Function at 0x411803e0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4f0
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x41359af8]
xor rax, rsp
mov qword [rsp + 0x4e0], rax
mov r14, rcx
mov dword [rcx], 1
mov word [rsp + 0xf0], 0
xor edx, edx
mov r8d, 0x3e6
lea rcx, [r11 - 0x426]
call fcn.412121c0
lea rcx, [rsp + 0x60]
call fcn.4120a860
nop
lea r8, str.DICT
lea rdx, str.HXWDATA
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
jne 0x411804a2
lea rax, [0x412a4888]
mov qword [rsp + 0x60], rax
lea rax, [0x41361370]
mov rcx, qword [rsp + 0xb8]
cmp rcx, rax
je 0x41180491
call fcn.41212980
lea rcx, [rsp + 0x60]
call fcn.4120a4b0
xor eax, eax
jmp 0x411808e8
mov rdx, rax
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov rdx, rdi
mov rcx, qword [r14 + 8]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
lea eax, [rbx + 1]
mov edi, eax
mov ecx, eax
call fcn.4120fd60
mov r15, rax
mov qword [rsp + 0x20], rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.412121c0
mov r8, rbx
mov rdx, rsi
mov rcx, r15
call fcn.4121e450
xor r9d, r9d
xor r8d, r8d
mov rdx, r15
lea rcx, [rsp + 0x60]
call fcn.4120e060
lea rdx, str.TheWord
lea rcx, [rsp + 0x60]
call fcn.41209d70
test rax, rax
jne 0x41180558
lea rax, [0x412a4888]
mov qword [rsp + 0x60], rax
lea rax, [0x41361370]
mov rcx, qword [rsp + 0xb8]
cmp rcx, rax
je 0x41180547
call fcn.41212980
lea rcx, [rsp + 0x60]
call fcn.4120a4b0
xor eax, eax
jmp 0x411808e8
lea rdx, str.list
mov rcx, rax
call fcn.41209e00
mov rcx, rax
call fcn.41209dc0
mov r13, rax
test rax, rax
je 0x411808a6
xor r12d, r12d
movabs r15, 0x7ffffffffffffffe
nop
nop
mov ecx, 0x50
call fcn.41211580
mov rbx, rax
test rax, rax
je 0x411805c8
mov qword [rax + 0x20], 7
mov qword [rax + 0x18], r12
mov word [rax + 8], 0
mov qword [rax + 0x48], 7
mov qword [rax + 0x40], r12
mov word [rax + 0x30], 0
jmp 0x411805cb
mov rbx, r12
lea rdx, [0x412b711c]
mov rcx, r13
call fcn.4120b8a0
test rax, rax
je 0x411806fb
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.41035a10
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xf0]
repne scasw ax, word [rdi]
not rcx
lea rsi, [rcx - 1]
mov rdx, qword [rbx + 0x20]
cmp rdx, 8
jb 0x4118061e
lea rdi, [rbx + 8]
mov rax, qword [rdi]
jmp 0x41180625
lea rdi, [rbx + 8]
mov rax, rdi
lea rcx, [rsp + 0xf0]
cmp rcx, rax
jb 0x4118067c
cmp rdx, 8
jb 0x4118063d
mov rcx, qword [rdi]
jmp 0x41180640
mov rcx, rdi
mov rax, qword [rbx + 0x18]
lea rcx, [rcx + rax*2]
lea rax, [rsp + 0xf0]
cmp rcx, rax
jbe 0x4118067c
cmp rdx, 8
jb 0x4118065e
mov rdi, qword [rdi]
lea r8, [rsp + 0xf0]
sub r8, rdi
sar r8, 1
mov r9, rsi
mov rdx, rbx
mov rcx, rbx
call fcn.41022de0
jmp 0x411806fb
cmp rsi, r15
jbe 0x41180686
call fcn.4120fbc0
mov rax, qword [rbx + 0x20]
cmp rax, rsi
jae 0x411806a0
mov r8, qword [rbx + 0x18]
mov rdx, rsi
mov rcx, rbx
call fcn.41022ab0
jmp 0x411806b9
test rsi, rsi
jne 0x411806b9
mov qword [rbx + 0x18], r12
cmp rax, 8
jb 0x411806b2
mov rdi, qword [rdi]
mov word [rdi], 0
jmp 0x411806fb
test rsi, rsi
je 0x411806fb
mov rdx, qword [rbx + 0x20]
cmp rdx, 8
jb 0x411806cd
mov rcx, qword [rdi]
jmp 0x411806d0
mov rcx, rdi
lea rbp, [rsi + rsi]
add rdx, rdx
mov r9, rbp
lea r8, [rsp + 0xf0]
call fcn.412118b0
mov qword [rbx + 0x18], rsi
cmp qword [rbx + 0x20], 8
jb 0x411806f5
mov rdi, qword [rdi]
mov word [rdi + rbp], 0
lea rdx, [0x412b7118]
mov rcx, r13
call fcn.4120b8a0
test rax, rax
je 0x41180836
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.41035a10
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0xf0]
repne scasw ax, word [rdi]
not rcx
lea rbp, [rcx - 1]
mov rdx, qword [rbx + 0x48]
cmp rdx, 8
jb 0x4118074e
lea rdi, [rbx + 0x30]
mov rax, qword [rdi]
jmp 0x41180755
lea rdi, [rbx + 0x30]
mov rax, rdi
lea rcx, [rsp + 0xf0]
cmp rcx, rax
jb 0x411807b1
cmp rdx, 8
jb 0x4118076d
mov rcx, qword [rdi]
jmp 0x41180770
mov rcx, rdi
mov rax, qword [rbx + 0x40]
lea rcx, [rcx + rax*2]
lea rax, [rsp + 0xf0]
cmp rcx, rax
jbe 0x411807b1
cmp rdx, 8
jb 0x4118078e
mov rdi, qword [rdi]
lea r8, [rsp + 0xf0]
sub r8, rdi
sar r8, 1
mov r9, rbp
lea rdx, [rbx + 0x28]
lea rcx, [rbx + 0x28]
call fcn.41022de0
jmp 0x41180836
cmp rbp, r15
jbe 0x411807bb
call fcn.4120fbc0
mov rax, qword [rbx + 0x48]
cmp rax, rbp
jae 0x411807d6
mov r8, qword [rbx + 0x40]
mov rdx, rbp
lea rcx, [rbx + 0x28]
call fcn.41022ab0
jmp 0x411807ef
test rbp, rbp
jne 0x411807ef
mov qword [rbx + 0x40], r12
cmp rax, 8
jb 0x411807e8
mov rdi, qword [rdi]
mov word [rdi], 0
jmp 0x41180836
test rbp, rbp
je 0x41180836
mov rdx, qword [rbx + 0x48]
cmp rdx, 8
jb 0x41180803
mov rcx, qword [rdi]
jmp 0x41180806
mov rcx, rdi
lea r12, [rbp + rbp]
add rdx, rdx
mov r9, r12
lea r8, [rsp + 0xf0]
call fcn.412118b0
mov qword [rbx + 0x40], rbp
cmp qword [rbx + 0x48], 8
jb 0x4118082c
mov rdi, qword [rdi]
mov word [r12 + rdi], 0
xor r12d, r12d
mov rcx, r13
call fcn.41209ee0
mov r13, rax
mov qword [rsp + 0x48], 7
mov qword [rsp + 0x40], r12
mov word [rsp + 0x30], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x28]
call fcn.41022de0
mov qword [rsp + 0x50], rbx
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0xd0]
mov rcx, qword [r14 + 0x10]
call fcn.410ed280
nop
cmp qword [rsp + 0x48], 8
jb 0x41180898
mov rcx, qword [rsp + 0x30]
call fcn.41210d60
test r13, r13
jne 0x41180590
mov r15, qword [rsp + 0x20]
test r15, r15
je 0x411808b4
mov rcx, r15
call fcn.41212980
nop
lea rax, [0x412a4888]
mov qword [rsp + 0x60], rax
lea rax, [0x41361370]
mov rcx, qword [rsp + 0xb8]
cmp rcx, rax
je 0x411808d9
call fcn.41212980
lea rcx, [rsp + 0x60]
call fcn.4120a4b0
mov eax, 1
mov rcx, qword [rsp + 0x4e0]
xor rcx, rsp
call fcn.41211b80
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret