Function at 0x408cda
Capabilities:
Print debug messages
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x944
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push edi
push str.WTMR_95k5pe80
push 1
push 0
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
mov edi, eax
push str.log:_jh6p6kiv
mov dword [esp + 0x14], edi
call ebx
test edi, edi
mov edi, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
je 0x408d1d
push dword [esp + 0x10]
call edi
push str.WTMR_oayiq2ia
push 1
push 0
call esi
push str.log:_o2khivkx
mov esi, eax
call ebx
push esi
call edi
lea eax, [esp + 0x90]
push eax
push str.s_gq4j0j7r
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.SMPHR_54v71xzc
push 1
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x408d7d
call esi
jmp 0x408d89
push str.522iai98
push str.ld69845a
call edi
push str.XML0a3cowb1
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.yeq0vrhq
push str.yod8la10
call edi
push 0x231
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.log:_3obkjrq2
call ebx
push str.MTXar22x0yy
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x408e24
lea eax, [esp + 0x2c]
push eax
push 0x20019
push 0
push str.reghulaxc1b
push 0x80000001
call edi
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [esp + 0x34]
push eax
push 0x20019
push 0
push str.regjoqxl736
push 0x80000001
call edi
jmp 0x408e3b
push str.log:_u7uoku1q
call ebx
push str.g0snsw3f
push str.ahlik3kx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push str.MTX07geyo2x
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x408e61
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call esi
jmp 0x408e8e
lea eax, [esp + 0x10]
mov esi, 0x20019
push eax
push esi
push 0
push str.regogz55ypc
push 0x80000001
call edi
lea eax, [esp + 0x2c]
push eax
push esi
push 0
push str.regv0y3u6p1
push 0x80000001
call edi
push 0x3ad
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
lea eax, [esp + 0x7c]
push eax
push 0x20019
push 0
push str.regxew64tt5
push 0x80000001
call edi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.log:_uul8s7sw
call ebx
xor eax, eax
push eax
push 0x321
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
lea eax, [esp + 0x84]
push eax
push 0x20019
push 0
push str.regt7424gqc
push 0x80000001
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.WTMR_qelnb61z
push 1
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x408f2d
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
lea eax, [esp + 0x10]
push eax
push 0x20019
push esi
push str.regl6t0rwyx
push 0x80000001
call edi
push str.XMLninkf0eg
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.log:_qywjgu7q
call ebx
push str.ev_b0zdr3vy
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.SMPHR_qve9sc61
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 6
pop esi
push str.log:_wpp1qg1g
call ebx
sub esi, 1
jne 0x408f80
xor eax, eax
push eax
push 0x12ee
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push str.caj3rli1
push str.3k7hgx69
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.WTMR_k76j1v4z
push 1
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.en30dqe2
push str.4oxxpsvr
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.MTXpcn854lb
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x409001
push str.log:_le78o3o2
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.SMPHR_p2gy3xgb
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [esp + 0x88]
push eax
push 0x20019
push 0
push str.reg0cv0wz1r
push 0x80000001
call edi
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x409045
push str.log:_0yb5nyj5
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.WTMR_z1rhej8n
push 1
push 0
call esi
test eax, eax
je 0x409073
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.xfylf0sx
push str.o9mxpdcv
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
jmp 0x40907a
push str.log:_ag1hhbk5
call ebx
call section..text
push str.WTMR_l18srn31
push 1
push 0
call esi
push str.77g1341f
push str.33hc1dth
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.ev_octczqoy
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_78w4qbd1
push 1
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x4090e7
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
jmp 0x4090ee
push str.log:_m7n3cbp5
call ebx
push str.SMPHR_kxv25cwl
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x409122
lea eax, [esp + 0x10]
push eax
push 0x20019
push esi
push str.reg5z82xpbh
push 0x80000001
call edi
push 7
pop esi
push str.a2srfcsn
push str.2erf0dj3
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
sub esi, 1
jne 0x409125
xor eax, eax
push eax
push 0x94c
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push str.MTXv76qoe2t
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x40919e
push str.xg8px2tt
push str.iv8trhcy
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.x8kzojap
push str.815j1wlz
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.log:_zge7qpar
call ebx
call fcn.0040ea07
test eax, eax
jne 0x4091b5
push eax
call dword [0x41702c]
mov ecx, str.fa72f4c1fbe65cee8651140fd47267ba
call fcn.0040f9d2
push str.MTX63qs9twl
push 0
push 0
mov dword [esp + 0x38], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esp + 0x10], eax
test eax, eax
je 0x4091e8
call esi
push dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x4091f8
push str.rnl692la
push str.igmuctqh
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
xor eax, eax
push eax
push 0xf87
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
lea eax, [esp + 0x1d0]
push eax
push str.s_l7h0j7hh
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.ev_yzt89ywi
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0xf15
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.log:_y14oe60y
call ebx
push str.SMPHR_vfug2oaz
push 1
xor ebx, ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [esp + 0x8c]
push eax
push 0x20019
push ebx
push str.regfbi0egzp
push 0x80000001
call edi
push ebx
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x4092b6
push str.l14f3a45
push str.667yip96
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
call fcn.004053e0
call fcn.0040ebb1
test eax, eax
je 0x4092c9
call fcn.0040ef5c
push ecx
mov ecx, 0x413df0
call fcn.0040e939
mov ecx, 0x413e38
mov edi, eax
call fcn.0040e939
mov ecx, 0x413e80
mov esi, eax
call fcn.0040e939
mov ecx, 0x413ec8
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], eax
call fcn.0040e939
mov ecx, str.
mov dword [esp + 0x5c], eax
call fcn.0040e939
mov dword [esp + 0x60], eax
mov eax, dword [0x4173c0]
pop ecx
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x3c]
mov eax, dword [0x417230]
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ebx
call fcn.0040c0a5
push 0x1000
push 0x40
mov dword [esp + 0x28], eax
call dword [0x41704c]
push 0x618
push 0x40
mov dword [esp + 0x18], eax
call dword [0x41704c]
mov esi, eax
call fcn.004101a4
mov edi, eax
call fcn.00410440
push dword [0x417404]
mov ebx, eax
push esi
call dword [0x417144]
mov edx, edi
mov ecx, eax
call fcn.0040fc69
mov edx, dword [0x417238]
mov ecx, eax
call fcn.0040fc69
mov edx, ebx
mov ecx, eax
call fcn.0040fc69
mov edx, dword [0x4173b0]
mov ecx, eax
call fcn.0040fc69
mov edx, dword [esp + 0x2c]
mov ecx, eax
call fcn.0040fc69
mov esi, eax
push esi
push dword [esp + 0x14]
call dword [0x417144]
push esi
mov dword [esp + 0x18], eax
call dword [0x4170cc]
push 0x800
push 0x40
call dword [0x41704c]
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.WTMR_ul30rpxb
push 1
push 0
mov dword [esp + 0x24], eax
call esi
mov ebx, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov edi, eax
push str.ymi47e2b
push str.7i2wujn7
call ebx
test edi, edi
je 0x40941b
push edi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.ai43jbch
push str.ln1zhw62
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x409428
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.log:_0auxe75o
call edi
push str.WTMR_vyc7w63j
push 1
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [esp + 0x60]
push eax
push 0x20019
xor esi, esi
push esi
push str.regcrpk6bdg
push 0x80000001
call ebx
push str.MTX4fwt4x1h
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x40948b
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.regoqgjujut
push 0x80000001
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.ev_m1ezq15l
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0xb77
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [esp + 0x310]
push eax
push str.s_gu2e2cow
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor esi, esi
push esi
push 0xab1
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
lea eax, [esp + 0x64]
push eax
push 0x20019
push esi
push str.reggh94y6zp
push 0x80000001
call ebx
mov eax, esi
mov dword [esp + 0x28], esi
mov ecx, dword [esp + eax*4 + 0x4c]
call fcn.0040f9d2
mov esi, eax
push esi
mov dword [esp + 0x20], esi
call dword [0x417090]
cmp word [esi + eax*2 - 2], 0x2f
je 0x409544
mov edx, dword [0x417288]
mov ecx, esi
call fcn.0040fc69
mov esi, eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x44]
xor edx, edx
push eax
push dword [esp + 0x24]
inc edx
mov ecx, esi
push dword [esp + 0x1c]
