Function at 0x40f280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5d14c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
mov ebp, dword [esp + 0x84]
push esi
mov esi, ecx
push edi
push ebp
lea ecx, [esp + 0x90]
call fcn.0046c430
mov eax, dword [eax]
xor ebx, ebx
push eax
push str.CImportAuthMgr::ImportAuth___s_
push str.CheckModule
push 0xf
push 0x663464
mov dword [esp + 0x98], ebx
call fcn.00447850
add esp, 0x14
lea ecx, [esp + 0x8c]
mov dword [esp + 0x84], 0xffffffff
call fcn.0046cca0
xor edi, edi
cmp ebp, ebx
mov dword [esp + 0x10], ebx
je 0x40f6e8
push ebp
call fcn.004538bc
add esp, 4
test eax, eax
je 0x40f6e8
cmp dword [esi + 0x40], ebx
je 0x40f6a5
push ebp
lea ecx, [esp + 0x2c]
call fcn.005b7d77
xor ecx, ecx
mov dword [esp + 0x84], 1
mov dword [esp + 0x32], ecx
mov word [esp + 0x30], 0x54
mov dword [esp + 0x36], ecx
mov word [esp + 0x32], 0x65
mov dword [esp + 0x3a], ecx
mov word [esp + 0x34], 0x63
mov dword [esp + 0x3e], ecx
mov word [esp + 0x36], 0x6c
mov dword [esp + 0x42], ecx
mov word [esp + 0x38], 0x69
mov word [esp + 0x46], cx
lea ecx, [esp + 0x48]
mov word [esp + 0x3a], 0x6e
mov word [esp + 0x3c], 0x6b
mov word [esp + 0x3e], 0x32
mov word [esp + 0x40], 0x30
mov word [esp + 0x42], 0x31
mov word [esp + 0x44], 0x37
mov word [esp + 0x46], bx
call fcn.004ba840
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 2
call fcn.004baa70
test eax, eax
je 0x40f6af
lea ecx, [esp + 0x48]
call fcn.004bcf00
mov ebp, eax
cmp ebp, ebx
je 0x40f6b9
mov ecx, 0x65aca0
call fcn.00411000
mov ecx, esi
mov dword [esi + 0x58], ebx
call fcn.0040fc00
mov ecx, esi
call fcn.0040fb20
lea ecx, [esi + 0x7c]
push ecx
mov ecx, 0x65ada4
call fcn.0046ce50
lea edx, [esi + 0x6c]
mov ecx, 0x65ad78
push edx
call fcn.005b7e4a
lea edi, [esi + 0x74]
mov ecx, 0x65ad7c
push edi
call fcn.0046ce50
mov eax, 1
push edi
mov dword [esi + 0x94], eax
mov ecx, 0x65adc0
mov dword [0x65ad8c], eax
call fcn.0046ce50
lea eax, [esi + 0x60]
mov ecx, 0x65adbc
push eax
call fcn.0046ce50
mov ecx, dword [0x63d178]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x8c], ecx
mov bl, 3
xor edi, edi
test ebp, ebp
mov byte [esp + 0x84], bl
jle 0x40f663
lea ecx, [esp + 0x8c]
call fcn.005b7c8b
lea edx, [esp + 0x2c]
lea eax, [esp + 0x8c]
push edx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004bcf10
test eax, eax
je 0x40f65a
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40f65a
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x65adb0
mov dword [esp + 0x20], 0
call fcn.0042d390
test eax, eax
je 0x40f51f
lea ecx, [esp + 0x14]
call fcn.0047ea20
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 4
call fcn.004bc050
test eax, eax
jne 0x40f4fe
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40f655
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.0040f910
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40f655
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x65adb0
call fcn.0042d450
test eax, eax
je 0x40f596
lea ecx, [esp + 0x1c]
call fcn.0047ea20
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 5
call fcn.004bc050
test eax, eax
jne 0x40f575
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40f655
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, esi
call fcn.0040f930
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40f655
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, 0x65adb0
call fcn.0042d560
test eax, eax
je 0x40f5fd
lea ecx, [esp + 0x20]
call fcn.0047ea20
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 6
call fcn.004bc050
test eax, eax
jne 0x40f5e4
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40f655
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0040f950
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40f655
mov edx, dword [esp + 0x8c]
mov ecx, 0x65adb0
push edx
call fcn.0042e000
test eax, eax
je 0x40f65a
lea ecx, [esp + 0x24]
call fcn.0047ea20
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 7
call fcn.004bc050
test eax, eax
je 0x40f64a
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.00410000
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x24]
call fcn.0047eb50
inc edi
cmp edi, ebp
jl 0x40f469
lea ecx, [esp + 0x8c]
mov edi, 1
mov byte [esp + 0x84], 2
call fcn.005b7d03
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004ba960
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005b7d03
xor ebx, ebx
jmp 0x40f6f0
mov dword [esp + 0x10], 1
jmp 0x40f6f0
mov dword [esp + 0x10], 5
jmp 0x40f6c1
mov dword [esp + 0x10], 6
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004ba960
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005b7d03
jmp 0x40f6f0
mov dword [esp + 0x10], 2
push edi
push str.CImportAuthMgr::ImportAuth___lu__x1
push str.CheckModule
push 0xf
push 0x663464
call fcn.00447850
add esp, 0x14
cmp edi, ebx
je 0x40f7ce
mov ecx, esi
call fcn.0040de40
mov edi, eax
cmp edi, ebx
jne 0x40f72c
mov dword [esp + 0x10], 4
jmp 0x40f7ce
push 0x65aa38
lea ecx, [esp + 0x28]
call fcn.005b7d77
mov dword [esp + 0x84], 8
call fcn.00401080
push eax
lea eax, [esp + 0x28]
push str._s_tsafedoc
push eax
call fcn.005b496b
add esp, 0xc
push 6
call fcn.00401080
push eax
call fcn.00401fd0
mov ecx, dword [esp + 0x2c]
push 6
push ecx
call fcn.00401fd0
add esp, 0x10
mov ecx, 0x65aa70
call fcn.0040a6d0
push eax
mov ecx, 0x65ad30
call fcn.00415250
mov ecx, esi
call fcn.0040fca0
mov edi, eax
cmp edi, ebx
jne 0x40f7a5
mov dword [esp + 0x10], 0xd
jmp 0x40f7ba
mov ecx, esi
call fcn.0040fbb0
mov edi, eax
cmp edi, ebx
jne 0x40f7ba
mov dword [esp + 0x10], 0xe
lea ecx, [esp + 0x24]
mov dword [esp + 0x84], 0xffffffff
call fcn.005b7d03
mov eax, dword [esp + 0x10]
push edi
push eax
push str.CImportAuthMgr::ImportAuth_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x663464
mov dword [esi + 0x5c], eax
call fcn.00447850
mov ecx, dword [esp + 0x94]
add esp, 0x18
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret 4