Function at 0x49a01a
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x218c
call fcn.00411aa0
mov eax, dword [0x4e22e4]
xor eax, esp
mov dword [esp + 0x2188], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
mov edi, 0x7ff
push edi
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x8d]
mov esi, ecx
push ebx
push eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x94], bl
call fcn.00401f80
add esp, 0xc
push edi
lea eax, [esp + 0x1195]
push ebx
push eax
mov byte [esp + 0x119c], bl
call fcn.00401f80
add esp, 0xc
push edi
lea eax, [esp + 0x995]
push ebx
push eax
mov byte [esp + 0x99c], bl
call fcn.00401f80
add esp, 0xc
push 0x103
lea eax, [esp + 0x88d]
push ebx
push eax
mov byte [esp + 0x894], bl
call fcn.00401f80
xor eax, eax
lea edi, [esp + 0x48]
add esp, 0xc
mov dword [esp + 0x38], ebx
mov edx, esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
stosd dword es:[edi], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], ebx
mov dword [0x4f5178], ebx
call fcn.00439e45
test eax, eax
je 0x49a10e
mov dword [0x4f4174], ebx
xor eax, eax
jmp 0x49a87f
cmp dword [esp + 0x10], ebx
je 0x49a11a
push dword [esp + 0x10]
jmp 0x49a145
mov edx, dword [esp + 0x2c]
call fcn.00439e45
test eax, eax
jne 0x49a144
push dword [esp + 0x2c]
mov ecx, 0x800
lea eax, [esp + 0x994]
call fcn.00438c78
pop ecx
call fcn.00438ab1
jmp 0x49a157
push esi
mov ecx, 0x800
lea eax, [esp + 0x994]
call fcn.00438c78
pop ecx
lea eax, [esp + 0x990]
push eax
push esi
call fcn.00401811
pop ecx
pop ecx
test eax, eax
jne 0x49a18a
lea esi, [esp + 0x990]
call fcn.0043ab78
mov eax, esi
push str._Unpacked
push eax
call fcn.00401bb0
mov esi, dword [esp + 0x1c]
pop ecx
pop ecx
push 0x159
push str.Archive.c
mov edx, 0x4ae668
mov ecx, esi
call fcn.0048d34e
mov edi, eax
pop ecx
pop ecx
mov dword [esp + 0x10], edi
cmp edi, ebx
jne 0x49a1b8
mov edi, esi
call fcn.0048e76e
jmp 0x49a101
mov esi, dword [esp + 0x14]
push str..exe
call fcn.0043aa1f
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
jne 0x49a1f8
cmp dword [ebp + 0x14], ebx
je 0x49a1e2
push str._nLooking_for_self_extraction...
call fcn.0049573d
pop ecx
mov ecx, esi
call fcn.00499567
mov esi, eax
push ebx
push esi
push edi
call fcn.0040287c
add esp, 0xc
jmp 0x49a1fa
xor esi, esi
push edi
push 1
lea eax, [esp + 0x4c]
push 4
push eax
call fcn.00402244
add esp, 0x10
cmp dword [ebp + 0x14], ebx
je 0x49a21c
push str._nValidating_CheckSum...
call fcn.0049573d
pop ecx
push dword [esp + 0x10]
lea eax, [esp + 0x44]
push 1
push 4
push eax
call fcn.00402244
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x20]
call fcn.00497e37
push ebx
add esi, 0x10
push esi
push dword [esp + 0x28]
mov edi, eax
call fcn.0040287c
add esp, 0x1c
mov esi, str.222PAULAARCHIVE222JesusIAdoreYou
push dword [esp + 0x10]
call fcn.00401e7e
pop ecx
movsx ecx, byte [esi]
cmp eax, ecx
jne 0x49a297
inc esi
cmp byte [esi], bl
jne 0x49a253
cmp edi, dword [esp + 0x40]
je 0x49a2c0
cmp dword [ebp + 0x14], ebx
je 0x49a27f
push str._nERROR:_CheckSum_failed._The_given_archive_is_corrupt_
call fcn.0049573d
pop ecx
mov ecx, dword [esp + 0x10]
call fcn.0048fc61
mov dword [0x4f5178], 1
jmp 0x49a101
mov ecx, dword [esp + 0x10]
call fcn.0048fc61
cmp dword [ebp + 0x14], ebx
je 0x49a2b0
push str._nERROR:_The_given_archive_is_invalid_or_corrupt_
call fcn.0049573d
pop ecx
mov ecx, dword [esp + 0x14]
xor edx, edx
call fcn.0048eed9
jmp 0x49a101
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
push edi
push 1
lea eax, [esp + 0x24]
push 4
push eax
mov dword [esp + 0x2c], ebx
