Function at 0x4a0935
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ea4fc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x8da4
call fcn.004ae230
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x8d84], 0
mov dword [ebp - 0x34c], 3
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 0
lea eax, [ebp - 0x8d88]
push eax
call fcn.004c8fe6
push eax
lea ecx, [ebp - 0x3ec]
call fcn.0049a9b0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 1
mov word [ebp - 0x338], 0x11
lea ecx, [ebp - 0x424]
call fcn.004d3300
mov dword [ebp - 4], 0
mov dword [ebp - 0x42c], 0x40000
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x3e8], 0
push 0x104
push 0
lea ecx, [ebp - 0x22c]
push ecx
call fcn.004adbd0
add esp, 0xc
push 5
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.004adbd0
add esp, 0xc
push 0x32
push 0
lea eax, [ebp - 0x3e0]
push eax
call fcn.004adbd0
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0x11c]
push ecx
call fcn.004adbd0
add esp, 0xc
push str..DLL
lea edx, [ebp - 0x410]
push edx
call fcn.004ade30
add esp, 8
push str.PretestIF_
lea eax, [ebp - 0x3e0]
push eax
call fcn.004ade30
add esp, 8
lea ecx, [ebp - 0x334]
push ecx
lea edx, [ebp - 0x38c]
push edx
push 0x979
call fcn.004a1c82
add esp, 0xc
push 0x104
lea eax, [ebp - 0x11c]
push eax
call fcn.00495d27
add esp, 8
lea ecx, [ebp - 0x334]
push ecx
lea edx, [ebp - 0x11c]
push edx
call fcn.004ade40
add esp, 8
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0x3e0]
push edx
lea eax, [ebp - 0x11c]
push eax
call fcn.004a1767
add esp, 0x10
test eax, eax
jne 0x4a0b9a
push 0x104
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00495d27
add esp, 8
push str.DLLLIB_
lea edx, [ebp - 0x11c]
push edx
call fcn.004ade40
add esp, 8
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0x3e0]
push edx
lea eax, [ebp - 0x11c]
push eax
call fcn.004a1767
add esp, 0x10
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jne 0x4a0bbb
jmp 0x4a161d
lea ecx, [ebp - 0x3ec]
call fcn.0049a9d0
mov edx, dword [ebp - 0x8d84]
add edx, eax
mov dword [ebp - 0x8d84], edx
lea ecx, [ebp - 0x3ec]
call fcn.0049a9f0
mov ecx, dword [ebp - 0x8d84]
add ecx, eax
mov dword [ebp - 0x8d84], ecx
lea ecx, [ebp - 0x3ec]
call fcn.0049aa10
mov edx, dword [ebp - 0x8d84]
add edx, eax
mov dword [ebp - 0x8d84], edx
lea ecx, [ebp - 0x3ec]
call fcn.004a2090
mov ecx, dword [ebp - 0x8d84]
add ecx, eax
mov dword [ebp - 0x8d84], ecx
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3ac], 0
jne 0x4a0c78
cmp dword [ebp - 0x3a0], 3
jg 0x4a0c78
push str.InitialUSBChannel
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0
jne 0x4a0c76
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x3a0]
add eax, 1
mov dword [ebp - 0x3a0], eax
jmp 0x4a0c29
cmp dword [ebp - 0x3ac], 0
jne 0x4a0c86
jmp 0x4a161d
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x14], 0
jne 0x4a0cd6
cmp dword [ebp - 0x3a0], 3
jg 0x4a0cd6
push str.GetUSBStatus
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x4a0cd4
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x3a0]
add edx, 1
mov dword [ebp - 0x3a0], edx
jmp 0x4a0c90
cmp dword [ebp - 0x14], 0
jne 0x4a0ce1
jmp 0x4a161d
call fcn.00442230
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax + 0x1c]
push ecx
mov edx, dword [ebp - 0x8d84]
push edx
mov eax, dword [ebp - 0x34c]
push eax
call dword [ebp - 0x3ac]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4a0d0f
jmp 0x4a161d
call dword [ebp - 0x14]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0
jne 0x4a0d26
jmp 0x4a161d
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3e8], 0
jne 0x4a0d7f
cmp dword [ebp - 0x3a0], 3
jg 0x4a0d7f
push str.GetPretestVersion
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0
jne 0x4a0d7d
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x3a0]
add edx, 1
mov dword [ebp - 0x3a0], edx
jmp 0x4a0d30
push 0x14
push 0
lea eax, [ebp - 0x408]
push eax
call fcn.004adbd0
add esp, 0xc
