Function at 0x43af60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47b92f
mov eax, dword fs:[0]
push eax
mov eax, 0x2370
call fcn.004765d0
mov eax, dword [0x4a6eb0]
xor eax, esp
mov dword [esp + 0x236c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a6eb0]
xor eax, esp
push eax
lea eax, [esp + 0x2384]
mov dword fs:[0], eax
mov eax, dword [esp + 0x239c]
mov edi, dword [esp + 0x2398]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2394]
xor ebx, ebx
mov dword [esp + 0x238c], ebx
cmp eax, ebx
jne 0x43afcf
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x30]
push 0x2710
push eax
call edx
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov dword [esp + 0x68], ebx
call edx
add eax, 0x10
mov dword [esp + 0x24], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 1
call edx
add eax, 0x10
mov dword [esp + 0x30], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 2
call edx
add eax, 0x10
mov dword [esp + 0x34], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 3
call edx
add eax, 0x10
mov dword [esp + 0x38], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 4
call edx
add eax, 0x10
mov dword [esp + 0x4c], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 5
call edx
add eax, 0x10
mov dword [esp + 0x48], eax
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
mov byte [esp + 0x238c], 6
call edx
add eax, 0x10
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2394]
mov byte [esp + 0x238c], 7
cmp eax, ebx
jne 0x43b0c7
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
lea edx, [esp + 0x70]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov ecx, dword [esp + 0x70]
push ecx
lea ecx, [esp + 0x24]
call fcn.00406310
lea ecx, [esp + 0x20]
mov byte [esp + 0x238c], 8
call fcn.00408420
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
jl 0x43b124
push str.VID_04E8PID_6640
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
cmp eax, ebx
je 0x43b124
sub eax, dword [esp + 0x20]
sar eax, 1
cmp eax, 0xffffffff
jle 0x43b124
mov dword [esp + 0x68], 1
mov edx, dword [0x4a743c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4a743c
call eax
add eax, 0x10
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x2394]
push 0x2710
push 3
lea ecx, [esp + 0x74]
push ecx
push edx
mov byte [esp + 0x239c], 9
mov dword [esp + 0x68], 0x4270b0
mov dword [esp + 0x6c], 0x427190
mov dword [esp + 0x70], 0x427220
mov dword [esp + 0x74], 0x42e750
mov byte [esp + 0x7c], 0x81
mov byte [esp + 0x7d], 0
mov byte [esp + 0x7e], 3
call fcn.00426f40
mov edx, dword [esp + 0x2394]
push ebx
push ebx
push 0x2710
lea eax, [esp + 0x34]
push eax
push 3
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
mov ebp, dword [sym.imp.MSVCR90.dll_atoi]
add esp, 0x1c
jmp 0x43b1c0
push 5
push 0x488874
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
push 0x2710
push eax
mov eax, dword [esp + 0x239c]
push esi
push eax
call fcn.00426f40
test eax, eax
jl 0x43b225
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
test eax, eax
je 0x43b2e9
cmp eax, 1
jne 0x43b2c6
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x178]
push str.ERROR:
push eax
mov byte [esp + edx + 0x180], 0
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
push eax
lea ecx, [esp + 0x18]
call fcn.004034c0
push str.CME_ERROR:_r_n
push str.CME_ERROR:_r_n
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2394], 0xa
call fcn.0042df00
mov ecx, eax
call fcn.0042bc40
mov ecx, dword [esp + 0x14]
push ecx
call ebp
add esp, 4
cmp eax, 0xa
je 0x43b3f2
mov edx, dword [esp + 0x14]
push edx
call fcn.0042d290
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
add esp, 4
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b2d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x43b2d6
cmp eax, 2
je 0x43b2d6
cmp eax, 0x8007048f
je 0x43b5e1
cmp ebx, 5
je 0x43b78a
inc ebx
cmp ebx, 5
jbe 0x43b1c0
push 7
push str.ATGMM_r
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
push 0x2710
push eax
mov eax, dword [esp + 0x239c]
push esi
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 2
jne 0x43b3a0
push 8
push str.ATCGMM_r
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
mov edx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push edx
call fcn.00426f40
push 3
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x239c]
push 0x2710
lea ecx, [esp + 0x34]
push ecx
push 0x2000
lea edx, [esp + 0x18c]
push edx
push eax
call fcn.00426ff0
add esp, 0x1c
test eax, eax
jne 0x43e3db
mov eax, dword [esp + 0x28]
test eax, eax
je 0x43bcfc
lea ecx, [esp + 0x78]
push 3
lea edx, [esp + 0x17c]
mov dword [esp + 0x78], ecx
push edx
lea ecx, [esp + 0x7c]
mov byte [esp + eax + 0x180], 0
call fcn.00401930
mov edx, dword [esp + 0x74]
mov byte [esp + 0x238c], 0xc
test edx, edx
jne 0x43b933
xor eax, eax
jmp 0x43b94f
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43b407
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
push str.CDeviceManager::ModemIdentify
push 0x481e70
call fcn.00403170
push 1
push 0x4825f8
call fcn.00403170
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x239c], 9
add esp, 0x10
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b455
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 8
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b479
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 7
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b4a1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 6
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b4c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 5
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b4f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 4
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b519
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 3
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b541
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 2
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b569
