Function at 0x408d70
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x98
movaps xmmword [rsp + 0x80], xmm6
mov rdi, rcx
mov rbx, rdx
mov edx, 0x298f978c
mov dword [rsp + 0x7c], 0
lea rcx, [0x00413a00]
call fcn.00407a50
mov edx, 0x364e23c4
mov rcx, rax
call fcn.004085b0
lea rcx, [section..rdata]
test rax, rax
je 0x408dcf
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
xor r9d, r9d
mov r8d, 1
mov qword [rsp + 0x30], 0
mov edx, 0x80000000
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
call qword [0x004190b8]
xor edx, edx
mov rbp, rax
mov rcx, rax
call qword [0x004190b0]
mov edx, dword [0x0041a9f0]
mov r12d, eax
test edx, edx
je 0x4090f9
call qword [0x004198e0]
movsxd r8, r12d
xor edx, edx
mov rcx, rax
call qword [0x0041a950]
mov qword [rsp + 0x50], rax
mov rsi, rax
mov r8d, r12d
mov rdx, rsi
mov rcx, rbp
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x7c]
call qword [0x004190a0]
movsxd r11, dword [rsi + 0x3c]
lea r14, [rsi + r11]
mov eax, dword [r14 + 0x88]
lea r13, [r14 + 0x18]
movzx r8d, word [r14 + 0x14]
cmp word [r14 + 6], 0
mov dword [rsp + 0x40], eax
lea rax, [r13 + r8]
mov qword [rsp + 0x58], rax
je 0x409152
lea rbp, [r13 + r8]
xor r12d, r12d
movdqa xmm6, xmmword [0x004160d0]
mov rsi, r8
jmp 0x408ea8
mov rbp, rsi
movzx esi, word [r14 + 0x14]
lea eax, [r12 + r12*4]
add rsi, r13
mov edx, 0x19
lea rcx, [0x00412020]
shl eax, 3
movzx eax, ax
add rsi, rax
call fcn.004081e0
lea rcx, [0x004139d0]
movups xmmword [rax], xmm6
movzx edx, byte [rsi]
mov r15, rax
mov byte [rax + 0x10], dl
movzx edx, byte [rsi + 1]
mov byte [rax + 0x11], dl
movzx edx, byte [rsi + 2]
mov byte [rax + 0x12], dl
movzx edx, byte [rsi + 3]
mov byte [rax + 0x13], dl
movzx edx, byte [rsi + 4]
mov byte [rax + 0x14], dl
movzx edx, byte [rsi + 5]
mov byte [rax + 0x15], dl
movzx edx, byte [rsi + 6]
mov byte [rax + 0x16], dl
movzx edx, byte [rsi + 7]
mov byte [rax + 0x17], dl
mov edx, 0x790b9164
call fcn.00407a50
mov edx, 0x41024d8c
mov rcx, rax
call fcn.004085b0
mov rcx, r15
mov rdx, rax
call fcn.00402b10
test rax, rax
cmovs rsi, rbp
add r12d, 1
cmp word [r14 + 6], r12w
ja 0x408ea0
mov r11, qword [rsp + 0x50]
movsxd rbp, dword [rsp + 0x40]
movsxd rdx, dword [rsi + 0xc]
movsxd rax, dword [rsi + 0x14]
add rbp, r11
sub rbp, rdx
lea rcx, [rbp + rax]
movsxd r12, dword [rcx + 0x1c]
mov qword [rsp + 0x60], rcx
movsxd r9, dword [rcx + 0x20]
add r12, r11
sub r12, rdx
add r9, r11
lea r8, [r12 + rax]
mov r12d, dword [rcx + 0x18]
sub r9, rdx
lea rbp, [r9 + rax]
mov qword [rsp + 0x48], r8
test r12d, r12d
jle 0x409145
mov ecx, dword [0x0041a9f0]
lea r13, [rbx + 0x10]
xor r14d, r14d
mov dword [rsp + 0x68], 0
mov qword [rsp + 0x40], r13
mov r13, rdi
mov edi, r12d
mov r12, rsi
mov rsi, qword [rsp + 0x50]
mov dword [rsp + 0x6c], ecx
jmp 0x409000
lea r15d, [r14 + 1]
test rcx, rcx
je 0x408fea
test r13, r13
je 0x408fea
mov rdx, r13
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x409016
cmp r15d, edi
mov r14d, r15d
jge 0x4090b5
movsxd rdx, dword [r12 + 0xc]
movsxd rax, dword [r12 + 0x14]
movsxd rcx, r14d
movsxd rcx, dword [rbp + rcx*4]
add rcx, rsi
sub rcx, rdx
add rcx, rax
cmp r13, rcx
jne 0x408fd0
mov rdi, qword [rsp + 0x48]
lea r15d, [r14 + 1]
movsxd rax, r15d
mov edx, dword [rdi + rax*4]
mov rax, qword [rsp + 0x58]
movsxd r10, dword [rax + 0xc]
movsxd rcx, dword [rax + 0x14]
mov eax, dword [rsp + 0x6c]
test eax, eax
jne 0x4090e0
movsxd rax, edx
add rax, rsi
sub rax, r10
add rax, rcx
cmp qword [rsp + 0x40], rax
lea rdx, [rax + 0x10]
jbe 0x40905e
cmp rbx, rdx
jb 0x40911a
movdqu xmm0, xmmword [rax]
mov rdi, qword [rsp + 0x40]
movups xmmword [rbx], xmm0
movzx edx, byte [rdx]
mov byte [rdi], dl
movzx edx, byte [rax + 0x11]
mov byte [rbx + 0x11], dl
movzx edx, byte [rax + 0x12]
mov byte [rbx + 0x12], dl
movzx edx, byte [rax + 0x13]
mov byte [rbx + 0x13], dl
movzx edx, byte [rax + 0x14]
mov byte [rbx + 0x14], dl
movzx edx, byte [rax + 0x15]
mov byte [rbx + 0x15], dl
movzx eax, byte [rax + 0x16]
mov byte [rbx + 0x16], al
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x68], 1
mov r14d, r15d
mov edi, dword [rax + 0x18]
cmp r15d, edi
jl 0x408ff6
mov eax, dword [rsp + 0x68]
movaps xmm6, xmmword [rsp + 0x80]
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add r14d, 8
movsxd r14, r14d
movsxd rax, dword [rdi + r14*4]
add rax, rsi
sub rax, r10
add rax, rcx
jmp 0x40904a
call qword [0x004190d8]
movsxd r8, r12d
xor edx, edx
mov rcx, rax
call qword [0x004190a8]
mov qword [rsp + 0x50], rax
mov rsi, rax
jmp 0x408e37
lea rcx, [rax + 0x17]
mov r10, rbx
sub r10, rax
nop
nop word cs:[rax + rax]
movzx edx, byte [rax]
mov byte [r10 + rax], dl
add rax, 1
cmp rax, rcx
jne 0x409130
jmp 0x409099
mov dword [rsp + 0x68], 0
jmp 0x4090b5
mov rsi, rax
jmp 0x408f45