Function at 0x40e0f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5b7198
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
mov ebp, dword [esp + 0x84]
push esi
mov esi, ecx
push edi
push ebp
lea ecx, [esp + 0x90]
call fcn.00468580
mov eax, dword [eax]
xor ebx, ebx
push eax
push str.CImportAuthMgr::ImportAuth___s_
push str.CheckModule
push 0xf
push 0x642404
mov dword [esp + 0x98], ebx
call fcn.004439a0
add esp, 0x14
lea ecx, [esp + 0x8c]
mov dword [esp + 0x84], 0xffffffff
call fcn.00468df0
xor edi, edi
cmp ebp, ebx
mov dword [esp + 0x10], ebx
je 0x40e558
push ebp
call fcn.0044fa0c
add esp, 4
test eax, eax
je 0x40e558
cmp dword [esi + 0x40], ebx
je 0x40e515
push ebp
lea ecx, [esp + 0x2c]
call fcn.0059dc03
xor ecx, ecx
mov dword [esp + 0x84], 1
mov dword [esp + 0x32], ecx
mov word [esp + 0x30], 0x54
mov dword [esp + 0x36], ecx
mov word [esp + 0x32], 0x65
mov dword [esp + 0x3a], ecx
mov word [esp + 0x34], 0x63
mov dword [esp + 0x3e], ecx
mov word [esp + 0x36], 0x6c
mov dword [esp + 0x42], ecx
mov word [esp + 0x38], 0x69
mov word [esp + 0x46], cx
lea ecx, [esp + 0x48]
mov word [esp + 0x3a], 0x6e
mov word [esp + 0x3c], 0x6b
mov word [esp + 0x3e], 0x32
mov word [esp + 0x40], 0x30
mov word [esp + 0x42], 0x31
mov word [esp + 0x44], 0x37
mov word [esp + 0x46], bx
call fcn.004b12f0
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 2
call fcn.004b1520
test eax, eax
je 0x40e51f
lea ecx, [esp + 0x48]
call fcn.004b39b0
mov ebp, eax
cmp ebp, ebx
je 0x40e529
mov ecx, 0x639c40
call fcn.0040fc20
mov ecx, esi
mov dword [esi + 0x58], ebx
call fcn.0040ea70
mov ecx, esi
call fcn.0040e9a0
lea ecx, [esi + 0x7c]
push ecx
mov ecx, 0x639d44
call fcn.00468fa0
lea edx, [esi + 0x6c]
mov ecx, 0x639d18
push edx
call fcn.0059dcd6
lea edi, [esi + 0x74]
mov ecx, 0x639d1c
push edi
call fcn.00468fa0
mov eax, 1
push edi
mov dword [esi + 0x94], eax
mov ecx, 0x639d60
mov dword [0x639d2c], eax
call fcn.00468fa0
lea eax, [esi + 0x60]
mov ecx, 0x639d5c
push eax
call fcn.00468fa0
mov ecx, dword [0x61cab0]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x8c], ecx
mov bl, 3
xor edi, edi
test ebp, ebp
mov byte [esp + 0x84], bl
jle 0x40e4d3
lea ecx, [esp + 0x8c]
call fcn.0059db17
lea edx, [esp + 0x2c]
lea eax, [esp + 0x8c]
push edx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004b39c0
test eax, eax
je 0x40e4ca
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40e4ca
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x639d50
mov dword [esp + 0x20], 0
call fcn.00429c50
test eax, eax
je 0x40e38f
lea ecx, [esp + 0x14]
call fcn.0047ab70
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 4
call fcn.004b2b00
test eax, eax
jne 0x40e36e
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40e4c5
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.0040e780
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40e4c5
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x639d50
call fcn.00429d10
test eax, eax
je 0x40e406
lea ecx, [esp + 0x1c]
call fcn.0047ab70
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 5
call fcn.004b2b00
test eax, eax
jne 0x40e3e5
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40e4c5
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, esi
call fcn.0040e7b0
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40e4c5
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, 0x639d50
call fcn.00429e20
test eax, eax
je 0x40e46d
lea ecx, [esp + 0x20]
call fcn.0047ab70
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 6
call fcn.004b2b00
test eax, eax
jne 0x40e454
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40e4c5
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0040e7e0
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40e4c5
mov edx, dword [esp + 0x8c]
mov ecx, 0x639d50
push edx
call fcn.0042a8c0
test eax, eax
je 0x40e4ca
lea ecx, [esp + 0x24]
call fcn.0047ab70
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 7
call fcn.004b2b00
test eax, eax
je 0x40e4ba
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0040ee60
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x24]
call fcn.0047aca0
inc edi
cmp edi, ebp
jl 0x40e2d9
lea ecx, [esp + 0x8c]
mov edi, 1
mov byte [esp + 0x84], 2
call fcn.0059db8f
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004b1410
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.0059db8f
xor ebx, ebx
jmp 0x40e560
mov dword [esp + 0x10], 1
jmp 0x40e560
mov dword [esp + 0x10], 5
jmp 0x40e531
mov dword [esp + 0x10], 6
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004b1410
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.0059db8f
jmp 0x40e560
mov dword [esp + 0x10], 2
push edi
push str.CImportAuthMgr::ImportAuth___lu__x1
push str.CheckModule
push 0xf
push 0x642404
call fcn.004439a0
add esp, 0x14
cmp edi, ebx
je 0x40e63e
mov ecx, esi
call fcn.0040cdd0
mov edi, eax
cmp edi, ebx
jne 0x40e59c
mov dword [esp + 0x10], 4
jmp 0x40e63e
push 0x6399d8
lea ecx, [esp + 0x28]
call fcn.0059dc03
mov dword [esp + 0x84], 8
call fcn.00401080
push eax
lea eax, [esp + 0x28]
push str._s_tsafedoc
push eax
call fcn.0059a7f7
add esp, 0xc
push 6
call fcn.00401080
push eax
call fcn.00401fd0
mov ecx, dword [esp + 0x2c]
push 6
push ecx
call fcn.00401fd0
add esp, 0x10
mov ecx, 0x639a10
call fcn.0040a2c0
push eax
mov ecx, 0x639cd0
call fcn.00413e10
mov ecx, esi
call fcn.0040eb00
mov edi, eax
cmp edi, ebx
jne 0x40e615
mov dword [esp + 0x10], 0xd
jmp 0x40e62a
mov ecx, esi
call fcn.0040ea20
mov edi, eax
cmp edi, ebx
jne 0x40e62a
mov dword [esp + 0x10], 0xe
lea ecx, [esp + 0x24]
mov dword [esp + 0x84], 0xffffffff
call fcn.0059db8f
mov eax, dword [esp + 0x10]
push edi
push eax
push str.CImportAuthMgr::ImportAuth_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x642404
mov dword [esi + 0x5c], eax
call fcn.004439a0
mov ecx, dword [esp + 0x94]
add esp, 0x18
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret 4