Function at 0x5033f0
Capabilities:
Get file size
Read file via mapping

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x290
mov rbp, rsp
mov qword [rbp + 0x50], rdx
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
nop
xor rax, rax
mov byte [rbp + 0x4f], al
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
jne 0x50348a
mov rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x86]
mov r8d, 0x104
call sub.kernel32.dll_GetModuleFileNameW
lea rcx, [rbp + 0x86]
mov edx, 0x80000000
mov r8d, 3
xor r9, r9
mov dword [rsp + 0x20], 3
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileW
mov qword [rbp + 0x58], rax
jmp 0x5034da
mov rcx, qword [rbp + 0x50]
lea rdx, [rbp + 0x86]
mov r8d, 0x104
call sub.kernel32.dll_GetModuleFileNameA
lea rcx, [rbp + 0x86]
mov edx, 0x80000000
mov r8d, 3
xor r9, r9
mov dword [rsp + 0x20], 3
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
call sub.kernel32.dll_CreateFileA
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
cmp rax, 0xffffffffffffffff
je 0x5035d0
mov rcx, qword [rbp + 0x58]
xor rdx, rdx
mov r8d, 2
xor r9, r9
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call sub.kernel32.dll_CreateFileMappingW
mov rbx, rax
test rbx, rbx
je 0x5035c7
mov rcx, rbx
mov edx, 4
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
call sub.kernel32.dll_MapViewOfFile
mov rsi, rax
test rsi, rsi
je 0x5035bf
mov rcx, rsi
call fcn.0042e9a0
test rax, rax
je 0x5035b7
cmp word [rax + 0x18], 0x20b
jne 0x50355b
lea r13, [rax + 0x58]
jmp 0x50355f
lea r13, [rax + 0x58]
cmp dword [r13], 0
je 0x5035b7
mov rcx, qword [rbp + 0x58]
xor rdx, rdx
call sub.kernel32.dll_GetFileSize
mov edi, eax
mov rcx, rbp
mov rdx, rsi
mov r8d, r13d
sub r8d, esi
xor r9, r9
call fcn.00503360
mov rcx, rbp
lea rdx, [r13 + 4]
mov r8d, r13d
sub r8d, esi
mov r9d, edi
sub r9d, r8d
sub r9d, 4
mov r8d, r9d
mov r9d, eax
call fcn.00503360
add eax, edi
cmp eax, dword [r13]
je 0x5035b7
mov al, 1
mov byte [rbp + 0x4f], al
mov rcx, rsi
call sub.kernel32.dll_UnmapViewOfFile
mov rcx, rbx
call sub.kernel32.dll_CloseHandle
mov rcx, qword [rbp + 0x58]
call sub.kernel32.dll_CloseHandle
movzx rax, byte [rbp + 0x4f]
test al, al
je 0x5036c8
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
jne 0x503625
mov rcx, qword [0x00b2f240]
lea rdx, [rbp + 0x78]
mov rax, qword [0x00b2f240]
mov rbx, qword [rax]
call qword [rbx + 0x540]
mov rcx, qword [rbp + 0x78]
call fcn.00411e10
xor rcx, rcx
mov rdx, rax
xor r8, r8
mov r9d, 0x10
call sub.user32.dll_MessageBoxW
jmp 0x50366e
mov rcx, qword [0x00b2f240]
lea rdx, [rbp + 0x70]
mov rax, qword [0x00b2f240]
mov rbx, qword [rax]
call qword [rbx + 0x540]
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x70]
xor r8, r8
call fcn.00411660
mov rcx, qword [rbp + 0x68]
call fcn.00411320
xor rcx, rcx
mov rdx, rax
xor r8, r8
mov r9d, 0x10
call sub.user32.dll_MessageBoxA
xor rcx, rcx
call sub.kernel32.dll_GetModuleHandleW
cmp qword [0x00b2dcb0], rax
je 0x5036c0
lea rcx, [0x00b2f240]
call fcn.00415f60
mov rcx, qword [0x00b2f240]
lea rdx, [rbp + 0x60]
mov rax, qword [0x00b2f240]
mov rbx, qword [rax]
call qword [rbx + 0x540]
mov rcx, qword [0x00422418]
mov rdx, qword [rbp + 0x60]
call fcn.00422680
mov rcx, rax
call fcn.0040f120
jmp 0x5036c8
xor rcx, rcx
call sub.kernel32.dll_ExitProcess
nop
lea rcx, [rbp + 0x60]
call fcn.00410080
lea rcx, [rbp + 0x68]
call fcn.004100d0
lea rcx, [rbp + 0x70]
mov edx, 2
call fcn.00410160
movzx rax, byte [rbp + 0x4f]
lea rsp, [rbp + 0x290]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret