Function at 0x10037520
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov eax, dword [0x101fa268]
cmp eax, 0x60000
jb 0x10037531
jmp 0x10038590
cmp eax, 0x40007
ja 0x10037546
jne 0x1003754b
cmp dword [0x101fa26c], 0x50000
jb 0x1003754b
jmp 0x10038030
mov eax, dword [ecx + 0x654]
test eax, eax
jne 0x1003755a
jmp 0x10037820
cmp eax, 1
jne 0x10037564
jmp 0x10037af0
ret
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1018578e
push eax
mov dword fs:[0], esp
mov eax, dword [0x10274670]
sub esp, 0xc0
push ebx
push ebp
push esi
push edi
xor edi, edi
mov esi, ecx
cmp eax, edi
je 0x10037865
push str.DINGTALKChatMessage_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
lea ebp, [esi + 0x344]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, ebp
call fcn.100626f0
mov ebx, eax
mov eax, dword [0x10274670]
cmp eax, edi
je 0x1003789e
push ebx
push str.DINGTALKChatMessage2_1___x_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp ebx, edi
je 0x10037aac
xor eax, eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x24], eax
mov word [esp + 0x30], di
mov ecx, 0x27
lea edi, [esp + 0x32]
mov dword [esp + 0x28], eax
push 0x4f
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x34]
lea edx, [esp + 0x1c]
stosw word es:[edi], ax
push ecx
lea eax, [esp + 0x24]
push edx
push eax
mov ecx, ebx
call fcn.1003acb0
mov edi, eax
mov eax, dword [0x10274670]
test eax, eax
je 0x10037929
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x20]
push edx
push eax
mov eax, dword [esp + 0x24]
lea edx, [esp + 0x3c]
push ecx
push edx
push eax
push edi
push str.DINGTALKChatMessage2_2___d____d____s____d__d__d__d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x2c
test edi, edi
jbe 0x10037aac
cmp word [esp + 0x30], 0
je 0x10037aac
lea ecx, [esp + 0x30]
push ecx
mov ecx, ebp
call fcn.10062890
mov esi, eax
test esi, esi
jne 0x100379ed
push 0x12d0
call fcn.10173930
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, esi
mov dword [esp + 0xd8], esi
je 0x10037991
mov edx, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x28]
push edx
push esi
push 0x40000000
push 0x20000
push 0x40000000
push 1
mov ecx, eax
call fcn.100391d0
mov esi, eax
test esi, esi
mov dword [esp + 0xd8], 0xffffffff
je 0x100379ed
push esi
mov ecx, ebp
call fcn.101717ac
lea edx, [esp + 0x30]
mov ecx, esi
push edx
call fcn.1005d700
lea eax, [esp + 0x30]
mov ecx, esi
push eax
call fcn.1005d7c0
mov dword [esi + 0xc70], ebx
mov eax, dword [0x10274670]
test eax, eax
je 0x10037a10
lea ecx, [esp + 0x30]
push ecx
push str.DINGTALKChatMessage2_4___s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
mov eax, dword [0x10274670]
test eax, eax
je 0x10037a10
push esi
push str.DINGTALKChatMessage2_5___x_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
test esi, esi
je 0x10037aac
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push edx
push edi
lea ecx, [esp + 0x18]
push eax
xor ebp, ebp
push ecx
mov ecx, ebx
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
call fcn.1003b0a0
cmp dword [0x10274670], ebp
je 0x10037a64
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push edx
push eax
push str.DINGTALKChatMessage2_6___x____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x10037aac
mov ecx, dword [esp + 0x14]
cmp ecx, ebp
jbe 0x10037a88
lea edx, [esp + 0x1c]
push edx
push ecx
push 1
push eax
mov ecx, esi
call fcn.10039b10
mov eax, dword [esp + 0x10]
