Function at 0x40a8e6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x496793
call fcn.00487e80
sub esp, 0x98
push esi
push edi
push 0
lea ecx, [ebp - 0xa4]
call fcn.0047fdc4
and dword [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.0047fe4f
mov eax, dword [0x4bc1a0]
mov dword [ebp - 0x10], eax
mov edi, dword [0x4a33e0]
mov esi, 0x4bc67c
mov eax, esi
mov byte [ebp - 4], 1
test eax, eax
jne 0x40a935
xor eax, eax
jmp 0x40a938
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
mov esi, 0x4bc294
mov eax, esi
test eax, eax
je 0x40a950
push esi
call edi
push ebx
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0xa4]
push eax
call fcn.0048015d
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 2
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00401600
mov ebx, 0x4cc6c8
push ebx
call fcn.004884b5
test eax, eax
pop ecx
jbe 0x40a9be
mov eax, esi
test eax, eax
je 0x40a9a1
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
mov eax, ebx
test eax, eax
je 0x40a9b4
push ebx
call edi
push ebx
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
lea ecx, [ebp - 0x24]
call fcn.0046e60d
mov esi, 0x4bc434
mov eax, esi
test eax, eax
je 0x40a9d4
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
lea eax, [ebp - 0x14]
push eax
call fcn.0047efcb
pop ecx
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 3
push dword [eax - 8]
call fcn.00403db5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.00401600
call fcn.004120c8
mov esi, 0x4bcf98
mov ebx, eax
mov eax, esi
test eax, eax
je 0x40aa1b
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
mov esi, str.Admin_privelegies:
mov eax, esi
test eax, eax
je 0x40aa33
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
test ebx, ebx
pop ebx
mov esi, 0x4bcf68
jne 0x40aa4c
mov esi, 0x4bcf60
test esi, esi
jne 0x40aa54
xor eax, eax
jmp 0x40aa57
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
mov esi, str.__command_line_
mov eax, esi
test eax, eax
je 0x40aa6f
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
cmp dword [ebp + 8], 0
jne 0x40aa83
xor eax, eax
jmp 0x40aa88
push dword [ebp + 8]
call edi
push dword [ebp + 8]
lea ecx, [ebp - 0x10]
push eax
call fcn.00403db5
mov esi, 0x4bc430
mov eax, esi
test eax, eax
je 0x40aaa2
push esi
call edi
push esi
push eax
lea ecx, [ebp - 0x10]
call fcn.00403db5
push 1
push dword [ebp - 0x10]
call fcn.0040af98
pop ecx
pop ecx
lea ecx, [ebp - 0x10]
call fcn.00403be2
lea eax, [ebp - 0x20]
push eax
call fcn.0040a7e1
pop ecx
push eax
lea eax, [ebp - 0x14]
push str.The_Log_File:__
push eax
mov byte [ebp - 4], 4
call fcn.00403d51
push esi
push eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 5
push eax
call fcn.00403ced
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call fcn.004016c6
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.00401600
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.00401600
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.00401600
lea eax, [ebp - 0x1c]
push eax
call fcn.0041d304
mov edi, eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
mov dword [esp], 0x4bc42c
call fcn.0040162c
push str.DesktopName:__
push eax
lea eax, [ebp - 0x14]
mov byte [ebp - 4], 8
push eax
call fcn.00403ced
push edi
push eax
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 9
push eax
call fcn.00403c40
push esi
push eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xa
push eax
call fcn.00403ced
mov eax, dword [eax]
lea ecx, [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xb
push dword [eax - 8]
call fcn.00403db5
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 8]
call fcn.00401600
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.00401600
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 8
call fcn.00401600
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call fcn.00401600
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 1
call fcn.00401600
call dword [0x4a3354]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00416942
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x1c]
push str.__PID:__
push eax
mov byte [ebp - 4], 0xc
call fcn.00403d51
push esi
push eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
push eax
call fcn.00403ced
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xe
call fcn.00403e31
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xd
call fcn.00401600
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.00401600
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.00401600
push 1
push dword [ebp - 0x10]
call fcn.0040af98
and byte [ebp - 4], 0
pop ecx
pop ecx
lea ecx, [ebp - 0x10]
call fcn.00401600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.0047fca3
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
leave
ret