Function at 0x40ed79
Capabilities:
Print debug messages
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x154
mov eax, dword [0x41519c]
push ebx
push esi
push edi
push ecx
mov dword [ebp - 0xc], ecx
call eax
push str.WTMR_t2lry32w
push 1
xor ebx, ebx
mov dword [ebp - 8], eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.MTX9of20kmn
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, eax
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
test esi, esi
je 0x40edf1
push str.t6xplss11
call ebx
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
lea eax, [ebp - 4]
xor esi, esi
push eax
push 0x20019
push esi
push str.regp7r1ymid
push 0x80000001
call edi
jmp 0x40ee01
push str.taidzcf8e
call ebx
push str.te82qlpx1
call ebx
xor esi, esi
push str.SMPHR_7pn5tvkk
push 1
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
jne 0x40ee34
lea eax, [ebp - 4]
push eax
push 0x20019
push esi
push str.regd0052drm
push 0x80000001
call edi
push 0x914
push esi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
push str.regou0dc9en
push 0x80000001
call edi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.XMLk6eld4rr
push 1
xor esi, esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push esi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.ev_gc0upe3h
push esi
push 1
push esi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_mn0c9pqk
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
je 0x40eec3
push esi
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.t3u620qk9
jmp 0x40eec8
push str.t4mysaur5
call ebx
mov esi, dword [ebp - 8]
mov ecx, dword [0x41504c]
lea eax, [esi*2 + 0x10]
push eax
push 0x40
call ecx
push esi
push eax
push 0xffffffffffffffff
push dword [ebp - 0xc]
xor esi, esi
mov dword [ebp - 4], eax
push esi
push 0xfde9
call dword [0x4150b0]
push esi
push 0x260
push esi
push 4
push esi
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x150]
push eax
push str.s_78akpirh
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.WTMR_c33ulp1b
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
test eax, eax
je 0x40ef62
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
lea eax, [ebp - 0xc]
push eax
push 0x20019
push 0
push str.regnnoidgbh
push 0x80000001
call edi
push str.ev_5ur9xojv
xor edi, edi
push edi
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov esi, eax
push esi
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push str.WTMR_28kapc83
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerA]
push eax
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push str.XMLhgc16pbm
push 1
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateSemaphoreA]
push edi
push 1
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push str.tih43o6yt
call ebx
push 7
pop esi
push str.tdcs470r4
call ebx
sub esi, 1
jne 0x40efbb
push 0xf1
push edi
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov esi, eax
push str.y8ldbn1v
push str.8hhspfe7
call edi
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push str.t4xlw2t0n
call ebx
push str.pk835cg2
push str.68l1qnot
call edi
mov eax, dword [ebp - 4]
xor edx, edx
mov ecx, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov word [eax + ecx*2], dx
leave
ret