Function at 0x41c96f
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x4251a6
call fcn.00421088
mov eax, dword [ebp + 0x10]
sub esp, 0x68
push ebx
push esi
push edi
cmp eax, 0xf
je 0x41cf83
cmp eax, 0x318
je 0x41cf92
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x41cdd5
push 0xc
call fcn.0040ea8f
pop ecx
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], 2
mov edi, dword [ebp + 8]
test eax, eax
je 0x41c9ca
push dword [edi + 0x218]
push 0x7c
push eax
call fcn.00406f6a
jmp 0x41c9cc
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0xc
mov dword [edi + 0x25c], eax
call fcn.0040ea8f
pop ecx
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], 3
test eax, eax
je 0x41c9fc
push dword [edi + 0x218]
push 0x7e
push eax
call fcn.00406f6a
jmp 0x41c9fe
xor eax, eax
or dword [ebp - 4], 0xffffffff
push 0x429944
push 0x7d
push dword [edi + 0x218]
mov dword [edi + 0x260], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ebx, eax
push ebx
push dword [edi + 0x218]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push ebx
push dword [edi + 0x218]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
add esi, 3
mov ebx, eax
je 0x41ca59
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
cmp eax, 0x3fffffff
mov dword [ebp + 0x14], eax
jle 0x41ca5d
xor eax, eax
jmp 0x41ca73
add eax, eax
call fcn.00417cb0
mov eax, esp
push 3
push dword [ebp + 0x14]
push esi
mov esi, eax
call fcn.00401043
xor ecx, ecx
push ecx
mov word [eax + ebx*2 - 6], cx
push dword [edi + 0x218]
mov ebx, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0x65
push dword [ebp + 0xc]
push 0xa5
push 0x26c
push 0x73
push 0x14
pop esi
push esi
push 0x503008c4
push eax
push str.EDIT
push 0x200
call ebx
push 0x640
mov dword [edi + 0x22c], eax
call fcn.0040ea8f
pop ecx
mov dword [ebp + 0x14], eax
mov dword [ebp - 4], 4
test eax, eax
je 0x41caf6
fld dword [0x42bcac]
mov ecx, 0x11d
push ecx
push esi
push ecx
fstp dword [esp]
push 0xffffff
push 0x64
push str.Yes__please_install_The_Weather_Channel_Desktop._By_Checking_this_box_and_clicking_Continue_below__I_Agree_to_nThe_Weather_Channel_license_agreement.
push dword [ebp + 0xc]
mov ecx, eax
call fcn.004080a9
jmp 0x41caf8
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 1
mov dword [edi + 0x250], eax
mov eax, dword [eax + 0x618]
push 0xf1
push eax
mov dword [edi + 0x230], eax
call esi
push 0
push dword [edi + 0x218]
push 0x66
push dword [ebp + 0xc]
push 0x16
push 0xaa
push 0x91
push 0x73
push 0x40000000
push 0x427ffc
push str.EDIT
push 0x200
call ebx
push 0
push dword [edi + 0x218]
mov dword [edi + 0x234], eax
push 0x67
push dword [ebp + 0xc]
push 0x82
push 0x10e
push 0xaf
push 0xf
push 0x40200041
push 0x427ffc
push str.LISTBOX
push 0x200
call ebx
push 0
push dword [edi + 0x218]
mov dword [edi + 0x238], eax
push 0x68
push dword [ebp + 0xc]
push 0x14
push 0x64
push 0x91
push 0x1bd
push 0x40000004
push str.Fahrenheit__F_
push str.BUTTON
push 0
call ebx
push 0
push 1
push 0xf1
push eax
mov dword [edi + 0x23c], eax
call esi
push 0
push dword [edi + 0x218]
push 0x69
push dword [ebp + 0xc]
push 0x14
push 0x64
push 0x91
push 0x221
push 0x40000004
push str.Celsius__C_
push str.BUTTON
push 0
call ebx
push 0
push dword [edi + 0x218]
mov dword [edi + 0x240], eax
push 0x6a
push dword [ebp + 0xc]
push 0x14
push 0x64
push 0xb4
push 0x1bd
push 0x40000004
push str.Male
push str.BUTTON
push 0
call ebx
push 0
push 1
push 0xf1
push eax
mov dword [edi + 0x244], eax
call esi
push 0
push dword [edi + 0x218]
push 0x6b
push dword [ebp + 0xc]
push 0x14
push 0x64
push 0xb4
push 0x221
push 0x40000004
push str.Female
push str.BUTTON
push 0
call ebx
push 0
push dword [edi + 0x218]
mov dword [edi + 0x248], eax
push 0x6c
push dword [ebp + 0xc]
push 0x19
push 0xb4
push 0xd5
push 0x1bd
push 0x40200203
push 0x427ffc
push str.COMBOBOX
push 0
call ebx
push str.Please_select
xor ebx, ebx
push ebx
push 0x143
push eax
mov dword [edi + 0x24c], eax
call esi
mov dword [ebp + 0xc], 0x7d0
push dword [ebp + 0xc]
lea eax, [ebp - 0x5c]
push 0x42ac10
push 0x14
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x10
lea eax, [ebp - 0x5c]
push eax
push ebx
push 0x143
push dword [edi + 0x24c]
call esi
dec dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x77b
jge 0x41ccc7
push ebx
push ebx
push 0x14e
push dword [edi + 0x24c]
call esi
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push str.Arial
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0xc
mov dword [ebp + 0xc], eax
call dword [sym.imp.GDI32.dll_CreateFontW]
push str.Arial
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x384
push ebx
push ebx
push ebx
push 0xc
mov dword [ebp + 0x14], eax
call dword [sym.imp.GDI32.dll_CreateFontW]
push ebx
push dword [ebp + 0x14]
mov dword [ebp + 8], eax
push 0x30
push dword [edi + 0x22c]
call esi
push ebx
push dword [ebp + 8]
push 0x30
push dword [edi + 0x238]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x230]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x24c]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x234]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x244]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x248]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x23c]
call esi
push ebx
push dword [ebp + 0xc]
push 0x30
push dword [edi + 0x240]
call esi
jmp 0x41d16d
cmp eax, 0x138
jne 0x41ce40
push dword [ebp + 0x18]
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
push 0xffffff
push dword [ebp + 0x14]
cmp eax, 0x65
je 0x41ce17
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_SetTextColor]
push ebx
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [0x436170]
jmp 0x41d16f
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_SetTextColor]
push 2
push dword [ebp + 0x14]
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x41d16f
cmp eax, 0x111
jne 0x41cf62
mov ecx, dword [ebp + 0x14]
movzx eax, cx
cmp eax, 0x68
je 0x41cf4f
cmp eax, 0x69
je 0x41cf4f
cmp eax, 0x6a
je 0x41cf48
cmp eax, 0x6b
je 0x41cf48
cmp eax, 0x66
jne 0x41cea8
shr ecx, 0x10
mov eax, 0x300
cmp cx, ax
jne 0x41ce91
mov eax, dword [ebp + 8]
mov byte [eax + 0x15f4], 1
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_DefWindowProcW]
jmp 0x41d16f
cmp eax, 0x67
jne 0x41cee2
shr ecx, 0x10
cmp cx, bx
jne 0x41ce91
mov esi, dword [ebp + 8]
xor edi, edi
cmp dword [esi + 0x254], edi
je 0x41d16d
push edi
push edi
push 0x147
push dword [esi + 0x24c]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jle 0x41ce91
push edi
push ebx
push ebx
jmp 0x41cf32
cmp eax, 0x6c
jne 0x41ce91
shr ecx, 0x10
cmp cx, bx
jne 0x41ce91
mov esi, dword [ebp + 8]
xor ebx, ebx
cmp dword [esi + 0x254], ebx
je 0x41d16d
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push ebx
push 0x147
push dword [esi + 0x24c]
call edi
test eax, eax
jle 0x41cf44
push ebx
push ebx
push 0x188
push dword [esi + 0x238]
call edi
cmp eax, 0xffffffff
je 0x41cf44
push ebx
push 1
push 1
mov eax, dword [esi + 0x254]
mov dl, 1
call fcn.00420b3e
jmp 0x41ce91
push 1
jmp 0x41cf2e
push eax
push 0x6b
push 0x6a
jmp 0x41cf54
push eax
push 0x69
push 0x68
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x41ce91
cmp eax, 0x21
jne 0x41ce91
mov eax, dword [ebp + 8]
cmp byte [eax + 0x1a42], 0
je 0x41ce91
push 4
pop eax
jmp 0x41d16f
lea eax, [ebp - 0x74]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_BeginPaint]
jmp 0x41cf95
mov eax, dword [ebp + 0x14]
push eax
lea esi, [ebp - 0x14]
call fcn.00406be7
xor ebx, ebx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0xc
call sub.gdiplus.dll_GdipAlloc
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 1
cmp eax, ebx
je 0x41cfd1
push 0x434a48
push eax
call fcn.00406b3c
mov edi, eax
jmp 0x41cfd3
xor edi, edi
mov byte [ebp - 4], 0
push dword [ebp - 0x28]
mov eax, edi
push dword [ebp - 0x2c]
lea esi, [ebp - 0x14]
call fcn.00406c11
cmp edi, ebx
je 0x41cff3
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax]
mov edi, dword [ebp + 8]
cmp byte [edi + 0x258], 0
je 0x41d035
mov eax, dword [edi + 0x25c]
mov esi, dword [eax + 4]
call fcn.00406e82
push eax
mov eax, dword [edi + 0x25c]
mov esi, dword [eax + 4]
call fcn.00406e62
push eax
mov eax, dword [edi + 0x25c]
mov eax, dword [eax + 4]
push ebx
push ebx
lea esi, [ebp - 0x14]
call fcn.00406ce4
jmp 0x41d154
mov eax, dword [edi + 0x260]
mov esi, dword [eax + 4]
call fcn.00406e82
push eax
mov eax, dword [edi + 0x260]
mov esi, dword [eax + 4]
call fcn.00406e62
push eax
mov eax, dword [edi + 0x260]
mov eax, dword [eax + 4]
push ebx
push ebx
lea esi, [ebp - 0x14]
call fcn.00406ce4
fld dword [0x42bca8]
fstp dword [ebp - 0x24]
sub esp, 0x10
fld dword [0x42bca4]
mov edi, esp
fstp dword [ebp - 0x20]
lea esi, [ebp - 0x24]
fld dword [0x42bca0]
mov eax, 0xff000000
fstp dword [ebp - 0x1c]
push eax
fld dword [0x42bc9c]
push 1
fstp dword [ebp - 0x18]
movsd dword es:[edi], dword [esi]
fld dword [0x42bcac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
fstp dword [esp]
push str.Enter_your_city:_n_or_U.S._zip_code_
lea ebx, [ebp - 0x14]
call fcn.0040a21b
add esp, 0x10
fld dword [0x42bc98]
mov edi, esp
fstp dword [ebp - 0x24]
lea esi, [ebp - 0x24]
fld dword [0x42bc94]
mov eax, 0xff000000
fstp dword [ebp - 0x20]
movsd dword es:[edi], dword [esi]
fld dword [0x42bc90]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
push 1
push ecx
movsd dword es:[edi], dword [esi]
fstp dword [esp]
push str.Temperature_unit:
call fcn.0040a21b
add esp, 0x10
fld dword [0x42bc8c]
mov edi, esp
fstp dword [ebp - 0x20]
lea esi, [ebp - 0x24]
fld dword [0x42bc90]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, 0xff000000
push eax
movsd dword es:[edi], dword [esi]
push 1
push ecx
movsd dword es:[edi], dword [esi]
fstp dword [esp]
push str.Your_Gender:
call fcn.0040a21b
add esp, 0x10
fld dword [0x42bc88]
lea esi, [ebp - 0x24]
mov edi, esp
fstp dword [ebp - 0x20]
mov eax, 0xff000000
movsd dword es:[edi], dword [esi]
fld dword [0x42bc90]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
push 1
push ecx
movsd dword es:[edi], dword [esi]
fstp dword [esp]
push str.Year_of_birth:
call fcn.0040a21b
add esp, 0x20
lea eax, [ebp - 0x74]
push eax
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_EndPaint]
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x14]
call sub.gdiplus.dll_GdipDeleteGraphics
xor eax, eax
lea esp, [ebp - 0x80]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 0x14