Function at 0x40fac0
Capabilities:
Extract resource via kernel32 functions
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x134
mov eax, dword [0x4447d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push str._wOTFitxdHFcAkRk_J
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x104], eax
call fcn.00401120
mov eax, dword [0x4463b8]
push 0x20
mov esi, dword [eax]
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.S_A_q_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.00401c70
lea ecx, [ebp - 0x11c]
call fcn.00401190
push esi
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov esi, eax
push esi
call fcn.00408f40
add esp, 4
test al, al
je 0x40fbbe
lea ecx, [ebp - 0x38]
call fcn.00401d50
cmp eax, 0xc9
jbe 0x40fb6c
push str.MIQGC_ce_NjofZW_LndtGZVx
lea ecx, [ebp - 0x38]
call fcn.004011b0
push 0
push esi
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.T_h_e___a_p_p_l_i_c_a_t_i_o_n___i_s___a_l_r_e_a_d_y___r_u_n_n_i_n_g_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x11c]
call fcn.00401190
xor esi, esi
jmp 0x410149
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.I_n_s_t_a_l_l_e_r_._e_x_e_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445cd0
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.I_n_s_t_a_l_l_e_r_._I_N_I_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445d04
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
push str.H_jjJfL_qvstdRV_Ljnffwe
lea ecx, [ebp - 0xe0]
call fcn.00401120
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.q_j_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.00401c70
lea ecx, [ebp - 0x11c]
call fcn.00401190
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.f_o_n_d_o_._b_m_p_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445d38
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.h_e_a_d_e_r_._b_m_p_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445d6c
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.l_o_a_d_e_r_._b_m_p_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445da0
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
push str.QzdfkTdUZMWpgQdlmKzhvi
lea ecx, [ebp - 0x20]
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.i_c_o_n_._i_c_o_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0x445dd4
call fcn.00404bc0
add esp, 8
lea ecx, [ebp - 0x11c]
call fcn.00401190
push str.waCVLONxNHknqYstTFKeA
lea ecx, [ebp - 0xc8]
call fcn.00401120
lea ecx, [ebp - 0x20]
call fcn.00401d50
cmp eax, 0x44
jbe 0x40fe1a
push str.IrYqzcrpkelX_IZnXIod
lea ecx, [ebp - 0x20]
call fcn.004011b0
push 0xa
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.G_I_F_
call fcn.00401120
lea eax, [ebp - 0x11c]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
lea ecx, [ebp - 0x11c]
mov esi, eax
call fcn.00401190
test esi, esi
jne 0x40fe77
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x41012b
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push str.EIIr_GQlqiAloQfFWJ
lea ecx, [ebp - 0x98]
mov ebx, eax
call fcn.00401120
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.T_A_G_L_
call fcn.00401120
lea eax, [ebp - 0x134]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.00401c70
lea ecx, [ebp - 0x134]
call fcn.00401190
push str.JGd_RSulJgpWDeCNbyTq
lea ecx, [ebp - 0x80]
call fcn.00401120
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
push str.VXCfsaOi_GNIJxCDzQGe
lea ecx, [ebp - 0x68]
mov edi, eax
call fcn.00401120
push edi
call dword [sym.imp.KERNEL32.dll_LockResource]
push str.UFNxgyMsgLmnSdMLEBINeRS
lea ecx, [ebp - 0xb0]
call fcn.00401120
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push 0x445da0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
mov esi, eax
lea eax, [ebp - 8]
push eax
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xa
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.I_C_O_
call fcn.00401120
lea eax, [ebp - 0x134]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
lea ecx, [ebp - 0x134]
mov esi, eax
call fcn.00401190
test esi, esi
jne 0x40ffa4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x410105
push str.ebSkLaoqhIZhy__NUhLXqyL
lea ecx, [ebp - 0x50]
call fcn.00401120
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push 0
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push 0x445dd4
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
mov esi, eax
lea eax, [ebp - 8]
push eax
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [ebp - 0x104]
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x64
push 0x445c00
push 0x67
push ebx
call esi
push 0x64
push 0x445c68
push 0x6d
push ebx
call esi
push ebx
call fcn.00408e30
push dword [ebp + 0x14]
push ebx
call fcn.00408d80
add esp, 0xc
test eax, eax
je 0x4100fb
push 0x6d
push ebx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
mov dword [ebp - 0x104], eax
push 0
lea eax, [ebp - 0xfc]
push eax
call esi
test eax, eax
je 0x4100b4
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageA]
lea eax, [ebp - 0xfc]
push eax
push dword [ebp - 0x104]
push dword [ebp - 0xfc]
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x4100a1
lea eax, [ebp - 0xfc]
push eax
call edi
lea eax, [ebp - 0xfc]
push eax
call ebx
push 0
push 0
push 0
lea eax, [ebp - 0xfc]
push eax
call esi
test eax, eax
jne 0x410072
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.G_Q_
call fcn.00401120
lea eax, [ebp - 0x134]
push eax
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.00401c70
lea ecx, [ebp - 0x134]
call fcn.00401190
lea ecx, [ebp - 0x50]
xor esi, esi
call fcn.00401190
lea ecx, [ebp - 0xb0]
call fcn.00401190
lea ecx, [ebp - 0x68]
call fcn.00401190
lea ecx, [ebp - 0x80]
call fcn.00401190
lea ecx, [ebp - 0x98]
call fcn.00401190
lea ecx, [ebp - 0xc8]
call fcn.00401190
lea ecx, [ebp - 0x20]
call fcn.00401190
lea ecx, [ebp - 0xe0]
call fcn.00401190
lea ecx, [ebp - 0x38]
call fcn.00401190
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041bcf4
mov esp, ebp
pop ebp
ret 0x10