call fcn.0040a1cd
add esp, 0xc
mov dword [esp + 0x24], eax
xor esi, esi
push str.WTMR_4szyizz9
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.ev_8c1xuzik
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_o1qnrami
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.wys0sqbs
push str.34h4q7kp
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
test esi, esi
je 0x4095cb
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.log:_spimqipm
call edi
push 0x99d
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.SMPHR_tqjm2ao2
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [esp + 0x68]
push eax
push 0x20019
push 0
push str.regwl2pxlqx
push 0x80000001
call ebx
push 0
push 1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call esi
test eax, eax
je 0x409635
push str.k9j0ckbt
push str.jkujg4jh
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
jmp 0x40964d
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.regyqhmgqy9
push 0x80000001
call ebx
push str.XMLa14ex98n
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call esi
push 7
pop esi
push str.log:_vp1u3h02
call edi
sub esi, 1
jne 0x409668
push str.MTX2drkm8rd
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x40968e
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x40969e
push str.0493px3x
push str.nin7k49o
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov esi, dword [esp + 0x24]
push esi
call dword [0x417090]
cmp eax, 0x40
jge 0x4096d7
push dword [esp + 0x1c]
call dword [0x4170cc]
test esi, esi
jne 0x4096c3
push esi
call dword [0x4170cc]
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
cmp eax, 5
jl 0x409513
jmp 0x4096f1
mov esi, dword [esp + 0x1c]
push esi
push dword [esp + 0x1c]
call dword [0x417144]
push esi
mov dword [esp + 0x1c], eax
call dword [0x4170cc]
push 0x8fb
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.WTMR_57d2clue
push 1
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x40972a
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
jmp 0x409730
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esp + 0x450]
push eax
push str.s_hfevc2b1
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.MTXof3ud6l7
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x409764
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x40977b
lea eax, [esp + 0x10]
push eax
push 0x20019
push esi
push str.reg9dsfo3ol
push 0x80000001
call ebx
push str.ev_avl6qzid
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
xor esi, esi
push esi
push 0x7d6
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.XMLp7zq6hpd
push 1
push esi
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
call esi
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.log:_l1oiul75
call edi
push dword [esp + 0x20]
call dword [0x4170cc]
push dword [esp + 0x14]
call dword [0x4170cc]
push 0x208
push 0x40
call dword [0x41704c]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], eax
call fcn.0040f04b
cmp dword [esp + 0x24], 0
je 0x40a1b2
push str.XML1y4bkq5g
push 1
push 0
push 0
call esi
xor esi, esi
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.WTMR_dwetqb9q
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push esi
push 0x6d8
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
lea eax, [esp + 0x6c]
push eax
push 0x20019
push 0
push str.regh8g8ymzd
push 0x80000001
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x70]
xor esi, esi
push eax
push 0x20019
push esi
push str.regca6komzj
push 0x80000001
call ebx
push str.ev_0v2cn7l9
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 9
pop esi
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.reg3jqw5o5x
push 0x80000001
call ebx
sub esi, 1
jne 0x4098b3
push str.MTX8vv1hn4i
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x4098ea
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x4098f0
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esp + 0x590]
push eax
push str.s_edaxwnf3
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.WTMR_uq079nyf
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
je 0x40992d
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
jmp 0x409945
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.regz3ng76lm
push 0x80000001
call ebx
push str.SMPHR_ou0rae7u
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, dword [esp + 0x24]
mov ecx, esi
mov edx, dword [esp + 0x1c]
call fcn.0040c0e6
push dword [0x417504]
and dword [esp + 0x18], 0
push esi
call dword [0x417190]
test eax, eax
je 0x409985
sub eax, esi
sar eax, 1
mov dword [esp + 0x14], eax
jmp 0x40998d
push 0xffffffffffffffff
call dword [0x41702c]
push 0x100
push 0x40
call dword [0x41704c]
push esi
mov dword [esp + 0x24], eax
call dword [0x417090]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x24]
add eax, 6
mov ecx, esi
push eax
call fcn.0040f7fa
pop ecx
pop ecx
test eax, eax
jne 0x4099c7
push 0xfffffffffffffffe
call dword [0x41702c]
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
call fcn.0040fc69
push dword [esp + 0x20]
mov dword [esp + 0x1c], eax
call dword [0x4170cc]
mov esi, 0x208
push esi
push 0x40
call dword [0x41704c]
push dword [esp + 0x1c]
push eax
call dword [0x417144]
mov edx, dword [0x41729c]
mov ecx, eax
call fcn.0040fc69
mov edx, dword [0x417438]
mov ecx, eax
call fcn.0040fc69
push esi
push 0x40
mov dword [esp + 0x3c], eax
call dword [0x41704c]
push dword [esp + 0x1c]
push eax
call dword [0x417144]
mov edx, dword [0x41729c]
mov ecx, eax
call fcn.0040fc69
mov edx, dword [0x41755c]
mov ecx, eax
call fcn.0040fc69
push dword [esp + 0x1c]
mov dword [esp + 0x14], eax
call dword [0x4170dc]
push 0x5000
push 0x40
call dword [0x41704c]
push 0x2800
mov esi, eax
push esi
push dword [0x417370]
call dword [0x417164]
mov edx, dword [0x417200]
mov ecx, esi
call fcn.0040fc69
mov edx, dword [esp + 0x1c]
mov ecx, eax
call fcn.0040fc69
mov esi, eax
push esi
push dword [0x417370]
call dword [0x417168]
push esi
call dword [0x4170cc]
push dword [esp + 0x18]
mov esi, dword [esp + 0x28]
push esi
call fcn.0040e310
push dword [esp + 0x10]
call dword [0x41703c]
mov dword [esp + 0x2c], eax
test eax, eax
je 0x409ef9
push str.WTMR_413a00ls
push 1
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.log:_8rag9eh1
call edi
push esi
push 0x90d
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
lea eax, [esp + 0x28]
push eax
push 0x20019
push 0
push str.regvl4dbtk4
push 0x80000001
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.SMPHR_n8q2izhe
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [esp + 0x20]
push eax
push 0x20019
push 0
push str.reg84w426gr
push 0x80000001
call ebx
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.WTMR_hv02i9jg
push 1
push 0
call esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x74]
push eax
push 0x20019
push 0
push str.regq48xume2
push 0x80000001
call ebx
mov eax, dword [esp + 0x14]
test eax, eax
je 0x409b93
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x409ba3
push str.jx9rlonu
push str.xdex3ens
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.XMLnw8aeve2
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [esp + 0x78]
push eax
push 0x20019
push 0
push str.reglwbrodx2
push 0x80000001
call ebx
push 0x435
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.9jmqre1g
push str.9vfslg2w
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.MTX998j6kvi
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esp + 0x14], eax
test eax, eax
je 0x409c25
push str.log:_jw1jb1si
call edi
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x409c3d
lea eax, [esp + 0x14]
push eax
push 0x20019
push 0
push str.regitr8hbdb
push 0x80000001
call ebx
mov ecx, dword [esp + 0x24]
call fcn.004052ba
push str.MTXiufz48id
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [esp + 0x14], eax
test eax, eax
je 0x409c6d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.WTMR_9lkioe7l
push 1
push 0
call esi
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push 0xb70
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
push eax
push 0x2d6
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.lfore89l
push str.70xm9xiq
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.WTMR_lz8pg74f
push 1
push 0
call esi
test eax, eax
je 0x409cd4
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov esi, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push str.XMLm39eti6v
push 1
push 0
push 0
call esi
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.SMPHR_38170rkg
push 1
push 0
push 0
call esi
xor esi, esi
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push esi
push 0x4e8
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push str.log:_swycn4lp
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.MTXq62imfi0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x409d4f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.XMLl4a5buj5
push 1
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.ev_karcuzqr
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_fgpk2fk9
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.bjx85mrq
push str.rf4he56r
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call esi
push str.WTMR_kqes5vzg
