Function at 0x41b800
Capabilities:
Get common file path
Manipulate console buffer
Set current directory
Set thread local storage value
Set uefi variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x22c0
call fcn.0040e9a0
mov dword [ebp - 4], 0
jmp 0x41b81f
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x41b8f0
cmp dword [0x49eecc], 0xfc
jne 0x41b896
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
mov ecx, dword [ebp - 0x480]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
lea edx, [ebp - 0x474]
push edx
push str.levihufanogisojinasitogatopacaxuhozuwohu
call dword [sym.imp.KERNEL32.dll_BuildCommDCBA]
push 0
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesA]
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemTime]
push str.Jivotubuj_cosasovixobihi_vevoyo_majorolagoze_hivi
push str.Xepafukabono_yohan_cererimukutub_kulayiwihose_kadi
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
cmp dword [0x49eecc], 0x5e4
jne 0x41b8e0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0
lea ecx, [ebp - 0xc80]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
lea edx, [ebp - 0xea0]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
cmp dword [ebp - 4], 0x9be51dc
jle 0x41b8eb
jmp 0x41b8f0
jmp 0x41b816
push 0x425fb0
mov eax, dword [0x49eecc]
push eax
mov ecx, dword [0x48b3fc]
push ecx
call fcn.0041b6c0
mov dword [ebp - 0xea4], 0
jmp 0x41b922
mov edx, dword [ebp - 0xea4]
add edx, 1
mov dword [ebp - 0xea4], edx
cmp dword [ebp - 0xea4], 0x3e7a3
jge 0x41b967
cmp dword [0x49eecc], 0x10
jne 0x41b94c
lea eax, [ebp - 0xea8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp dword [ebp - 0xea4], 0x1e673
jne 0x41b965
call fcn.0041b070
jmp 0x41b913
mov dword [ebp - 0xeac], 0
jmp 0x41b982
mov ecx, dword [ebp - 0xeac]
add ecx, 1
mov dword [ebp - 0xeac], ecx
cmp dword [ebp - 0xeac], 0xdd9a7
jge 0x41b9ae
cmp dword [0x49eecc], 0xc01
jne 0x41b9ac
lea edx, [ebp - 0xeb0]
push edx
push str.kazasidademonidulule
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
jmp 0x41b973
call dword [0x48b3fc]
cmp dword [0x49eecc], 0x1144
jne 0x41ba75
push 0
push 0
push str.lavasuhumiwagumolehitevazadopitogiyubocobohihok
push str.golerazuzeretizagakuzerene
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableW]
mov dword [ebp - 0x1ac0], 0
mov eax, dword [ebp - 0x1ac0]
push eax
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push str.mevaxadulikuguxobizi
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoA]
lea ecx, [ebp - 0x1ab8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push str.jupitoremezevuzaxorisu
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
push 0
lea edx, [ebp - 0x16b0]
push edx
push 0
push str.zicasipunajidegayamusegabosecezepohebavevasunufeholuredefafazo
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
lea eax, [ebp - 0x16b4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea ecx, [ebp - 0x22c0]
push ecx
push str.rekuvomakevegogakuxohodolecofanobonapuxedenopapozajerirerixoyowuxaxefuteyuzibikujociyanocij
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
xor eax, eax
mov esp, ebp
pop ebp
ret