Function at 0x412e70
Capabilities:
Parse pe header

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov rbx, rcx
mov rbp, rdx
mov ecx, 0x10
lea rdx, [rsp + 0x30]
test rbx, rbx
mov rdi, rdx
rep stosq qword [rdi], rax
je 0x412ea7
cmp word [rbx], 0x5a4d
je 0x412ec0
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
jne 0x412ea7
test byte [rcx + 0x17], 0x20
je 0x412ea7
lea rax, [rcx + 0x88]
mov rcx, qword [rcx + 0x88]
mov rsi, rcx
mov qword [rdx], rcx
mov rcx, qword [rax + 8]
shr rsi, 0x20
test esi, esi
mov qword [rdx + 8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 0x18]
mov qword [rdx + 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rdx + 0x20], rcx
mov rcx, qword [rax + 0x28]
mov qword [rdx + 0x28], rcx
mov rcx, qword [rax + 0x30]
mov qword [rdx + 0x30], rcx
mov rcx, qword [rax + 0x38]
mov qword [rdx + 0x38], rcx
mov rcx, qword [rax + 0x40]
mov qword [rdx + 0x40], rcx
mov rcx, qword [rax + 0x48]
mov qword [rdx + 0x48], rcx
mov rcx, qword [rax + 0x50]
mov qword [rdx + 0x50], rcx
mov rcx, qword [rax + 0x58]
mov qword [rdx + 0x58], rcx
mov rcx, qword [rax + 0x60]
mov qword [rdx + 0x60], rcx
mov rcx, qword [rax + 0x68]
mov qword [rdx + 0x68], rcx
mov rcx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rdx + 0x70], rcx
mov qword [rdx + 0x78], rax
je 0x412ea7
movsxd rsi, dword [rsp + 0x30]
test esi, esi
je 0x412ea7
lea rcx, [0x0048a860]
mov edx, 0x413f63c5
add rsi, rbx
call fcn.00402580
mov edx, 0x2328cb2f
mov rcx, rax
call fcn.00402310
movsxd rdi, dword [rsi + 0x1c]
mov edx, 0x7bca0f1f
xor ecx, ecx
mov eax, dword [rsi + 0x18]
add rdi, rbx
mov dword [rsp + 0x28], eax
mov eax, dword [rdi]
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov r14d, dword [rax + rbx]
call fcn.00402580
lea rdx, [0x00489bb8]
test rax, rax
je 0x412fe0
cmp qword [rax], 0
lea rcx, [rax + 0x10]
cmovne rdx, rcx
cmp rbp, rdx
jne 0x413010
movsxd rax, dword [rdi - 4]
add rbx, rax
lea rcx, [0x0048a640]
mov edx, 0x3b77a20f
call fcn.00402310
jmp 0x412ea9
mov rcx, rbp
call sub.msvcrt.dll_exit_34
test eax, eax
je 0x412fe5
mov eax, dword [rsp + 0x28]
test eax, eax
js 0x413114
xor r12d, r12d
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rbp
nop dword [rax + rax]
lea rcx, [0x0048a840]
mov edx, 0x837dafd
movsxd rdi, r14d
add rdi, qword [rsp + 0x100]
call fcn.00402310
lea rsi, [0x00489bb8]
test rax, rax
je 0x41307b
cmp qword [rax], 0
lea rsi, [rax + 0x10]
lea rax, [0x00489bb8]
cmove rsi, rax
test rdi, rdi
je 0x4130f0
mov rcx, rdi
call sub.msvcrt.dll_exit_35
test rax, rax
mov r13, rax
je 0x4131e6
lea rbp, [rax + rdi]
mov r15, rdi
xor ebx, ebx
jmp 0x4130be
mov rcx, rsi
add rbx, 1
call sub.msvcrt.dll_exit_35
cmp rbx, rax
je 0x413130
add r15, 1
cmp rbp, r15
je 0x4131e6
movzx eax, byte [r15]
lea ecx, [rax - 0x41]
mov edx, eax
xor edx, 0x20
cmp cl, 0x1a
cmovb eax, edx
movzx edx, byte [rsi + rbx]
lea r8d, [rdx - 0x41]
mov ecx, edx
xor ecx, 0x20
cmp r8b, 0x1a
cmovb edx, ecx
cmp dl, al
je 0x4130a0
xor ebx, ebx
jmp 0x4130b1
add qword [rsp + 0x20], 4
add r14d, 1
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
add r12d, 1
cmp dword [rsp + 0x28], r12d
jge 0x413040
lea rcx, [0x0048a640]
mov edx, 0x3b77a20f
call fcn.00402310
jmp 0x412ea7
add dword [rsp + 0x28], 1
mov esi, dword [rsp + 0x2c]
cmp qword [rsp + 0x108], rdi
jne 0x4131c0
mov rbx, qword [rsp + 0x100]
mov edx, 0x6cedbc47
movsxd rax, dword [rsp + 0x2c]
lea rcx, [0x0048a820]
add rbx, rax
call fcn.00402310
mov edx, 0x413f63c5
lea rcx, [0x0048a7e0]
call fcn.00402310
mov edx, 0x7bca0f1f
lea rcx, [0x0048a7c0]
call fcn.00402310
mov edx, 0x7e15cdcd
lea rcx, [0x0048a780]
call fcn.00402310
mov edx, 0x4952f9b7
lea rcx, [0x0048a740]
call fcn.00402310
mov edx, 0x249f1b15
lea rcx, [0x0048a720]
call fcn.00402310
jmp 0x412fec
mov rcx, qword [rsp + 0x108]
mov rdx, rdi
call sub.msvcrt.dll_exit_34
test eax, eax
je 0x413143
lea r14d, [r14 + r13 + 1]
mov dword [rsp + 0x2c], esi
jmp 0x413105
add qword [rsp + 0x20], 4
mov rax, qword [rsp + 0x20]
mov esi, dword [rax]
jmp 0x413139