Function at 0x40a430
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46d454
mov eax, dword fs:[0]
push eax
mov eax, 0x8d38
call fcn.00465d50
mov eax, dword [0x496d50]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
xor ecx, ecx
push 0x11
mov word [ebp - 0x89cc], cx
mov ebx, 7
xor esi, esi
push str._System_6to4.dll
lea ecx, [ebp - 0x89cc]
mov dword [ebp - 0x8d20], eax
mov dword [ebp - 0x8d24], edi
mov dword [ebp - 0x89b8], ebx
mov dword [ebp - 0x89bc], esi
call fcn.00401740
mov dword [ebp - 4], esi
push 0x15
xor edx, edx
push str._System__appmgmts.dll
lea ecx, [ebp - 0x89b0]
mov dword [ebp - 0x899c], ebx
mov dword [ebp - 0x89a0], esi
mov word [ebp - 0x89b0], dx
call fcn.00401740
mov byte [ebp - 4], 1
push 0x14
xor eax, eax
push str._System__browser.dll
lea ecx, [ebp - 0x8994]
mov dword [ebp - 0x8980], ebx
mov dword [ebp - 0x8984], esi
mov word [ebp - 0x8994], ax
call fcn.00401740
mov byte [ebp - 4], 2
xor ecx, ecx
push 0x14
mov word [ebp - 0x8978], cx
push str._System_clipsrv.exe
lea ecx, [ebp - 0x8978]
mov dword [ebp - 0x8964], ebx
mov dword [ebp - 0x8968], esi
call fcn.00401740
mov byte [ebp - 4], 3
push 0x15
xor edx, edx
push str._System_cngaudit.dll
lea ecx, [ebp - 0x895c]
mov dword [ebp - 0x8948], ebx
mov dword [ebp - 0x894c], esi
mov word [ebp - 0x895c], dx
call fcn.00401740
mov byte [ebp - 4], 4
push 0x15
xor eax, eax
push str._System_comctl32.dll
lea ecx, [ebp - 0x8940]
mov dword [ebp - 0x892c], ebx
mov dword [ebp - 0x8930], esi
mov word [ebp - 0x8940], ax
call fcn.00401740
mov byte [ebp - 4], 5
xor ecx, ecx
push 0x13
mov word [ebp - 0x8924], cx
push str._System_comres.dll
lea ecx, [ebp - 0x8924]
mov dword [ebp - 0x8910], ebx
mov dword [ebp - 0x8914], esi
call fcn.00401740
mov byte [ebp - 4], 6
xor edx, edx
mov dword [ebp - 0x88f4], ebx
mov dword [ebp - 0x88f8], esi
mov word [ebp - 0x8908], dx
push 0x14
push str._System_conhost.exe
lea ecx, [ebp - 0x8908]
call fcn.00401740
mov byte [ebp - 4], bl
push 0x15
xor eax, eax
push str._System_cryptsvc.dll
lea ecx, [ebp - 0x88ec]
mov dword [ebp - 0x88d8], ebx
mov dword [ebp - 0x88dc], esi
mov word [ebp - 0x88ec], ax
call fcn.00401740
mov byte [ebp - 4], 8
xor ecx, ecx
push 0x12
mov word [ebp - 0x88d0], cx
push str._System_csrss.exe
lea ecx, [ebp - 0x88d0]
mov dword [ebp - 0x88bc], ebx
mov dword [ebp - 0x88c0], esi
call fcn.00401740
mov byte [ebp - 4], 9
push 0x13
xor edx, edx
push str._System_ctfmon.exe
lea ecx, [ebp - 0x88b4]
mov dword [ebp - 0x88a0], ebx
mov dword [ebp - 0x88a4], esi
mov word [ebp - 0x88b4], dx
call fcn.00401740
mov byte [ebp - 4], 0xa
push 0x11
xor eax, eax
push str._System_d3d8.dll
lea ecx, [ebp - 0x8898]
mov dword [ebp - 0x8884], ebx
mov dword [ebp - 0x8888], esi
mov word [ebp - 0x8898], ax
call fcn.00401740
mov byte [ebp - 4], 0xb
xor ecx, ecx
push 0x14
mov word [ebp - 0x887c], cx
push str._System_d3d8thk.dll
lea ecx, [ebp - 0x887c]
mov dword [ebp - 0x8868], ebx
mov dword [ebp - 0x886c], esi
call fcn.00401740
mov byte [ebp - 4], 0xc
push 0x11
xor edx, edx
push str._System_d3d9.dll
lea ecx, [ebp - 0x8860]
mov dword [ebp - 0x884c], ebx
mov dword [ebp - 0x8850], esi
mov word [ebp - 0x8860], dx
call fcn.00401740
mov byte [ebp - 4], 0xd
push 0x13
xor eax, eax
push str._System_dbghlp.dll
lea ecx, [ebp - 0x8844]
mov dword [ebp - 0x8830], ebx
mov dword [ebp - 0x8834], esi
mov word [ebp - 0x8844], ax
call fcn.00401740
mov byte [ebp - 4], 0xe
xor ecx, ecx
push 0x12
mov dword [ebp - 0x8814], ebx
mov dword [ebp - 0x8818], esi
mov word [ebp - 0x8828], cx
push str._System_ddraw.dll
lea ecx, [ebp - 0x8828]
call fcn.00401740
mov byte [ebp - 4], 0xf
push 0x14
xor edx, edx
push str._System_dllhost.exe
lea ecx, [ebp - 0x880c]
mov dword [ebp - 0x87f8], ebx
mov dword [ebp - 0x87fc], esi
mov word [ebp - 0x880c], dx
call fcn.00401740
mov byte [ebp - 4], 0x10
push 0x13
xor eax, eax
push str._System_dnsapi.dll
lea ecx, [ebp - 0x87f0]
mov dword [ebp - 0x87dc], ebx
mov dword [ebp - 0x87e0], esi
mov word [ebp - 0x87f0], ax
call fcn.00401740
mov byte [ebp - 4], 0x11
xor ecx, ecx
push 0x13
mov word [ebp - 0x87d4], cx
push str._System_dsound.dll
lea ecx, [ebp - 0x87d4]
mov dword [ebp - 0x87c0], ebx
mov dword [ebp - 0x87c4], esi
call fcn.00401740
mov byte [ebp - 4], 0x12
push 0x13
xor edx, edx
push str._System_dssenh.dll
lea ecx, [ebp - 0x87b8]
mov dword [ebp - 0x87a4], ebx
mov dword [ebp - 0x87a8], esi
mov word [ebp - 0x87b8], dx
call fcn.00401740
mov byte [ebp - 4], 0x13
push 0x10
xor eax, eax
push str._System_dwm.exe
lea ecx, [ebp - 0x879c]
mov dword [ebp - 0x8788], ebx
mov dword [ebp - 0x878c], esi
mov word [ebp - 0x879c], ax
call fcn.00401740
mov byte [ebp - 4], 0x14
xor ecx, ecx
push 0xf
mov word [ebp - 0x8780], cx
push str._System_es.dll
lea ecx, [ebp - 0x8780]
mov dword [ebp - 0x876c], ebx
mov dword [ebp - 0x8770], esi
call fcn.00401740
mov byte [ebp - 4], 0x15
push 0x15
xor edx, edx
push str._System_eventlog.dll
lea ecx, [ebp - 0x8764]
mov dword [ebp - 0x8750], ebx
mov dword [ebp - 0x8754], esi
mov word [ebp - 0x8764], dx
call fcn.00401740
mov byte [ebp - 4], 0x16
xor eax, eax
push 0x10
mov dword [ebp - 0x8734], ebx
mov dword [ebp - 0x8738], esi
mov word [ebp - 0x8748], ax
push str._System_hid.dll
lea ecx, [ebp - 0x8748]
call fcn.00401740
mov byte [ebp - 4], 0x17
xor ecx, ecx
push 0x14
mov word [ebp - 0x872c], cx
push str._System_hnetcfg.dll
lea ecx, [ebp - 0x872c]
mov dword [ebp - 0x8718], ebx
mov dword [ebp - 0x871c], esi
call fcn.00401740
mov byte [ebp - 4], 0x18
push 0x10
xor edx, edx
push str._System_ias.dll
lea ecx, [ebp - 0x8710]
mov dword [ebp - 0x86fc], ebx
mov dword [ebp - 0x8700], esi
mov word [ebp - 0x8710], dx
call fcn.00401740
mov byte [ebp - 4], 0x19
push 0x12
xor eax, eax
push str._System_imm32.dll
lea ecx, [ebp - 0x86f4]
mov dword [ebp - 0x86e0], ebx
mov dword [ebp - 0x86e4], esi
mov word [ebp - 0x86f4], ax
call fcn.00401740
mov byte [ebp - 4], 0x1a
xor ecx, ecx
push 0x12
mov word [ebp - 0x86d8], cx
push str._System_iprip.dll
lea ecx, [ebp - 0x86d8]
mov dword [ebp - 0x86c4], ebx
mov dword [ebp - 0x86c8], esi
call fcn.00401740
mov byte [ebp - 4], 0x1b
push 0x15
xor edx, edx
push str._System_ipsecsvc.dll
lea ecx, [ebp - 0x86bc]
mov dword [ebp - 0x86a8], ebx
mov dword [ebp - 0x86ac], esi
mov word [ebp - 0x86bc], dx
call fcn.00401740
mov byte [ebp - 4], 0x1c
push 0x15
xor eax, eax
push str._System_kernel32.dll
lea ecx, [ebp - 0x86a0]
mov dword [ebp - 0x868c], ebx
mov dword [ebp - 0x8690], esi
mov word [ebp - 0x86a0], ax
call fcn.00401740
mov byte [ebp - 4], 0x1d
xor ecx, ecx
push 0x13
mov word [ebp - 0x8684], cx
push str._System_ksuser.dll
lea ecx, [ebp - 0x8684]
mov dword [ebp - 0x8670], ebx
mov dword [ebp - 0x8674], esi
call fcn.00401740
mov byte [ebp - 4], 0x1e
push 0x15
xor edx, edx
push str._System_linkinfo.dll
lea ecx, [ebp - 0x8668]
mov dword [ebp - 0x8654], ebx
mov dword [ebp - 0x8658], esi
mov word [ebp - 0x8668], dx
call fcn.00401740
mov byte [ebp - 4], 0x1f
push 0x10
xor eax, eax
push str._System_lpk.dll
lea ecx, [ebp - 0x864c]
mov dword [ebp - 0x8638], ebx
mov dword [ebp - 0x863c], esi
mov word [ebp - 0x864c], ax
call fcn.00401740
mov byte [ebp - 4], 0x20
xor ecx, ecx
push 0x12
mov word [ebp - 0x8630], cx
push str._System_lsass.exe
lea ecx, [ebp - 0x8630]
mov dword [ebp - 0x861c], ebx
mov dword [ebp - 0x8620], esi
call fcn.00401740
mov byte [ebp - 4], 0x21
push 0x10
xor edx, edx
push str._System_lsm.exe
lea ecx, [ebp - 0x8614]
mov dword [ebp - 0x8600], ebx
mov dword [ebp - 0x8604], esi
mov word [ebp - 0x8614], dx
call fcn.00401740
mov byte [ebp - 4], 0x22
push 0x13
xor eax, eax
push str._System_mfc40u.dll
lea ecx, [ebp - 0x85f8]
mov dword [ebp - 0x85e4], ebx
mov dword [ebp - 0x85e8], esi
mov word [ebp - 0x85f8], ax
call fcn.00401740
mov byte [ebp - 4], 0x23
xor ecx, ecx
push 0x14
mov word [ebp - 0x85dc], cx
push str._System_midimap.dll
lea ecx, [ebp - 0x85dc]
mov dword [ebp - 0x85c8], ebx
mov dword [ebp - 0x85cc], esi
call fcn.00401740
mov byte [ebp - 4], 0x24
push 0x13
xor edx, edx
push str._System_msgsvc.dll
lea ecx, [ebp - 0x85c0]
mov dword [ebp - 0x85ac], ebx
mov dword [ebp - 0x85b0], esi
mov word [ebp - 0x85c0], dx
call fcn.00401740
mov byte [ebp - 4], 0x25
push 0x13
xor eax, eax
push str._System_mshtml.dll
lea ecx, [ebp - 0x85a4]
mov dword [ebp - 0x8590], ebx
mov dword [ebp - 0x8594], esi
mov word [ebp - 0x85a4], ax
call fcn.00401740
mov byte [ebp - 4], 0x26
xor ecx, ecx
push 0x14
mov word [ebp - 0x8588], cx
push str._System_msimg32.dll
lea ecx, [ebp - 0x8588]
mov dword [ebp - 0x8574], ebx
mov dword [ebp - 0x8578], esi
call fcn.00401740
mov byte [ebp - 4], 0x27
push 0x15
xor edx, edx
push str._System_mspmsnsv.dll
lea ecx, [ebp - 0x856c]
mov dword [ebp - 0x8558], ebx
mov dword [ebp - 0x855c], esi
mov word [ebp - 0x856c], dx
call fcn.00401740
mov byte [ebp - 4], 0x28
push 0x14
xor eax, eax
push str._System_msprivs.dll
lea ecx, [ebp - 0x8550]
mov dword [ebp - 0x853c], ebx
mov dword [ebp - 0x8540], esi
mov word [ebp - 0x8550], ax
call fcn.00401740
mov byte [ebp - 4], 0x29
xor ecx, ecx
push 0x13
mov word [ebp - 0x8534], cx
push str._System_msvcrt.dll
lea ecx, [ebp - 0x8534]
mov dword [ebp - 0x8520], ebx
mov dword [ebp - 0x8524], esi
call fcn.00401740
mov byte [ebp - 4], 0x2a
push 0x14
xor edx, edx
push str._System_mswsock.dll
lea ecx, [ebp - 0x8518]
mov dword [ebp - 0x8504], ebx
mov dword [ebp - 0x8508], esi
mov word [ebp - 0x8518], dx
call fcn.00401740
mov byte [ebp - 4], 0x2b
push 0x15
xor eax, eax
push str._System__netlogon.dll
lea ecx, [ebp - 0x84fc]
mov dword [ebp - 0x84e8], ebx
mov dword [ebp - 0x84ec], esi
mov word [ebp - 0x84fc], ax
call fcn.00401740
mov byte [ebp - 4], 0x2c
xor ecx, ecx
push 0x13
mov word [ebp - 0x84e0], cx
push str._System__netman.dll
lea ecx, [ebp - 0x84e0]
mov dword [ebp - 0x84cc], ebx
mov dword [ebp - 0x84d0], esi
call fcn.00401740
mov byte [ebp - 4], 0x2d
push 0x15
xor edx, edx
push str._System__ntkrnlpa.exe
lea ecx, [ebp - 0x84c4]
mov dword [ebp - 0x84b0], ebx
mov dword [ebp - 0x84b4], esi
mov word [ebp - 0x84c4], dx
call fcn.00401740
mov byte [ebp - 4], 0x2e
push 0x14
xor eax, eax
push str._System__ntmssvc.dll
lea ecx, [ebp - 0x84a8]
mov dword [ebp - 0x8494], ebx
mov dword [ebp - 0x8498], esi
mov word [ebp - 0x84a8], ax
call fcn.00401740
mov byte [ebp - 4], 0x2f
xor ecx, ecx
push 0x15
mov word [ebp - 0x848c], cx
push str._System__ntoskrnl.exe
lea ecx, [ebp - 0x848c]
mov dword [ebp - 0x8478], ebx
mov dword [ebp - 0x847c], esi
call fcn.00401740
mov byte [ebp - 4], 0x30
push 0x13
xor edx, edx
push str._System_oakley.dll
lea ecx, [ebp - 0x8470]
mov dword [ebp - 0x845c], ebx
mov dword [ebp - 0x8460], esi
mov word [ebp - 0x8470], dx
call fcn.00401740
mov byte [ebp - 4], 0x31
push 0x12
xor eax, eax
push str._System_ole32.dll
lea ecx, [ebp - 0x8454]
mov dword [ebp - 0x8440], ebx
mov dword [ebp - 0x8444], esi
mov word [ebp - 0x8454], ax
call fcn.00401740
mov byte [ebp - 4], 0x32
xor ecx, ecx
push 0x15
mov word [ebp - 0x8438], cx
push str._System_olepro32.dll
lea ecx, [ebp - 0x8438]
mov dword [ebp - 0x8424], ebx
mov dword [ebp - 0x8428], esi
call fcn.00401740
mov byte [ebp - 4], 0x33
push 0x15
xor edx, edx
push str._System_perfctrs.dll
lea ecx, [ebp - 0x841c]
mov dword [ebp - 0x8408], ebx
mov dword [ebp - 0x840c], esi
mov word [ebp - 0x841c], dx
call fcn.00401740
mov byte [ebp - 4], 0x34
push 0x15
xor eax, eax
push str._System_powrprof.dll
lea ecx, [ebp - 0x8400]
mov dword [ebp - 0x83ec], ebx
mov dword [ebp - 0x83f0], esi
mov word [ebp - 0x8400], ax
call fcn.00401740
mov byte [ebp - 4], 0x35
xor ecx, ecx
push 0x13
mov word [ebp - 0x83e4], cx
push 0x4755ec
lea ecx, [ebp - 0x83e4]
mov dword [ebp - 0x83d0], ebx
mov dword [ebp - 0x83d4], esi
call fcn.00401740