Function at 0x1000d03b
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x10207390]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x90
mov eax, 0x1017b59c
call fcn.1008546d
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x9c]
call fcn.1005e8b0
push 0x101863dc
push str.CONFIGURE
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
jne 0x1000d0c8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10005414
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.1008545e
add ebp, 0x414
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.100621c1
push edi
push ebx
push eax
mov dword [ebp - 0x18], eax
call fcn.10085bc0
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10086310
add esp, 0x1c
push ebx
push ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c]
call fcn.10060db0
push str.TheConfigure
lea ecx, [ebp - 0x9c]
call fcn.1005ddb0
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x1000d13c
push dword [ebp - 0x18]
call fcn.100621bc
pop ecx
jmp 0x1000d092
mov esi, 0x206
push esi
lea eax, [ebp + 2]
push ebx
push eax
mov word [ebp], bx
call fcn.10085bc0
push esi
lea eax, [ebp + 0x20a]
push ebx
push eax
mov word [ebp + 0x208], bx
call fcn.10085bc0
mov ecx, dword [ebp - 0x10]
add esp, 0x18
push str.Application
call fcn.1005de80
cmp eax, ebx
je 0x1000d092
mov ecx, eax
call fcn.1005de50
jmp 0x1000d221
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d19f
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d1a4
mov dword [ebp - 0x14], ebx
jmp 0x1000d1ad
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001c35f
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001c35f
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x54]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 1
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x1b0]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 2
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.100017c0
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.100017c0
mov ecx, esi
call fcn.1005dec0
mov esi, eax
cmp esi, ebx
jne 0x1000d189
mov ecx, dword [ebp - 0x10]
push str.ImeUtil
call fcn.1005de80
cmp eax, ebx
je 0x1000d092
mov ecx, eax
call fcn.1005de50
jmp 0x1000d2e4
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000d262
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d267
mov dword [ebp - 0x14], ebx
jmp 0x1000d270
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.1001c35f
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.1001c35f
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x38]
call fcn.100015f0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.100015f0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x2c8]
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 4
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.100017c0
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.100017c0
mov ecx, esi
call fcn.1005dec0
mov esi, eax
cmp esi, ebx
jne 0x1000d24c
mov ecx, dword [ebp - 0x10]
push str.AppService
call fcn.1005de80
cmp eax, ebx
jne 0x1000d315
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10005414
mov eax, ebx
jmp 0x1000d0a3
mov ecx, eax
call fcn.1005de50
jmp 0x1000d42d
push 0x54
call fcn.10062191
cmp eax, ebx
pop ecx
je 0x1000d338
mov ecx, eax
call fcn.1000cfc7
mov esi, eax
jmp 0x1000d33a
xor esi, esi
push 0x10186ca0
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.1005de80
cmp eax, ebx
je 0x1000d384
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d35d
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d361
xor eax, eax
jmp 0x1000d367
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001c35f
pop ecx
pop ecx
lea eax, [ebp + 0x208]
push eax
mov ecx, esi
call fcn.10003610
push str.ItemDisplayName
mov ecx, edi
call fcn.1005de80
cmp eax, ebx
je 0x1000d3cc
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d3a4
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d3a8
xor eax, eax
jmp 0x1000d3ae
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001c35f
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x1c]
push eax
call fcn.10003610
push str.ItemServiceDescription
mov ecx, edi
call fcn.1005de80
cmp eax, ebx
je 0x1000d414
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000d3ec
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000d3f0
xor eax, eax
jmp 0x1000d3f6
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.1001c35f
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x38]
push eax
call fcn.10003610
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x2c4]
call fcn.10018f50
mov ecx, edi
call fcn.1005dec0
mov edi, eax
cmp edi, ebx
jne 0x1000d321
push dword [ebp - 0x18]
call fcn.100621bc
xor ebx, ebx
pop ecx
inc ebx
jmp 0x1000d2ff