Function at 0x426791
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x500ea2
mov eax, dword fs:[0]
push eax
sub esp, 0x100
push ebx
push esi
push edi
mov eax, dword [0x5e4ce0]
xor eax, esp
push eax
lea eax, [esp + 0x110]
mov dword fs:[0], eax
mov esi, ecx
lea ecx, [esp + 0x30]
call fcn.004037c8
and dword [esp + 0x118], 0
lea ecx, [esp + 0x40]
call fcn.004037c8
mov byte [esp + 0x118], 1
lea ecx, [esp + 0x48]
call fcn.004037c8
mov byte [esp + 0x118], 2
lea ecx, [esp + 0x4c]
call fcn.004037c8
mov byte [esp + 0x118], 3
lea eax, [esp + 0xcc]
push eax
call fcn.004398db
mov byte [esp + 0x118], 4
lea ecx, [esp + 0x38]
call fcn.004037c8
mov byte [esp + 0x118], 5
lea ecx, [esp + 0x20]
call fcn.004037c8
mov byte [esp + 0x118], 6
lea ecx, [esp + 0x44]
call fcn.004037c8
mov byte [esp + 0x118], 7
lea ecx, [esp + 0x3c]
call fcn.004037c8
mov byte [esp + 0x118], 8
lea ecx, [esp + 0x34]
call fcn.004037c8
mov byte [esp + 0x118], 9
lea ecx, [esp + 0x2c]
call fcn.004037c8
mov byte [esp + 0x118], 0xa
lea ecx, [esp + 0x28]
call fcn.004037c8
mov byte [esp + 0x118], 0xb
lea ecx, [esp + 0x24]
call fcn.004037c8
mov byte [esp + 0x118], 0xc
lea ecx, [esp + 0x50]
call fcn.004d201f
mov byte [esp + 0x118], 0xd
lea ecx, [esp + 0x64]
call fcn.00440280
mov byte [esp + 0x118], 0xe
push str.SFREEZELLCHttp_h8yQYGwo5X33
lea ecx, [esp + 0x68]
call fcn.00440390
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x3c]
lea ebx, [eax + 0xb0]
lea eax, [esp + 0x10]
push eax
push ebx
call fcn.004051da
mov byte [esp + 0x118], 0xf
mov eax, dword [eax]
push eax
push str._wc_zip_
lea edi, [esi + 0x204]
push edi
call fcn.0040aba8
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x10]
call fcn.004010f8
lea eax, [esp + 0x10]
push eax
call fcn.0043a178
mov byte [esp + 0x118], 0x10
push eax
lea ecx, [esp + 0x34]
call fcn.004038a3
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x10]
call fcn.004010f8
push dword [esp + 0x30]
mov edi, dword [edi]
push edi
lea ecx, [esp + 0x6c]
call fcn.004403c0
test al, al
jne 0x4269bf
push 0x4e
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.COfferWeather::SetupWeather
call fcn.004014b0
mov byte [esp + 0x120], 0x11
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.Download_failed.
call fcn.004014b0
mov byte [esp + 0x124], 0x12
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.weatherping
call fcn.004014b0
mov byte [esp + 0x128], 0x13
mov eax, dword [esi]
push 0
mov byte [esp + 0x12c], 0xe
mov ecx, esi
call dword [eax + 0x78]
jmp 0x4272db
cmp dword [ebx + 0xc], 1
lea ecx, [esp + 0x38]
jne 0x4269d0
push 0x5b0240
jmp 0x4269d5
push 0x5b4488
call fcn.004013dd
lea eax, [esp + 0x10]
push eax
push ebx
call fcn.004051da
mov byte [esp + 0x118], 0x14
push eax
lea ecx, [esp + 0x24]
call fcn.004038a3
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x10]
call fcn.004010f8
lea eax, [esp + 0x14]
push eax
push ebx
call fcn.004273f5
mov byte [esp + 0x118], 0x15
push 2
lea ecx, [esp + 0x14]
push ecx
mov ecx, eax
call fcn.004114d4
mov byte [esp + 0x118], 0x16
push eax
lea ecx, [esp + 0x48]
call fcn.004038a3
mov byte [esp + 0x118], 0x15
lea ecx, [esp + 0x10]
call fcn.004010f8
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x14]
call fcn.004010f8
push 0x5b4084
lea ecx, [esp + 0x40]
call fcn.004013dd
lea eax, [esp + 0x84]
push eax
call fcn.0042dea9
mov byte [esp + 0x118], 0x17
push dword [esp + 0x30]
lea eax, [esp + 0x88]
push eax
call fcn.0042e32c
test eax, eax
je 0x427269
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5b5044
call fcn.004014b0
mov byte [esp + 0x11c], 0x18
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.error
call fcn.004014b0
mov byte [esp + 0x120], 0x19
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x128], 0x17
call fcn.0042e42b
mov byte [esp + 0x118], 0x1a
push eax
lea ecx, [esp + 0x44]
call fcn.004038a3
mov byte [esp + 0x118], 0x17
lea ecx, [esp + 0x14]
call fcn.004010f8
push 0x5af400
lea ecx, [esp + 0x44]
call fcn.004036be
test eax, eax
mov ebx, 0x5af138
jne 0x426cda
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.dnam
call fcn.004014b0
mov byte [esp + 0x11c], 0x1b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x5b5058
call fcn.004014b0
mov byte [esp + 0x120], 0x1c
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x128], 0x17
call fcn.0042e42b
mov byte [esp + 0x118], 0x1d
push eax
lea ecx, [esp + 0x38]
call fcn.004038a3
mov byte [esp + 0x118], 0x17
lea ecx, [esp + 0x14]
call fcn.004010f8
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5b505c
call fcn.004014b0
mov byte [esp + 0x11c], 0x1e
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
mov esi, str.eloc
push esi
call fcn.004014b0
mov byte [esp + 0x120], 0x1f
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x128], 0x17
call fcn.0042e42b
mov byte [esp + 0x118], 0x20
push eax
lea ecx, [esp + 0x30]
call fcn.004038a3
mov byte [esp + 0x118], 0x17
lea ecx, [esp + 0x14]
call fcn.004010f8
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.ctry
call fcn.004014b0
mov byte [esp + 0x11c], 0x21
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004014b0
mov byte [esp + 0x120], 0x22
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x128], 0x17
call fcn.0042e42b
mov byte [esp + 0x118], 0x23
push eax
lea ecx, [esp + 0x2c]
call fcn.004038a3
mov byte [esp + 0x118], 0x17
lea ecx, [esp + 0x14]
call fcn.004010f8
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5b5070
call fcn.004014b0
mov byte [esp + 0x11c], 0x24
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.004014b0
mov byte [esp + 0x120], 0x25
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0x128], 0x17
call fcn.0042e42b
mov byte [esp + 0x118], 0x26
push eax
lea ecx, [esp + 0x28]
call fcn.004038a3
mov byte [esp + 0x118], 0x17
lea ecx, [esp + 0x14]
call fcn.004010f8
jmp 0x426d2a
push ebx
lea ecx, [esp + 0x40]
call fcn.004013dd
push str.USAK0173
lea ecx, [esp + 0x24]
call fcn.004013dd
push str.North_Pole__AK
lea ecx, [esp + 0x38]
call fcn.004013dd
push 0x5b50c4
lea ecx, [esp + 0x30]
call fcn.004013dd
push 0x5b4864
lea ecx, [esp + 0x2c]
call fcn.004013dd
push 0x5b50c8
lea ecx, [esp + 0x28]
call fcn.004013dd
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x2a
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.gender
call fcn.004014b0
mov byte [esp + 0x120], 0x2b
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
mov edi, str.SoftwareThe_Weather_ChannelFrameworkUserProfile
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x2c
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
mov esi, str.hkcu
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x2d
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x2e
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x5b5100
call fcn.004014b0
mov byte [esp + 0x120], 0x2f
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x30
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x31
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x32
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locID
call fcn.004014b0
mov byte [esp + 0x120], 0x33
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x34
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x35
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x36
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locDisplayName
call fcn.004014b0
mov byte [esp + 0x120], 0x37
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x38
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x39
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x3a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locType
call fcn.004014b0
mov byte [esp + 0x120], 0x3b
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x3c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x3d
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x3e
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locState
call fcn.004014b0
mov byte [esp + 0x120], 0x3f
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x40
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x41
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x42
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locCountry
call fcn.004014b0
mov byte [esp + 0x120], 0x43
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x44
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x45
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004037f2
mov byte [esp + 0x11c], 0x46
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.locDMA
call fcn.004014b0
mov byte [esp + 0x120], 0x47
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x48
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x49
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004014b0
mov byte [esp + 0x11c], 0x4a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x5b5144
call fcn.004014b0
mov byte [esp + 0x120], 0x4b
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
mov edi, str.SoftwareThe_Weather_ChannelApps04484283_6CDE_4374_A939_AB50B2481621
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x4c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x4d
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push ebx
call fcn.004014b0
mov byte [esp + 0x11c], 0x4e
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x5b5194
call fcn.004014b0
mov byte [esp + 0x120], 0x4f
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edi
call fcn.004014b0
mov byte [esp + 0x124], 0x50
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push esi
call fcn.004014b0
mov byte [esp + 0x128], 0x51
mov byte [esp + 0x128], 0x17
call fcn.0043a56c
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x84]
call fcn.0042df05
mov byte [esp + 0x118], 0xd
lea ecx, [esp + 0x64]
call fcn.00440310
mov byte [esp + 0x118], 0xc
lea ecx, [esp + 0x50]
call fcn.004d21f1
mov byte [esp + 0x118], 0xb
lea ecx, [esp + 0x24]
call fcn.004010f8
mov byte [esp + 0x118], 0xa
lea ecx, [esp + 0x28]
call fcn.004010f8
mov byte [esp + 0x118], 9
lea ecx, [esp + 0x2c]
call fcn.004010f8
mov byte [esp + 0x118], 8
lea ecx, [esp + 0x34]
call fcn.004010f8
mov byte [esp + 0x118], 7
lea ecx, [esp + 0x3c]
call fcn.004010f8
mov byte [esp + 0x118], 6
lea ecx, [esp + 0x44]
call fcn.004010f8
mov byte [esp + 0x118], 5
lea ecx, [esp + 0x20]
call fcn.004010f8
mov byte [esp + 0x118], 4
lea ecx, [esp + 0x38]
call fcn.004010f8
mov byte [esp + 0x118], 3
lea ecx, [esp + 0xcc]
call fcn.00439964
mov byte [esp + 0x118], 2
lea ecx, [esp + 0x4c]
call fcn.004010f8
mov byte [esp + 0x118], 1
lea ecx, [esp + 0x48]
call fcn.004010f8
mov byte [esp + 0x118], 0
lea ecx, [esp + 0x40]
call fcn.004010f8
or dword [esp + 0x118], 0xffffffff
lea ecx, [esp + 0x30]
call fcn.004010f8
xor eax, eax
inc eax
jmp 0x4273df
push 0x6e
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.COfferWeather::SetupWeather
call fcn.004014b0
mov byte [esp + 0x120], 0x27
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.Weather_ping_file_not_found.
call fcn.004014b0
mov byte [esp + 0x124], 0x28
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push str.weatherpingmissing
call fcn.004014b0
mov byte [esp + 0x128], 0x29
mov eax, dword [esi]
push 2
mov byte [esp + 0x12c], 0x17
mov ecx, esi
call dword [eax + 0x78]
mov byte [esp + 0x118], 0xe
lea ecx, [esp + 0x84]
call fcn.0042df05
mov byte [esp + 0x118], 0xd
lea ecx, [esp + 0x64]
call fcn.00440310
mov byte [esp + 0x118], 0xc
lea ecx, [esp + 0x50]
call fcn.004d21f1
mov byte [esp + 0x118], 0xb
lea ecx, [esp + 0x24]
call fcn.004010f8
mov byte [esp + 0x118], 0xa
lea ecx, [esp + 0x28]
call fcn.004010f8
mov byte [esp + 0x118], 9
lea ecx, [esp + 0x2c]
call fcn.004010f8
mov byte [esp + 0x118], 8
lea ecx, [esp + 0x34]
call fcn.004010f8
mov byte [esp + 0x118], 7
lea ecx, [esp + 0x3c]
call fcn.004010f8
mov byte [esp + 0x118], 6
lea ecx, [esp + 0x44]
call fcn.004010f8
mov byte [esp + 0x118], 5
lea ecx, [esp + 0x20]
call fcn.004010f8
mov byte [esp + 0x118], 4
lea ecx, [esp + 0x38]
call fcn.004010f8
mov byte [esp + 0x118], 3
lea ecx, [esp + 0xcc]
call fcn.00439964
mov byte [esp + 0x118], 2
lea ecx, [esp + 0x4c]
call fcn.004010f8
mov byte [esp + 0x118], 1
lea ecx, [esp + 0x48]
call fcn.004010f8
mov byte [esp + 0x118], 0
lea ecx, [esp + 0x40]
call fcn.004010f8
or dword [esp + 0x118], 0xffffffff
lea ecx, [esp + 0x30]
call fcn.004010f8
xor eax, eax
mov ecx, dword [esp + 0x110]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret