Function at 0x40b02f
Capabilities:
Get hostname
Initialize winsock library
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xbfc
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp + 0xc]
mov dword [0x6d9078], eax
mov dword [ebp - 0x98], 0
lea eax, [ebp - 0x98]
mov dword [esp + 4], eax
mov dword [esp], str.cydia
call fcn.0040afab
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x40b089
mov dword [esp], str.Cydia_is_missing_from_resources
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0x9c], 0
lea eax, [ebp - 0x9c]
mov dword [esp + 4], eax
mov dword [esp], str.packagelist
call fcn.0040afab
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x40b0c8
mov dword [esp], str.Packagelist_is_missing_from_resources
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Connecting_to_device...
mov dword [esp], 1
call fcn.004089bc
mov dword [ebp - 0x20], 0xa
jmp 0x40b0f4
mov dword [esp], 0x3e8
call sub.KERNEL32.dll_Sleep
sub esp, 4
cmp dword [ebp - 0x20], 0
setne al
dec dword [ebp - 0x20]
test al, al
je 0x40b10b
mov eax, dword [0x6d9070]
test eax, eax
je 0x40b0e5
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40b12a
mov dword [esp], str.Could_not_find_device_in_connected_state__
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00416612
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40b169
mov dword [esp], str.Could_not_connect_to_device_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa0]
mov dword [esp + 8], 0
lea edx, [ebp - 0xbc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00418ca3
mov word [ebp - 0x4e], ax
cmp word [ebp - 0x4e], 0
je 0x40b1f8
movsx eax, word [ebp - 0x4e]
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_connect_to_lockdownd___d_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xa4]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x655bcc
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xa8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x655bd9
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xac]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x655be4
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb0]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x655bf0
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb4]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x655bff
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0xb8]
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.DevToolsAvailable
mov dword [esp + 4], str.com.apple.mobile.internal
mov dword [esp], eax
call fcn.00417600
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call fcn.00417e3f
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x40b320
mov dword [esp], str.Failed_to_get_BuildVersion_from_lockdown.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0xa8]
test eax, eax
jne 0x40b340
mov dword [esp], str.Failed_to_get_DeviceName_from_lockdown.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0xac]
test eax, eax
jne 0x40b360
mov dword [esp], str.Failed_to_get_ProductType_from_lockdown.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0xb0]
test eax, eax
jne 0x40b380
mov dword [esp], str.Failed_to_get_ProductVersion_from_lockdown.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0xb4]
test eax, eax
jne 0x40b3a0
mov dword [esp], str.Failed_to_get_SerialNumber_from_lockdown.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x40b428
mov eax, dword [ebp - 0xb8]
mov dword [esp], eax
call fcn.00421a0c
cmp eax, 3
jne 0x40b428
mov dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 0x9ac]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00421ad4
mov eax, dword [ebp - 0x9ac]
test eax, eax
je 0x40b428
mov eax, dword [ebp - 0x9ac]
mov dword [esp + 4], 0x655d0e
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40b413
mov dword [ebp - 0x24], 0
jmp 0x40b41a
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x9ac]
mov dword [esp], eax
call fcn.0059fbf8
cmp dword [ebp - 0x24], 0
je 0x40b5f9
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408bcc
test eax, eax
je 0x40b46f
mov dword [esp], str.Your_device_appears_to_be_using_a_semi_tether_jailbreak._Please_use_the_evasi0n_untether_package_from_Cydia_to_untether_instead.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Waiting_for_device_reboot...
mov dword [esp], 1
call fcn.004089bc
mov dword [ebp - 0x28], 0x3c
jmp 0x40b4a4
mov eax, dword [0x6d9070]
test eax, eax
je 0x40b4be
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6d9070]
test eax, eax
je 0x40b4bf
mov eax, dword [ebp - 0x28]
not eax
shr eax, 0x1f
dec dword [ebp - 0x28]
test al, al
jne 0x40b48c
jmp 0x40b4bf
nop
mov eax, dword [0x6d9070]
test eax, eax
je 0x40b4de
mov dword [esp], str.Device_did_not_reboot__
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0x28], 0x78
jmp 0x40b4ff
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40b519
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40b51a
mov eax, dword [ebp - 0x28]
not eax
shr eax, 0x1f
dec dword [ebp - 0x28]
test al, al
jne 0x40b4e7
jmp 0x40b51a
nop
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40b539
mov dword [esp], str.Device_did_not_reconnect_after_reboot___n
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Waiting_for_device_to_be_ready...
mov dword [esp], 1
call fcn.004089bc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040922c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jne 0x40b579
mov dword [ebp - 0x1c], 0
mov dword [esp], 0x2710
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40b5c4
cmp dword [ebp - 0x1c], 0
jne 0x40b5a9
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.hm_springboard_didnt_seem_to_load__trying_to_continue_n
call sub.msvcrt.dll_fwrite
jmp 0x40b5c4
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.error_code__d_waiting_for_springboard_to_show_up
call fcn.004088f4
mov eax, dword [ebp - 0x1c]
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00416612
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40b5f9
mov dword [esp], str.Could_not_connect_to_device_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.004093f8
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.00409499
mov dword [esp + 4], 0x1ed
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.0040865f
mov dword [esp + 4], str.Retrieving_information_from_the_device_to_generate_jailbreak_data...
mov dword [esp], 2
call fcn.004089bc
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.004096e2
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
test eax, eax
jne 0x40b673
mov dword [esp], str.Could_not_get_com.apple.mobile.installation.plist
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
lea eax, [ebp - 0x2c0]
mov dword [esp], eax
call fcn.00409d47
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c0]
lea edx, [ebp - 0x2c8]
mov dword [esp + 8], edx
lea edx, [ebp - 0x2c4]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00424a44
mov eax, dword [ebp - 0x2c4]
test eax, eax
jne 0x40b6d7
mov dword [esp], str.Could_not_get_binary_plist_blob
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Preparing_stage_1_jailbreak_data...
mov dword [esp], 5
call fcn.004089bc
lea eax, [ebp - 0x2bc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x4c8]
add eax, edx
mov dword [eax], 0x6b636168
mov dword [eax + 4], 0x2f7075
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0059fc30
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00409499
mov dword [esp + 4], 0x1ed
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0040865f
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.plist
mov eax, 4
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsd dword es:[edi], dword [esi]
call fcn.00421044
mov dword [ebp - 0x54], eax
call fcn.00421078
mov dword [esp + 8], eax
mov dword [esp + 4], str.Applications
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp + 4], 0x538
mov dword [esp + 8], 0
mov dword [esp], str.VERS
call fcn.00421200
mov dword [esp + 8], eax
mov dword [esp + 4], str.BackupKeyBag
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0042126c
mov dword [esp + 8], eax
mov dword [esp + 4], str.Date
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0
call fcn.0042110c
mov dword [esp + 8], eax
mov dword [esp + 4], str.IsEncrypted
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
call fcn.00421044
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xa4]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655bcc
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655bd9
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655be4
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655bf0
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0xb4]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655bff
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], 0x655f83
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
call fcn.00421044
mov dword [ebp - 0x5c], eax
mov dword [esp], 0
call fcn.0042110c
mov dword [esp + 8], eax
mov dword [esp + 4], str.ShouldSubmit
mov eax, dword [ebp - 0x5c]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 4], str.com.apple.MobileDeviceCrashCopy
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
call fcn.00421044
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x958]
mov dword [esp + 4], eax
mov dword [esp], 0x202
call sub.WS2_32.dll_WSAStartup
sub esp, 8
mov dword [esp + 4], 0x100
lea eax, [ebp - 0x7c8]
mov dword [esp], eax
call sub.WS2_32.dll_gethostname
sub esp, 8
test eax, eax
je 0x40b9d4
lea eax, [ebp - 0x7c8]
mov edx, eax
mov ebx, str.localhost
mov eax, 0xa
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x7c8]
mov dword [esp], eax
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.LastBackupComputerName
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], str.Windows
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.LastBackupComputerType
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0x60]
mov dword [esp + 8], eax
