Function at 0x499ed6
Capabilities:
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x218c
call fcn.00411aa0
mov eax, dword [0x4e22e4]
xor eax, esp
mov dword [esp + 0x2188], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
mov edi, 0x7ff
push edi
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x8d]
mov esi, ecx
push ebx
push eax
mov dword [esp + 0x20], esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x94], bl
call fcn.00401f80
add esp, 0xc
push edi
lea eax, [esp + 0x1195]
push ebx
push eax
mov byte [esp + 0x119c], bl
call fcn.00401f80
add esp, 0xc
push edi
lea eax, [esp + 0x995]
push ebx
push eax
mov byte [esp + 0x99c], bl
call fcn.00401f80
add esp, 0xc
push 0x103
lea eax, [esp + 0x88d]
push ebx
push eax
mov byte [esp + 0x894], bl
call fcn.00401f80
xor eax, eax
lea edi, [esp + 0x48]
add esp, 0xc
mov dword [esp + 0x38], ebx
mov edx, esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
stosd dword es:[edi], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x18], ebx
mov dword [0x4f5178], ebx
call fcn.00439c75
test eax, eax
je 0x499fca
mov dword [0x4f4174], ebx
xor eax, eax
jmp 0x49a73b
cmp dword [esp + 0x10], ebx
je 0x499fd6
push dword [esp + 0x10]
jmp 0x49a001
mov edx, dword [esp + 0x2c]
call fcn.00439c75
test eax, eax
jne 0x49a000
push dword [esp + 0x2c]
mov ecx, 0x800
lea eax, [esp + 0x994]
call fcn.00438aa8
pop ecx
call fcn.004388e1
jmp 0x49a013
push esi
mov ecx, 0x800
lea eax, [esp + 0x994]
call fcn.00438aa8
pop ecx
lea eax, [esp + 0x990]
push eax
push esi
call fcn.00401811
pop ecx
pop ecx
test eax, eax
jne 0x49a046
lea esi, [esp + 0x990]
call fcn.0043a9a8
mov eax, esi
push str._Unpacked
push eax
call fcn.00401bb0
mov esi, dword [esp + 0x1c]
pop ecx
pop ecx
push 0x159
push str.Archive.c
mov edx, 0x4ae668
mov ecx, esi
call fcn.0048d3dd
mov edi, eax
pop ecx
pop ecx
mov dword [esp + 0x10], edi
cmp edi, ebx
jne 0x49a074
mov edi, esi
call fcn.0048e806
jmp 0x499fbd
mov esi, dword [esp + 0x14]
push str..exe
call fcn.0043a84f
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
jne 0x49a0b4
cmp dword [ebp + 0x14], ebx
je 0x49a09e
push str._nLooking_for_self_extraction...
call fcn.00495559
pop ecx
mov ecx, esi
call fcn.00499421
mov esi, eax
push ebx
push esi
push edi
call fcn.0040287c
add esp, 0xc
jmp 0x49a0b6
xor esi, esi
push edi
push 1
lea eax, [esp + 0x4c]
push 4
push eax
call fcn.00402244
add esp, 0x10
cmp dword [ebp + 0x14], ebx
je 0x49a0d8
push str._nValidating_CheckSum...
call fcn.00495559
pop ecx
push dword [esp + 0x10]
lea eax, [esp + 0x44]
push 1
push 4
push eax
call fcn.00402244
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x20]
call fcn.00497cf1
push ebx
add esi, 0x10
push esi
push dword [esp + 0x28]
mov edi, eax
call fcn.0040287c
add esp, 0x1c
mov esi, str.222PAULAARCHIVE222JesusIAdoreYou
push dword [esp + 0x10]
call fcn.00401e7e
pop ecx
movsx ecx, byte [esi]
cmp eax, ecx
jne 0x49a153
inc esi
cmp byte [esi], bl
jne 0x49a10f
cmp edi, dword [esp + 0x40]
je 0x49a17c
cmp dword [ebp + 0x14], ebx
je 0x49a13b
push str._nERROR:_CheckSum_failed._The_given_archive_is_corrupt_
call fcn.00495559
pop ecx
mov ecx, dword [esp + 0x10]
call fcn.0048fcf9
mov dword [0x4f5178], 1
jmp 0x499fbd
mov ecx, dword [esp + 0x10]
call fcn.0048fcf9
cmp dword [ebp + 0x14], ebx
je 0x49a16c
push str._nERROR:_The_given_archive_is_invalid_or_corrupt_
call fcn.00495559
pop ecx
mov ecx, dword [esp + 0x14]
xor edx, edx
call fcn.0048ef71
jmp 0x499fbd
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
push edi
push 1
lea eax, [esp + 0x24]
push 4
push eax
mov dword [esp + 0x2c], ebx
call fcn.00402244
add esp, 0x10
cmp eax, 1
jae 0x49a1c4
push edi
call fcn.004019d8
pop ecx
test eax, eax
jne 0x49a64a
cmp dword [ebp + 0x14], ebx
je 0x49a1c4
push 0x1ad
push str._n________ERROR__d________
call fcn.00495559
pop ecx
pop ecx
cmp dword [esp + 0x1c], ebx
jl 0x49a666
push 0x800
lea eax, [esp + 0x8c]
push ebx
push eax
call fcn.00401f80
add esp, 0xc
xor esi, esi
push edi
call fcn.00401e7e
pop ecx
mov byte [esp + esi + 0x88], al
cmp eax, ebx
je 0x49a201
inc esi
cmp esi, 0x800
jb 0x49a1e6
cmp esi, 0x800
jae 0x49a676
push 8
lea eax, [esp + 0x3c]
push ebx
push eax
call fcn.00401f80
add esp, 0xc
push edi
push 1
lea eax, [esp + 0x40]
push 8
push eax
call fcn.00402244
add esp, 0x10
cmp eax, 1
jb 0x49a689
cmp dword [esp + 0x1c], ebx
jne 0x49a257
lea edx, [esp + 0x88]
call fcn.00439c75
test eax, eax
je 0x49a257
inc dword [esp + 0x34]
jmp 0x49a180
mov edx, dword [esp + 0x2c]
call fcn.00439c75
test eax, eax
jne 0x49a27d
lea eax, [esp + 0x88]
call fcn.004388e1
mov ecx, dword [esp + 0x2c]
mov ebx, eax
call fcn.0043ad59
xor ebx, ebx
cmp dword [ebp + 0x14], ebx
je 0x49a329
cmp dword [ebp + 0x14], 0xde
jne 0x49a315
push 0x36
lea eax, [esp + 0x55]
push ebx
push eax
mov byte [esp + 0x5c], bl
call fcn.00401f80
add esp, 0xc
push 0x7ff
lea eax, [esp + 0x1995]
push ebx
push eax
mov byte [esp + 0x199c], bl
call fcn.00401f80
lea eax, [esp + 0x94]
add esp, 0xc
push eax
mov edi, 0x800
mov ecx, edi
lea eax, [esp + 0x1994]
call fcn.00438aa8
pop ecx
mov esi, eax
call fcn.00438922
call fcn.0043a9a8
push ebx
push str..dat
push str..wav
mov eax, esi
push edi
push eax
call fcn.0043a553
add esp, 0x14
mov eax, esi
push eax
push 0x37
pop ecx
lea eax, [esp + 0x54]
call fcn.00438aa8
pop ecx
jmp 0x49a31c
lea eax, [esp + 0x88]
push eax
push str._nExpanding:___s_
call fcn.00495559
pop ecx
pop ecx
lea edx, [esp + 0x990]
lea ecx, [esp + 0x88]
call fcn.0043aa46
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x1194]
push eax
call fcn.00401ba0
lea eax, [esp + 0x1198]
call fcn.004388e1
push eax
call fcn.0048ca6c
add esp, 0xc
test eax, eax
jne 0x49a396
push ebx
lea ecx, [esp + 0x1194]
call fcn.0048e54f
pop ecx
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x1190]
push eax
call fcn.0048ca6c
pop ecx
test eax, eax
je 0x49a695
call fcn.0041a877
mov dword [esp + 0x30], eax
xor edi, edi
push 0x22a
push str.Archive.c
mov edx, 0x4ae7a4
lea ecx, [esp + 0x90]
call fcn.0048d3dd
pop ecx
pop ecx
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x49a4a6
call fcn.0041a877
sub eax, dword [esp + 0x30]
cmp eax, 0x1194
ja 0x49a411
cmp dword [0x4f4174], ebx
jne 0x49a411
lea esi, [esp + 0x88]
call fcn.00439776
mov eax, esi
push eax
call fcn.00401a80
pop ecx
mov ecx, esi
cmp byte [eax + ecx - 1], 0x5c
je 0x49a411
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
inc edi
cmp edi, 0xf
jl 0x49a3a1
cmp dword [ebp + 0x14], ebx
je 0x49a463
lea eax, [esp + 0x88]
push eax
call fcn.00401a80
pop ecx
lea ecx, [esp + 0x88]
cmp byte [eax + ecx - 1], 0x5c
je 0x49a463
push dword [esp + 0x10]
call fcn.0040278d
pop ecx
push eax
push 0x23e
push str._n________ERROR__d__d________
call fcn.00495559
add esp, 0xc
lea eax, [esp + 0x88]
push eax
push str._n___Could_not_open_destination___s__for_writing_
call fcn.00495559
pop ecx
pop ecx
cmp dword [0x4f4174], ebx
jne 0x49a46f
inc dword [esp + 0x18]
cmp dword [esp + 0x1c], ebx
jle 0x49a180
push 1
push dword [esp + 0x20]
push dword [esp + 0x18]
call fcn.0040287c
add esp, 0xc
test eax, eax
je 0x49a180
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x248
jmp 0x49a6e7
inc dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jne 0x49a4ca
push 1
push 0xc366
call fcn.00401a3a
pop ecx
pop ecx
mov dword [esp + 0x28], eax
cmp eax, ebx
je 0x49a6a9
mov dword [esp + 0x30], ebx
cmp dword [esp + 0x1c], ebx
jle 0x49a5c3
push dword [esp + 0x10]
lea eax, [esp + 0x24]
push 1
push 2
push eax
call fcn.00402244
add esp, 0x10
cmp eax, 1
jb 0x49a6b5
cmp word [esp + 0x20], bx
je 0x49a6dd
movzx eax, word [esp + 0x20]
mov dword [esp + 0x4c], eax
fild dword [esp + 0x4c]
fcomp qword [0x4def68]
fnstsw ax
test ah, 0x41
je 0x49a6dd
movzx esi, word [esp + 0x20]
push dword [esp + 0x10]
mov edi, dword [esp + 0x2c]
push esi
push 1
push edi
call fcn.00402244
add esp, 0x10
cmp eax, esi
jb 0x49a6c1
push dword [esp + 0x48]
add esi, edi
push esi
push dword [esp + 0x28]
mov eax, edi
call fcn.00497f96
movzx eax, ax
add esp, 0xc
cmp ax, bx
je 0x49a6cd
push dword [esp + 0x24]
mov esi, eax
movzx eax, word [esp + 0x24]
push esi
add eax, edi
push 1
push eax
call fcn.0040257f
add esp, 0x10
cmp eax, esi
jae 0x49a598
cmp dword [ebp + 0x14], ebx
je 0x49a594
push 0x29d
push str._n________ERROR__d________
call fcn.00495559
pop ecx
pop ecx
inc dword [esp + 0x18]
cmp dword [ebp + 0x14], ebx
je 0x49a5a8
push 0x4ae7fc
call fcn.00495559
pop ecx
movzx eax, word [esp + 0x20]
mov ecx, dword [esp + 0x30]
lea eax, [ecx + eax + 2]
mov dword [esp + 0x30], eax
cmp eax, dword [esp + 0x1c]
jl 0x49a4d8
mov ecx, dword [esp + 0x24]
call fcn.0048fcf9
push ebx
push closesocket
push 3
push ebx
push 7
push 0x100
lea eax, [esp + 0xa0]
push eax
mov dword [esp + 0x40], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x49a614
cmp dword [ebp + 0x14], ebx
je 0x49a60b
push 0x2c2
push str._n________ERROR__d________
call fcn.00495559
pop ecx
pop ecx
inc dword [esp + 0x18]
jmp 0x49a180
lea eax, [esp + 0x38]
push eax
push eax
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x49a640
cmp dword [ebp + 0x14], ebx
je 0x49a63c
push 0x2c9
push str._n________ERROR__d________
call fcn.00495559
pop ecx
pop ecx
inc dword [esp + 0x18]
call fcn.0048d33e
jmp 0x49a180
xor esi, esi
inc esi
cmp dword [ebp + 0x14], ebx
je 0x49a6f5
push str._nDone_
call fcn.00495559
pop ecx
jmp 0x49a6f5
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x1b4
jmp 0x49a6e7
mov byte [esp + 0x106], bl
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x1ca
jmp 0x49a6e7
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x1d3
jmp 0x49a6e7
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
lea eax, [esp + 0x1190]
push eax
push str._nERROR:_Could_not_create_directory___s_
jmp 0x49a6ec
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x25f
jmp 0x49a6e7
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x26b
jmp 0x49a6e7
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x27d
jmp 0x49a6e7
xor esi, esi
cmp dword [esp + 0x48], ebx
je 0x49a6f5
inc esi
or dword [esp + 0x14], 0xffffffff
jmp 0x49a6f5
cmp dword [ebp + 0x14], ebx
je 0x49a6f3
push 0x274
push str._n________ERROR__d________
call fcn.00495559
pop ecx
pop ecx
xor esi, esi
mov ecx, dword [esp + 0x10]
call fcn.0048fcf9
mov ecx, dword [esp + 0x24]
cmp ecx, ebx
je 0x49a70b
call fcn.0048fcf9
cmp dword [esp + 0x28], ebx
je 0x49a71b
push dword [esp + 0x28]
call fcn.00401a00
pop ecx
mov dword [0x4f4174], ebx
cmp dword [esp + 0x34], ebx
jle 0x49a731
cmp dword [esp + 0x14], ebx
jle 0x49a731
mov dword [esp + 0x14], ebx
mov eax, esi
neg eax
sbb eax, eax
and eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x2194]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401317
mov esp, ebp
pop ebp
ret