Function at 0x436c50
Capabilities:
Accept command line arguments
Create directory
Get hostname
Identify system language via api
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc84
mov eax, dword [0x43f004]
xor eax, esp
mov dword [esp + 0xc80], eax
mov edx, dword [0x440430]
mov ecx, dword [0x442ec4]
push ebx
push esi
push edi
xor eax, eax
mov edi, 0xec58acac
or esi, 0xffffffff
cmp eax, 0x112
jne 0x436c90
lea ecx, [edx + 0x9e49]
cmp ecx, 0xe89
jne 0x436ca4
mov dword [0x441590], edi
mov dword [0x441594], esi
inc eax
cmp eax, 0x1238006
jl 0x436c83
mov edi, dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [0x442ec4], ecx
xor esi, esi
lea ebx, [ebx]
cmp esi, 0x55ded1
jne 0x436cd2
mov eax, dword [0x43fc68]
mov dword [0x442ec8], eax
cmp ecx, 0x3c
jne 0x436cdf
call edi
mov ecx, dword [0x442ec4]
inc esi
cmp esi, 0x5ea53c
jl 0x436cc0
mov ebx, dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
cmp ecx, 0x7c
jne 0x436e0f
push 0
lea ecx, [esp + 0x28]
push ecx
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
push 0
call dword [sym.imp.KERNEL32.dll_LocalSize]
push 0
call dword [sym.imp.KERNEL32.dll_FindAtomA]
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleCount]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
push 0x2e
lea edx, [esp + 0x5c]
push 0
push edx
mov dword [esp + 0x60], 0
call fcn.00405d20
add esp, 0xc
push 0
lea eax, [esp + 0x58]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetDefaultCommConfigW]
lea ecx, [esp + 0x488]
push ecx
call ebx
push 0
call dword [sym.imp.KERNEL32.dll_UnhandledExceptionFilter]
xor eax, eax
xor edx, edx
mov word [esp + 0xe], ax
xor ecx, ecx
mov word [esp + 0x12], dx
lea eax, [esp + 0x1c]
push eax
mov word [esp + 0x14], cx
mov ecx, dword [esp + 0x14]
push ecx
mov word [esp + 0x14], dx
mov edx, dword [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputA]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNode]
push 0
call dword [sym.imp.KERNEL32.dll_DebugActiveProcessStop]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0
lea ecx, [esp + 0x8c]
push ecx
push 0
call esi
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsA]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
cmp dword [0x442ec4], 0x2d
jne 0x436de2
lea edx, [esp + 0x2c]
push edx
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
cmp dword [0x442ec4], 0x54
jne 0x436dfb
push 0
push 0
push 0
call esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
call fcn.004011bc
add esp, 4
push 0
call fcn.004011d2
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
xor esi, esi
call edi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x2c]
push edx
call sub.KERNEL32.dll_GetSystemTimes
cmp esi, 0x24bfc
jg 0x436e40
inc esi
cmp esi, 0xf2621
jl 0x436e17
jmp 0x436e59
cmp dword [0x442ec4], 0xa
jne 0x436e59
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FoldStringW]
cmp dword [0x442ec4], 0x2a
jne 0x436ec3
xor esi, esi
push esi
mov dword [0x442d88], esi
mov dword [0x442d8c], esi
call ebx
push esi
push esi
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [esp + 0x14]
push eax
lea ecx, [esp + 0x8c]
push ecx
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
push esi
call fcn.004010f2
add esp, 4
push esi
call fcn.004010f2
add esp, 4
push esi
call fcn.00401015
add esp, 4
push esi
push esi
push esi
push esi
call fcn.00401547
push esi
call fcn.00401304
add esp, 0x14
mov edx, dword [0x442ec4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, dword [0x442ec4]
mov esi, eax
xor ecx, ecx
mov dword [0x442be0], esi
test edx, edx
jbe 0x436f1c
mov edi, dword [0x442ec8]
mov eax, 0x19b0
jmp 0x436f00
mov bl, byte [edi + ecx + 0x9e49]
mov byte [esi + ecx], bl
cmp edx, 0x5ab
jne 0x436f17
mov dword [0x442be4], eax
inc ecx
cmp ecx, edx
jb 0x436f00
call fcn.00436a10
call fcn.004369e0
call fcn.00436bc0
mov edi, dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebx, dword [sym.imp.KERNEL32.dll_GetStdHandle]
xor esi, esi
lea esp, [esp]
cmp dword [0x442ec4], 0x41
jne 0x436f5b
push 0
call edi
push 0
call ebx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp esi, 0xd606b
jne 0x436f68
call fcn.004369d0
cmp dword [0x442ec4], 0xc
jne 0x436f7c
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
inc esi
cmp esi, 0x24e87d
jl 0x436f40
mov ecx, dword [esp + 0x34]
mov dword [0x442d90], 0x8e46a6f0
xor eax, eax
cmp eax, 0x408e
jle 0x436fa4
cmp ecx, 0xf5bed7
jne 0x436fac
inc eax
cmp eax, 0x687ed2
jl 0x436f95
mov ecx, dword [esp + 0xc8c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401006
mov esp, ebp
pop ebp
ret