Function at 0x40eac0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5c5c7e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x9c]
mov ebx, ecx
push edi
lea ecx, [esp + 0x40]
mov dword [esp + 0x34], ebx
call fcn.0046ab70
mov eax, dword [eax]
xor ebp, ebp
push eax
push str.CImportAuthMgr::ImportCommunicate___s_
push str.CheckModule
push 0xf
push 0x654a04
mov dword [esp + 0xa8], ebp
call fcn.00445f90
add esp, 0x14
lea ecx, [esp + 0x3c]
mov dword [esp + 0x94], 0xffffffff
call fcn.0046b3e0
xor esi, esi
test edi, edi
je 0x40efda
push edi
call fcn.00451ffc
add esp, 4
test eax, eax
je 0x40efda
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x40ef8f
push edi
lea ecx, [esp + 0x18]
call fcn.005ac5b7
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x42], ecx
mov dword [esp + 0x94], 1
mov dword [esp + 0x46], ecx
mov word [esp + 0x40], 0x54
mov dword [esp + 0x4a], ecx
mov word [esp + 0x42], 0x65
mov dword [esp + 0x4e], ecx
mov word [esp + 0x44], 0x63
mov dword [esp + 0x52], ecx
mov word [esp + 0x46], 0x6c
mov word [esp + 0x56], cx
lea ecx, [esp + 0x58]
mov word [esp + 0x48], 0x69
mov word [esp + 0x4a], 0x6e
mov word [esp + 0x4c], 0x6b
mov word [esp + 0x4e], 0x32
mov word [esp + 0x50], 0x30
mov word [esp + 0x52], 0x31
mov word [esp + 0x54], 0x37
mov word [esp + 0x56], di
call fcn.004b8f80
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x40]
push edx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 2
call fcn.004b91b0
test eax, eax
je 0x40ef96
lea ecx, [esp + 0x58]
call fcn.004bb640
cmp eax, edi
mov dword [esp + 0x3c], eax
je 0x40ef9d
mov ecx, 0x64c240
call fcn.00410ba0
mov dword [ebx + 0x58], edi
mov ecx, dword [0x62ed80]
mov dword [esp + 0x38], edi
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x30]
mov bl, 3
mov byte [esp + 0x94], bl
lea edi, [edx + 0x98]
mov ecx, edi
call fcn.0041bbd0
test eax, eax
je 0x40efc9
push 1
mov ecx, edi
call fcn.0041b8d0
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x34], esi
test eax, eax
jle 0x40ef2e
lea ecx, [esp + 0x10]
call fcn.005ac4cb
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x38]
lea ecx, [esp + 0x10]
push eax
push ecx
push edx
lea ecx, [esp + 0x64]
call fcn.004bb650
test eax, eax
je 0x40ef19
mov eax, dword [esp + 0x38]
test eax, eax
je 0x40ef19
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
push ecx
mov ecx, 0x64c350
mov dword [esp + 0x20], 0
call fcn.0042bb90
test eax, eax
je 0x40ed22
lea ecx, [esp + 0x1c]
call fcn.0047d160
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 4
call fcn.004ba790
test eax, eax
jne 0x40ecff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x94], bl
call fcn.0047d290
jmp 0x40ef19
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x1c]
push ecx
push edx
mov ecx, edi
call fcn.004197f0
mov esi, eax
mov byte [esp + 0x94], bl
lea ecx, [esp + 0x1c]
jmp 0x40eee4
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
push ecx
mov ecx, 0x64c350
call fcn.0042bc50
test eax, eax
je 0x40ed9a
lea ecx, [esp + 0x20]
call fcn.0047d160
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 5
call fcn.004ba790
test eax, eax
jne 0x40ed77
lea ecx, [esp + 0x20]
mov byte [esp + 0x94], bl
call fcn.0047d290
jmp 0x40ef19
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x20]
push ecx
push edx
mov ecx, edi
call fcn.00419900
mov esi, eax
mov byte [esp + 0x94], bl
lea ecx, [esp + 0x20]
jmp 0x40eee4
mov eax, dword [esp + 0x10]
mov ecx, 0x64c350
push eax
call fcn.0042bd60
test eax, eax
je 0x40ee08
lea ecx, [esp + 0x24]
call fcn.0047d160
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 6
call fcn.004ba790
test eax, eax
jne 0x40edea
lea ecx, [esp + 0x24]
mov byte [esp + 0x94], bl
call fcn.0047d290
jmp 0x40ef19
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.0041b460
mov esi, eax
mov byte [esp + 0x94], bl
lea ecx, [esp + 0x24]
jmp 0x40eee4
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, 0x64c350
call fcn.0042c800
test eax, eax
je 0x40ee73
lea ecx, [esp + 0x28]
call fcn.0047d160
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x28]
push edx
push eax
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 7
call fcn.004ba790
test eax, eax
jne 0x40ee58
lea ecx, [esp + 0x28]
mov byte [esp + 0x94], bl
call fcn.0047d290
jmp 0x40ef19
lea ecx, [esp + 0x28]
push ecx
mov ecx, edi
call fcn.0041b750
mov esi, eax
mov byte [esp + 0x94], bl
lea ecx, [esp + 0x28]
jmp 0x40eee4
mov edx, dword [esp + 0x10]
mov ecx, 0x64c350
push edx
call fcn.0042d370
test eax, eax
je 0x40eee9
lea ecx, [esp + 0x2c]
call fcn.0047d160
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x2c]
push eax
push ecx
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 8
call fcn.004ba790
test eax, eax
jne 0x40eec0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x94], bl
call fcn.0047d290
jmp 0x40ef19
lea edx, [esp + 0x2c]
mov ecx, 0x64c010
push edx
call fcn.0040a640
push eax
mov ecx, edi
call fcn.0041b810
mov esi, eax
mov byte [esp + 0x94], bl
lea ecx, [esp + 0x2c]
call fcn.0047d290
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
push esi
push eax
push ecx
push str.CImportAuthMgr::ImportCommunicate_strFileName__s__dwType_0x_x__bRet__lu_
push str.CheckModule
push 0xf
push 0x654a04
call fcn.00445f90
add esp, 0x1c
mov ecx, edi
call fcn.0041bb60
cmp eax, 4
je 0x40ef2e
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x3c]
inc eax
cmp eax, ecx
mov dword [esp + 0x34], eax
jl 0x40ec6d
push 2
mov ecx, edi
call fcn.0041b8d0
mov ecx, edi
call fcn.0041be00
mov ecx, edi
call fcn.0041bb60
cmp eax, 4
je 0x40efd0
mov esi, 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x94], 2
call fcn.005ac543
lea ecx, [esp + 0x58]
mov byte [esp + 0x94], 1
call fcn.004b90a0
lea ecx, [esp + 0x14]
mov dword [esp + 0x94], 0xffffffff
call fcn.005ac543
mov ebx, dword [esp + 0x30]
jmp 0x40efdf
mov ebp, 1
jmp 0x40efdf
mov ebp, 5
jmp 0x40efa2
mov ebp, 6
lea ecx, [esp + 0x58]
mov byte [esp + 0x94], 1
call fcn.004b90a0
lea ecx, [esp + 0x14]
mov dword [esp + 0x94], 0xffffffff
call fcn.005ac543
jmp 0x40efdf
mov ebp, 0xb
jmp 0x40ef53
mov ebp, 0xc
jmp 0x40ef53
mov ebp, 2
push esi
push str.CImportAuthMgr::ImportCommunicate___lu__x1
push str.CheckModule
push 0xf
push 0x654a04
call fcn.00445f90
add esp, 0x14
test esi, esi
je 0x40f00f
mov ecx, ebx
call fcn.0040dd30
mov esi, eax
test esi, esi
jne 0x40f00f
mov ebp, 4
push esi
push ebp
push str.CImportAuthMgr::ImportCommunicate_err_0x_x__ret__lu_
push str.CheckModule
push 0xf
push 0x654a04
mov dword [ebx + 0x5c], ebp
call fcn.00445f90
mov ecx, dword [esp + 0xa4]
add esp, 0x18
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x88
ret 4