Function at 0x40d6c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5a15a8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
mov ebp, dword [esp + 0x84]
push esi
mov esi, ecx
push edi
push ebp
lea ecx, [esp + 0x90]
call fcn.00464c50
mov eax, dword [eax]
xor ebx, ebx
push eax
push str.CImportAuthMgr::ImportAuth___s_
push str.CheckModule
push 0xf
push 0x6292fc
mov dword [esp + 0x98], ebx
call fcn.00440080
add esp, 0x14
lea ecx, [esp + 0x8c]
mov dword [esp + 0x84], 0xffffffff
call fcn.004654c0
xor edi, edi
cmp ebp, ebx
mov dword [esp + 0x10], ebx
je 0x40db28
push ebp
call fcn.0044c0ec
add esp, 4
test eax, eax
je 0x40db28
cmp dword [esi + 0x40], ebx
je 0x40dae5
push ebp
lea ecx, [esp + 0x2c]
call fcn.00588149
xor ecx, ecx
mov dword [esp + 0x84], 1
mov dword [esp + 0x32], ecx
mov word [esp + 0x30], 0x54
mov dword [esp + 0x36], ecx
mov word [esp + 0x32], 0x65
mov dword [esp + 0x3a], ecx
mov word [esp + 0x34], 0x63
mov dword [esp + 0x3e], ecx
mov word [esp + 0x36], 0x6c
mov dword [esp + 0x42], ecx
mov word [esp + 0x38], 0x69
mov word [esp + 0x46], cx
lea ecx, [esp + 0x48]
mov word [esp + 0x3a], 0x6e
mov word [esp + 0x3c], 0x6b
mov word [esp + 0x3e], 0x32
mov word [esp + 0x40], 0x30
mov word [esp + 0x42], 0x31
mov word [esp + 0x44], 0x37
mov word [esp + 0x46], bx
call fcn.0049db20
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x30]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 2
call fcn.0049dd70
test eax, eax
je 0x40daef
lea ecx, [esp + 0x48]
call fcn.004a01d0
mov ebp, eax
cmp ebp, ebx
je 0x40daf9
mov ecx, 0x620b70
call fcn.0040f1d0
mov ecx, esi
mov dword [esi + 0x58], ebx
call fcn.0040e020
mov ecx, esi
call fcn.0040df50
lea ecx, [esi + 0x7c]
push ecx
mov ecx, 0x620c3c
call fcn.00465670
lea edx, [esi + 0x6c]
mov ecx, 0x620c14
push edx
call fcn.0058821c
lea edi, [esi + 0x74]
mov ecx, 0x620c18
push edi
call fcn.00465670
mov eax, 1
push edi
mov dword [esi + 0x94], eax
mov ecx, 0x620c58
mov dword [0x620c28], eax
call fcn.00465670
lea eax, [esi + 0x60]
mov ecx, 0x620c54
push eax
call fcn.00465670
mov ecx, dword [0x603f10]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x8c], ecx
mov bl, 3
xor edi, edi
test ebp, ebp
mov byte [esp + 0x84], bl
jle 0x40daa3
lea ecx, [esp + 0x8c]
call fcn.0058805d
lea edx, [esp + 0x2c]
lea eax, [esp + 0x8c]
push edx
push eax
push edi
lea ecx, [esp + 0x54]
call fcn.004a01e0
test eax, eax
je 0x40da9a
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40da9a
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x620c48
mov dword [esp + 0x20], 0
call fcn.00426370
test eax, eax
je 0x40d95f
lea ecx, [esp + 0x14]
call fcn.00477240
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x14]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 4
call fcn.0049f330
test eax, eax
jne 0x40d93e
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40da95
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, esi
call fcn.0040dd30
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x14]
jmp 0x40da95
mov edx, dword [esp + 0x8c]
lea ecx, [esp + 0x18]
push ecx
push edx
mov ecx, 0x620c48
call fcn.00426430
test eax, eax
je 0x40d9d6
lea ecx, [esp + 0x1c]
call fcn.00477240
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 5
call fcn.0049f330
test eax, eax
jne 0x40d9b5
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40da95
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, esi
call fcn.0040dd60
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x1c]
jmp 0x40da95
mov ecx, dword [esp + 0x8c]
push ecx
mov ecx, 0x620c48
call fcn.00426540
test eax, eax
je 0x40da3d
lea ecx, [esp + 0x20]
call fcn.00477240
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 6
call fcn.0049f330
test eax, eax
jne 0x40da24
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40da95
lea ecx, [esp + 0x20]
push ecx
mov ecx, esi
call fcn.0040dd90
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x20]
jmp 0x40da95
mov edx, dword [esp + 0x8c]
mov ecx, 0x620c48
push edx
call fcn.00426fe0
test eax, eax
je 0x40da9a
lea ecx, [esp + 0x24]
call fcn.00477240
mov ecx, dword [esp + 0x8c]
lea eax, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 7
call fcn.0049f330
test eax, eax
je 0x40da8a
lea edx, [esp + 0x24]
mov ecx, esi
push edx
call fcn.0040e410
mov byte [esp + 0x84], bl
lea ecx, [esp + 0x24]
call fcn.00477370
inc edi
cmp edi, ebp
jl 0x40d8a9
lea ecx, [esp + 0x8c]
mov edi, 1
mov byte [esp + 0x84], 2
call fcn.005880d5
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.0049dc40
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005880d5
xor ebx, ebx
jmp 0x40db30
mov dword [esp + 0x10], 1
jmp 0x40db30
mov dword [esp + 0x10], 5
jmp 0x40db01
mov dword [esp + 0x10], 6
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 1
call fcn.0049dc40
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.005880d5
jmp 0x40db30
mov dword [esp + 0x10], 2
push edi
push str.CImportAuthMgr::ImportAuth___lu__x1
push str.CheckModule
push 0xf
push 0x6292fc
call fcn.00440080
add esp, 0x14
cmp edi, ebx
je 0x40dbf0
mov ecx, esi
call fcn.0040c930
mov edi, eax
cmp edi, ebx
jne 0x40db6c
mov dword [esp + 0x10], 4
jmp 0x40dbf0
push 0x620918
lea ecx, [esp + 0x28]
call fcn.00588149
mov dword [esp + 0x84], 8
call fcn.00401080
push eax
lea eax, [esp + 0x28]
push str._s_tsafedoc
push eax
call fcn.00584d3d
add esp, 0xc
push 6
call fcn.00401080
push eax
call fcn.00401fd0
mov ecx, dword [esp + 0x2c]
push 6
push ecx
call fcn.00401fd0
add esp, 0x10
mov ecx, 0x620950
call fcn.0040a000
push eax
mov ecx, 0x620c00
call fcn.00412fc0
mov ecx, esi
call fcn.0040e0b0
mov ecx, esi
call fcn.0040dfd0
lea ecx, [esp + 0x24]
mov dword [esp + 0x84], 0xffffffff
call fcn.005880d5
mov eax, dword [esp + 0x10]
push edi
push eax
push str.CImportAuthMgr::ImportAuth_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x6292fc
mov dword [esi + 0x5c], eax
call fcn.00440080
mov ecx, dword [esp + 0x94]
add esp, 0x18
mov eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x78
ret 4