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 1
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b591
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 0
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b5b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
test eax, eax
mov dword [esp + 0x238c], 0xffffffff
je 0x43b5d7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 6
jmp 0x43e7fb
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43b5f6
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 8
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b622
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 7
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b64a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 6
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b672
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 5
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b69a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 4
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b6c2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 3
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b6ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 2
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b712
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 1
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b73a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 0
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b762
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
test eax, eax
mov dword [esp + 0x238c], 0xffffffff
je 0x43b780
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 3
jmp 0x43e7fb
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43b79f
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b7cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b7f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b81b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b843
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b86b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b893
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b8bb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b8e3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b90b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
mov dword [esp + 0x238c], 0xffffffff
test eax, eax
je 0x43b929
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 5
jmp 0x43e7fb
mov eax, edx
lea esi, [eax + 2]
jmp 0x43b940
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x43b940
sub eax, esi
sar eax, 1
push eax
push edx
mov ecx, edi
call fcn.004028b0
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 9
cmp eax, ecx
je 0x43b976
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
push 0x481de0
push str.CGMM:
mov ecx, edi
call fcn.004081f0
push 0x481de0
push 0x489728
mov ecx, edi
call fcn.004081f0
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x20]
push eax
mov ecx, edi
mov dword [esp + 0x4c], 0
call fcn.0040c510
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43b9d6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x20]
push edx
mov ecx, edi
call fcn.0040c510
push eax
mov ecx, edi
mov byte [esp + 0x2390], 0xd
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43ba24
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x481de0
push str.SAMSUNG
mov ecx, edi
call fcn.004081f0
push 0x481de0
push 0x48243c
mov ecx, edi
call fcn.004081f0
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jle 0x43baab
push 0x2f
push eax
call dword [sym.imp.MSVCR90.dll_wcschr]
add esp, 8
test eax, eax
je 0x43baab
sub eax, dword [edi]
sar eax, 1
js 0x43baab
push eax
push 0
lea ecx, [esp + 0x20]
push ecx
mov ecx, edi
call fcn.00407ca0
push eax
mov ecx, edi
mov byte [esp + 0x2390], 0xe
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43baab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.SCH_R350_111
lea ecx, [esp + 0x1c]
call fcn.00406310
push eax
push edi
call fcn.00406b30
mov bl, al
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bae5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x43baf7
push 8
push str.SCH_R350
mov ecx, edi
call fcn.004028b0
push str.GT_I5700
lea ecx, [esp + 0x1c]
call fcn.00406310
push eax
push edi
call fcn.00406b30
mov bl, al
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bb31
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x43bb41
push str.Unknown
mov ecx, edi
call fcn.00408800
push 0x481de0
lea ecx, [esp + 0x20]
call fcn.00408770
xor edi, edi
xor esi, esi
mov dword [esp + 0x14], 0x208
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], edi
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x1c]
push edx
push edi
push 0x2001f
push edi
push edi
push edi
push str.SoftwareSamsungNew_PC_Studio
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [esp + 0x23b0], 0xf
mov dword [esp + 0x3c], edi
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp eax, edi
jne 0x43bc78
mov esi, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x217c]
push ecx
push str.PackageVersion
lea ecx, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], edi
call fcn.00406520
test eax, eax
jne 0x43bc78
push 0x481de0
lea ecx, [esp + 0x1c]
call fcn.00406310
push ecx
lea edx, [esp + 0x217c]
mov ecx, esp
mov dword [esp + 0x58], esp
mov bl, 0x10
push edx
mov byte [esp + 0x2394], bl
call fcn.00406310
lea eax, [esp + 0x18]
push eax
call fcn.00431600
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x24]
push str.ATCGTEMRNewPCStudio__s_r_n
push edx
mov byte [esp + 0x23a0], 0x11
call fcn.00402e80
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x14
mov byte [esp + 0x238c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bc42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x18]
push ecx
lea ecx, [esp + 0x20]
call fcn.00408770
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0xf
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43bc78
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x1c]
push 0x481de0
push ecx
call fcn.004392a0
add esp, 8
test al, al
je 0x43bc9e
push 0x16
push str.ATCGTEMRNewPCStudio_r
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
mov edx, dword [esp + 0x2394]
push 0x2710
push ecx
push eax
push edx
call fcn.00426f40
push 3
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x239c]
push 0x2710
lea ecx, [esp + 0x34]
push ecx
push 0x2000
lea edx, [esp + 0x18c]
push edx
push eax
call fcn.00426ff0
add esp, 0x1c
mov byte [esp + 0x238c], 9
cmp esi, edi
je 0x43bd0c
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x43bd0c
push 0
push 0x481de0
mov ecx, edi
call fcn.004028b0
xor edi, edi
push 0xb
push str.ATIMEINUM_r
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
mov ecx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
jne 0x43beff
mov eax, dword [esp + 0x2394]
cmp eax, edi
jne 0x43bd85
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bdb1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bdd9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43be01
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43be29
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43be51
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43be79
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bea1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
mov byte [esp + 0x238c], 1
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bec9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bef1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
cmp eax, edi
jmp 0x43b76b
mov eax, dword [esp + 0x28]
cmp eax, edi
jbe 0x43c09c
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2390], 0x12
call fcn.00406310
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov bl, 0x14
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43bf63
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x4865a0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x4c], edi
call fcn.0040c510
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bf9f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x40], edi
jle 0x43bff6
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x24]
call fcn.0040c510
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2390], 0x15
call fcn.00404460
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x238c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43bff6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], edi
je 0x43c078
mov edi, dword [esp + 0x2394]
test edi, edi
jne 0x43c014
push 0x80004003
call fcn.00467970
push eax
lea ecx, [esp + 0x44]
call fcn.004068c0
mov esi, eax
push str.IMEINUM
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x16
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x17
test ecx, ecx
je 0x43c048
mov ecx, dword [ecx]
jmp 0x43c04a
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43c054
mov eax, dword [eax]
jmp 0x43c056
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x14]
call fcn.00408920
lea ecx, [esp + 0x40]
call fcn.00408920
mov eax, dword [esp + 0x18]
xor edi, edi
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43c09c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 8
push str.ATSBMM_r
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
mov ecx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
je 0x43bd70
mov eax, dword [esp + 0x28]
cmp eax, edi
jbe 0x43c292
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x34]
mov byte [esp + 0x2390], 0x18
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 9
cmp eax, ecx
je 0x43c163
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4c], edi
call fcn.0040c510
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43c19f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x3c]
call fcn.0040c510
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x2390], 0x19
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43c1f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x481de0
push str.SBMM
lea ecx, [esp + 0x38]
call fcn.004081f0
mov ecx, dword [esp + 0x30]
cmp dword [ecx - 0xc], edi
je 0x43c292
mov edi, dword [esp + 0x2394]
test edi, edi
jne 0x43c226
push 0x80004003
call fcn.00467970
mov edx, dword [esp + 0x30]
push edx
lea ecx, [esp + 0x18]
call fcn.004068c0
mov esi, eax
push str.Base_Model_Name
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2390], 0x1a
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x1b
test ecx, ecx
je 0x43c25e
mov ecx, dword [ecx]
jmp 0x43c260
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43c26a
mov eax, dword [eax]
jmp 0x43c26c
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x18]
call fcn.00408920
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00408920
xor edi, edi
push str.ATGMC_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
mov ecx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
je 0x43bd70
mov eax, dword [esp + 0x28]
cmp eax, edi
jbe 0x43c486
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x38]
mov byte [esp + 0x2390], 0x1c
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 9
cmp eax, ecx
je 0x43c357
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x4c], edi
call fcn.0040c510
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43c393
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x40]
call fcn.0040c510
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x2390], 0x1d
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43c3e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x481de0
push str.GMC:
lea ecx, [esp + 0x3c]
call fcn.004081f0
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 0xc], edi
je 0x43c486
mov edi, dword [esp + 0x2394]
test edi, edi
jne 0x43c41a
push 0x80004003
call fcn.00467970
mov edx, dword [esp + 0x34]
push edx
lea ecx, [esp + 0x18]
call fcn.004068c0
mov esi, eax
push str.CarrierID
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2390], 0x1e
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x1f
test ecx, ecx
je 0x43c452
mov ecx, dword [ecx]
jmp 0x43c454
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43c45e
mov eax, dword [eax]
jmp 0x43c460
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x18]
call fcn.00408920
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00408920
xor edi, edi
push str.ATGSN_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
mov ecx, dword [esp + 0x239c]
push eax
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 2
jne 0x43c539
push str.ATCGSN_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
push eax
mov eax, dword [esp + 0x23a0]
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
cmp eax, edi
je 0x43c74f
cmp eax, 1
jne 0x43c6cc
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x178]
push str.ERROR:
push eax
mov byte [esp + edx + 0x180], 0
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
push eax
lea ecx, [esp + 0x18]
call fcn.004034c0
push str.CME_ERROR:_r_n
push str.CME_ERROR:_r_n
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2394], 0x20
call fcn.0042df00
mov ecx, eax
call fcn.0042bc40
mov ecx, dword [esp + 0x14]
push ecx
call ebp
add esp, 4
cmp eax, 0xa
mov eax, dword [esp + 0x2394]
jne 0x43c64e
cmp eax, edi
jne 0x43c5c0
push 0x80004003
call fcn.00467970
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x34]
call eax
push str.CDeviceManager::ModemIdentify
push 0x481e70
call fcn.00403170
push 3
push 0x4825f8
call fcn.00403170
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
mov eax, dword [esp + 0x2394]
cmp eax, edi
jmp 0x43b5c2
cmp eax, edi
jne 0x43c65c
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
mov eax, dword [esp + 0x2394]
cmp eax, edi
jmp 0x43e62d
cmp eax, 0x8007048f
jne 0x43c74f
mov eax, dword [esp + 0x2394]
cmp eax, edi
jne 0x43c6e8
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
mov eax, dword [esp + 0x2394]
cmp eax, edi
jmp 0x43b76b
mov eax, dword [esp + 0x28]
cmp eax, edi
jbe 0x43c810
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
mov esi, dword [esp + 0x2c]
push edx
mov ecx, esi
mov byte [esp + 0x2390], 0x21
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 9
cmp eax, ecx
je 0x43c7b4
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x20]
push eax
mov ecx, esi
mov dword [esp + 0x4c], edi
call fcn.0040c510
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x1c]
push edx
mov ecx, esi
call fcn.0040c510
push eax
mov ecx, esi
mov byte [esp + 0x2390], 0x22
call fcn.00404460
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00450df0
jmp 0x43c820
mov esi, dword [esp + 0x2c]
push 0x481de0
mov ecx, esi
call fcn.00403480
push str.ATPBDYN__r
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
push eax
mov eax, dword [esp + 0x23a0]
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
jne 0x43c8a0
mov eax, dword [esp + 0x2394]
cmp eax, edi
jne 0x43c893
push 0x80004003
call fcn.00467970
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x34]
call eax
jmp 0x43c6f0
mov eax, dword [esp + 0x28]
cmp eax, edi
jbe 0x43c98d
mov byte [esp + eax + 0x178], 0
lea eax, [esp + 0x178]
push eax
lea ecx, [esp + 0x78]
call fcn.00402070
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x2390], 0x23
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 9
cmp eax, ecx
je 0x43c8f7
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
mov dword [esp + 0x4c], edi
call fcn.0040c510
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x30]
call fcn.0040c510
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x2390], 0x24
call fcn.00404460
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00450df0
push edi
push str.PBDYN
lea ecx, [esp + 0x2c]
call fcn.00401ff0
cmp eax, edi
jl 0x43c98d
push 0x481de0
push str.PBDYN:
lea ecx, [esp + 0x2c]
call fcn.004081f0
lea ecx, [esp + 0x24]
call fcn.00403110
mov ecx, eax
call fcn.00402a10
mov eax, dword [esp + 0x24]
mov eax, dword [eax - 0xc]
cmp eax, edi
je 0x43ca38
push edi
push str.ERROR
lea ecx, [esp + 0x2c]
call fcn.00401ff0
cmp eax, 0xffffffff
jne 0x43ca38
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x30]
call fcn.00404600
lea ecx, [esp + 0x2394]
call fcn.004010a0
mov edx, dword [esp + 0x24]
push edx
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.004068c0
mov edi, eax
push str.PhoneNumber
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2390], 0x25
call fcn.00406830
mov ebp, eax
mov ebx, dword [esi]
mov ecx, edi
mov byte [esp + 0x238c], 0x26
call fcn.00406970
push eax
mov ecx, ebp
call fcn.00406970
push eax
mov eax, dword [ebx + 0x6c]
push esi
call eax
lea ecx, [esp + 0x18]
call fcn.00408920
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00408920
mov esi, dword [esp + 0x2c]
xor edi, edi
push edi
push str.ERROR
mov ecx, esi
call fcn.00401ff0
cmp eax, 0xffffffff
mov edi, dword [esp + 0x2394]
jle 0x43ca97
test edi, edi
jne 0x43ca5f
push 0x80004003
call fcn.00467970
push str.TRUE
lea ecx, [esp + 0x1c]
call fcn.00406830
mov esi, eax
push str.TEMPORARY_IMEI
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x27
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x28
test ecx, ecx
je 0x43cadd
mov ecx, dword [ecx]
jmp 0x43cadf
test edi, edi
jne 0x43caa5
push 0x80004003
call fcn.00467970
push 0x489554
lea ecx, [esp + 0x1c]
call fcn.00406830
mov esi, eax
push str.TEMPORARY_IMEI
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x29
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x2a
test ecx, ecx
je 0x43cadd
mov ecx, dword [ecx]
jmp 0x43cadf
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43cae9
mov eax, dword [eax]
jmp 0x43caeb
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x2c]
call fcn.00408920
lea ecx, [esp + 0x18]
mov byte [esp + 0x238c], 9
call fcn.00408920
push 0
push str.VID_04E8
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cbae
push 0
push str.PID_6651
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cbae
push 0
push str.IF_MOD_2K
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cbae
push str.ATE0_r_n
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
mov ecx, dword [esp + 0x239c]
push eax
push ecx
call fcn.00426f40
test eax, eax
jl 0x43cc4c
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
jmp 0x43cc44
push 0
push str.VID_04E8
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cc4c
push 0
push str.PID_6651
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cc4c
push 0
push str.IF_JAVACOMM
lea ecx, [esp + 0x28]
call fcn.00401ff0
cmp eax, 0xffffffff
jle 0x43cc4c
push str.ATE0_r_n
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
push eax
mov eax, dword [esp + 0x23a0]
push eax
call fcn.00426f40
test eax, eax
jl 0x43cc4c
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
push 0x4894f4
lea ecx, [esp + 0x20]
call fcn.00403310
mov ebp, dword [sym.imp.MSVCR90.dll_wcsstr]
xor edi, edi
mov bl, 0x2d
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x43ccc4
jl 0x43cc8b
push str.ERROR
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43cc8b
sub eax, dword [esp + 0x24]
sar eax, 1
cmp eax, 0xffffffff
jne 0x43ccc4
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jl 0x43ccaf
push str.VID_04E8PID_6651
push eax
call ebp
add esp, 8
test eax, eax
je 0x43ccaf
sub eax, dword [esp + 0x20]
sar eax, 1
cmp eax, 0xffffffff
jg 0x43ccc4
push str.ATUMVERSION__r_n
lea ecx, [esp + 0x20]
call fcn.00403310
push 0x4894f4
jmp 0x43ccd7
push str.ATSWVER__r
lea ecx, [esp + 0x20]
call fcn.00403310
push 0x4894b0
lea ecx, [esp + 0x28]
call fcn.00408800
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
mov edx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push edx
call fcn.00426f40
push 3
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x239c]
push 0x2710
lea ecx, [esp + 0x34]
push ecx
push 0x2000
lea edx, [esp + 0x18c]
push edx
push eax
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
je 0x43b5e1
mov eax, dword [esp + 0x28]
test eax, eax
jbe 0x43cea8
lea ecx, [esp + 0x78]
push 3
lea edx, [esp + 0x17c]
mov dword [esp + 0x78], ecx
push edx
lea ecx, [esp + 0x7c]
mov byte [esp + eax + 0x180], 0
call fcn.00401930
mov eax, dword [esp + 0x74]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x2b
call fcn.00406310
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43cd96
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x4c], 0
call fcn.0040c510
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43cdd6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
call fcn.0040c510
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x2e
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43ce27
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43ceb7
push str.SWVER
push ecx
call ebp
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x43ce75
sub eax, ecx
sar eax, 1
js 0x43ce75
push 0x481de0
push str.SWVER:
lea ecx, [esp + 0x1c]
call fcn.004081f0
lea ecx, [esp + 0x14]
call fcn.00403110
mov ecx, eax
call fcn.00402a10
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43ceb7
push str.ERROR
push ecx
call ebp
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x43ceb7
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
je 0x43ceb7
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00450df0
inc edi
cmp edi, 2
jl 0x43cc64
jmp 0x43cf3b
mov edi, dword [esp + 0x2394]
test edi, edi
jne 0x43cecc
push 0x80004003
call fcn.00467970
push ecx
lea ecx, [esp + 0x1c]
call fcn.004068c0
mov esi, eax
push str.SoftwareRevision
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x2f
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x30
test ecx, ecx
je 0x43cf00
mov ecx, dword [ecx]
jmp 0x43cf02
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43cf0c
mov eax, dword [eax]
jmp 0x43cf0e
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x2c]
call fcn.00408920
lea ecx, [esp + 0x18]
call fcn.00408920
lea ecx, [esp + 0x14]
mov byte [esp + 0x238c], 9
call fcn.00450df0
push str.ATHIDSWVER__r
lea ecx, [esp + 0x20]
call fcn.00403310
mov esi, dword [esp + 0x1c]
xor edi, edi
mov bl, 0x33
mov eax, dword [esi - 0xc]
mov ecx, dword [esp + 0x2394]
push 0x2710
push eax
push esi
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
je 0x43b5e1
mov eax, dword [esp + 0x28]
test eax, eax
jbe 0x43d137
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x31
call fcn.00406310
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43d003
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x40], 0
call fcn.00408420
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x20]
call fcn.0040c510
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d04c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x20]
call fcn.0040c510
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x34
call fcn.00404460
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d09d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43d146
push str.HIDSWVER
push ecx
call ebp
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x43d0eb
sub eax, ecx
sar eax, 1
js 0x43d0eb
push 0x481de0
push str.HIDSWVER:
lea ecx, [esp + 0x1c]
call fcn.004081f0
lea ecx, [esp + 0x14]
call fcn.00403110
mov ecx, eax
call fcn.00402a10
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43d146
push str.ERROR
push ecx
call ebp
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x43d10d
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jne 0x43d113
cmp dword [ecx - 0xc], 0
jne 0x43d146
lea eax, [ecx - 0x10]
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d137
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
inc edi
cmp edi, 2
jl 0x43cf51
jmp 0x43d1e1
mov esi, dword [esp + 0x2394]
test esi, esi
jne 0x43d15b
push 0x80004003
call fcn.00467970
push ecx
lea ecx, [esp + 0x1c]
call fcn.004068c0
mov edi, eax
push 0x48885c
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x35
call fcn.00406830
mov ecx, dword [edi]
mov byte [esp + 0x238c], 0x36
test ecx, ecx
je 0x43d18f
mov ecx, dword [ecx]
jmp 0x43d191
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43d19b
mov eax, dword [eax]
jmp 0x43d19d
xor eax, eax
mov edx, dword [esi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push esi
call eax
lea ecx, [esp + 0x2c]
call fcn.00408920
lea ecx, [esp + 0x18]
call fcn.00408920
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d1e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jl 0x43d2bc
push str.VID_04E8
push eax
call ebp
add esp, 8
test eax, eax
je 0x43d2bc
mov ecx, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jle 0x43d2bc
cmp dword [ecx - 0xc], 0
jl 0x43d2bc
push str.PID_6651
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43d2bc
mov ecx, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jle 0x43d2bc
cmp dword [ecx - 0xc], 0
jl 0x43d2bc
push str.IF_MOD_2K
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43d2bc
sub eax, dword [esp + 0x20]
sar eax, 1
cmp eax, 0xffffffff
jle 0x43d2bc
push str.ATE0_r_n
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
mov ecx, dword [esp + 0x239c]
push eax
push ecx
call fcn.00426f40
test eax, eax
jl 0x43d2bc
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
push 0x11
push str.ATPRODUCTCODE__r_n
lea ecx, [esp + 0x24]
call fcn.00402ba0
mov esi, dword [esp + 0x1c]
mov eax, dword [esi - 0xc]
push 0x2710
push eax
mov eax, dword [esp + 0x239c]
push esi
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
jne 0x43d33e
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43d331
push 0x80004003
call fcn.00467970
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x34]
call eax
jmp 0x43b5fe
mov eax, dword [esp + 0x28]
test eax, eax
jbe 0x43d5f1
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x37
call fcn.00406310
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov bl, 0x39
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43d3a2
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x4c], 0
call fcn.0040c510
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d3e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], 0
jl 0x43d44a
push str.VID_04E8
push eax
call ebp
add esp, 8
test eax, eax
je 0x43d44a
mov ecx, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jle 0x43d44a
cmp dword [ecx - 0xc], 0
jl 0x43d44a
push str.PID_6651
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43d44a
mov ecx, dword [esp + 0x20]
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jle 0x43d44a
cmp dword [ecx - 0xc], 0
jl 0x43d44a
push str.IF_MOD_2K
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43d44a
sub eax, dword [esp + 0x20]
sar eax, 1
cmp eax, 0xffffffff
jg 0x43d49b
lea ecx, [esp + 0x40]
push ecx
push 0x489328
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x20]
call fcn.0040c510
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x3a
call fcn.00404460
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d49b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43d509
push str.PRODUCTCODE
push ecx
call ebp
mov ecx, dword [esp + 0x1c]
add esp, 8
test eax, eax
je 0x43d4e5
sub eax, ecx
sar eax, 1
js 0x43d4e5
push 0x481de0
push str.PRODUCTCODE:
lea ecx, [esp + 0x1c]
call fcn.004081f0
lea ecx, [esp + 0x14]
call fcn.00403110
mov ecx, eax
call fcn.00402a10
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jl 0x43d509
push str.ERROR
push ecx
call ebp
add esp, 8
test eax, eax
je 0x43d509
sub eax, dword [esp + 0x14]
sar eax, 1
cmp eax, 0xffffffff
jne 0x43d5c9
push 3
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004027f0
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x3b
call fcn.00404460
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], bl
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x43d552
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [esp + 0x2394]
test edi, edi
jne 0x43d567
push 0x80004003
call fcn.00467970
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004068c0
mov esi, eax
push str.ProductCode
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x3c
call fcn.00406830
mov ecx, dword [esi]
mov byte [esp + 0x238c], 0x3d
test ecx, ecx
je 0x43d59f
mov ecx, dword [ecx]
jmp 0x43d5a1
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x43d5ab
mov eax, dword [eax]
jmp 0x43d5ad
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x2c]
call fcn.00408920
lea ecx, [esp + 0x18]
call fcn.00408920
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d5f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.ATCLOCK__r
lea ecx, [esp + 0x54]
call fcn.004034c0
mov eax, dword [esp + 0x50]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
mov ecx, dword [esp + 0x239c]
push eax
push ecx
mov byte [esp + 0x239c], 0x3e
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
mov ebp, dword [sym.imp.MSVCR90.dll_swscanf_s]
add esp, 0x1c
test eax, eax
jne 0x43d94d
mov esi, dword [esp + 0x28]
test esi, esi
je 0x43d94d
mov eax, dword [0x4a743c]
mov edx, dword [eax + 0xc]
mov ecx, 0x4a743c
call edx
add eax, 0x10
mov dword [esp + 0x2c], eax
push 3
lea ecx, [esp + 0x17c]
lea eax, [esp + 0x7c]
push ecx
mov bl, 0x3f
lea ecx, [esp + 0x7c]
mov byte [esp + 0x2394], bl
mov byte [esp + esi + 0x180], 0
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x2390], 0x40
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43d6df
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x14], 0
cmp dword [esi - 0xc], 0
jge 0x43d6f6
or eax, 0xffffffff
jmp 0x43d712
push str.CLOCK:
push esi
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
jne 0x43d70e
or eax, 0xffffffff
jmp 0x43d712
sub eax, esi
sar eax, 1
lea edx, [esp + 0x14]
push edx
lea eax, [esi + eax*2]
push str.CLOCK:_d
push eax
call ebp
add esp, 0xc
cmp dword [esp + 0x14], 1
jne 0x43d929
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43d745
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 0x3e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d771
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d799
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d7c1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d7e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d811
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d839
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d861
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d889
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d8b1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d8d9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d901
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
mov dword [esp + 0x238c], 0xffffffff
test eax, eax
je 0x43d91f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0x17
jmp 0x43e7fb
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 0x3e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43d94d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x4a743c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4a743c
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x14], esi
push str.ATCIMI_r
lea ecx, [esp + 0x20]
mov byte [esp + 0x2390], 0x41
call fcn.00403310
mov edi, dword [esp + 0x1c]
mov eax, dword [edi - 0xc]
mov ecx, dword [esp + 0x2394]
push 0x2710
push eax
push edi
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
cmp eax, 0x8007048f
jne 0x43da3b
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43d9df
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 0x3e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43da0b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43da33
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
jmp 0x43b601
mov eax, dword [esp + 0x28]
test eax, eax
jbe 0x43daf8
push 3
lea ecx, [esp + 0x17c]
mov byte [esp + eax + 0x17c], 0
lea eax, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
call fcn.00401930
mov edx, dword [esp + 0x74]
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x42
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], 0x41
cmp eax, ecx
je 0x43da9e
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea edx, [esp + 0x40]
push edx
push 0x489328
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x20]
mov dword [esp + 0x4c], 0
call fcn.0040c510
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2390], 0x43
call fcn.00404460
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0x41
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43daf8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x68], 0
je 0x43e1e5
push str.ATPMODE1_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
mov ecx, dword [esp + 0x239c]
push eax
push ecx
call fcn.00426f40
push 3
lea edx, [esp + 0x5c]
push edx
mov edx, dword [esp + 0x239c]
push 0x2710
lea eax, [esp + 0x34]
push eax
push 0x2000
lea ecx, [esp + 0x18c]
push ecx
push edx
call fcn.00426ff0
add esp, 0x1c
push str.ATCHKUSIM_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov edi, dword [esp + 0x1c]
mov eax, dword [edi - 0xc]
push 0x2710
push eax
mov eax, dword [esp + 0x239c]
push edi
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
test eax, eax
jne 0x43dc99
mov edx, dword [0x4a743c]
mov eax, dword [edx + 0xc]
mov ecx, 0x4a743c
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x178]
push ecx
lea edx, [esp + 0x30]
push 0x4831fc
push edx
mov byte [esp + 0x2398], 0x44
call fcn.0040ebb0
mov esi, dword [esp + 0x38]
add esp, 0xc
cmp dword [esi - 0xc], 0
jl 0x43dc88
push 0x4893b0
push esi
call dword [sym.imp.MSVCR90.dll__mbsstr]
add esp, 8
test eax, eax
je 0x43dc88
sub eax, esi
js 0x43dc88
lea ecx, [esp + 0x2c]
call fcn.00450df0
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x50]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
jmp 0x43b5b9
lea ecx, [esp + 0x2c]
mov byte [esp + 0x238c], 0x41
call fcn.00450df0
push str.ATCHKLOCK_r
lea ecx, [esp + 0x1c]
call fcn.004034c0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0xc]
push 0x2710
push ecx
push eax
mov eax, dword [esp + 0x23a0]
push eax
mov byte [esp + 0x239c], 0x45
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
test eax, eax
jne 0x43dee8
mov esi, dword [esp + 0x28]
test esi, esi
je 0x43dee8
lea ecx, [esp + 0x40]
call fcn.004023f0
lea edx, [esp + 0x178]
mov bl, 0x46
push edx
lea ecx, [esp + 0x78]
mov byte [esp + 0x2390], bl
mov byte [esp + esi + 0x17c], 0
call fcn.00402070
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2390], 0x47
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43dd68
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
push 0
push str.CHKLOCK:
lea ecx, [esp + 0x48]
mov dword [esp + 0x70], 0
call fcn.00401ff0
test eax, eax
jge 0x43de16
lea ecx, [esp + 0x2394]
call fcn.004010a0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x34]
call eax
lea ecx, [esp + 0x40]
call fcn.00450df0
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x50]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
jmp 0x43d901
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0x68]
push edx
lea eax, [ecx + eax*2]
push str.CHKLOCK:_d
push eax
call ebp
add esp, 0xc
cmp dword [esp + 0x68], 1
jne 0x43ded7
lea ecx, [esp + 0x2394]
call fcn.004010a0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea ecx, [esp + 0x40]
call fcn.00450df0
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x50]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
lea ecx, [esp + 0x2394]
call fcn.00410b30
mov eax, 0x17
jmp 0x43e7fb
lea ecx, [esp + 0x40]
mov byte [esp + 0x238c], 0x45
call fcn.00450df0
mov eax, dword [esp + 0x2394]
push 0x2710
push 0xc
push str.ATCHKIDLE__r
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
add esp, 0x1c
test eax, eax
jne 0x43e1bd
mov esi, dword [esp + 0x28]
test esi, esi
je 0x43e1bd
lea ecx, [esp + 0x40]
call fcn.004023f0
lea edx, [esp + 0x178]
mov bl, 0x48
push edx
lea ecx, [esp + 0x78]
mov byte [esp + 0x2390], bl
mov byte [esp + esi + 0x17c], 0
call fcn.00402070
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x2390], 0x49
call fcn.00403480
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x78]
mov byte [esp + 0x238c], bl
cmp eax, ecx
je 0x43df9f
push eax
call dword [sym.imp.MSVCR90.dll_free]
add esp, 4
lea ecx, [esp + 0x40]
call fcn.00408420
push 0
push str.CHKIDLE:
lea ecx, [esp + 0x48]
call fcn.00401ff0
test eax, eax
jge 0x43e071
lea ecx, [esp + 0x2394]
call fcn.004010a0
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x34]
call eax
lea ecx, [esp + 0x40]
call fcn.00450df0
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x50]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
mov eax, dword [esp + 0x2394]
mov dword [esp + 0x238c], 0xffffffff
test eax, eax
je 0x43e067
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xe
jmp 0x43e7fb
mov ecx, dword [esp + 0x40]
lea edx, [esp + 0x54]
push edx
lea eax, [ecx + eax*2]
push str.CHKIDLE:_d
push eax
call ebp
add esp, 0xc
cmp dword [esp + 0x54], 0
jne 0x43e132
lea ecx, [esp + 0x2394]
call fcn.004010a0
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea ecx, [esp + 0x40]
call fcn.00450df0
lea ecx, [esp + 0x18]
call fcn.00450df0
lea ecx, [esp + 0x14]
call fcn.00450df0
lea ecx, [esp + 0x50]
call fcn.00450df0
lea ecx, [esp + 0x1c]
call fcn.00450df0
lea ecx, [esp + 0x20]
call fcn.00450df0
lea ecx, [esp + 0x3c]
call fcn.00450df0
lea ecx, [esp + 0x48]
call fcn.00450df0
lea ecx, [esp + 0x4c]
call fcn.00450df0
lea ecx, [esp + 0x38]
call fcn.00450df0
lea ecx, [esp + 0x34]
call fcn.00450df0
lea ecx, [esp + 0x30]
call fcn.00450df0
lea ecx, [esp + 0x24]
call fcn.00450df0
lea ecx, [esp + 0x2394]
call fcn.00410b30
mov eax, 0xe
jmp 0x43e7fb
push str.ATPMODE5_r
lea ecx, [esp + 0x20]
call fcn.00403310
mov edi, dword [esp + 0x1c]
mov eax, dword [edi - 0xc]
push 0x2710
push eax
mov eax, dword [esp + 0x239c]
push edi
push eax
call fcn.00426f40
push 3
lea ecx, [esp + 0x5c]
push ecx
mov ecx, dword [esp + 0x239c]
push 0x2710
lea edx, [esp + 0x34]
push edx
push 0x2000
lea eax, [esp + 0x18c]
push eax
push ecx
call fcn.00426ff0
push 3
lea edx, [esp + 0x78]
push edx
mov edx, dword [esp + 0x23b8]
push 0x2710
lea eax, [esp + 0x50]
push eax
push 0x2000
lea ecx, [esp + 0x1a8]
push ecx
push edx
call fcn.00426ff0
add esp, 0x38
lea ecx, [esp + 0x40]
call fcn.00450df0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0x41
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e1e5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
test eax, eax
jne 0x43e1fa
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0x3e
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e22a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e252
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e276
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e29e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e2c6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e2ee
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e316
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e33e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e366
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e38e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e3b6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
mov dword [esp + 0x238c], 0xffffffff
test eax, eax
je 0x43e3d4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
jmp 0x43e7fb
cmp eax, 1
jne 0x43e64c
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x178]
push str.ERROR:
push ecx
mov byte [esp + eax + 0x180], 0
call dword [sym.imp.MSVCR90.dll_strstr]
add esp, 8
push eax
lea ecx, [esp + 0x30]
call fcn.004034c0
push str.CME_ERROR:_r_n
push str.CME_ERROR:_r_n
lea ecx, [esp + 0x34]
mov byte [esp + 0x2394], 0xb
call fcn.0042df00
mov ecx, eax
call fcn.0042bc40
mov edx, dword [esp + 0x2c]
push edx
call ebp
add esp, 4
cmp eax, 0xa
mov eax, dword [esp + 0x2394]
jne 0x43e482
test eax, eax
jne 0x43e456
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
push str.CDeviceManager::ModemIdentify
push 0x481e70
call fcn.00403170
push 2
push 0x4825f8
call fcn.00403170
mov eax, dword [esp + 0x3c]
jmp 0x43b42e
test eax, eax
jne 0x43e490
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 9
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e4c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e4e4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e50c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e534
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e55c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e584
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e5ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e5d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e5fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e624
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
test eax, eax
mov dword [esp + 0x238c], 0xffffffff
je 0x43e642
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 2
jmp 0x43e7fb
cmp eax, 0x8007048f
mov eax, dword [esp + 0x2394]
je 0x43b5e8
test eax, eax
jne 0x43e66c
push 0x80004003
call fcn.00467970
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
lea eax, [esi - 0x10]
mov byte [esp + 0x238c], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e698
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e6c0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 6
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e6e8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e710
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e738
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e760
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e788
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e7b0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x238c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43e7d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x2394]
mov dword [esp + 0x238c], 0xffffffff
test eax, eax
je 0x43e7f6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, 0xa
mov ecx, dword [esp + 0x2384]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x236c]
xor ecx, esp
call fcn.004764f6
add esp, 0x237c
ret