Function at 0x18004a980
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
mov qword [rbp + 0x98], 0xfffffffffffffffe
mov qword [rsp + 0x5e8], rbx
mov rax, qword [0x1801a8080]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov dword [rbp - 0x40], r9d
mov qword [rbp + 0x20], r8
mov r14, rdx
mov r13, rcx
mov qword [rbp - 0x20], rcx
mov r15, qword [rbp + 0x4f8]
mov qword [rbp - 0x30], r15
mov r12, qword [rbp + 0x508]
mov qword [rbp - 0x28], r12
mov rax, qword [rbp + 0x510]
mov qword [rbp - 0x38], rax
xor ebx, ebx
mov dword [rsp + 0x50], ebx
mov dword [rcx + 0x30], ebx
lea edx, [rbx + 8]
lea rcx, [rsp + 0x58]
call fcn.18001bf20
lea rdx, [r13 + 0x38]
lea rcx, [rsp + 0x58]
call fcn.18001a920
nop
mov rsi, qword [r13 + 8]
test rsi, rsi
je 0x18004c000
mov rax, qword [rsp + 0x58]
test rax, rax
je 0x18004aa41
mov rcx, qword [rax]
test rcx, rcx
je 0x18004aa3c
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x58], rbx
lea rbx, [r13 + 0x40]
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rbx], eax
call fcn.180055f90
mov rcx, rax
mov dword [rsp + 0x38], 0x4080000
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov r9, r14
lea r8, str.POST
mov rdx, rsi
call fcn.180056030
mov rsi, rax
mov qword [rbp - 0x78], rax
xor r14d, r14d
mov edx, r14d
mov rcx, qword [rbp + 0x10]
xchg dword [rcx], edx
test rax, rax
je 0x18004c000
lea edx, [r14 + 8]
lea rcx, [rsp + 0x60]
call fcn.18001bf20
lea rdx, [r13 + 0x38]
lea rcx, [rsp + 0x60]
call fcn.18001a920
nop
mov qword [r13 + 0x10], rsi
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x18004aadd
mov rcx, qword [rax]
test rcx, rcx
je 0x18004aad8
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rsp + 0x60], r14
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], r14
mov qword [rbp + 0x180], r14
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], r14w
mov r8d, 0x3e
lea rdx, str.Content_Type:_application_x_www_form_urlencoded__charsetUTF_8
lea rcx, [rbp + 0x170]
call fcn.18000c0b0
nop
mov r14, qword [rbp - 0x38]
mov rax, qword [r14 + 8]
cmp qword [r14], rax
je 0x18004ae5d
mov rcx, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18004ab86
lea rsi, [rcx + 2]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp rdx, 8
cmovae rdi, qword [rbp + 0x170]
lea rcx, [rdi + rcx*2]
mov r8d, 4
lea rdx, [0x18015e358]
call fcn.180101f90
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x18004aba7
mov qword [rsp + 0x20], 2
lea r9, [0x18015e358]
mov edx, 2
lea rcx, [rbp + 0x170]
call fcn.18000cad0
mov rcx, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov rax, rdx
sub rax, rcx
cmp rax, 8
jb 0x18004abfd
lea rsi, [rcx + 8]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp rdx, 8
cmovae rdi, qword [rbp + 0x170]
lea rcx, [rdi + rcx*2]
mov r8d, 0x10
lea rdx, str.Cookie:
call fcn.180101f90
xor edx, edx
mov word [rdi + rsi*2], dx
jmp 0x18004ac20
mov qword [rsp + 0x20], 8
lea r9, str.Cookie:
mov edx, 8
lea rcx, [rbp + 0x170]
call fcn.18000cad0
xor edx, edx
mov rcx, qword [r14]
mov rax, qword [r14 + 8]
sub rax, rcx
sar rax, 6
test rax, rax
je 0x18004ae5d
mov r13, rdx
mov r12, rdx
mov rbx, r14
lea r9, [rcx + r13]
lea r14, [r9 + 0x20]
mov rdx, qword [r9 + 0x10]
test rdx, rdx
je 0x18004ae2f
lea r15, [r14 + 0x10]
cmp qword [r15], 0
je 0x18004ae2f
cmp qword [r9 + 0x18], 8
jb 0x18004ac6d
mov r9, qword [r9]
mov rcx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x188]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18004acbc
lea rsi, [rdx + rcx]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp r8, 8
cmovae rdi, qword [rbp + 0x170]
lea r8, [rdx + rdx]
lea rcx, [rdi + rcx*2]
mov rdx, r9
call fcn.180101f90
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x18004accd
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x170]
call fcn.18000cad0
mov rcx, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18004ad23
lea rsi, [rcx + 1]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp rdx, 8
cmovae rdi, qword [rbp + 0x170]
lea rcx, [rdi + rcx*2]
mov r8d, 2
lea rdx, [0x18015e374]
call fcn.180101f90
xor eax, eax
mov word [rdi + rsi*2], ax
jmp 0x18004ad44
mov qword [rsp + 0x20], 1
lea r9, [0x18015e374]
mov edx, 1
lea rcx, [rbp + 0x170]
call fcn.18000cad0
cmp qword [r14 + 0x18], 8
jb 0x18004ad4e
mov r14, qword [r14]
mov rdx, qword [r15]
mov rcx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x188]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18004ada2
lea rsi, [rdx + rcx]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp r8, 8
cmovae rdi, qword [rbp + 0x170]
lea r8, [rdx + rdx]
lea rcx, [rdi + rcx*2]
mov rdx, r14
call fcn.180101f90
xor r14d, r14d
mov word [rdi + rsi*2], r14w
jmp 0x18004adb9
mov qword [rsp + 0x20], rdx
mov r9, r14
lea rcx, [rbp + 0x170]
call fcn.18000cad0
xor r14d, r14d
mov rcx, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18004ae0e
lea rsi, [rcx + 1]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp rdx, 8
cmovae rdi, qword [rbp + 0x170]
lea rcx, [rdi + rcx*2]
mov r8d, 2
lea rdx, [0x18015e000]
call fcn.180101f90
mov word [rdi + rsi*2], r14w
jmp 0x18004ae2f
mov qword [rsp + 0x20], 1
lea r9, [0x18015e000]
mov edx, 1
lea rcx, [rbp + 0x170]
call fcn.18000cad0
inc r12
add r13, 0x40
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 6
cmp r12, rax
jb 0x18004ac40
mov rbx, qword [rbp + 0x18]
mov r12, qword [rbp - 0x28]
mov r15, qword [rbp - 0x30]
mov r13, qword [rbp - 0x20]
mov rcx, qword [rbp + 0x180]
mov rdx, qword [rbp + 0x188]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x18004aeb5
lea rsi, [rcx + 4]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp rdx, 8
cmovae rdi, qword [rbp + 0x170]
lea rcx, [rdi + rcx*2]
mov r8d, 8
lea rdx, str._r_n_r_n
call fcn.180101f90
xor r14d, r14d
mov word [rdi + rsi*2], r14w
jmp 0x18004aed9
mov qword [rsp + 0x20], 4
lea r9, str._r_n_r_n
mov edx, 4
lea rcx, [rbp + 0x170]
call fcn.18000cad0
xor r14d, r14d
lea rdi, [r15 + 0x10]
cmp qword [rdi], 0
je 0x18004b079
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x208], xmm0
movdqa xmm1, xmmword [0x180163640]
movdqu xmmword [rbp + 0x208], xmm1
mov word [rbp + 0x1f8], r14w
mov r8d, 0x12
lea rdx, [0x18015e450]
lea rcx, [rbp + 0x1f8]
call fcn.18000c0b0
nop
cmp qword [r15 + 0x18], 8
jb 0x18004af2e
mov r15, qword [r15]
mov rdx, qword [rdi]
mov rcx, qword [rbp + 0x208]
mov r8, qword [rbp + 0x210]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18004af7f
lea rsi, [rdx + rcx]
mov qword [rbp + 0x208], rsi
lea rdi, [rbp + 0x1f8]
cmp r8, 8
cmovae rdi, qword [rbp + 0x1f8]
lea r8, [rdx + rdx]
lea rcx, [rdi + rcx*2]
mov rdx, r15
call fcn.180101f90
mov word [rdi + rsi*2], r14w
jmp 0x18004af93
mov qword [rsp + 0x20], rdx
mov r9, r15
lea rcx, [rbp + 0x1f8]
call fcn.18000cad0
lea r9, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 8
cmovae r9, qword [rbp + 0x1f8]
mov rsi, qword [rbp + 0x208]
mov r14, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x18004b004
lea rax, [r14 + rsi]
mov qword [rbp + 0x180], rax
lea rdi, [rbp + 0x170]
cmp rcx, 8
cmovae rdi, qword [rbp + 0x170]
lea r8, [rsi + rsi]
lea rcx, [rdi + r14*2]
mov rdx, r9
call fcn.180101f90
lea rax, [r14 + rsi]
xor esi, esi
mov word [rdi + rax*2], si
jmp 0x18004b01a
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp + 0x170]
call fcn.18000cad0
xor esi, esi
mov rdx, qword [rbp + 0x210]
cmp rdx, 8
jb 0x18004b060
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b05b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c048
call fcn.1800e2d24
movdqa xmm0, xmmword [0x180163640]
movdqu xmmword [rbp + 0x208], xmm0
mov word [rbp + 0x1f8], si
jmp 0x18004b07b
xor esi, esi
mov r15, qword [r13 + 0x18]
mov qword [rbp - 0x68], r15
mov rax, qword [r13 + 0x20]
mov qword [rbp - 0x30], rax
cmp r15, rax
je 0x18004b55e
lea r12, [r15 + 0x30]
mov r14d, dword [rsp + 0x50]
nop dword [rax]
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], si
or r14d, 1
mov dword [rsp + 0x50], r14d
mov rdx, qword [r12 - 0x20]
add rdx, 2
lea rcx, [rsp + 0x68]
call fcn.18000ccd0
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18004b124
lea rsi, [rcx + 2]
mov qword [rsp + 0x78], rsi
lea rdi, [rsp + 0x68]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x68]
lea rcx, [rdi + rcx*2]
mov r8d, 4
lea rdx, [0x18015e358]
call fcn.180101f90
xor r13d, r13d
mov word [rdi + rsi*2], r13w
jmp 0x18004b146
mov qword [rsp + 0x20], 2
lea r9, [0x18015e358]
mov edx, 2
lea rcx, [rsp + 0x68]
call fcn.18000cad0
xor r13d, r13d
mov r9, r15
cmp qword [r12 - 0x18], 8
jb 0x18004b154
mov r9, qword [r15]
mov rdx, qword [r12 - 0x20]
mov rcx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18004b19c
lea rsi, [rdx + rcx]
mov qword [rsp + 0x78], rsi
lea rdi, [rsp + 0x68]
cmp r8, 8
cmovae rdi, qword [rsp + 0x68]
lea r8, [rdx + rdx]
lea rcx, [rdi + rcx*2]
mov rdx, r9
call fcn.180101f90
mov word [rdi + rsi*2], r13w
jmp 0x18004b1ac
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0x68]
call fcn.18000cad0
nop
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18004b1fb
lea rsi, [rcx + 2]
mov qword [rsp + 0x78], rsi
lea rdi, [rsp + 0x68]
cmp rdx, 8
cmovae rdi, qword [rsp + 0x68]
lea rcx, [rdi + rcx*2]
mov r8d, 4
lea rdx, [0x18015e478]
call fcn.180101f90
mov word [rdi + rsi*2], r13w
lea rax, [rsp + 0x68]
jmp 0x18004b21a
mov qword [rsp + 0x20], 2
lea r9, [0x18015e478]
mov edx, 2
lea rcx, [rsp + 0x68]
call fcn.18000cad0
xor esi, esi
mov qword [rbp], rsi
mov qword [rbp + 8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 2
mov dword [rsp + 0x50], r14d
lea rdx, [r12 - 0x10]
cmp qword [r12 + 8], 8
jb 0x18004b25b
mov rdx, qword [rdx]
mov r8, qword [r12]
lea rcx, [rbp - 0x10]
call fcn.18000c370
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 4
mov dword [rsp + 0x50], r14d
mov rcx, qword [rbp - 0x50]
mov rdx, qword [rbp - 0x48]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18004b2e4
lea rsi, [rcx + 2]
mov qword [rbp - 0x50], rsi
lea rdi, [rbp - 0x60]
cmp rdx, 8
cmovae rdi, qword [rbp - 0x60]
lea rcx, [rdi + rcx*2]
mov r8d, 4
lea rdx, [0x18015e358]
call fcn.180101f90
xor eax, eax
mov word [rdi + rsi*2], ax
lea rax, [rbp - 0x60]
xor esi, esi
jmp 0x18004b302
mov qword [rsp + 0x20], 2
lea r9, [0x18015e358]
mov edx, 2
lea rcx, [rbp - 0x60]
call fcn.18000cad0
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x250], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x238], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x248], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 8
mov dword [rsp + 0x50], r14d
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18004b386
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b381
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c04e
call fcn.1800e2d24
mov qword [rbp - 0x50], rsi
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], si
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x18004b3df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b3da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c054
call fcn.1800e2d24
mov qword [rbp], rsi
mov qword [rbp + 8], 7
mov word [rbp - 0x10], si
and r14d, 0xfffffffe
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x18004b439
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004b434
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c05a
call fcn.1800e2d24
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], si
lea r9, [rbp + 0x238]
mov r15, qword [rbp + 0x238]
mov r13, qword [rbp + 0x250]
cmp r13, 8
cmovae r9, r15
mov rcx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x188]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0x248]
cmp rdx, rax
ja 0x18004b4c0
lea rsi, [rdx + rcx]
mov qword [rbp + 0x180], rsi
lea rdi, [rbp + 0x170]
cmp r8, 8
cmovae rdi, qword [rbp + 0x170]
lea r8, [rdx + rdx]
lea rcx, [rdi + rcx*2]
mov rdx, r9
call fcn.180101f90
xor eax, eax
mov word [rdi + rsi*2], ax
xor esi, esi
jmp 0x18004b4df
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x170]
call fcn.18000cad0
mov r13, qword [rbp + 0x250]
mov r15, qword [rbp + 0x238]
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
cmp r13, 8
jb 0x18004b523
lea rdx, [r13*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x18004b51b
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c060
mov rcx, r15
call fcn.1800e2d24
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x250], 7
mov word [rbp + 0x238], si
mov r15, qword [rbp - 0x68]
add r15, 0x40
mov qword [rbp - 0x68], r15
add r12, 0x40
cmp r15, qword [rbp - 0x30]
jne 0x18004b0a0
mov r12, qword [rbp - 0x28]
mov r13, qword [rbp - 0x20]
mov qword [rbp - 0x18], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rbx], eax
lea rdi, [rbp + 0x170]
cmp qword [rbp + 0x188], 8
cmovae rdi, qword [rbp + 0x170]
call fcn.180055f90
mov rcx, rax
mov eax, dword [rbp - 0x40]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x180]
mov r8, rdi
mov rdi, qword [rbp - 0x78]
mov rdx, rdi
call fcn.180056130
test eax, eax
jne 0x18004b613
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x30], eax
mov ecx, esi
mov rax, qword [rbp - 0x18]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x18004bfdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bfd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c03c
jmp 0x18004bfd7
mov ecx, esi
mov rax, qword [rbp - 0x18]
xchg dword [rax], ecx
mov qword [r12 + 0x10], rsi
mov rax, r12
cmp qword [r12 + 0x18], 0x10
jb 0x18004b62f
mov rax, qword [r12]
mov byte [rax], 0
mov r15d, 0x200
nop dword [rax + rax]
mov dword [rbp + 0x194], esi
mov qword [rbp - 0x70], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rbx], eax
call fcn.180055f90
mov rcx, rax
lea rax, [rbp + 0x194]
mov qword [rsp + 0x20], rax
mov r9d, 0x1ff
lea r8, [rbp + 0x280]
mov rdx, rdi
call fcn.1800563a0
test eax, eax
je 0x18004bf88
mov ecx, esi
mov rax, qword [rbp - 0x70]
xchg dword [rax], ecx
mov eax, dword [rbp + 0x194]
cmp eax, r15d
jae 0x18004bf39
test eax, eax
je 0x18004b718
mov esi, eax
cmp rax, r15
jae 0x18004c066
mov byte [rbp + rax + 0x280], 0
mov rcx, qword [r12 + 0x10]
mov rdx, qword [r12 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x18004b6fc
lea rax, [rcx + rsi]
mov qword [r12 + 0x10], rax
mov rax, r12
cmp rdx, 0x10
jb 0x18004b6dc
mov rax, qword [r12]
lea rdi, [rax + rcx]
mov r8, rsi
lea rdx, [rbp + 0x280]
mov rcx, rdi
call fcn.180101f90
mov byte [rdi + rsi], 0
mov rdi, qword [rbp - 0x78]
jmp 0x18004b716
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x280]
xor r8d, r8d
mov rdx, rsi
mov rcx, r12
call fcn.1800128b0
xor esi, esi
mov ecx, esi
mov rax, qword [rbp - 0x70]
xchg dword [rax], ecx
cmp dword [rbp + 0x194], 0
ja 0x18004b640
mov r12, qword [rbp - 0x38]
mov rcx, r12
call fcn.180046200
mov ecx, 0x402
call fcn.1800e33e8
mov dword [rbp + 0x190], esi
mov r13, 0xffffffffffffffff
mov r14, rax
mov word [r14], si
mov dword [rbp + 0xf0], r15d
mov esi, dword [rbp + 0x190]
mov qword [rbp + 0x28], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rbx], eax
call fcn.180055f90
mov rcx, rax
lea rax, [rbp + 0x190]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9, r14
mov r8d, 0x2b
mov rdx, rdi
call fcn.1800560c0
test eax, eax
setne dil
xor r8d, r8d
mov edx, r8d
mov rcx, qword [rbp + 0x28]
xchg dword [rcx], edx
test eax, eax
jne 0x18004b80b
mov eax, dword [rbp + 0xf0]
cmp eax, r15d
jbe 0x18004b811
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18004b808
mov r15d, dword [rbp + 0xf0]
inc r15d
mov rcx, r14
call fcn.1800e2d24
lea ecx, [r15 + 1]
mov eax, 2
mul rcx
cmovo rax, r13
mov rcx, rax
call fcn.1800e33e8
mov dword [rbp + 0x190], esi
mov rdi, qword [rbp - 0x78]
xor esi, esi
jmp 0x18004b750
xor r8d, r8d
mov eax, dword [rbp + 0xf0]
test dil, dil
je 0x18004bf03
cmp eax, r15d
mov rdi, qword [rbp - 0x78]
mov esi, 0
ja 0x18004b753
mov word [r14 + rax*2], si
mov qword [rbp + 0x1c8], rsi
mov qword [rbp + 0x1d0], rsi
mov qword [rbp + 0x1c8], rsi
mov qword [rbp + 0x1d0], 7
mov word [rbp + 0x1b8], si
mov r8, r13
nop dword [rax + rax]
inc r8
cmp word [r14 + r8*2], si
jne 0x18004b860
mov rdx, r14
lea rcx, [rbp + 0x1b8]
call fcn.18000c0b0
nop
cmp qword [rbp + 0x1c8], 0
je 0x18004beee
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x1f0], rsi
mov qword [rbp + 0x1e8], rsi
mov qword [rbp + 0x1f0], 7
mov word [rbp + 0x1d8], si
mov qword [rbp + 0x1a8], rsi
mov qword [rbp + 0x1b0], rsi
mov qword [rbp + 0x1a8], rsi
mov qword [rbp + 0x1b0], 7
mov word [rbp + 0x198], si
mov edx, 0x3d
xor r8d, r8d
lea rcx, [rbp + 0x1b8]
call fcn.18001bf30
mov rsi, rax
cmp rax, 0xffffffffffffffff
je 0x18004ba07
xor r13d, r13d
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], r13w
mov r8, rax
cmp qword [rbp + 0x1c8], rax
cmovb r8, qword [rbp + 0x1c8]
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 8
cmovae rdx, qword [rbp + 0x1b8]
lea rcx, [rbp + 0x38]
call fcn.18000c0b0
mov edi, dword [rsp + 0x50]
or edi, 0x10
mov dword [rsp + 0x50], edi
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x1d8]
call fcn.18000bc30
and edi, 0xffffffef
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x38]
call fcn.18000c040
inc rsi
cmp rsi, qword [rbp + 0x1c8]
jae 0x18004ba0e
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], 7
mov word [rbp + 0x58], r13w
mov rax, qword [rbp + 0x1c8]
cmp rax, rsi
jb 0x18004c06c
sub rax, rsi
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rax, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 8
cmovae rax, qword [rbp + 0x1b8]
lea rdx, [rax + rsi*2]
lea rcx, [rbp + 0x58]
call fcn.18000c0b0
or edi, 0x20
mov dword [rsp + 0x50], edi
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x1b8]
call fcn.18000bc30
and edi, 0xffffffdf
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x58]
call fcn.18000c040
jmp 0x18004ba0e
mov edi, dword [rsp + 0x50]
xor r13d, r13d
mov edx, 0x3b
xor r8d, r8d
lea rcx, [rbp + 0x1b8]
call fcn.18001bf30
mov r8, rax
cmp rax, 0xffffffffffffffff
je 0x18004baa8
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], 7
mov word [rbp + 0x78], r13w
cmp qword [rbp + 0x1c8], rax
cmovb r8, qword [rbp + 0x1c8]
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 8
cmovae rdx, qword [rbp + 0x1b8]
lea rcx, [rbp + 0x78]
call fcn.18000c0b0
or edi, 0x40
mov dword [rsp + 0x50], edi
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x198]
call fcn.18000bc30
and edi, 0xffffffbf
mov dword [rsp + 0x50], edi
lea rcx, [rbp + 0x78]
call fcn.18000c040
jmp 0x18004bad2
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 8
cmovae rdx, qword [rbp + 0x1b8]
mov r8, qword [rbp + 0x1c8]
lea rcx, [rbp + 0x198]
call fcn.18000c0b0
mov rax, qword [rbp + 0x1e8]
mov rsi, rax
cmp rax, 1
jb 0x18004bb7d
mov rdi, r13
test rax, rax
je 0x18004bb7d
cmp rax, rdi
jbe 0x18004c072
lea rax, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 8
cmovae rax, qword [rbp + 0x1d8]
movzx edx, word [rax + rdi*2]
lea rcx, str.__r_t_n
call fcn.1801018a0
test rax, rax
je 0x18004bb38
inc rdi
cmp rdi, rsi
jae 0x18004bb38
mov rax, qword [rbp + 0x1e8]
jmp 0x18004baf2
test rdi, rdi
je 0x18004bb7d
mov r8, qword [rbp + 0x1e8]
cmp r8, rdi
cmovb rdi, r8
lea rcx, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 8
cmovae rcx, qword [rbp + 0x1d8]
sub r8, rdi
mov qword [rbp + 0x1e8], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdi*2]
call fcn.180101f90
lea rdx, str.__r_t_n
lea rcx, [rbp + 0x1d8]
call fcn.180094560
mov rax, qword [rbp + 0x1a8]
mov rsi, rax
cmp rax, 1
jb 0x18004bc3b
mov rdi, r13
test rax, rax
je 0x18004bc3b
cmp rax, rdi
jbe 0x18004c078
lea rax, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 8
cmovae rax, qword [rbp + 0x198]
movzx edx, word [rax + rdi*2]
lea rcx, str.__r_t_n
call fcn.1801018a0
test rax, rax
je 0x18004bbf6
inc rdi
cmp rdi, rsi
jae 0x18004bbf6
mov rax, qword [rbp + 0x1a8]
jmp 0x18004bbb0
test rdi, rdi
je 0x18004bc3b
mov r8, qword [rbp + 0x1a8]
cmp r8, rdi
cmovb rdi, r8
lea rcx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 8
cmovae rcx, qword [rbp + 0x198]
sub r8, rdi
mov qword [rbp + 0x1a8], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdi*2]
call fcn.180101f90
lea rdx, str.__r_t_n
lea rcx, [rbp + 0x198]
call fcn.180094560
cmp qword [rbp + 0x1e8], 0
je 0x18004becb
cmp qword [rbp + 0x1a8], 0
je 0x18004becb
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], r13
mov qword [rbp + 0x268], r13
mov qword [rbp + 0x270], 7
mov word [rbp + 0x258], r13w
mov r8d, 0x14
lea rdx, str.http:__www.2345.com_
lea rcx, [rbp + 0x258]
call fcn.18000c0b0
nop
lea rdx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 8
cmovae rdx, qword [rbp + 0x198]
mov r8, qword [rbp + 0x1a8]
lea rcx, [rbp + 0x258]
call fcn.18000c370
xor edx, edx
lea r8d, [rdx + 0x64]
lea rcx, [rbp + 0x104]
call fcn.1801023f0
mov dword [rbp + 0x100], 0x68
mov esi, dword [rbp + 0x268]
add esi, 0x20
mov edi, esi
mov eax, 2
mul rdi
mov r13, 0xffffffffffffffff
cmovo rax, r13
mov rcx, rax
call fcn.1800e33e8
mov qword [rbp + 0x158], rax
lea r8, [rsi + rsi]
xor edx, edx
mov rcx, rax
call fcn.1801023f0
lea eax, [rsi - 1]
mov dword [rbp + 0x160], eax
mov qword [rbp + 0x30], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rbx], eax
lea rdi, [rbp + 0x258]
cmp qword [rbp + 0x270], 8
cmovae rdi, qword [rbp + 0x258]
call fcn.180055f90
mov rcx, rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x20], rax
mov r8d, dword [rbp + 0x268]
mov rdx, rdi
call fcn.180056280
nop
xor esi, esi
mov edx, esi
mov rcx, qword [rbp + 0x30]
xchg dword [rcx], edx
test eax, eax
je 0x18004be4f
mov qword [rbp + 0x228], rsi
mov qword [rbp + 0x230], rsi
mov qword [rbp + 0x228], rsi
mov qword [rbp + 0x230], 7
mov word [rbp + 0x218], si
mov rdx, qword [rbp + 0x158]
mov r8, r13
inc r8
cmp word [rdx + r8*2], si
jne 0x18004bdc0
lea rcx, [rbp + 0x218]
call fcn.18000c0b0
nop
cmp qword [rbp + 0x228], 0
je 0x18004be43
lea r8, [rbp + 0x218]
cmp qword [rbp + 0x230], 8
cmovae r8, qword [rbp + 0x218]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x218]
call fcn.18003cc20
movups xmm2, xmmword [rbp + 0x198]
movups xmm3, xmmword [rbp + 0x1a8]
movups xmm0, xmmword [rbp + 0x218]
movups xmmword [rbp + 0x198], xmm0
movups xmm1, xmmword [rbp + 0x228]
movups xmmword [rbp + 0x1a8], xmm1
movups xmmword [rbp + 0x218], xmm2
movups xmmword [rbp + 0x228], xmm3
lea rcx, [rbp + 0x218]
call fcn.18000c040
mov rcx, qword [rbp + 0x158]
call fcn.1800e2d24
lea rcx, [rbp + 0x1d8]
call fcn.180003ee0
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.18000bd20
nop
lea rcx, [rbp + 0x198]
call fcn.180003ee0
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.18000bd20
nop
lea rdx, [rbp + 0xb0]
mov rcx, r12
call fcn.180046630
nop
lea rcx, [rbp + 0xd0]
call fcn.18000c040
nop
lea rcx, [rbp + 0xb0]
call fcn.18000c040
nop
lea rcx, [rbp + 0x258]
call fcn.18000c040
jmp 0x18004bed4
mov r13, 0xffffffffffffffff
xor esi, esi
lea rcx, [rbp + 0x198]
call fcn.18000c040
nop
lea rcx, [rbp + 0x1d8]
call fcn.18000c040
nop
lea rcx, [rbp + 0x1b8]
call fcn.18000c040
mov rdi, qword [rbp - 0x78]
jmp 0x18004b753
mov word [r14], r8w
mov rcx, r14
call fcn.1800e2d24
nop
lea rcx, [rbp + 0x170]
call fcn.18000c040
nop
lea rcx, [rsp + 0x60]
call fcn.18001a950
nop
lea rcx, [rsp + 0x58]
call fcn.18001a950
mov al, 1
jmp 0x18004c00c
mov ecx, esi
mov rax, qword [rbp - 0x70]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x18004bfdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bfd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c042
jmp 0x18004bfd7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x30], eax
mov ecx, esi
mov rax, qword [rbp - 0x70]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x188]
cmp rdx, 8
jb 0x18004bfdc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18004bfd7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18004c036
call fcn.1800e2d24
mov qword [rbp + 0x180], rsi
mov qword [rbp + 0x188], 7
mov word [rbp + 0x170], si
lea rcx, [rsp + 0x60]
call fcn.18001a950
nop
lea rcx, [rsp + 0x58]
call fcn.18001a950
xor al, al
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.1800e2d00
mov rbx, qword [rsp + 0x5e8]
add rsp, 0x590
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180107ee8
nop
call fcn.180107ee8
int3
call fcn.180107ee8
nop
call fcn.180107ee8
nop
call fcn.180107ee8
nop
call fcn.180107ee8
nop
call fcn.180107ee8
nop
call fcn.180107ee8
nop
call fcn.1800e2e34
nop
call fcn.1800125c0
nop
call fcn.1800125c0
int3
call fcn.1800125c0
int3