Function at 0x4ec5ec
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xf
push 0
push 0
dec ecx
jne 0x4ec5f5
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
call fcn.004058a4
lea eax, [ebp - 0xc]
call fcn.004058a4
lea eax, [ebp - 0x48]
mov edx, dword [0x4e2d0c]
call fcn.004058c4
xor eax, eax
push ebp
push 0x4ed01f
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x4c]
mov eax, dword [ebp - 8]
call fcn.00409d2c
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 8]
call fcn.00405358
lea eax, [ebp - 0x48]
push eax
push 0x4eb9c0
call sub.user32.dll_EnumWindows
cmp dword [ebp + 8], 0
je 0x4ec857
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ec67a
call fcn.00403a60
test eax, eax
jl 0x4ec733
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec69c
cmp eax, dword [edx - 4]
jb 0x4ec6a1
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4ec727
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec6c1
cmp eax, dword [edx - 4]
jb 0x4ec6c6
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4ec727
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec6ea
cmp eax, dword [edx - 4]
jb 0x4ec6ef
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
jge 0x4ec727
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x28]
jge 0x4ec727
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec717
cmp eax, dword [edx - 4]
jb 0x4ec71c
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ec68d
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ec745
call fcn.00403a60
test eax, eax
jl 0x4ec7dd
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec76b
cmp eax, dword [edx - 4]
jb 0x4ec770
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4ec7d1
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec794
cmp eax, dword [edx - 4]
jb 0x4ec799
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
jge 0x4ec7d1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x28]
jge 0x4ec7d1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec7c1
cmp eax, dword [edx - 4]
jb 0x4ec7c6
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ec758
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ec7ef
call fcn.00403a60
test eax, eax
jl 0x4ecfe9
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec815
cmp eax, dword [edx - 4]
jb 0x4ec81a
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp + 8]
jne 0x4ec84a
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec83a
cmp eax, dword [edx - 4]
jb 0x4ec83f
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ec802
jmp 0x4ecfe9
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ec869
call fcn.00403a60
test eax, eax
jl 0x4ec984
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec88b
cmp eax, dword [edx - 4]
jb 0x4ec890
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4ec978
call sub.user32.dll_GetForegroundWindow
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4ec8b5
cmp edx, dword [ecx - 4]
jb 0x4ec8ba
call fcn.00403a58
cmp eax, dword [ecx + edx*4]
jne 0x4ec978
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ec8f5
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ec8de
cmp eax, dword [edx - 4]
jb 0x4ec8e3
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4ec978
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4ec907
cmp edx, dword [ecx - 4]
jb 0x4ec90c
call fcn.00403a58
mov edx, dword [ecx + edx*4]
call fcn.00405614
je 0x4ec959
lea ecx, [ebp - 0x50]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ec939
cmp eax, dword [edx - 4]
jb 0x4ec93e
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x54]
mov edx, 0x400000
call fcn.004ac7e8
mov edx, dword [ebp - 0x54]
pop eax
call fcn.00405614
jne 0x4ec984
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec968
cmp eax, dword [edx - 4]
jb 0x4ec96d
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ec87c
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ec996
call fcn.00403a60
test eax, eax
jl 0x4eca8f
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ec9b8
cmp eax, dword [edx - 4]
jb 0x4ec9bd
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4eca83
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4eca00
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ec9e9
cmp eax, dword [edx - 4]
jb 0x4ec9ee
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4eca83
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4eca12
cmp edx, dword [ecx - 4]
jb 0x4eca17
call fcn.00403a58
mov edx, dword [ecx + edx*4]
call fcn.00405614
je 0x4eca64
lea ecx, [ebp - 0x58]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4eca44
cmp eax, dword [edx - 4]
jb 0x4eca49
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x5c]
mov edx, 0x400000
call fcn.004ac7e8
mov edx, dword [ebp - 0x5c]
pop eax
call fcn.00405614
jne 0x4eca83
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4eca73
cmp eax, dword [edx - 4]
jb 0x4eca78
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ec9a9
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ecaa1
call fcn.00403a60
test eax, eax
jl 0x4ecbca
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecac3
cmp eax, dword [edx - 4]
jb 0x4ecac8
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4ecbbe
call sub.user32.dll_GetForegroundWindow
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x4ecaed
cmp edx, dword [ecx - 4]
jb 0x4ecaf2
call fcn.00403a58
cmp eax, dword [ecx + edx*4]
jne 0x4ecbbe
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ecb2d
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ecb16
cmp eax, dword [edx - 4]
jb 0x4ecb1b
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4ecbbe
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecb3c
cmp eax, dword [edx - 4]
jb 0x4ecb41
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4ecb99
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecb64
cmp eax, dword [edx - 4]
jb 0x4ecb69
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x60]
mov edx, 0x400000
call fcn.004ac7e8
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x64]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x64]
pop edx
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4ecbca
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecbae
cmp eax, dword [edx - 4]
jb 0x4ecbb3
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecab4
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ecbdc
call fcn.00403a60
test eax, eax
jl 0x4ecce3
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecbfe
cmp eax, dword [edx - 4]
jb 0x4ecc03
call fcn.00403a58
mov eax, dword [edx + eax*4]
push eax
call sub.user32.dll_IsWindowVisible
test eax, eax
je 0x4eccd7
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ecc46
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ecc2f
cmp eax, dword [edx - 4]
jb 0x4ecc34
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4eccd7
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecc55
cmp eax, dword [edx - 4]
jb 0x4ecc5a
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4eccb2
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecc7d
cmp eax, dword [edx - 4]
jb 0x4ecc82
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x68]
mov edx, 0x400000
call fcn.004ac7e8
mov eax, dword [ebp - 0x68]
push eax
lea ecx, [ebp - 0x6c]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x6c]
pop edx
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4eccd7
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4eccc7
cmp eax, dword [edx - 4]
jb 0x4ecccc
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecbef
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4eccf5
call fcn.00403a60
test eax, eax
jl 0x4ecdc9
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ecd3a
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ecd23
cmp eax, dword [edx - 4]
jb 0x4ecd28
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4ecdbd
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4ecd4c
cmp edx, dword [ecx - 4]
jb 0x4ecd51
call fcn.00403a58
mov edx, dword [ecx + edx*4]
call fcn.00405614
je 0x4ecd9e
lea ecx, [ebp - 0x70]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x70]
push eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecd7e
cmp eax, dword [edx - 4]
jb 0x4ecd83
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x74]
mov edx, 0x400000
call fcn.004ac7e8
mov edx, dword [ebp - 0x74]
pop eax
call fcn.00405614
jne 0x4ecdbd
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecdad
cmp eax, dword [edx - 4]
jb 0x4ecdb2
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecd08
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ecddb
call fcn.00403a60
test eax, eax
jl 0x4ecebd
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ece20
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ece09
cmp eax, dword [edx - 4]
jb 0x4ece0e
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4eceb1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ece2f
cmp eax, dword [edx - 4]
jb 0x4ece34
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 8]
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4ece8c
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ece57
cmp eax, dword [edx - 4]
jb 0x4ece5c
call fcn.00403a58
mov eax, dword [edx + eax*4]
lea ecx, [ebp - 0x78]
mov edx, 0x400000
call fcn.004ac7e8
mov eax, dword [ebp - 0x78]
push eax
lea ecx, [ebp - 0x7c]
mov edx, 0x400000
mov eax, dword [ebp - 8]
call fcn.004ac7e8
mov eax, dword [ebp - 0x7c]
pop edx
call fcn.00405810
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x4eceb1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecea1
cmp eax, dword [edx - 4]
jb 0x4ecea6
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecdee
mov eax, dword [ebp - 8]
mov edx, 0x4ed034
call fcn.00405614
jne 0x4ecf6a
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ecf6a
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ecef2
call fcn.00403a60
test eax, eax
jl 0x4ecf6a
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x4ecf10
cmp eax, dword [edx - 4]
jb 0x4ecf15
call fcn.00403a58
mov eax, dword [edx + eax*4]
xor edx, edx
call fcn.00405614
jne 0x4ecf62
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ecf30
cmp eax, dword [edx - 4]
jb 0x4ecf35
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4ecf62
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecf52
cmp eax, dword [edx - 4]
jb 0x4ecf57
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecf01
mov eax, dword [ebp - 8]
xor edx, edx
call fcn.00405614
jne 0x4ecfe9
mov eax, dword [ebp - 0xc]
xor edx, edx
call fcn.00405614
je 0x4ecfe9
mov eax, dword [ebp - 0x3c]
call fcn.00406234
sub eax, 1
jno 0x4ecf94
call fcn.00403a60
test eax, eax
jl 0x4ecfe9
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
test edx, edx
je 0x4ecfb2
cmp eax, dword [edx - 4]
jb 0x4ecfb7
call fcn.00403a58
mov edx, dword [edx + eax*4]
mov eax, dword [ebp - 0xc]
call fcn.00405810
dec eax
jne 0x4ecfe1
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x3c]
test edx, edx
je 0x4ecfd4
cmp eax, dword [edx - 4]
jb 0x4ecfd9
call fcn.00403a58
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x10], eax
jmp 0x4ecfe9
inc dword [ebp - 0x14]
dec dword [ebp - 0x20]
jne 0x4ecfa3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ed026
lea eax, [ebp - 0x7c]
mov edx, 0xd
call fcn.0040530c
lea eax, [ebp - 0x48]
mov edx, dword [0x4e2d0c]
call fcn.00405994
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0040530c
ret