Function at 0x402a50
Capabilities:
Create thread
Get file size
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x274
push ebx
push esi
push edi
call fcn.004020e0
mov eax, dword [str.mazhbh]
mov cx, word [0x40c198]
mov dl, byte [0x40c19a]
mov dword [esp + 0x10], eax
mov word [esp + 0x14], cx
xor eax, eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x16], dl
mov edx, dword [0x42d258]
mov dword [esp + 0x17], eax
push 0x14
push ecx
mov dword [esp + 0x23], eax
push 0x9ca4
push edx
mov byte [esp + 0x2f], al
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
xor edi, edi
lea esi, [esp + 0x79]
mov al, byte [esi - 1]
push eax
call fcn.00402a40
mov cl, byte [esi]
mov bl, al
push ecx
shl bl, 4
call fcn.00402a40
or bl, al
add esp, 8
mov byte [esp + edi + 0x24], bl
add esi, 2
inc edi
cmp edi, 5
jl 0x402aaa
xor eax, eax
mov dl, byte [esp + eax + 0x10]
mov bl, byte [esp + eax + 0x24]
xor bl, dl
mov dl, byte [eax + 0x42d030]
mov cl, bl
mov byte [esp + eax + 0x24], bl
cmp dl, cl
jne 0x402bf4
inc eax
cmp eax, 5
jl 0x402ad4
lea eax, [esp + 0x20]
push 0x10
lea ecx, [esp + 0x7d]
push eax
push ecx
call fcn.00403aa3
push str..dat
lea edx, [esp + 0x18c]
push 0x42d642
push edx
call fcn.00402380
add esp, 0x18
lea eax, [esp + 0x17c]
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x402b5b
pop edi
pop esi
mov dword [0x42dc70], 0
pop ebx
add esp, 0x274
ret
lea ecx, [esp + 0x70]
lea edx, [esp + 0x68]
push ecx
lea eax, [esp + 0x64]
push edx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
mov eax, dword [0x42dc7c]
test eax, eax
je 0x402b8e
push eax
call fcn.00403a8a
add esp, 4
lea ecx, [esi + 1]
push ecx
call fcn.00403a95
add esp, 4
mov dword [0x42dc7c], eax
test eax, eax
je 0x402bf8
lea edx, [esp + 0xc]
push 0
push edx
push esi
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [0x42dc7c]
mov ecx, 0x32
mov edi, 0x42d2b8
lea esi, [eax + 0x64]
mov eax, dword [0x42dc80]
test eax, eax
rep movsd dword es:[edi], dword [esi]
je 0x402bd9
push eax
call fcn.00403a8a
add esp, 4
mov ecx, dword [0x42d36c]
inc ecx
push ecx
call fcn.00403a95
add esp, 4
mov dword [0x42dc80], eax
test eax, eax
jne 0x402c13
jmp 0x402bf8
mov ebx, dword [esp + 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov dword [0x42dc70], 0
pop ebx
add esp, 0x274
ret
mov eax, 0x10001
mov ecx, 8
mov dword [esp + 0x34], eax
lea edi, [esp + 0x3c]
mov dword [esp + 0x38], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, dword [0x42dc7c]
mov edx, 1
stosw word es:[edi], ax
lea edi, [ecx + 0x12c]
mov ecx, 0xa
lea esi, [esp + 0x34]
mov dword [0x42dc70], edx
mov word [esp + 0x3e], dx
mov word [esp + 0x42], dx
mov word [esp + 0x48], dx
rep movsd dword es:[edi], dword [esi]
mov edx, dword [0x42d388]
push edx
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0x42da52
call fcn.00402060
add esp, 4
mov dword [0x42d354], eax
mov eax, dword [0x42dc7c]
mov ecx, 0x32
push 0x42dc6c
push 0
push 0
lea edi, [eax + 0x64]
mov esi, 0x42d2b8
push 0x402540
push 0
push 0
rep movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_CreateThread]
pop edi
pop esi
mov dword [0x42dc68], eax
pop ebx
add esp, 0x274
ret