Function at 0x1000d199
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x1011ac70]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x90
mov eax, 0x100cd069
call fcn.10071ffd
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x9c]
call fcn.1004b850
push 0x100d5350
push str.CONFIGURE
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
jne 0x1000d226
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10004d97
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.10071fee
add ebp, 0x414
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.1004ed41
push edi
push ebx
push eax
mov dword [ebp - 0x18], eax
call fcn.10072750
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10072ea0
add esp, 0x1c
push ebx
push ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c]
call fcn.1004dd50
push str.TheConfigure
lea ecx, [ebp - 0x9c]
call fcn.1004ad70
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x1000d29a
push dword [ebp - 0x18]
call fcn.1004ed3c
pop ecx
jmp 0x1000d1f0
mov esi, 0x206
push esi
lea eax, [ebp + 2]
push ebx
push eax
mov word [ebp], bx
call fcn.10072750
push esi
lea eax, [ebp + 0x20a]
push ebx
push eax
mov word [ebp + 0x208], bx
call fcn.10072750
mov ecx, dword [ebp - 0x10]
add esp, 0x18
push str.Application
call fcn.1004ae40
cmp eax, ebx
je 0x1000d1f0
mov ecx, eax
call fcn.1004ae10
jmp 0x1000d37f
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d2fd
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d302
mov dword [ebp - 0x14], ebx
jmp 0x1000d30b
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001cd78
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001cd78
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x54]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 1
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x200]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 2
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.100017f0
mov ecx, esi
call fcn.1004ae80
mov esi, eax
cmp esi, ebx
jne 0x1000d2e7
mov ecx, dword [ebp - 0x10]
push str.ImeUtil
call fcn.1004ae40
cmp eax, ebx
je 0x1000d1f0
mov ecx, eax
call fcn.1004ae10
jmp 0x1000d442
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d3c0
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d3c5
mov dword [ebp - 0x14], ebx
jmp 0x1000d3ce
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001cd78
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001cd78
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x38]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x318]
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 4
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.100017f0
mov ecx, esi
call fcn.1004ae80
mov esi, eax
cmp esi, ebx
jne 0x1000d3aa
mov ecx, dword [ebp - 0x10]
push str.AppService
call fcn.1004ae40
cmp eax, ebx
jne 0x1000d473
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10004d97
mov eax, ebx
jmp 0x1000d201
mov ecx, eax
call fcn.1004ae10
jmp 0x1000d58b
push 0x54
call fcn.1004ed11
cmp eax, ebx
pop ecx
je 0x1000d496
mov ecx, eax
call fcn.1000cef2
mov esi, eax
jmp 0x1000d498
xor esi, esi
push 0x100d5b88
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.1004ae40
cmp eax, ebx
je 0x1000d4e2
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d4bb
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d4bf
xor eax, eax
jmp 0x1000d4c5
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001cd78
pop ecx
pop ecx
lea eax, [ebp + 0x208]
push eax
mov ecx, esi
call fcn.100017c0
push str.ItemDisplayName
mov ecx, edi
call fcn.1004ae40
cmp eax, ebx
je 0x1000d52a
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d502
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d506
xor eax, eax
jmp 0x1000d50c
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001cd78
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x1c]
push eax
call fcn.100017c0
push str.ItemServiceDescription
mov ecx, edi
call fcn.1004ae40
cmp eax, ebx
je 0x1000d572
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d54a
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d54e
xor eax, eax
jmp 0x1000d554
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001cd78
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x38]
push eax
call fcn.100017c0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x314]
call fcn.1000d144
mov ecx, edi
call fcn.1004ae80
mov edi, eax
cmp edi, ebx
jne 0x1000d47f
push dword [ebp - 0x18]
call fcn.1004ed3c
xor ebx, ebx
pop ecx
inc ebx
jmp 0x1000d45d