mov dword [esp + 4], str.com.apple.iTunes.backup
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0x58]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Lockdown
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], str.16.0
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.SystemDomainsVersion
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0x65603b
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.Version
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0
call fcn.0042110c
mov dword [esp + 8], eax
mov dword [esp + 4], str.WasPasscodeSet
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp + 8], 1
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00409e5b
test eax, eax
jns 0x40bae4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.004212c0
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Status.plist
mov eax, 0xe
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
call fcn.00421044
mov dword [ebp - 0x54], eax
mov dword [esp], 0x656064
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.BackupState
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0042126c
mov dword [esp + 8], eax
mov dword [esp + 4], str.Date
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 1
call fcn.0042110c
mov dword [esp + 8], eax
mov dword [esp + 4], str.IsFullBackup
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp], 0x656081
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], 0x65608a
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
call fcn.00409f72
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.UUID
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.0059fbf8
mov dword [esp], 0x65609d
call fcn.004210ac
mov dword [esp + 8], eax
mov dword [esp + 4], str.Version
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00421810
mov dword [esp + 8], 1
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.00409e5b
test eax, eax
jns 0x40bc6f
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call fcn.004212c0
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.00406536
test eax, eax
jns 0x40bd15
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
lea eax, [ebp - 0x2bc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x4c8]
add eax, edx
mov edx, eax
mov ebx, str.hackup
mov eax, 7
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00404710
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40bda2
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40bdef
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40be3c
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var_mobile
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40be89
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40bed6
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x17c
mov dword [esp + 0x1c], 0x62a0e0
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Info.plist
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40bf3b
mov dword [esp], str.Couldnt_add_Info.plist_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x95
mov dword [esp + 0x1c], str.__bin_launchctl_submit__l_remount__o__var_mobile_Media_mount.stdout__e__var_mobile_Media_mount.stderr_____sbin_mount__v__t_hfs__o_rw__dev_disk0s1s1_n
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_DemoApp
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40bfa0
mov dword [esp], str.Couldnt_add_executable_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x3de2
mov dword [esp + 0x1c], 0x618c60
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c005
mov dword [esp], str.Couldnt_add_Icon.png_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0xd667
mov dword [esp + 0x1c], 0x61ca60
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_2x.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c06a
mov dword [esp], str.Couldnt_add_Icon_2x.png_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x5c2d
mov dword [esp + 0x1c], 0x5fe0a0
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_72.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c0cf
mov dword [esp], str.Couldnt_add_Icon_72.png_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x14f7a
mov dword [esp + 0x1c], 0x603ce0
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_DemoApp.app_Icon_72_2x.png
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c134
mov dword [esp], str.Couldnt_add_Icon_72_2x.png_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x2c8]
mov edx, eax
mov eax, dword [ebp - 0x2c4]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x81a4
mov dword [esp + 8], str.Media_Recordings_.haxx_Library_Caches_com.apple.mobile.installation.plist
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c19f
mov dword [esp], str.Couldnt_add_install_plist_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0x2c], 0
jmp 0x40c239
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax*4 + 0x6dccc0]
mov dword [esp + 8], eax
mov dword [esp + 4], str.Media_Recordings_.haxx_Library_Caches_com.apple.LaunchServices__03d.csstore
lea eax, [ebp - 0xbb4]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x20], 9
mov dword [esp + 0x1c], str.Eat_this_
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1a4
lea eax, [ebp - 0xbb4]
mov dword [esp + 8], eax
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40c236
mov dword [esp], str.Couldnt_add_csstore_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
inc dword [ebp - 0x2c]
mov eax, dword [0x6d907c]
cmp dword [ebp - 0x2c], eax
jl 0x40c1ab
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405684
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40c276
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_stage_1_jailbreak_data...
mov dword [esp], 0xa
call fcn.004089bc
mov dword [ebp - 0x978], str.idevicebackup2
mov dword [ebp - 0x974], 0x655aac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], 0x655ab3
mov dword [ebp - 0x968], 0x655abb
mov dword [ebp - 0x964], 0x655ac4
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], 0
mov dword [ebp - 0x6c], 7
mov dword [esp], 0x66
call fcn.00410559
lea eax, [ebp - 0x978]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x6c]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40c327
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.hmm..._restore_failed___d___
call fcn.004088f4
mov eax, dword [ebp - 0x1c]
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0040a3fa
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408bcc
test eax, eax
je 0x40c361
mov dword [esp], str.Your_device_appears_to_be_using_a_semi_tether_jailbreak._Please_use_the_evasi0n_untether_package_from_Cydia_to_untether_instead.
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Waiting_for_device_reboot...__Do_not_touch_your_device_
mov dword [esp], 0xa
call fcn.004089bc
mov dword [ebp - 0x30], 0x3c
jmp 0x40c396
mov eax, dword [0x6d9070]
test eax, eax
je 0x40c3b0
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6d9070]
test eax, eax
je 0x40c3b1
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40c37e
jmp 0x40c3b1
nop
mov eax, dword [0x6d9070]
test eax, eax
je 0x40c3d0
mov dword [esp], str.Device_did_not_reboot__
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0x30], 0x78
jmp 0x40c3f1
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40c40b
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40c40c
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40c3d9
jmp 0x40c40c
nop
mov eax, dword [0x6d9070]
test eax, eax
jne 0x40c42b
mov dword [esp], str.Device_did_not_reconnect_after_reboot___n
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Waiting_for_device_to_be_ready...__Do_not_touch_your_device_
mov dword [esp], 0xd
call fcn.004089bc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0040922c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jne 0x40c46b
mov dword [ebp - 0x1c], 0
mov dword [esp], 0x2710
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40c4b6
cmp dword [ebp - 0x1c], 0
jne 0x40c49b
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.hm_springboard_didnt_seem_to_load__trying_to_continue_n
call sub.msvcrt.dll_fwrite
jmp 0x40c4b6
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.error_code__d_waiting_for_springboard_to_show_up
call fcn.004088f4
mov eax, dword [ebp - 0x1c]
jmp 0x40db40
mov dword [esp + 4], str.Preparing_stage_2_jailbreak_data...__Do_not_touch_your_device_
mov dword [esp], 0xf
call fcn.004089bc
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.0059fc30
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.00406536
test eax, eax
jns 0x40c5ac
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00404710
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40c5e0
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40c62d
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40c67a
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var_db_
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40c6c7
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], str._var_tmp_launchd
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40c714
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40c738
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_stage_2_jailbreak_data__step_1_3_...__Do_not_touch_your_device_
mov dword [esp], 0x14
call fcn.004089bc
mov dword [ebp - 0x998], str.idevicebackup2
mov dword [ebp - 0x994], 0x655aac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], 0x655ab3
mov dword [ebp - 0x988], 0x655abb
mov dword [ebp - 0x984], 0x655ac4
lea eax, [ebp - 0x4c8]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x70], 7
mov dword [esp], 0
call fcn.00410559
lea eax, [ebp - 0x998]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40c7f6
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__1_3__n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408f84
mov dword [ebp - 0x1c], 0
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040499b
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x40c8fc
mov dword [esp + 4], str._var_tmp_launchd_sock
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405c3e
mov dword [esp + 4], 0xa1a4
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ed5
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f27
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f4c
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f71
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f96
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405fbb
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00406018
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00404bc6
test eax, eax
jns 0x40c8f1
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405b8b
cmp dword [ebp - 0x1c], 0
jns 0x40c90e
mov dword [esp], str.Could_not_add_file_to_backup
call fcn.004088f4
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40c932
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_stage_2_jailbreak_data__step_2_3_...__Do_not_touch_your_device_
mov dword [esp], 0x19
call fcn.004089bc
mov dword [esp], 0x66
call fcn.00410559
lea eax, [ebp - 0x998]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40c998
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__2_3__n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408f84
mov dword [ebp - 0x1c], 0xffffffff
mov dword [esp + 8], str.Media_Recordings_.haxx_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040499b
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x40caaf
mov dword [esp + 8], 1
mov dword [esp + 4], 0x655a73
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405c63
mov dword [esp + 4], 0xa1a4
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405ed5
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f27
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f4c
mov dword [esp], 0
call sub.msvcrt.dll_time
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f71
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405f96
mov eax, dword [ebp - 0x7c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405fbb
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00406018
mov eax, dword [ebp - 0x74]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00404bc6
test eax, eax
jns 0x40ca9d
mov dword [ebp - 0x1c], 0xffffffff
jmp 0x40caa4
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call fcn.00405b8b
cmp dword [ebp - 0x1c], 0
jns 0x40cacb
mov dword [esp], str.Couldnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405684
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40cafa
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_stage_2_jailbreak_data__step_3_3_...__Do_not_touch_your_device_
mov dword [esp], 0x1e
call fcn.004089bc
mov dword [esp], 0x66
call fcn.00410559
lea eax, [ebp - 0x998]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40cb60
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3d
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_2_data__3_3__n
call sub.msvcrt.dll_fwrite
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0xa0]
mov dword [esp], eax
call fcn.00416612
mov eax, dword [ebp - 0xa0]
test eax, eax
jne 0x40cb9f
mov dword [esp], str.failed_to_connect_to_device_:_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xa0]
mov dword [esp + 8], 0
lea edx, [ebp - 0xbc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00418ca3
mov eax, dword [ebp - 0xbc]
test eax, eax
jne 0x40cc01
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov dword [esp], str.failed_to_connect_to_lockdownd_:_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov word [ebp - 0x99a], 0
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0x99a]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x656796
mov dword [esp], eax
call fcn.00418ec9
mov eax, dword [ebp - 0xbc]
mov dword [esp], eax
call fcn.00417e3f
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x9a0], 0
mov ax, word [ebp - 0x99a]
movzx edx, ax
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x9a0]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0041cdc8
mov eax, dword [ebp - 0x9a0]
test eax, eax
jne 0x40ccaa
mov dword [esp], str.failed_to_connect_to_AFC
call fcn.004088f4
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x9a0]
mov dword [esp + 4], str._evasi0n_install
mov dword [esp], eax
call fcn.0041d367
test ax, ax
je 0x40cd01
mov dword [esp], str.failed_to_make_directory
call fcn.004088f4
mov eax, dword [ebp - 0x9a0]
mov dword [esp], eax
call fcn.0041ce45
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x98]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.0040ac40
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x9c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x4c]
mov dword [esp], eax
call fcn.0040ac40
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], 0x9800
cmp dword [ebp - 0x80], 0xffffffff
je 0x40cd4d
cmp dword [ebp - 0x84], 0xffffffff
jne 0x40cd89
mov dword [esp], str.failed_to_get_data_files
call fcn.004088f4
mov eax, dword [ebp - 0x9a0]
mov dword [esp], eax
call fcn.0041ce45
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [0x656dd4]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x80]
mov edx, 0
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 0xbc4], edx
fild qword [ebp - 0xbc8]
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
add edx, eax
mov eax, dword [ebp - 0x88]
add eax, edx
mov edx, 0
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 0xbc4], edx
fild qword [ebp - 0xbc8]
fdivp st(1)
fld dword [0x656dd8]
fmulp st(1)
fld dword [0x656dd4]
faddp st(1)
fstp dword [ebp - 0x90]
mov eax, dword [ebp - 0x84]
mov edx, 0
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 0xbc4], edx
fild qword [ebp - 0xbc8]
mov eax, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
add edx, eax
mov eax, dword [ebp - 0x88]
add eax, edx
mov edx, 0
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 0xbc4], edx
fild qword [ebp - 0xbc8]
fdivp st(1)
fld dword [0x656dd8]
fmulp st(1)
fadd dword [ebp - 0x90]
fstp dword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9a4], eax
fld dword [ebp - 0x9a8]
fnstcw word [ebp - 0xbba]
mov ax, word [ebp - 0xbba]
mov ah, 0xc
mov word [ebp - 0xbbc], ax
fldcw word [ebp - 0xbbc]
fistp dword [ebp - 0xbc0]
fldcw word [ebp - 0xbba]
mov eax, dword [ebp - 0xbc0]
mov dword [esp + 4], str.Uploading_Cydia...__Do_not_touch_your_device_
mov dword [esp], eax
call fcn.004089bc
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x9a0]
lea ecx, [ebp - 0x9a8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x40a8c6
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x48]
mov dword [esp + 8], edx
mov dword [esp + 4], str._evasi0n_install_Cydia.tar
mov dword [esp], eax
call fcn.0040ac8d
test eax, eax
je 0x40cf22
mov dword [esp], str.failed_to_upload_file
call fcn.004088f4
mov eax, dword [ebp - 0x9a0]
mov dword [esp], eax
call fcn.0041ce45
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9a4], eax
fld dword [ebp - 0x9a8]
fnstcw word [ebp - 0xbba]
mov ax, word [ebp - 0xbba]
mov ah, 0xc
mov word [ebp - 0xbbc], ax
fldcw word [ebp - 0xbbc]
fistp dword [ebp - 0xbc0]
fldcw word [ebp - 0xbba]
mov eax, dword [ebp - 0xbc0]
mov dword [esp + 4], str.Uploading_Cydia_packages_list...__Do_not_touch_your_device_
mov dword [esp], eax
call fcn.004089bc
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9a0]
lea ecx, [ebp - 0x9a8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], 0x40a8c6
mov dword [esp + 0xc], edx
mov edx, dword [ebp - 0x4c]
mov dword [esp + 8], edx
mov dword [esp + 4], str._evasi0n_install_packagelist.tar
mov dword [esp], eax
call fcn.0040ac8d
test eax, eax
je 0x40cff7
mov dword [esp], str.failed_to_upload_file
call fcn.004088f4
mov eax, dword [ebp - 0x9a0]
mov dword [esp], eax
call fcn.0041ce45
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9a8], eax
mov eax, dword [0x656ddc]
mov dword [ebp - 0x9a4], eax
fld dword [ebp - 0x9a8]
fnstcw word [ebp - 0xbba]
mov ax, word [ebp - 0xbba]
mov ah, 0xc
mov word [ebp - 0xbbc], ax
fldcw word [ebp - 0xbbc]
fistp dword [ebp - 0xbc0]
fldcw word [ebp - 0xbba]
mov eax, dword [ebp - 0xbc0]
mov dword [esp + 4], str.Uploading_extra_packages...__Do_not_touch_your_device_
mov dword [esp], eax
call fcn.004089bc
mov eax, dword [ebp - 0x9a0]
lea edx, [ebp - 0x9a8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], 0x40a8c6
mov edx, dword [ebp - 0x88]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0x64bae0
mov dword [esp + 4], str._evasi0n_install_extras.tar
mov dword [esp], eax
call fcn.0040ab01
test eax, eax
je 0x40d0cc
mov dword [esp], str.failed_to_upload_file
call fcn.004088f4
mov eax, dword [ebp - 0x9a0]
mov dword [esp], eax
call fcn.0041ce45
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0041666b
mov dword [ebp - 0xa0], 0
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x9a0]
mov dword [esp + 4], str._mount.stderr
mov dword [esp], eax
call fcn.0041d111
mov eax, dword [ebp - 0x9a0]
mov dword [esp + 4], str._mount.stdout
mov dword [esp], eax
call fcn.0041d111
mov dword [esp + 4], str.To_continue__please_unlock_your_device_and_tap_the_new_Jailbreak_icon._Only_tap_it_once__The_screen_will_go_black_and_then_return_to_the_home_screen.
mov dword [esp], 0x4b
call fcn.004089bc
mov dword [esp], 2
call fcn.00408aa5
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9a0]
lea edx, [ebp - 0x9b0]
mov dword [esp + 8], edx
mov dword [esp + 4], str._mount.stderr
mov dword [esp], eax
call fcn.0041d424
test ax, ax
jne 0x40d170
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x9b0]
mov dword [esp], eax
call fcn.00409685
call fcn.00408ad3
cmp dword [ebp - 0x34], 0
je 0x40d181
jmp 0x40d197
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
jmp 0x40d11f
mov dword [esp + 4], str.Timeout_waiting_for_user_to_tap_on_the_icon..._trying_to_continue_anyway...
mov dword [esp], 0x50
call fcn.004089bc
jmp 0x40d1ab
mov dword [esp + 4], str.Alright__Remounting_will_start_now._Do_NOT_tap_the_icon_again____just_wait.
mov dword [esp], 0x50
call fcn.004089bc
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.0059fc30
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.00406536
test eax, eax
jns 0x40d28d
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00404710
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40d2c1
mov dword [esp], str.ERROR:_could_not_open_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d30e
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d35b
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._var
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40d3a8
mov dword [esp], str.Error:_Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ff
mov dword [esp + 8], str.Media_Recordings_.haxx_db_timezone
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d3f5
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x656aa7
mov dword [esp + 8], str.Media_Recordings_.haxx_mobile_DemoApp.app_DemoApp
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40d442
mov dword [esp], str.Error:_Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405684
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40d471
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_remount_payload...
mov dword [esp], 0x55
call fcn.004089bc
mov dword [esp], 0x66
call fcn.00410559
lea eax, [ebp - 0x998]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40d4d7
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x3a
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_injecting_remount_payload_n
call sub.msvcrt.dll_fwrite
mov dword [ebp - 0x30], 0x1e
mov dword [ebp - 0x34], 0
jmp 0x40d5c3
mov dword [ebp - 0x9b4], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x9a0]
lea edx, [ebp - 0x9b4]
mov dword [esp + 8], edx
mov dword [esp + 4], str._mount.stdout
mov dword [esp], eax
call fcn.0041d424
test ax, ax
jne 0x40d5b4
mov dword [ebp - 0x44], 0
jmp 0x40d57d
mov eax, dword [ebp - 0x9b4]
mov edx, dword [ebp - 0x44]
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp + 4], 0x656b37
mov dword [esp], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x40d579
mov eax, dword [ebp - 0x9b4]
mov edx, dword [ebp - 0x44]
inc edx
shl edx, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp], eax
call fcn.00597940
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edx
jmp 0x40d591
add dword [ebp - 0x44], 2
mov eax, dword [ebp - 0x9b4]
mov edx, dword [ebp - 0x44]
shl edx, 2
add eax, edx
mov eax, dword [eax]
test eax, eax
jne 0x40d534
mov eax, dword [ebp - 0x9b4]
mov dword [esp], eax
call fcn.00409685
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
or eax, edx
test eax, eax
je 0x40d5b4
mov dword [ebp - 0x34], 1
jmp 0x40d5d6
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov eax, dword [ebp - 0x30]
not eax
shr eax, 0x1f
dec dword [ebp - 0x30]
test al, al
jne 0x40d4ea
cmp dword [ebp - 0x34], 0
jne 0x40d5f2
mov dword [esp], str.Could_not_remount_root_filesystem
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Root_Filesystem_successfully_remounted_
mov dword [esp], 0x5a
call fcn.004089bc
mov dword [esp], 0x7d0
call sub.KERNEL32.dll_Sleep
sub esp, 4
mov dword [esp + 4], str.Preparing_final_jailbreak_data...
mov dword [esp], 0x5f
call fcn.004089bc
lea eax, [ebp - 0x4c8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov word [eax], 0x2f
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.0059fc30
lea eax, [ebp - 0x6c8]
mov dword [ebp - 0xbcc], 0xffffffff
mov edx, eax
mov al, 0
mov ecx, dword [ebp - 0xbcc]
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, ecx
not eax
lea edx, [eax - 1]
lea eax, [ebp - 0x6c8]
add eax, edx
mov edx, eax
mov ebx, str._Manifest.mbdb
mov eax, 0xf
mov edi, edx
mov esi, ebx
mov ecx, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], 6
mov dword [esp + 4], str.mbdb
lea eax, [ebp - 0x6c8]
mov dword [esp], eax
call fcn.00406536
test eax, eax
jns 0x40d70b
lea eax, [ebp - 0x6c8]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_write_file__s_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.00404710
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x40d73f
mov dword [esp], str.Could_not_open_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d78c
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d7d9
mov dword [esp], str.Couldnt_add_dir_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x656aa7
mov dword [esp + 8], str.Media_Recordings_.haxx
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40d826
mov dword [esp], str.Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0x1f5
mov dword [esp + 0x10], 0x1f5
mov dword [esp + 0xc], str._private_var_evasi0n_launchd.conf
mov dword [esp + 8], str.Media_Recordings_.haxx_private_etc_launchd.conf
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a2bb
test eax, eax
jns 0x40d873
mov dword [esp], str.Couldnt_add_file_to_backup
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a189
test eax, eax
jns 0x40d8c0
mov dword [esp], str.Couldnt_add_evasi0n_dir
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x1e0c0
mov dword [esp + 0x1c], 0x62da20
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1ed
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_evasi0n
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40d925
mov dword [esp], str.Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x3000
mov dword [esp + 0x1c], 0x62aa20
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_amfi.dylib
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40d98a
mov dword [esp], str.Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_udid
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40d9f5
mov dword [esp], str.Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 0x20], 0x168
mov dword [esp + 0x1c], str.bsexec_..__sbin_mount__u__o_rw_suid_dev___nsetenv_DYLD_INSERT_LIBRARIES__private_var_evasi0n_amfi.dylib_nload__System_Library_LaunchDaemons_com.apple.MobileFileIntegrity.plist_nbsexec_..__private_var_evasi0n_evasi0n_nunsetenv_DYLD_INSERT_LIBRARIES_nbsexec_..__bin_rm__f__private_var_evasi0n_sock_nbsexec_..__bin_ln__f__var_tmp_launchd_sock__private_var_evasi0n_sock_n
mov dword [esp + 0x18], 4
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x1a4
mov dword [esp + 8], str.Media_Recordings_.haxx_var_evasi0n_launchd.conf
mov dword [esp + 4], str.MediaDomain
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.0040a01b
test eax, eax
jns 0x40da5a
mov dword [esp], str.Error:_Coulnt_add_file_to_backup_
call fcn.004088f4
mov eax, 0xffffffff
jmp 0x40db40
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405591
mov eax, dword [ebp - 0x68]
mov dword [esp], eax
call fcn.00405684
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408db3
test eax, eax
jns 0x40da89
mov eax, 0xffffffff
jmp 0x40db40
mov dword [esp + 4], str.Injecting_final_jailbreak_data...
mov dword [esp], 0x61
call fcn.004089bc
mov dword [esp], 0x66
call fcn.00410559
lea eax, [ebp - 0x998]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x70]
mov dword [esp], eax
call fcn.00410734
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x40daef
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x37
mov dword [esp + 4], 1
mov dword [esp], str.Warning:_unexpected_error_while_restoring_stage_3_data_n
call sub.msvcrt.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x4c8]
mov dword [esp], eax
call fcn.0040a3fa
mov dword [esp + 4], str.Jailbreak_complete__The_device_may_restart_a_few_times_as_it_completes_the_process.
mov dword [esp], 0x64
call fcn.004089bc
mov dword [esp], 1
call fcn.00408aa5
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00408bcc
lea eax, [ebp - 0x2bc]
mov dword [esp], eax
call fcn.00409499
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret