Function at 0x4be5f0
Capabilities:
Delete file
Extract resource via kernel32 functions
Get file attributes
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x660
mov eax, dword [0x6eb874]
xor eax, ebp
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x638]
call fcn.00413220
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x62c], 0
mov dword [ebp - 0x620], 0
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
mov ax, word [0x697a54]
mov word [ebp - 0x61c], ax
push 0x206
push 0
lea ecx, [ebp - 0x61a]
push ecx
call fcn.0063a460
add esp, 0xc
mov dx, word [0x697a58]
mov word [ebp - 0x414], dx
push 0x206
push 0
lea eax, [ebp - 0x412]
push eax
call fcn.0063a460
add esp, 0xc
mov ecx, dword [ebp + 0xc]
call fcn.0040d3c0
push eax
mov ecx, dword [ebp + 0x10]
movzx edx, word [ecx]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0
je 0x4be6e2
mov ecx, dword [ebp - 0x628]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 0
jne 0x4be6f1
mov dword [ebp - 0x630], 0
jmp 0x4be886
mov edx, dword [ebp - 0x628]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x624]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0
jne 0x4be731
mov dword [ebp - 0x630], 0
jmp 0x4be886
push 0x80
lea ecx, [ebp + 0x14]
call fcn.0040d3c0
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp + 0x14]
call fcn.0040d3c0
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and eax, 0x10
je 0x4be80d
push 0x208
push 0
lea ecx, [ebp - 0x20c]
push ecx
call fcn.0063a460
add esp, 0xc
lea ecx, [ebp + 0x14]
call fcn.0040d3c0
push eax
push 0x104
lea edx, [ebp - 0x20c]
push edx
call fcn.004239e0
xor eax, eax
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], eax
mov word [ebp - 0x644], ax
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 3
mov ecx, 0x414
mov word [ebp - 0x650], cx
lea edx, [ebp - 0x20c]
mov dword [ebp - 0x658], edx
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x646], 0
lea eax, [ebp - 0x660]
push eax
call dword [sym.imp.SHELL32.dll_SHFileOperationW]
push 0
push 0x80
push 2
push 0
push 1
push 0xc0000000
lea ecx, [ebp + 0x14]
call fcn.0040d3c0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x620], 0
je 0x4be886
cmp dword [ebp - 0x620], 0xffffffff
je 0x4be886
push 0
lea ecx, [ebp - 0x63c]
push ecx
mov edx, dword [ebp - 0x634]
push edx
mov eax, dword [ebp - 0x62c]
push eax
mov ecx, dword [ebp - 0x620]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea edx, [ebp - 0x414]
push edx
lea ecx, [ebp - 0x638]
call fcn.00413a70
mov dword [ebp - 0x630], 1
cmp dword [ebp - 0x620], 0
je 0x4be8a5
cmp dword [ebp - 0x620], 0xffffffff
je 0x4be8a5
mov eax, dword [ebp - 0x620]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x620], 0
cmp dword [ebp - 0x624], 0
je 0x4be8c5
mov ecx, dword [ebp - 0x624]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov dword [ebp - 0x624], 0
mov dword [ebp - 0x640], 1
lea ecx, [ebp - 0x638]
call fcn.00413870
lea ecx, [ebp + 0x14]
call fcn.00413870
mov eax, dword [ebp - 0x640]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006135ac
mov esp, ebp
pop ebp
ret