Function at 0x4014a0
Capabilities:
Encode data using xor
Get common file path
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2068
call fcn.004110d0
mov eax, dword [0x42b5cc]
push ebx
push esi
push edi
push 0x2475
mov ecx, 0x1e
mov esi, str.Rzjxeuscaarofugiaontivwaiavqtatnahlewxvoaiuoauseihivoirembhuieiuiukooyhuswsusoboaoveeacavixaxiyobwepaoshuoyejeaioeyvigyu
lea edi, [ebp - 0xbc]
rep movsd dword es:[edi], dword [esi]
push 0xb38e
push str.Vnuwyemoiu
push str.Qayuvamua
push str._s_Edutuojiu__s_Sask_Cuda_Ljwi__d_Fievcad_L__d_Ejg
mov dword [ebp - 4], eax
lea eax, [ebp - 0xbc]
push 0x78
push eax
movsb byte es:[edi], byte [esi]
call fcn.0040db84
push 0x87b5
xor eax, eax
mov byte [ebp - 0x1bc], 0
mov ecx, 0x1c
lea edi, [ebp - 0x1bb]
push str.Ueobpejt__d_Foasqelo_Iamiuagon
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x1bc]
push 0x70
push ecx
call fcn.0040db84
add esp, 0x2c
mov dword [ebp - 0x2068], 4
lea ecx, [ecx]
mov ebx, 4
jmp 0x401540
mov ecx, 0x1e
mov esi, str.Izijhataxicaeouimiwilisaqauubalafrwuadujjexoaigewhqipedoptbuoyoibaseaauaaildqesuedqevilemiwuwioutayepupwomviwztovoaecylohz
lea edi, [ebp - 0xbc]
rep movsd dword es:[edi], dword [esi]
push 0x21ca
movsw word es:[edi], word [esi]
push str.Liufhia__d_Di_X
lea edx, [ebp - 0xbc]
push 0x7a
push edx
movsb byte es:[edi], byte [esi]
call fcn.0040db84
add esp, 0x10
dec ebx
jne 0x401540
dec dword [ebp - 0x2068]
jne 0x401530
mov ebx, dword [sym.imp.KERNEL32.dll_CompareStringA]
mov esi, 7
jmp 0x401590
mov ecx, dword [0x428eb8]
mov eax, dword [str.Krankowafibom]
mov edx, dword [0x428ebc]
push 0xe
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x14]
push ecx
push 0xd
push str.Vuauxenularuxiedvotomanavqcgsujaokhibyvilumaoexuypheaitfeameygiaxiaeiicotikzbiqtngviawltbiheeajoxlhaeekgevbaseoetoavowcimqcjpiuwezpevlruvexuujjeaarxkicaeoieaotigoxyuueakatewucruobahomveoxkyaeuopctsuwuiusibelidoimvfmoeglqwurfirnimeobboiupywiioaqmotonqiuamqohatueakewuaiyaaextyewvejkeohapperxyabiaaaddevuamxoueeukipacohoqcosvizihbqurumoriikbssixtoijayveiaipioiauliwyxojjaadeiasacoewidworoiaperyoftoreiapejobwmusueuwudifejiheeizuyouulaqugabosorcsuzeiojugsbuconouozufiaoxuhcyskuviivnoxuooxiayaefuwbpoveyiocgiuuecfabiieiiktgwcukgukduepdsgoaxspvertiiluuueuoaerejfoouloxapnurwubzloponahifuitaigeqvhisisoougivulljatiaoeawabbeizaivninpsevehudedebzqrkotaaytaekeakuiutowouaaaaiozoidocyebjadqezkorifixuxhijsizohijoejuioidjltjeeeaa
mov dword [ebp - 0x14], eax
mov ax, word [0x428ec0]
push 1
push 0x800
mov dword [ebp - 0xc], edx
mov word [ebp - 8], ax
call ebx
dec esi
jne 0x401590
push 0x29
push str.Auaogessoviowornguoqynvoubfapibiiolaeueodikuifvuaaufxusapohuyeiarahpirhiybtafidqyipauooulortxiqajeuqdugarulemgozgeloeoiuehoejelueltikofiaaheduqegfeqaokuiowaioaewayyofmukabeaupfyupiheeztaqonapeewpooeviooeinkemuoxequziheoqhuxemzeakuvenajaoipatiojqodraepoofiayepecehovxumcajpkakubnesnozikwhahiivmudeuzaaewbareciousoqeximiibguxedmmoaueuxamiiipvkecihagaxoaqmopiiuveuiexmazeeoganlpunuooemtotasazitisqiihoaalictvefeweidqufheznahiqppukbiikeuadgretfzdzovionpefohusubenimoucozeesayiieifolsiwkooualpqoaaiyiawaplzuaoguuicopaqxioovueyeidoadiby
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrW]
xor edx, edx
push 0xcbea
mov dword [ebp - 0x5b], edx
push 0x44d8
mov dword [ebp - 0x57], edx
push 0x428eb0
mov dword [ebp - 0x53], edx
push str.Kkaepir
mov dword [ebp - 0x4f], edx
push str._s_Nkiib__s_Txamsu_Tk__d_Cv_I__d_Juaazijtvi
mov dword [ebp - 0x4b], edx
lea eax, [ebp - 0x5c]
mov word [ebp - 0x47], dx
push 0x17
push eax
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x45], dl
call fcn.0040db84
push 0x428e6c
push 0x99d6
xor ecx, ecx
push str.Zuzoyoz
mov dword [ebp - 0x3f], ecx
push 0x428e60
mov dword [ebp - 0x3b], ecx
push str._s_Eaobqad_Xuuaraj_Jiivoas__s_Riacdiqe__d_Biznx__s_Aaojxustc
mov dword [ebp - 0x37], ecx
lea edx, [ebp - 0x40]
mov dword [ebp - 0x33], ecx
push 0x14
push edx
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x2f], ecx
call fcn.0040db84
push str.Siohwosqi
push str.Jqhw
mov ecx, 0x17
mov esi, str.Ryeusisifewiuaaueahxijhaafquaekciuyubfoacoeoukdaxeupbezetuwarnorzuzmachojejhkahetotufvcndeuu
lea edi, [ebp - 0xa0]
rep movsd dword es:[edi], dword [esi]
push 0x8f96
push str.Vihjoopae
push str.Fokud
push str._s_Rij_Fixoqeeeun__s_Zouuio_Pwedlexq__d_Yunu_Ylaizo__s_Gueavo_Yuoy__s_Zxwugild_Eaioluduva
lea eax, [ebp - 0xa0]
push 0x5c
push eax
movsb byte es:[edi], byte [esi]
call fcn.0040db84
add esp, 0x58
mov word [ebp - 0x2060], 0
xor eax, eax
mov ecx, 0x273
lea edi, [ebp - 0x205e]
rep stosd dword es:[edi], eax
push 0x4e8
lea ecx, [ebp - 0x2060]
push ecx
push 0xc
push 0x800
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov esi, 3
lea ecx, [ecx]
mov eax, dword [0x428d30]
mov ecx, dword [0x428d34]
mov edx, dword [str.Gauatexerzl]
mov dword [ebp - 0x10], eax
mov eax, dword [0x428d20]
push 0x10
mov dword [ebp - 0xc], ecx
mov ecx, dword [0x428d24]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x54]
push eax
push 0xc
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], edx
mov edx, dword [str.Ifluaimeaovizxn]
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x54], edx
mov edx, dword [0x428d28]
push 1
push 0x800
mov dword [ebp - 0x48], edx
call ebx
dec esi
jne 0x4016d0
push 0x7d9
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x401770
mov edi, edx
mov ecx, 0x14d
mov eax, 0x6f6f6f6f
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x162
mov eax, 0x1010101
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0xc1c1c1c1
mov edi, edx
mov ecx, 0x186
push edx
rep stosd dword es:[edi], eax
call fcn.0040d9eb
add esp, 4
mov ebx, dword [ebp + 0x10]
mov dl, byte [ebx + 0x100]
mov byte [ebp + 0x13], dl
call dword [sym.imp.KERNEL32.dll_GetACP]
push 0x10e
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x4017c2
mov ecx, edx
mov eax, 0xa7a7a7a7
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov word [ecx + 0xc], ax
mov edi, edx
mov ecx, 0xa
mov eax, 0xc3c3c3c3
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
push str.Beuucosetu
push str.Goarzin
push 0x86fe
mov ecx, 0x18
mov esi, str.Ulakuovukzreneoxyixjaaneniecvifuhijerouimukiuurokheohoqckvruqihviivgxofacjiemeroeiyeoehejihiisneo
lea edi, [ebp - 0x2d0]
rep movsd dword es:[edi], dword [esi]
push 0x428ca0
push str.Cgaduo
push 0xd6a8
push str.S__d_Duuhb__s_V__s_Cgurdua__d_Lial_Eao__s_Idae__s_Levisa_Euumkaoiue
lea edx, [ebp - 0x2d0]
push 0x61
push edx
movsw word es:[edi], word [esi]
call fcn.0040db84
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetACP]
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [0x6e9a38], eax
xor eax, eax
mov word [ebp - 0x96c], 0
mov ecx, 0x8e
lea edi, [ebp - 0x96a]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x96c]
push eax
push 0x11d
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0x9c
mov dword [0x6e9a28], eax
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x401883
mov edi, edx
mov ecx, 0x1c
mov eax, 0x43434343
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, 0xf4f4f4f4
mov edi, edx
mov ecx, 0x12
push edx
rep stosd dword es:[edi], eax
call fcn.0040d9eb
add esp, 4
mov dword [ebp - 0x2068], 2
lea ecx, [ecx]
push 0x14
mov ecx, 0xa
mov esi, str.Dtpuouueuojoxajomav
lea edi, [ebp - 0x6c]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x6c]
push ecx
push 0xc
push str.Auaogessoviowornguoqynvoubfapibiiolaeueodikuifvuaaufxusapohuyeiarahpirhiybtafidqyipauooulortxiqajeuqdugarulemgozgeloeoiuehoejelueltikofiaaheduqegfeqaokuiowaioaewayyofmukabeaupfyupiheeztaqonapeewpooeviooeinkemuoxequziheoqhuxemzeakuvenajaoipatiojqodraepoofiayepecehovxumcajpkakubnesnozikwhahiivmudeuzaaewbareciousoqeximiibguxedmmoaueuxamiiipvkecihagaxoaqmopiiuveuiexmazeeoganlpunuooemtotasazitisqiihoaalictvefeweidqufheznahiqppukbiikeuadgretfzdzovionpefohusubenimoucozeesayiieifolsiwkooualpqoaaiyiawaplzuaoguuicopaqxioovueyeidoadiby
push 1
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringW]
dec dword [ebp - 0x2068]
jne 0x401890
push 0x1f0
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40192c
mov eax, 0x5b5b5b5b
mov edi, edx
mov ecx, 0x37
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x76
mov eax, 0xe2e2e2e2
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x2f
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, edx
mov eax, 0xbdbdbdbd
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov dword [ecx + 0x1c], eax
push edx
mov dword [ecx + 0x20], eax
call fcn.0040d9eb
add esp, 4
mov dl, byte [ebx + 0x101]
push 0x3dcd
push 0x902d
push str.Qhae
push str.Oxiklocgoi
push str.Pnngpexak
push 0x54af
push str.Le__d_Cein__s_Colutuheia__s_G__s_Rledouvi__d_Hwlhyauyao_Juearanea__d_Iuemcomcnk_Q
lea eax, [ebp - 0x340]
push 0x6f
mov ecx, 0x1c
mov esi, str.Cxoakaougibuklaiuuohoifedffssajiiieuxonqjukeplgatsmaauxaxeqaampocuvicigakoifyinuxsmuhoauoekyuodeniaagexboxcawou
lea edi, [ebp - 0x340]
push eax
mov byte [ebp - 0x2061], dl
rep movsd dword es:[edi], dword [esi]
call fcn.0040db84
add esp, 0x24
mov esi, 2
push str.Tejtdusuac
push 0x67bc
xor ecx, ecx
push 0xb1f6
mov dword [ebp - 0x5a], ecx
push 0x5add
mov dword [ebp - 0x56], ecx
push 0xb9be
mov dword [ebp - 0x52], ecx
push str.Eiotwere__d_He_Qe__d_Tieoyu_Opzju__d_T__d_Vueah_Qi__s_Teumzexo_Loleeoseou
mov dword [ebp - 0x4e], ecx
lea edx, [ebp - 0x5c]
mov dword [ebp - 0x4a], ecx
push 0xb
push edx
mov word [ebp - 0x5c], 0
mov word [ebp - 0x46], cx
call fcn.0040d97b
add esp, 0x20
dec esi
jne 0x401983
xor eax, eax
mov word [ebp - 0x730], 0
mov ecx, 0x87
lea edi, [ebp - 0x72e]
rep stosd dword es:[edi], eax
push 0x110
stosw word es:[edi], ax
lea eax, [ebp - 0x730]
push eax
push 0
push 0
push 2
push 0x800
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
push 0xc
push str.Fefjuaeedgkatgbxkeiasijenqkhaokaoekutplbmenstvwaboiolazaoejigoaonadodegopwvlxixewpfohoaiwutiiaaeepaiooxeewruhteaqefozwzobgjacozuhfuokpnhoeudthwobiuvqivaozoanaaehabuiicapraogotoapiimjkuvehuezsoiquoyeiubhkamsovgarieltukouweoreaikubagetepeugqogiwleixoeamewvsgdeioeejujauiiaqaudqajeiiraeieskumoacxiahpolubeiogakdbioacmcuouajeqkebeuanihiwetaaxaedeztcjburivptadiuxmiammjcumaitculbuxlucljooiuoroyublufbituoceufaoitevbionugicsyeeeaulifoxesieiovmooiaiholiaodedaoeeumaiueilaijqeeosevucauauabibewovailresauiousoqjgoykljsedpemdopnorcufieaiihexeuafaoemeiuineuzbludadsqaquwgukbuiaoiteeaageidejenufxbevozozfbeteuaeexouijeioisbivpaozunecoealonehineiacetaquyuc
push 0x11
push str.Auaogessoviowornguoqynvoubfapibiiolaeueodikuifvuaaufxusapohuyeiarahpirhiybtafidqyipauooulortxiqajeuqdugarulemgozgeloeoiuehoejelueltikofiaaheduqegfeqaokuiowaioaewayyofmukabeaupfyupiheeztaqonapeewpooeviooeinkemuoxequziheoqhuxemzeakuvenajaoipatiojqodraepoofiayepecehovxumcajpkakubnesnozikwhahiivmudeuzaaewbareciousoqeximiibguxedmmoaueuxamiiipvkecihagaxoaqmopiiuveuiexmazeeoganlpunuooemtotasazitisqiihoaalictvefeweidqufheznahiqppukbiikeuadgretfzdzovionpefohusubenimoucozeesayiieifolsiwkooualpqoaaiyiawaplzuaoguuicopaqxioovueyeidoadiby
push 1
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push 0x12
mov ecx, 9
mov esi, str.Wsuiaorkqehipgcuf
lea edi, [ebp - 0x68]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x68]
push ecx
push 0xf
push str.Auaogessoviowornguoqynvoubfapibiiolaeueodikuifvuaaufxusapohuyeiarahpirhiybtafidqyipauooulortxiqajeuqdugarulemgozgeloeoiuehoejelueltikofiaaheduqegfeqaokuiowaioaewayyofmukabeaupfyupiheeztaqonapeewpooeviooeinkemuoxequziheoqhuxemzeakuvenajaoipatiojqodraepoofiayepecehovxumcajpkakubnesnozikwhahiivmudeuzaaewbareciousoqeximiibguxedmmoaueuxamiiipvkecihagaxoaqmopiiuveuiexmazeeoganlpunuooemtotasazitisqiihoaalictvefeweidqufheznahiqppukbiikeuadgretfzdzovionpefohusubenimoucozeesayiieifolsiwkooualpqoaaiyiawaplzuaoguuicopaqxioovueyeidoadiby
push 1
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 0x2068], 4
jmp 0x401a60
push 0xf6b4
push str._d_Atete
lea edx, [ebp - 0xa8]
push 0x63
mov ecx, 0x19
mov esi, str.Unowsexuanmebanujoljuaqooxoemosoaswipeabhuzogemoxaaypokojmxorioxgapxoeiivaougajgmiquxeynsoysuotayuu
lea edi, [ebp - 0xa8]
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0040db84
mov eax, dword [ebp - 0x2068]
add esp, 0x10
dec eax
mov dword [ebp - 0x2068], eax
jne 0x401a60
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
mov byte [ebp - 0x44c], 0
mov ecx, 0x42
lea edi, [ebp - 0x44b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x44c]
push eax
push 0x10c
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov ecx, 0xc
mov esi, str.Isjozeaakeeueouopuiosnboaeukkaukhapacrlnrijueicixn
lea edi, [ebp - 0x74]
rep movsd dword es:[edi], dword [esi]
push 0x1c96
push 0x5b8d
movsw word es:[edi], word [esi]
push str._d_Moead_Bio_Iitajus__d_Lkludei
lea ecx, [ebp - 0x74]
push 0x32
push ecx
movsb byte es:[edi], byte [esi]
call fcn.0040db84
push str.Zxeeyoyern
mov byte [ebp - 0x148], 0
xor eax, eax
mov ecx, 0xf
lea edi, [ebp - 0x147]
push 0x428990
rep stosd dword es:[edi], eax
push str._s_Gueecegoom__s_Mvqusa
lea edx, [ebp - 0x148]
push 0x3d
push edx
stosb byte es:[edi], al
call fcn.0040db84
add esp, 0x28
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [0x6e9a38], eax
mov esi, 5
push 0x441
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x401b9d
mov edi, edx
mov ecx, 0x3c
mov eax, 0xc9c9c9c9
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x84
mov eax, 0x24242424
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x73
mov eax, 0xbcbcbcbc
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x6b
mov eax, 0xa1a1a1a1
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
dec esi
jne 0x401b42
mov dword [ebp - 0x2068], 2
lea ebx, [ebx]
push 0x7e57
push str.Spui
push str.Waspfecio
mov ecx, 0x16
mov esi, str.Slrhbosuaxzufooelokoiqtoxaeuwunijdkoxoefuipzausisclonuuaooqeihulooeeyiaegeadhasaciauyies
lea edi, [ebp - 0x9c]
rep movsd dword es:[edi], dword [esi]
push str.Muco
push 0x8094
push 0x7f7e
push str._d_W__d_G__s_Koi__s_Wei_Faeusiiihb__s_Rhh_Opaxcelu__d_A
lea eax, [ebp - 0x9c]
push 0x58
push eax
movsb byte es:[edi], byte [esi]
call fcn.0040db84
mov eax, dword [ebp - 0x2068]
add esp, 0x24
dec eax
mov dword [ebp - 0x2068], eax
jne 0x401bb0
push 0xe
mov ecx, 7
mov esi, str.Qraaoanramkos
lea edi, [ebp - 0x60]
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x60]
push ecx
push 0xe
push str.Fefjuaeedgkatgbxkeiasijenqkhaokaoekutplbmenstvwaboiolazaoejigoaonadodegopwvlxixewpfohoaiwutiiaaeepaiooxeewruhteaqefozwzobgjacozuhfuokpnhoeudthwobiuvqivaozoanaaehabuiicapraogotoapiimjkuvehuezsoiquoyeiubhkamsovgarieltukouweoreaikubagetepeugqogiwleixoeamewvsgdeioeejujauiiaqaudqajeiiraeieskumoacxiahpolubeiogakdbioacmcuouajeqkebeuanihiwetaaxaedeztcjburivptadiuxmiammjcumaitculbuxlucljooiuoroyublufbituoceufaoitevbionugicsyeeeaulifoxesieiovmooiaiholiaodedaoeeumaiueilaijqeeosevucauauabibewovailresauiousoqjgoykljsedpemdopnorcufieaiihexeuafaoemeiuineuzbludadsqaquwgukbuiaoiteeaageidejenufxbevozozfbeteuaeexouijeioisbivpaozunecoealonehineiacetaquyuc
push 1
push 0x800
call dword [sym.imp.KERNEL32.dll_CompareStringW]
xor edx, edx
mov dword [ebp - 0xdb], edx
mov dword [ebp - 0xd7], edx
mov dword [ebp - 0xd3], edx
push str.Nhii
mov dword [ebp - 0xcf], edx
push str._s_C
mov dword [0x6e9a24], eax
mov dword [ebp - 0xcb], edx
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xc7], edx
push 0x1c
push eax
mov byte [ebp - 0xdc], 0
mov dword [ebp - 0xc3], edx
call fcn.0040db84
mov eax, dword [ebp + 0xc]
add esp, 0x10
xor ecx, ecx
test eax, eax
jbe 0x401cdb
jmp 0x401c90
mov al, byte [ebp + 0x13]
inc al
movzx edx, al
lea esi, [edx + ebx]
mov dl, byte [ebp - 0x2061]
mov byte [ebp + 0x13], al
mov al, byte [esi]
add dl, al
mov byte [ebp - 0x2061], dl
movzx edx, dl
lea edi, [edx + ebx]
mov dl, byte [edi]
mov byte [esi], dl
mov byte [edi], al
xor edx, edx
mov dl, byte [esi]
mov esi, dword [ebp + 8]
add eax, edx
mov dl, byte [ecx + esi]
and eax, 0xff
mov al, byte [eax + ebx]
xor dl, al
mov eax, dword [ebp + 0xc]
mov byte [ecx + esi], dl
inc ecx
cmp ecx, eax
jb 0x401c90
push str.Eexeceguu
mov ecx, 0x13
mov esi, str.Milruujaallunugjgooolutuxaiuhehouojonojypeiugieakogxiaiviouedufucebjaokisiu
lea edi, [ebp - 0x208]
push str._s_Cu_We_Joio
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x208]
push 0x4b
push ecx
call fcn.0040db84
mov ecx, 0x18
mov esi, str.Yeaogesuuckuieheyiojuazamnoikowmkeeesfkydaxbiibegvbooilguumoxiuvoafoeagageqmnuuemuquuuzxxubhudzo
lea edi, [ebp - 0x26c]
rep movsd dword es:[edi], dword [esi]
push str.Sedtgopduv
push str._s_Mueire_Z_Jenqj
lea edx, [ebp - 0x26c]
push 0x60
push edx
movsb byte es:[edi], byte [esi]
call fcn.0040db84
push str.Meoaga
push 0xaf69
push 0x428790
push str.Uioulaqi
xor eax, eax
push str.Dmohiofv
mov dword [ebp - 0x27], eax
push 0x77fb
mov dword [ebp - 0x23], eax
push str._d_Ur__s_Bxuxc_Rz__s_Meuihar__s_X__d_Dtjafu_Btaz__s_B_Pma
mov dword [ebp - 0x1f], eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x1b], eax
push 0x11
push ecx
mov byte [ebp - 0x28], 0
mov byte [ebp - 0x17], al
call fcn.0040db84
add esp, 0x44
push str.Hccngajic
push 0x4d37
push 0xed4e
push str._d_Hhiinoi_Knuixi__d_Rxaia__s_Uevij_Zi_Gtouxomhog
lea edx, [ebp - 0x510]
push 0x61
mov ecx, 0x31
mov esi, str.Goukpezasirazjroyanieuyumootouwoamziceeuyakaxwiolaikxesieukaiiquwivvanzacnermotahadamdubjinikomex
lea edi, [ebp - 0x510]
push edx
rep movsd dword es:[edi], dword [esi]
call fcn.0040d97b
add esp, 0x18
xor eax, eax
xor esi, esi
mov word [ebp - 0x1690], si
mov ecx, 0x256
lea edi, [ebp - 0x168e]
push 0x4ad
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x1690]
push eax
push 0xc
push 0x800
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push str.Kzyura
mov byte [ebp - 0x108], 0
xor eax, eax
mov ecx, 0xa
lea edi, [ebp - 0x107]
rep stosd dword es:[edi], eax
push 0x9927
push str._d_Eau_Oil__s_Mf_Tdemc_L
lea ecx, [ebp - 0x108]
push 0x29
push ecx
stosb byte es:[edi], al
call fcn.0040db84
add esp, 0x14
mov word [ebp - 0xd34], si
mov ecx, 0xf1
push 0x1e4
lea edx, [ebp - 0xd34]
push edx
xor eax, eax
push esi
lea edi, [ebp - 0xd32]
rep stosd dword es:[edi], eax
push esi
push 2
push 0x800
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov cl, byte [ebp - 0x2061]
pop edi
mov dword [0x6e9a14], eax
mov al, byte [ebp + 0x13]
mov byte [ebx + 0x101], cl
mov ecx, dword [ebp - 4]
pop esi
mov byte [ebx + 0x100], al
pop ebx
call fcn.00411d12
mov esp, ebp
pop ebp
ret