Function at 0x14000b0f8
Capabilities:
Get file size
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 0x10], edx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rsi, rcx
xor r13d, r13d
mov ebx, r13d
mov dword [rax + 0x10], ebx
mov rdi, qword [rcx + 0x430]
test rdi, rdi
jne 0x14000b135
mov ebx, 0xc00ee060
jmp 0x14000b3a4
lea rdx, [rsp + 0x80]
mov rcx, qword [rcx + 0x420]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
nop dword [rax + rax]
test eax, eax
jne 0x14000b34f
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov r14d, 1
test eax, eax
cmove eax, r14d
test eax, eax
jg 0x14000b18a
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
cmove ebx, r14d
jmp 0x14000b1a5
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
cmove eax, r14d
movzx ebx, ax
or ebx, 0x80070000
mov dword [rsp + 0x88], ebx
mov ecx, ebx
mov edx, 0x80070570
test ecx, ecx
js 0x14000b3a4
mov r10d, dword [rsi + 0x44c]
cmp r10d, 0x600000
ja 0x14000b3a2
cmp dword [rsi + 0x438], 0x60
jne 0x14000b3a2
mov ecx, dword [rsi + 0x43c]
cmp ecx, 0x60
jbe 0x14000b3a2
mov r8d, dword [rsi + 0x440]
test r8d, r8d
je 0x14000b3a2
lea r9d, [r8 + rcx]
cmp r9d, ecx
jb 0x14000b235
mov eax, dword [rsi + 0x444]
cmp r9d, eax
jne 0x14000b235
test eax, eax
je 0x14000b3a2
mov r9d, dword [rsi + 0x448]
test r9d, r9d
je 0x14000b3a2
lea r11d, [r9 + rax]
cmp r11d, eax
jb 0x14000b235
cmp r11d, r10d
je 0x14000b23e
mov ebx, edx
mov dword [rsp + 0x88], edx
test ebx, ebx
js 0x14000b3a4
mov r15d, dword [rdi + 4]
test r15d, r15d
js 0x14000b38b
cmp dword [rdi + 0x5c], 0x60
jne 0x14000b38b
cmp ecx, dword [rdi + 8]
jne 0x14000b38b
cmp r8d, dword [rdi + 0xc]
jne 0x14000b38b
mov eax, dword [rdi + 0x24]
cmp dword [rsi + 0x444], eax
jne 0x14000b38b
mov esi, dword [rsi + 0x448]
cmp esi, dword [rdi + 0x28]
jne 0x14000b38b
mov r9d, dword [rdi + 0x14]
cmp r8d, r9d
jb 0x14000b38b
mov r12d, dword [rdi + 0x30]
cmp esi, r12d
cmovb ebx, edx
mov dword [rsp + 0x88], ebx
test ebx, ebx
js 0x14000b394
mov eax, dword [rdi + 0x40]
add eax, 0xffffff80
cmp eax, r14d
ja 0x14000b38b
mov ecx, r15d
and ecx, 0xfffffff8
mov eax, ecx
neg eax
sbb ebx, ebx
and ebx, edx
test ecx, ecx
jne 0x14000b308
mov ecx, r15d
shr ecx, 1
and cl, r14b
mov dword [rsp + 0x38], 0x6727
mov eax, dword [rdi + 0x20]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r9d
mov r9d, dword [rdi + 0x10]
mov r8d, dword [rdi + 0x1c]
mov edx, dword [rdi + 0x18]
call fcn.14000aff8
mov ebx, eax
test ebx, ebx
js 0x14000b342
shr r15d, 2
and r15b, r14b
mov dword [rsp + 0x38], 0x1d
mov eax, dword [rdi + 0x3c]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r12d
mov r9d, dword [rdi + 0x2c]
mov r8d, dword [rdi + 0x38]
mov edx, dword [rdi + 0x34]
mov cl, r15b
call fcn.14000aff8
mov ebx, eax
test eax, eax
cmovns ebx, r13d
mov dword [rsp + 0x88], ebx
jmp 0x14000b394
cmp dword [rsp + 0x84], r13d
jg 0x14000b39d
mov ecx, r13d
mov rax, qword [rsp + 0x80]
mov r14d, 1
cmp eax, dword [rsi + 0x44c]
je 0x14000b1ae
mov edx, 0x80070570
mov ebx, edx
mov dword [rsp + 0x88], edx
mov ecx, edx
jmp 0x14000b1b3
mov dword [rsp + 0x88], edx
mov ebx, edx
jmp 0x14000b3a4
mov edx, 0x80070570
mov ebx, edx
mov eax, ebx
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret