Function at 0x48e23c
Capabilities:
Capture screenshot

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc8
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x4ec], 0
jne 0x48e267
mov dl, 1
mov eax, dword [0x4209c8]
call fcn.004253cc
mov edx, dword [ebp - 4]
mov dword [edx + 0x4ec], eax
mov eax, dword [ebp - 4]
call fcn.00437aa0
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
call fcn.00437ae4
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
sub edx, dword [eax + 0x4c]
add edx, 2
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x48]
mov ecx, 0x64
cdq
idiv ecx
test eax, eax
jl 0x48e35a
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x4c]
mov ecx, 0x64
cdq
idiv ecx
test eax, eax
jl 0x48e34e
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 0
push 0xcc0020
imul eax, dword [0x4adf9c], 0x64
push eax
push 0
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.004689b8
call fcn.00467fe4
call fcn.00425994
call fcn.00422cd0
push eax
push 0x64
push 0x64
imul eax, dword [ebp - 0xc], 0x64
push eax
imul eax, dword [ebp - 8], 0x64
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
call fcn.00422cd0
push eax
call sub.gdi32.dll_BitBlt
inc dword [ebp - 0xc]
dec dword [ebp - 0x24]
jne 0x48e2f0
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48e2cd
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
mov edx, 1
call fcn.00421fa8
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.00421f78
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
xor edx, edx
call fcn.00421e9c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov dl, 1
call fcn.00422298
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x28]
call fcn.004229f4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, 6
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, 6
push eax
mov ecx, 6
mov edx, 6
mov eax, dword [ebp - 0x28]
call fcn.004229f4
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
mov edx, 3
call fcn.00421fa8
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x2c]
sub eax, 3
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
mov edx, dword [eax]
call dword [edx + 0x20]
sub eax, 3
push eax
mov ecx, 3
mov edx, 3
mov eax, dword [ebp - 0x28]
call fcn.004229f4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4d4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4e0]
add edx, 2
mov ecx, edx
cdq
idiv ecx
mov edx, dword [ebp - 4]
mov dword [edx + 0x4d4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x4c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4e4]
add edx, 2
mov ecx, edx
cdq
idiv ecx
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x4d4]
jge 0x48e4b4
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov dword [edx + 0x4d4], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4d4]
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x4e0]
sub eax, edx
sar eax, 1
jns 0x48e4dc
adc eax, 0
mov edx, dword [ebp - 4]
mov dword [edx + 0x4d8], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x4c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4d4]
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x4e4]
sub eax, edx
sar eax, 1
jns 0x48e50d
adc eax, 0
mov edx, dword [ebp - 4]
mov dword [edx + 0x4dc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
cmp eax, dword [edx + 0x4d4]
setne byte [ebp - 0x15]
cmp byte [ebp - 0x15], 0
je 0x48e65e
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2710], 0
je 0x48e54b
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2710]
mov ecx, dword [eax]
call dword [ecx]
push 2
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46e0cc]
call fcn.0046e488
mov edx, dword [ebp - 4]
mov dword [edx + 0x2710], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
cmp dword [edx + eax*4 + 0x2710], 0
je 0x48e595
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x2710]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46e0cc]
call fcn.0046e488
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + edx*4 + 0x2710], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 6
jne 0x48e572
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2728], 0
je 0x48e5dd
mov dl, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2728]
mov ecx, dword [eax]
call dword [ecx]
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46e0cc]
call fcn.0046e488
mov edx, dword [ebp - 4]
mov dword [edx + 0x2728], eax
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
cmp dword [edx + eax*4 + 0x272c], 0
je 0x48e625
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x272c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4cc]
shl eax, 4
inc eax
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46e984]
call fcn.0046ebb8
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + edx*4 + 0x272c], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xb
jne 0x48e602
mov dl, 1
mov eax, dword [0x4209c8]
call fcn.004253cc
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
call fcn.00437aa0
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x40]
mov eax, dword [ebp - 4]
call fcn.00437ae4
mov edx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
sub edx, dword [eax + 0x4c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x48]
mov ecx, 0x64
cdq
idiv ecx
test eax, eax
jl 0x48e74b
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
mov eax, dword [eax + 0x4c]
mov ecx, 0x64
cdq
idiv ecx
test eax, eax
jl 0x48e73f
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 0
push 0xcc0020
imul eax, dword [0x4adf9c], 0x64
push eax
push 0x64
xor edx, edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f0]
call fcn.004689b8
call fcn.00467fe4
call fcn.00425994
call fcn.00422cd0
push eax
push 0x64
push 0x64
imul eax, dword [ebp - 0xc], 0x64
push eax
imul eax, dword [ebp - 8], 0x64
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00425994
call fcn.00422cd0
push eax
call sub.gdi32.dll_BitBlt
inc dword [ebp - 0xc]
dec dword [ebp - 0x24]
jne 0x48e6e7
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48e6c4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4d4]
test eax, eax
jns 0x48e75b
add eax, 3
sar eax, 2
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4e0]
dec eax
test eax, eax
jl 0x48e872
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4e4]
dec eax
test eax, eax
jl 0x48e866
