Function at 0x1400242f8
Capabilities:
Get file size
Read file via mapping
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov byte [rsp + 0x18], r8b
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov r14, rcx
xor edi, edi
mov r15d, edi
lea r12, [0x140008d00]
test rdx, rdx
cmovne r12, rdx
test r12, r12
je 0x140024368
mov r15d, Ordinal_134
mov eax, r15d
mov rcx, r12
cmp byte [rcx], dil
je 0x14002434d
inc rcx
dec rax
jne 0x140024340
mov ebx, edi
mov edx, 0x80070057
test rax, rax
cmove ebx, edx
test ebx, ebx
js 0x140024363
sub r15, rax
jmp 0x14002436f
mov r15, rdi
jmp 0x14002436f
mov edx, 0x80070057
mov ebx, edx
test ebx, ebx
cmovs r15, rdi
mov qword [rsp + 0x78], r15
js 0x1400247db
mov dword [rsp + 0xe8], 0x400000
mov dword [rsp + 0xec], 0x100000
lea r13, [r15 + 1]
lea rax, [r13 + 0x60]
cmp rax, 0x60
jb 0x1400247cf
mov qword [rsp + 0x90], rax
lea r8, [rax + 0x400000]
cmp r8, rax
jb 0x1400247cf
mov qword [rsp + 0x80], r8
mov rsi, qword [rsp + 0xe8]
shr rsi, 0x20
add rsi, r8
mov qword [rsp + 0xf8], rsi
cmp rsi, r8
jb 0x1400247cf
mov qword [rsp + 0x88], rsi
cmp rsi, 0x600000
ja 0x1400247cf
lea rdx, [rsp + 0x48]
mov rcx, qword [r14 + 0x420]
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x14002444b
call fcn.14001215c
mov ebx, eax
mov esi, 0x80070570
cmp eax, esi
je 0x14002443a
test eax, eax
jns 0x1400247db
mov dword [0x14002ecc8], 0x531
jmp 0x1400247db
mov ebx, esi
mov dword [0x14002eccc], 0x531
jmp 0x1400247db
mov ebx, edi
cmp dword [rsp + 0x4c], edi
jg 0x140024466
mov eax, dword [rsp + 0x48]
cmp rax, rsi
jne 0x140024466
mov esi, 0x80070570
jmp 0x1400244eb
xor r9d, r9d
xor r8d, r8d
mov edx, esi
mov rcx, qword [r14 + 0x420]
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x1400244ae
call fcn.14001215c
mov ebx, eax
mov esi, 0x80070570
cmp eax, esi
je 0x1400244a0
test eax, eax
jns 0x1400244b3
mov dword [0x14002ecc8], 0x53d
jmp 0x1400244b3
mov ebx, esi
mov dword [0x14002eccc], 0x53d
jmp 0x1400244b3
mov esi, 0x80070570
mov rcx, qword [r14 + 0x420]
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
jne 0x1400244eb
call fcn.14001215c
mov ebx, eax
cmp eax, esi
je 0x1400244df
test eax, eax
jns 0x1400244eb
mov dword [0x14002ecc8], 0x542
jmp 0x1400244eb
mov ebx, esi
mov dword [0x14002eccc], 0x542
test ebx, ebx
js 0x1400247db
mov rcx, qword [r14 + 0x420]
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x140024537
call fcn.14001215c
mov ebx, eax
cmp eax, esi
je 0x140024526
test eax, eax
jns 0x1400247db
mov dword [0x14002ecc8], 0x54a
jmp 0x1400247db
mov ebx, esi
mov dword [0x14002eccc], 0x54a
jmp 0x1400247db
lea rax, [r14 + 0x208]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xf8]
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 4]
mov rcx, qword [r14 + 0x420]
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov qword [r14 + 0x428], rax
test rax, rax
jne 0x1400245a4
call fcn.14001215c
mov ebx, eax
cmp eax, esi
je 0x140024593
test eax, eax
jns 0x1400247db
mov dword [0x14002ecc8], 0x558
jmp 0x1400247db
mov ebx, esi
mov dword [0x14002eccc], 0x558
jmp 0x1400247db
mov rcx, rax
call fcn.140023cd4
mov ebx, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x1400247db
mov rbx, qword [rsp + 0xf8]
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 6]
mov rcx, qword [r14 + 0x428]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov qword [r14 + 0x430], rax
test rax, rax
jne 0x14002461d
call fcn.14001215c
mov ebx, eax
cmp eax, esi
je 0x14002460c
test eax, eax
jns 0x1400247db
mov dword [0x14002ecc8], 0x567
jmp 0x1400247db
mov ebx, esi
mov dword [0x14002eccc], 0x567
jmp 0x1400247db
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov rcx, qword [r14 + 0x430]
mov qword [rcx], 0x4020077
mov dword [r14 + 0x438], 0x60
lea rax, [r13 + 0x60]
mov dword [r14 + 0x43c], eax
mov edx, 0x400000
mov dword [rsp + 0xf0], edx
mov dword [r14 + 0x440], edx
lea rdx, [rax + 0x400000]
mov dword [r14 + 0x444], edx
mov edx, 0x100000
mov dword [rsp + 0xf8], edx
mov dword [r14 + 0x448], edx
mov dword [r14 + 0x44c], ebx
mov dword [rcx + 8], eax
mov eax, dword [r14 + 0x440]
mov dword [rcx + 0xc], eax
mov qword [rcx + 0x10], rdi
mov qword [rcx + 0x18], rdi
mov dword [rcx + 0x20], edi
mov eax, dword [r14 + 0x444]
mov dword [rcx + 0x24], eax
mov eax, dword [r14 + 0x448]
mov dword [rcx + 0x28], eax
mov qword [rcx + 0x2c], rdi
mov qword [rcx + 0x34], rdi
mov dword [rcx + 0x3c], edi
mov dword [rcx + 0x40], Ordinal_134
mov eax, dword [r14 + 0x438]
mov dword [rcx + 0x5c], eax
mov rcx, qword [r14 + 0x430]
add rcx, 0x60
mov ebx, edi
test r15, r15
je 0x140024786
lea rax, [r13 - 1]
mov edx, 0x7ffffffe
cmp rax, rdx
mov eax, 0x80070057
cmova ebx, eax
mov dword [rsp + 0x38], ebx
test ebx, ebx
js 0x140024781
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x40], rcx
mov ebx, edi
mov rax, rdi
mov qword [rsp + 0x50], rax
test r13, r13
je 0x140024766
test rdx, rdx
je 0x140024761
mov r8b, byte [r12]
test r8b, r8b
je 0x140024761
mov byte [rcx], r8b
inc rcx
mov qword [rsp + 0x40], rcx
inc r12
mov qword [rsp + 0x58], r12
dec r13
mov qword [rsp + 0x60], r13
dec rdx
mov qword [rsp + 0x70], rdx
inc rax
mov qword [rsp + 0x50], rax
jmp 0x140024721
test r13, r13
jne 0x14002477b
dec rcx
mov qword [rsp + 0x40], rcx
dec rax
mov qword [rsp + 0x50], rax
mov ebx, 0x8007007a
mov dword [rsp + 0x38], ebx
jmp 0x140024786
test r13, r13
je 0x140024789
mov byte [rcx], dil
mov dword [rsp + 0x30], ebx
jmp 0x1400247ac
cmp ebx, esi
jne 0x1400247ba
mov rcx, r14
call fcn.1400269e4
jmp 0x1400247db
test ebx, ebx
js 0x1400247db
mov edx, 3
mov rcx, r14
call fcn.140025a88
mov ebx, eax
jmp 0x1400247db
mov ebx, edx
mov dword [0x14002ecc8], 0x529
mov eax, ebx
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret