Function at 0x647902d0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov r15, rcx
mov ecx, 0x10
mov rbx, rdx
lea rsi, [rsp + 0x30]
test r15, r15
mov ebp, r9d
mov rdi, rsi
rep stosq qword [rdi], rax
je 0x6479030b
cmp word [r15], 0x5a4d
je 0x64790330
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rdi, dword [r15 + 0x3c]
add rdi, r15
cmp dword [rdi], 0x4550
jne 0x6479030b
mov edx, 0x7e5bbcca
mov qword [rsp + 0x110], r8
lea rcx, [0x6479e980]
call fcn.6478e420
mov edx, 0x466622ea
mov rcx, rax
call fcn.6478f260
test byte [rdi + 0x17], 0x20
je 0x6479030b
lea rcx, [0x6479ed20]
mov edx, 0x1136b24a
call fcn.6478e420
mov edx, 0x893bc6a
mov rcx, rax
call fcn.6478f260
movsxd rdx, dword [r15 + 0x3c]
add rdx, r15
lea rax, [rdx + 0x88]
mov rdx, qword [rdx + 0x88]
mov rdi, rdx
mov qword [rsi], rdx
mov rdx, qword [rax + 8]
shr rdi, 0x20
test edi, edi
mov qword [rsi + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rsi + 0x10], rdx
mov rdx, qword [rax + 0x18]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rax + 0x20]
mov qword [rsi + 0x20], rdx
mov rdx, qword [rax + 0x28]
mov qword [rsi + 0x28], rdx
mov rdx, qword [rax + 0x30]
mov qword [rsi + 0x30], rdx
mov rdx, qword [rax + 0x38]
mov qword [rsi + 0x38], rdx
mov rdx, qword [rax + 0x40]
mov qword [rsi + 0x40], rdx
mov rdx, qword [rax + 0x48]
mov qword [rsi + 0x48], rdx
mov rdx, qword [rax + 0x50]
mov qword [rsi + 0x50], rdx
mov rdx, qword [rax + 0x58]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rax + 0x60]
mov qword [rsi + 0x60], rdx
mov rdx, qword [rax + 0x68]
mov qword [rsi + 0x68], rdx
mov rdx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rsi + 0x70], rdx
mov qword [rsi + 0x78], rax
je 0x6479030b
movsxd rax, dword [rsp + 0x30]
test eax, eax
je 0x6479030b
lea rcx, [0x6479ecc0]
mov edx, 0x631aaa6e
lea rdi, [rax + r15]
call fcn.6478e420
mov edx, 0x6a919ace
mov rcx, rax
call fcn.6478f260
movsxd rsi, dword [rdi + 0x1c]
lea rax, [0x6479b08c]
mov r8, qword [rsp + 0x110]
add rsi, r15
cmp rbx, rax
je 0x64790620
test rbx, rbx
je 0x64790666
cmp byte [rbx], 0
je 0x64790620
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x64790650
mov eax, dword [rsi]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x24], eax
movsxd rax, dword [rdi + 0x20]
xor edi, edi
mov r12d, dword [rax + r15]
jmp 0x647904d7
mov r13d, dword [rsp + 0x24]
add r14d, 1
test rsi, rsi
jne 0x64790540
add r12d, 1
add edi, 1
cmp r14d, edi
jl 0x64790650
mov dword [rsp + 0x24], r13d
lea rcx, [0x6479ec40]
mov edx, 0x1136b24a
movsxd rsi, r12d
call fcn.6478f260
mov edx, 0x631aaa6e
add rsi, r15
lea rcx, [0x6479ec10]
call fcn.6478f260
lea rdx, [0x6479b08c]
test rax, rax
je 0x6479051e
cmp qword [rax], 0