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 0
imul eax, dword [ebp - 0xc], 0x15
mov edx, dword [ebp - 4]
lea eax, [edx + eax*4]
mov edx, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x4f0], 0
jl 0x48e85a
push 0xcc0020
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4dc]
add eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4d8]
add eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
call fcn.00425994
call fcn.00422cd0
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4d4]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4d4]
push eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4dc]
add eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4d8]
add eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
call fcn.00422cd0
push eax
call sub.gdi32.dll_BitBlt
inc dword [ebp - 0xc]
dec dword [ebp - 0x24]
jne 0x48e79b
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48e77e
mov dl, 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4e0]
dec eax
test eax, eax
jl 0x48e9ee
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4e4]
dec eax
test eax, eax
jl 0x48e9e2
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], 0
imul eax, dword [ebp - 0xc], 0x15
mov edx, dword [ebp - 4]
lea eax, [edx + eax*4]
mov edx, dword [ebp - 8]
mov eax, dword [eax + edx*4 + 0x4f0]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, 6
jb 0x48e8e9
sub eax, 0x5d
je 0x48e93c
dec eax
sub eax, 0xb
jb 0x48e988
jmp 0x48e9d6
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4dc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
mov edx, eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0x4d4]
mov eax, dword [ebp - 4]
add ecx, dword [eax + 0x4d8]
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + eax*4 + 0x2710]
call fcn.0046e898
jmp 0x48e9d6
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4dc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
mov edx, eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0x4d4]
mov eax, dword [ebp - 4]
add ecx, dword [eax + 0x4d8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2728]
call fcn.0046e898
jmp 0x48e9d6
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul dword [edx + 0x4d4]
mov edx, dword [ebp - 4]
add eax, dword [edx + 0x4dc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4ec]
call fcn.00425994
mov edx, eax
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0x4d4]
mov eax, dword [ebp - 4]
add ecx, dword [eax + 0x4d8]
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp - 4]
mov eax, dword [ebx + eax*4 + 0x259c]
call fcn.0046ee84
inc dword [ebp - 0xc]
dec dword [ebp - 0x24]
jne 0x48e8b6
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48e899
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2758], 0
jle 0x48eabe
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2758]
test eax, eax
jle 0x48eabe
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
lea eax, [eax + eax*2]
mov edx, dword [ebp - 4]
lea eax, [edx + eax*8 + 0x2750]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
sete al
or al, byte [ebp - 0x15]
je 0x48eab2
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
je 0x48ea4d
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 4], 0
je 0x48ea62
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 4]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [eax + 4], edx
push 1
push 1
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46b2b0]
call fcn.0046b664
mov edx, dword [ebp - 0x2c]
mov dword [edx], eax
push 1
push 1
push 2
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46b2b0]
call fcn.0046b664
mov edx, dword [ebp - 0x2c]
mov dword [edx + 4], eax
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48ea19
mov eax, dword [ebp - 4]
cmp dword [eax + 0x275c], 0
jle 0x48eb52
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x275c]
test eax, eax
jle 0x48eb52
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
lea eax, [eax + eax*8]
mov edx, dword [ebp - 4]
lea eax, [edx + eax*4 + 0x2bf4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
sete al
or al, byte [ebp - 0x15]
je 0x48eb4a
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
je 0x48eb19
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 8]
push eax
push 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46b2b0]
call fcn.0046b664
mov edx, dword [ebp - 0x30]
mov dword [edx], eax
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48eae5
cmp byte [ebp - 0x15], 0
je 0x48eb98
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
cmp dword [edx + eax*4 + 0x3758], 0
je 0x48eb8f
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x3758]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
xor ecx, ecx
mov dword [edx + eax*4 + 0x3758], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], 5
jne 0x48eb5d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2760], 0
jle 0x48ec2e
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2760]
test eax, eax
jle 0x48ec2e
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
lea eax, [eax + eax*8]
mov edx, dword [ebp - 4]
lea eax, [edx + eax*4 + 0x3194]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
cmp dword [edx + eax*4 + 0x3758], 0
jne 0x48ec11
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46bfe8]
call fcn.0046c790
mov edx, dword [ebp - 0x34]
mov edx, dword [edx + 4]
mov ecx, dword [ebp - 4]
mov dword [ecx + edx*4 + 0x3758], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax*4 + 0x3758]
mov edx, dword [ebp - 0x34]
mov dword [edx], eax
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48ebbf
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2764], 0
jle 0x48ecae
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2764]
test eax, eax
jle 0x48ecae
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 1
mov eax, dword [ebp - 8]
lea eax, [eax + eax*4]
mov edx, dword [ebp - 4]
lea eax, [edx + eax*4 + 0x3758]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
sete al
or al, byte [ebp - 0x15]
je 0x48eca6
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
je 0x48ec85
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4d4]
mov dl, 1
mov eax, dword [0x46cd40]
call fcn.0046db94
mov edx, dword [ebp - 0x38]
mov dword [edx], eax
inc dword [ebp - 8]
dec dword [ebp - 0x20]
jne 0x48ec51
pop ebx
mov esp, ebp
pop ebp
ret