Function at 0x411bf0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov r15, rcx
mov ecx, 0x10
mov rsi, rdx
lea rbx, [rsp + 0x30]
test r15, r15
mov ebp, r9d
mov rdi, rbx
rep stosq qword [rdi], rax
je 0x411c2b
cmp word [r15], 0x5a4d
je 0x411c44
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rdi, dword [r15 + 0x3c]
add rdi, r15
cmp dword [rdi], 0x4550
jne 0x411c2b
mov edx, 0x23b3e08a
mov qword [rsp + 0x110], r8
lea rcx, [0x0041dae0]
call fcn.00411220
test byte [rdi + 0x17], 0x20
je 0x411c2b
lea rcx, [0x0041dac0]
mov edx, 0x62978e0a
call fcn.00411220
movsxd rdx, dword [r15 + 0x3c]
add rdx, r15
lea rax, [rdx + 0x88]
mov rdx, qword [rdx + 0x88]
mov rcx, rdx
mov qword [rbx], rdx
mov rdx, qword [rax + 8]
shr rcx, 0x20
test ecx, ecx
mov qword [rbx + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rbx + 0x10], rdx
mov rdx, qword [rax + 0x18]
mov qword [rbx + 0x18], rdx
mov rdx, qword [rax + 0x20]
mov qword [rbx + 0x20], rdx
mov rdx, qword [rax + 0x28]
mov qword [rbx + 0x28], rdx
mov rdx, qword [rax + 0x30]
mov qword [rbx + 0x30], rdx
mov rdx, qword [rax + 0x38]
mov qword [rbx + 0x38], rdx
mov rdx, qword [rax + 0x40]
mov qword [rbx + 0x40], rdx
mov rdx, qword [rax + 0x48]
mov qword [rbx + 0x48], rdx
mov rdx, qword [rax + 0x50]
mov qword [rbx + 0x50], rdx
mov rdx, qword [rax + 0x58]
mov qword [rbx + 0x58], rdx
mov rdx, qword [rax + 0x60]
mov qword [rbx + 0x60], rdx
mov rdx, qword [rax + 0x68]
mov qword [rbx + 0x68], rdx
mov rdx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rbx + 0x70], rdx
mov qword [rbx + 0x78], rax
je 0x411c2b
movsxd rax, dword [rsp + 0x30]
test eax, eax
je 0x411c2b
lea rdi, [rax + r15]
mov edx, 0x3e9499ae
lea rcx, [0x0041da40]
call fcn.00411220
movsxd rbx, dword [rdi + 0x1c]
lea rax, [0x0041be40]
mov r8, qword [rsp + 0x110]
add rbx, r15
cmp rsi, rax
je 0x411f20
test rsi, rsi
je 0x411f66
cmp byte [rsi], 0
je 0x411f20
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x411f50
mov eax, dword [rbx]
mov qword [rsp + 0x28], rbx
xor r12d, r12d
mov dword [rsp + 0x24], eax
movsxd rax, dword [rdi + 0x20]
mov r13d, dword [rax + r15]
jmp 0x411dc7
movsxd rbx, dword [rsp + 0x24]
add r14d, 1
test rdi, rdi
jne 0x411e30
add r13d, 1
add r12d, 1
cmp r12d, r14d
jg 0x411f50
mov dword [rsp + 0x24], ebx
lea rcx, [0x0041da00]
mov edx, 0x31edecea
movsxd rdi, r13d
call fcn.00411220
mov edx, 0x38bf44e
add rdi, r15
lea rcx, [0x0041d9e0]
call fcn.00411220
lea rdx, [0x0041be40]
test rax, rax
je 0x411e0e
cmp qword [rax], 0
lea rdx, [rax + 0x10]
lea rax, [0x0041be40]
cmove rdx, rax
mov rcx, rdi
call fcn.00411af0
test eax, eax
jne 0x411da0
add qword [rsp + 0x28], 4
mov rax, qword [rsp + 0x28]
movsxd rbx, dword [rax]
jmp 0x411da9
mov rcx, rdi
call sub.msvcrt.dll_strlen
cmp rdi, rsi
lea r13d, [r13 + rax + 1]
je 0x411e55
mov rdx, rdi
mov rcx, rsi
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x411db6
mov ecx, ebp
call fcn.0040bc40
mov ecx, dword [0x00531874]
test al, al
jne 0x412012
call fcn.0040bc40
lea rcx, [0x0041d960]
mov edx, 0x23705fee
call fcn.00411220
mov edx, 0x37e703aa
lea rcx, [0x0041d920]
call fcn.00411220
mov edx, 0x2aaac48e
lea rcx, [0x0041d900]
call fcn.00411220
mov edx, 0x38d36b8a
lea rcx, [0x0041d8c0]
call fcn.00411220
mov edx, 0x7ed24a2e
lea rcx, [0x0041d880]
call fcn.00411220
mov edx, 0x530ac66a
lea rcx, [0x0041d860]
call fcn.00411220
mov edx, 0x23f658ce
lea rcx, [0x0041d820]
call fcn.00411220
mov ecx, ebp
call fcn.0040bc40
movsxd rdx, dword [rsp + 0x24]
lea r10, [rbx + r15]
add rdx, r15
test al, al
mov rbx, rdx
cmovne rbx, r10
mov edx, 0x6bf8986e
lea rcx, [0x0041d780]
call fcn.00411220
jmp 0x411c2d
mov edx, 0x6acdcc4a
mov qword [rsp + 0x110], r8
lea rcx, [0x0041d7e0]
call fcn.00411220
mov r8, qword [rsp + 0x110]
movsxd rbx, dword [rbx + r8*4 - 4]
add rbx, r15
jmp 0x411f02
lea rcx, [0x0041d780]
mov edx, 0x6bf8986e
call fcn.00411220
jmp 0x411c2b
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x411f50
mov ecx, dword [rbx]
mov rsi, rbx
xor r13d, r13d
mov qword [rsp + 0x28], rax
movsxd rdx, dword [rdi + 0x20]
mov dword [rsp + 0x24], ecx
mov r12d, dword [rdx + r15]
jmp 0x411fba
add rsi, 4
movsxd rbx, dword [rsi]
test rdi, rdi
je 0x411e55
mov rcx, rdi
add r13d, 1
call sub.msvcrt.dll_strlen
cmp r14d, r13d
lea r12d, [r12 + rax + 1]
jl 0x411f50
mov dword [rsp + 0x24], ebx
lea rcx, [0x0041da00]
mov edx, 0x31edecea
movsxd rdi, r12d
call fcn.00411220
mov edx, 0x38bf44e
add rdi, r15
lea rcx, [0x0041d9e0]
call fcn.00411220
mov rcx, qword [rsp + 0x28]
test rax, rax
mov rdx, rcx
je 0x411ffb
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmove rdx, rcx
mov rcx, rdi
call fcn.00411af0
test eax, eax
je 0x411f90
add r14d, 1
movsxd rbx, dword [rsp + 0x24]
jmp 0x411f97
call fcn.0040bc40
test al, al
je 0x411e6f
lea rcx, [0x0041d980]
mov edx, 0x635196ca
call fcn.00411220
jmp 0x411e6f