lea rdx, [rax + 0x10]
lea rax, [0x6479b08c]
cmove rdx, rax
mov rcx, rsi
call fcn.64790210
test eax, eax
jne 0x647904b0
add qword [rsp + 0x28], 4
mov rax, qword [rsp + 0x28]
mov r13d, dword [rax]
jmp 0x647904b9
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmp rsi, rbx
lea r12d, [r12 + rax + 1]
je 0x64790570
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x647904c6
nop
nop word cs:[rax + rax]
test ebp, ebp
jne 0x64790712
mov edx, 0x404530e
movsxd rbx, dword [rsp + 0x24]
lea rcx, [0x6479ebc0]
call fcn.6478f260
mov edx, 0x60cebf0a
lea rcx, [0x6479eb80]
call fcn.6478f260
mov edx, 0x6f76bcae
add rbx, r15
lea rcx, [0x6479eb60]
call fcn.6478f260
mov edx, 0x25eb05ea
lea rcx, [0x6479eb20]
call fcn.6478f260
mov edx, 0x1afa4f4e
lea rcx, [0x6479eae0]
call fcn.6478f260
mov edx, 0x460ad7ca
lea rcx, [0x6479eac0]
call fcn.6478f260
mov edx, 0xd11b2ee
lea rcx, [0x6479ea80]
call fcn.6478f260
nop word [rax + rax]
lea rcx, [0x6479e9c0]
mov edx, 0x563cf8e
call fcn.6478f260
jmp 0x6479030d
mov edx, 0xdcacaa
mov qword [rsp + 0x110], r8
lea rcx, [0x6479ec80]
call fcn.6478f260
mov r8, qword [rsp + 0x110]
movsxd rbx, dword [rsi + r8*4 - 4]
add rbx, r15
jmp 0x64790600
lea rcx, [0x6479e9c0]
mov edx, 0x563cf8e
call fcn.6478f260
jmp 0x6479030b
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x64790650
mov ecx, dword [rsi]
mov rbx, rsi
xor r12d, r12d
mov qword [rsp + 0x28], rax
movsxd rdx, dword [rdi + 0x20]
mov dword [rsp + 0x24], ecx
mov edi, dword [rdx + r15]
jmp 0x647906ba
add rbx, 4
mov r13d, dword [rbx]
test rsi, rsi
je 0x64790570
mov rcx, rsi
add r12d, 1
call sub.msvcrt.dll_strlen
cmp r14d, r12d
lea edi, [rdi + rax + 1]
jl 0x64790650
mov dword [rsp + 0x24], r13d
lea rcx, [0x6479ec40]
mov edx, 0x1136b24a
movsxd rsi, edi
call fcn.6478f260
mov edx, 0x631aaa6e
add rsi, r15
lea rcx, [0x6479ec10]
call fcn.6478f260
mov rcx, qword [rsp + 0x28]
test rax, rax
mov rdx, rcx
je 0x647906fb
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmove rdx, rcx
mov rcx, rsi
call fcn.64790210
test eax, eax
je 0x64790690
add r14d, 1
mov r13d, dword [rsp + 0x24]
jmp 0x64790697
mov eax, dword [0x647a3048]
test eax, eax
je 0x6479072d
lea rcx, [0x6479ebe0]
mov edx, 0x70fa4b2a
call fcn.6478f260
lea rcx, [0x6479ebc0]
mov edx, 0x404530e
movsxd rbx, r13d
call fcn.6478f260
mov edx, 0x60cebf0a
add rbx, r15
lea rcx, [0x6479eb80]
call fcn.6478f260
mov edx, 0x6f76bcae
lea rcx, [0x6479eb60]
call fcn.6478f260
mov edx, 0x25eb05ea
lea rcx, [0x6479eb20]
call fcn.6478f260
mov edx, 0x1afa4f4e
lea rcx, [0x6479eae0]
call fcn.6478f260
mov edx, 0x460ad7ca
lea rcx, [0x6479eac0]
call fcn.6478f260
mov edx, 0xd11b2ee
lea rcx, [0x6479ea80]
call fcn.6478f260
jmp 0x64790600