Function at 0x40a1b0
Capabilities:
Get common file path
Get geographical location

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2e3c
call fcn.004110d0
mov eax, dword [0x42b5cc]
push ebx
push esi
mov dword [ebp - 4], eax
push edi
mov ebx, 2
lea ecx, [ecx]
push 0x185c
mov ecx, 0xc
mov esi, str.Twwyaasuocuiuvaajuowmccafeeetasoycyenooeaasrjaso
lea edi, [ebp - 0xa0]
rep movsd dword es:[edi], dword [esi]
push str.Fesuridui
push 0x9db
push 0x41e8c0
push str._s_Izvehuca__d_Cwwupexw_Popo__s_Ombibalepb__d_Reopuod_A
lea eax, [ebp - 0xa0]
push 0x30
push eax
movsb byte es:[edi], byte [esi]
call fcn.0040db84
add esp, 0x1c
dec ebx
jne 0x40a1d0
push 0x692
call fcn.0040db03
mov edx, eax
xor ebx, ebx
add esp, 4
cmp edx, ebx
je 0x40a23d
mov edi, edx
mov ecx, 0x143
mov eax, 0xabababab
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov esi, 2
mov word [ebp - 0x118], bx
xor eax, eax
mov ecx, 0x29
lea edi, [ebp - 0x116]
rep stosd dword es:[edi], eax
push str.Jczpxu
push str._s_Phuap_Pm
lea ecx, [ebp - 0x118]
push 0x53
push ecx
stosw word es:[edi], ax
call fcn.0040d97b
add esp, 0x10
dec esi
jne 0x40a242
push str.Vuauxenularuxiedvotomanavqcgsujaokhibyvilumaoexuypheaitfeameygiaxiaeiicotikzbiqtngviawltbiheeajoxlhaeekgevbaseoetoavowcimqcjpiuwezpevlruvexuujjeaarxkicaeoieaotigoxyuueakatewucruobahomveoxkyaeuopctsuwuiusibelidoimvfmoeglqwurfirnimeobboiupywiioaqmotonqiuamqohatueakewuaiyaaextyewvejkeohapperxyabiaaaddevuamxoueeukipacohoqcosvizihbqurumoriikbssixtoijayveiaipioiauliwyxojjaadeiasacoewidworoiaperyoftoreiapejobwmusueuwudifejiheeizuyouulaqugabosorcsuzeiojugsbuconouozufiaoxuhcyskuviivnoxuooxiayaefuwbpoveyiocgiuuecfabiieiiktgwcukgukduepdsgoaxspvertiiluuueuoaerejfoouloxapnurwubzloponahifuitaigeqvhisisoougivulljatiaoeawabbeizaivninpsevehudedebzqrkotaaytaekeakuiutowouaaaaiozoidocyebjadqezkorifixuxhijsizohijoejuioidjltjeeeaa
push 0x159
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
push 0x41e828
mov ecx, 0xb
mov esi, str.Biethefovaiedwjobifijvvozouebovccuzuggoefoiii
lea edi, [ebp - 0x9c]
rep movsd dword es:[edi], dword [esi]
push 0x4253c4
push 0x6143
push str.Aiuowa
push str._s_Yaqopui_Ozozqo__d_Ggoiq_N__s_Paroneu__s_Sq_Vlgivez
lea edx, [ebp - 0x9c]
push 0x2d
push edx
movsw word es:[edi], word [esi]
call fcn.0040db84
push 0x5b0
call fcn.0040db03
mov edx, eax
add esp, 0x20
cmp edx, ebx
je 0x40a2f0
mov edi, edx
mov ecx, 0x128
mov eax, 0xd5d5d5d5
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov dword [ebp - 0x2e3c], 2
lea ebx, [ebx]
mov ebx, 8
jmp 0x40a310
push str.Igeawuapgu
push 0x883e
mov ecx, 0x1b
mov esi, str.Pkasfobakegagoiavaediiuektnaqojxkaduiobowuvibxvuqyoiuuhwujnerhecauleezkocvkauoffulgajohoxiviozcasiocmefhwipop
lea edi, [ebp - 0xdc]
rep movsd dword es:[edi], dword [esi]
push 0x3ff5
push 0x4d21
push 0xa195
push str._d_Sxooeo_Qiue__d_Yatelafo_Olw_Biauju__d_Nfoe_Tyhwk__d_J_Niuiaat__s_Niszauhp_Uwkvce
lea eax, [ebp - 0xdc]
push 0x6d
push eax
movsw word es:[edi], word [esi]
call fcn.0040db84
add esp, 0x20
dec ebx
jne 0x40a310
dec dword [ebp - 0x2e3c]
jne 0x40a300
mov ebx, dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov esi, 4
lea esp, [esp]
mov byte [ebp - 0xe38], 0
xor eax, eax
mov ecx, 0x1d3
lea edi, [ebp - 0xe37]
rep stosd dword es:[edi], eax
push 0x74f
lea ecx, [ebp - 0xe38]
push ecx
push 0xc
push 0x800
stosw word es:[edi], ax
call ebx
dec esi
jne 0x40a370
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x208
lea edx, [ebp - 0x6e8]
push edx
push 0
call dword [0x6e99a4]
push 0xc0e4
push 0xd42f
push 0x5ee4
push str._d_Tkocma__d_Rei__d_Giuazapi
lea eax, [ebp - 0xc0]
push 0x4f
mov ecx, 0x14
mov esi, str.Sihywevyuigiliksjomeurtujjognogbokuehkaexorupiqeopkifuoauidaweedtuwbdkoexocoqok
lea edi, [ebp - 0xc0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.0040db84
push 0xc967
push 0x7040
push str.Buhmkoxo
push 0x41e684
push 0x41e67c
push 0x7c33
xor eax, eax
mov word [ebp - 0x4e0], 0
mov ecx, 0x31
lea edi, [ebp - 0x4de]
push str.Mu__d_Qmepgabvhe_Beattalraz__s_Oxvowijjiz__s_Luuh__s_Qhaij_Mdyuxusu__d_Eveagohu__d_Hoodyapie
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x4e0]
push 0x62
push ecx
call fcn.0040d97b
push 0x4dd
call fcn.0040db03
mov edx, eax
add esp, 0x40
test edx, edx
je 0x40a464
mov edi, edx
mov ecx, 0xb8
mov eax, 0x78787878
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov esi, 3
lea esp, [esp]
push 0x4be
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a4c9
mov edi, edx
mov ecx, 0xe8
mov eax, 0x72727272
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0xba
mov eax, 0x1f1f1f1f
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x66666666
mov edi, edx
mov ecx, 0x1c
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0xda
mov eax, 0x32323232
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
dec esi
jne 0x40a470
push 0xf8
push str.Hoeueuouiifiufcetocbaobeuoouaibfzunukoqpleqehipahoralavuvsaomlzhqivnkaqadfmaaoaleagejgpzvevprhkukiiyhapjcioeqaoqcepvfjcutoexdexolguomehubaceaareqraayetiafgulauwhiguiewokoeanorgaokahetebetebvuebkxixacveevuiijgouthiijayyeaueseaqfeajonmaxooowaaowhreffumsucxriligleagofivukebixohamgenoihaevhisoolgiitiowugeoneoriutxocfboaihupshukelumupiucoupucogirouqaaeuigxubxohzieuuamisaoawemqkayekubocoevtaueawdxbakaeahajacinukeeeeamiurkamezbcofuceuujniieijimabenqhixoyaeozekunqyioeyfvojkeouiyopaburuuatacoiaoakwyezeuuvxtitvuufazueinevazkcuvioejokaciiacueyiucuiivehaaqvuueeowuviawkawooafisocezucsobjuleahfevaiataleeyyuugvohehioazesxmmqurguoaeaeaorecalaworubeqafierkieoiaaizaakxuueohqudlaoxineyibibztaiuqaaocevuiuzeoqoiseujragizqvadidizqgepeiugomkzejueduiaakigagahsoauaeokkeixybqvoeametaruoaeokyioyuaezowemiebxeievubofuajoareoumalvumvofjupfumaaajerikaoayxuzpalaivmirpowwuqiotceieuikehjvnooaiboiueofenoxhaiuapuamnogmyrdafvvoleeekixavfaaiijidozamietdottldhevuegwoqooiaojrzozoxisduaamauzijopusexegksihkr
push 0
push 0
push 2
push 0x800
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
push 0x2a7
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a514
mov edi, edx
mov ecx, 0x1c
mov eax, 0x8080808
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov ebx, 9
lea esp, [esp]
mov ecx, 0x37
mov esi, str.Xxruleeucpqoieuiuufeooqotibatizimabukzpbeavjqtaodauouacoehpiqiuuwaueuixepawdpivxuwgeiuieeuqeexmuzovieupoowyidp
lea edi, [ebp - 0x14c]
rep movsd dword es:[edi], dword [esi]
push 0x41e4d4
push str._s_Giaukog
lea edx, [ebp - 0x14c]
push 0x6e
push edx
movsw word es:[edi], word [esi]
call fcn.0040d97b
add esp, 0x10
dec ebx
jne 0x40a520
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x2e38]
push str.__s_
push ecx
call fcn.0040db15
push str.Feejja
push 0x2493
push 0xb573
push str.Poakaitu
push 0xf743
push str._d_Nagafadio__s_Uingdetaee__d_Naascasn__d_Hiaetomia_Jiva__s_Mxiy
lea edx, [ebp - 0x418]
xor eax, eax
push 0x7c
mov byte [ebp - 0x418], 0
mov ecx, 0x1f
lea edi, [ebp - 0x417]
push edx
rep stosd dword es:[edi], eax
call fcn.0040db84
push 0x75a9
mov ecx, 0x1a
mov esi, str.Wavazusahmrikieohukioopazhoefuheaaniehxhtiyieauujrqivediqokajvauzauywwvogaxecedxvererqtowugiberigiriyuibi
lea edi, [ebp - 0xd8]
rep movsd dword es:[edi], dword [esi]
push 0x3888
push 0x2b19
push 0x46b8
push str._d_Qexmza_Twajxic__d_Teievad_Duaav__d_Ouxeea_Qtfiji__d_Rlbod_Nao
lea eax, [ebp - 0xd8]
push 0x69
push eax
movsw word es:[edi], word [esi]
call fcn.0040db84
add esp, 0x48
push 0x7f3
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a643
mov edi, edx
mov ecx, 0x139
mov eax, 0x46464646
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, 0x5050505
mov edi, edx
mov ecx, 0x28
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x128
mov eax, 0xe0e0e0e0
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x188
mov eax, 0x54545454
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, 3
mov edi, edi
call edi
dec esi
jne 0x40a650
push 0xb668
push 0x209f
push 0x41e394
push 0x41e38c
push 0xae56
mov word [ebp - 0x2b0], 0
xor eax, eax
mov ecx, 0x12
lea edi, [ebp - 0x2ae]
rep stosd dword es:[edi], eax
push 0x32c9
push str._d_Mu_Do__d_Oxri__s_Vxefxi_Draameua__s_Eunfua__d_Fuismunx_Joz__d_Yusuiaokjo
lea ecx, [ebp - 0x2b0]
push 0x25
push ecx
stosw word es:[edi], ax
call fcn.0040d97b
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 0x24
mov esi, 2
mov edi, edi
push 5
call edi
dec esi
jne 0x40a6b0
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrencyFormatW]
mov dword [ebp - 0x2e3c], 4
jmp 0x40a6d0
push 0x1fc
push str.Auaogessoviowornguoqynvoubfapibiiolaeueodikuifvuaaufxusapohuyeiarahpirhiybtafidqyipauooulortxiqajeuqdugarulemgozgeloeoiuehoejelueltikofiaaheduqegfeqaokuiowaioaewayyofmukabeaupfyupiheeztaqonapeewpooeviooeinkemuoxequziheoqhuxemzeakuvenajaoipatiojqodraepoofiayepecehovxumcajpkakubnesnozikwhahiivmudeuzaaewbareciousoqeximiibguxedmmoaueuxamiiipvkecihagaxoaqmopiiuveuiexmazeeoganlpunuooemtotasazitisqiihoaalictvefeweidqufheznahiqppukbiikeuadgretfzdzovionpefohusubenimoucozeesayiieifolsiwkooualpqoaaiyiawaplzuaoguuicopaqxioovueyeidoadiby
push 0
lea edx, [ebp - 0xae0]
push edx
push 0
mov ecx, 0xfd
mov esi, 0x41def8
lea edi, [ebp - 0xae0]
push 0x800
rep movsd dword es:[edi], dword [esi]
call ebx
dec dword [ebp - 0x2e3c]
jne 0x40a6d0
lea eax, [ebp - 0x2e38]
push 0x41def4
push eax
call fcn.0040d935
push 0xef70
mov ecx, 8
mov esi, str.Mwaepujotoxejgiugeuzqpkodyaivoeli
lea edi, [ebp - 0x264]
rep movsd dword es:[edi], dword [esi]
push str.Vzujnefje
push 0x939b
push str.Nniesig
push str.Q__s_Dujegoxb__d_Heovsitii_Wn__s_Tf__d_Due_Pummhu
lea ecx, [ebp - 0x264]
push 0x21
push ecx
movsw word es:[edi], word [esi]
call fcn.0040db84
push 0x2ec
call fcn.0040db03
mov edx, eax
add esp, 0x28
test edx, edx
je 0x40a7ae
mov edi, edx
mov ecx, 0x95
mov eax, 0x31313131
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0xb3
mov eax, 0x2b2b2b2b
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x92
mov eax, 0xb1b1b1b1
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x32
mov eax, 0x59595959
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
push 0x7be
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a826
mov edi, edx
mov ecx, 0xeb
mov eax, 0x5a5a5a5a
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x23
mov eax, 0xbebebebe
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0xa3
mov eax, 0x6d6d6d6d
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x121
mov eax, 0x63636363
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, 0x10101010
mov edi, edx
mov ecx, 0x170
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x143
mov eax, 0x44444444
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
push 0x4bf
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a88e
mov edi, edx
mov ecx, 0x15
mov eax, 0xe0e0e0e
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov eax, 0x81818181
mov edi, edx
mov ecx, 0x99
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0xd2
mov eax, 0x93939393
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0xc7
mov eax, 0xd0d0d0d0
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x1d
mov eax, 0x94949494
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
push 0xc0
lea edx, [ebp - 0x180]
mov ecx, 0x44
mov esi, str.Mibumiesuetavieemouceeuodmaoqefowoaetviabopnviloteuusajeuiieieeobowevgqeoukuiizeaenegaapeaiauijusnkxqapeogkeisteyeacuefeiauizaueozgetaeyearhhuteiuiyweqaoumieeaadamoidmetauoharitejuhpiuviwaakietojecaoaiucaweuutiiygetawxiobutaqekioaiiiiqaoazoilioaeoeauaesdmiheneeofuothuger
lea edi, [ebp - 0x180]
push edx
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_IsBadStringPtrA]
mov dword [0x6e9a34], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x6e9a28], eax
mov ebx, 3
jmp 0x40a8d0
mov esi, 5
push 0x1e3
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a90f
mov edi, edx
mov ecx, 0x74
mov eax, 0x94949494
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x31
mov eax, 0x16161616
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
dec esi
jne 0x40a8d5
dec ebx
jne 0x40a8d0
push 0x487
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40a961
mov eax, 0xcbcbcbcb
mov edi, edx
mov ecx, 0xd8
rep stosd dword es:[edi], eax
mov edi, edx
mov ecx, 0x86
mov eax, 0x43434343
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0xd0
mov eax, 0xdddddddd
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x2e38]
push ecx
call fcn.0040d935
xor edx, edx
mov dword [ebp - 0x4f], edx
mov dword [ebp - 0x4b], edx
push str.Cuuey
mov dword [ebp - 0x47], edx
push str.Zuaesaxw
mov dword [ebp - 0x43], edx
push str._s_Uu__s_Xaguq
mov dword [ebp - 0x3f], edx
lea eax, [ebp - 0x50]
mov dword [ebp - 0x3b], edx
push 0x1a
push eax
mov byte [ebp - 0x50], 0
mov word [ebp - 0x37], dx
call fcn.0040db84
add esp, 0x1c
mov ebx, 3
nop
push 0x41f0b0
push 0x41dce4
push 0x41dce0
push 0x41dcdc
push 0x41dcd8
mov ecx, 0x1a
mov esi, str.Fudrialaaovizyenruvmojdivauezarowusuoixoxujupbaefxviiehqfebislhobanlzvbuxiowdoqueumazicaturamppohnvuwon
lea edi, [ebp - 0xd8]
push str._s_K_E__s_Xouke_Qopeciheae__s_Niziyoumvo__s_Nzne_Cexovotemu__s_Ceauzeeaho_Naerh
rep movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xd8]
push 0x67
push ecx
call fcn.0040db84
add esp, 0x20
dec ebx
jne 0x40a9b0
push 0x41dc84
push str.Lepls
push 0xf190
push str.Uouqvuiubs
push str.Eidwtaja
mov byte [ebp - 0x398], 0
xor eax, eax
mov ecx, 0x1e
lea edi, [ebp - 0x397]
push str.Uouakucii
rep stosd dword es:[edi], eax
push str._s_Zyiopak_Wo__s_Bzofpa__s_Ki__d_Zeeeyev_Mewa__s_Qsnudaq__s_Leiivaf_A
lea edx, [ebp - 0x398]
push 0x7a
push edx
stosw word es:[edi], ax
call fcn.0040db84
push 0x4268f4
push 0x426dac
push 0x428990
mov ecx, 0x19
mov esi, str.Ymoomupjcnjacieamatuewsayuoujepmboeeijoaleuefulugpeulashribilmaukeoeuumoniuuaiuekioiuzzxquobqydidiaxh
lea edi, [ebp - 0xd4]
rep movsd dword es:[edi], dword [esi]
push str.Foxup
push 0x5e19
push str.Zeuag
push str.Jounqose__s_Wv__d_Qmuona__s_Ceomsomooi__s_Hhichebnrv_Ieuija__s_Semew__s_Uoeaci_Uu
lea eax, [ebp - 0xd4]
push 0x65
push eax
movsw word es:[edi], word [esi]
call fcn.0040db84
add esp, 0x48
push 0xa853
push str.Cskogaqdi
xor ecx, ecx
push str._s_Eed_Bax__d_Zjurcot
mov dword [ebp - 0x23], ecx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x1f], ecx
push 0xc
push edx
mov byte [ebp - 0x24], 0
mov dword [ebp - 0x1b], ecx
call fcn.0040db84
push 0x41daf8
mov ecx, 6
mov esi, str.Doiagofeiagudeaidesufkguu
lea edi, [ebp - 0x6c]
rep movsd dword es:[edi], dword [esi]
push 0xc5e5
push str.Xavddij
push 0xd494
push str._d_Soimjoz__s_Ooepf__d_Neaih_Oswifedazi__s_Vvaxq_Qoa
lea eax, [ebp - 0x6c]
push 0x19
push eax
movsw word es:[edi], word [esi]
call fcn.0040db84
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x2e38]
push ecx
lea edx, [ebp - 0x6e8]
push ebx
push edx
call fcn.00406fb0
add esp, 0x3c
test al, al
jne 0x40acc5
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [0x6e9a44], eax
mov esi, 3
push 0x2d8
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40ab60
mov edi, edx
mov ecx, 0x10
mov eax, 0xf4f4f4f4
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x14
mov eax, 0x8f8f8f8f
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, 0x2f2f2f2f
mov edi, edx
mov ecx, 0x3d
push edx
rep stosd dword es:[edi], eax
call fcn.0040d9eb
add esp, 4
dec esi
jne 0x40ab15
mov ecx, 0x1b
mov esi, str.Hwsipuqwuliabmenhanzewuujeujriwokaqojauouasuzrfupsaaveszeopuyoahruyeojpewqiiuuolenbeoousquspuuwaeaixkebruiiio
lea edi, [ebp - 0xdc]
rep movsd dword es:[edi], dword [esi]
push 0xc471
push str.Bylmuax
push str._s_Dq__d_Afsuci_Fwiicii_Yfxpjatiuk
lea eax, [ebp - 0xdc]
push 0x6d
push eax
movsw word es:[edi], word [esi]
call fcn.0040db84
mov edx, dword [0x41da0c]
mov ecx, dword [str.Ruosdifoeoqoe]
mov eax, dword [0x41da10]
push str.Geoweotmhi
push str.H__s_N_Oo
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], ecx
mov cx, word [0x41da14]
lea edx, [ebp - 0x34]
push 0xd
push edx
mov dword [ebp - 0x2c], eax
mov word [ebp - 0x28], cx
call fcn.0040db84
mov edi, dword [sym.imp.KERNEL32.dll_GetACP]
add esp, 0x24
mov esi, 4
lea esp, [esp]
call edi
dec esi
jne 0x40abe0
push 0x174
push str.Jwoqcaoeakoiueimseidcobedueeeeeoipqiwcpzmepuuopupukiredelibesjjjnuyeelwakzoofujcxiqovdaumugefakuxuoacaxgquyidojmzahmoaquknpfcuguibgorioaqozibaaalfcxuioiaboajkeemuiapufutvowiiaapvnuoeeozixvdobivaejeouiepviyooemeeeuoxereviiajkouriepatuisviamabiielejsmlaiuoaajabebojisefpoaifieyuhqoudalalgjaepeubulooibaiauwfemaaqfiuuomzicjbefeepmxmanecujidavowuycuhtikuuooacokebigooeuuiumrtoboussuamaodiiutunutrunniziabzeyeouhueeuulazdoixaticeziyaiklumiiuwasriojiriiiuijeuepabueieojpuxwudzymguhternoweuoouzijaxaeivanefaucsomsnunapeioiebecinetxvuziffoahifujoxafkotmurwwejuxaxooonufejozeeepueiohsatomaxi
push 0
push str.Kzhxquqakafeyepavopawemiteijterascrurawclowjdalafzfepewavuriqdulhodeajguroyluiluozdegiqamajndfxovolenibonoqerudavagkfqlileiooorraooitjzlnacuujfubjgudueaoeteoetvwihetsdexhuvteaioumaaoauweftoncimhiegintigsomipvsofyjyfouizigucseeruwfiiwuyidawavoaeqejueiwacnafzutovizataaofeyjadrayixuoumuavhevoohtobeiahoeayisuvaeixetaapwiqswdlotioldenoaeuaoolpdaxtyreoyeoawautvalelexinumiuueewakubejoiqbagooeieuieopixiiugozemyyacjzdborvbozazivsfeiyoseusueohukexuiaousxfaabuehamtyiqoiiesuetieajuneogeedapatiiaaajuadoqlooicbvajuiedoajiagutieqxareiuyeladkbelvnijoxaeasewgelouyuigluqggisusymdueuqoiuoiovemurbnwvibiuuwolcuajupoxdpaueiuhoxgaouopaondihurkmeoduiciszulfivirjsebecqbesiiswoeaeayepuqqyuwxflgijajwgoukeeseliiaeaunotniknaeneccophofatoioteudeagakaqirusiouluewlugukltalbsamubwaxxitfooxoviueseprttmarkiobatpieiocaialubnfiriotehaoxouc
push 0
push 0x800
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatA]
push 0x660
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40ac60
mov edi, edx
mov ecx, 0x13a
mov eax, 0xa9a9a9a9
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x135
mov eax, 0xf2f2f2f2
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x9d
mov eax, 0x95959595
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0xbb
mov eax, 0x6a6a6a6a
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
mov esi, 5
xor eax, eax
push 0x2713
mov dword [ebp - 0x13], eax
push 0x18e9
mov dword [ebp - 0xf], eax
push str._d_Pu_Tseekame__d_A
mov dword [ebp - 0xb], eax
lea ecx, [ebp - 0x14]
mov word [ebp - 7], ax
push 0xf
push ecx
mov byte [ebp - 0x14], 0
mov byte [ebp - 5], al
call fcn.0040db84
add esp, 0x14
dec esi
jne 0x40ac65
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
lea edx, [ebp - 0x2e38]
push edx
lea eax, [ebp - 0x6e8]
push ebx
push eax
call fcn.00406fb0
add esp, 0xc
test al, al
je 0x40ab05
mov ebx, 5
lea ebx, [ebx]
mov esi, 4
push 0x20b
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40ad44
mov edi, edx
mov ecx, 0x15
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [edx], 0x6969
mov edi, edx
mov ecx, 0x2a
mov eax, 0x79797979
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov edi, edx
mov ecx, 0x30
mov eax, 0x32323232
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x53
mov eax, 0x92929292
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x5a
mov eax, 0x51515151
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
dec esi
jne 0x40acd5
dec ebx
jne 0x40acd0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov esi, 4
jmp 0x40ad60
mov byte [ebp - 0x210], 0
xor eax, eax
mov ecx, 0x68
lea edi, [ebp - 0x20f]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x210]
push ecx
push 0x1a2
stosb byte es:[edi], al
call ebx
dec esi
mov dword [0x6e9a18], eax
jne 0x40ad60
push 0x4e0
call fcn.0040db03
mov edx, eax
add esp, 4
test edx, edx
je 0x40adc8
mov edi, edx
mov ecx, 0x12e
mov eax, 0x76767676
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, edx
mov ecx, 0x26
mov eax, 0xaaaaaaaa
rep stosd dword es:[edi], eax
push edx
stosb byte es:[edi], al
call fcn.0040d9eb
add esp, 4
push 0xa7a
push 0x1c02
push str.Ldajnetam
push str.Oifos
push str.Vsqacemeu
mov byte [ebp - 0x31c], 0
xor eax, eax
mov ecx, 0x1a
lea edi, [ebp - 0x31b]
push 0xfa39
rep stosd dword es:[edi], eax
push str.Jea__d_Dezamuot_C__s_Toeh__s_Wasacut_Vxupuop__s_Wasifeqoce__d_Na__d_My
lea edx, [ebp - 0x31c]
push 0x69
push edx
stosb byte es:[edi], al
call fcn.0040db84
xor eax, eax
mov byte [ebp - 0xb8], 0
mov ecx, 0x11
lea edi, [ebp - 0xb7]
rep stosd dword es:[edi], eax
push 0x42244c
push 0x4268f4
stosw word es:[edi], ax
push 0x41e8c0
push str._s_Gaudto_Buc__s_C_Doao__s_Vuo
stosb byte es:[edi], al
lea eax, [ebp - 0xb8]
push 0x47
push eax
call fcn.0040db84
push str.Niuuaomeoe
push 0x41d92c
push str.Xuel
push 0xc12a
push 0xcc1e
mov word [ebp - 0x240], 0
xor eax, eax
mov ecx, 0xb
lea edi, [ebp - 0x23e]
rep stosd dword es:[edi], eax
push 0x41d918
push str._s_Baiede_Qeoila__d_Bnuodu__d_Jmsszei_Aap__s_Nsxclifaee__s_Vnop__s_Weu_Uul
lea ecx, [ebp - 0x240]
push 0x17
push ecx
stosw word es:[edi], ax
call fcn.0040d97b
add esp, 0x60
push 0xda07
push str.Atpziii
push 0x5fdc
push str.Kiollo
push 0xe9ef
mov byte [ebp - 0xd4], 0
xor eax, eax
mov ecx, 0x18
lea edi, [ebp - 0xd3]
push str.Baaq
rep stosd dword es:[edi], eax
push str._s_Huoqsarcx_Kieiwulo__d_Y_Sykxjalai_Azik__s_Weegdofje_X_Neu__d_Fimas__s_Ty_Lz__d_Coc
lea edx, [ebp - 0xd4]
push 0x62
push edx
stosw word es:[edi], ax
call fcn.0040db84
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push str.Fefjuaeedgkatgbxkeiasijenqkhaokaoekutplbmenstvwaboiolazaoejigoaonadodegopwvlxixewpfohoaiwutiiaaeepaiooxeewruhteaqefozwzobgjacozuhfuokpnhoeudthwobiuvqivaozoanaaehabuiicapraogotoapiimjkuvehuezsoiquoyeiubhkamsovgarieltukouweoreaikubagetepeugqogiwleixoeamewvsgdeioeejujauiiaqaudqajeiiraeieskumoacxiahpolubeiogakdbioacmcuouajeqkebeuanihiwetaaxaedeztcjburivptadiuxmiammjcumaitculbuxlucljooiuoroyublufbituoceufaoitevbionugicsyeeeaulifoxesieiovmooiaiholiaodedaoeeumaiueilaijqeeosevucauauabibewovailresauiousoqjgoykljsedpemdopnorcufieaiihexeuafaoemeiuineuzbludadsqaquwgukbuiaoiteeaageidejenufxbevozozfbeteuaeexouijeioisbivpaozunecoealonehineiacetaquyuc
push 0x10e
mov dword [0x6e9a04], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [0x6e9a20], eax
mov esi, 7
lea ebx, [ebx]
mov ecx, dword [0x41d804]
mov eax, dword [str.Qzenlapzvacuroi]
mov edx, dword [0x41d808]
push 0xdc66
push 0x9be1
push str.Veioje__d_Kveo_Tde__d_Yeaefeyk_Peea
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], eax
mov eax, dword [0x41d80c]
lea ecx, [ebp - 0x14]
push 0xf
push ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
call fcn.0040db84
add esp, 0x14
dec esi
jne 0x40af10
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor eax, eax
pop ebx
call fcn.00411d12
mov esp, ebp
pop ebp
ret