Function at 0x40ebd0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5d51ef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xb0]
mov ebp, ecx
push edi
lea ecx, [esp + 0x2c]
mov dword [esp + 0x6c], ebp
call fcn.0046c6e0
mov eax, dword [eax]
xor esi, esi
push eax
push str.CImportAuthMgr::ImportCommunicate___s_
push str.CheckModule
push 0xf
push 0x667744
mov dword [esp + 0xbc], esi
call fcn.00447b00
add esp, 0x14
lea ecx, [esp + 0x28]
mov dword [esp + 0xa8], 0xffffffff
call fcn.0046cf50
test edi, edi
mov dword [esp + 0x14], esi
mov ebx, 4
je 0x40f1f0
push edi
call fcn.00453b6c
add esp, 4
test eax, eax
je 0x40f1f0
mov eax, dword [ebp + 0x40]
test eax, eax
je 0x40f0ae
push edi
lea ecx, [esp + 0x1c]
call fcn.005bbaf7
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x3a], ecx
mov dword [esp + 0xa8], 1
mov dword [esp + 0x3e], ecx
mov word [esp + 0x38], 0x54
mov dword [esp + 0x42], ecx
mov word [esp + 0x3a], 0x65
mov dword [esp + 0x46], ecx
mov word [esp + 0x3c], 0x63
mov dword [esp + 0x4a], ecx
mov word [esp + 0x3e], 0x6c
mov word [esp + 0x4e], cx
lea ecx, [esp + 0x6c]
mov word [esp + 0x40], 0x69
mov word [esp + 0x42], 0x6e
mov word [esp + 0x44], 0x6b
mov word [esp + 0x46], 0x32
mov word [esp + 0x48], 0x30
mov word [esp + 0x4a], 0x31
mov word [esp + 0x4c], 0x37
mov word [esp + 0x4e], di
call fcn.004ba850
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x38]
push edx
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 2
call fcn.004baa80
test eax, eax
je 0x40f0bb
lea ecx, [esp + 0x6c]
call fcn.004bcf10
cmp eax, edi
mov dword [esp + 0x28], eax
je 0x40f0c5
mov ecx, 0x65ef80
call fcn.00411000
mov dword [ebp + 0x58], edi
mov ecx, dword [0x641250]
mov dword [esp + 0x50], edi
mov dword [esp + 0x10], ecx
lea edi, [ebp + 0x98]
mov byte [esp + 0xa8], 3
mov ecx, edi
call fcn.0041c400
test eax, eax
je 0x40f0cf
push 1
mov ecx, edi
call fcn.0041c0b0
xor eax, eax
mov dword [esp + 0x54], 0x5eec68
mov dword [esp + 0x58], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x5c], eax
lea edx, [esp + 0x54]
add ebp, 0x78
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push ebp
mov byte [esp + 0xb4], bl
call fcn.0046c4d0
mov ecx, 0x65f090
call fcn.0042e320
mov eax, dword [esp + 0x28]
xor ebp, ebp
test eax, eax
jle 0x40f079
lea ecx, [esp + 0x10]
call fcn.005bba0b
lea eax, [esp + 0x50]
lea ecx, [esp + 0x10]
push eax
push ecx
push ebp
lea ecx, [esp + 0x78]
call fcn.004bcf20
test eax, eax
je 0x40f06c
mov eax, dword [esp + 0x50]
test eax, eax
je 0x40f06c
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, 0x65f090
mov dword [esp + 0x24], 0
call fcn.0042d630
test eax, eax
je 0x40ee76
lea ecx, [esp + 0x30]
call fcn.0047ecd0
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x30]
push ecx
push edx
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 5
call fcn.004bc060
test eax, eax
jne 0x40ee4e
lea ecx, [esp + 0x30]
mov byte [esp + 0xa8], bl
call fcn.0047ee00
jmp 0x40f06c
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x54]
lea ecx, [esp + 0x30]
push eax
push ecx
push edx
mov ecx, edi
call fcn.00419cb0
mov esi, eax
mov byte [esp + 0xa8], bl
lea ecx, [esp + 0x30]
jmp 0x40f038
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x1c]
push eax
push ecx
mov ecx, 0x65f090
call fcn.0042d6f0
test eax, eax
je 0x40eeee
lea ecx, [esp + 0x34]
call fcn.0047ecd0
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x34]
push edx
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 6
call fcn.004bc060
test eax, eax
jne 0x40eecb
lea ecx, [esp + 0x34]
mov byte [esp + 0xa8], bl
call fcn.0047ee00
jmp 0x40f06c
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x34]
push ecx
push edx
mov ecx, edi
call fcn.00419dd0
mov esi, eax
mov byte [esp + 0xa8], bl
lea ecx, [esp + 0x34]
jmp 0x40f038
mov eax, dword [esp + 0x10]
mov ecx, 0x65f090
push eax
call fcn.0042d800
test eax, eax
je 0x40ef5c
lea ecx, [esp + 0x2c]
call fcn.0047ecd0
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x2c]
push ecx
push edx
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 7
call fcn.004bc060
test eax, eax
jne 0x40ef3e
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa8], bl
call fcn.0047ee00
jmp 0x40f06c
lea eax, [esp + 0x2c]
mov ecx, edi
push eax
call fcn.0041bc40
mov esi, eax
mov byte [esp + 0xa8], bl
lea ecx, [esp + 0x2c]
jmp 0x40f038
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x65f090
call fcn.0042e2a0
test eax, eax
je 0x40efc7
lea ecx, [esp + 0x24]
call fcn.0047ecd0
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 8
call fcn.004bc060
test eax, eax
jne 0x40efac
lea ecx, [esp + 0x24]
mov byte [esp + 0xa8], bl
call fcn.0047ee00
jmp 0x40f06c
lea ecx, [esp + 0x24]
push ecx
mov ecx, edi
call fcn.0041bf30
mov esi, eax
mov byte [esp + 0xa8], bl
lea ecx, [esp + 0x24]
jmp 0x40f038
mov edx, dword [esp + 0x10]
mov ecx, 0x65f090
push edx
call fcn.0042ee10
test eax, eax
je 0x40f03d
lea ecx, [esp + 0x20]
call fcn.0047ecd0
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x20]
push eax
push ecx
lea ecx, [esp + 0x74]
mov byte [esp + 0xb0], 9
call fcn.004bc060
test eax, eax
jne 0x40f014
lea ecx, [esp + 0x20]
mov byte [esp + 0xa8], bl
call fcn.0047ee00
jmp 0x40f06c
lea edx, [esp + 0x20]
mov ecx, 0x65ed50
push edx
call fcn.0040a6d0
push eax
mov ecx, edi
call fcn.0041bff0
mov esi, eax
mov byte [esp + 0xa8], bl
lea ecx, [esp + 0x20]
call fcn.0047ee00
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push esi
push eax
push ecx
push str.CImportAuthMgr::ImportCommunicate_strFileName__s__dwType_0x_x__bRet__lu_
push str.CheckModule
push 0xf
push 0x667744
call fcn.00447b00
add esp, 0x1c
mov ecx, edi
call fcn.0041c390
cmp eax, ebx
je 0x40f079
mov eax, dword [esp + 0x28]
inc ebp
cmp ebp, eax
jl 0x40edc0
mov ecx, edi
call fcn.0041c390
cmp eax, ebx
je 0x40f10f
mov esi, 1
mov dword [esp + 0x54], 0x5eec68
mov eax, dword [esp + 0x58]
mov byte [esp + 0xa8], 0xb
test eax, eax
je 0x40f138
jmp 0x40f12f
mov dword [esp + 0x14], 1
jmp 0x40f182
mov dword [esp + 0x14], 5
jmp 0x40f0e8
mov dword [esp + 0x14], 6
jmp 0x40f0e8
lea ecx, [esp + 0x10]
mov dword [esp + 0x14], 0xb
mov byte [esp + 0xa8], 2
call fcn.005bba83
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa8], 1
call fcn.004ba970
lea ecx, [esp + 0x18]
mov dword [esp + 0xa8], 0xffffffff
call fcn.005bba83
jmp 0x40f182
mov dword [esp + 0x14], 0xc
mov dword [esp + 0x54], 0x5eec68
mov eax, dword [esp + 0x58]
mov byte [esp + 0xa8], 0xa
test eax, eax
je 0x40f138
push eax
call fcn.005bc175
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0xa8], 2
call fcn.005bba83
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa8], 1
call fcn.004ba970
lea ecx, [esp + 0x18]
mov dword [esp + 0xa8], 0xffffffff
call fcn.005bba83
push 2
mov ecx, edi
call fcn.0041c0b0
mov ecx, edi
call fcn.0041c630
mov ebp, dword [esp + 0x68]
push esi
push str.CImportAuthMgr::ImportCommunicate___lu__x1
push str.CheckModule
push 0xf
push 0x667744
call fcn.00447b00
add esp, 0x14
test esi, esi
je 0x40f1b1
mov ecx, ebp
call fcn.0040de40
mov esi, eax
test esi, esi
jne 0x40f1b1
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
push esi
push eax
push str.CImportAuthMgr::ImportCommunicate_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x667744
mov dword [ebp + 0x5c], eax
call fcn.00447b00
mov ecx, dword [esp + 0xb8]
add esp, 0x18
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x9c
ret 4
mov dword [esp + 0x14], 2
jmp 0x40f182