Function at 0x4e81d8
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xe
push 0
push 0
dec ecx
jne 0x4e81e1
push ecx
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
call fcn.00405a50
lea eax, [ebp - 0xc]
call fcn.00405a50
lea eax, [ebp - 0x44]
mov edx, dword [0x4def00]
call fcn.00405a70
xor eax, eax
push ebp
push 0x4e8c0c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 8]
call fcn.00409f28
mov edx, dword [ebp - 0x48]
lea eax, [ebp - 8]
call fcn.00405514
lea eax, [ebp - 0x44]
push eax
push 0x4e76c0
call sub.user32.dll_EnumWindows
cmp dword [ebp + 8], 0
je 0x4e8444
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8267
call fcn.00403c1c
test eax, eax
jl 0x4e8320
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8289
cmp eax, dword [edx - 4]
jb 0x4e828e
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4e8314
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e82ae
cmp eax, dword [edx - 4]
jb 0x4e82b3
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4e8314
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e82d7
cmp eax, dword [edx - 4]
jb 0x4e82dc
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
jge 0x4e8314
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x28]
jge 0x4e8314
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8304
cmp eax, dword [edx - 4]
jb 0x4e8309
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e827a
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8332
call fcn.00403c1c
test eax, eax
jl 0x4e83ca
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8358
cmp eax, dword [edx - 4]
jb 0x4e835d
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4e83be
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8381
cmp eax, dword [edx - 4]
jb 0x4e8386
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
jge 0x4e83be
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x28]
jge 0x4e83be
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e83ae
cmp eax, dword [edx - 4]
jb 0x4e83b3
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e8345
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e83dc
call fcn.00403c1c
test eax, eax
jl 0x4e8bd6
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8402
cmp eax, dword [edx - 4]
jb 0x4e8407
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4e8437
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8427
cmp eax, dword [edx - 4]
jb 0x4e842c
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e83ef
jmp 0x4e8bd6
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8456
call fcn.00403c1c
test eax, eax
jl 0x4e8571
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8478
cmp eax, dword [edx - 4]
jb 0x4e847d
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4e8565
call sub.user32.dll_GetForegroundWindow
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4e84a2
cmp edx, dword [ecx - 4]
jb 0x4e84a7
call fcn.00403c14
cmp eax, dword [ecx + edx*4]
jne 0x4e8565
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e84e2
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e84cb
cmp eax, dword [edx - 4]
jb 0x4e84d0
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e8565
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4e84f4
cmp edx, dword [ecx - 4]
jb 0x4e84f9
call fcn.00403c14
mov edx, dword [ecx + edx*4]
call fcn.004057c0
je 0x4e8546
lea ecx, [ebp - 0x4c]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8526
cmp eax, dword [edx - 4]
jb 0x4e852b
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x50]
mov edx, 0x400000
call fcn.004aecdc
mov edx, dword [ebp - 0x50]
pop eax
call fcn.004057c0
jne 0x4e8571
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8555
cmp eax, dword [edx - 4]
jb 0x4e855a
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e8469
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8583
call fcn.00403c1c
test eax, eax
jl 0x4e867c
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e85a5
cmp eax, dword [edx - 4]
jb 0x4e85aa
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4e8670
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e85ed
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e85d6
cmp eax, dword [edx - 4]
jb 0x4e85db
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e8670
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4e85ff
cmp edx, dword [ecx - 4]
jb 0x4e8604
call fcn.00403c14
mov edx, dword [ecx + edx*4]
call fcn.004057c0
je 0x4e8651
lea ecx, [ebp - 0x54]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8631
cmp eax, dword [edx - 4]
jb 0x4e8636
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x58]
mov edx, 0x400000
call fcn.004aecdc
mov edx, dword [ebp - 0x58]
pop eax
call fcn.004057c0
jne 0x4e8670
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8660
cmp eax, dword [edx - 4]
jb 0x4e8665
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e8596
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e868e
call fcn.00403c1c
test eax, eax
jl 0x4e87b7
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e86b0
cmp eax, dword [edx - 4]
jb 0x4e86b5
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4e87ab
call sub.user32.dll_GetForegroundWindow
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4e86da
cmp edx, dword [ecx - 4]
jb 0x4e86df
call fcn.00403c14
cmp eax, dword [ecx + edx*4]
jne 0x4e87ab
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e871a
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e8703
cmp eax, dword [edx - 4]
jb 0x4e8708
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e87ab
