Function at 0x647907b0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
xor eax, eax
lea rsi, [rsp + 0x30]
mov r14, rcx
mov ecx, 0x10
mov rdi, rsi
test r14, r14
mov rbx, rdx
rep stosq qword [rdi], rax
je 0x647907e8
cmp word [r14], 0x5a4d
je 0x64790810
xor ebx, ebx
mov rax, rbx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
movsxd rdi, dword [r14 + 0x3c]
add rdi, r14
cmp dword [rdi], 0x4550
jne 0x647907e8
lea rcx, [0x6479e980]
mov edx, 0x7e5bbcca
call fcn.6478e420
mov edx, 0x466622ea
mov rcx, rax
call fcn.6478f260
test byte [rdi + 0x17], 0x20
je 0x647907e8
lea rcx, [0x6479ed20]
mov edx, 0x1136b24a
call fcn.6478e420
mov edx, 0x893bc6a
mov rcx, rax
call fcn.6478f260
movsxd rdx, dword [r14 + 0x3c]
add rdx, r14
lea rax, [rdx + 0x88]
mov rdx, qword [rdx + 0x88]
mov rdi, rdx
mov qword [rsi], rdx
mov rdx, qword [rax + 8]
shr rdi, 0x20
test edi, edi
mov qword [rsi + 8], rdx
mov rdx, qword [rax + 0x10]
mov qword [rsi + 0x10], rdx
mov rdx, qword [rax + 0x18]
mov qword [rsi + 0x18], rdx
mov rdx, qword [rax + 0x20]
mov qword [rsi + 0x20], rdx
mov rdx, qword [rax + 0x28]
mov qword [rsi + 0x28], rdx
mov rdx, qword [rax + 0x30]
mov qword [rsi + 0x30], rdx
mov rdx, qword [rax + 0x38]
mov qword [rsi + 0x38], rdx
mov rdx, qword [rax + 0x40]
mov qword [rsi + 0x40], rdx
mov rdx, qword [rax + 0x48]
mov qword [rsi + 0x48], rdx
mov rdx, qword [rax + 0x50]
mov qword [rsi + 0x50], rdx
mov rdx, qword [rax + 0x58]
mov qword [rsi + 0x58], rdx
mov rdx, qword [rax + 0x60]
mov qword [rsi + 0x60], rdx
mov rdx, qword [rax + 0x68]
mov qword [rsi + 0x68], rdx
mov rdx, qword [rax + 0x70]
mov rax, qword [rax + 0x78]
mov qword [rsi + 0x70], rdx
mov qword [rsi + 0x78], rax
je 0x647907e8
movsxd rax, dword [rsp + 0x30]
test eax, eax
je 0x647907e8
lea rcx, [0x6479ecc0]
mov edx, 0x631aaa6e
lea rsi, [rax + r14]
call fcn.6478e420
mov edx, 0x6a919ace
lea r15, [0x6479b08c]
mov rcx, rax
call fcn.6478f260
movsxd rdi, dword [rsi + 0x1c]
add rdi, r14
cmp rbx, r15
je 0x64790ad0
test rbx, rbx
je 0x64790b06
cmp byte [rbx], 0
je 0x64790ad0
mov r13d, dword [rsi + 0x18]
test r13d, r13d
js 0x64790af0
mov eax, dword [rdi]
xor ebp, ebp
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov r12d, dword [rax + r14]
jmp 0x647909a3
mov r15d, dword [rsp + 0x2c]
add r13d, 1
test rsi, rsi
jne 0x64790a00
add r12d, 1
add ebp, 1
cmp ebp, r13d
jg 0x64790af0
mov dword [rsp + 0x2c], r15d
lea rcx, [0x6479ec40]
mov edx, 0x1136b24a
movsxd rsi, r12d
call fcn.6478f260
mov edx, 0x631aaa6e
add rsi, r14
lea rcx, [0x6479ec10]
call fcn.6478f260
lea rdx, [0x6479b08c]
test rax, rax
je 0x647909ea
cmp qword [rax], 0
lea rdx, [rax + 0x10]
lea rax, [0x6479b08c]
cmove rdx, rax
mov rcx, rsi
call fcn.64790210
test eax, eax
jne 0x64790980
add rdi, 4
mov r15d, dword [rdi]
jmp 0x64790989
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmp rbx, rsi
lea r12d, [r12 + rax + 1]
je 0x64790a30
mov rdx, rsi
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x64790992
nop
nop word cs:[rax + rax]
mov edx, 0x404530e
movsxd rbx, dword [rsp + 0x2c]
lea rcx, [0x6479ebc0]
call fcn.6478f260
mov edx, 0x60cebf0a
lea rcx, [0x6479eb80]
call fcn.6478f260
mov edx, 0x6f76bcae
add rbx, r14
lea rcx, [0x6479eb60]
call fcn.6478f260
mov edx, 0x25eb05ea
lea rcx, [0x6479eb20]
call fcn.6478f260
mov edx, 0x1afa4f4e
lea rcx, [0x6479eae0]
call fcn.6478f260
mov edx, 0x460ad7ca
lea rcx, [0x6479eac0]
call fcn.6478f260
mov edx, 0xd11b2ee
lea rcx, [0x6479ea80]
call fcn.6478f260
lea rcx, [0x6479e9c0]
mov edx, 0x563cf8e
call fcn.6478f260
jmp 0x647907ea
lea rcx, [0x6479ec80]
mov edx, 0xdcacaa
call fcn.6478f260
movsxd rbx, dword [rdi - 4]
add rbx, r14
jmp 0x64790aaf
lea rcx, [0x6479e9c0]
mov edx, 0x563cf8e
call fcn.6478f260
jmp 0x647907e8
mov r12d, dword [rsi + 0x18]
test r12d, r12d
js 0x64790af0
mov eax, dword [rdi]
xor ebp, ebp
mov dword [rsp + 0x2c], eax
movsxd rax, dword [rsi + 0x20]
mov esi, dword [rax + r14]
jmp 0x64790b59
add rdi, 4
mov r13d, dword [rdi]
test rbx, rbx
je 0x64790a30
mov rcx, rbx
add ebp, 1
call sub.msvcrt.dll_strlen
cmp r12d, ebp
lea esi, [rsi + rax + 1]
jl 0x64790af0
mov dword [rsp + 0x2c], r13d
lea rcx, [0x6479ec40]
mov edx, 0x1136b24a
movsxd rbx, esi
call fcn.6478f260
mov edx, 0x631aaa6e
add rbx, r14
lea rcx, [0x6479ec10]
call fcn.6478f260
mov rdx, r15
test rax, rax
je 0x64790b95
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmove rdx, r15
mov rcx, rbx
call fcn.64790210
test eax, eax
je 0x64790b30
add r12d, 1
mov r13d, dword [rsp + 0x2c]
jmp 0x64790b37