Function at 0x440520
Capabilities:
Get disk information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x478e05
mov eax, dword fs:[0]
push eax
sub esp, 0x508
mov eax, dword [0x49eef8]
xor eax, esp
mov dword [esp + 0x504], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49eef8]
xor eax, esp
push eax
lea eax, [esp + 0x51c]
mov dword fs:[0], eax
mov edi, dword [esp + 0x52c]
push edi
push 0x485978
call fcn.00403100
add esp, 8
push edi
mov ecx, 0x49f188
call fcn.00421140
mov esi, eax
xor ebx, ebx
cmp esi, ebx
je 0x440596
mov ecx, esi
call fcn.00408600
mov ecx, esi
call fcn.00408890
jmp 0x442a65
push edi
call fcn.004299b0
mov esi, eax
add esp, 4
cmp esi, ebx
jbe 0x4406db
mov dword [esp + 0x20], ebx
lea eax, [esp + 0x68]
push eax
push 0x47da00
push 0x17
push ebx
push 0x47e294
mov dword [esp + 0x538], ebx
mov dword [esp + 0x64], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jl 0x44060e
mov ecx, dword [esp + 0x68]
push ecx
call dword [sym.imp.ole32.dll_OleRun]
mov edi, eax
cmp edi, ebx
jl 0x4405fe
mov eax, dword [esp + 0x68]
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x50]
push ecx
push 0x47df80
push eax
call edx
mov edi, eax
mov eax, dword [esp + 0x68]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp edi, ebx
jge 0x440626
xor eax, eax
cmp edi, ebx
mov dword [esp + 0x50], eax
jge 0x44062a
cmp edi, 0x80004002
je 0x44062a
push edi
call fcn.004634f0
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 1
cmp eax, ebx
jne 0x440640
push 0x80004003
call fcn.004634f0
mov edi, dword [eax]
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
add edi, 0x24
call ebp
push eax
mov eax, dword [edi]
push ebx
call eax
mov ebx, dword [esp + 0x50]
test ebx, ebx
jne 0x440667
push 0x80004003
call fcn.004634f0
mov eax, dword [esp + 0x20]
test eax, eax
je 0x440677
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [esp + 0x20], 0
mov edi, dword [ebx]
lea eax, [esp + 0x20]
push eax
add edi, 0x20
call ebp
mov ecx, dword [esp + 0x530]
mov edx, dword [edi]
push eax
push ecx
push ebx
call edx
mov ecx, dword [esp + 0x20]
xor ebp, ebp
cmp ecx, ebp
sete al
test al, al
je 0x4406e5
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 0
cmp eax, ebp
je 0x4406c4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x524], 0xffffffff
cmp ecx, ebp
je 0x4406db
mov eax, dword [ecx]
push ecx
mov ecx, dword [eax + 8]
call ecx
mov eax, 0x490
jmp 0x442a67
mov edx, dword [0x49f474]
mov eax, dword [edx + 0xc]
mov ecx, 0x49f474
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x48], ebx
mov eax, dword [esp + 0x20]
mov byte [esp + 0x524], 2
cmp eax, ebp
jne 0x440716
push 0x80004003
call fcn.004634f0
mov ecx, dword [eax]
lea edx, [esp + 0x78]
push edx
push eax
mov eax, dword [ecx + 0x3c]
call eax
mov eax, dword [esp + 0x78]
cmp eax, ebp
je 0x440753
push eax
lea ecx, [esp + 0x4c]
call fcn.00403410
mov ecx, dword [esp + 0x78]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebx, dword [esp + 0x48]
push ebx
push str.HARDWAREID
push esi
call fcn.0040cc90
add esp, 0xc
mov edx, dword [0x49f474]
mov eax, dword [edx + 0xc]
mov ecx, 0x49f474
call eax
add eax, 0x10
mov dword [esp + 0x6c], eax
mov edi, dword [esp + 0x20]
mov byte [esp + 0x524], 3
cmp edi, ebp
jne 0x440784
push 0x80004003
call fcn.004634f0
push 0x47e440
lea ecx, [esp + 0x40]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 4
cmp eax, ebp
je 0x4407a4
mov eax, dword [eax]
jmp 0x4407a6
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x80]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x524], 3
call fcn.00407820
mov eax, dword [esp + 0x80]
cmp eax, ebp
je 0x4407fe
push eax
lea ecx, [esp + 0x70]
call fcn.00403410
mov ecx, dword [esp + 0x80]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [esp + 0x6c]
push edx
push 0x47e440
push esi
call fcn.0040cc90
add esp, 0xc
mov eax, dword [0x49f474]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f474
call edx
add eax, 0x10
mov dword [esp + 0x64], eax
mov edi, dword [esp + 0x20]
mov byte [esp + 0x524], 5
cmp edi, ebp
jne 0x44082e
push 0x80004003
call fcn.004634f0
push 0x47e570
lea ecx, [esp + 0x40]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 6
cmp eax, ebp
je 0x44084e
mov eax, dword [eax]
jmp 0x440850
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x7c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x524], 5
call fcn.00407820
mov eax, dword [esp + 0x7c]
cmp eax, ebp
je 0x44089f
push eax
lea ecx, [esp + 0x68]
call fcn.00403410
mov ecx, dword [esp + 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [esp + 0x64]
push edx
push 0x47e570
push esi
call fcn.0040cc90
add esp, 0xc
push 0x47dd68
push 0x483ee8
push esi
call fcn.0040cc90
push 0x47dd68
push str.USBSTORID
push esi
call fcn.0040cc90
push 0x47dd68
push str.DeviceAction
push esi
call fcn.0040cc90
mov eax, dword [0x49f474]
mov edx, dword [eax + 0xc]
add esp, 0x24
mov ecx, 0x49f474
call edx
add eax, 0x10
mov dword [esp + 0x60], eax
mov eax, dword [0x49f474]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f474
mov byte [esp + 0x524], 7
call edx
add eax, 0x10
mov dword [esp + 0x70], eax
push ecx
lea eax, [ebx - 0x10]
mov dword [esp + 0x34], esp
mov edi, esp
push eax
mov byte [esp + 0x52c], 8
mov dword [esp + 0xb8], eax
call fcn.00401510
add eax, 0x10
add esp, 4
mov dword [edi], eax
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x52c], 9
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x52c], 8
call fcn.00416be0
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0xa
call fcn.0040cc90
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44098f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str.false
push str.IsComposite
push esi
call fcn.0040cc90
mov edx, dword [0x49f474]
mov eax, dword [edx + 0xc]
add esp, 0xc
mov ecx, 0x49f474
mov dword [esp + 0x14], ebp
call eax
lea ebx, [eax + 0x10]
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x20]
mov byte [esp + 0x524], 0xb
cmp eax, ebp
jne 0x4409d7
push 0x80004003
call fcn.004634f0
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
mov eax, dword [esp + 0x3c]
cmp eax, ebp
je 0x440ae4
cmp eax, 0x10
je 0x440ae4
cmp eax, 4
je 0x440a0c
cmp eax, 3
je 0x440a0c
cmp eax, 0x11
jne 0x440c1a
push ecx
lea edx, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x60], esp
push edx
call fcn.004023a0
mov byte [esp + 0x528], 0xe
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x528], 0xb
call fcn.00416dd0
cmp eax, ebp
mov eax, str.true
jne 0x440a47
mov eax, str.false
push eax
push str.IsComposite
push esi
call fcn.0040cc90
mov edi, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x440a6c
push 0x80004003
call fcn.004634f0
push str.StorageName
lea ecx, [esp + 0x44]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0xf
cmp eax, ebp
je 0x440a8c
mov eax, dword [eax]
jmp 0x440a8e
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407820
mov ecx, dword [esp + 0x1c]
push ecx
lea ecx, [esp + 0x30]
call fcn.004062a0
mov edx, dword [esp + 0x2c]
push edx
push str.StorageName
push esi
mov byte [esp + 0x530], 0x10
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x2c]
call fcn.00401e00
jmp 0x440c1a
mov edi, dword [esp + 0x20]
cmp edi, ebp
jne 0x440af6
push 0x80004003
call fcn.004634f0
push str.CONMODES
lea ecx, [esp + 0x44]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0xc
cmp eax, ebp
je 0x440b16
mov eax, dword [eax]
jmp 0x440b18
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407820
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x64]
call fcn.00403410
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x60]
push edi
push str.CONMODES
push esi
mov dword [esp + 0x20], ebp
call fcn.0040cc90
add esp, 0xc
cmp dword [edi - 0xc], ebp
je 0x440b7f
push str.true
push str.IsComposite
push esi
call fcn.0040cc90
add esp, 0xc
mov edi, dword [esp + 0x20]
cmp edi, ebp
jne 0x440b91
push 0x80004003
call fcn.004634f0
push str.CheckLock
lea ecx, [esp + 0x44]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0xd
cmp eax, ebp
je 0x440bb1
mov eax, dword [eax]
jmp 0x440bb3
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x524], 0xb
call fcn.00407820
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x74]
call fcn.00403410
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x70]
push edi
push str.CheckLock
push esi
mov dword [esp + 0x20], ebp
call fcn.0040cc90
add esp, 0xc
cmp dword [edi - 0xc], ebp
je 0x440c1a
push str.true
push str.IsComposite
push esi
call fcn.0040cc90
add esp, 0xc
lea eax, [ebx - 0x10]
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x440c3e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
push 0x206
push ecx
lea edx, [esp + 0x112]
push edx
mov word [esp + 0x114], cx
call sub.MSVCR90.dll_memset
mov eax, dword [0x49f474]
mov edx, dword [eax + 0xc]
add esp, 0xc
mov ecx, 0x49f474
call edx
add eax, 0x10
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x20]
or ebp, 0xffffffff
mov byte [esp + 0x524], 0x11
mov dword [esp + 0x3c], ebp
test eax, eax
jne 0x440c95
push 0x80004003
call fcn.004634f0
mov ecx, dword [eax]
lea edx, [esp + 0x44]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
mov eax, dword [esp + 0x44]
cmp eax, 0x10
ja case.0x440cb6.2
movzx ecx, byte [eax + 0x442aac]
jmp dword [ecx*4 + 0x442a90]
mov ebp, dword [esp + 0x52c]
lea edx, [esp + 0xa8]
push esi
push edx
call fcn.0042fad0
mov eax, dword [eax]
push eax
push 0x47e490
push esi
mov byte [esp + 0x538], 0x12
call fcn.0040cc90
add esp, 0x14
lea ecx, [esp + 0xa8]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
lea eax, [esp + 0xb4]
push esi
push eax
call fcn.0042fbe0
mov eax, dword [eax]
push eax
push 0x47e47c
push esi
mov byte [esp + 0x538], 0x13
call fcn.0040cc90
add esp, 0x14
lea ecx, [esp + 0xb4]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
lea ecx, [esp + 0xec]
push esi
push ecx
call fcn.0042fcf0
mov eax, dword [eax]
push eax
push 0x47e464
push esi
mov byte [esp + 0x538], 0x14
call fcn.0040cc90
add esp, 0x14
lea ecx, [esp + 0xec]
call fcn.00401e00
lea ecx, [esp + 0x28]
mov dword [esp + 0x34], 0
call fcn.00402380
mov eax, dword [esp + 0x20]
mov bl, 0x15
mov byte [esp + 0x524], bl
test eax, eax
jne 0x440d99
push 0x80004003
call fcn.004634f0
push 0x482eb4
lea ecx, [esp + 0xa4]
mov edi, eax
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0x16
test eax, eax
je 0x440dbe
mov eax, dword [eax]
jmp 0x440dc0
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x34]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0xa0]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x34]
test eax, eax
je 0x440e06
push eax
lea ecx, [esp + 0x2c]
call fcn.00403410
mov eax, dword [esp + 0x34]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
xor edi, edi
mov dword [esp + 0x34], edi
jmp 0x440e08
xor edi, edi
mov eax, dword [esp + 0x28]
cmp dword [eax - 0xc], edi
jge 0x440e1b
push 0x80070057
call fcn.00401120
movzx eax, word [eax]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.00419b00
mov ecx, eax
call fcn.00412e40
mov edx, dword [esp + 0x2c]
push edx
push str.USBSTORID
push esi
mov byte [esp + 0x530], 0x17
call fcn.0040cc90
mov eax, dword [esp + 0x2c]
add esp, 0xc
mov dword [esp + 0x1c], edi
mov dword [esp + 0x3c], edi
cmp eax, edi
jne 0x440e65
push 0x80004003
call fcn.004634f0
mov ecx, dword [eax]
lea edx, [esp + 0x3c]
push edx
lea edx, [esp + 0x20]
push edx
push eax
mov eax, dword [ecx + 0x7c]
call eax
lea ecx, [esp + 0x38]
call fcn.00402380
mov ecx, dword [esp + 0x1c]
push ecx
lea edx, [esp + 0x3c]
push str.COM_d
push edx
mov byte [esp + 0x530], 0x18
call fcn.00402e10
mov eax, dword [esp + 0x44]
push eax
push str.ModemPort
push esi
call fcn.0040cc90
add esp, 0x18
lea ecx, [esp + 0x38]
call fcn.00401e00
lea ecx, [esp + 0x2c]
call fcn.00401e00
lea ecx, [esp + 0x28]
jmp 0x44219d
mov ecx, dword [esp + 0x48]
push ecx
push str.BTADDR
push esi
call fcn.0040cc90
add esp, 0xc
jmp case.0x440cb6.2
xor ebp, ebp
lea ecx, [esp + 0x34]
mov dword [esp + 0x14], ebp
call fcn.00402380
mov edi, dword [esp + 0x20]
mov bl, 0x19
mov byte [esp + 0x524], bl
cmp edi, ebp
jne 0x440f0c
push 0x80004003
call fcn.004634f0
push 0x482eb4
lea ecx, [esp + 0x88]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0x1a
cmp eax, ebp
je 0x440f2f
mov eax, dword [eax]
jmp 0x440f31
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x84]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x14]
cmp eax, ebp
je 0x440f73
push eax
lea ecx, [esp + 0x38]
call fcn.00403410
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], ebp
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 0xc], ebp
jge 0x440f86
push 0x80070057
call fcn.00401120
mov edx, dword [esp + 0x34]
movzx ebp, word [edx]
mov ecx, dword [0x47ebd4]
mov eax, dword [str..X:]
mov edx, dword [0x47ebd8]
mov dword [esp + 0xfc], ecx
mov ecx, dword [0x47ebc8]
mov dword [esp + 0x100], edx
mov edx, dword [0x47ebcc]
mov dword [esp + 0xf8], eax
mov ax, word [0x47ebdc]
mov dword [esp + 0xf0], ecx
push 0x47dd68
lea ecx, [esp + 0x20]
mov word [esp + 0x108], ax
mov dword [esp + 0xf8], edx
mov word [esp + 0x104], bp
mov word [esp + 0xf4], bp
call fcn.004062a0
lea eax, [esp + 0x1c]
push eax
push ebp
mov byte [esp + 0x52c], 0x1b
call fcn.00453610
mov ecx, dword [esp + 0x24]
push ecx
push 0x47e490
push esi
call fcn.0040cc90
add esp, 0x14
lea edx, [esp + 0x24]
push ebp
push edx
call fcn.00419b00
mov ecx, eax
call fcn.00412e40
mov eax, dword [esp + 0x24]
push eax
push str.USBSTORID
push esi
mov byte [esp + 0x530], 0x1c
call fcn.0040cc90
add esp, 0xc
cmp dword [esp + 0x44], 0xe
jne 0x441092
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x2c]
call fcn.004023a0
push 0x47dd68
push str.EXTERNAL
lea ecx, [esp + 0x30]
mov byte [esp + 0x52c], 0x1d
call fcn.00407a30
mov edx, dword [esp + 0x28]
push edx
push str.USBHARDWAREID
push esi
call fcn.0040cc90
lea ecx, [esp + 0x34]
jmp 0x4410e4
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004023a0
lea ecx, [esp + 0xcc]
push ecx
mov byte [esp + 0x52c], 0x1e
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x52c], 0x1c
call fcn.00416be0
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0x1f
call fcn.0040cc90
lea ecx, [esp + 0xd4]
add esp, 0xc
mov byte [esp + 0x524], 0x1c
call fcn.00401e00
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.004023a0
mov byte [esp + 0x528], 0x20
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x528], 0x1c
call fcn.00416dd0
mov edi, eax
mov eax, str.true
test edi, edi
jne 0x441131
mov eax, str.false
push eax
push str.IsComposite
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x50]
add esp, 0xc
cmp eax, 3
jne 0x441607
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
call fcn.004023a0
lea ecx, [esp + 0x90]
push ecx
call fcn.00429810
mov eax, dword [eax]
push eax
push str.DEVICE_UID
push esi
mov byte [esp + 0x538], 0x21
call fcn.0040cc90
add esp, 0x14
lea ecx, [esp + 0x8c]
call fcn.00401e00
cmp edi, 1
jne 0x44135a
lea ecx, [esp + 0x18]
call fcn.00402380
lea edx, [esp + 0x18]
push edx
push str.Model_Name
push esi
mov byte [esp + 0x530], 0x22
call fcn.0040ce40
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00407c60
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
jl 0x44121c
push str.CARD
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
mov ecx, dword [esp + 0x20]
add esp, 8
test eax, eax
je 0x4411f4
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jg 0x4412ea
cmp dword [ecx - 0xc], 0
jl 0x44121c
push str.TFLASH
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x44121c
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, 0xffffffff
jg 0x4412ea
lea ecx, [esp + 0x28]
call fcn.00402380
mov edi, dword [esp + 0x20]
mov bl, 0x23
mov byte [esp + 0x524], bl
test edi, edi
jne 0x441240
push 0x80004003
call fcn.004634f0
push str.IsInternalMemory
lea ecx, [esp + 0xec]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0x24
test eax, eax
je 0x441263
mov eax, dword [eax]
jmp 0x441265
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0x524], bl
call fcn.00407820
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00403410
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea eax, [esp + 0x28]
push str.false
push eax
mov dword [esp + 0x1c], 0
call fcn.00423930
add esp, 8
test al, al
je 0x4412c4
push str.true
jmp 0x4412c9
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x28]
mov byte [esp + 0x524], 0x22
call fcn.00401e00
jmp 0x4412fd
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x24]
call fcn.00407c60
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx - 0xc]
test eax, eax
je 0x441344
jl 0x441344
push str.ANDROID
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x441344
sub eax, dword [esp + 0x24]
sar eax, 1
cmp eax, 0xffffffff
jle 0x441344
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x18]
mov byte [esp + 0x524], 0x1c
call fcn.00401e00
jmp 0x44164c
lea ecx, [esp + 0x2c]
call fcn.00402380
mov edi, dword [esp + 0x20]
mov bl, 0x25
mov byte [esp + 0x524], bl
test edi, edi
jne 0x44137e
push 0x80004003
call fcn.004634f0
push str.IsInternalMemory
lea ecx, [esp + 0x98]
call fcn.00406700
mov eax, dword [eax]
mov byte [esp + 0x524], 0x26
test eax, eax
je 0x4413a1
mov eax, dword [eax]
jmp 0x4413a3
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x94]
mov byte [esp + 0x524], bl
call fcn.00407820
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x30]
call fcn.00403410
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x14], 0
cmp dword [eax - 0xc], 0
je 0x441414
push eax
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x2c]
mov byte [esp + 0x524], 0x1c
call fcn.00401e00
jmp 0x44164c
lea ecx, [esp + 0x18]
call fcn.00402380
lea eax, [esp + 0x18]
push eax
push str.Model_Name
push esi
mov byte [esp + 0x530], 0x27
call fcn.0040ce40
add esp, 0xc
lea ecx, [esp + 0x18]
call fcn.00407c60
mov ecx, dword [esp + 0x18]
cmp dword [ecx - 0xc], 0
jl 0x441497
push str.CARD
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
mov ecx, dword [esp + 0x20]
add esp, 8
test eax, eax
je 0x44146f
sub eax, ecx
sar eax, 1
cmp eax, 0xffffffff
jg 0x44154f
cmp dword [ecx - 0xc], 0
jl 0x441497
push str.TFLASH
push ecx
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x441497
sub eax, dword [esp + 0x18]
sar eax, 1
cmp eax, 0xffffffff
jg 0x44154f
lea ecx, [esp + 0x28]
push ebp
push ecx
call fcn.00419b00
mov ecx, eax
call fcn.00412e40
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
mov byte [esp + 0x52c], 0x28
call fcn.004023a0
lea eax, [esp + 0x44]
push eax
call fcn.00429810
add esp, 4
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x50], esp
mov bl, 0x29
push edx
mov byte [esp + 0x52c], bl
call fcn.004023a0
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x7c], esp
push eax
mov byte [esp + 0x530], 0x2a
call fcn.004023a0
mov byte [esp + 0x52c], bl
call fcn.00426150
add esp, 8
test eax, eax
jne 0x44151b
push str.true
jmp 0x441525
cmp eax, 1
jne 0x441533
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x40]
call fcn.00401e00
lea ecx, [esp + 0x28]
mov byte [esp + 0x524], 0x27
call fcn.00401e00
jmp 0x441562
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0x208
lea ecx, [esp + 0x328]
push ecx
lea edx, [esp + 0x10c]
push edx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x4415eb
lea eax, [esp + 0x310]
push eax
lea ecx, [esp + 0x2c]
call fcn.004062a0
push str.Phone
lea ecx, [esp + 0x2c]
mov byte [esp + 0x528], 0x2b
call fcn.004068d0
test eax, eax
jne 0x4415bd
push str.true
jmp 0x4415d4
push str.Card
lea ecx, [esp + 0x2c]
call fcn.004068d0
test eax, eax
jne 0x4415e2
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x28]
call fcn.00401e00
lea ecx, [esp + 0x18]
call fcn.00401e00
lea ecx, [esp + 0x2c]
mov byte [esp + 0x524], 0x1c
call fcn.00401e00
jmp 0x44164c
cmp eax, 0xe
jne 0x44164c
mov edi, dword [esp + 0x48]
cmp dword [edi - 0xc], 0
jl 0x441632
push str.EXTERNAL
push edi
call dword [sym.imp.MSVCR90.dll_wcsstr]
add esp, 8
test eax, eax
je 0x441632
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jne 0x441639
push str.true
jmp 0x44163e
push str.false
push str.IsInternalMemory
push esi
call fcn.0040cc90
add esp, 0xc
mov ecx, dword [esp + 0x34]
push ecx
push 0x482eb4
push esi
call fcn.0040cc90
lea edx, [esp + 0x44]
push ebp
push edx
call fcn.00424e20
mov eax, dword [esp + 0x4c]
push eax
push str.ENTIREDRIVE
push esi
mov byte [esp + 0x544], 0x2c
call fcn.0040cc90
add esp, 0x20
cmp dword [esp + 0x44], 8
jne 0x441a9c
push ebp
lea ecx, [esp + 0xd8]
call fcn.0044c190
lea ecx, [esp + 0x18]
call fcn.00402380
lea ecx, [esp + 0x40]
push ecx
lea ecx, [esp + 0xd8]
mov byte [esp + 0x528], 0x2e
call fcn.0044c480
mov eax, dword [esp + 0x40]
cmp dword [eax - 0xc], 0
mov bl, 0x2f
mov byte [esp + 0x524], bl
je 0x4416e0
push eax
push str.TwoPhoneMode
push esi
call fcn.0040cc90
add esp, 0xc
jmp 0x4416ee
push str.TwoPhoneMode
push esi
call fcn.0040cd70
add esp, 8
lea edx, [esp + 0xc4]
push edx
lea ecx, [esp + 0xd8]
call fcn.0044c5c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x30
call fcn.004043f0
lea ecx, [esp + 0xc4]
mov byte [esp + 0x524], bl
call fcn.00401e00
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x4417e8
push eax
push str.TwoPhoneSupport
push esi
call fcn.0040cc90
add esp, 0xc
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0xd8]
call fcn.0044c640
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x31
call fcn.004043f0
lea ecx, [esp + 0x9c]
mov byte [esp + 0x524], bl
call fcn.00401e00
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x441796
push eax
push str.TwoPhoneService
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0xd0]
push ecx
lea ecx, [esp + 0xd8]
call fcn.0044c6c0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x528], 0x32
call fcn.004043f0
lea ecx, [esp + 0xd0]
mov byte [esp + 0x524], bl
call fcn.00401e00
mov eax, dword [esp + 0x18]
cmp dword [eax - 0xc], 0
je 0x4417e8
push eax
push str.PhoneNumber2
push esi
call fcn.0040cc90
add esp, 0xc
lea edx, [esp + 0xf8]
push edx
call fcn.004525d0
add esp, 4
test eax, eax
jne 0x441803
push str.true
jmp 0x441808
push str.false
push str.AnycallMusicMode
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x2c]
call fcn.00402380
push 0
lea eax, [esp + 0x30]
push 0x482c88
push eax
mov byte [esp + 0x530], 0x36
call fcn.00402e10
mov edi, dword [esp + 0x38]
push edi
push str.UMSLockInfo
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x38]
add esp, 0x18
test eax, eax
je 0x4418bf
push edi
lea ecx, [esp + 0xd0]
mov ebx, eax
call fcn.00406700
mov edi, eax
push 0x482ec0
lea ecx, [esp + 0xa8]
mov byte [esp + 0x528], 0x37
call fcn.00406670
mov ecx, dword [edi]
mov byte [esp + 0x524], 0x38
test ecx, ecx
je 0x44188f
mov ecx, dword [ecx]
jmp 0x441891
xor ecx, ecx
mov eax, dword [eax]
test eax, eax
je 0x44189b
mov eax, dword [eax]
jmp 0x44189d
xor eax, eax
mov edx, dword [ebx]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push ebx
call eax
lea ecx, [esp + 0xa4]
call fcn.00407820
lea ecx, [esp + 0xcc]
call fcn.00407820
lea ecx, [esp + 0x2c]
call fcn.00401e00
lea ecx, [esp + 0x28]
call fcn.00402380
lea ecx, [esp + 0x2c]
call fcn.00402380
lea ecx, [esp + 0x4c]
call fcn.00402380
lea ecx, [esp + 0x74]
call fcn.00402380
push ecx
mov ecx, esp
mov dword [esp + 0xbc], esp
mov bl, 0x3c
push 0x47dd68
mov byte [esp + 0x52c], bl
call fcn.004062a0
push ecx
mov ecx, esp
mov dword [esp + 0xc8], esp
push 0x47dd68
mov byte [esp + 0x530], 0x3d
call fcn.004062a0
push ecx
lea edx, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x534], 0x3e
call fcn.004023a0
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x534], bl
call fcn.0044c740
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x528], 0x3f
call fcn.004043f0
lea ecx, [esp + 0xac]
mov byte [esp + 0x524], bl
call fcn.00401e00
push ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
push 0x47dd68
call fcn.004062a0
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0x530], 0x40
call fcn.004023a0
push ecx
lea eax, [esp + 0x44]
mov ecx, esp
mov dword [esp + 0xc4], esp
push eax
mov byte [esp + 0x534], 0x41
call fcn.004023a0
lea ecx, [esp + 0xf0]
push ecx
lea ecx, [esp + 0xe4]
mov byte [esp + 0x534], bl
call fcn.0044cd90
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x528], 0x42
call fcn.004043f0
mov byte [esp + 0x524], bl
lea ecx, [esp + 0xe4]
call fcn.00401e00
mov edi, dword [esp + 0x28]
push edi
push str.MMC1Drive
push esi
call fcn.0040cc90
mov ebx, dword [esp + 0x38]
push ebx
push str.MMC2Drive
push esi
call fcn.0040cc90
push ebx
push 0x483ee8
push esi
call fcn.0040cc90
add esp, 0x24
cmp dword [edi - 0xc], 0
jne 0x441a43
mov edx, dword [esp + 0x34]
push edx
jmp 0x441a44
push edi
push 0x483f0c
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x74]
call fcn.00401e00
lea ecx, [esp + 0x4c]
call fcn.00401e00
lea ecx, [esp + 0x2c]
call fcn.00401e00
lea ecx, [esp + 0x28]
call fcn.00401e00
lea ecx, [esp + 0x40]
call fcn.00401e00
lea ecx, [esp + 0x18]
call fcn.00401e00
lea ecx, [esp + 0xd4]
mov byte [esp + 0x524], 0x2c
call fcn.0044c060
lea ecx, [esp + 0x38]
call fcn.00401e00
lea ecx, [esp + 0x24]
call fcn.00401e00
lea ecx, [esp + 0x1c]
call fcn.00401e00
lea ecx, [esp + 0x34]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
mov ebp, dword [esp + 0x3c]
jmp case.0x440cb6.2
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.004023a0
call fcn.0042c010
add esp, 4
mov ebp, eax
mov dword [0x49f20c], 1
jmp case.0x440cb6.2
xor ebp, ebp
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], ebp
call fcn.00402380
lea ecx, [esp + 0x24]
call fcn.00402380
mov edi, dword [esp + 0x20]
mov bl, 0x44
mov byte [esp + 0x524], bl
cmp edi, ebp
jne 0x441b2e
push 0x80004003
call fcn.004634f0
push str.Count
lea ecx, [esp + 0xc0]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x45
cmp eax, ebp
je 0x441b51
mov eax, dword [eax]
jmp 0x441b53
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0xbc]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x441b95
push eax
lea ecx, [esp + 0x18]
call fcn.00403410
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x18], ebp
lea ecx, [esp + 0x1c]
call fcn.00402380
lea edx, [esp + 0x1c]
push edx
mov byte [esp + 0x528], 0x46
call fcn.0042bcd0
mov eax, dword [esp + 0x20]
push eax
push 0x47e570
push esi
call fcn.0040cc90
mov ebp, dword [esp + 0x24]
push ebp
push str.StorageCount
push esi
call fcn.0040cc90
push ebp
call dword [sym.imp.MSVCR90.dll__wtoi]
add esp, 0x20
mov dword [esp + 0x4c], eax
mov dword [esp + 0x34], 0
test eax, eax
jle 0x441e82
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x28]
push str.IsInternalMemory_d
push edx
call fcn.00402e10
mov eax, dword [esp + 0x2c]
add esp, 0xc
test eax, eax
je 0x440636
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00406e50
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441c55
push eax
lea ecx, [esp + 0x18]
call fcn.00403410
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040cc90
mov ecx, dword [esp + 0x40]
push ecx
lea edx, [esp + 0x34]
push str.HARDWAREID_d
push edx
call fcn.00402e10
mov eax, dword [esp + 0x38]
add esp, 0x18
test eax, eax
je 0x440636
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00406e50
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441cc8
push eax
lea ecx, [esp + 0x18]
call fcn.00403410
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov edi, dword [esp + 0x34]
test edi, edi
jne 0x441df1
push str.HARDWAREID
lea ecx, [esp + 0x28]
call fcn.00403410
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040cc90
add esp, 0xc
push str.USBHARDWAREID
lea ecx, [esp + 0x28]
call fcn.00403410
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.004023a0
lea eax, [esp + 0x8c]
push eax
mov byte [esp + 0x52c], 0x47
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x52c], 0x46
call fcn.00416be0
mov eax, dword [eax]
mov ecx, dword [esp + 0x24]
push eax
push ecx
push esi
mov byte [esp + 0x530], 0x48
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x88]
mov byte [esp + 0x524], 0x46
call fcn.00401e00
lea edx, [esp + 0x24]
push str.StorageName0
push edx
call fcn.00402e10
mov eax, dword [esp + 0x28]
add esp, 8
test eax, eax
je 0x440636
mov edi, dword [eax]
mov ebx, eax
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
add edi, 0x68
call fcn.00406e50
mov ecx, dword [edi]
push eax
push ebx
call ecx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441dc3
push eax
lea ecx, [esp + 0x18]
call fcn.00403410
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
lea eax, [esp + 0x24]
push str.StorageName
push eax
call fcn.00402e10
mov ecx, dword [esp + 0x2c]
push ebp
push ecx
push esi
call fcn.0040cc90
add esp, 0x14
push str.DeviceSN
lea ecx, [esp + 0x28]
call fcn.00403410
jmp 0x441e10
mov eax, dword [esp + 0x24]
push ebp
push eax
push esi
call fcn.0040cc90
push edi
lea ecx, [esp + 0x34]
push str.StorageName_d
push ecx
call fcn.00402e10
add esp, 0x18
mov eax, dword [esp + 0x20]
test eax, eax
je 0x440636
mov edi, dword [eax]
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x28]
add edi, 0x68
mov ebx, eax
call fcn.00406e50
push eax
mov eax, dword [edi]
push ebx
call eax
mov eax, dword [esp + 0x18]
test eax, eax
je 0x441e60
push eax
lea ecx, [esp + 0x18]
call fcn.00403410
mov ecx, dword [esp + 0x18]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ebp, dword [esp + 0x14]
mov dword [esp + 0x18], 0
mov edx, dword [esp + 0x24]
push ebp
push edx
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x40]
inc eax
add esp, 0xc
cmp eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
jl 0x441bee
lea ecx, [esp + 0x1c]
call fcn.00401e00
lea ecx, [esp + 0x24]
call fcn.00401e00
lea ecx, [esp + 0x14]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
mov ebp, dword [esp + 0x3c]
jmp case.0x440cb6.2
mov ebp, dword [esp + 0x52c]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
lea ecx, [ecx]
push edi
push str.CDeviceDB::setDeviceProperty_dwDID___T_HARDWAREID__d
call fcn.00403100
push 0x483ec8
push 0x49f1b8
call fcn.0042cc80
add esp, 0x10
test al, al
je 0x441ef7
push 0x483ec8
push 0x49f1bc
call fcn.0042cc80
add esp, 8
test al, al
jne 0x441f09
push 0x3e8
call ebx
inc edi
cmp edi, 0x64
jl 0x441ec0
jmp 0x441fb7
mov eax, dword [0x49f1b4]
push eax
push str.HARDWAREID
push esi
call fcn.0040cc90
mov ecx, dword [0x49f1b8]
push ecx
push 0x47e490
push esi
call fcn.0040cc90
mov edx, dword [0x49f1bc]
push edx
push 0x47e464
push esi
call fcn.0040cc90
add esp, 0x20
mov ecx, esp
mov dword [esp + 0x5c], esp
push 0x49f1b4
call fcn.004023a0
lea eax, [esp + 0x94]
push eax
mov byte [esp + 0x52c], 0x49
call fcn.00419b00
mov ecx, eax
mov byte [esp + 0x52c], 0x11
call fcn.00416be0
mov eax, dword [eax]
push eax
push str.USBHARDWAREID
push esi
mov byte [esp + 0x530], 0x4a
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x90]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
mov ecx, dword [0x49f1c0]
push ecx
push str.IMSI
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x38]
mov dword [esp + 0x14], 0
call fcn.00402380
lea ecx, [esp + 0x2c]
call fcn.00402380
lea ecx, [esp + 0x1c]
call fcn.00402380
mov edi, dword [esp + 0x20]
mov bl, 0x4d
mov byte [esp + 0x524], bl
test edi, edi
jne 0x441ff5
push 0x80004003
call fcn.004634f0
push str.DRIVE
lea ecx, [esp + 0x9c]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x4e
test eax, eax
je 0x442018
mov eax, dword [eax]
jmp 0x44201a
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x98]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x14]
test eax, eax
je 0x442060
push eax
lea ecx, [esp + 0x3c]
call fcn.00403410
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x38]
push ecx
push 0x482eb4
push esi
call fcn.0040cc90
mov edi, dword [esp + 0x2c]
add esp, 0xc
test edi, edi
jne 0x442085
push 0x80004003
call fcn.004634f0
push str.ExternalDrive
lea ecx, [esp + 0x60]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x4f
test eax, eax
je 0x4420a5
mov eax, dword [eax]
jmp 0x4420a7
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x5c]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4420ea
push eax
lea ecx, [esp + 0x30]
call fcn.00403410
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x2c]
push ecx
push 0x483ee8
push esi
call fcn.0040cc90
mov edi, dword [esp + 0x2c]
add esp, 0xc
test edi, edi
jne 0x44210f
push 0x80004003
call fcn.004634f0
push str.InternalDrive
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x50
test eax, eax
je 0x44212f
mov eax, dword [eax]
jmp 0x442131
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x14]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], bl
call fcn.00407820
mov eax, dword [esp + 0x14]
test eax, eax
je 0x442174
push eax
lea ecx, [esp + 0x20]
call fcn.00403410
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [esp + 0x14], 0
mov ecx, dword [esp + 0x1c]
push ecx
push 0x483f0c
push esi
call fcn.0040cc90
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.00401e00
lea ecx, [esp + 0x2c]
call fcn.00401e00
lea ecx, [esp + 0x38]
mov byte [esp + 0x524], 0x11
call fcn.00401e00
mov edx, dword [esp + 0x44]
push edx
lea eax, [esp + 0x2c]
push esi
push eax
call fcn.0042f470
mov ecx, dword [esp + 0x50]
push ecx
lea edx, [esp + 0x44]
push esi
push edx
mov byte [esp + 0x53c], 0x51
call fcn.00440070
lea eax, [esp + 0x4c]
push 0x47e2c4
push eax
mov byte [esp + 0x544], 0x52
call fcn.004040a0
add esp, 0x20
test al, al
je 0x442212
cmp dword [esp + 0x44], 3
jne 0x442212
mov ecx, dword [esp + 0x28]
cmp dword [ecx - 0xc], 0
jne 0x442212
lea edx, [esp + 0x108]
push edx
lea ecx, [esp + 0x2c]
call fcn.00403410
mov eax, dword [esp + 0x28]
push eax
push str.NAME
push esi
call fcn.0040cc90
mov ecx, dword [esp + 0x40]
push ecx
push str.TYPE
push esi
call fcn.0040cc90
mov edi, dword [esp + 0x60]
add esp, 0x18
cmp dword [edi - 0xc], 0
mov dword [esp + 0x24], 0
jl 0x442294
mov ebx, dword [sym.imp.MSVCR90.dll_wcsstr]
push str.VID_04E8
push edi
call ebx
add esp, 8
test eax, eax
je 0x442294
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jle 0x442294
cmp dword [edi - 0xc], 0
jl 0x442294
push str.PID_6651
push edi
call ebx
add esp, 8
test eax, eax
je 0x442294
sub eax, edi
sar eax, 1
cmp eax, 0xffffffff
jle 0x442294
cmp dword [esp + 0x44], 0
jne 0x442294
mov dword [esp + 0x24], 1
jmp 0x4422bf
mov edx, dword [esp + 0x44]
push edx
call fcn.004225f0
push eax
push str.CONNECTIONTYPE
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x54]
add esp, 0x10
cmp eax, 8
je 0x4422bf
test eax, eax
je 0x4422bf
cmp eax, 0x10
jne 0x4422c8
push esi
call fcn.0042c6e0
add esp, 4
mov eax, dword [0x49f474]
mov edx, dword [eax + 0xc]
mov ecx, 0x49f474
call edx
add eax, 0x10
mov dword [esp + 0x14], eax
cmp ebp, 0xffffffff
mov byte [esp + 0x524], 0x53
jle 0x442534
mov eax, dword [esp + 0x52c]
cmp ebp, eax
jne 0x442388
push eax
lea eax, [esp + 0x18]
push 0x482c88
push eax
call fcn.00402e10
mov ecx, dword [esp + 0x20]
push ecx
push str.ModemCID
push esi
call fcn.0040cc90
add esp, 0x18
cmp dword [esp + 0x44], 9
jne 0x442360
push 9
lea edx, [esp + 0x34]
push esi
push edx
call fcn.0042f470
add esp, 0xc
mov byte [esp + 0x524], 0x54
push eax
lea ecx, [esp + 0x58]
call fcn.004043f0
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00401e00
jmp 0x44257c
push ecx
lea eax, [esp + 0x4c]
mov ecx, esp
mov dword [esp + 0x5c], esp
push eax
call fcn.004023a0
lea ecx, [esp + 0x34]
push ecx
call fcn.0042e550
add esp, 8
mov byte [esp + 0x524], 0x55
jmp 0x442340
mov dword [esp + 0x38], 0
push ebp
lea edx, [esp + 0x18]
push 0x482c88
push edx
mov byte [esp + 0x530], 0x56
call fcn.00402e10
mov eax, dword [esp + 0x20]
push eax
push str.ModemCID
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x68]
add esp, 0x18
test eax, eax
jne 0x4423cd
push 0x80004003
call fcn.004634f0
mov edi, dword [eax]
lea ecx, [esp + 0x38]
mov ebx, eax
add edi, 0x20
call fcn.00406990
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [edi]
push eax
push ebp
push ebx
call ecx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], 0
call fcn.00402380
mov eax, dword [esp + 0x38]
mov byte [esp + 0x524], 0x57
test eax, eax
jne 0x442416
push 0x80004003
call fcn.004634f0
mov edx, dword [eax]
mov edx, dword [edx + 0x3c]
lea ecx, [esp + 0x1c]
push ecx
push eax
call edx
mov eax, dword [esp + 0x1c]
xor ebp, ebp
cmp eax, ebp
je 0x442442
push eax
lea ecx, [esp + 0x30]
call fcn.00403410
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0x52c]
push ecx
lea edx, [esp + 0x18]
push 0x482c88
push edx
call fcn.00402e10
mov edi, dword [esp + 0x44]
add esp, 0xc
cmp edi, ebp
jne 0x44246e
push 0x80004003
call fcn.004634f0
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x60]
call fcn.00406700
mov ebx, eax
push str.LINKEDCONNECTION
lea ecx, [esp + 0x34]
mov byte [esp + 0x528], 0x58
call fcn.00406700
mov ecx, dword [ebx]
mov byte [esp + 0x524], 0x59
cmp ecx, ebp
je 0x4424a6
mov ecx, dword [ecx]
jmp 0x4424a8
xor ecx, ecx
mov eax, dword [eax]
cmp eax, ebp
je 0x4424b2
mov eax, dword [eax]
jmp 0x4424b4
xor eax, eax
mov edx, dword [edi]
push ecx
push eax
mov eax, dword [edx + 0x6c]
push edi
call eax
lea ecx, [esp + 0x30]
call fcn.00407820
lea ecx, [esp + 0x5c]
mov byte [esp + 0x524], 0x57
call fcn.00407820
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x5c], esp
push edx
call fcn.004023a0
lea eax, [esp + 0x34]
push eax
call fcn.0042e550
add esp, 8
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x528], 0x5a
call fcn.004043f0
lea ecx, [esp + 0x30]
call fcn.00401e00
lea ecx, [esp + 0x2c]
call fcn.00401e00
mov eax, dword [esp + 0x38]
mov byte [esp + 0x524], 0x53
cmp eax, ebp
je 0x44257e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x44257e
mov eax, dword [esp + 0x44]
cmp eax, 5
je 0x442552
cmp eax, 0xb
je 0x442552
push str.ModemCID
push esi
call fcn.0040cd70
add esp, 8
jmp 0x44257c
mov eax, dword [esp + 0x52c]
push eax
lea ecx, [esp + 0x18]
push 0x482c88
push ecx
call fcn.00402e10
mov edx, dword [esp + 0x20]
push edx
push str.ModemCID
push esi
call fcn.0040cc90
add esp, 0x18
xor ebp, ebp
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x442594
push 0x80004003
call fcn.004634f0
push str.TEMPORARY_IMEI
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5b
cmp eax, ebp
je 0x4425b4
mov eax, dword [eax]
jmp 0x4425b6
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407820
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4425fb
push eax
push 0x47e550
push esi
call fcn.0040cc90
mov ecx, dword [esp + 0x28]
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
add esp, 0xc
push ecx
call ebx
jmp 0x442601
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x442617
push 0x80004003
call fcn.004634f0
push str.CarrierID
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5c
cmp eax, ebp
je 0x442637
mov eax, dword [eax]
jmp 0x442639
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407820
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x442676
push eax
push 0x47e4fc
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
call ebx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x44268c
push 0x80004003
call fcn.004634f0
push str.Base_Model_Name
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5d
cmp eax, ebp
je 0x4426ac
mov eax, dword [eax]
jmp 0x4426ae
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x1c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407820
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x4426eb
push eax
push 0x47e4dc
push esi
call fcn.0040cc90
mov ecx, dword [esp + 0x28]
add esp, 0xc
push ecx
call ebx
mov edi, dword [esp + 0x20]
mov dword [esp + 0x1c], ebp
cmp edi, ebp
jne 0x442701
push 0x80004003
call fcn.004634f0
push str.IMEINUM
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x5e
cmp eax, ebp
je 0x442721
mov eax, dword [eax]
jmp 0x442723
xor eax, eax
mov edx, dword [edi]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0x1c]
push ecx
push eax
push edi
call edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407820
mov eax, dword [esp + 0x1c]
cmp eax, ebp
je 0x442760
push eax
push 0x47e524
push esi
call fcn.0040cc90
mov eax, dword [esp + 0x28]
add esp, 0xc
push eax
call ebx
mov ebx, dword [esp + 0x54]
cmp dword [ebx - 0xc], ebp
jle 0x4427c8
push ebx
push str.ModemName
push esi
call fcn.0040cc90
add esp, 0xc
cmp dword [esp + 0x44], 9
jne 0x4427d6
lea ecx, [esp + 0x30]
push ecx
call fcn.00432540
add esp, 4
push eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x528], 0x5f
call fcn.004043f0
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00401e00
mov edx, dword [esp + 0x54]
push edx
push str.ModemName
push esi
call fcn.0040cc90
mov ebx, dword [esp + 0x60]
add esp, 0xc
jmp 0x4427d6
push str.ModemName
push esi
call fcn.0040cd70
add esp, 8
mov eax, dword [esp + 0x44]
cmp eax, 4
je 0x4427e8
cmp eax, 0x11
jne 0x442890
mov edi, dword [esp + 0x20]
mov dword [esp + 0x3c], ebp
cmp edi, ebp
jne 0x4427fe
push 0x80004003
call fcn.004634f0
push 0x4857b4
lea ecx, [esp + 0x34]
call fcn.00406670
mov eax, dword [eax]
mov byte [esp + 0x524], 0x60
cmp eax, ebp
je 0x44281e
mov eax, dword [eax]
jmp 0x442820
xor eax, eax
mov ecx, dword [edi]
lea edx, [esp + 0x3c]
push edx
push eax
mov eax, dword [ecx + 0x68]
push edi
call eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x524], 0x53
call fcn.00407820
mov ecx, dword [esp + 0x3c]
push ecx
lea ecx, [esp + 0x44]
call fcn.004062a0
mov edx, dword [esp + 0x40]
push edx
push str.NAME
push esi
mov byte [esp + 0x530], 0x61
call fcn.0040cc90
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
add esp, 0xc
mov byte [esp + 0x524], 0x53
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442890
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x24], ebp
jne 0x4428a5
push 0x8000000
push ebp
push esi
call fcn.004292b0
add esp, 0xc
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x52
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4428cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x51
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4428f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
mov byte [esp + 0x524], 0x11
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44291d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x20]
cmp eax, ebp
je 0x442931
mov dword [esp + 0x20], ebp
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x52c]
push eax
push 0x485788
call fcn.00403100
lea eax, [ebx - 0x10]
add esp, 8
mov byte [esp + 0x524], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44296a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
mov byte [esp + 0x524], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442992
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
mov byte [esp + 0x524], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4429ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
mov byte [esp + 0x524], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4429e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
mov byte [esp + 0x524], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442a0a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0xb0]
mov byte [esp + 0x524], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x442a32
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
mov byte [esp + 0x524], 0
cmp eax, ebp
je 0x442a4a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x524], 0xffffffff
cmp eax, ebp
je 0x442a65
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
mov ecx, dword [esp + 0x51c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x504]
xor ecx, esp
call fcn.00472076
add esp, 0x514
ret