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8729
cmp eax, dword [edx - 4]
jb 0x4e872e
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4e8786
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8751
cmp eax, dword [edx - 4]
jb 0x4e8756
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x5c]
mov edx, 0x400000
call fcn.004aecdc
mov eax, dword [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x60]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x60]
pop edx
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4e87b7
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e879b
cmp eax, dword [edx - 4]
jb 0x4e87a0
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e86a1
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e87c9
call fcn.00403c1c
test eax, eax
jl 0x4e88d0
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e87eb
cmp eax, dword [edx - 4]
jb 0x4e87f0
call fcn.00403c14
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4e88c4
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e8833
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e881c
cmp eax, dword [edx - 4]
jb 0x4e8821
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e88c4
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8842
cmp eax, dword [edx - 4]
jb 0x4e8847
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4e889f
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e886a
cmp eax, dword [edx - 4]
jb 0x4e886f
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x64]
mov edx, 0x400000
call fcn.004aecdc
mov eax, dword [ebp - 0x64]
push eax
lea ecx, [ebp - 0x68]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x68]
pop edx
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4e88c4
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e88b4
cmp eax, dword [edx - 4]
jb 0x4e88b9
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e87dc
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e88e2
call fcn.00403c1c
test eax, eax
jl 0x4e89b6
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e8927
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e8910
cmp eax, dword [edx - 4]
jb 0x4e8915
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e89aa
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4e8939
cmp edx, dword [ecx - 4]
jb 0x4e893e
call fcn.00403c14
mov edx, dword [ecx + edx*4]
call fcn.004057c0
je 0x4e898b
lea ecx, [ebp - 0x6c]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e896b
cmp eax, dword [edx - 4]
jb 0x4e8970
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x70]
mov edx, 0x400000
call fcn.004aecdc
mov edx, dword [ebp - 0x70]
pop eax
call fcn.004057c0
jne 0x4e89aa
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e899a
cmp eax, dword [edx - 4]
jb 0x4e899f
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e88f5
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e89c8
call fcn.00403c1c
test eax, eax
jl 0x4e8aaa
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e8a0d
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e89f6
cmp eax, dword [edx - 4]
jb 0x4e89fb
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e8a9e
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8a1c
cmp eax, dword [edx - 4]
jb 0x4e8a21
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4e8a79
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8a44
cmp eax, dword [edx - 4]
jb 0x4e8a49
call fcn.00403c14
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x74]
mov edx, 0x400000
call fcn.004aecdc
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x78]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004aecdc
mov eax, dword [ebp - 0x78]
pop edx
call fcn.004059bc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4e8a9e
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8a8e
cmp eax, dword [edx - 4]
jb 0x4e8a93
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e89db
mov eax, dword [ebp - 8]
mov edx, 0x4e8c24
call fcn.004057c0
jne 0x4e8b57
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e8b57
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8adf
call fcn.00403c1c
test eax, eax
jl 0x4e8b57
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4e8afd
cmp eax, dword [edx - 4]
jb 0x4e8b02
call fcn.00403c14
mov eax, dword [edx + eax*4]
xor edx, edx
call fcn.004057c0
jne 0x4e8b4f
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e8b1d
cmp eax, dword [edx - 4]
jb 0x4e8b22
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e8b4f
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8b3f
cmp eax, dword [edx - 4]
jb 0x4e8b44
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e8aee
mov eax, dword [ebp - 8]
xor edx, edx
call fcn.004057c0
jne 0x4e8bd6
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.004057c0
je 0x4e8bd6
mov eax, dword [ebp - 0x3c]
call fcn.004063e0
sub eax, 1
jno 0x4e8b81
call fcn.00403c1c
test eax, eax
jl 0x4e8bd6
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4e8b9f
cmp eax, dword [edx - 4]
jb 0x4e8ba4
call fcn.00403c14
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.004059bc
dec eax
jne 0x4e8bce
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4e8bc1
cmp eax, dword [edx - 4]
jb 0x4e8bc6
call fcn.00403c14
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4e8bd6
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4e8b90
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e8c13
lea eax, [ebp - 0x78]
mov edx, 0xd
call fcn.004054c8
lea eax, [ebp - 0x44]
mov edx, dword [0x4def00]
call fcn.00405b40
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004054c8
ret