call fcn.00402244
add esp, 0x10
cmp eax, 1
jae 0x49a308
push edi
call fcn.004019d8
pop ecx
test eax, eax
jne 0x49a78e
cmp dword [ebp + 0x14], ebx
je 0x49a308
push 0x1ad
push str._n________ERROR__d________
call fcn.0049573d
pop ecx
pop ecx
cmp dword [esp + 0x1c], ebx
jl 0x49a7aa
push 0x800
lea eax, [esp + 0x8c]
push ebx
push eax
call fcn.00401f80
add esp, 0xc
xor esi, esi
push edi
call fcn.00401e7e
pop ecx
mov byte [esp + esi + 0x88], al
cmp eax, ebx
je 0x49a345
inc esi
cmp esi, 0x800
jb 0x49a32a
cmp esi, 0x800
jae 0x49a7ba
push 8
lea eax, [esp + 0x3c]
push ebx
push eax
call fcn.00401f80
add esp, 0xc
push edi
push 1
lea eax, [esp + 0x40]
push 8
push eax
call fcn.00402244
add esp, 0x10
cmp eax, 1
jb 0x49a7cd
cmp dword [esp + 0x1c], ebx
jne 0x49a39b
lea edx, [esp + 0x88]
call fcn.00439e45
test eax, eax
je 0x49a39b
inc dword [esp + 0x34]
jmp 0x49a2c4
mov edx, dword [esp + 0x2c]
call fcn.00439e45
test eax, eax
jne 0x49a3c1
lea eax, [esp + 0x88]
call fcn.00438ab1
mov ecx, dword [esp + 0x2c]
mov ebx, eax
call fcn.0043af29
xor ebx, ebx
cmp dword [ebp + 0x14], ebx
je 0x49a46d
cmp dword [ebp + 0x14], 0xde
jne 0x49a459
push 0x36
lea eax, [esp + 0x55]
push ebx
push eax
mov byte [esp + 0x5c], bl
call fcn.00401f80
add esp, 0xc
push 0x7ff
lea eax, [esp + 0x1995]
push ebx
push eax
mov byte [esp + 0x199c], bl
call fcn.00401f80
lea eax, [esp + 0x94]
add esp, 0xc
push eax
mov edi, 0x800
mov ecx, edi
lea eax, [esp + 0x1994]
call fcn.00438c78
pop ecx
mov esi, eax
call fcn.00438af2
call fcn.0043ab78
push ebx
push str..dat
push str..wav
mov eax, esi
push edi
push eax
call fcn.0043a723
add esp, 0x14
mov eax, esi
push eax
push 0x37
pop ecx
lea eax, [esp + 0x54]
call fcn.00438c78
pop ecx
jmp 0x49a460
lea eax, [esp + 0x88]
push eax
push str._nExpanding:___s_
call fcn.0049573d
pop ecx
pop ecx
lea edx, [esp + 0x990]
lea ecx, [esp + 0x88]
call fcn.0043ac16
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x1194]
push eax
call fcn.00401ba0
lea eax, [esp + 0x1198]
call fcn.00438ab1
push eax
call fcn.0048c9dd
add esp, 0xc
test eax, eax
jne 0x49a4da
push ebx
lea ecx, [esp + 0x1194]
call fcn.0048e4b7
pop ecx
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x1190]
push eax
call fcn.0048c9dd
pop ecx
test eax, eax
je 0x49a7d9
call fcn.0041a958
mov dword [esp + 0x30], eax
xor edi, edi
push 0x22a
push str.Archive.c
mov edx, 0x4ae7a4
lea ecx, [esp + 0x90]
call fcn.0048d34e
pop ecx
pop ecx
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x49a5ea
call fcn.0041a958
sub eax, dword [esp + 0x30]
cmp eax, 0x1194
ja 0x49a555
cmp dword [0x4f4174], ebx
jne 0x49a555
lea esi, [esp + 0x88]
call fcn.00439946
mov eax, esi
push eax
call fcn.00401a80
pop ecx
mov ecx, esi
cmp byte [eax + ecx - 1], 0x5c
je 0x49a555
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xf
jl 0x49a4e5
cmp dword [ebp + 0x14], ebx
je 0x49a5a7
lea eax, [esp + 0x88]
push eax
call fcn.00401a80
pop ecx
lea ecx, [esp + 0x88]
cmp byte [eax + ecx - 1], 0x5c
je 0x49a5a7
push dword [esp + 0x10]
call fcn.0040278d
pop ecx
push eax
push 0x23e
push str._n________ERROR__d__d________
call fcn.0049573d
add esp, 0xc
lea eax, [esp + 0x88]
push eax
push str._n___Could_not_open_destination___s__for_writing_
call fcn.0049573d
pop ecx
pop ecx
cmp dword [0x4f4174], ebx
jne 0x49a5b3
inc dword [esp + 0x18]
cmp dword [esp + 0x1c], ebx
jle 0x49a2c4
push 1
push dword [esp + 0x20]
push dword [esp + 0x18]
call fcn.0040287c
add esp, 0xc
test eax, eax
je 0x49a2c4
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x248
jmp 0x49a82b
inc dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jne 0x49a60e
push 1
push 0xc366
call fcn.00401a3a
pop ecx
pop ecx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x49a7ed
mov dword [esp + 0x30], ebx
cmp dword [esp + 0x1c], ebx
jle 0x49a707
push dword [esp + 0x10]
lea eax, [esp + 0x24]
push 1
push 2
push eax
call fcn.00402244
add esp, 0x10
cmp eax, 1
jb 0x49a7f9
cmp word [esp + 0x20], bx
je 0x49a821
movzx eax, word [esp + 0x20]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
fcomp qword [0x4deec8]
fnstsw ax
test ah, 0x41
je 0x49a821
movzx esi, word [esp + 0x20]
push dword [esp + 0x10]
mov edi, dword [esp + 0x2c]
push esi
push 1
push edi
call fcn.00402244
add esp, 0x10
cmp eax, esi
jb 0x49a805
push dword [esp + 0x48]
add esi, edi
push esi
push dword [esp + 0x28]
mov eax, edi
call fcn.004980dc
movzx eax, ax
add esp, 0xc
cmp ax, bx
je 0x49a811
push dword [esp + 0x24]
mov esi, eax
movzx eax, word [esp + 0x24]
push esi
add eax, edi
push 1
push eax
call fcn.0040257f
add esp, 0x10
cmp eax, esi
jae 0x49a6dc
cmp dword [ebp + 0x14], ebx
je 0x49a6d8
push 0x29d
push str._n________ERROR__d________
call fcn.0049573d
pop ecx
pop ecx
inc dword [esp + 0x18]
cmp dword [ebp + 0x14], ebx
je 0x49a6ec
push 0x4ae7fc
call fcn.0049573d
pop ecx
movzx eax, word [esp + 0x20]
mov ecx, dword [esp + 0x30]
lea eax, [ecx + eax + 2]
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x1c]
jl 0x49a61c
mov ecx, dword [esp + 0x24]
call fcn.0048fc61
push ebx
push closesocket
push 3
push ebx
push 7
push 0x100
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x40], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x49a758
cmp dword [ebp + 0x14], ebx
je 0x49a74f
push 0x2c2
push str._n________ERROR__d________
call fcn.0049573d
pop ecx
pop ecx
inc dword [esp + 0x18]
jmp 0x49a2c4
lea eax, [esp + 0x38]
push eax
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x49a784
cmp dword [ebp + 0x14], ebx
je 0x49a780
push 0x2c9
push str._n________ERROR__d________
call fcn.0049573d
pop ecx
pop ecx
inc dword [esp + 0x18]
call fcn.0048d2af
jmp 0x49a2c4
xor esi, esi
inc esi
cmp dword [ebp + 0x14], ebx
je 0x49a839
push str._nDone_
call fcn.0049573d
pop ecx
jmp 0x49a839
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x1b4
jmp 0x49a82b
mov byte [esp + 0x106], bl
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x1ca
jmp 0x49a82b
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x1d3
jmp 0x49a82b
cmp dword [ebp + 0x14], ebx
je 0x49a837
lea eax, [esp + 0x1190]
push eax
push str._nERROR:_Could_not_create_directory___s_
jmp 0x49a830
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x25f
jmp 0x49a82b
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x26b
jmp 0x49a82b
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x27d
jmp 0x49a82b
xor esi, esi
cmp dword [esp + 0x48], ebx
je 0x49a839
inc esi
or dword [esp + 0x14], 0xffffffff
jmp 0x49a839
cmp dword [ebp + 0x14], ebx
je 0x49a837
push 0x274
push str._n________ERROR__d________
call fcn.0049573d
pop ecx
pop ecx
xor esi, esi
mov ecx, dword [esp + 0x10]
call fcn.0048fc61
mov ecx, dword [esp + 0x24]
cmp ecx, ebx
je 0x49a84f
call fcn.0048fc61
cmp dword [esp + 0x28], ebx
je 0x49a85f
push dword [esp + 0x28]
call fcn.00401a00
pop ecx
mov dword [0x4f4174], ebx
cmp dword [esp + 0x34], ebx
jle 0x49a875
cmp dword [esp + 0x14], ebx
jle 0x49a875
mov dword [esp + 0x14], ebx
mov eax, esi
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2194]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401317
mov esp, ebp
pop ebp
ret