Function at 0x463360
Capabilities:
Copy file
Extract resource via kernel32 functions
Set current directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x21c
push ebx
push esi
mov esi, dword [ebp + 0x10]
mov ebx, ecx
push edi
mov dword [esp + 0x14], ebx
mov edx, esi
nop word [eax + eax]
mov al, byte [edx]
cmp al, 0x20
je 0x46338a
cmp al, 9
jne 0x46338d
inc edx
jmp 0x463380
test al, al
je 0x4633cf
cmp al, 0x2d
je 0x463399
cmp al, 0x2b
jne 0x4633a0
lea eax, [edx + 1]
mov edx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x4633cf
mov al, byte [edx + 1]
cmp al, 0x78
je 0x4633af
cmp al, 0x58
jne 0x4633cf
movsx eax, byte [edx + 2]
push eax
call fcn.004c4410
add esp, 4
test eax, eax
je 0x4633cf
push 0x10
push 0
push esi
call fcn.004c4d25
add esp, 0xc
jmp 0x4633d8
push esi
call fcn.004c4df6
add esp, 4
cmp dword [0x4fb9d4], 0
mov esi, eax
je 0x463548
cmp esi, 1
mov esi, dword [ebp + 0xc]
je 0x46342e
mov ecx, esi
call fcn.0047be80
test al, al
je 0x46342e
mov eax, dword [0x4f898c]
test byte [eax + 0xe0], 1
jne 0x463427
mov ecx, dword [0x4fb94c]
push 1
push 0
push 0xffffffffffffffff
push 0x4e37f8
call fcn.004b01a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, ebx
jmp 0x4635de
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x4633fa
mov edx, dword [ebp + 8]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x463453
sub ecx, esi
mov eax, 0x103
cmp ecx, 0x104
cmovae ecx, eax
lea eax, [ecx + 1]
push eax
push edx
lea eax, [esp + 0x20]
push eax
call fcn.004c2440
add esp, 0xc
lea eax, [esp + 0x18]
push eax
call fcn.004cca12
add esp, 4
lea eax, [esp + 0x18]
push 0xa
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov ebx, eax
test ebx, ebx
je 0x46353d
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x46353d
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x46353d
cmp dword [esi], 0x4034b50
mov eax, dword [sym.imp.KERNEL32.dll_SizeofResource]
jne 0x46351a
push 0
push ebx
push 0
call eax
push eax
lea edx, [esp + 0x14]
mov ecx, esi
call fcn.004af380
add esp, 8
test eax, eax
je 0x463515
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x10]
push 0
push ecx
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
push esi
setne bl
call fcn.004c4247
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4635a5
mov eax, dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
lea ecx, [esp + 0x14]
push ecx
push ebx
push 0
call eax
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
push edi
setne bl
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4635a5
push edi
xor bl, bl
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4635a5
push 0
lea eax, [esp + 0x124]
push eax
push 0x104
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
push dword [0x4fe0a4]
mov edi, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
call edi
xor eax, eax
cmp esi, 1
setne al
push eax
lea eax, [esp + 0x124]
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
mov ecx, 0x4e3371
mov eax, dword [0x4fa378]
setne bl
test eax, eax
je 0x4635a2
mov eax, dword [eax]
test eax, eax
cmovne ecx, eax
push ecx
call edi
test bl, bl
je 0x4635c8
mov ecx, dword [0x4fb94c]
push 1
push 0
push 0xffffffffffffffff
push 0x4e33f8
call fcn.004b01a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [0x4f898c]
test byte [eax + 0xe0], 1
je 0x463408
mov ecx, dword [esp + 0x14]
push 0x4e3371
push 0
push 0x4e37f8
call fcn.0044d4a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc