Function at 0x411ca0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov rbx, rcx
mov rbp, rdx
mov ecx, 0x10
lea rdx, [rsp + 0x30]
test rbx, rbx
mov rdi, rdx
rep stosq qword [rdi], rax
je 0x411cd7
cmp word [rbx], 0x5a4d
je 0x411cf0
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rcx, dword [rbx + 0x3c]
add rcx, rbx
cmp dword [rcx], 0x4550
jne 0x411cd7
test byte [rcx + 0x17], 0x20
je 0x411cd7
lea rax, [rcx + 0x88]
mov rcx, qword [rcx + 0x88]
mov rsi, rcx
mov qword [rdx], rcx
mov rcx, qword [rax + 8]
shr rsi, 0x20
test esi, esi
mov qword [rdx + 8], rcx
mov rcx, qword [rax + 0x10]
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 0x18]
mov qword [rdx + 0x18], rcx
mov rcx, qword [rax + 0x20]
mov qword [rdx + 0x20], rcx
mov rcx, qword [rax + 0x28]
mov qword [rdx + 0x28], rcx
mov rcx, qword [rax + 0x30]
mov qword [rdx + 0x30], rcx
mov rcx, qword [rax + 0x38]
mov qword [rdx + 0x38], rcx
mov rcx, qword [rax + 0x40]
mov qword [rdx + 0x40], rcx
mov rcx, qword [rax + 0x48]
mov qword [rdx + 0x48], rcx
mov rcx, qword [rax + 0x50]
mov qword [rdx + 0x50], rcx
mov rcx, qword [rax + 0x58]
mov qword [rdx + 0x58], rcx
mov rcx, qword [rax + 0x60]
mov qword [rdx + 0x60], rcx
mov rcx, qword [rax + 0x68]
mov qword [rdx + 0x68], rcx
mov rcx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rdx + 0x70], rcx
mov qword [rdx + 0x78], rax
je 0x411cd7
movsxd rsi, dword [rsp + 0x30]
test esi, esi
je 0x411cd7
lea rcx, [0x004897a0]
mov edx, 0x54a7a098
add rsi, rbx
call fcn.00402520
mov edx, 0x52fbeac8
mov rcx, rax
call fcn.004022b0
movsxd rdi, dword [rsi + 0x1c]
mov edx, 0x5be1cf48
xor ecx, ecx
mov eax, dword [rsi + 0x18]
add rdi, rbx
mov dword [rsp + 0x28], eax
mov eax, dword [rdi]
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov r14d, dword [rax + rbx]
call fcn.00402520
lea rdx, [0x00488b78]
test rax, rax
je 0x411e10
cmp qword [rax], 0
lea rcx, [rax + 0x10]
cmovne rdx, rcx
cmp rbp, rdx
jne 0x411e40
movsxd rax, dword [rdi - 4]
add rbx, rax
lea rcx, [0x00489580]
mov edx, 0x4c617bc8
call fcn.004022b0
jmp 0x411cd9
mov rcx, rbp
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x411e15
mov eax, dword [rsp + 0x28]
test eax, eax
js 0x411f44
xor r12d, r12d
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], rbp
nop dword [rax + rax]
lea rcx, [0x00489780]
mov edx, 0x6a9298d8
movsxd rdi, r14d
add rdi, qword [rsp + 0x100]
call fcn.004022b0
lea rsi, [0x00488b78]
test rax, rax
je 0x411eab
cmp qword [rax], 0
lea rsi, [rax + 0x10]
lea rax, [0x00488b78]
cmove rsi, rax
test rdi, rdi
je 0x411f20
mov rcx, rdi
call sub.msvcrt.dll_strlen
test rax, rax
mov r13, rax
je 0x412016
lea rbp, [rax + rdi]
mov r15, rdi
xor ebx, ebx
jmp 0x411eee
mov rcx, rsi
add rbx, 1
call sub.msvcrt.dll_strlen
cmp rbx, rax
je 0x411f60
add r15, 1
cmp rbp, r15
je 0x412016
movzx eax, byte [r15]
lea ecx, [rax - 0x41]
mov edx, eax
xor edx, 0x20
cmp cl, 0x1a
cmovb eax, edx
movzx edx, byte [rsi + rbx]
lea r8d, [rdx - 0x41]
mov ecx, edx
xor ecx, 0x20
cmp r8b, 0x1a
cmovb edx, ecx
cmp dl, al
je 0x411ed0
xor ebx, ebx
jmp 0x411ee1
add qword [rsp + 0x20], 4
add r14d, 1
mov rax, qword [rsp + 0x20]
mov eax, dword [rax]
mov dword [rsp + 0x2c], eax
add r12d, 1
cmp dword [rsp + 0x28], r12d
jge 0x411e70
lea rcx, [0x00489580]
mov edx, 0x4c617bc8
call fcn.004022b0
jmp 0x411cd7
add dword [rsp + 0x28], 1
mov esi, dword [rsp + 0x2c]
cmp qword [rsp + 0x108], rdi
jne 0x411ff0
mov rbx, qword [rsp + 0x100]
mov edx, 0x1cc69c08
movsxd rax, dword [rsp + 0x2c]
lea rcx, [0x00489760]
add rbx, rax
call fcn.004022b0
mov edx, 0x54a7a098
lea rcx, [0x00489720]
call fcn.004022b0
mov edx, 0x5be1cf48
lea rcx, [0x00489700]
call fcn.004022b0
mov edx, 0x6c794e58
lea rcx, [0x004896c0]
call fcn.004022b0
mov edx, 0x1af65488
lea rcx, [0x00489680]
call fcn.004022b0
mov edx, 0x79c71218
lea rcx, [0x00489660]
call fcn.004022b0
jmp 0x411e1c
mov rcx, qword [rsp + 0x108]
mov rdx, rdi
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x411f73
lea r14d, [r14 + r13 + 1]
mov dword [rsp + 0x2c], esi
jmp 0x411f35
add qword [rsp + 0x20], 4
mov rax, qword [rsp + 0x20]
mov esi, dword [rax]
jmp 0x411f69