Function at 0x40f012
Capabilities:
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
push ebx
push esi
push edi
mov edi, dword [0x415090]
mov eax, edx
mov ebx, ecx
mov dword [ebp - 0x14], eax
push eax
mov dword [ebp - 4], ebx
call edi
push ebx
mov esi, eax
call edi
mov ecx, dword [0x41504c]
lea ebx, [eax + 0x80]
add ebx, esi
mov dword [ebp - 0xc], ebx
lea eax, [ebx + ebx]
push eax
push 0x40
call ecx
push dword [ebp - 4]
mov edx, ebx
mov dword [ebp - 8], eax
mov ecx, eax
call fcn.0040169e
xor edi, edi
push edi
push 0xa28
push edi
push 4
push edi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x5dd
push edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.WTMR_pg3esy2g
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str.t26t01mzg
call edi
push str.ev_n39w6qzp
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.MTXid6eg7kl
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov esi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x40f118
push str.87xo3fjd
push str.kswx2kex
call esi
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push str.54dhluqg
push str.mjtppkej
call esi
jmp 0x40f11a
call ebx
push dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
call fcn.004016cb
push str.WTMR_b67hznar
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
call ebx
test esi, esi
je 0x40f14d
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.t7fwgbo5x
call edi
push 6
pop esi
call ebx
sub esi, 1
jne 0x40f150
xor ebx, ebx
push ebx
push 0x5d6
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.tv49i65z7
call edi
lea eax, [ebp - 0x158]
push eax
push str.s_t4ckbkwe
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.SMPHR_qjkqlbwl
push 1
push ebx
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
call ebx
push str.t9kx5wueg
mov esi, eax
call edi
push 0
push 1
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
call esi
test eax, eax
je 0x40f1cd
push str.jcezxitk
push str.b4j4f6xx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
push str.XMLamfolgz0
push 1
push 0
push 0
call ebx
xor ebx, ebx
push ebx
push 1
push eax
call esi
push str.t1v6z4di9
call edi
push str.MTXdxglk35i
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
test eax, eax
je 0x40f203
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
jmp 0x40f21d
lea eax, [ebp - 0xc]
push eax
push 0x20019
push ebx
push str.regwog66qaw
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push 0x461
push ebx
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push dword [ebp - 4]
call dword [0x4150e0]
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret