Function at 0x6254b360
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
mov r15, rcx
mov ecx, 0x10
mov rbx, rdx
lea rsi, [rsp + 0x30]
test r15, r15
mov ebp, r9d
mov rdi, rsi
rep stosq qword [rdi], rax
je 0x6254b39b
cmp word [r15], 0x5a4d
je 0x6254b3c0
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rdi, dword [r15 + 0x3c]
add rdi, r15
cmp dword [rdi], 0x4550
jne 0x6254b39b
mov edx, 0x4697042a
mov qword [rsp + 0x110], r8
lea rcx, [0x6255d020]
call fcn.625495f0
mov edx, 0x347b25ce
mov rcx, rax
call fcn.625497c0
test byte [rdi + 0x17], 0x20
je 0x6254b39b
lea rcx, [0x6255d3e0]
mov edx, 0x4bb785aa
call fcn.625495f0
mov edx, 0x77aa3a4e
mov rcx, rax
call fcn.625497c0
movsxd rdx, dword [r15 + 0x3c]
add rdx, r15
lea rax, [rdx + 0x88]
mov rdx, qword [rdx + 0x88]
mov rdi, rdx
mov qword [rsi], rdx
mov rdx, qword [rax + 8]
shr rdi, 0x20
test edi, edi
mov qword [rsi + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rsi + 0x10], rdx
mov rdx, qword [rax + 0x18]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rax + 0x20]
mov qword [rsi + 0x20], rdx
mov rdx, qword [rax + 0x28]
mov qword [rsi + 0x28], rdx
mov rdx, qword [rax + 0x30]
mov qword [rsi + 0x30], rdx
mov rdx, qword [rax + 0x38]
mov qword [rsi + 0x38], rdx
mov rdx, qword [rax + 0x40]
mov qword [rsi + 0x40], rdx
mov rdx, qword [rax + 0x48]
mov qword [rsi + 0x48], rdx
mov rdx, qword [rax + 0x50]
mov qword [rsi + 0x50], rdx
mov rdx, qword [rax + 0x58]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rax + 0x60]
mov qword [rsi + 0x60], rdx
mov rdx, qword [rax + 0x68]
mov qword [rsi + 0x68], rdx
mov rdx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rsi + 0x70], rdx
mov qword [rsi + 0x78], rax
je 0x6254b39b
movsxd rax, dword [rsp + 0x30]
test eax, eax
je 0x6254b39b
lea rcx, [0x6255d320]
mov edx, 0x5be76a8e
lea rdi, [rax + r15]
call fcn.625495f0
mov edx, 0x2ef9c8ca
mov rcx, rax
call fcn.625497c0
movsxd rsi, dword [rdi + 0x1c]
lea rax, [0x6255c00a]
mov r8, qword [rsp + 0x110]
add rsi, r15
cmp rbx, rax
je 0x6254b6b0
test rbx, rbx
je 0x6254b6f6
cmp byte [rbx], 0
je 0x6254b6b0
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x6254b6e0
mov eax, dword [rsi]
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x24], eax
movsxd rax, dword [rdi + 0x20]
xor edi, edi
mov r12d, dword [rax + r15]
jmp 0x6254b567
mov r13d, dword [rsp + 0x24]
add r14d, 1
test rsi, rsi
jne 0x6254b5d0
add r12d, 1
add edi, 1
cmp r14d, edi
jl 0x6254b6e0
mov dword [rsp + 0x24], r13d
lea rcx, [0x6255d2a0]
mov edx, 0x3d3715ee
movsxd rsi, r12d
call fcn.625497c0
mov edx, 0x4bb785aa
add rsi, r15
lea rcx, [0x6255d270]
call fcn.625497c0
lea rdx, [0x6255c00a]
test rax, rax
je 0x6254b5ae
cmp qword [rax], 0
