Function at 0x40f280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5d5248
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
mov ebp, dword [esp + 0x84]
push esi
mov esi, ecx
push edi
push ebp
lea ecx, [esp + 0x90]
call fcn.0046c6e0
mov eax, dword [eax]
xor ebx, ebx
push eax
push str.CImportAuthMgr::ImportAuth___s_
push str.CheckModule
push 0xf
push 0x667744
mov dword [esp + 0x98], ebx
call fcn.00447b00
add esp, 0x14
lea ecx, [esp + 0x8c]
mov dword [esp + 0x84], 0xffffffff
call fcn.0046cf50
xor edi, edi
cmp ebp, ebx
mov dword [esp + 0x10], ebx
je 0x40f6e8
push ebp
call fcn.00453b6c
add esp, 4
test eax, eax
je 0x40f6e8
cmp dword [esi + 0x40], ebx
je 0x40f6a5
push ebp
lea ecx, [esp + 0x2c]
call fcn.005bbaf7
xor ecx, ecx
mov dword [esp + 0x84], 1
mov dword [esp + 0x32], ecx
mov word [esp + 0x30], 0x54
mov dword [esp + 0x36], ecx
mov word [esp + 0x32], 0x65
mov dword [esp + 0x3a], ecx
mov word [esp + 0x34], 0x63
mov dword [esp + 0x3e], ecx
mov word [esp + 0x36], 0x6c
mov dword [esp + 0x42], ecx
mov word [esp + 0x38], 0x69
mov word [esp + 0x46], cx
lea ecx, [esp + 0x48]
mov word [esp + 0x3a], 0x6e
mov word [esp + 0x3c], 0x6b
mov word [esp + 0x3e], 0x32
mov word [esp + 0x40], 0x30
mov word [esp + 0x42], 0x31
mov word [esp + 0x44], 0x37
mov word [esp + 0x46], bx
call fcn.004ba850
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 2
call fcn.004baa80
test eax, eax
je 0x40f6af
lea ecx, [esp + 0x48]
call fcn.004bcf10
mov ebp, eax
cmp ebp, ebx
je 0x40f6b9
mov ecx, 0x65ef80
call fcn.00411000
mov ecx, esi
mov dword [esi + 0x58], ebx
call fcn.0040fc00
mov ecx, esi
call fcn.0040fb20
lea ecx, [esi + 0x7c]
push ecx
mov ecx, 0x65f084
call fcn.0046d100
lea edx, [esi + 0x6c]
mov ecx, 0x65f058
push edx
call fcn.005bbbca
lea edi, [esi + 0x74]
mov ecx, 0x65f05c
push edi
call fcn.0046d100
mov eax, 1
push edi
mov dword [esi + 0x94], eax
mov ecx, 0x65f0a0
mov dword [0x65f06c], eax
call fcn.0046d100
lea eax, [esi + 0x60]
mov ecx, 0x65f09c
push eax
call fcn.0046d100
mov ecx, dword [0x641250]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x8c], ecx
mov bl, 3
xor edi, edi
test ebp, ebp
mov byte [esp + 0x84], bl
jle 0x40f663
lea ecx, [esp + 0x8c]
call fcn.005bba0b
lea edx, [esp + 0x2c]
lea eax, [esp + 0x8c]
push edx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004bcf20
test eax, eax
je 0x40f65a
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40f65a
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x65f090
mov dword [esp + 0x20], 0
call fcn.0042d630
test eax, eax
je 0x40f51f
lea ecx, [esp + 0x14]
call fcn.0047ecd0
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 4
call fcn.004bc060
test eax, eax
jne 0x40f4fe
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40f655
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.0040f910
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40f655
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x65f090
call fcn.0042d6f0
test eax, eax
je 0x40f596
lea ecx, [esp + 0x1c]
call fcn.0047ecd0
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 5
call fcn.004bc060
test eax, eax
jne 0x40f575
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40f655
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, esi
call fcn.0040f930
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40f655
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, 0x65f090
call fcn.0042d800
test eax, eax
je 0x40f5fd
lea ecx, [esp + 0x20]
call fcn.0047ecd0
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 6
call fcn.004bc060
test eax, eax
jne 0x40f5e4
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40f655
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0040f950
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40f655
mov edx, dword [esp + 0x8c]
mov ecx, 0x65f090
push edx
call fcn.0042e2a0
test eax, eax
je 0x40f65a
lea ecx, [esp + 0x24]
call fcn.0047ecd0
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 7
call fcn.004bc060
test eax, eax
je 0x40f64a
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.00410000
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x24]
call fcn.0047ee00
inc edi
cmp edi, ebp
jl 0x40f469
lea ecx, [esp + 0x8c]
mov edi, 1
mov byte [esp + 0x84], 2
call fcn.005bba83
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004ba970
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005bba83
xor ebx, ebx
jmp 0x40f6f0
mov dword [esp + 0x10], 1
jmp 0x40f6f0
mov dword [esp + 0x10], 5
jmp 0x40f6c1
mov dword [esp + 0x10], 6
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.004ba970
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005bba83
jmp 0x40f6f0
mov dword [esp + 0x10], 2
push edi
push str.CImportAuthMgr::ImportAuth___lu__x1
push str.CheckModule
push 0xf
push 0x667744
call fcn.00447b00
add esp, 0x14
cmp edi, ebx
je 0x40f7ce
mov ecx, esi
call fcn.0040de40
mov edi, eax
cmp edi, ebx
jne 0x40f72c
mov dword [esp + 0x10], 4
jmp 0x40f7ce
push 0x65ed18
lea ecx, [esp + 0x28]
call fcn.005bbaf7
mov dword [esp + 0x84], 8
call fcn.00401080
push eax
lea eax, [esp + 0x28]
push str._s_tsafedoc
push eax
call fcn.005b86eb
add esp, 0xc
push 6
call fcn.00401080
push eax
call fcn.00401fd0
mov ecx, dword [esp + 0x2c]
push 6
push ecx
call fcn.00401fd0
add esp, 0x10
mov ecx, 0x65ed50
call fcn.0040a6d0
push eax
mov ecx, 0x65f010
call fcn.00415250
mov ecx, esi
call fcn.0040fca0
mov edi, eax
cmp edi, ebx
jne 0x40f7a5
mov dword [esp + 0x10], 0xd
jmp 0x40f7ba
mov ecx, esi
call fcn.0040fbb0
mov edi, eax
cmp edi, ebx
jne 0x40f7ba
mov dword [esp + 0x10], 0xe
lea ecx, [esp + 0x24]
mov dword [esp + 0x84], 0xffffffff
call fcn.005bba83
mov eax, dword [esp + 0x10]
push edi
push eax
push str.CImportAuthMgr::ImportAuth_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x667744
mov dword [esi + 0x5c], eax
call fcn.00447b00
mov ecx, dword [esp + 0x94]
add esp, 0x18
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret 4