Function at 0x40104e
Capabilities:
Create process on windows
Extract resource via kernel32 functions

Disassembly:
push 0
call sub.kernel32.dll_GetModuleHandleA
mov dword [0x407114], eax
call sub.kernel32.dll_GetCommandLineA
mov dword [0x40711c], 8
mov dword [0x407120], 0xff
push 0x40711c
call sub.comctl32.dll_InitCommonControlsEx
push 0
push 0x40104e
push 0
push 0x3e9
push dword [0x407114]
call sub.user32.dll_DialogBoxParamA
push eax
call sub.kernel32.dll_ExitProcess
push ebp
mov ebp, esp
add esp, 0xffffffc8
cmp dword [ebp + 0xc], 0x110
jne 0x401411
push 0
push 0x34
lea eax, [ebp - 0x34]
push eax
call fcn.004014f0
mov dword [ebp - 0x34], 1
push 0x7f
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x100
mov dword [ebp - 0x20], 1
push 0xbb8
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x80
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 1
push 0x7f89
push 0
call sub.user32.dll_LoadCursorA
mov dword [ebp - 8], eax
push 0xbb9
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x7e
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x100
mov dword [ebp - 8], 0
push 0xbba
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
mov dword [ebp - 0x24], 0x200
push 0xbbb
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x7d
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0x400
push 0xbbc
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x81
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 1
push 0xbbd
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x82
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
push 0xbbe
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
mov dword [ebp - 0x30], 0
push 0xbbf
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x7e
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0x100
push 0xbc0
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x7e
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], 0x400
push 0xbc1
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x84
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
push 0x83
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 1
push 0xbc2
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
push 0x84
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x30], eax
push 0x83
push dword [0x407114]
call sub.user32.dll_LoadIconA
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0
push 0xbc3
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 0x100
xor eax, eax
mov al, 0xff
rol eax, 8
mov al, 0
rol eax, 8
mov al, 0
mov dword [ebp - 0x1c], eax
xor eax, eax
mov al, 0
rol eax, 8
mov al, 0x80
rol eax, 8
mov al, 0x80
mov dword [ebp - 0x18], eax
xor eax, eax
mov al, 0x60
rol eax, 8
mov al, 0
rol eax, 8
mov al, 0x80
mov dword [ebp - 0x14], eax
push 0xbc4
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 0
push 0x407028
call sub.gdi32.dll_CreateFontIndirectA
mov dword [0x407124], eax
mov dword [ebp - 0x10], eax
push 0x407064
call sub.gdi32.dll_CreateFontIndirectA
mov dword [0x407128], eax
mov dword [ebp - 0xc], eax
push 0x7f89
push 0
call sub.user32.dll_LoadCursorA
mov dword [ebp - 8], eax
push 0xa
push 0xc8
push 0
call sub.kernel32.dll_FindResourceA
push eax
push 0
call sub.kernel32.dll_LoadResource
mov dword [ebp - 4], eax
push 0xbc5
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x38]
call fcn.0040580b
jmp 0x40148c
cmp dword [ebp + 0xc], 0x10
jne 0x401439
push dword [0x407128]
call sub.gdi32.dll_DeleteObject
push dword [0x407124]
call sub.gdi32.dll_DeleteObject
push 0
push dword [ebp + 8]
call sub.user32.dll_EndDialog
jmp 0x40148c
cmp dword [ebp + 0xc], 0x111
jne 0x401483
mov eax, dword [ebp + 0x10]
mov edx, eax
shr edx, 0x10
or dx, dx
jne 0x40148c
cmp eax, 0xbb8
jne 0x401466
push 0
push 0
push 0x10
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
jmp 0x401481
cmp eax, 0xbc5
jne 0x401481
push 1
push 0
push 0
push str.mailto:_XXControls_bk.ru_
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x40148c
mov eax, 0
leave
ret 0x10
mov eax, 1
leave
ret 0x10