Function at 0x61610640
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
lea rsi, [rsp + 0x30]
mov r14, rcx
mov ecx, 0x10
mov rdi, rsi
test r14, r14
mov rbx, rdx
rep stosq qword [rdi], rax
je 0x61610678
cmp word [r14], 0x5a4d
je 0x616106a0
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rdi, dword [r14 + 0x3c]
add rdi, r14
cmp dword [rdi], 0x4550
jne 0x61610678
lea rcx, [0x6161dda0]
mov edx, 0x56866780
call fcn.6160e580
test byte [rdi + 0x17], 0x20
je 0x61610678
lea rcx, [0x6161e140]
mov edx, 0x3f3bd780
call fcn.6160e580
movsxd rdx, dword [r14 + 0x3c]
add rdx, r14
lea rax, [rdx + 0x88]
mov rdx, qword [rdx + 0x88]
mov rdi, rdx
mov qword [rsi], rdx
mov rdx, qword [rax + 8]
shr rdi, 0x20
test edi, edi
mov qword [rsi + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rsi + 0x10], rdx
mov rdx, qword [rax + 0x18]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rax + 0x20]
mov qword [rsi + 0x20], rdx
mov rdx, qword [rax + 0x28]
mov qword [rsi + 0x28], rdx
mov rdx, qword [rax + 0x30]
mov qword [rsi + 0x30], rdx
mov rdx, qword [rax + 0x38]
mov qword [rsi + 0x38], rdx
mov rdx, qword [rax + 0x40]
mov qword [rsi + 0x40], rdx
mov rdx, qword [rax + 0x48]
mov qword [rsi + 0x48], rdx
mov rdx, qword [rax + 0x50]
mov qword [rsi + 0x50], rdx
mov rdx, qword [rax + 0x58]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rax + 0x60]
mov qword [rsi + 0x60], rdx
mov rdx, qword [rax + 0x68]
mov qword [rsi + 0x68], rdx
mov rdx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rsi + 0x70], rdx
mov qword [rsi + 0x78], rax
je 0x61610678
movsxd rax, dword [rsp + 0x30]
test eax, eax
je 0x61610678
lea rsi, [rax + r14]
mov edx, 0xb343e80
lea rcx, [0x6161e0a0]
call fcn.6160e580
movsxd rdi, dword [rsi + 0x1c]
lea r15, [0x6161a08c]
add rdi, r14
cmp rbx, r15
je 0x61610930
test rbx, rbx
je 0x61610966
cmp byte [rbx], 0
je 0x61610930
mov r13d, dword [rsi + 0x18]
test r13d, r13d
js 0x61610950
mov eax, dword [rdi]
xor ebp, ebp
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov r12d, dword [rax + r14]
jmp 0x61610803
mov r15d, dword [rsp + 0x2c]
add r13d, 1
test rsi, rsi
jne 0x61610860
add r12d, 1
add ebp, 1
cmp ebp, r13d
jg 0x61610950
mov dword [rsp + 0x2c], r15d
lea rcx, [0x6161e020]
mov edx, 0x233e6380
movsxd rsi, r12d
call fcn.6160e580
mov edx, 0x7b36a280
add rsi, r14
lea rcx, [0x6161dff0]
call fcn.6160e580
lea rdx, [0x6161a08c]
test rax, rax
je 0x6161084a
cmp qword [rax], 0
lea rdx, [rax + 0x10]
lea rax, [0x6161a08c]
cmove rdx, rax
mov rcx, rsi
call fcn.616100d0
test eax, eax
jne 0x616107e0
add rdi, 4
mov r15d, dword [rdi]
jmp 0x616107e9
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmp rbx, rsi
lea r12d, [r12 + rax + 1]
je 0x61610890
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x616107f2
nop
nop word cs:[rax + rax]
mov edx, 0x57d9a680
movsxd rbx, dword [rsp + 0x2c]
lea rcx, [0x6161dfa0]
call fcn.6160e580
mov edx, 0x4ba11b80
lea rcx, [0x6161df60]
call fcn.6160e580
mov edx, 0xe9e4a80
add rbx, r14
lea rcx, [0x6161df40]
call fcn.6160e580
mov edx, 0x32f4780
lea rcx, [0x6161df00]
call fcn.6160e580
mov edx, 0x36d8e80
lea rcx, [0x6161dec0]
call fcn.6160e580
mov edx, 0x65775380
lea rcx, [0x6161dea0]
call fcn.6160e580
mov edx, 0x3ad87280
lea rcx, [0x6161de60]
call fcn.6160e580
lea rcx, [0x6161dde0]
mov edx, 0x2e57f680
call fcn.6160e580
jmp 0x6161067a
lea rcx, [0x6161e060]
mov edx, 0x22bc3f80
call fcn.6160e580
movsxd rbx, dword [rdi - 4]
add rbx, r14
jmp 0x6161090f
lea rcx, [0x6161dde0]
mov edx, 0x2e57f680
call fcn.6160e580
jmp 0x61610678
mov r12d, dword [rsi + 0x18]
test r12d, r12d
js 0x61610950
mov eax, dword [rdi]
xor ebp, ebp
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov esi, dword [rax + r14]
jmp 0x616109b9
add rdi, 4
mov r13d, dword [rdi]
test rbx, rbx
je 0x61610890
mov rcx, rbx
add ebp, 1
call sub.msvcrt.dll_strlen
cmp r12d, ebp
lea esi, [rsi + rax + 1]
jl 0x61610950
mov dword [rsp + 0x2c], r13d
lea rcx, [0x6161e020]
mov edx, 0x233e6380
movsxd rbx, esi
call fcn.6160e580
mov edx, 0x7b36a280
add rbx, r14
lea rcx, [0x6161dff0]
call fcn.6160e580
mov rdx, r15
test rax, rax
je 0x616109f5
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmove rdx, r15
mov rcx, rbx
call fcn.616100d0
test eax, eax
je 0x61610990
add r12d, 1
mov r13d, dword [rsp + 0x2c]
jmp 0x61610997