Function at 0x40ce20
Capabilities:
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
mov eax, dword [0x41a408]
push ebx
push esi
push edi
push str.WTMR_hq3xj1zg
push 1
xor ebx, ebx
mov dword [ebp - 0x14], eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push 8
pop esi
call edi
sub esi, 1
jne 0x40ce58
push str.ev_skl4r8ap
push ebx
xor edi, edi
inc edi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_0jpdzbmp
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x40ce98
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push ebx
push 0x1306
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x158]
push eax
push str.s_5swzrp63
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.XML0neqkl6i
push edi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push ebx
push edi
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.ssctldu9
push str.lho7wxh8
call esi
push str.MTXchgzttrj
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 4], eax
test eax, eax
lea eax, [ebp - 8]
mov edi, 0x20019
push eax
push edi
push ebx
je 0x40cf2d
push str.regfhvrt6h1
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x40cf49
push str.reg6iiv1ew5
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.zmfoe1cs
push str.tl5jlz2z
call esi
push 0x409
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.SMPHR_1l0nuk0m
push 1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push ebx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x40cf97
lea eax, [ebp - 8]
push eax
push edi
push ebx
push str.reg25joljvv
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push str.b8qka0a2
push str.jbpiwvsl
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea eax, [ebp - 0x18]
push eax
push edi
push ebx
push str.regxgn469o2
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.log:_inxs9171
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], ebx
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ebx
push eax
call dword [0x41a17c]
cmp dword [ebp - 0xc], ebx
je 0x40d1d5
lea eax, [ebp - 0x298]
push eax
push str.s_hne4238a
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.ev_5lokjy81
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov esi, dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push str.WTMR_u7u1tuth
push 1
push ebx
call esi
push str.n7t390ox
push str.soid2a2n
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov eax, dword [ebp - 4]
test eax, eax
je 0x40d061
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.log:_8sniabcx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40d071
push str.zjwxnt3s
push str.mzbx74ek
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.XMLtt9vgqii
push 1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push ebx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.MTXlq8h2n1i
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 4], eax
test eax, eax
lea eax, [ebp - 8]
push eax
push edi
push ebx
je 0x40d0ca
push str.regvcp1a1m3
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.log:_6vcqtpqx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jmp 0x40d0e0
push str.regmkmp55y7
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push str.WTMR_1gw0zqia
push 1
push ebx
call esi
push str.log:_evexxjqa
mov esi, eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.opmxotu2
push str.qqeyrq9b
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.SMPHR_cfgo3az9
push 1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push ebx
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x40d141
lea eax, [ebp - 8]
push eax
push edi
push ebx
push str.reg9dcbdggb
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0xe73
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.log:_to2dsgyn
call esi
push str.log:_w42cqpk2
call esi
push dword [ebp - 0xc]
push ebx
call dword [0x41a04c]
mov edi, eax
mov dword [ebp - 4], edi
test edi, edi
je 0x40d1d5
push edi
push dword [ebp - 0xc]
push dword [ebp - 0x10]
call dword [0x41a16c]
cmp dword [ebp - 0x10], ebx
jbe 0x40d1b0
lea esi, [edi + 0x30]
push dword [ebp - 0x14]
push dword [esi]
call dword [0x41a0a4]
test eax, eax
je 0x40d1bc
inc ebx
add esi, 0x4c
cmp ebx, dword [ebp - 0x10]
jb 0x40d198
push edi
call dword [0x41a0cc]
push 0xfffffffffffffffe
pop eax
jmp 0x40d1d8
push dword [ebp - 4]
imul esi, ebx, 0x4c
add esi, edi
mov edi, dword [ebp + 0xc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [0x41a0cc]
mov eax, ebx
jmp 0x40d1d8
or eax, 0xffffffff
pop edi
pop esi
pop ebx
leave
ret 8