Function at 0x40c27b
Capabilities:
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5a4
push ebx
push esi
push edi
push 0xb12
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push 5
pop esi
push str.log:_m7gh2gfy
call ebx
sub esi, 1
jne 0x40c2a5
push str.ev_qus1314r
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
xor esi, esi
push str.WTMR_gcz0vd3m
push 1
push esi
mov dword [ebp - 8], eax
call eax
push eax
mov eax, dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov dword [ebp - 0x18], eax
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push str.MTX9mhjx0xx
push esi
push esi
mov dword [ebp - 0x30], eax
call eax
mov ecx, dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x4c], edi
test eax, eax
je 0x40c327
push eax
call ecx
push str.9m80q2ex
push str.rl66x8la
call edi
jmp 0x40c32e
push str.log:_zehmq6hs
call ebx
push str.88d26u5e
push str.l9o7k4gr
call edi
mov eax, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push str.XMLjw1vo77u
push 1
push esi
push esi
mov dword [ebp - 0x2c], eax
call eax
push esi
push 1
push eax
mov eax, dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov dword [ebp - 0x1c], eax
call eax
lea eax, [ebp - 0x1e0]
push eax
push str.s_i7yn01v9
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push esi
push 0x6cd
push esi
push 4
push esi
push 0xffffffffffffffff
mov dword [ebp - 0x24], eax
call eax
mov esi, eax
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 4], eax
call eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
mov dword [ebp - 0x28], eax
call eax
push str.snxzjxc5
push str.377exlzr
call edi
push str.WTMR_fbsyaelu
push 1
xor esi, esi
push esi
call dword [ebp - 8]
test eax, eax
je 0x40c3c6
mov edi, dword [ebp - 0x18]
push eax
call edi
jmp 0x40c3d0
push str.log:_667p3138
call ebx
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x3c], esi
call dword [0x416158]
push str.SMPHR_sbpvprpo
push 1
push esi
push esi
mov dword [ebp - 0x48], eax
call dword [ebp - 0x2c]
mov esi, eax
call dword [ebp - 4]
push 0
push 1
push esi
call dword [ebp - 0x1c]
lea eax, [ebp - 0x320]
push eax
push str.s_dlplidu2
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
push eax
push 0xdde
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [ebp - 0x24]
push str.log:_v0oe6piq
mov esi, eax
call ebx
push esi
call dword [ebp - 0x28]
push str.log:_7uhly1h3
call ebx
push str.WTMR_g6u4y1t3
push 1
xor esi, esi
push esi
call dword [ebp - 8]
push eax
call edi
push str.log:_jmt56g8b
call ebx
push str.MTXbpwudvne
push esi
push esi
call dword [ebp - 0x30]
mov esi, eax
mov eax, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x14], eax
test esi, esi
je 0x40c482
push str.log:_qbk64fz2
call ebx
push esi
call dword [ebp - 0x34]
mov esi, dword [ebp - 4]
jmp 0x40c49e
lea ecx, [ebp - 0x50]
push ecx
push 0x20019
push 0
push str.regfhk7caxb
push 0x80000001
call eax
mov esi, dword [ebp - 4]
call esi
push 2
pop edi
call esi
sub edi, 1
jne 0x40c4a1
push dword [0x41647c]
call dword [0x41603c]
push dword [0x416380]
mov esi, eax
call dword [0x41603c]
push dword [0x416454]
mov edi, eax
push esi
call dword [0x4160d8]
push dword [0x416284]
mov dword [0x4161a0], eax
push esi
call dword [0x4160d8]
push dword [0x41628c]
mov dword [0x416120], eax
push esi
call dword [0x4160d8]
push dword [0x4164a0]
mov dword [0x41616c], eax
push esi
call dword [0x4160d8]
push dword [0x416410]
mov dword [0x41617c], eax
push esi
call dword [0x4160d8]
push dword [0x416364]
mov dword [0x41613c], eax
push esi
call dword [0x4160d8]
push dword [0x4163e4]
mov dword [0x41615c], eax
push edi
call dword [0x4160d8]
push dword [0x416440]
mov dword [0x416010], eax
push edi
call dword [0x4160d8]
push dword [0x416344]
mov dword [0x416104], eax
push edi
call dword [0x4160d8]
push dword [0x4163f0]
mov dword [0x416058], eax
push edi
call dword [0x4160d8]
push dword [0x416588]
mov dword [0x416094], eax
push edi
call dword [0x4160d8]
push dword [0x416308]
mov dword [0x4160d0], eax
push edi
call dword [0x4160d8]
push dword [0x41653c]
mov dword [0x416134], eax
push edi
call dword [0x4160d8]
push dword [0x416400]
mov dword [0x416064], eax
push edi
call dword [0x4160d8]
push 0x9fa
xor edi, edi
mov dword [0x416084], eax
push edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
lea eax, [ebp - 0x7c]
push eax
push 0x20019
push edi
push str.rego5qg41uk
push 0x80000001
call dword [ebp - 0x14]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.log:_7uptq8d2
call ebx
lea eax, [ebp - 0x460]
push eax
push str.s_jir84ugm
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.XMLbfkvrn7f
push 1
push edi
push edi
call dword [ebp - 0x2c]
push edi
push 1
push eax
call dword [ebp - 0x1c]
call dword [ebp - 4]
push edi
push 0x20e
push edi
push 4
push edi
push 0xffffffffffffffff
call dword [ebp - 0x24]
mov edi, dword [ebp - 0x4c]
mov esi, eax
push str.96o3h8lu
push str.tklurzva
call edi
push esi
call dword [ebp - 0x28]
call dword [ebp - 4]
push str.MTXag657uln
xor esi, esi
push esi
push esi
call dword [ebp - 0x30]
test eax, eax
je 0x40c661
push eax
call dword [ebp - 0x34]
jmp 0x40c66d
push str.w4rf6c3g
push str.vf0ugm02
call edi
push str.WTMR_yk9wdaww
push 1
push esi
call dword [ebp - 8]
push str.log:_al7e0ta9
mov esi, eax
call ebx
push esi
mov esi, dword [ebp - 0x18]
call esi
push str.WTMR_n1q4cu28
push 1
push 0
call dword [ebp - 8]
push str.log:_sw5zdeme
mov dword [ebp - 0x40], eax
call ebx
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x40c6a7
push eax
call esi
push 0
call dword [0x41618c]
push dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
call dword [0x41618c]
push 0x208
mov esi, eax
push 0x40
mov dword [ebp - 0x50], esi
call dword [0x41604c]
push esi
mov dword [ebp - 0x10], eax
call dword [0x416058]
mov dword [ebp - 0x44], eax
test eax, eax
je 0x40cbe5
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x48]
call dword [0x416124]
push 4
push esi
call dword [0x416064]
push 0xcc0020
push 1
call dword [0x416050]
push eax
push 0
call dword [0x416050]
push eax
xor eax, eax
push eax
push eax
push dword [ebp - 0x40]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push eax
push eax
push esi
call dword [0x416084]
test eax, eax
je 0x40cbe5
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
push eax
push esi
call dword [0x416104]
mov dword [ebp - 0x3c], eax
test eax, eax
je 0x40cbe5
push eax
push dword [ebp - 0x44]
call dword [0x416134]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub eax, dword [ebp - 0x5c]
push 0xcc0020
push ecx
push ecx
push esi
push eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x60]
push eax
push ecx
push ecx
push dword [ebp - 0x44]
call dword [0x416010]
test eax, eax
je 0x40cbe5
lea eax, [ebp - 0xa0]
push eax
push 0x18
push dword [ebp - 0x3c]
call dword [0x4160d0]
xor esi, esi
lea eax, [ebp - 0x78]
push esi
push eax
lea eax, [ebp - 0x80]
push eax
call dword [0x4161a0]
lea edx, [ebp - 0x10]
call fcn.0040fa33
test eax, eax
je 0x40cbdc
push esi
push 0x2fa
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [ebp - 0x24]
push str.rr59uulw
push str.698hxojj
mov esi, eax
call edi
push esi
call dword [ebp - 0x28]
push str.WTMR_k5edav23
push 1
xor esi, esi
push esi
call dword [ebp - 8]
test eax, eax
je 0x40c804
push eax
call dword [ebp - 0x18]
lea eax, [ebp - 0x38]
push eax
push 0x20019
push esi
push str.regodc28ior
push 0x80000001
call dword [ebp - 0x14]
jmp 0x40c810
push str.o6tur1y7
push str.30wcbxy8
call edi
push str.ev_r99jy5qn
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.XML1emw3jpd
push 1
xor esi, esi
push esi
push esi
call dword [ebp - 0x2c]
push esi
push 1
push eax
call dword [ebp - 0x1c]
push str.y1sn064p
push str.a8deuvc9
call edi
push str.MTX75vafir2
push esi
push esi
call dword [ebp - 0x30]
mov esi, eax
test esi, esi
je 0x40c885
push str.log:_quau5fmv
call ebx
push esi
call dword [ebp - 0x34]
lea eax, [ebp - 0x38]
push eax
push 0x20019
push 0
push str.reg23p7qo1a
push 0x80000001
call dword [ebp - 0x14]
jmp 0x40c888
call dword [ebp - 4]
push 0xa91
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push str.iegc3dxk
push str.ofjley5y
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
call dword [ebp - 4]
push str.WTMR_p1ta0hw7
push 1
push 0
call dword [ebp - 8]
push str.log:_7lepbhmb
mov esi, eax
call ebx
push esi
call dword [ebp - 0x18]
lea eax, [ebp - 0x84]
push eax
push 0x20019
push 0
push str.regca2ecpl9
push 0x80000001
call dword [ebp - 0x14]
lea eax, [ebp - 0x5a0]
push eax
push str.s_1ueuetq5
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, dword [ebp - 0x10]
push ecx
push esi
push dword [ebp - 0x3c]
mov dword [ebp - 0xc], esi
call fcn.0040bf3c
cmp eax, 1
jne 0x40cbd9
push str.WTMR_8u8fmp84
push eax
xor esi, esi
push esi
call dword [ebp - 8]
push eax
call dword [ebp - 0x18]
push str.MTXjxazuo1a
push esi
push esi
call dword [ebp - 0x30]
mov esi, eax
test esi, esi
je 0x40c939
push str.log:_i6ioks27
call ebx
push esi
call dword [ebp - 0x34]
jmp 0x40c951
lea eax, [ebp - 0x38]
push eax
push 0x20019
push 0
push str.regwav5mbt8
push 0x80000001
call dword [ebp - 0x14]
xor eax, eax
push eax
push 0x102
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [ebp - 0x24]
push str.0n31at71
push str.yxl390f0
mov esi, eax
call edi
push esi
call dword [ebp - 0x28]
push str.ev_zebgbox7
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0xcbe
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
call dword [ebp - 4]
push str.XMLi0q1vqdj
push 1
push esi
push esi
mov esi, dword [ebp - 0x2c]
call esi
push 0
push 1
push eax
call dword [ebp - 0x1c]
push str.SMPHR_2ek2l9le
push 1
push 0
push 0
call esi
push str.log:_u7rvn4re
mov esi, eax
call ebx
push 0
push 1
push esi
call dword [ebp - 0x1c]
test eax, eax
je 0x40c9f5
push str.8ug4tfb0
push str.f1ye8560
call edi
xor esi, esi
jmp 0x40ca0e
lea eax, [ebp - 0x10]
xor esi, esi
push eax
push 0x20019
push esi
push str.regmtb0sa1o
push 0x80000001
call dword [ebp - 0x14]
push 0x20
push 0x40
mov dword [ebp - 0x38], esi
call dword [0x41604c]
push esi
push esi
push 4
push esi
mov esi, dword [ebp - 0xc]
mov edi, eax
push 1
push 0x80000000
push esi
mov dword [ebp - 0x10], edi
call dword [0x416044]
push 0x30c
push 0x40
mov dword [ebp - 0xc], eax
call dword [0x41604c]
push 0x618
push 0x40
mov dword [ebp - 0x20], eax
call dword [0x41604c]
push dword [0x4161bc]
push eax
call dword [0x416144]
mov edx, dword [ebp + 8]
mov ecx, eax
call fcn.0040f304
xor ecx, ecx
mov dword [ebp + 8], eax
push ecx
push ecx
push ecx
push ecx
push 0xffffffffffffffff
push eax
push ecx
push 0xfde9
call dword [0x4160e8]
test eax, eax
je 0x40cac1
xor ecx, ecx
push ecx
push ecx
push eax
push dword [ebp - 0x20]
push 0xffffffffffffffff
push dword [ebp + 8]
push ecx
push 0xfde9
call dword [0x4160e8]
test eax, eax
je 0x40cac1
mov eax, dword [ebp - 0x20]
mov dword [edi], eax
mov eax, dword [ebp - 0xc]
mov dword [edi + 4], eax
mov dword [edi + 8], esi
and dword [edi + 0xc], 0
mov dword [ebp - 0x38], 1
jmp 0x40cae2
push dword [ebp - 0x20]
call dword [0x4160cc]
mov eax, dword [ebp - 0xc]
push eax
call dword [0x4160c0]
push esi
call dword [0x4160f8]
push esi
call dword [0x4160cc]
push dword [ebp + 8]
call dword [0x4160cc]
mov edi, 0x208
push edi
push 0x40
call dword [0x41604c]
push edi
push 0x40
mov esi, eax
call dword [0x41604c]
push 0x10
pop edx
mov ecx, esi
mov edi, eax
call fcn.0040e264
push dword [0x41623c]
mov esi, eax
push edi
mov dword [ebp - 0x20], esi
call dword [0x416144]
mov edx, esi
mov ecx, eax
call fcn.0040f304
mov ecx, dword [0x416230]
and dword [ebp - 0x64], 0
mov dword [ebp - 0x68], ecx
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], eax
call fcn.0040b9c1
push 0x184
push 0x40
mov dword [ebp + 8], eax
call dword [0x41604c]
mov edi, eax
xor eax, eax
push eax
push eax
push eax
push eax
push 0xffffffffffffffff
push esi
push eax
push 0xfde9
call dword [0x4160e8]
test eax, eax
je 0x40cba8
xor ecx, ecx
push ecx
push ecx
push eax
push edi
push 0xffffffffffffffff
push esi
push ecx
push 0xfde9
call dword [0x4160e8]
mov esi, dword [ebp - 0x10]
test eax, eax
je 0x40cbab
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x68]
push eax
push dword [ebp + 8]
mov edx, edi
push esi
push dword [ebp - 0x38]
push 0
push 0
call fcn.0040a754
add esp, 0x18
jmp 0x40cbab
mov esi, dword [ebp - 0x10]
push edi
call dword [0x4160cc]
push dword [ebp + 8]
call dword [0x4160cc]
push dword [ebp - 0xc]
call dword [0x4160cc]
push dword [ebp - 0x20]
call dword [0x4160cc]
push esi
call dword [0x4160cc]
mov edi, dword [ebp - 0x4c]
jmp 0x40cbe5
push esi
jmp 0x40cbdf
push dword [ebp - 0x10]
call dword [0x4160cc]
xor eax, eax
push eax
push 0xb73
push eax
push 4
push eax
push 0xffffffffffffffff
call dword [ebp - 0x24]
mov esi, eax
lea eax, [ebp - 0x88]
push eax
push 0x20019
push 0
push str.regn2godyac
push 0x80000001
call dword [ebp - 0x14]
push esi
call dword [ebp - 0x28]
push str.log:_7qksdn78
call ebx
push str.SMPHR_irsfasl5
push 1
xor esi, esi
push esi
push esi
call dword [ebp - 0x2c]
push esi
push 1
push eax
call dword [ebp - 0x1c]
push str.WTMR_fr76tcfn
push 1
push esi
call dword [ebp - 8]
test eax, eax
je 0x40cc54
push eax
call dword [ebp - 0x18]
push str.pb0cju1x
push str.07d2np7l
call edi
jmp 0x40cc5b
push str.log:_efyetjok
call ebx
push str.MTXvtjlx4gl
push esi
push esi
call dword [ebp - 0x30]
test eax, eax
je 0x40cc6f
push eax
call dword [ebp - 0x34]
jmp 0x40cc76
push str.log:_ityxptmo
call ebx
push 9
pop esi
call dword [ebp - 4]
sub esi, 1
jne 0x40cc79
push dword [ebp - 0x3c]
call dword [0x416094]
push dword [ebp - 0x44]
call dword [0x416094]
push dword [ebp - 0x40]
push esi
call dword [0x4160f4]
push dword [ebp - 0x50]
push dword [ebp - 0x48]
call dword [0x4160f4]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 8