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov dword [esp + 0x14], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x409dd7
push eax
call esi
push str.SMPHR_5o29xzeu
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x409e0f
lea eax, [esp + 0x14]
push eax
push 0x20019
push 0
push str.regy0o3xoee
push 0x80000001
call ebx
push dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x30]
call fcn.00405232
mov dword [esp], str.WTMR_861dimgg
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x409e38
push eax
call esi
push str.SMPHR_4synhqrg
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
lea eax, [esp + 0x38]
push eax
push 0x20019
push 0
push str.regn090c3xx
push 0x80000001
call ebx
push 0
push 1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call esi
test eax, eax
je 0x409e86
push str.e6id5kzq
push str.ezpkm2q8
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
jmp 0x409e9e
lea eax, [esp + 0x14]
push eax
push 0x20019
push 0
push str.reg50pgkijz
push 0x80000001
call ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.XMLe3pezf9u
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push 0
push 1
push eax
call esi
lea eax, [esp + 0x6d0]
push eax
push str.s_u8w97cdk
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.WTMR_ebfea6sx
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.bglof55d
push str.44qq0gm4
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov esi, dword [esp + 0x24]
push dword [esp + 0x34]
call dword [0x41703c]
mov dword [esp + 0x28], eax
test eax, eax
je 0x409f58
push 0x208
push 0x40
call dword [0x41704c]
push 0
push 0x1a
push eax
push 0
mov dword [esp + 0x24], eax
call dword [0x4170c8]
mov ecx, dword [esp + 0x28]
call fcn.004076a4
test eax, eax
je 0x409f4e
mov edx, dword [esp + 0x14]
mov ecx, edx
push 0
push dword [esp + 0x2c]
push dword [esp + 0x20]
call fcn.00407425
add esp, 0xc
push dword [esp + 0x14]
call dword [0x4170cc]
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.00410c89
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.0041104c
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.00406757
push dword [esp + 0x18]
push esi
call fcn.0040d4cb
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.0040e5bb
mov edx, dword [esp + 0x18]
mov ecx, esi
call fcn.00406166
push esi
call dword [0x417090]
add eax, eax
push eax
push 0x40
call dword [0x41704c]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
push esi
call fcn.0040c6b4
test eax, eax
jle 0x409fcf
push dword [esp + 0x18]
lea ecx, [esp + 0x37]
push dword [esp + 0x24]
call fcn.0040c92d
push dword [esp + 0x20]
call dword [0x4170cc]
push str.ev_a1omfhth
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
lea eax, [esp + 0x810]
push eax
push str.s_99tkxjwz
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea eax, [esp + 0x38]
xor esi, esi
push eax
push 0x20019
push esi
push str.regs3rok2aj
push 0x80000001
call ebx
push str.MTXb0wr6src
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, eax
test esi, esi
je 0x40a04e
push str.log:_u7ptd00l
call edi
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0x200
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [esp + 0x80]
xor esi, esi
push eax
push 0x20019
push esi
push str.regytjca5do
push 0x80000001
call ebx
push str.XML9uao9as9
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.log:_e75fr607
call edi
push str.WTMR_amr2nff5
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
lea eax, [esp + 0x3c]
push eax
push 0x20019
push 0
push str.regy3ai60s0
push 0x80000001
call ebx
test esi, esi
je 0x40a0e5
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ebx, ebx
push ebx
push 0x53f
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push str.log:_tbwex0u8
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.j5x4g9fv
push str.nrownhvr
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.WTMR_8pdl3ake
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.log:_jwkb6wdp
call edi
push str.SMPHR_aehizd06
push 1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov ebx, dword [esp + 0x24]
mov ecx, ebx
call fcn.0040895e
mov eax, dword [esp + 0x28]
test eax, eax
je 0x40a178
push eax
call dword [0x417148]
mov esi, dword [esp + 0x34]
push esi
call dword [0x4170f8]
push esi
call dword [0x4170cc]
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40a199
push eax
call dword [0x417148]
mov esi, dword [esp + 0x10]
push esi
call dword [0x4170f8]
push esi
call dword [0x4170cc]
push ebx
call dword [0x4170cc]
push dword [esp + 0x1c]
call dword [0x4170cc]
push dword [esp + 0x18]
call dword [0x4170cc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret