Function at 0x14000df90
Capabilities:
Get file size
Parse pe header

Disassembly:
mov r11, rsp
push rbx
push r14
sub rsp, 0x88
xor eax, eax
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov qword [r11 - 0x18], r12
mov rdi, rdx
mov qword [r11 - 0x20], r13
mov qword [r11 - 0x60], rax
lea rdx, [r11 - 0x40]
xor r14d, r14d
mov qword [r11 - 0x28], r15
mov r12, r8
mov qword [r11 - 0x58], rax
mov qword [r11 - 0x50], rax
mov qword [r11 - 0x48], rax
mov rbx, r14
mov qword [r11 - 0x40], rax
mov qword [r11 - 0x38], rax
mov qword [r11 - 0x30], rax
mov qword [r11 - 0x60], rcx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x14000e011
lea r9, str.GetFileSizeEx__
lea rcx, str..QHImageHlp.c
xor r8d, r8d
mov edx, 0x11e
call fcn.140011ed0
jmp 0x14000e895
mov ecx, 0x4000
mov dword [rsp + 0x68], 0x4000
call fcn.140023c3c
mov rbx, rax
test rax, rax
jne 0x14000e034
lea ecx, [rax + 8]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x60], rbx
test rbx, rbx
jne 0x14000e061
lea r9, [0x1400425b8]
lea rcx, str..QHImageHlp.c
xor r8d, r8d
mov edx, 0x223
call fcn.140011ed0
mov rbx, r14
jmp 0x14000e895
lea r9, [rsp + 0x38]
mov r8d, 0x40
mov rdx, rdi
xor ecx, ecx
call fcn.14000de10
test eax, eax
je 0x14000e892
mov eax, 0x5a4d
cmp word [rdi], ax
jne 0x14000e848
movsxd rax, dword [rdi + 0x3c]
test eax, eax
jle 0x14000e848
lea r9, [rsp + 0x38]
lea rdx, [rsp + 0x20]
mov rcx, rax
mov r8d, 4
call fcn.14000de10
test eax, eax
je 0x14000e88d
cmp dword [rsp + 0x20], 0x4550
je 0x14000e0e8
lea r9, str._rN_f
lea rcx, str..QHImageHlp.c
mov edx, 0x22e
mov r8d, 1
call fcn.1400120c0
mov rbx, r14
jmp 0x14000e895
movsxd rax, dword [rdi + 0x3c]
mov dword [r12 + 0xa0], r14d
mov rsi, rax
cmp eax, 0x110
jb 0x14000e131
mov r8d, 0x90
lea r9, [rsp + 0x38]
mov rdx, rdi
lea ecx, [r8 - 0x10]
call fcn.14000de10
test eax, eax
je 0x14000e888
cmp dword [rdi], 0x82c8851f
jne 0x14000e131
mov dword [r12 + 0xa0], 0x80
lea r9, [rsp + 0x38]
lea rcx, [rsi + 4]
mov r8d, 0x14
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e883
add rsi, 0x18
lea r9, [rsp + 0x38]
lea rdx, [rsp + 0xa0]
mov rcx, rsi
mov r8d, 2
call fcn.14000de10
test eax, eax
je 0x14000e87e
movzx eax, word [rsp + 0xa0]
mov ecx, 0x10b
cmp ax, cx
jne 0x14000e1c5
movzx eax, word [rdi + 0x10]
cmp ax, 0x78
jae 0x14000e1b9
lea r9, [0x140042810]
lea rcx, str..QHImageHlp.c
mov edx, 0x248
mov r8d, 1
call fcn.1400120c0
mov rbx, r14
jmp 0x14000e895
mov ebx, 1
mov ebp, 0xe0
jmp 0x14000e20f
mov ecx, 0x20b
cmp ax, cx
jne 0x14000e825
mov ax, word [rdi + 0x10]
mov ecx, 0x88
cmp ax, cx
jae 0x14000e207
lea r9, [0x140042810]
lea rcx, str..QHImageHlp.c
mov edx, 0x24e
mov r8d, 1
call fcn.1400120c0
mov rbx, r14
jmp 0x14000e895
mov ebx, r14d
mov ebp, 0xf0
mov r15w, word [rdi + 2]
movzx eax, ax
cmp eax, ebp
cmovb ebp, eax
test ebp, ebp
je 0x14000e23b
lea r9, [rsp + 0x38]
mov r8d, ebp
mov rdx, rdi
mov rcx, rsi
call fcn.14000de10
test eax, eax
je 0x14000e879
test ebx, ebx
je 0x14000e2a5
lea eax, [rsi + 0x40]
mov dword [r12], eax
lea eax, [rsi + 0x80]
mov dword [r12 + 4], eax
mov eax, dword [rdi + 0x80]
mov dword [r12 + 0xc], eax
mov eax, dword [rdi + 0x84]
mov dword [r12 + 0x14], eax
mov eax, dword [rdi + 0x40]
mov byte [r12 + 0x9c], r14b
mov dword [r12 + 0x10], eax
cmp word [rdi + 0x44], 1
jne 0x14000e292
mov byte [r12 + 0x9d], 1
mov rbx, qword [rdi + 0x70]
mov qword [rsp + 0x30], rbx
jmp 0x14000e304
mov byte [r12 + 0x9d], r14b
mov rbx, qword [rdi + 0x70]
mov qword [rsp + 0x30], rbx
jmp 0x14000e304
lea eax, [rsi + 0x40]
mov dword [r12], eax
lea eax, [rsi + 0x90]
mov dword [r12 + 4], eax
mov eax, dword [rdi + 0x90]
mov dword [r12 + 0xc], eax
mov eax, dword [rdi + 0x94]
mov dword [r12 + 0x14], eax
mov eax, dword [rdi + 0x40]
mov byte [r12 + 0x9c], 1
mov dword [r12 + 0x10], eax
cmp word [rdi + 0x44], 1
jne 0x14000e2f0
mov byte [r12 + 0x9d], 1
jmp 0x14000e2f8
mov byte [r12 + 0x9d], r14b
mov rbx, qword [rdi + 0x80]
mov qword [rsp + 0x30], rbx
mov eax, dword [r12 + 4]
mov dword [r12 + 0x18], r14d
mov byte [r12 + 0x9e], r14b
add eax, 4
mov dword [r12 + 8], eax
mov eax, ebp
add rsi, rax
mov dword [r12 + 0xb0], esi
cmp dword [r12 + 0xa0], r14d
je 0x14000e351
cmp byte [r12 + 0x9c], r14b
jne 0x14000e351
cmp byte [r12 + 0x9d], r14b
je 0x14000e351
mov r13d, 1
jmp 0x14000e354
mov r13d, r14d
test ebx, ebx
jne 0x14000e361
test r13d, r13d
je 0x14000e81a
mov eax, 0x333
mov edx, 0xfffe
lea ecx, [rdx + 1]
mov word [rsp + 0xa0], ax
cmp r15w, ax
jbe 0x14000e381
mov r15d, eax
jmp 0x14000e38b
cmp r15w, cx
jne 0x14000e38b
mov r15w, dx
movzx eax, r15w
lea ebp, [rax + rax*4]
shl ebp, 3
mov ecx, ebp
call fcn.14000dc50
mov r10, rax
mov qword [rsp + 0x28], rax
test rax, rax
jne 0x14000e3ce
lea r9, [0x1400425b8]
lea rcx, str..QHImageHlp.c
xor r8d, r8d
mov edx, 0x289
call fcn.140011ed0
mov rbx, qword [rsp + 0x28]
jmp 0x14000e895
test ebp, ebp
je 0x14000e3f2
lea r9, [rsp + 0x38]
mov r8d, ebp
mov rdx, rax
mov rcx, rsi
call fcn.14000de10
test eax, eax
je 0x14000e872
mov r10, qword [rsp + 0x28]
add dword [r12 + 0xb0], ebp
test r13d, r13d
je 0x14000e44e
mov r9, r10
movzx r8d, r14w
cmp r14w, r15w
jae 0x14000e44e
nop dword [rax]
mov edx, dword [r9]
lea rcx, str.INIT
cmp edx, dword [rcx]
jne 0x14000e42c
mov dl, byte [r9 + 4]
cmp dl, byte [rcx + 4]
jne 0x14000e42c
mov eax, r14d
jmp 0x14000e431
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x14000e445
inc r8w
add r9, 0x28
cmp r8w, r15w
jb 0x14000e410
jmp 0x14000e44e
mov byte [r12 + 0x9e], 1
mov edx, dword [rsp + 0x34]
movzx r9d, r15w
mov r8, r10
mov ecx, ebx
call fcn.14000e8f0
mov ebp, eax
test eax, eax
je 0x14000e80d
lea r9, [rsp + 0x38]
mov rcx, rbp
mov r8d, 0x10
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e7bd
mov bx, word [rdi + 0xe]
mov r13d, 0x1000
lea eax, [rbp + 0x10]
add bx, word [rdi + 0xc]
cmp bx, r13w
jbe 0x14000e4a2
mov ebx, r13d
movzx r8d, bx
shl r8d, 3
test r8d, r8d
je 0x14000e4c6
lea r9, [rsp + 0x38]
mov ecx, eax
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e7ad
mov ecx, 0xffff
mov rax, rdi
cmp bx, cx
jne 0x14000e4d8
mov ebx, 0xfffe
movzx ecx, r14w
cmp r14w, bx
jae 0x14000e79d
bt dword [rax], 0x1f
jb 0x14000e4f2
cmp word [rax], 0xa
je 0x14000e50e
inc cx
add rax, 8
cmp cx, bx
jb 0x14000e4e6
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
cmp cx, bx
jae 0x14000e72d
mov esi, dword [rax + 4]
bt esi, 0x1f
jae 0x14000e7fd
btr esi, 0x1f
lea r9, [rsp + 0x38]
mov r8d, 0x10
add esi, ebp
mov rdx, rdi
mov ecx, esi
call fcn.14000de10
test eax, eax
je 0x14000e78d
mov bx, word [rdi + 0xe]
add esi, 0x10
add bx, word [rdi + 0xc]
cmp bx, r13w
jbe 0x14000e55b
mov ebx, r13d
movzx r8d, bx
shl r8d, 3
test r8d, r8d
je 0x14000e57f
lea r9, [rsp + 0x38]
mov ecx, esi
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e77d
mov ecx, 0xffff
mov rax, rdi
cmp bx, cx
jne 0x14000e594
mov ecx, 0xfffe
mov bx, cx
movzx ecx, r14w
cmp r14w, bx
jae 0x14000e76d
mov edx, 0x360
bt dword [rax], 0x1f
jb 0x14000e5b2
cmp word [rax], dx
je 0x14000e5ce
inc cx
add rax, 8
cmp cx, bx
jb 0x14000e5a7
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
cmp cx, bx
jae 0x14000e71d
mov esi, dword [rax + 4]
bt esi, 0x1f
jae 0x14000e7ed
btr esi, 0x1f
lea r9, [rsp + 0x38]
mov r8d, 0x10
add esi, ebp
mov rdx, rdi
mov ecx, esi
call fcn.14000de10
test eax, eax
je 0x14000e75d
mov bx, word [rdi + 0xe]
add esi, 0x10
add bx, word [rdi + 0xc]
cmp bx, r13w
jbe 0x14000e61b
mov ebx, r13d
movzx r8d, bx
shl r8d, 3
test r8d, r8d
je 0x14000e63f
lea r9, [rsp + 0x38]
mov ecx, esi
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e74d
mov eax, 0xffff
mov rcx, rdi
cmp bx, ax
jne 0x14000e654
mov eax, 0xfffe
mov bx, ax
movzx eax, r14w
cmp r14w, bx
jae 0x14000e73d
bt dword [rcx], 0x1f
jae 0x14000e684
inc ax
add rcx, 8
cmp ax, bx
jb 0x14000e662
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
cmp ax, bx
jae 0x14000e70d
mov eax, dword [rcx + 4]
bt eax, 0x1f
jb 0x14000e7dd
lea ecx, [rbp + rax]
lea r9, [rsp + 0x38]
mov r8d, 0x10
mov rdx, rdi
call fcn.14000de10
test eax, eax
je 0x14000e86b
cmp dword [rdi + 4], 0x80
jne 0x14000e7cd
mov rbx, qword [rsp + 0x28]
mov ecx, dword [rdi]
movzx r9d, r15w
mov r8, rbx
mov edx, 0x80
call fcn.14000e8f0
lea rdx, [r12 + 0x1c]
lea r9, [rsp + 0x38]
mov ecx, eax
mov r8d, 0x80
call fcn.14000de10
test eax, eax
je 0x14000e895
mov dword [r12 + 0x18], ebp
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
mov r14d, 1
jmp 0x14000e895
mov rbx, r14
mov r14d, 1
jmp 0x14000e895
lea r9, str._rN_e
lea rcx, str..QHImageHlp.c
mov edx, 0x252
mov r8d, 1
call fcn.1400120c0
mov rbx, r14
jmp 0x14000e895
lea r9, str._rN_f
lea rcx, str..QHImageHlp.c
mov edx, 0x229
mov r8d, 1
call fcn.1400120c0
mov rbx, r14
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
jmp 0x14000e895
mov rbx, qword [rsp + 0x28]
jmp 0x14000e895
mov rbx, r14
jmp 0x14000e895
mov rbx, r14
jmp 0x14000e895
mov rbx, r14
jmp 0x14000e895
mov rbx, r14
jmp 0x14000e895
mov rbx, r14
jmp 0x14000e895
mov rbx, r14
mov rcx, qword [rsp + 0x60]
mov r15, qword [rsp + 0x70]
mov r13, qword [rsp + 0x78]
mov r12, qword [rsp + 0x80]
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000e8ce
call fcn.140023bfc
test rbx, rbx
je 0x14000e8db
mov rcx, rbx
call fcn.140023bfc
mov eax, r14d
add rsp, 0x88
pop r14
pop rbx
ret