Function at 0x401000
Capabilities:
Delete file
Extract resource via kernel32 functions
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x424a86
mov eax, dword fs:[0]
push eax
sub esp, 0x480
mov eax, dword [0x42fe70]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.00415590
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0x433bec
call fcn.004024f0
push 0x42a5c8
mov ecx, 0x433bec
call fcn.004015f0
push str..zip
push 0x433bec
lea ecx, [ebp - 0x450]
push ecx
call fcn.00401610
add esp, 0xc
mov dword [ebp - 4], 0
call fcn.00401fa0
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x470], 0
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x454], 0
push str.DSEZIPEXE
push 0x7d1
mov edx, dword [ebp - 0x458]
push edx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4011e5
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x458]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x470], eax
mov edx, dword [ebp - 0x470]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x458]
push ecx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x46c], eax
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x450]
call fcn.00401f90
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xffffffff
je 0x4011a1
push 0
lea edx, [ebp - 0x45c]
push edx
mov eax, dword [ebp - 0x46c]
push eax
mov ecx, dword [ebp - 0x460]
push ecx
mov edx, dword [ebp - 0x454]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x454]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4011d6
push 0
push 0
push 0x42a5e0
call fcn.0040a367
mov dword [ebp - 0x47c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.00402510
mov eax, dword [ebp - 0x47c]
jmp 0x4013cd
mov ecx, dword [ebp - 0x470]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x401244
push str.b_rN0RD
lea ecx, [ebp - 0x478]
call fcn.00401f10
mov byte [ebp - 4], 1
push 0
push 0
lea ecx, [ebp - 0x478]
call fcn.00401f90
push eax
call fcn.0040a367
mov dword [ebp - 0x480], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x478]
call fcn.00402510
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.00402510
mov eax, dword [ebp - 0x480]
jmp 0x4013cd
push 0
lea ecx, [ebp - 0x450]
call fcn.00401f90
push eax
lea edx, [ebp - 0x468]
push edx
call fcn.00408430
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x4012a2
push 0
push 0
push 0x42a4cc
call fcn.0040a367
mov dword [ebp - 0x484], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.00402510
mov eax, dword [ebp - 0x484]
jmp 0x4013cd
mov dword [ebp - 0x44c], 0xffffffff
lea eax, [ebp - 0x44c]
push eax
mov ecx, dword [ebp - 0x468]
push ecx
call fcn.00407df0
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x4012f5
mov dword [ebp - 0x488], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.00402510
mov eax, dword [ebp - 0x488]
jmp 0x4013cd
mov edx, dword [ebp - 0x44c]
mov dword [ebp - 0x474], edx
mov dword [ebp - 0x44c], 0
jmp 0x40131c
mov ecx, dword [ebp - 0x44c]
cmp ecx, dword [ebp - 0x474]
jae 0x40138d
lea edx, [ebp - 0x44c]
push edx
mov eax, dword [ebp - 0x468]
push eax
call fcn.00407df0
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
jne 0x401379
lea ecx, [ebp - 0x44c]
push ecx
mov ecx, 0x433bec
call fcn.00401f90
push eax
mov edx, dword [ebp - 0x468]
push edx
call fcn.00407d30
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 0
je 0x401389
mov eax, dword [ebp - 0x468]
push eax
call fcn.00407db0
jmp 0x40138d
jmp 0x40138d
mov ecx, dword [ebp - 0x468]
push ecx
call fcn.00407db0
lea ecx, [ebp - 0x450]
call fcn.00401f90
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x48c], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.00402510
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004143fb
mov esp, ebp
pop ebp
ret