Function at 0x40169e
Capabilities:
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x524
push ebx
push esi
push edi
push str.WTMR_d2wzy50r
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov esi, eax
push str.tehsn31u4
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push str.t138ens49
call edi
push 0xdc8
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push str.tmxpd7ohi
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x160]
push eax
push str.s_6ckewooi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.MTXudixp1tv
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x40172e
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call ebx
push str.XMLpf9imnl9
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.ev_bc53jylv
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.SMPHR_ryel1kyt
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
call ebx
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x401790
call ebx
jmp 0x401797
push str.tvtb0r40b
call edi
xor esi, esi
push esi
push 0x50d
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.x6ouvua9
push str.ddinzj9g
call ebx
push str.WTMR_z0bjbz0a
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x4017eb
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.jq04wrid
push str.9r6eqejp
call ebx
jmp 0x401805
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push str.reg8cdm96u6
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.ev_rm6f94f8
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [ebp - 0x2a0]
push eax
push str.s_s8f3kbsl
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.XMLpaooh99f
push 1
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0x10]
push eax
push 0x20019
push esi
push str.regvgx1ubdd
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push esi
push 0x1074
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.gpfvhpsn
push str.6qpj8i5v
call ebx
push str.MTXzdlca9dx
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x4018bb
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.1ufcjn01
push str.120hw5ne
call ebx
push str.WTMR_bn0h88bc
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
je 0x4018dc
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.WTMR_fmhyfrzk
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.tuq4glt1l
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.tlc68e78p
call edi
lea eax, [ebp - 4]
xor esi, esi
push eax
push 0x20019
push esi
push str.reghqrhldv2
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.SMPHR_p2u3fs1k
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push str.vusbc86x
push str.qdey46kf
mov esi, eax
call ebx
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x401952
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x401959
push str.t78o8cyfe
call edi
mov eax, dword [0x41519c]
push 0x411d8c
call eax
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
add eax, 0x40
push str.XMLb6jrdtlp
push 1
push 0
push 0
mov dword [ebp - 8], eax
call esi
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.td4n89oo0
call edi
push str.SMPHR_bqk2v17t
push 1
push 0
push 0
call esi
push str.t2ff4r45w
mov esi, eax
call edi
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x4019c3
push str.f1if9gje
push str.lip5kcbk
call ebx
jmp 0x4019ca
push str.tle626zdv
call edi
push 0x601
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.9f957t8u
push str.7riios77
call ebx
push str.ev_pzp48919
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_2a317uv9
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.t3vjy3kgt
mov esi, eax
call edi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call esi
lea eax, [ebp - 0x14]
push eax
push 0x20019
push 0
push str.regbzqkc99d
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.WTMR_9jmcw779
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.thrmvjuov
mov dword [ebp - 4], eax
call edi
mov eax, dword [ebp - 4]
test eax, eax
je 0x401a6b
push eax
call esi
jmp 0x401a86
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push str.regv6l2tt2g
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.MTXro1zhm0a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x401aab
push str.t962j5e32
call edi
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x401ab7
push str.u196xc5w
push str.xbv1g5xu
call ebx
xor eax, eax
push eax
push 0xc5d
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push str.gb5arhvl
push str.9ubwl1b5
mov esi, eax
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.psnznslv
push str.6gx199iq
call ebx
push str.tv5qsnqf2
call edi
mov eax, dword [ebp - 8]
push 0xa
mov dword [ebp - 0xc], eax
pop esi
push str.t8vw7rgki
call edi
sub esi, 1
jne 0x401afc
push 0x9a
push esi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
push 0xbd
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.SMPHR_cmq5v6k8
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 0x20019
push 0
push str.regi4b7hy73
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0
push 1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call esi
test eax, eax
je 0x401b7e
push str.thedxk622
call edi
lea eax, [ebp - 0x3e0]
push eax
push str.s_qfzuukel
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.XMLhb12992m
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call esi
lea eax, [ebp - 0x1c]
xor esi, esi
push eax
push 0x20019
push esi
push str.reg9m5q6tt8
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.ev_l64csjep
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.MTXfw8xaw0e
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x401c11
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.tbgxdtwhm
call edi
push str.WTMR_f1vyd5v7
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.f50nkaph
push str.tgmqv3ec
mov esi, eax
call ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call esi
push str.WTMR_d72ywiko
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x401c55
push eax
call esi
push str.t2jy44rhi
call edi
jmp 0x401c5b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 8]
mov eax, dword [0x41504c]
push 0x40
call eax
push 0xf87
xor esi, esi
mov dword [ebp - 8], eax
push esi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.tk7tp41fy
call edi
push str.XML829hs1kl
push 1
push esi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
call esi
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.SMPHR_0abhc3le
push 1
push 0
push 0
call esi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x401ccf
push str.tvim6e94c
call edi
jmp 0x401cdb
push str.qw9ahu4t
push str.0fjyr5oj
call ebx
xor esi, esi
push esi
push 0x12f5
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.ts01p3wxq
call edi
push str.WTMR_9izocira
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
lea eax, [ebp - 0x20]
push eax
push 0x20019
push 0
push str.regdi75vimt
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call esi
push str.han0um1w
push str.pev6ps5y
call ebx
push str.WTMR_txxzgjvh
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x401d55
push eax
call esi
jmp 0x401d5c
push str.taztnta5d
call edi
push str.MTXuclqiybx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x401d81
push str.te8k5agh9
call edi
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x401da3
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push str.reg66mou72e
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.tte70xdfp
call edi
mov eax, dword [0x41519c]
lea ecx, [ebp - 0xc]
mov esi, dword [0x415040]
push 0
push 0
push ecx
push dword [ebp - 8]
push 1
push 0x411d8c
call eax
push eax
push 0x411d8c
call esi
test eax, eax
je 0x401f10
cmp dword [ebp - 8], 0
je 0x401f10
push str.SMPHR_gllbyr12
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push str.1mhwf3z7
push str.lqyt017l
mov esi, eax
call ebx
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.ev_u9i56mkz
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.XML7fcv5dnt
push 1
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.43e9897r
push str.tkg9ij7g
call ebx
push str.MTX943wowme
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x401e82
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.hsojfbud
push str.jtulb6qf
call ebx
jmp 0x401e9d
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push str.regbtmc1kpd
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.WTMR_38tcbzvf
push 1
push 0
call esi
test eax, eax
je 0x401ec5
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.zh1cuvy7
push str.vu6j14r9
call ebx
lea eax, [ebp - 0x520]
push eax
push str.s_k1v5st59
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0xf6e
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.t01x3rjox
call edi
push str.WTMR_clbrs0is
push 1
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov eax, dword [ebp - 8]
jmp 0x401f12
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret