Function at 0x401a90
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov eax, dword [esp + 0x44]
mov ebx, dword [esp + 0x40]
cmp byte [eax + 0x11], 0x6e
je 0x401bf8
mov eax, dword [esp + 0x48]
mov dword [esp + 4], 0x41a280
mov dword [esp], eax
call fcn.00403fa0
mov dword [esp + 0x1c], eax
test eax, eax
je 0x401d40
mov dword [esp + 4], 0x41a164
mov dword [esp], ebx
call fcn.00403fa0
mov ebp, eax
test eax, eax
je 0x401ca0
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 0
mov eax, dword [eax + 4]
add eax, dword [ebx + 0x1000]
mov dword [esp], ebp
mov dword [esp + 4], eax
call fcn.0040f880
test eax, eax
js 0x401d08
mov eax, dword [esp + 0x44]
cmp byte [eax + 0x10], 1
je 0x401c38
mov dword [esp], 0x2000
call sub.msvcrt.dll_malloc
mov ebx, eax
test eax, eax
je 0x401d75
mov eax, dword [esp + 0x44]
xor edi, edi
mov esi, dword [eax + 0xc]
mov eax, esi
or eax, edi
jne 0x401b82
jmp 0x401cc0
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], 1
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 4], eax
call sub.msvcrt.dll_fwrite
test eax, eax
je 0x401cd0
sub esi, dword [esp + 0x10]
sbb edi, dword [esp + 0x14]
mov eax, esi
or eax, edi
je 0x401cc0
xor eax, eax
mov edx, 0x2000
mov dword [esp + 0xc], ebp
cmp edx, esi
mov ecx, eax
mov dword [esp + 8], 1
sbb ecx, edi
mov dword [esp], ebx
cmovae edx, esi
cmovae eax, edi
mov dword [esp + 4], edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], eax
call sub.msvcrt.dll_fread
test eax, eax
jne 0x401b48
call dword [sym.imp.msvcrt.dll__errno]
mov edi, dword [esp + 0x44]
mov dword [esp + 8], str.Failed_to_extract__s:_failed_to_read_data_chunk__n
lea edx, [edi + 0x12]
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp], str.fread
mov dword [esp + 4], eax
call fcn.004024f0
mov esi, 0xffffffff
mov dword [esp], ebx
call sub.msvcrt.dll_free
jmp 0x401c4e
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00401890
mov ebx, eax
test eax, eax
je 0x401c6c
mov eax, dword [esp + 0x48]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00404060
mov dword [esp], ebx
mov esi, eax
call sub.msvcrt.dll_free
test esi, esi
js 0x401c80
add esp, 0x2c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], 0
mov ecx, dword [esp + 0x1c]
mov edx, eax
mov eax, ebp
call fcn.00401500
mov esi, eax
mov dword [esp], ebp
call sub.msvcrt.dll_fclose
mov eax, dword [esp + 0x1c]
mov dword [esp], eax
call sub.msvcrt.dll_fclose
add esp, 0x2c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, 0xffffffff
lea esi, cs:[esi]
lea esi, [esi]
mov eax, dword [esp + 0x44]
mov dword [esp], str.Failed_to_create_symbolic_link__s__n
add eax, 0x12
mov dword [esp + 4], eax
call fcn.00402450
jmp 0x401c28
mov eax, dword [esp + 0x44]
mov dword [esp], str.Failed_to_extract__s:_failed_to_open_archive_file__n
mov esi, 0xffffffff
add eax, 0x12
mov dword [esp + 4], eax
call fcn.00402450
jmp 0x401c56
xor esi, esi
jmp 0x401be9
call dword [sym.imp.msvcrt.dll__errno]
mov dword [esp + 8], str.Failed_to_extract__s:_failed_to_write_data_chunk__n
mov edx, eax
mov eax, dword [esp + 0x44]
add eax, 0x12
mov dword [esp + 0xc], eax
mov eax, dword [edx]
mov dword [esp], str.fwrite
mov dword [esp + 4], eax
call fcn.004024f0
jmp 0x401be4
call dword [sym.imp.msvcrt.dll__errno]
mov edi, dword [esp + 0x44]
mov dword [esp + 8], str.Failed_to_extract__s:_failed_to_seek_to_the_entrys_data__n
lea edx, [edi + 0x12]
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp], str.fseek
mov dword [esp + 4], eax
call fcn.004024f0
or esi, 0xffffffff
jmp 0x401c4e
call dword [sym.imp.msvcrt.dll__errno]
mov edi, dword [esp + 0x44]
mov esi, 0xffffffff
mov dword [esp + 8], str.Failed_to_extract__s:_failed_to_open_target_file__n
lea edx, [edi + 0x12]
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp], str.fopen
mov dword [esp + 4], eax
call fcn.004024f0
jmp 0x401c28
call dword [sym.imp.msvcrt.dll__errno]
mov edi, dword [esp + 0x44]
mov dword [esp + 8], str.Failed_to_extract__s:_failed_to_allocate_temporary_buffer__n
lea edx, [edi + 0x12]
mov dword [esp + 0xc], edx
mov eax, dword [eax]
mov dword [esp], str.malloc
mov dword [esp + 4], eax
call fcn.004024f0
jmp 0x401d33