Function at 0x466ab0
Capabilities:
Create process on windows
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
push 0xffffffffffffffff
push 0x62b18e
mov eax, dword fs:[0]
push eax
sub esp, 0xafc
mov eax, dword [0x6d45e0]
xor eax, esp
mov dword [esp + 0xaf4], eax
push esi
push edi
mov eax, dword [0x6d45e0]
xor eax, esp
push eax
lea eax, [esp + 0xb08]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0xec], edi
mov esi, dword [ebp + 8]
lea eax, [esp + 0x16c]
push 0x84
push 0
push eax
mov dword [esp + 0x28], esi
call fcn.004cf9d0
mov ecx, dword [esi + 0x108]
lea edx, [esp + 0x178]
add esp, 0xc
mov eax, dword [ecx]
push edx
call dword [eax + 4]
push str.mode1
lea ecx, [esp + 0x170]
mov dword [esp + 0xb14], 0
call fcn.005d1405
test al, al
je 0x466b50
mov esi, 1
jmp 0x466b8a
push str.mode2
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x466b6c
mov esi, 2
jmp 0x466b8a
push str.mode3
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x466cfa
mov esi, 3
mov ecx, dword [esp + 0x1c]
push str.Option
mov ecx, dword [ecx + 0x108]
mov eax, dword [ecx]
call dword [eax + 0x10]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x108]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, eax
test ecx, ecx
je 0x466cf6
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, eax
test ecx, ecx
je 0x466cf6
mov eax, dword [ecx]
push str.ListContainerElement
mov eax, dword [eax + 0x10]
call eax
test eax, eax
je 0x466cf6
push str.customer
mov ecx, eax
call fcn.005d625b
mov ecx, eax
mov dword [esp + 0xf4], 0
lea edx, [esp + 0x64]
push edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
call eax
mov ecx, eax
mov byte [esp + 0xb10], 1
call fcn.00417110
push eax
lea ecx, [esp + 0xf8]
call fcn.004167e0
lea ecx, [esp + 0x64]
mov byte [esp + 0xb10], 3
call fcn.005d1349
lea eax, [esp + 0xf4]
push eax
call fcn.00437a90
mov ecx, eax
call fcn.0043bed0
mov dword [esp + 0xf0], eax
test eax, eax
je 0x466ccd
push ecx
lea ecx, [eax + 0xf4]
xorps xmm0, xmm0
push ecx
lea ecx, [esp + 0x104]
movq qword [esp + 0x104], xmm0
call fcn.00468eb0
lea eax, [esi - 1]
mov byte [esp + 0xb10], 4
mov dword [esp + 0xf8], eax
lea ecx, [esp + 0xfc]
lea eax, [esp + 0xf8]
push eax
call fcn.004334c0
mov ecx, dword [esp + 0xf0]
push eax
push esi
call fcn.00419420
mov eax, dword [esp + 0xfc]
lea ecx, [esp + 0xfc]
push eax
push dword [eax]
lea eax, [esp + 0x20]
push eax
call fcn.00433d40
push dword [esp + 0xfc]
call fcn.004c41b0
add esp, 4
mov byte [esp + 0xb10], 0
or ecx, 0xffffffff
mov edx, dword [esp + 0xf4]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x466cf6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esp + 0x1c]
push str.copybtn
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x466f43
mov ecx, dword [esi + 0x108]
push str.Option
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, dword [esi + 0x108]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, eax
test ecx, ecx
je 0x4673f7
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
call eax
mov ecx, eax
test ecx, ecx
je 0x4673f7
mov eax, dword [ecx]
push str.ListContainerElement
mov eax, dword [eax + 0x10]
call eax
mov dword [esp + 0xf0], eax
test eax, eax
je 0x4673f7
push str.customer
mov ecx, eax
call fcn.005d625b
mov ecx, dword [esp + 0xf0]
mov esi, eax
push str.nick
call fcn.005d625b
mov dword [esp + 0xf8], 0
mov edi, eax
mov edx, dword [esi]
lea eax, [esp + 0x64]
push eax
mov ecx, esi
mov edx, dword [edx + 0x28]
call edx
mov ecx, eax
mov byte [esp + 0xb10], 5
call fcn.00417110
push eax
lea ecx, [esp + 0xfc]
call fcn.004167e0
lea ecx, [esp + 0x64]
mov byte [esp + 0xb10], 7
call fcn.005d1349
mov dword [esp + 0xf4], 0
lea ecx, [esp + 0x1f4]
mov eax, dword [edi]
push ecx
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
mov ecx, eax
mov byte [esp + 0xb10], 8
call fcn.00417110
push eax
lea ecx, [esp + 0xf8]
call fcn.004167e0
lea ecx, [esp + 0x1f4]
mov byte [esp + 0xb10], 0xa
call fcn.005d1349
push 0x69f140
lea ecx, [esp + 0xf4]
call fcn.004378e0
lea eax, [esp + 0xf0]
mov byte [esp + 0xb10], 0xb
push eax
lea edx, [esp + 0xfc]
lea ecx, [esp + 0x24]
call fcn.00414b20
lea edx, [esp + 0xf8]
mov byte [esp + 0xb14], 0xc
mov ecx, esp
push edx
mov edx, eax
call fcn.00414b20
add esp, 4
call fcn.004686d0
mov byte [esp + 0xb10], 0xb
or esi, 0xffffffff
mov edx, dword [esp + 0x20]
mov ecx, esi
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x466e93
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xb10], 0xa
mov ecx, esi
mov edx, dword [esp + 0xf0]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x466ebb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edi, dword [esp + 0xec]
push 1
mov ecx, dword [edi + 0x84c]
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, edi
call fcn.00613360
push 0
push 0x1f4
push 0x3e9
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov byte [esp + 0xb10], 7
mov ecx, esi
mov edx, dword [esp + 0xf4]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x466f14
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0xb10], 0
mov edx, dword [esp + 0xf8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x4673f7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x4673f7
push str.btn_known
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x4673d3
push str.updatebtn
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x466fb0
mov ecx, dword [edi + 0x850]
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
call eax
test al, al
jne 0x4673f7
mov ecx, dword [edi + 0x854]
push 1
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, dword [edi + 0x858]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf0]
push 1
jmp 0x4673e9
push str.btn_upload
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x467022
mov ecx, dword [edi + 0x850]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov eax, dword [edi + 0x85c]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [eax - 0xc], 0
je 0x466ffa
push 5
push 0
push eax
push str.explorer.exe
push str.open
push 0
call esi
mov eax, dword [edi + 0x860]
cmp dword [eax - 0xc], 0
je 0x4673f7
push 5
push 0
push eax
push str.explorer.exe
push str.open
push 0
call esi
jmp 0x4673f7
push str.closebtn
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x467047
push 1
push 0
mov ecx, edi
call fcn.005c9904
jmp 0x467402
push str.btn_cancel
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x4673d3
push str.btn_set_close
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x4673d3
push str.btn_save
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x46743e
push str.ckbox_autorun
lea ecx, [edi + 0x30]
call fcn.005cad8c
push str.ckbox_autoupdate
lea ecx, [edi + 0x30]
mov esi, eax
call fcn.005cad8c
mov ecx, esi
mov edi, eax
call fcn.005d7c89
lea ecx, [esp + 0xfc]
test al, al
je 0x46718f
push 0x69ae90
call fcn.004046e0
push str.autorun
lea ecx, [esp + 0x118]
mov byte [esp + 0xb14], 0xd
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x28]
mov byte [esp + 0xb14], 0xe
call fcn.004046e0
lea eax, [esp + 0xfc]
mov byte [esp + 0xb10], 0xf
push eax
lea eax, [esp + 0x118]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00406d80
lea ecx, [esp + 0x24]
call fcn.004047b0
lea ecx, [esp + 0x114]
call fcn.004047b0
lea ecx, [esp + 0xfc]
mov byte [esp + 0xb10], 0
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x28]
call fcn.004046e0
lea eax, [esp + 0x24]
mov byte [esp + 0xb10], 0x10
push eax
mov ecx, 0x6f5fc4
call fcn.00406a80
lea ecx, [esp + 0x24]
mov byte [esp + 0xb10], 0
call fcn.004047b0
call fcn.00413240
jmp 0x467253
push 0x69af80
call fcn.004046e0
push str.autorun
lea ecx, [esp + 0x118]
mov byte [esp + 0xb14], 0x11
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x28]
mov byte [esp + 0xb14], 0x12
call fcn.004046e0
lea eax, [esp + 0xfc]
mov byte [esp + 0xb10], 0x13
push eax
lea eax, [esp + 0x118]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00406d80
lea ecx, [esp + 0x24]
call fcn.004047b0
lea ecx, [esp + 0x114]
call fcn.004047b0
lea ecx, [esp + 0xfc]
mov byte [esp + 0xb10], 0
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x28]
call fcn.004046e0
lea eax, [esp + 0x24]
mov byte [esp + 0xb10], 0x14
push eax
mov ecx, 0x6f5fc4
call fcn.00406a80
lea ecx, [esp + 0x24]
mov byte [esp + 0xb10], 0
call fcn.004047b0
call fcn.00413390
mov ecx, edi
call fcn.005d7c89
lea ecx, [esp + 0xfc]
test al, al
je 0x46730d
push 0x69ae90
call fcn.004046e0
push str.autoupdate
lea ecx, [esp + 0x118]
mov byte [esp + 0xb14], 0x15
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x28]
mov byte [esp + 0xb14], 0x16
call fcn.004046e0
lea eax, [esp + 0xfc]
mov byte [esp + 0xb10], 0x17
push eax
lea eax, [esp + 0x118]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00406d80
lea ecx, [esp + 0x24]
call fcn.004047b0
lea ecx, [esp + 0x114]
call fcn.004047b0
lea ecx, [esp + 0xfc]
mov byte [esp + 0xb10], 0
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x28]
call fcn.004046e0
mov byte [esp + 0xb10], 0x18
jmp 0x4673ac
push 0x69af80
call fcn.004046e0
push str.autoupdate
lea ecx, [esp + 0x118]
mov byte [esp + 0xb14], 0x19
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x28]
mov byte [esp + 0xb14], 0x1a
call fcn.004046e0
lea eax, [esp + 0xfc]
mov byte [esp + 0xb10], 0x1b
push eax
lea eax, [esp + 0x118]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.00406d80
lea ecx, [esp + 0x24]
call fcn.004047b0
lea ecx, [esp + 0x114]
call fcn.004047b0
lea ecx, [esp + 0xfc]
mov byte [esp + 0xb10], 0
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x28]
call fcn.004046e0
mov byte [esp + 0xb10], 0x1c
lea eax, [esp + 0x24]
mov ecx, 0x6f5fc4
push eax
call fcn.00406a80
lea ecx, [esp + 0x24]
mov byte [esp + 0xb10], 0
call fcn.004047b0
mov edi, dword [esp + 0xec]
mov ecx, dword [edi + 0x850]
mov eax, dword [ecx]
mov eax, dword [eax + 0xec]
call eax
test al, al
je 0x4673f7
push 0
mov ecx, dword [edi + 0x850]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push dword [esp + 0x1c]
mov ecx, edi
call fcn.005d0876
lea ecx, [esp + 0x16c]
mov dword [esp + 0xb10], 0xffffffff
call fcn.005d1349
mov ecx, dword [esp + 0xb08]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0xaf4]
xor ecx, esp
call fcn.004c392d
mov esp, ebp
pop ebp
ret 4
push str.btn_replyset
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x467be6
push str.opt_answerreply
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x467be6
push str.opt_answeravoid
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x467be6
push str.setbtn
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x467658
push str.autoupdate
lea ecx, [esp + 0x118]
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x28]
mov byte [esp + 0xb14], 0x26
call fcn.004046e0
lea eax, [esp + 0x114]
mov byte [esp + 0xb10], 0x27
push eax
lea eax, [esp + 0x28]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00406bd0
lea ecx, [esp + 0x24]
call fcn.004047b0
lea ecx, [esp + 0x114]
mov byte [esp + 0xb10], 0x2a
call fcn.004047b0
push str.autorun
lea ecx, [esp + 0x50]
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x100]
mov byte [esp + 0xb14], 0x2b
call fcn.004046e0
lea eax, [esp + 0x4c]
mov byte [esp + 0xb10], 0x2c
push eax
lea eax, [esp + 0x100]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x15c]
push eax
call fcn.00406bd0
lea ecx, [esp + 0xfc]
call fcn.004047b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb10], 0x2f
call fcn.004047b0
push str.ckbox_autoupdate
lea ecx, [edi + 0x30]
call fcn.005cad8c
push str.ckbox_autorun
lea ecx, [edi + 0x30]
mov dword [esp + 0xf0], eax
call fcn.005cad8c
mov esi, eax
lea eax, [esp + 0x13c]
push 0x69ae90
push eax
call fcn.0040dd40
add esp, 8
test al, al
je 0x4675c9
mov eax, dword [esp + 0xec]
mov ecx, eax
push 1
mov edx, dword [eax]
call dword [edx + 0x198]
jmp 0x4675da
mov ecx, dword [esp + 0xec]
push 0
mov eax, dword [ecx]
call dword [eax + 0x198]
lea eax, [esp + 0x154]
push 0x69ae90
push eax
call fcn.0040dd40
add esp, 8
mov ecx, esi
test al, al
mov eax, dword [esi]
je 0x4675fb
push 1
jmp 0x4675fd
push 0
call dword [eax + 0x198]
mov ecx, dword [edi + 0x854]
push 0
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, dword [edi + 0x858]
push 1
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, dword [edi + 0x850]
push 1
mov eax, dword [ecx]
call dword [eax + 0xf0]
lea ecx, [esp + 0x154]
call fcn.004047b0
lea ecx, [esp + 0x13c]
mov byte [esp + 0xb10], 0
call fcn.004047b0
jmp 0x4673f7
push str.openbenchbtn
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x467925
lea ecx, [esp + 0xf8]
mov dword [esp + 0xf8], 0
call fcn.00405c70
lea ecx, [esp + 0xf8]
mov byte [esp + 0xb10], 0x30
call fcn.00412910
test eax, eax
je 0x4678d7
lea ecx, [esp + 0xf4]
mov dword [esp + 0xf4], 0
call fcn.00405c70
lea edx, [esp + 0xf4]
mov byte [esp + 0xb10], 0x31
lea ecx, [esp + 0xf8]
call fcn.00412bc0
lea ecx, [esp + 0xf4]
call fcn.00432cb0
test al, al
jne 0x4678cb
push str.Globalcom.pdd.workbench.single.mutex50E829F2_9055_40DB_8701_04EF68F0F767
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
test eax, eax
je 0x467723
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00412d80
test eax, eax
jne 0x467723
push eax
push eax
push str.pddworkbench_not_execute_by_pddbot__please_exit_pddworkbench_and_execute_use_pddbot
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4678cb
lea ecx, [esp + 0xf0]
mov dword [esp + 0xfc], 0
mov dword [esp + 0xf0], 0
call fcn.00405c70
xor eax, eax
mov byte [esp + 0xb10], 0x32
push 0x7fe
push eax
mov word [esp + 0x304], ax
lea eax, [esp + 0x306]
push eax
call fcn.004cf9d0
add esp, 0xc
lea ecx, [esp + 0xf0]
push 0x69efb0
call fcn.00414a60
mov esi, dword [esp + 0xf8]
lea ecx, [esp + 0xf0]
push dword [esi - 0xc]
push esi
call fcn.00416640
push 0x69efb0
lea ecx, [esp + 0xf4]
call fcn.00414a60
mov eax, dword [esp + 0xf0]
lea edx, [esp + 0x2fc]
sub edx, eax
jmp 0x4677c0
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [edx + eax - 2], cx
test cx, cx
jne 0x4677c0
push 0x103
lea eax, [esp + 0x1f9]
mov byte [esp + 0x1f8], cl
push 0
push eax
call fcn.004cf9d0
add esp, 0xc
lea eax, [esp + 0x1f4]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [esp + 0x1f4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push str.PddMsg.dll
lea eax, [esp + 0x1f8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea eax, [esp + 0x1f4]
mov dword [esp + 0xec], 0
push eax
lea ecx, [esp + 0xf0]
call fcn.004378e0
push str.MyType
push 0x65
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [esp + 0x20], eax
test eax, eax
je 0x4678b3
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [esp + 0x20]
mov dword [esp + 0x1c], eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x4678b3
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x4678b3
lea ecx, [esp + 0xfc]
push ecx
push dword [esp + 0x1c]
lea edx, [esp + 0x304]
push eax
push ecx
mov ecx, esi
call fcn.00442fc0
add esp, 0x10
test eax, eax
jne 0x4678e8
push eax
push eax
push str.InjectMemDll_fail
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0xec]
call fcn.00405ca0
lea ecx, [esp + 0xf0]
call fcn.00405ca0
lea ecx, [esp + 0xf4]
call fcn.00405ca0
lea ecx, [esp + 0xf8]
call fcn.00405ca0
jmp 0x467402
lea ecx, [esp + 0xec]
call fcn.00405ca0
lea ecx, [esp + 0xf0]
call fcn.00405ca0
lea ecx, [esp + 0xf4]
call fcn.00405ca0
lea ecx, [esp + 0xf8]
mov byte [esp + 0xb10], 0
call fcn.00405ca0
jmp 0x4673f7
push str.btn_device
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x467a8e
lea ecx, [esp + 0x114]
call fcn.005d11fd
lea eax, [esp + 0x114]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [esp + 0x114]
mov eax, dword [esp + 0x11c]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
sub eax, 0x4b
mov dword [esp + 0x114], eax
mov eax, dword [esp + 0x118]
add eax, eax
cdq
sub eax, edx
sar eax, 1
add eax, 0x104
push 0x498
mov dword [esp + 0x11c], eax
call fcn.004c4200
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xb10], 0x34
test eax, eax
je 0x467a2f
push 0x498
push 0
push eax
call fcn.004cf9d0
mov ecx, dword [edi + 0x87c]
add esp, 8
movdqa xmm0, xmmword [esp + 0x118]
sub ecx, 0x10
movdqa xmmword [esp + 0x28], xmm0
mov esi, esp
mov dword [esp + 0x100], esp
call fcn.00405fe0
add eax, 0x10
mov dword [esi], eax
sub esp, 0x18
mov byte [esp + 0xb2c], 0x35
lea eax, [edi + 0x864]
mov ecx, esp
push eax
call fcn.004072f0
movdqa xmm0, xmmword [esp + 0x40]
sub esp, 0x10
mov ecx, dword [esp + 0x44]
mov eax, esp
mov byte [esp + 0xb3c], 0x34
push edi
movdqu xmmword [eax], xmm0
call fcn.0043ec70
mov dword [esp + 0xec], eax
jmp 0x467a3a
mov dword [esp + 0xec], 0
push ecx
mov byte [esp + 0xb14], 0
mov esi, esp
mov ecx, dword [edi + 0x87c]
sub ecx, 0x10
mov dword [esp + 0x1c], esp
call fcn.00405fe0
add eax, 0x10
mov dword [esi], eax
sub esp, 0x18
mov byte [esp + 0xb2c], 0x36
lea eax, [edi + 0x864]
mov ecx, esp
push eax
call fcn.004072f0
mov ecx, dword [esp + 0x108]
mov byte [esp + 0xb2c], 0
call fcn.0043f160
jmp 0x4673f7
push str.btn_refresh
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
je 0x4673f7
lea esi, [edi + 0x30]
push str.btn_warnning
mov ecx, esi
call fcn.005cad8c
push str.btn_refresh
mov ecx, esi
mov edi, eax
call fcn.005cad8c
push 0
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xf0]
mov eax, dword [edi]
mov ecx, edi
push 0
call dword [eax + 0xf0]
mov edi, dword [esp + 0xec]
mov ecx, edi
call fcn.00613360
push 0
push 0x7530
push 0x3ea
push eax
call dword [sym.imp.USER32.dll_SetTimer]
push str.Refresh_all_Customer
lea eax, [esp + 0x28]
mov byte [edi + 0x881], 1
push 2
push eax
mov dword [esp + 0x30], str.MainWindow.cpp
mov dword [esp + 0x34], str.CMainWindow::OnClick
mov dword [esp + 0x38], str.C:UsersPublicPddBot.log
mov dword [esp + 0x3c], 0x285
mov dword [esp + 0x40], 7
call fcn.00415940
add esp, 0xc
call fcn.00437a90
mov ecx, eax
call fcn.0043b8d0
call fcn.00437a90
mov eax, dword [eax]
mov dword [esp + 0x18], eax
test eax, eax
je 0x467b77
lea esi, [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esp + 0x18]
push esi
mov dword [eax + 0x58], 2
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xorps xmm0, xmm0
mov dword [esp + 0x104], 0
lea ecx, [esp + 0xfc]
movq qword [esp + 0xfc], xmm0
call fcn.00418430
lea eax, [esp + 0x114]
mov byte [esp + 0xb10], 0x37
push eax
push ecx
mov dword [esp + 0x11c], 0x467ec0
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], edi
call fcn.00468f50
lea ecx, [esp + 0xfc]
mov byte [esp + 0xb10], 0
call fcn.004184c0
jmp 0x4673f7
push str.btn_replyset
lea ecx, [edi + 0x30]
call fcn.005cad8c
push str.opt_answerreply
lea ecx, [edi + 0x30]
mov dword [esp + 0x1c], eax
call fcn.005cad8c
push str.opt_answeravoid
lea ecx, [edi + 0x30]
mov dword [esp + 0x100], eax
call fcn.005cad8c
mov esi, dword [esp + 0x18]
mov ecx, esi
mov dword [esp + 0xec], 0
mov dword [esp + 0x20], eax
mov edx, dword [esi]
mov edx, dword [edx + 0x178]
call edx
push eax
lea ecx, [esp + 0xf0]
call fcn.004167e0
mov edx, str.answerreply_hover.png
mov byte [esp + 0xb10], 0x1d
lea ecx, [esp + 0xec]
call fcn.0043c800
test al, al
jne 0x467d80
push str.opt_answeravoid
lea ecx, [esp + 0x170]
call fcn.005d1405
test al, al
jne 0x467d80
mov eax, dword [esi]
mov ecx, esi
push str.answerreply_normal.png
call dword [eax + 0x16c]
mov eax, dword [esi]
mov ecx, esi
push str.answerreply_hover.png
call dword [eax + 0x17c]
mov eax, dword [esi]
mov ecx, esi
push str.answerreply_hover.png
call dword [eax + 0x174]
mov eax, dword [esi]
mov ecx, esi
push str.S_MR:ghV
call dword [eax + 0xb8]
mov ecx, dword [esp + 0xfc]
mov byte [edi + 0x880], 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x198]
push 0x69ae90
lea ecx, [esp + 0x50]
call fcn.004046e0
push str.reply
lea ecx, [esp + 0x158]
mov byte [esp + 0xb14], 0x22
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x140]
mov byte [esp + 0xb14], 0x23
call fcn.004046e0
lea eax, [esp + 0x4c]
mov byte [esp + 0xb10], 0x24
push eax
lea eax, [esp + 0x158]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00406d80
lea ecx, [esp + 0x13c]
call fcn.004047b0
lea ecx, [esp + 0x154]
call fcn.004047b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb10], 0x1d
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x140]
call fcn.004046e0
mov byte [esp + 0xb10], 0x25
jmp 0x467e7a
mov eax, dword [esi]
mov ecx, esi
push str.avoidresponse_normal.png
call dword [eax + 0x16c]
mov eax, dword [esi]
mov ecx, esi
push str.avoidresponse_hover.png
call dword [eax + 0x17c]
mov eax, dword [esi]
mov ecx, esi
push str.avoidresponse_hover.png
call dword [eax + 0x174]
mov eax, dword [esi]
mov ecx, esi
push 0x69f764
call dword [eax + 0xb8]
mov ecx, dword [esp + 0x20]
mov byte [edi + 0x880], 0
push 1
mov eax, dword [ecx]
call dword [eax + 0x198]
push 0x69af80
lea ecx, [esp + 0x50]
call fcn.004046e0
push str.reply
lea ecx, [esp + 0x158]
mov byte [esp + 0xb14], 0x1e
call fcn.004046e0
push 0x69ae8c
lea ecx, [esp + 0x140]
mov byte [esp + 0xb14], 0x1f
call fcn.004046e0
lea eax, [esp + 0x4c]
mov byte [esp + 0xb10], 0x20
push eax
lea eax, [esp + 0x158]
mov ecx, 0x6f5fc4
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00406d80
lea ecx, [esp + 0x13c]
call fcn.004047b0
lea ecx, [esp + 0x154]
call fcn.004047b0
lea ecx, [esp + 0x4c]
mov byte [esp + 0xb10], 0x1d
call fcn.004047b0
push 0x698588
lea ecx, [esp + 0x140]
call fcn.004046e0
mov byte [esp + 0xb10], 0x21
lea eax, [esp + 0x13c]
mov ecx, 0x6f5fc4
push eax
call fcn.00406a80
lea ecx, [esp + 0x13c]
call fcn.004047b0
lea ecx, [esp + 0xec]
mov byte [esp + 0xb10], 0
call fcn.00405ca0
jmp 0x4673f7