Function at 0x1000c679
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
sub esp, 0x410
lea ebp, [esp - 4]
mov eax, dword [0x10139d20]
xor eax, ebp
mov dword [ebp + 0x410], eax
push 0x90
mov eax, 0x100e7bba
call fcn.100773f7
mov esi, dword [ebp + 0x41c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x9c]
call fcn.100b4a50
push 0x100f24b8
push str.CONFIGURE
xor ebx, ebx
push esi
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
jne 0x1000c706
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10005a2e
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x410]
xor ecx, ebp
call fcn.100773e8
add ebp, 0x414
leave
ret 4
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.10054d7d
push edi
push ebx
push eax
mov dword [ebp - 0x18], eax
call fcn.10077be0
push esi
push dword [ebp - 0x10]
push dword [ebp - 0x18]
call fcn.10078320
add esp, 0x1c
push ebx
push ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c]
call fcn.100b6f60
push str.TheConfigure
lea ecx, [ebp - 0x9c]
call fcn.100b3f70
cmp eax, ebx
mov dword [ebp - 0x10], eax
jne 0x1000c77a
push dword [ebp - 0x18]
call fcn.10054d78
pop ecx
jmp 0x1000c6d0
mov esi, 0x206
push esi
lea eax, [ebp + 2]
push ebx
push eax
mov word [ebp], bx
call fcn.10077be0
push esi
lea eax, [ebp + 0x20a]
push ebx
push eax
mov word [ebp + 0x208], bx
call fcn.10077be0
mov ecx, dword [ebp - 0x10]
add esp, 0x18
push str.Application
call fcn.100b4040
cmp eax, ebx
je 0x1000c6d0
mov ecx, eax
call fcn.100b4010
jmp 0x1000c85f
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000c7dd
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000c7e2
mov dword [ebp - 0x14], ebx
jmp 0x1000c7eb
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.100195a1
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.100195a1
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x54]
call fcn.10001df0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 1
call fcn.10001df0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x200]
mov eax, dword [ecx]
lea edx, [ebp - 0x54]
push edx
lea edx, [ebp - 0x38]
push edx
mov byte [ebp - 4], 2
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x38]
call fcn.10001fc0
push ebx
push 1
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], bl
call fcn.10001fc0
mov ecx, esi
call fcn.100b4080
mov esi, eax
cmp esi, ebx
jne 0x1000c7c7
mov ecx, dword [ebp - 0x10]
push str.ImeUtil
call fcn.100b4040
cmp eax, ebx
je 0x1000c6d0
mov ecx, eax
call fcn.100b4010
jmp 0x1000c922
mov edi, dword [esi + 0x20]
mov ecx, dword [esi + 0x18]
add edi, 8
cmp ecx, ebx
je 0x1000c8a0
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000c8a5
mov dword [ebp - 0x14], ebx
jmp 0x1000c8ae
mov eax, dword [eax + 0x20]
add eax, 8
mov dword [ebp - 0x14], eax
lea eax, [ebp]
push eax
push edi
call fcn.100195a1
lea eax, [ebp + 0x208]
push eax
push dword [ebp - 0x14]
call fcn.100195a1
add esp, 0x10
lea eax, [ebp + 0x208]
push eax
lea ecx, [ebp - 0x38]
call fcn.10001df0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 3
call fcn.10001df0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x318]
mov eax, dword [ecx]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x54]
push edx
mov byte [ebp - 4], 4
call dword [eax]
push ebx
push 1
lea ecx, [ebp - 0x54]
call fcn.10001fc0
push ebx
push 1
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], bl
call fcn.10001fc0
mov ecx, esi
call fcn.100b4080
mov esi, eax
cmp esi, ebx
jne 0x1000c88a
mov ecx, dword [ebp - 0x10]
push str.AppService
call fcn.100b4040
cmp eax, ebx
jne 0x1000c953
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.10005a2e
mov eax, ebx
jmp 0x1000c6e1
mov ecx, eax
call fcn.100b4010
jmp 0x1000ca6b
push 0x54
call fcn.10054d4d
cmp eax, ebx
pop ecx
je 0x1000c976
mov ecx, eax
call fcn.1000c605
mov esi, eax
jmp 0x1000c978
xor esi, esi
push 0x100f2c74
mov ecx, edi
mov dword [ebp - 0x10], esi
call fcn.100b4040
cmp eax, ebx
je 0x1000c9c2
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000c99b
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000c99f
xor eax, eax
jmp 0x1000c9a5
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.100195a1
pop ecx
pop ecx
lea eax, [ebp + 0x208]
push eax
mov ecx, esi
call fcn.10003cc0
push str.ItemDisplayName
mov ecx, edi
call fcn.100b4040
cmp eax, ebx
je 0x1000ca0a
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000c9e2
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000c9e6
xor eax, eax
jmp 0x1000c9ec
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.100195a1
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x1c]
push eax
call fcn.10003cc0
push str.ItemServiceDescription
mov ecx, edi
call fcn.100b4040
cmp eax, ebx
je 0x1000ca52
mov ecx, dword [eax + 0x18]
cmp ecx, ebx
je 0x1000ca2a
mov eax, dword [ecx]
call dword [eax + 0x30]
cmp eax, ebx
jne 0x1000ca2e
xor eax, eax
jmp 0x1000ca34
mov eax, dword [eax + 0x20]
add eax, 8
lea ecx, [ebp + 0x208]
push ecx
push eax
call fcn.100195a1
pop ecx
pop ecx
lea eax, [ebp + 0x208]
lea ecx, [esi + 0x38]
push eax
call fcn.10003cc0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x314]
call fcn.10007912
mov ecx, edi
call fcn.100b4080
mov edi, eax
cmp edi, ebx
jne 0x1000c95f
push dword [ebp - 0x18]
call fcn.10054d78
xor ebx, ebx
pop ecx
inc ebx
jmp 0x1000c93d