Function at 0x403dc1
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x4f2720]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x90
mov eax, 0x4bb94e
call fcn.004603b7
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x9c]
call fcn.0043fbe0
push 0x4c3bd0
push str.CONFIGURE
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
jne 0x403e4e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.00403649
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.0045fa14
add ebp, 0x414
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.00442ee2
push edi
push ebx
push eax
mov dword [ebp - 0x14], eax
call fcn.0045fa70
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call fcn.004604d0
add esp, 0x1c
push ebx
push ebx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9c]
call fcn.00442000
push str.TheConfigure
lea ecx, [ebp - 0x9c]
call fcn.0043f100
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x403ec2
push dword [ebp - 0x14]
call fcn.00402ac9
pop ecx
jmp 0x403e18
mov esi, 0x206
push esi
lea eax, [ebp + 2]
push ebx
push eax
mov word [ebp], bx
call fcn.0045fa70
push esi
lea eax, [ebp + 0x20a]
push ebx
push eax
mov word [ebp + 0x208], bx
call fcn.0045fa70
mov ecx, dword [ebp - 0x10]
add esp, 0x18
push str.Application
call fcn.0043f1d0
cmp eax, ebx
je 0x403e18
mov ecx, eax
call fcn.0043f1a0
jmp 0x403fa7
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x403f25
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x403f2a
mov dword [ebp - 0x18], ebx
jmp 0x403f33
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x18], eax
lea eax, [ebp]
push eax
push edi
call fcn.0042c392
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x18]
call fcn.0042c392
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x54]
call fcn.00401130
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 1
call fcn.00401130
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x920]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 2
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.00401330
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.00401330
mov ecx, esi
call fcn.0043f210
mov esi, eax
cmp esi, ebx
jne 0x403f0f
mov ecx, dword [ebp - 0x10]
push str.AppService
call fcn.0043f1d0
cmp eax, ebx
jne 0x403fd8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.00403649
mov eax, ebx
jmp 0x403e29
mov ecx, eax
call fcn.0043f1a0
jmp 0x4040f0
push 0x54
call fcn.00442eb7
cmp eax, ebx
pop ecx
je 0x403ffb
mov ecx, eax
call fcn.004037e9
mov esi, eax
jmp 0x403ffd
xor esi, esi
push str.ItemServiceName
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.0043f1d0
cmp eax, ebx
je 0x404047
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x404020
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x404024
xor eax, eax
jmp 0x40402a
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.0042c392
pop ecx
pop ecx
lea eax, [ebp + 0x208]
push eax
mov ecx, esi
call fcn.00401300
push str.ItemDisplayName
mov ecx, edi
call fcn.0043f1d0
cmp eax, ebx
je 0x40408f
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x404067
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x40406b
xor eax, eax
jmp 0x404071
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.0042c392
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x1c]
push eax
call fcn.00401300
push str.ItemServiceDescription
mov ecx, edi
call fcn.0043f1d0
cmp eax, ebx
je 0x4040d7
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x4040af
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x4040b3
xor eax, eax
jmp 0x4040b9
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.0042c392
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x38]
push eax
call fcn.00401300
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x924]
call fcn.00418161
mov ecx, edi
call fcn.0043f210
mov edi, eax
cmp edi, ebx
jne 0x403fe4
push dword [ebp - 0x14]
call fcn.00402ac9
xor ebx, ebx
pop ecx
inc ebx
jmp 0x403fc2