Function at 0x402388
Capabilities:
Read file on windows
Write file on windows

Disassembly:
jmp 0x42ed20
push 0xffffffffffffffff
push 0x509ef4
mov eax, dword fs:[0]
push eax
sub esp, 0x230
mov eax, dword [0x53bbf0]
xor eax, esp
mov dword [esp + 0x22c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53bbf0]
xor eax, esp
push eax
lea eax, [esp + 0x244]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x234c]
push eax
call fcn.0048c770
xor edi, edi
add esp, 4
cmp dword [esi + 0x214c], edi
jne 0x42edba
push 0x20c
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
cmp eax, edi
mov dword [esp + 0x24c], edi
je 0x42eda7
mov ecx, dword [esi + 0x22f0]
push ecx
push str.banner.dat
mov ecx, eax
call fcn.0040128f
jmp 0x42eda9
xor eax, eax
mov dword [esp + 0x24c], 0xffffffff
mov dword [esi + 0x214c], eax
push 0x53
push 0x59
push 0x53
push 0x2e
push 0x53
push 0x4f
push 0x4e
push 0x49
push 0x57
push 0x5c
push 0x3a
push 0x43
lea edx, [esp + 0x50]
push str._c_c_c_c_c_c_c_c_c_c_c_c
push edx
mov dword [esp + 0x4c], edi
call fcn.004c1313
lea eax, [esp + 0x58]
push edi
push eax
call fcn.004c4420
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, dword [sym.imp.KERNEL32.dll_CreateFileA]
add esp, 0x40
test eax, eax
jne 0x42ee35
push edi
push 2
push 3
push edi
push edi
push DirectSoundCreate
lea ecx, [esp + 0x38]
push ecx
call ebp
mov edi, eax
cmp edi, 0xffffffff
je 0x42ee35
push 0
lea edx, [esp + 0x1c]
push edx
push 4
lea eax, [esp + 0x20]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edi
call ebx
cmp dword [esp + 0x14], 0
jne 0x42eec0
push 0
call fcn.004c2809
add esp, 4
mov edi, eax
mov dword [esp + 0x1c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
add eax, edi
push eax
call fcn.004c119e
add esp, 4
call fcn.004c11ab
mov edi, eax
shl edi, 0x10
call fcn.004c11ab
push 0
push pe_nt_image_headers32
push 2
or eax, edi
push 0
cdq
push 0
xor eax, edx
push 0xc0000000
lea ecx, [esp + 0x38]
sub eax, edx
push ecx
mov dword [esp + 0x30], eax
call ebp
mov edi, eax
cmp edi, 0xffffffff
je 0x42eec0
push 0
lea edx, [esp + 0x1c]
push edx
push 4
lea eax, [esp + 0x20]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call ebx
push 7
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0x7f02
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
lea edi, [esi + 0x2608]
push 0x2e
push edi
call fcn.004c0af0
add esp, 8
test eax, eax
je 0x42ef37
push eax
push str..cfg
call fcn.004c16c5
add esp, 8
test eax, eax
jne 0x42ef37
push 0xa04
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24c], 1
je 0x42ef2a
push edi
lea edx, [esi + 0x2588]
push edx
mov ecx, eax
call fcn.004015d7
mov dword [esp + 0x24c], 0xffffffff
jmp 0x42ef9c
push 0x3d08
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24c], 2
je 0x42ef6a
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x18]
push ecx
push edx
push edi
mov ecx, eax
call fcn.00401ae1
jmp 0x42ef6c
xor eax, eax
push 0
lea ecx, [esi + 0x25c8]
push ecx
lea edx, [esi + 0x2588]
push edx
mov edx, dword [esi + 0x24c4]
lea ecx, [esi + 0x24c8]
push ecx
push edx
mov ecx, eax
mov dword [esp + 0x260], 0xffffffff
call fcn.004012f8
mov ebx, dword [sym.imp.USER32.dll_MessageBoxA]
xor ebp, ebp
jmp 0x42efb0
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [0x56391c]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
lea edx, [esp + 0x40]
push edx
call eax
cmp byte [esp + 0x40], 0
mov edi, eax
je 0x42f03c
mov ecx, dword [0x56c2fc]
mov edx, dword [0x563918]
mov eax, dword [edx + 0x10]
push 0x100
shl ecx, 8
add ecx, 0x56afc8
push ecx
push 6
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
mov eax, dword [0x56c2fc]
lea ecx, [eax + 1]
and ecx, reloc.WSOCK32.dll_ntohs
jns 0x42f01b
dec ecx
or ecx, 0xfffffff0
inc ecx
shl eax, 8
push 0
add eax, 0x56afc8
push eax
mov eax, dword [0x563918]
lea edx, [esp + 0x48]
mov dword [0x56c2fc], ecx
mov ecx, dword [eax + 0xc]
push edx
push ecx
call ebx
test edi, edi
je 0x42f1ce
mov ecx, dword [0x56391c]
test ecx, ecx
je 0x42f05e
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
xor ecx, ecx
mov dword [0x56391c], ecx
cmp edi, 1
jne 0x42f102
mov ecx, dword [0x563918]
mov edx, dword [ecx + 0xc]
push 0x44
push str.Notice
push str.Unknown_alias__do_you_wish_to_create_this_new_alias_
push edx
call ebx
cmp eax, 6
jne 0x42f1ce
push 0x3d08
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24c], 3
je 0x42f0c3
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x18]
push ecx
push edx
lea ecx, [esi + 0x2608]
push ecx
mov ecx, eax
call fcn.00401ae1
mov ecx, eax
jmp 0x42f0c5
xor ecx, ecx
test ebp, ebp
mov dword [esp + 0x24c], 0xffffffff
push 1
lea eax, [esi + 0x25e8]
jne 0x42f0e2
lea eax, [esi + 0x25c8]
push eax
lea edx, [esi + 0x2588]
push edx
mov edx, dword [esi + 0x24c4]
lea eax, [esi + 0x24c8]
push eax
push edx
call fcn.004012f8
jmp 0x42efb0
cmp edi, 6
jne 0x42f1a4
mov eax, dword [0x563918]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x10]
push 0
push 0x401177
push ecx
push 0x7e
push edx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
test eax, eax
je 0x42f1ce
push 0x3d08
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24c], 4
je 0x42f168
mov ecx, dword [esp + 0x14]
mov edx, dword [esi + 0x18]
push ecx
push edx
lea ecx, [esi + 0x2608]
push ecx
mov ecx, eax
call fcn.00401ae1
jmp 0x42f16a
xor eax, eax
push 0
lea ecx, [esi + 0x25e8]
push ecx
lea edx, [esi + 0x2588]
push edx
mov edx, dword [esi + 0x24c4]
lea ecx, [esi + 0x24c8]
push ecx
push edx
mov ecx, eax
mov dword [esp + 0x260], 0xffffffff
call fcn.004012f8
mov ebp, 1
jmp 0x42efb0
cmp byte [esp + 0x40], 0
jne 0x42f1d4
push 0
push 6
call fcn.00402617
add esp, 4
push eax
push 0x57
call fcn.00402617
add esp, 4
push eax
mov eax, dword [0x563918]
mov ecx, dword [eax + 0xc]
push ecx
call ebx
mov ecx, dword [0x56391c]
test ecx, ecx
je 0x42f2a7
push 0x40
push 0
push 0
call dword [sym.imp.WINMM.dll_PlaySoundA]
mov ecx, dword [0x56391c]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
test eax, eax
je 0x42f280
cmp byte [0x563088], 0
je 0x42f228
mov ecx, dword [0x56391c]
test ecx, ecx
je 0x42f2a7
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x56391c], 0
jmp 0x42f2a7
cmp dword [esi + 0x228c], 0
je 0x42f236
call fcn.00402702
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x42f24c
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [esi + 0x20], 0
push 0x1cd3c
call fcn.004c1ea3
add esp, 4
mov dword [esp + 0x18], eax
test eax, eax
mov dword [esp + 0x24c], 5
je 0x42f273
mov ecx, eax
call fcn.00401d1b
mov dword [esp + 0x24c], 0xffffffff
jmp 0x42f29c
mov ecx, dword [0x56391c]
test ecx, ecx
je 0x42f29c
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
mov dword [0x56391c], 0
mov ecx, dword [0x563908]
call fcn.004026e4
mov ecx, dword [esp + 0x244]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x22c]
xor ecx, esp
call fcn.004c118f
add esp, 0x23c
ret