Function at 0x402e10
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov rbx, rcx
mov rbp, rdx
mov ecx, 0x10
lea rdx, [rsp + 0x30]
test rbx, rbx
mov rdi, rdx
rep stosq qword [rdi], rax
je 0x402e47
cmp word [rbx], 0x5a4d
je 0x402e60
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
jne 0x402e47
test byte [rcx + 0x17], 0x20
je 0x402e47
lea rax, [rcx + 0x88]
mov rcx, qword [rcx + 0x88]
mov rsi, rcx
mov qword [rdx], rcx
mov rcx, qword [rax + 8]
shr rsi, 0x20
test esi, esi
mov qword [rdx + 8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 0x18]
mov qword [rdx + 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rdx + 0x20], rcx
mov rcx, qword [rax + 0x28]
mov qword [rdx + 0x28], rcx
mov rcx, qword [rax + 0x30]
mov qword [rdx + 0x30], rcx
mov rcx, qword [rax + 0x38]
mov qword [rdx + 0x38], rcx
mov rcx, qword [rax + 0x40]
mov qword [rdx + 0x40], rcx
mov rcx, qword [rax + 0x48]
mov qword [rdx + 0x48], rcx
mov rcx, qword [rax + 0x50]
mov qword [rdx + 0x50], rcx
mov rcx, qword [rax + 0x58]
mov qword [rdx + 0x58], rcx
mov rcx, qword [rax + 0x60]
mov qword [rdx + 0x60], rcx
mov rcx, qword [rax + 0x68]
mov qword [rdx + 0x68], rcx
mov rcx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rdx + 0x70], rcx
mov qword [rdx + 0x78], rax
je 0x402e47
movsxd rsi, dword [rsp + 0x30]
test esi, esi
je 0x402e47
lea rcx, [0x004362e0]
mov edx, 0x70430cc1
add rsi, rbx
call fcn.00411750
mov edx, 0x4eea2ca3
mov rcx, rax
call fcn.00411560
movsxd rdi, dword [rsi + 0x1c]
mov edx, 0x7a8d13d3
xor ecx, ecx
mov eax, dword [rsi + 0x18]
add rdi, rbx
mov dword [rsp + 0x28], eax
mov eax, dword [rdi]
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov r14d, dword [rax + rbx]
call fcn.00411750
lea rdx, section..rdata
test rax, rax
je 0x402f80
cmp qword [rax], 0
lea rcx, [rax + 0x10]
cmovne rdx, rcx
cmp rbp, rdx
jne 0x402fb0
movsxd rax, dword [rdi - 4]
add rbx, rax
lea rcx, [0x004360a0]
mov edx, 0x33833e03
call fcn.00411560
jmp 0x402e49
mov rcx, rbp
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x402f85
mov eax, dword [rsp + 0x28]
test eax, eax
js 0x4030b4
xor r12d, r12d
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rbp
nop dword [rax + rax]
lea rcx, [0x004362c0]
mov edx, 0x5da44499
movsxd rdi, r14d
add rdi, qword [rsp + 0x100]
call fcn.00411560
lea rsi, section..rdata
test rax, rax
je 0x40301b
cmp qword [rax], 0
lea rsi, [rax + 0x10]
lea rax, section..rdata
cmove rsi, rax
test rdi, rdi
je 0x403090
mov rcx, rdi
call sub.msvcrt.dll_strlen
test rax, rax
mov r13, rax
je 0x403182
lea rbp, [rax + rdi]
mov r15, rdi
xor ebx, ebx
jmp 0x40305e
mov rcx, rsi
add rbx, 1
call sub.msvcrt.dll_strlen
cmp rbx, rax
je 0x4030d0
add r15, 1
cmp rbp, r15
je 0x403182
movzx eax, byte [r15]
lea ecx, [rax - 0x41]
mov edx, eax
xor edx, 0x20
cmp cl, 0x1a
cmovb eax, edx
movzx edx, byte [rsi + rbx]
lea r8d, [rdx - 0x41]
mov ecx, edx
xor ecx, 0x20
cmp r8b, 0x1a
cmovb edx, ecx
cmp dl, al
je 0x403040
xor ebx, ebx
jmp 0x403051
add qword [rsp + 0x20], 4
add r14d, 1
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
add r12d, 1
cmp dword [rsp + 0x28], r12d
jge 0x402fe0
lea rcx, [0x004360a0]
mov edx, 0x33833e03
call fcn.00411560
jmp 0x402e47
add dword [rsp + 0x28], 1
cmp qword [rsp + 0x108], rdi
jne 0x403160
mov edx, 0x297fcdb
mov rbx, qword [rsp + 0x100]
lea rcx, [0x004362a0]
call fcn.00411560
mov edx, 0x70430cc1
lea rcx, [0x00436260]
call fcn.00411560
mov edx, 0x7a8d13d3
lea rcx, [0x00436240]
call fcn.00411560
mov edx, 0x3f163529
lea rcx, [0x00436200]
call fcn.00411560
mov edx, 0x78f5af8b
lea rcx, [0x004361c0]
call fcn.00411560
mov edx, 0x75c357d1
lea rcx, [0x004361a0]
call fcn.00411560
movsxd rax, dword [rsp + 0x2c]
add rbx, rax
jmp 0x402f8c
mov rcx, qword [rsp + 0x108]
mov rdx, rdi
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4030e3
lea r14d, [r14 + r13 + 1]
jmp 0x4030a5
add qword [rsp + 0x20], 4
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
jmp 0x4030d5