cmp eax, ebp
je 0x10037aac
mov ecx, dword [eax - 4]
lea esi, [eax - 4]
push 0x10017890
push ecx
push 0x5c8
push eax
call fcn.100ca7f3
push esi
call fcn.10173959
add esp, 4
mov eax, dword [0x10274670]
pop edi
pop esi
pop ebp
test eax, eax
pop ebx
je 0x10037ad2
push str.DINGTALKChatMessage2_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov ecx, dword [esp + 0xc0]
mov dword fs:[0], ecx
add esp, 0xcc
ret
push 0xffffffffffffffff
push 0x101857cf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x190
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [esi + 0x344]
call fcn.100626f0
mov ebx, eax
mov eax, dword [0x10274670]
xor ebp, ebp
mov dword [esp + 0x48], ebx
cmp eax, ebp
je 0x10037b52
push ebx
push str.DINGTALKChatMessage3_1___x_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp ebx, ebp
je 0x10037ff1
mov ecx, ebx
call fcn.1003a5b0
mov ecx, ebx
call fcn.1003cea0
test eax, eax
je 0x10037ff1
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x62]
mov word [esp + 0x60], bp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x60]
push 0x4f
push eax
mov ecx, 0x101fadf8
call fcn.1001b1f0
cmp dword [0x10274670], ebp
je 0x10037bbb
lea ecx, [esp + 0x60]
push ecx
push str.DINGTALKChatMessage3_2___s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp word [esp + 0x60], bp
je 0x10037ff1
lea edx, [esp + 0x60]
mov ecx, ebx
push edx
call fcn.1003c140
mov esi, eax
mov eax, dword [0x10274670]
cmp eax, ebp
je 0x10037bf7
push esi
push str.DINGTALKChatMessage3_3___d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp esi, ebp
jne 0x10037c33
cmp dword [0x101fb9c4], ebp
je 0x10037c0c
mov ecx, dword [esp + 0x10]
call fcn.10038c80
lea eax, [esp + 0x60]
mov ecx, ebx
push eax
call fcn.1005d700
mov dword [0x101fb9c4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101fb9cc], eax
mov dword [0x101fb9c0], ebp
mov ecx, dword [esp + 0x10]
call fcn.10038da0
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x102]
mov word [esp + 0x100], bp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x100]
push 0x4f
push ecx
lea edx, [esp + 0x2c]
stosw word es:[edi], ax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebp
mov eax, dword [ebx + 0xc]
lea ecx, [esp + 0x28]
push edx
push ecx
push eax
call fcn.1003cfb0
mov esi, eax
mov eax, dword [0x10274670]
add esp, 0x14
cmp eax, ebp
mov dword [esp + 0x1c], esi
je 0x10037cb8
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x100]
push edx
push eax
push ecx
push str.DINGTALKChatMessage3_4___d____d____s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x1c
mov eax, dword [esp + 0x24]
cmp eax, ebp
je 0x10037ff1
cmp word [esp + 0x100], bp
je 0x10037ff1
cmp esi, ebp
je 0x10037ff1
xor edi, edi
cmp eax, 1
mov dword [esp + 0x18], edi
je 0x10037cea
cmp eax, 3
jne 0x10037cf6
mov dword [esp + 0x18], 1
mov edi, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x100]
push edi
push edx
call fcn.10038ff0
mov esi, eax
mov eax, dword [0x10274670]
cmp eax, ebp
mov dword [esp + 0x28], esi
je 0x10037d48
cmp edi, ebp
mov eax, str.Single
je 0x10037d25
mov eax, str.Mutil
lea ecx, [esp + 0x100]
push ecx
push eax
push esi
push str.DINGTALKChatMessage3_6___x___Chatmoe:__s___name:__s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x1c
cmp esi, ebp
je 0x10037ff1
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x10]
push edx
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x18]
push eax
push ecx
push edx
mov ecx, ebx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
call fcn.1003c400
cmp dword [0x10274670], ebp
je 0x10037d9e
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push str.DINGTALKChatMessage3_7___x____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
mov ecx, dword [esp + 0x14]
cmp ecx, ebp
je 0x10037ff1
mov edx, dword [esp + 0x10]
cmp edx, ebp
jbe 0x10037fcd
lea eax, [edx + edx*8]
mov edi, dword [ecx + 0x5c4]
mov dword [esp + 0x4c], edi
lea eax, [edx + eax*4]
lea eax, [eax + eax*4]
mov esi, dword [ecx + eax*8 - 4]
mov eax, dword [0x10274670]
cmp eax, ebp
mov dword [esp + 0x44], esi
je 0x10037dfd
push edi
push esi
push str.DINGTALKChatMessage3_8___d____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
add esp, 0x18
cmp esi, edi
jg 0x10037fcd
fild dword [esp + 0x44]
fild dword [esp + 0x4c]
fld qword [0x101fb738]
fmul qword [0x10193ac0]
fsubp st(1)
fcompp
fnstsw ax
test ah, 0x41
je 0x10037fcd
xor eax, eax
mov dword [esp + 0x50], ebp
mov dword [esp + 0x54], eax
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x58], eax
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x58]
push eax
mov eax, dword [esp + 0x24]
push eax
mov eax, dword [0x101fb73c]
push eax
mov eax, dword [0x101fb738]
push eax
push edx
push ecx
call fcn.1003d670
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x70]
mov edi, eax
mov eax, ecx
sub eax, ebx
add esp, 0x20
cdq
sub eax, edx
mov esi, eax
sar esi, 1
add esi, ebx
cmp edi, ebp
je 0x10037fa8
mov edx, dword [0x101fb73c]
mov eax, dword [0x101fb738]
push ecx
mov ecx, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x18]
push edx
mov edx, dword [esp + 0x20]
push eax
push ecx
mov ecx, dword [esp + 0x5c]
push edx
call fcn.1003c250
mov ebx, 0x10193ab4
mov dword [esp + 0x1a8], ebp
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebp
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebp
mov edi, dword [esp + 0x28]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x1a8], 1
lea eax, [edi + 0xd0]
push eax
mov eax, dword [esp + 0x20]
push ecx
mov ecx, dword [0x101fb73c]
push esi
push edx
mov edx, dword [0x101fb738]
push eax
mov eax, dword [esp + 0x24]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
lea edx, [esp + 0x50]
push ecx
push edx
call fcn.1003dee0
add esp, 0x28
lea eax, [esp + 0x30]
mov ecx, edi
push eax
call fcn.1003cc20
mov dword [esp + 0x1a8], 0xffffffff
mov dword [esp + 0x30], ebx
mov esi, dword [esp + 0x34]
mov dword [esp + 0x1a8], 2
cmp esi, ebp
je 0x10037f9b
mov eax, dword [esp + 0x38]
mov dword [esp + 0x28], esi
cmp eax, ebp
je 0x10037f92
lea ebx, [eax]
lea edi, [esi + 4]
mov byte [esp + 0x1a8], 3
push 0x101fa2d8
mov ecx, edi
mov dword [esi], 3
call fcn.100e3540
mov ecx, edi
mov byte [esp + 0x1a8], 2
call fcn.100e3260
add esi, 8
dec ebx
mov dword [esp + 0x28], esi
jne 0x10037f58
mov esi, dword [esp + 0x34]
push esi
call fcn.10173959
add esp, 4
mov dword [esp + 0x1a8], 0xffffffff
jmp 0x10037fc9
cmp dword [0x10274670], ebp
je 0x10037fc9
push str.DINGTALKChatMessage3_IACCInfo_Is_ERROR____
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov ecx, dword [esp + 0x14]
cmp ecx, ebp
je 0x10037ff1
mov edx, dword [ecx - 4]
lea esi, [ecx - 4]
push 0x10017890
push edx
push 0x5c8
push ecx
call fcn.100ca7f3
push esi
call fcn.10173959
add esp, 4
mov eax, dword [0x10274670]
pop edi
pop esi
cmp eax, ebp
pop ebp
pop ebx
je 0x10038017
push str.DINGTALKChatMessage3_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov ecx, dword [esp + 0x190]
mov dword fs:[0], ecx
add esp, 0x19c
ret
push 0xffffffffffffffff
push 0x10185828
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x180
push ebx
push ebp
push esi
push edi
mov ebx, ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebx + 0x344]
call fcn.100626f0
mov ebp, eax
mov eax, dword [0x10274670]
test eax, eax
mov dword [esp + 0x18], ebp
je 0x1003808c
push ebp
push str.DINGTALKChatMessage4_1___x_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
test ebp, ebp
je 0x10038551
mov ecx, ebp
call fcn.1003a5b0
mov ecx, ebp
call fcn.1003cea0
test eax, eax
je 0x10038551
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x52]
mov word [esp + 0x50], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [esp + 0x50]
push 0x4f
push eax
mov ecx, 0x101fadf8
call fcn.1001b1f0
mov eax, dword [0x10274670]
test eax, eax
je 0x100380f8
lea ecx, [esp + 0x50]
push ecx
push str.DINGTALKChatMessage4_2___s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp word [esp + 0x50], 0
je 0x10038551
lea edx, [esp + 0x50]
mov ecx, ebp
push edx
call fcn.1003c140
mov esi, eax
mov eax, dword [0x10274670]
xor edi, edi
cmp eax, edi
je 0x10038137
push esi
push str.DINGTALKChatMessage4_3___d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp esi, edi
jne 0x10038171
cmp dword [0x101fb9c4], edi
je 0x1003814a
mov ecx, ebx
call fcn.10038c80
lea eax, [esp + 0x50]
mov ecx, ebp
push eax
call fcn.1005d700
mov dword [0x101fb9c4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101fb9cc], eax
mov dword [0x101fb9c0], edi
cmp dword [0x101fb9d0], edi
je 0x10038180
mov ecx, ebx
call fcn.10038da0
mov word [esp + 0xf0], di
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0xf2]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0xf0]
mov dword [esp + 0x14], 0
stosw word es:[edi], ax
mov eax, dword [ebp + 0xc]
test ecx, ecx
je 0x10038551
test eax, eax
je 0x10038551
mov ecx, dword [0x101fa268]
lea edx, [esp + 0xf0]
cmp ecx, 0x50000
push 0x50
lea ecx, [esp + 0x18]
push edx
push ecx
push eax
jb 0x100381e1
call fcn.10040240
jmp 0x100381e6
call fcn.1003fbf0
add esp, 0x10
test eax, eax
je 0x10038551
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf0]
push edx
push eax
mov ecx, ebx
call fcn.10038ff0
mov ebx, eax
mov eax, dword [0x10274670]
test eax, eax
je 0x10038245
mov eax, dword [esp + 0x14]
test eax, eax
mov eax, str.Single
je 0x10038222
mov eax, str.Mutil
lea ecx, [esp + 0xf0]
push ecx
push eax
push ebx
push str.DINGTALKChatMessage4_6___x___Chatmoe:__s___name:__s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x1c
test ebx, ebx
je 0x10038551
call fcn.1003f370
mov esi, dword [0x101fb9d0]
mov eax, dword [ebp + 0xc]
lea edx, [esp + 0x10]
mov dword [esp + 0x10], 0
push edx
push esi
push eax
call fcn.1003f100
mov eax, dword [0x10274670]
add esp, 0xc
test eax, eax
je 0x1003829a
mov eax, dword [esp + 0x10]
push eax
push esi
push str.DINGTALKChatMessage4_7___x____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
test esi, esi
je 0x10038551
mov ecx, dword [esp + 0x10]
test ecx, ecx
jbe 0x10038551
lea edx, [ecx + ecx*8]
mov ebp, dword [esi + 0x5c4]
mov dword [esp + 0x38], ebp
lea eax, [ecx + edx*4]
lea eax, [eax + eax*4]
mov edi, dword [esi + eax*8 - 4]
mov eax, dword [0x10274670]
test eax, eax
mov dword [esp + 0x3c], edi
je 0x100382f1
push ebp
push edi
push str.DINGTALKChatMessage4_8___d____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
mov ecx, dword [esp + 0x28]
add esp, 0x18
cmp edi, ebp
jg 0x10038551
fild dword [esp + 0x3c]
fild dword [esp + 0x38]
fld qword [0x101fb738]
fmul qword [0x10193ac0]
fsubp st(1)
fcompp
fnstsw ax
test ah, 0x41
je 0x10038551
xor edx, edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x44], edx
push eax
mov dword [esp + 0x4c], edx
lea eax, [esp + 0x44]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [0x101fb73c]
push edx
mov edx, dword [0x101fb738]
push eax
push edx
xor edi, edi
push ecx
push esi
mov dword [esp + 0x60], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x3c], edi
call fcn.1003d670
add esp, 0x20
cmp eax, edi
je 0x1003848a
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov ebp, 0x10193ab4
mov dword [esp + 0x198], edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], edi
mov edx, dword [esp + 0x14]
lea ecx, [ebx + 0xd0]
push ecx
mov ecx, dword [esp + 0x38]
push edx
mov edx, dword [0x101fb73c]
push eax
mov eax, dword [esp + 0x28]
push eax
mov eax, dword [0x101fb738]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
lea edx, [esp + 0x40]
push esi
push edx
mov dword [esp + 0x1c0], 1
call fcn.1003dee0
add esp, 0x28
test eax, eax
jle 0x100384b4
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
mov edx, dword [0x101fb73c]
push eax
mov eax, dword [0x101fb738]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
mov ecx, dword [esp + 0x2c]
push esi
call fcn.1003c250
lea edx, [esp + 0x20]
mov ecx, ebx
push edx
call fcn.1003cc20
mov dword [esp + 0x198], 0xffffffff
mov dword [esp + 0x20], ebp
mov esi, dword [esp + 0x24]
mov dword [esp + 0x198], 4
cmp esi, edi
je 0x10038546
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x18], esi
cmp ebp, edi
je 0x1003853d
mov bl, 5
lea edi, [esi + 4]
mov byte [esp + 0x198], bl
push 0x101fa2d8
mov ecx, edi
mov dword [esi], 3
call fcn.100e3540
mov ecx, edi
mov byte [esp + 0x198], 4
call fcn.100e3260
add esi, 8
dec ebp
mov dword [esp + 0x18], esi
jne 0x10038450
jmp 0x10038539
cmp dword [0x10274670], edi
je 0x10038551
push str.DINGTALKChatMessage4_IACCInfo_Is_ERROR____
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
jmp 0x10038551
cmp dword [0x10274670], edi
je 0x100384d5
push str.DINGTALKChatMessage5_ERROR_No_ChatInfo_____
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov dword [esp + 0x198], 0xffffffff
mov dword [esp + 0x20], ebp
mov esi, dword [esp + 0x24]
mov ebx, 2
cmp esi, edi
mov dword [esp + 0x198], ebx
je 0x10038546
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x18], esi
cmp ebp, edi
je 0x1003853d
lea edi, [esi + 4]
mov byte [esp + 0x198], 3
push 0x101fa2d8
mov ecx, edi
mov dword [esi], 3
call fcn.100e3540
mov ecx, edi
mov byte [esp + 0x198], bl
call fcn.100e3260
add esi, 8
dec ebp
mov dword [esp + 0x18], esi
jne 0x10038504
mov esi, dword [esp + 0x24]
push esi
call fcn.10173959
add esp, 4
mov dword [esp + 0x198], 0xffffffff
mov eax, dword [0x10274670]
pop edi
pop esi
pop ebp
test eax, eax
pop ebx
je 0x10038577
push str.DINGTALKChatMessage4_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov ecx, dword [esp + 0x180]
mov dword fs:[0], ecx
add esp, 0x18c
ret
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10185888
push eax
mov dword fs:[0], esp
sub esp, 0x184
push ebx
push ebp
push esi
push edi
mov ebp, ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [ebp + 0x344]
call fcn.100626f0
mov ebx, eax
mov eax, dword [0x10274670]
test eax, eax
je 0x100385e8
push ebx
push str.DINGTALKChatMessage5_1___x_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
test ebx, ebx
je 0x10038ade
mov ecx, ebx
call fcn.1003a5b0
mov eax, dword [ebx + 8]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x1c]
push eax
call fcn.1003f430
add esp, 4
test eax, eax
je 0x10038ade
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0x56]
mov word [esp + 0x54], 0
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x54]
push 0x4f
push ecx
mov ecx, 0x101fadf8
stosw word es:[edi], ax
call fcn.1001b1f0
mov eax, dword [0x10274670]
test eax, eax
je 0x10038661
lea edx, [esp + 0x54]
push edx
push str.DINGTALKChatMessage5_2___s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp word [esp + 0x54], 0
je 0x10038ade
lea eax, [esp + 0x54]
mov ecx, ebx
push eax
call fcn.1003c140
mov esi, eax
mov eax, dword [0x10274670]
xor edi, edi
cmp eax, edi
je 0x100386a0
push esi
push str.DINGTALKChatMessage5_3___d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x14
cmp esi, edi
jne 0x100386da
cmp dword [0x101fb9c4], edi
je 0x100386b3
mov ecx, ebp
call fcn.10038c80
lea ecx, [esp + 0x54]
push ecx
mov ecx, ebx
call fcn.1005d700
mov dword [0x101fb9c4], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x101fb9cc], eax
mov dword [0x101fb9c0], edi
cmp dword [0x101fb9d0], edi
je 0x100386e9
mov ecx, ebp
call fcn.10038da0
cmp dword [0x101fb9e0], edi
jne 0x10038702
mov eax, dword [ebx + 0x10]
push 0x101fb9d8
push eax
call fcn.1003eaa0
add esp, 8
mov word [esp + 0xf4], di
mov ecx, 0x27
xor eax, eax
lea edi, [esp + 0xf6]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x14], 0
stosw word es:[edi], ax
mov eax, dword [ebx + 8]
cmp ecx, eax
jne 0x10038733
xor eax, eax
jmp 0x1003873c
push ecx
call fcn.1001bb50
add esp, 4
lea edx, [esp + 0xf4]
push 0x50
lea ecx, [esp + 0x18]
push edx
push ecx
push eax
push 0x101fb9d8
call fcn.1003ebe0
add esp, 0x14
test eax, eax
je 0x10038ade
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xf4]
push edx
push eax
mov ecx, ebp
call fcn.10038ff0
mov esi, eax
mov eax, dword [0x10274670]
test eax, eax
mov dword [esp + 0x24], esi
je 0x100387b9
mov eax, dword [esp + 0x14]
test eax, eax
mov eax, str.Single
je 0x10038796
mov eax, str.Mutil
lea ecx, [esp + 0xf4]
push ecx
push eax
push esi
push str.DINGTALKChatMessage5_6___x___Chatmode:__s___name:__s_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x1c
test esi, esi
je 0x10038ade
call fcn.1003f370
mov ecx, dword [esp + 0x1c]
mov esi, dword [0x101fb9d0]
mov dword [esp + 0x10], 0
mov eax, dword [ebx + 8]
cmp ecx, eax
jne 0x100387e4
mov eax, dword [ebx + 0xc]
jmp 0x100387e6
mov eax, ecx
lea edx, [esp + 0x10]
mov dword [esp + 0x1c], eax
push edx
push esi
push eax
call fcn.1003f100
mov eax, dword [0x10274670]
add esp, 0xc
test eax, eax
je 0x10038821
mov eax, dword [esp + 0x10]
push eax
push esi
push str.DINGTALKChatMessage5_7___x____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x18
test esi, esi
je 0x10038ade
mov ecx, dword [esp + 0x10]
test ecx, ecx
jbe 0x10038ade
lea edx, [ecx + ecx*8]
mov ebp, dword [esi + 0x5c4]
mov dword [esp + 0x18], ebp
lea eax, [ecx + edx*4]
lea eax, [eax + eax*4]
mov edi, dword [esi + eax*8 - 4]
mov eax, dword [0x10274670]
test eax, eax
mov dword [esp + 0x50], edi
je 0x10038878
push ebp
push edi
push str.DINGTALKChatMessage5_8___d____d_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
mov ecx, dword [esp + 0x28]
add esp, 0x18
cmp edi, ebp
jg 0x10038ade
fild dword [esp + 0x50]
fild dword [esp + 0x18]
fld qword [0x101fb738]
fmul qword [0x10193ac0]
fsubp st(1)
fcompp
fnstsw ax
test ah, 0x41
je 0x10038ade
xor edx, edx
lea eax, [esp + 0x20]
mov dword [esp + 0x44], edx
push eax
mov dword [esp + 0x4c], edx
lea eax, [esp + 0x44]
mov dword [esp + 0x50], edx
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x1c]
push eax
mov eax, dword [0x101fb73c]
push edx
mov edx, dword [0x101fb738]
push eax
push edx
xor ebp, ebp
push ecx
push esi
mov dword [esp + 0x60], ebp
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x40], ebp
call fcn.1003d670
add esp, 0x20
test eax, eax
je 0x10038a17
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov edi, 0x10193ab4
mov dword [esp + 0x19c], ebp
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebp
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x14]
add ecx, 0xd0
mov dword [esp + 0x19c], 1
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [0x101fb73c]
push eax
mov eax, dword [esp + 0x2c]
push eax
mov eax, dword [0x101fb738]
push ecx
mov ecx, dword [esp + 0x24]
push edx
push eax
push ecx
lea edx, [esp + 0x48]
push esi
push edx
call fcn.1003dee0
add esp, 0x28
test eax, eax
jle 0x10038a41
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
mov edx, dword [0x101fb73c]
push eax
mov eax, dword [0x101fb738]
push ecx
mov ecx, dword [esp + 0x18]
push edx
push eax
push ecx
push esi
mov ecx, ebx
call fcn.1003c250
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x28]
push edx
call fcn.1003cc20
mov dword [esp + 0x19c], 0xffffffff
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x19c], 4
cmp esi, ebp
je 0x10038ad3
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], esi
cmp eax, ebp
je 0x10038aca
lea ebp, [eax]
mov bl, 5
lea edi, [esi + 4]
mov byte [esp + 0x19c], bl
push 0x101fa2d8
mov ecx, edi
mov dword [esi], 3
call fcn.100e3540
mov ecx, edi
mov byte [esp + 0x19c], 4
call fcn.100e3260
add esi, 8
dec ebp
mov dword [esp + 0x18], esi
jne 0x100389dd
jmp 0x10038ac6
cmp dword [0x10274670], ebp
je 0x10038ade
push str.DINGTALKChatMessage5_ERROR_IACCInfo_RECT_____
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
jmp 0x10038ade
cmp dword [0x10274670], ebp
je 0x10038a62
push str.DINGTALKChatMessage5_ERROR_No_ChatInfo_____
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov dword [esp + 0x19c], 0xffffffff
mov dword [esp + 0x28], edi
mov esi, dword [esp + 0x2c]
mov ebx, 2
cmp esi, ebp
mov dword [esp + 0x19c], ebx
je 0x10038ad3
mov ebp, dword [esp + 0x30]
mov dword [esp + 0x18], esi
test ebp, ebp
je 0x10038aca
lea edi, [esi + 4]
mov byte [esp + 0x19c], 3
push 0x101fa2d8
mov ecx, edi
mov dword [esi], 3
call fcn.100e3540
mov ecx, edi
mov byte [esp + 0x19c], bl
call fcn.100e3260
add esi, 8
dec ebp
mov dword [esp + 0x18], esi
jne 0x10038a91
mov esi, dword [esp + 0x2c]
push esi
call fcn.10173959
add esp, 4
mov dword [esp + 0x19c], 0xffffffff
mov eax, dword [0x10274670]
pop edi
pop esi
pop ebp
test eax, eax
pop ebx
je 0x10038b04
push str.DINGTALKChatMessage5_
push str.DINGTALK
push 0xffffffffffffffff
push 0x10273ddc
call fcn.10119f10
add esp, 0x10
mov ecx, dword [esp + 0x184]
mov dword fs:[0], ecx
add esp, 0x190
ret