Function at 0x1000d281
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x101f1dd0]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x90
mov eax, 0x1016ad40
call fcn.10075e22
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x9c]
call fcn.1004f200
push 0x1017439c
push str.CONFIGURE
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
jne 0x1000d30e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10004e0a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.10075e13
add ebp, 0x414
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.10052b12
push edi
push ebx
push eax
mov dword [ebp - 0x18], eax
call fcn.10076580
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10076cd0
add esp, 0x1c
push ebx
push ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c]
call fcn.10051700
push str.TheConfigure
lea ecx, [ebp - 0x9c]
call fcn.1004e720
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x1000d382
push dword [ebp - 0x18]
call fcn.10052b17
pop ecx
jmp 0x1000d2d8
mov esi, 0x206
push esi
lea eax, [ebp + 2]
push ebx
push eax
mov word [ebp], bx
call fcn.10076580
push esi
lea eax, [ebp + 0x20a]
push ebx
push eax
mov word [ebp + 0x208], bx
call fcn.10076580
mov ecx, dword [ebp - 0x10]
add esp, 0x18
push str.Application
call fcn.1004e7f0
cmp eax, ebx
je 0x1000d2d8
mov ecx, eax
call fcn.1004e7c0
jmp 0x1000d467
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d3e5
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d3ea
mov dword [ebp - 0x14], ebx
jmp 0x1000d3f3
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001db01
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001db01
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x54]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 1
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x220]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 2
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.100017f0
mov ecx, esi
call fcn.1004e830
mov esi, eax
cmp esi, ebx
jne 0x1000d3cf
mov ecx, dword [ebp - 0x10]
push str.ImeUtil
call fcn.1004e7f0
cmp eax, ebx
je 0x1000d2d8
mov ecx, eax
call fcn.1004e7c0
jmp 0x1000d52a
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d4a8
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d4ad
mov dword [ebp - 0x14], ebx
jmp 0x1000d4b6
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001db01
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001db01
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x38]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x338]
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 4
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.100017f0
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.100017f0
mov ecx, esi
call fcn.1004e830
mov esi, eax
cmp esi, ebx
jne 0x1000d492
mov ecx, dword [ebp - 0x10]
push str.AppService
call fcn.1004e7f0
cmp eax, ebx
jne 0x1000d55b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10004e0a
mov eax, ebx
jmp 0x1000d2e9
mov ecx, eax
call fcn.1004e7c0
jmp 0x1000d673
push 0x54
call fcn.10052ae7
cmp eax, ebx
pop ecx
je 0x1000d57e
mov ecx, eax
call fcn.1000d20d
mov esi, eax
jmp 0x1000d580
xor esi, esi
push 0x10174c80
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.1004e7f0
cmp eax, ebx
je 0x1000d5ca
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d5a3
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d5a7
xor eax, eax
jmp 0x1000d5ad
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001db01
pop ecx
pop ecx
lea eax, [ebp + 0x208]
push eax
mov ecx, esi
call fcn.100017c0
push str.ItemDisplayName
mov ecx, edi
call fcn.1004e7f0
cmp eax, ebx
je 0x1000d612
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d5ea
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d5ee
xor eax, eax
jmp 0x1000d5f4
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001db01
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x1c]
push eax
call fcn.100017c0
push str.ItemServiceDescription
mov ecx, edi
call fcn.1004e7f0
cmp eax, ebx
je 0x1000d65a
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d632
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d636
xor eax, eax
jmp 0x1000d63c
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001db01
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x38]
push eax
call fcn.100017c0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x334]
call fcn.1004de53
mov ecx, edi
call fcn.1004e830
mov edi, eax
cmp edi, ebx
jne 0x1000d567
push dword [ebp - 0x18]
call fcn.10052b17
xor ebx, ebx
pop ecx
inc ebx
jmp 0x1000d545