Function at 0x40cd9b
Capabilities:
Read file on windows
Set registry value

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x5f0
xor eax, eax
push ebx
push esi
push edi
xor ebx, ebx
mov byte [ebp - 0x38], bl
lea edi, [ebp - 0x37]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x10], bl
lea edi, [ebp - 0xf]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0xff
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x187]
push ebx
push eax
mov byte [ebp - 0x188], bl
call fcn.00411920
push esi
lea eax, [ebp - 0x487]
push ebx
push eax
mov byte [ebp - 0x488], bl
call fcn.00411920
push esi
lea eax, [ebp - 0x287]
push ebx
push eax
mov byte [ebp - 0x288], bl
call fcn.00411920
xor eax, eax
mov byte [ebp - 0x74], bl
lea edi, [ebp - 0x73]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x4c], bl
lea edi, [ebp - 0x4b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x88], bl
lea edi, [ebp - 0x87]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x60], bl
lea edi, [ebp - 0x5f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
lea edi, [ebp - 0x23]
mov byte [ebp - 0x24], bl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp + 4], bl
lea edi, [ebp + 5]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp + 0x18], bl
lea edi, [ebp + 0x19]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp + 0x2c], bl
lea edi, [ebp + 0x2d]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x387]
push ebx
push eax
mov dword [ebp + 0x44], ebx
mov byte [ebp - 0x388], bl
call fcn.00411920
xor eax, eax
mov byte [ebp + 0x60], bl
lea edi, [ebp + 0x61]
stosw word es:[edi], ax
mov byte [ebp + 0x50], bl
lea edi, [ebp + 0x51]
stosw word es:[edi], ax
mov eax, dword [ebp + 0x7c]
mov byte [eax], bl
push 0x14
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x38]
push 0x14
push eax
mov dword [ebp + 0x64], ebx
call fcn.0040eec8
add esp, 0x40
call fcn.004060d0
mov dword [ebp + 0x48], eax
cmp dword [0x43a2e0], ebx
je 0x40d0cc
push ebx
push 0x80
push 3
push ebx
push 1
push 0x80000000
push 0x43a1e0
mov dword [ebp + 0x54], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebx
cmp eax, 0xffffffff
jne 0x40cf20
push str.TestMode
push str.Failed_to_Open_Test_ConfigFile
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret
lea ecx, [ebp + 0x54]
push ecx
push 0x200
push dword [ebp + 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp + 0x54], ebx
jbe 0x40d0cc
mov eax, dword [ebp + 0x70]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
push 0x42ed8c
push eax
mov dword [ebp + 0x5c], eax
call fcn.0040c917
mov esi, eax
pop ecx
pop ecx
cmp esi, ebx
je 0x40d09b
push 0x42ed90
push esi
call fcn.0040c917
pop ecx
pop ecx
mov dword [ebp + 0x58], eax
cmp eax, ebx
jne 0x40cf7f
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, esi
mov dword [ebp + 0x58], eax
mov eax, dword [ebp + 0x58]
sub eax, esi
dec eax
cmp eax, ebx
mov dword [ebp + 0x4c], eax
jle 0x40d093
push 0x42ed94
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push 0x42eda8
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40cfb8
lea eax, [ebp - 0x188]
jmp 0x40d000
push 0x42edbc
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push 0x42edc0
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40cfdd
lea eax, [ebp - 0x38]
jmp 0x40d000
push 0x42edc4
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push str.Arch
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40d007
lea eax, [ebp - 0x10]
push dword [ebp + 0x4c]
push esi
push eax
jmp 0x40d02e
push 0x42edd4
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push str.Version
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40d032
push dword [ebp + 0x4c]
push esi
push dword [ebp + 0x74]
call edi
jmp 0x40d093
push 0x42edec
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push str.Locale
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40d063
push 3
push esi
lea eax, [ebp + 0x40]
push eax
call edi
lea eax, [ebp + 0x40]
mov dword [ebp + 0x48], eax
jmp 0x40d093
push 0x42edfc
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push str.Cntry
push dword [ebp + 0x5c]
call fcn.00413ebc
add esp, 0xc
test eax, eax
jne 0x40d093
push 3
push esi
lea eax, [ebp + 0x60]
push eax
call edi
mov dword [ebp + 0x64], 1
mov eax, dword [ebp + 0x58]
jmp 0x40cf45
push ebx
push 1
push ebx
push 0x2800
push dword [ebp + 0x70]
lea eax, [ebp - 0x188]
push eax
call fcn.0040c44d
add esp, 0x18
test eax, eax
jge 0x40d0cc
push ebx
lea eax, [ebp - 0x188]
push eax
push str.FAILED_to_read_map.xml_File
jmp 0x40cf0f
push dword [ebp + 0x70]
call fcn.0040b548
mov esi, eax
pop ecx
mov dword [ebp + 0x58], esi
cmp esi, ebx
je 0x40cf16
push str.java_update_map
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x40cf16
push 0x42ee38
push dword [esi + 0xc]
call fcn.0040b3f9
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
pop ecx
pop ecx
cmp eax, ebx
je 0x40d14e
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d14e
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x388]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
cmp al, bl
jne 0x40d121
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp - 0x388]
push eax
call fcn.0040d7bc
pop ecx
pop ecx
cmp dword [ebp + 0x64], ebx
jne 0x40d164
lea eax, [ebp + 0x50]
push eax
lea eax, [ebp + 0x60]
push eax
call edi
jmp 0x40d164
push 0x42ee48
lea eax, [ebp + 0x60]
push eax
call edi
push str.No_cntry_lookup_tag_in_map.xml
call fcn.0040f1c7
pop ecx
push str.DEBUG
push dword [esi + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
cmp eax, ebx
je 0x40d187
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d187
push dword [eax + 4]
call fcn.0040cba1
pop ecx
mov eax, dword [ebp + 0x58]
push 0x42ee74
push dword [eax + 0xc]
call fcn.0040b3f9
mov edi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop ecx
pop ecx
test eax, eax
je 0x40d1d9
lea eax, [ebp + 0x64]
push 1
push eax
call fcn.0040e8b8
pop ecx
pop ecx
test eax, eax
je 0x40d1d9
push 4
lea eax, [ebp + 0x54]
push eax
push 4
push ebx
push 0x42ee80
push dword [ebp + 0x64]
mov dword [ebp + 0x54], 1
call edi
push dword [ebp + 0x64]
call esi
mov eax, dword [ebp + 0x58]
push 0x42ee8c
push dword [eax + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
test eax, eax
je 0x40d21f
lea eax, [ebp + 0x64]
push 1
push eax
call fcn.0040e8b8
pop ecx
pop ecx
test eax, eax
je 0x40d21f
push 4
lea eax, [ebp + 0x54]
push eax
push 4
push ebx
push 0x42ee98
push dword [ebp + 0x64]
mov dword [ebp + 0x54], 1
call edi
push dword [ebp + 0x64]
call esi
mov eax, dword [ebp + 0x58]
push 0x42eea4
push dword [eax + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
mov edi, eax
jmp 0x40d4ac
push str.mapping
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x40d4a9
push 0x42eeb4
push dword [edi + 0xc]
call fcn.0040b3f9
push 0x42eebc
push dword [edi + 0xc]
mov esi, eax
call fcn.0040b3f9
add esp, 0x10
cmp esi, ebx
je 0x40d4a9
mov esi, dword [esi + 0xc]
cmp esi, ebx
je 0x40d4a9
cmp eax, ebx
je 0x40d4a9
mov eax, dword [eax + 0xc]
mov dword [ebp + 0x64], eax
cmp eax, ebx
je 0x40d4a9
push ebx
lea eax, [ebp - 0x288]
push eax
push dword [ebp + 0x74]
push dword [esi + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
jne 0x40d2ce
push ebx
lea eax, [ebp - 0x288]
push eax
push dword [ebp + 0x78]
push dword [esi + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
je 0x40d4a9
push 0x42eec0
push dword [edi + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
cmp eax, ebx
je 0x40d342
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d342
push 1
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x38]
push ecx
push dword [eax + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
je 0x40d4a9
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push str.arch
push dword [edi + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
cmp eax, ebx
je 0x40d355
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d355
push ebx
lea ecx, [ebp + 4]
push ecx
lea ecx, [ebp - 0x10]
push ecx
push dword [eax + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
jne 0x40d360
jmp 0x40d4a9
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x42e9e3
lea eax, [ebp - 0x24]
push eax
call esi
jmp 0x40d30b
push 0x42e9ea
lea eax, [ebp + 4]
push eax
call esi
push str.cntry
push dword [edi + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
cmp eax, ebx
je 0x40d397
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d397
push ebx
lea ecx, [ebp + 0x2c]
push ecx
lea ecx, [ebp + 0x60]
push ecx
push dword [eax + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
jne 0x40d3a2
jmp 0x40d4a9
push 0x42e9eb
lea eax, [ebp + 0x2c]
push eax
call esi
push str.locale
push dword [edi + 0xc]
call fcn.0040b3f9
pop ecx
pop ecx
cmp eax, ebx
je 0x40d3d8
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40d3d8
push ebx
lea ecx, [ebp + 0x18]
push ecx
push dword [ebp + 0x48]
push dword [eax + 4]
call fcn.0040c97d
add esp, 0x10
test eax, eax
jne 0x40d3e3
jmp 0x40d4a9
push 0x42ea11
lea eax, [ebp + 0x18]
push eax
call esi
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x488]
push eax
call fcn.0040c956
pop ecx
pop ecx
cmp eax, ebx
jne 0x40d447
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0040c956
pop ecx
pop ecx
cmp eax, ebx
jne 0x40d447
lea eax, [ebp + 4]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.0040c956
pop ecx
pop ecx
cmp eax, ebx
jne 0x40d447
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.0040c956
pop ecx
pop ecx
cmp eax, ebx
jne 0x40d447
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0040c956
pop ecx
pop ecx
cmp eax, 2
jne 0x40d4a9
xor eax, eax
mov cl, byte [ebp + eax - 0x288]
mov byte [ebp + eax - 0x488], cl
inc eax
cmp cl, bl
jne 0x40d44e
mov eax, dword [ebp + 0x64]
mov ecx, dword [eax + 4]
lea edx, [ebp - 0x188]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
cmp al, bl
jne 0x40d46d
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x74]
push eax
call esi
lea eax, [ebp + 4]
push eax
lea eax, [ebp - 0x4c]
push eax
call esi
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x60]
push eax
call esi
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x88]
push eax
call esi
mov dword [ebp + 0x44], 1
mov edi, dword [edi + 8]
cmp edi, ebx
jne 0x40d238
push 0xff
lea eax, [ebp - 0x587]
push ebx
push eax
mov byte [ebp - 0x588], bl
call fcn.00411920
lea eax, [ebp + 0x60]
push eax
push dword [ebp + 0x48]
lea eax, [ebp - 0x10]
push dword [ebp + 0x74]
push eax
lea eax, [ebp - 0x38]
push eax
push dword [0x43a2e0]
lea eax, [ebp - 0x588]
push str.OVERRIDE_SYSTEM_VALUE_d:OS:_s_Arch:_s_Version:_s_Locale:_s_Cntry:_s_n
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x588]
push eax
call fcn.0040f1c7
add esp, 0x30
cmp dword [ebp + 0x44], ebx
je 0x40d521
mov edx, dword [ebp + 0x7c]
lea eax, [ebp - 0x188]
mov ecx, eax
sub edx, ecx
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40d517
mov eax, dword [ebp + 0x44]
jmp 0x40cf18