [esp + 0x30]
call fcn.00401e10
lea ecx, [esp + 0x2c]
call fcn.00401e10
mov eax, dword [esp + 0x38]
mov byte [esp + 0x524], 0x53
cmp eax, ebp
je 0x4422ae
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x4422ae
mov eax, dword [esp + 0x44]
cmp eax, 5
je 0x442282
cmp eax, 0xb
je 0x442282
push str.ModemCID
push esi
call fcn.0040cdb0
add esp, 8
jmp 0x4422ac
mov eax, dword [esp + 0x52c]
push eax
lea ecx, [esp + 0x18]
push 0x482a00
push ecx
call fcn.00402eb0
mov edx, dword [esp + 0x20]
push edx
push str.ModemCID
push esi
call fcn.0040ccd0
add esp, 0x18
xor ebp, ebp
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x4422c4
push 0x80004003
call fcn.004633e0
push str.TEMPORARY_IMEI
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5b
cmp eax, ebp
je 0x4422e4
mov eax, dword [eax]
jmp 0x4422e6
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407910
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x44232b
push eax
push 0x47e53c
push esi
call fcn.0040ccd0
mov ecx, dword [esp + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
add esp, 0xc
push ecx
call ebx
jmp 0x442331
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x442347
push 0x80004003
call fcn.004633e0
push str.CarrierID
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5c
cmp eax, ebp
je 0x442367
mov eax, dword [eax]
jmp 0x442369
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407910
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4423a6
push eax
push 0x47e4e8
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
call ebx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x4423bc
push 0x80004003
call fcn.004633e0
push str.Base_Model_Name
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5d
cmp eax, ebp
je 0x4423dc
mov eax, dword [eax]
jmp 0x4423de
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407910
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x44241b
push eax
push 0x47e4c8
push esi
call fcn.0040ccd0
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ecx
call ebx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x442431
push 0x80004003
call fcn.004633e0
push str.IMEINUM
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5e
cmp eax, ebp
je 0x442451
mov eax, dword [eax]
jmp 0x442453
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407910
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x442490
push eax
push 0x47e510
push esi
call fcn.0040ccd0
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
call ebx
mov ebx, dword [esp + 0x54]
cmp dword [ebx - 0xc], ebp
jle 0x4424f8
push ebx
push str.ModemName
push esi
call fcn.0040ccd0
add esp, 0xc
cmp dword [esp + 0x44], 9
jne 0x442506
lea ecx, [esp + 0x30]
push ecx
call fcn.00432510
add esp, 4
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x528], 0x5f
call fcn.00404480
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00401e10
mov edx, dword [esp + 0x54]
push edx
push str.ModemName
push esi
call fcn.0040ccd0
mov ebx, dword [esp + 0x60]
add esp, 0xc
jmp 0x442506
push str.ModemName
push esi
call fcn.0040cdb0
add esp, 8
mov eax, dword [esp + 0x44]
cmp eax, 4
je 0x442518
cmp eax, 0x11
jne 0x4425c0
mov edi, dword [esp + 0x20]
mov dword [esp + 0x3c], ebp
cmp edi, ebp
jne 0x44252e
push 0x80004003
call fcn.004633e0
push 0x48555c
lea ecx, [esp + 0x34]
call fcn.004066f0
mov eax, dword [eax]
mov byte [esp + 0x524], 0x60
cmp eax, ebp
je 0x44254e
mov eax, dword [eax]
jmp 0x442550
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407910
mov ecx, dword [esp + 0x3c]
push ecx
lea ecx, [esp + 0x44]
call fcn.00406330
mov edx, dword [esp + 0x40]
push edx
push str.NAME
push esi
mov byte [esp + 0x530], 0x61
call fcn.0040ccd0
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0x524], 0x53
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4425c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x24], ebp
jne 0x4425d5
push 0x8000000
push ebp
push esi
call fcn.00428a30
add esp, 0xc
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x52
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4425fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x51
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442625
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x11
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44264d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x442661
mov dword [esp + 0x20], ebp
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x52c]
push eax
push 0x485530
call fcn.004031a0
lea eax, [ebx - 0x10]
add esp, 8
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44269a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
mov byte [esp + 0x524], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4426c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov byte [esp + 0x524], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4426ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov byte [esp + 0x524], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442712
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov byte [esp + 0x524], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44273a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xb0]
mov byte [esp + 0x524], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442762
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 0
cmp eax, ebp
je 0x44277a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x524], 0xffffffff
cmp eax, ebp
je 0x442795
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
mov ecx, dword [esp + 0x51c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x504]
xor ecx, esp
call fcn.00471f66
add esp, 0x514
ret