lea rdx, [rax + 0x10]
lea rax, [0x6255c00a]
cmove rdx, rax
mov rcx, rsi
call fcn.6254b2a0
test eax, eax
jne 0x6254b540
add qword [rsp + 0x28], 4
mov rax, qword [rsp + 0x28]
mov r13d, dword [rax]
jmp 0x6254b549
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmp rsi, rbx
lea r12d, [r12 + rax + 1]
je 0x6254b600
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x6254b556
nop
nop word cs:[rax + rax]
test ebp, ebp
jne 0x6254b7a2
mov edx, 0x3b4cbd8a
movsxd rbx, dword [rsp + 0x24]
lea rcx, [0x6255d220]
call fcn.625497c0
mov edx, 0x63ce602e
lea rcx, [0x6255d1e0]
call fcn.625497c0
mov edx, 0x4be1686a
add rbx, r15
lea rcx, [0x6255d1c0]
call fcn.625497c0
mov edx, 0x5dd75ece
lea rcx, [0x6255d180]
call fcn.625497c0
mov edx, 0x80a3e4a
lea rcx, [0x6255d140]
call fcn.625497c0
mov edx, 0x72200e6e
lea rcx, [0x6255d120]
call fcn.625497c0
mov edx, 0x1676b72a
lea rcx, [0x6255d0e0]
call fcn.625497c0
nop word [rax + rax]
lea rcx, [0x6255d060]
mov edx, 0x644f0b0a
call fcn.625497c0
jmp 0x6254b39d
mov edx, 0x6e2570e
mov qword [rsp + 0x110], r8
lea rcx, [0x6255d2e0]
call fcn.625497c0
mov r8, qword [rsp + 0x110]
movsxd rbx, dword [rsi + r8*4 - 4]
add rbx, r15
jmp 0x6254b690
lea rcx, [0x6255d060]
mov edx, 0x644f0b0a
call fcn.625497c0
jmp 0x6254b39b
mov r14d, dword [rdi + 0x18]
test r14d, r14d
js 0x6254b6e0
mov ecx, dword [rsi]
mov rbx, rsi
xor r12d, r12d
mov qword [rsp + 0x28], rax
movsxd rdx, dword [rdi + 0x20]
mov dword [rsp + 0x24], ecx
mov edi, dword [rdx + r15]
jmp 0x6254b74a
add rbx, 4
mov r13d, dword [rbx]
test rsi, rsi
je 0x6254b600
mov rcx, rsi
add r12d, 1
call sub.msvcrt.dll_strlen
cmp r14d, r12d
lea edi, [rdi + rax + 1]
jl 0x6254b6e0
mov dword [rsp + 0x24], r13d
lea rcx, [0x6255d2a0]
mov edx, 0x3d3715ee
movsxd rsi, edi
call fcn.625497c0
mov edx, 0x4bb785aa
add rsi, r15
lea rcx, [0x6255d270]
call fcn.625497c0
mov rcx, qword [rsp + 0x28]
test rax, rax
mov rdx, rcx
je 0x6254b78b
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmove rdx, rcx
mov rcx, rsi
call fcn.6254b2a0
test eax, eax
je 0x6254b720
add r14d, 1
mov r13d, dword [rsp + 0x24]
jmp 0x6254b727
mov eax, dword [0x6257e0e4]
test eax, eax
je 0x6254b7bd
lea rcx, [0x6255d240]
mov edx, 0x5be76a8e
call fcn.625497c0
lea rcx, [0x6255d220]
mov edx, 0x3b4cbd8a
movsxd rbx, r13d
call fcn.625497c0
mov edx, 0x63ce602e
add rbx, r15
lea rcx, [0x6255d1e0]
call fcn.625497c0
mov edx, 0x4be1686a
lea rcx, [0x6255d1c0]
call fcn.625497c0
mov edx, 0x5dd75ece
lea rcx, [0x6255d180]
call fcn.625497c0
mov edx, 0x80a3e4a
lea rcx, [0x6255d140]
call fcn.625497c0
mov edx, 0x72200e6e
lea rcx, [0x6255d120]
call fcn.625497c0
mov edx, 0x1676b72a
lea rcx, [0x6255d0e0]
call fcn.625497c0
jmp 0x6254b690