Function at 0x140001210
Capabilities:
Parse pe header

Disassembly:
xor r9d, r9d
mov r10, rcx
mov r11d, r9d
mov r8d, r9d
test edx, edx
je 0x14000142f
mov rax, rcx
cmp byte [rax], 0x4d
jne 0x140001232
cmp byte [rax + 1], 0x5a
je 0x14000123f
inc r8d
inc rax
cmp r8d, edx
jae 0x140001247
jmp 0x140001227
movsxd rax, r8d
mov word [rax + rcx], r9w
lea rax, [rcx + 2]
mov ecx, r9d
nop
cmp byte [rax - 2], 0x54
jne 0x140001285
cmp byte [rax - 1], 0x68
jne 0x140001285
cmp byte [rax], 0x69
jne 0x140001285
cmp byte [rax + 1], 0x73
jne 0x140001285
cmp byte [rax + 2], 0x20
jne 0x140001285
cmp byte [rax + 3], 0x70
jne 0x140001285
cmp byte [rax + 4], 0x72
jne 0x140001285
cmp byte [rax + 5], 0x6f
jne 0x140001285
cmp byte [rax + 6], 0x67
je 0x140001290
inc ecx
inc rax
cmp ecx, edx
jae 0x1400012b6
jmp 0x140001250
movsxd rax, ecx
mov qword [rax + r10], r9
mov qword [rax + r10 + 8], r9
mov qword [rax + r10 + 0x10], r9
mov qword [rax + r10 + 0x18], r9
mov dword [rax + r10 + 0x20], r9d
mov word [rax + r10 + 0x24], r9w
mov byte [rax + r10 + 0x26], r9b
mov rax, r10
mov ecx, r9d
nop dword [rax]
cmp byte [rax], 0x50
jne 0x1400012cb
cmp byte [rax + 1], 0x45
je 0x1400012d6
inc ecx
inc rax
cmp ecx, edx
jae 0x1400012d9
jmp 0x1400012c0
movsxd r11, ecx
lea rax, [r10 + 2]
mov ecx, r9d
cmp byte [rax - 2], 0x74
jne 0x1400012f7
cmp byte [rax - 1], 0x65
jne 0x1400012f7
cmp byte [rax], 0x78
jne 0x1400012f7
cmp byte [rax + 1], 0x74
je 0x140001302
inc ecx
inc rax
cmp ecx, edx
jae 0x140001309
jmp 0x1400012e0
movsxd rax, ecx
mov dword [rax + r10], r9d
lea rax, [r10 + 2]
mov ecx, r9d
cmp byte [rax - 2], 0x72
jne 0x14000132d
cmp byte [rax - 1], 0x64
jne 0x14000132d
cmp byte [rax], 0x61
jne 0x14000132d
cmp byte [rax + 1], 0x74
jne 0x14000132d
cmp byte [rax + 2], 0x61
je 0x140001338
inc ecx
inc rax
cmp ecx, edx
jae 0x140001344
jmp 0x140001310
movsxd rax, ecx
mov dword [rax + r10], r9d
mov byte [rax + r10 + 4], r9b
lea rax, [r10 + 2]
mov ecx, r9d
nop dword [rax + rax]
cmp byte [rax - 2], 0x64
jne 0x140001367
cmp byte [rax - 1], 0x61
jne 0x140001367
cmp byte [rax], 0x74
jne 0x140001367
cmp byte [rax + 1], 0x61
je 0x140001372
inc ecx
inc rax
cmp ecx, edx
jae 0x140001379
jmp 0x140001350
movsxd rax, ecx
mov dword [rax + r10], r9d
lea rax, [r10 + 2]
mov ecx, r9d
cmp byte [rax - 2], 0x70
jne 0x14000139d
cmp byte [rax - 1], 0x64
jne 0x14000139d
cmp byte [rax], 0x61
jne 0x14000139d
cmp byte [rax + 1], 0x74
jne 0x14000139d
cmp byte [rax + 2], 0x61
je 0x1400013a8
inc ecx
inc rax
cmp ecx, edx
jae 0x1400013b4
jmp 0x140001380
movsxd rax, ecx
mov dword [rax + r10], r9d
mov byte [rax + r10 + 4], r9b
lea rax, [r10 + 2]
mov ecx, r9d
nop dword [rax + rax]
cmp byte [rax - 2], 0x72
jne 0x1400013d7
cmp byte [rax - 1], 0x73
jne 0x1400013d7
cmp byte [rax], 0x72
jne 0x1400013d7
cmp byte [rax + 1], 0x63
je 0x1400013e2
inc ecx
inc rax
cmp ecx, edx
jae 0x1400013e9
jmp 0x1400013c0
movsxd rax, ecx
mov dword [rax + r10], r9d
lea rax, [r10 + 2]
nop dword [rax]
cmp byte [rax - 2], 0x72
jne 0x14000140d
cmp byte [rax - 1], 0x65
jne 0x14000140d
cmp byte [rax], 0x6c
jne 0x14000140d
cmp byte [rax + 1], 0x6f
jne 0x14000140d
cmp byte [rax + 2], 0x63
je 0x14000141a
inc r9d
inc rax
cmp r9d, edx
jae 0x14000142b
jmp 0x1400013f0
movsxd rcx, r9d
mov dword [rcx + r10], 0
mov byte [rcx + r10 + 4], 0
mov rax, r11
ret
mov rax, r9
ret