Function at 0x45f220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d5bc9
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x65a000]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
xor eax, eax
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], eax
mov word [ebp - 0x68], ax
push 0x3e
mov byte [ebp - 4], 1
push eax
mov word [ebp - 0x50], ax
lea eax, [ebp - 0x4e]
push eax
call fcn.005a7690
mov ebx, dword [esi + 4]
add esp, 0xc
test ebx, ebx
je 0x46000f
mov ebx, dword [ebx + 8]
mov edi, dword [ebx + 0x14]
test edi, edi
je 0x45f3a9
mov eax, dword [edi + 4]
test eax, eax
je 0x45f3a9
push eax
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.WELCOMETITLE
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 6
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
add esi, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f303
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45f33b
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
push 6
push 0x61c4e0
lea ecx, [ebp - 0x80]
call fcn.004058d0
push dword [edi + 4]
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x98]
call fcn.004062a0
add esp, 4
lea ecx, [ebp - 0x80]
push eax
call fcn.004052c0
cmp dword [ebp - 0x84], 8
jb 0x45f37e
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
push str.TASKBARTITLE
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.00407490
jmp 0x45f4a9
push str.Canon_Inkjet_Software_Installer
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.WELCOMETITLE
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 2
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
add esi, 0xc
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f400
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45f438
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
push str.Canon_Inkjet_Software_Installer
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.TASKBARTITLE
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 4
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f48c
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
jb 0x45f4c4
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x45f4f8
mov eax, dword [eax + 4]
test eax, eax
je 0x45f4f8
push eax
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.PRODUCTNAME
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xb
call fcn.004051f0
mov byte [ebp - 4], 0xc
jmp 0x45f520
push str.Canon_Inkjet_Printer
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.PRODUCTNAME
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 9
call fcn.004051f0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f54c
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
mov byte [ebp - 4], 1
xor eax, eax
cmp dword [ebp - 0x84], 8
mov word [ebp - 0xb0], ax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 7
jb 0x45f580
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov edi, dword [ebx + 0x78]
test edi, edi
je 0x46000f
mov eax, dword [edi + 4]
test eax, eax
je 0x46000f
push eax
lea ecx, [ebp - 0x98]
call fcn.004051f0
push 0x60df3c
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0xd
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f5e6
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45f61e
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov edx, dword [edi + 4]
cmp word [edx], 0
jne 0x45f62b
xor ecx, ecx
jmp 0x45f649
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0xb8], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x45f636
sub ecx, dword [ebp - 0xb8]
sar ecx, 1
push ecx
push edx
mov ecx, 0x6fb078
call fcn.004058d0
push dword [edi + 4]
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0
call fcn.00409390
sub esp, 8
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0xf
call fcn.00465500
mov eax, dword [ebp - 0xb4]
cmp dword [eax - 4], 1
jle 0x45f69f
push dword [eax - 0xc]
lea ecx, [ebp - 0xb4]
call fcn.00409070
mov eax, dword [ebp - 0xb4]
push eax
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.DEVICEIDURL
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x10
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x11
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f6ef
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45f723
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xb4]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x45f747
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0xffffffffffffffff
push dword [edi + 4]
lea eax, [ebp - 0x50]
push 0x20
push eax
call fcn.005a54f5
lea eax, [ebp - 0x50]
push str._series
push eax
call fcn.005a579b
add esp, 0x18
test eax, eax
je 0x45f7f4
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.2KDRVID
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x12
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x13
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.MFPID
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x14
call fcn.004051f0
mov byte [ebp - 4], 0x15
jmp 0x45f871
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.2KDRVID
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x16
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.MFPID
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x18
call fcn.004051f0
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
mov eax, dword [ebx + 0x7c]
test eax, eax
je 0x45f906
mov eax, dword [eax + 4]
test eax, eax
je 0x45f906
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.PrinterName
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x1c
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1d
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
jmp 0x45f992
push 0x60ec18
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.PrinterName
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1a
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1b
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45f95a
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45f992
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov eax, dword [ebx + 0x84]
test eax, eax
je 0x45f9fb
mov eax, dword [eax + 4]
test eax, eax
je 0x45f9fb
push eax
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.FaxName
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x20
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x21
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
jmp 0x45fa87
push 0x60ec18
lea ecx, [ebp - 0x98]
call fcn.004051f0
push str.FaxName
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1e
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1f
call fcn.00407490
cmp dword [ebp - 0x9c], 8
jb 0x45fa4f
push dword [ebp - 0xb0]
call fcn.0048166b
add esp, 4
xor eax, eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x84], 8
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xa0], 0
mov word [ebp - 0xb0], ax
jb 0x45fa87
push dword [ebp - 0x98]
call fcn.0048166b
add esp, 4
mov eax, dword [ebx + 0x74]
test eax, eax
je 0x46000f
mov eax, dword [eax + 4]
test eax, eax
je 0x46000f
mov edx, 0x626078
mov ecx, eax
mov di, word [ecx]
cmp di, word [edx]
jne 0x45faca
test di, di
je 0x45fac6
mov di, word [ecx + 2]
cmp di, word [edx + 2]
jne 0x45faca
add ecx, 4
add edx, 4
test di, di
jne 0x45faa4
xor ecx, ecx
jmp 0x45facf
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x45fbc6
push str.PRODUCTFLAG
lea ecx, [ebp - 0x98]
call fcn.004051f0
push 0
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x22
call fcn.00407870
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x626078
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.PRODUCTTYPE
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x23
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x24
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x60df3c
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x25
call fcn.00406e30
push eax
lea ecx, [ebp - 0x68]
call fcn.004052c0
lea ecx, [ebp - 0xb0]
call fcn.00405300
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push str.NAME
lea ecx, [ebp - 0x98]
call fcn.004051f0
mov byte [ebp - 4], 0x26
jmp 0x45ff5a
mov edx, 0x626080
mov ecx, eax
lea ecx, [ecx]
mov di, word [ecx]
cmp di, word [edx]
jne 0x45fbf6
test di, di
je 0x45fbf2
mov di, word [ecx + 2]
cmp di, word [edx + 2]
jne 0x45fbf6
add ecx, 4
add edx, 4
test di, di
jne 0x45fbd0
xor ecx, ecx
jmp 0x45fbfb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x45fd9d
push str.PRODUCTFLAG
lea ecx, [ebp - 0x98]
call fcn.004051f0
push 2
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x27
call fcn.00407870
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x626080
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.PRODUCTTYPE
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x28
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x29
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x60df3c
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xd0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2a
call fcn.00406e30
push eax
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x2b
call fcn.00465960
add esp, 4
lea ecx, [ebp - 0x68]
push eax
call fcn.004052c0
lea ecx, [ebp - 0xb0]
call fcn.00405300
lea ecx, [ebp - 0xd0]
call fcn.00405300
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push str.NAME
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2c
call fcn.00407490
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push str.WELCOMETITLE
lea ecx, [ebp - 0xb0]
call fcn.004051f0
mov byte [ebp - 4], 0x2d
push str.MFPID
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xd0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2e
call fcn.00406e30
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x2f
call fcn.00407490
lea ecx, [ebp - 0xd0]
call fcn.00405300
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
jmp 0x45ff72
mov ecx, 0x62609c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x45fdc8
test dx, dx
je 0x45fdc4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x45fdc8
add eax, 4
add ecx, 4
test dx, dx
jne 0x45fda2
xor eax, eax
jmp 0x45fdcd
sbb eax, eax
or eax, 1
push str.PRODUCTFLAG
lea ecx, [ebp - 0x98]
test eax, eax
jne 0x45fe57
call fcn.004051f0
push 3
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x30
call fcn.00407870
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x62609c
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.PRODUCTTYPE
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x31
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x32
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
jmp 0x45ff72
call fcn.004051f0
push 1
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x33
call fcn.00407870
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x6260a4
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.PRODUCTTYPE
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x34
call fcn.004051f0
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x35
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 1
call fcn.00405300
push 0x60df3c
lea ecx, [ebp - 0x98]
call fcn.004051f0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x36
call fcn.00406e30
push str._Printer
mov edx, eax
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x37
call fcn.00406060
add esp, 4
lea ecx, [ebp - 0x68]
push eax
call fcn.004052c0
lea ecx, [ebp - 0xd0]
call fcn.00405300
lea ecx, [ebp - 0xb0]
call fcn.00405300
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
push str.NAME
lea ecx, [ebp - 0x98]
call fcn.004051f0
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.00407490
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 1
call fcn.00405300
mov eax, dword [ebx + 0x94]
cmp eax, 1
je 0x45ffb5
cmp eax, 4
je 0x45ffb5
push 0x60f2a4
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.LANFLAG
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x3b
call fcn.004051f0
mov byte [ebp - 4], 0x3c
jmp 0x45ffdd
push 0x60df14
lea ecx, [ebp - 0xb0]
call fcn.004051f0
push str.LANFLAG
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x39
call fcn.004051f0
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.00407490
lea ecx, [ebp - 0x98]
call fcn.00405300
lea ecx, [ebp - 0xb0]
call fcn.00405300
mov esi, 1
jmp 0x460011
xor esi, esi
cmp dword [ebp - 0x54], 8
jb 0x460022
push dword [ebp - 0x68]
call fcn.0048166b
add esp, 4
xor eax, eax
cmp dword [ebp - 0x6c], 8
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x58], 0
mov word [ebp - 0x68], ax
jb 0x460047
push dword [ebp - 0x80]
call fcn.0048166b
add esp, 4
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005a4646
mov esp, ebp
pop ebp
ret