cmp dword [ebp - 0x3e8], 0
jne 0x4a0d9d
jmp 0x4a0db3
cmp dword [ebp - 0x3e8], 0
je 0x4a0db3
lea ecx, [ebp - 0x408]
push ecx
call dword [ebp - 0x3e8]
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x124], 0
jne 0x4a0e0c
cmp dword [ebp - 0x3a0], 3
jg 0x4a0e0c
push str.RunMyScript
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jne 0x4a0e0a
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x3a0]
add eax, 1
mov dword [ebp - 0x3a0], eax
jmp 0x4a0dbd
cmp dword [ebp - 0x124], 0
jne 0x4a0e1a
jmp 0x4a161d
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x414], 0
jne 0x4a0e73
cmp dword [ebp - 0x3a0], 3
jg 0x4a0e73
push str.InitApi
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0
jne 0x4a0e71
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x3a0]
add edx, 1
mov dword [ebp - 0x3a0], edx
jmp 0x4a0e24
cmp dword [ebp - 0x414], 0
jne 0x4a0e81
jmp 0x4a161d
push 0x10
push 0
lea eax, [ebp - 0x39c]
push eax
call fcn.004adbd0
add esp, 0xc
mov dword [ebp - 0x39c], 0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x398], 0
push 0x8550
push 0
lea edx, [ebp - 0x8d80]
push edx
call fcn.004adbd0
add esp, 0xc
mov eax, dword [ebp + 0xc]
sub eax, 1
mov dword [ebp - 0x944], eax
lea ecx, [ebp - 0x344]
mov dword [ebp - 0x940], ecx
push 0x200
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8d8c], eax
mov edx, dword [ebp - 0x8d8c]
mov dword [ebp - 0x3a8], edx
cmp dword [ebp - 0x3a8], 0
jne 0x4a0f16
jmp 0x4a161d
push 0x200
push 0
mov eax, dword [ebp - 0x3a8]
push eax
call fcn.004adbd0
add esp, 0xc
mov ecx, dword [ebp - 0x3a8]
mov dl, byte [ebp + 0x28]
mov byte [ecx], dl
mov eax, dword [ebp - 0x3a8]
mov cl, byte [ebp + 0x20]
mov byte [eax + 1], cl
mov edx, dword [ebp - 0x3a8]
mov al, byte [ebp + 0x24]
mov byte [edx + 2], al
push 0x200
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8d90], eax
mov ecx, dword [ebp - 0x8d90]
mov dword [ebp - 0x33c], ecx
push 0x200
push 0
mov edx, dword [ebp - 0x33c]
push edx
call fcn.004adbd0
add esp, 0xc
push 0x200
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8d94], eax
mov eax, dword [ebp - 0x8d94]
mov dword [ebp - 0x3e4], eax
push 0x200
push 0
mov ecx, dword [ebp - 0x3e4]
push ecx
call fcn.004adbd0
add esp, 0xc
push 0x200
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8d98], eax
mov edx, dword [ebp - 0x8d98]
mov dword [ebp - 0x128], edx
push 0x200
push 0
mov eax, dword [ebp - 0x128]
push eax
call fcn.004adbd0
add esp, 0xc
mov ecx, dword [ebp + 0x34]
push ecx
mov edx, dword [ebp + 0x30]
push edx
mov eax, dword [ebp - 0x128]
push eax
mov ecx, dword [ebp - 0x3e4]
push ecx
mov edx, dword [ebp - 0x33c]
push edx
mov eax, dword [ebp + 0x14]
push eax
call fcn.004a190f
add esp, 0x18
test eax, eax
jne 0x4a1020
jmp 0x4a161d
push 4
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8d9c], eax
mov ecx, dword [ebp - 0x8d9c]
mov dword [ebp - 0x120], ecx
cmp dword [ebp - 0x120], 0
jne 0x4a104a
jmp 0x4a161d
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x3e4]
mov dword [edx], eax
push 4
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x3a8]
add edx, 0x20
push edx
call fcn.004ae270
add esp, 0xc
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
push 4
mov edx, dword [ebp - 0x120]
push edx
mov eax, dword [ebp - 0x3a8]
add eax, 0x100
push eax
call fcn.004ae270
add esp, 0xc
push 0x400
push 0
lea ecx, [ebp - 0x830]
push ecx
call fcn.004adbd0
add esp, 0xc
push 4
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8da0], eax
mov edx, dword [ebp - 0x8da0]
mov dword [ebp - 0x428], edx
push 0x400
call fcn.004d32b7
add esp, 4
mov dword [ebp - 0x8da4], eax
mov eax, dword [ebp - 0x8da4]
mov dword [ebp - 0x340], eax
push 0x400
push 0
mov ecx, dword [ebp - 0x340]
push ecx
call fcn.004adbd0
add esp, 0xc
push 0x400
lea edx, [ebp - 0x830]
push edx
mov eax, dword [ebp - 0x340]
push eax
call fcn.004ae270
add esp, 0xc
mov ecx, dword [ebp - 0x428]
mov edx, dword [ebp - 0x340]
mov dword [ecx], edx
push 4
mov eax, dword [ebp - 0x428]
push eax
mov ecx, dword [ebp - 0x3a8]
add ecx, 0x10
push ecx
call fcn.004ae270
add esp, 0xc
mov edx, dword [ebp - 0x428]
mov eax, dword [ebp + 0x1c]
mov dword [edx], eax
push 4
mov ecx, dword [ebp - 0x428]
push ecx
mov edx, dword [ebp - 0x3a8]
add edx, 0x14
push edx
call fcn.004ae270
add esp, 0xc
mov eax, dword [ebp - 0x42c]
sar eax, 0x18
and eax, 0xff
mov ecx, dword [ebp - 0x3a8]
mov byte [ecx + 0x1b], al
mov edx, dword [ebp - 0x42c]
sar edx, 0x10
and edx, 0xff
mov eax, dword [ebp - 0x3a8]
mov byte [eax + 0x1a], dl
mov ecx, dword [ebp - 0x42c]
sar ecx, 8
and ecx, 0xff
mov edx, dword [ebp - 0x3a8]
mov byte [edx + 0x19], cl
mov eax, dword [ebp - 0x42c]
and eax, 0xff
mov ecx, dword [ebp - 0x3a8]
mov byte [ecx + 0x18], al
xor edx, edx
test edx, edx
je 0x4a12aa
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov cl, byte [eax + 0x164]
mov dword [ebp - 0x8d60], ecx
mov edx, dword [ebp + 0x14]
xor eax, eax
mov al, byte [edx + 0x165]
mov dword [ebp - 0x8d70], eax
mov ecx, dword [ebp + 0x14]
xor edx, edx
mov dl, byte [ecx + 0x167]
mov dword [ebp - 0x8d74], edx
mov eax, dword [ebp + 0x14]
xor ecx, ecx
mov cl, byte [eax + 0x163]
mov dword [ebp - 0x8d64], ecx
mov edx, dword [ebp + 0x14]
xor eax, eax
mov al, byte [edx + 0x182]
mov ecx, dword [ebp + 0x14]
xor edx, edx
mov dl, byte [ecx + 0x183]
shl edx, 8
add edx, eax
mov dword [ebp - 0x8d7c], edx
mov eax, dword [ebp + 0x14]
movzx cx, byte [eax + 0x190]
mov word [ebp - 0x8d78], cx
mov edx, dword [ebp + 0x14]
xor eax, eax
mov al, byte [edx + 0x194]
mov ecx, dword [ebp + 0x14]
xor edx, edx
mov dl, byte [ecx + 0x195]
shl edx, 8
add edx, eax
mov word [ebp - 0x8d76], dx
mov eax, dword [ebp - 0x8d76]
and eax, 0xffff
mov ecx, dword [ebp - 0x8d78]
and ecx, 0xffff
imul ecx, eax
mov dword [ebp - 0x8d80], ecx
push 6
mov edx, dword [ebp + 0x14]
add edx, 0x30
push edx
lea eax, [ebp - 0x838]
push eax
call fcn.004ae270
add esp, 0xc
jmp 0x4a14a6
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.004a1d57
add esp, 4
mov dword [ebp - 0x8d60], eax
lea edx, [ebp - 0x3a4]
push edx
lea eax, [ebp - 0x430]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
call fcn.004a1d92
add esp, 0xc
mov dword [ebp - 0x8d70], eax
mov edx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [edx + 0x23f]
mov esi, eax
shl esi, 0x18
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x23e]
shl edx, 0x10
mov ecx, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [ecx + 0x23d]
shl ebx, 8
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [ecx + 0x23c]
add eax, ebx
add eax, edx
add eax, esi
mov dword [ebp - 0x8d74], eax
mov edx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [edx + 0x23b]
mov esi, eax
shl esi, 0x18
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x23a]
shl edx, 0x10
mov ecx, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [ecx + 0x239]
shl ebx, 8
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [ecx + 0x238]
add eax, ebx
add eax, edx
add eax, esi
mov dword [ebp - 0x8d64], eax
mov edx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [edx + 0x22f]
mov esi, eax
shl esi, 0x18
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x22e]
shl edx, 0x10
mov ecx, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [ecx + 0x22d]
shl ebx, 8
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [ecx + 0x22c]
add eax, ebx
add eax, edx
add eax, esi
mov dword [ebp - 0x8d7c], eax
mov edx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [edx + 0x21f]
mov esi, eax
shl esi, 0x18
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x21e]
shl edx, 0x10
mov ecx, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [ecx + 0x21d]
shl ebx, 8
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [ecx + 0x21c]
add eax, ebx
add eax, edx
add eax, esi
mov word [ebp - 0x8d78], ax
mov edx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [edx + 0x22b]
mov esi, eax
shl esi, 0x18
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x22a]
shl edx, 0x10
mov ecx, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [ecx + 0x229]
shl ebx, 8
mov ecx, dword [ebp + 0x18]
xor eax, eax
mov al, byte [ecx + 0x228]
add eax, ebx
add eax, edx
add eax, esi
mov word [ebp - 0x8d76], ax
mov edx, dword [ebp - 0x8d76]
and edx, 0xffff
mov eax, dword [ebp - 0x8d78]
and eax, 0xffff
imul eax, edx
mov dword [ebp - 0x8d80], eax
mov ecx, dword [ebp + 0x18]
xor edx, edx
mov dl, byte [ecx + 0x29f]
shl edx, 0x18
mov eax, dword [ebp + 0x18]
xor ecx, ecx
mov cl, byte [eax + 0x29e]
shl ecx, 0x10
mov eax, dword [ebp + 0x18]
xor ebx, ebx
mov bl, byte [eax + 0x29d]
shl ebx, 8
mov esi, dword [ebp + 0x18]
xor eax, eax
mov al, byte [esi + 0x29c]
add eax, ebx
add eax, ecx
add eax, edx
mov dword [ebp - 0x8d6c], eax
push 6
mov ecx, dword [ebp + 0x14]
add ecx, 0x30
push ecx
lea edx, [ebp - 0x838]
push edx
call fcn.004ae270
add esp, 0xc
lea eax, [ebp - 0x11c]
push eax
push 1
call dword [ebp - 0x414]
cmp dword [ebp + 0x2c], 2
jne 0x4a1533
push 0x200
mov ecx, dword [ebp - 0x3a8]
push ecx
lea esi, [ebp - 0x8d80]
mov eax, 0x8550
call fcn.004ae230
mov ecx, 0x2154
mov edi, esp
rep movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x39c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x398]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x394]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x390]
mov dword [edx + 0xc], ecx
mov dx, word [ebp - 0x338]
push edx
call dword [ebp - 0x124]
mov dword [ebp - 0x3f0], eax
xor eax, eax
cmp dword [ebp - 0x3f0], 0
sete al
mov dword [ebp - 0x348], eax
jmp 0x4a15d9
mov byte [ebp - 4], 1
push 0x200
mov ecx, dword [ebp - 0x3a8]
push ecx
lea esi, [ebp - 0x8d80]
mov eax, 0x8550
call fcn.004ae230
mov ecx, 0x2154
mov edi, esp
rep movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x39c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x398]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x394]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x390]
mov dword [edx + 0xc], ecx
mov dx, word [ebp - 0x338]
push edx
call dword [ebp - 0x124]
mov dword [ebp - 0x8db4], eax
mov eax, dword [ebp - 0x8db4]
mov dword [ebp - 0x3f0], eax
xor ecx, ecx
cmp dword [ebp - 0x3f0], 0
sete cl
mov dword [ebp - 0x348], ecx
jmp 0x4a15d2
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x3f0]
and edx, 0x80000000
test edx, edx
jne 0x4a15f8
mov eax, dword [ebp - 0x3f0]
and eax, 0x8000
test eax, eax
je 0x4a1604
mov dword [ebp - 0x348], 0
jmp 0x4a160e
mov dword [ebp - 0x348], 1
lea ecx, [ebp - 0x11c]
push ecx
push 0
call dword [ebp - 0x414]
cmp dword [ebp - 0x230], 0
je 0x4a163d
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x344], 0
cmp dword [ebp - 0x3a8], 0
je 0x4a1675
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x8da8], eax
mov ecx, dword [ebp - 0x8da8]
push ecx
call fcn.004d32e0
add esp, 4
mov dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x33c], 0
je 0x4a168d
mov edx, dword [ebp - 0x33c]
push edx
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x3e4], 0
je 0x4a16a5
mov eax, dword [ebp - 0x3e4]
push eax
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x128], 0
je 0x4a16bd
mov ecx, dword [ebp - 0x128]
push ecx
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x340], 0
je 0x4a16d5
mov edx, dword [ebp - 0x340]
push edx
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x120], 0
je 0x4a16ed
mov eax, dword [ebp - 0x120]
push eax
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x428], 0
je 0x4a1705
mov ecx, dword [ebp - 0x428]
push ecx
call fcn.004ae5ad
add esp, 4
cmp dword [ebp - 0x348], 0
je 0x4a1732
mov dword [ebp - 0x8dac], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.004d33f5
mov eax, dword [ebp - 0x8dac]
jmp 0x4a1756
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x8db0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.004d33f5
mov eax, dword [ebp - 0x8db0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret