Function at 0x18002fe80
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
mov qword [rbp + 0x88], 0xfffffffffffffffe
mov qword [rsp + 0x648], rbx
mov rax, qword [0x18020d140]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
mov dword [rbp - 0x70], r9d
mov qword [rbp + 0x70], r8
mov r14, rdx
mov rdi, rcx
mov qword [rbp - 0x48], rcx
mov r15d, dword [rbp + 0x550]
mov r12, qword [rbp + 0x558]
mov qword [rbp - 0x38], r12
mov r13, qword [rbp + 0x568]
mov qword [rbp + 0x68], r13
mov rax, qword [rbp + 0x570]
mov qword [rbp - 0x40], rax
xor eax, eax
mov dword [rsp + 0x50], eax
mov dword [rcx + 0x30], eax
mov qword [rbp + 0x180], rax
lea rbx, [rcx + 0x38]
mov qword [rbp + 0x180], rbx
test rbx, rbx
je 0x18002ff28
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002ff28
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov rsi, qword [rdi + 8]
test rsi, rsi
jne 0x18002ff56
test rbx, rbx
je 0x18003197d
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002ff48
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov qword [rbp + 0x180], rax
jmp 0x18003197d
test rbx, rbx
je 0x18002ff72
mov rcx, qword [rbx]
test rcx, rcx
je 0x18002ff69
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
mov qword [rbp + 0x180], rax
add rdi, 0x40
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x58], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rdi], eax
call fcn.180062b80
mov rcx, rax
mov dword [rsp + 0x38], r15d
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
mov r9, r14
lea r8, str.POST
mov rdx, rsi
call fcn.180062d00
mov rsi, rax
mov qword [rbp - 0x80], rax
mov edx, r15d
mov rcx, qword [rbp + 0x58]
xchg dword [rcx], edx
test rax, rax
jne 0x18002fff1
mov rax, qword [rbp + 0x180]
test rax, rax
je 0x18003197d
mov rcx, qword [rax]
test rcx, rcx
je 0x18002ffe5
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x180], r15
jmp 0x18003197d
cmp byte [rbp + 0x560], 0
je 0x180030021
mov dword [rbp + 0x258], 1
call fcn.180062b80
mov rcx, rax
lea r9, [rbp + 0x258]
mov r8d, 0x41
mov rdx, rsi
call fcn.180063280
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x188], rbx
test rbx, rbx
je 0x180030043
mov rcx, qword [rbx]
test rcx, rcx
je 0x180030043
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
mov rax, qword [rbp - 0x48]
mov qword [rax + 0x10], rsi
test rbx, rbx
je 0x180030065
mov rcx, qword [rbx]
test rcx, rcx
je 0x18003005e
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x178], r15
mov qword [rbp + 0x170], r15
mov qword [rbp + 0x178], 7
mov word [rbp + 0x160], r15w
mov r8d, 0x3e
lea rdx, str.Content_Type:_application_x_www_form_urlencoded__charsetUTF_8
lea rcx, [rbp + 0x160]
call fcn.180005390
nop
mov r14, qword [rbp - 0x40]
mov rax, qword [r14 + 8]
cmp qword [r14], rax
je 0x1800303ee
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rbp + 0x178]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18003010d
lea rsi, [rcx + 2]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, 4
lea rdx, [0x1801b7bc8]
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x18003012e
mov qword [rsp + 0x20], 2
lea r9, [0x1801b7bc8]
mov edx, 2
lea rcx, [rbp + 0x160]
call fcn.180008fd0
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rbp + 0x178]
mov rax, rdx
sub rax, rcx
cmp rax, 8
jb 0x180030183
lea rsi, [rcx + 8]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, InitCommonControls
lea rdx, str.Cookie:
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x1800301a4
mov qword [rsp + 0x20], 8
lea r9, str.Cookie:
mov edx, 8
lea rcx, [rbp + 0x160]
call fcn.180008fd0
mov rcx, qword [r14]
mov rax, qword [r14 + 8]
sub rax, rcx
sar rax, 6
test rax, rax
je 0x1800303ee
mov r12, r15
mov r13, r15
mov rdi, r14
nop dword [rax]
nop dword [rax + rax]
lea r9, [rcx + r12]
lea r14, [r9 + 0x20]
mov rdx, qword [r9 + 0x10]
test rdx, rdx
je 0x1800303c4
lea r15, [r14 + 0x10]
cmp qword [r15], 0
je 0x1800303c1
cmp qword [r9 + 0x18], 8
jb 0x1800301fd
mov r9, qword [r9]
mov rcx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x178]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18003024c
lea rsi, [rdx + rcx]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp r8, 8
cmovae rbx, qword [rbp + 0x160]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r9
call fcn.18014ba10
xor eax, eax
mov word [rbx + rsi*2], ax
jmp 0x18003025d
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x160]
call fcn.180008fd0
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rbp + 0x178]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1800302b3
lea rsi, [rcx + 1]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, 2
lea rdx, [0x1801b231c]
call fcn.18014ba10
xor eax, eax
mov word [rbx + rsi*2], ax
jmp 0x1800302d4
mov qword [rsp + 0x20], 1
lea r9, [0x1801b231c]
mov edx, 1
lea rcx, [rbp + 0x160]
call fcn.180008fd0
cmp qword [r14 + 0x18], 8
jb 0x1800302de
mov r14, qword [r14]
mov rdx, qword [r15]
mov rcx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x178]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x180030332
lea rsi, [rdx + rcx]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp r8, 8
cmovae rbx, qword [rbp + 0x160]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r14
call fcn.18014ba10
xor r15d, r15d
mov word [rbx + rsi*2], r15w
jmp 0x180030349
mov qword [rsp + 0x20], rdx
mov r9, r14
lea rcx, [rbp + 0x160]
call fcn.180008fd0
xor r15d, r15d
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rbp + 0x178]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x18003039e
lea rsi, [rcx + 1]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, 2
lea rdx, [0x1801b7cb8]
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x1800303c4
mov qword [rsp + 0x20], 1
lea r9, [0x1801b7cb8]
mov edx, 1
lea rcx, [rbp + 0x160]
call fcn.180008fd0
jmp 0x1800303c4
xor r15d, r15d
inc r13
add r12, 0x40
mov rcx, qword [rdi]
mov rax, qword [rdi + 8]
sub rax, rcx
sar rax, 6
cmp r13, rax
jb 0x1800301d0
mov rdi, qword [rbp + 0x60]
mov r13, qword [rbp + 0x68]
mov r12, qword [rbp - 0x38]
mov rcx, qword [rbp + 0x170]
mov rdx, qword [rbp + 0x178]
mov rax, rdx
sub rax, rcx
cmp byte [rbp + 0x560], 0
je 0x180030463
cmp rax, 0x19
jb 0x18003044c
lea rsi, [rcx + 0x19]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, gethostbyname
lea rdx, str._r_nAccept_Encoding:_gzip_r_n
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x1800304c5
mov qword [rsp + 0x20], 0x19
lea r9, str._r_nAccept_Encoding:_gzip_r_n
mov edx, 0x19
jmp 0x1800304b9
cmp rax, 4
jb 0x1800304a4
lea rsi, [rcx + 4]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp rdx, 8
cmovae rbx, qword [rbp + 0x160]
lea rcx, [rbx + rcx*2]
mov r8d, 8
lea rdx, str._r_n_r_n
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x1800304c5
mov qword [rsp + 0x20], 4
lea r9, str._r_n_r_n
mov edx, 4
lea rcx, [rbp + 0x160]
call fcn.180008fd0
lea rbx, [r12 + 0x10]
cmp qword [rbx], 0
je 0x180030668
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1e8], xmm0
movdqa xmm1, xmmword [0x1801bc8a0]
movdqu xmmword [rbp + 0x1e8], xmm1
mov word [rbp + 0x1d8], r15w
mov r8d, 0x12
lea rdx, [0x1801b7c90]
lea rcx, [rbp + 0x1d8]
call fcn.180005390
nop
cmp qword [r12 + 0x18], 8
jb 0x18003051d
mov r12, qword [r12]
mov rdx, qword [rbx]
mov rcx, qword [rbp + 0x1e8]
mov r8, qword [rbp + 0x1f0]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18003056e
lea rsi, [rdx + rcx]
mov qword [rbp + 0x1e8], rsi
lea rbx, [rbp + 0x1d8]
cmp r8, 8
cmovae rbx, qword [rbp + 0x1d8]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r12
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
jmp 0x180030582
mov qword [rsp + 0x20], rdx
mov r9, r12
lea rcx, [rbp + 0x1d8]
call fcn.180008fd0
lea r9, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 8
cmovae r9, qword [rbp + 0x1d8]
mov rsi, qword [rbp + 0x1e8]
mov r14, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x178]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1800305f3
lea rax, [r14 + rsi]
mov qword [rbp + 0x170], rax
lea rbx, [rbp + 0x160]
cmp rcx, 8
cmovae rbx, qword [rbp + 0x160]
lea r8, [rsi + rsi]
lea rcx, [rbx + r14*2]
mov rdx, r9
call fcn.18014ba10
lea rax, [r14 + rsi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x180030609
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp + 0x160]
call fcn.180008fd0
xor esi, esi
mov rdx, qword [rbp + 0x1f0]
cmp rdx, 8
jb 0x18003064f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003064a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319c1
call fcn.180148104
movdqa xmm0, xmmword [0x1801bc8a0]
movdqu xmmword [rbp + 0x1e8], xmm0
mov word [rbp + 0x1d8], si
jmp 0x18003066a
xor esi, esi
mov r12, qword [rbp - 0x48]
mov r15, qword [r12 + 0x18]
mov qword [rsp + 0x58], r15
mov rax, qword [r12 + 0x20]
mov qword [rbp - 0x38], rax
cmp r15, rax
je 0x180030b60
lea r12, [r15 + 0x30]
mov r14d, dword [rsp + 0x50]
nop dword [rax]
nop word [rax + rax]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
or r14d, 1
mov dword [rsp + 0x50], r14d
mov rdx, qword [r12 - 0x20]
add rdx, 2
lea rcx, [rsp + 0x60]
call fcn.180011560
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180030725
lea rsi, [rcx + 2]
mov qword [rsp + 0x70], rsi
lea rbx, [rsp + 0x60]
cmp rdx, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rcx*2]
mov r8d, 4
lea rdx, [0x1801b7bc8]
call fcn.18014ba10
xor eax, eax
mov word [rbx + rsi*2], ax
jmp 0x180030744
mov qword [rsp + 0x20], 2
lea r9, [0x1801b7bc8]
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.180008fd0
mov r9, r15
cmp qword [r12 - 0x18], 8
jb 0x180030752
mov r9, qword [r15]
mov rdx, qword [r12 - 0x20]
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x18003079e
lea rsi, [rdx + rcx]
mov qword [rsp + 0x70], rsi
lea rbx, [rsp + 0x60]
cmp r8, 8
cmovae rbx, qword [rsp + 0x60]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r9
call fcn.18014ba10
xor r15d, r15d
mov word [rbx + rsi*2], r15w
jmp 0x1800307b0
mov qword [rsp + 0x20], rdx
lea rcx, [rsp + 0x60]
call fcn.180008fd0
xor r15d, r15d
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180030800
lea rsi, [rcx + 2]
mov qword [rsp + 0x70], rsi
lea rbx, [rsp + 0x60]
cmp rdx, 8
cmovae rbx, qword [rsp + 0x60]
lea rcx, [rbx + rcx*2]
mov r8d, 4
lea rdx, [0x1801b7d24]
call fcn.18014ba10
mov word [rbx + rsi*2], r15w
lea rax, [rsp + 0x60]
jmp 0x18003081f
mov qword [rsp + 0x20], 2
lea r9, [0x1801b7d24]
mov edx, 2
lea rcx, [rsp + 0x60]
call fcn.180008fd0
xor esi, esi
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 2
mov dword [rsp + 0x50], r14d
lea rdx, [r12 - 0x10]
cmp qword [r12 + 8], 8
jb 0x180030860
mov rdx, qword [rdx]
mov r8, qword [r12]
lea rcx, [rbp - 0x28]
call fcn.180008b60
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 4
mov dword [rsp + 0x50], r14d
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x1800308e9
lea rsi, [rcx + 2]
mov qword [rbp - 0x58], rsi
lea rbx, [rbp - 0x68]
cmp rdx, 8
cmovae rbx, qword [rbp - 0x68]
lea rcx, [rbx + rcx*2]
mov r8d, 4
lea rdx, [0x1801b7bc8]
call fcn.18014ba10
xor eax, eax
mov word [rbx + rsi*2], ax
lea rax, [rbp - 0x68]
xor esi, esi
jmp 0x180030907
mov qword [rsp + 0x20], 2
lea r9, [0x1801b7bc8]
mov edx, 2
lea rcx, [rbp - 0x68]
call fcn.180008fd0
mov qword [rbp + 0x290], rsi
mov qword [rbp + 0x298], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x280], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x290], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
or r14d, 8
mov dword [rsp + 0x50], r14d
and r14d, 0xfffffffb
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x18003098b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180030986
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319c7
call fcn.180148104
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], si
and r14d, 0xfffffffd
mov dword [rsp + 0x50], r14d
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1800309e4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800309df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319cd
call fcn.180148104
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], si
and r14d, 0xfffffffe
mov dword [rsp + 0x50], r14d
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x180030a3f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180030a3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319d3
call fcn.180148104
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], si
lea r9, [rbp + 0x280]
mov r15, qword [rbp + 0x280]
cmp qword [rbp + 0x298], 8
cmovae r9, r15
mov rcx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x178]
mov rax, r8
sub rax, rcx
mov rdx, qword [rbp + 0x290]
cmp rdx, rax
ja 0x180030ac4
lea rsi, [rdx + rcx]
mov qword [rbp + 0x170], rsi
lea rbx, [rbp + 0x160]
cmp r8, 8
cmovae rbx, qword [rbp + 0x160]
lea r8, [rdx + rdx]
lea rcx, [rbx + rcx*2]
mov rdx, r9
call fcn.18014ba10
xor eax, eax
mov word [rbx + rsi*2], ax
xor esi, esi
jmp 0x180030adc
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0x160]
call fcn.180008fd0
mov r15, qword [rbp + 0x280]
and r14d, 0xfffffff7
mov dword [rsp + 0x50], r14d
mov rax, qword [rbp + 0x298]
cmp rax, 8
jb 0x180030b27
lea rdx, [rax*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x180030b1f
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319d9
mov rcx, r15
call fcn.180148104
mov qword [rbp + 0x290], rsi
mov qword [rbp + 0x298], 7
mov word [rbp + 0x280], si
mov r15, qword [rsp + 0x58]
add r15, 0x40
mov qword [rsp + 0x58], r15
add r12, 0x40
cmp r15, qword [rbp - 0x38]
jne 0x1800306a0
mov r12, qword [rbp - 0x48]
mov qword [rbp - 0x30], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rdi], eax
lea rbx, [rbp + 0x160]
cmp qword [rbp + 0x178], 8
cmovae rbx, qword [rbp + 0x160]
call fcn.180062b80
mov rcx, rax
mov eax, dword [rbp - 0x70]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp + 0x170]
mov r8, rbx
mov rbx, qword [rbp - 0x80]
mov rdx, rbx
call fcn.180062ec0
test eax, eax
jne 0x180030c16
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12 + 0x30], eax
mov ecx, esi
mov rax, qword [rbp - 0x30]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x180031922
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003191d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319af
jmp 0x18003191d
mov ecx, esi
mov rax, qword [rbp - 0x30]
xchg dword [rax], ecx
xor r14b, r14b
cmp byte [rbp + 0x560], r14b
je 0x180030d33
mov rdx, rbx
lea rcx, [rbp + 0x2c0]
call fcn.18002f380
nop
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x2a0]
call fcn.1800650d0
nop
lea rcx, [rbp + 0x2a0]
cmp qword [rbp + 0x2b8], 8
cmovae rcx, qword [rbp + 0x2a0]
lea rdx, str.gzip
call fcn.18000dff0
movzx r14d, al
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 8
jb 0x180030cbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180030cba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319df
call fcn.180148104
movdqa xmm0, xmmword [0x1801bc8a0]
movdqu xmmword [rbp + 0x2b0], xmm0
mov word [rbp + 0x2a0], si
mov rdx, qword [rbp + 0x2d8]
cmp rdx, 8
jb 0x180030d1c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180030d17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319e5
call fcn.180148104
movdqa xmm0, xmmword [0x1801bc8a0]
movdqu xmmword [rbp + 0x2d0], xmm0
mov word [rbp + 0x2c0], si
mov qword [r13 + 0x10], rsi
mov rax, r13
cmp qword [r13 + 0x18], 0x10
jb 0x180030d45
mov rax, qword [r13]
mov byte [rax], 0
mov r15d, 0x200
mov qword [rsp + 0x58], r15
nop dword [rax]
nop word [rax + rax]
mov dword [rbp + 0x1b4], esi
mov qword [rbp - 0x78], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rdi], eax
call fcn.180062b80
mov rcx, rax
lea rax, [rbp + 0x1b4]
mov qword [rsp + 0x20], rax
mov r9d, 0x1ff
lea r8, [rbp + 0x2e0]
mov rdx, rbx
call fcn.180063210
test eax, eax
je 0x1800318c9
mov ecx, esi
mov rax, qword [rbp - 0x78]
xchg dword [rax], ecx
mov eax, dword [rbp + 0x1b4]
cmp eax, r15d
jae 0x18003187a
test eax, eax
je 0x180030e35
mov esi, eax
cmp rax, r15
jae 0x1800319f1
mov byte [rbp + rax + 0x2e0], 0
mov rcx, qword [r13 + 0x10]
mov rdx, qword [r13 + 0x18]
mov rax, rdx
sub rax, rcx
cmp rsi, rax
ja 0x180030e19
lea rax, [rcx + rsi]
mov qword [r13 + 0x10], rax
mov rax, r13
cmp rdx, 0x10
jb 0x180030df9
mov rax, qword [r13]
lea rbx, [rax + rcx]
mov r8, rsi
lea rdx, [rbp + 0x2e0]
mov rcx, rbx
call fcn.18014ba10
mov byte [rsi + rbx], 0
mov rbx, qword [rbp - 0x80]
jmp 0x180030e33
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x2e0]
xor r8d, r8d
mov rdx, rsi
mov rcx, r13
call fcn.1800280e0
xor esi, esi
mov ecx, esi
mov rax, qword [rbp - 0x78]
xchg dword [rax], ecx
cmp dword [rbp + 0x1b4], 0
ja 0x180030d60
test r14b, r14b
je 0x180030f17
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x228], xmm0
movdqa xmm1, xmmword [0x1801bc8b0]
movdqu xmmword [rbp + 0x228], xmm1
mov byte [rbp + 0x218], 0
lea rdx, [rbp + 0x218]
mov rcx, r13
call fcn.18002f5c0
test al, al
je 0x18003100d
lea rax, [rbp + 0x218]
cmp r13, rax
je 0x180030ebf
lea rdx, [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rdx, qword [rbp + 0x218]
mov r8, qword [rbp + 0x228]
mov rcx, r13
call fcn.180008980
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x180030f00
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180030efb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319eb
call fcn.180148104
movdqa xmm0, xmmword [0x1801bc8b0]
movdqu xmmword [rbp + 0x228], xmm0
mov byte [rbp + 0x218], 0
mov r13, qword [rbp - 0x40]
mov rcx, r13
call fcn.180031a10
mov ecx, 0x402
call fcn.18014874c
mov dword [rbp + 0x1b0], esi
mov r12, rax
nop word [rax + rax]
mov word [r12], si
mov dword [rbp + 0xe0], r15d
mov esi, dword [rbp + 0x1b0]
mov qword [rbp + 0x78], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rdi], eax
call fcn.180062b80
mov rcx, rax
lea rax, [rbp + 0x1b0]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9, r12
mov r8d, 0x2b
mov rdx, rbx
call fcn.180062df0
test eax, eax
setne bl
xor r14d, r14d
mov edx, r14d
mov rcx, qword [rbp + 0x78]
xchg dword [rcx], edx
test eax, eax
jne 0x1800310d0
mov eax, dword [rbp + 0xe0]
cmp eax, r15d
jbe 0x1800310d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1800310d0
mov r15d, dword [rbp + 0xe0]
inc r15d
mov qword [rsp + 0x58], r15
mov rcx, r12
call fcn.180148104
lea ecx, [r15 + 1]
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.18014874c
mov dword [rbp + 0x1b0], esi
mov rbx, qword [rbp - 0x80]
xor esi, esi
jmp 0x180030f33
mov dword [r12 + 0x30], 0x2f8f
mov qword [r13 + 0x10], rsi
cmp qword [r13 + 0x18], 0x10
jb 0x180031025
mov r13, qword [r13]
mov byte [r13], 0
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x18003106b
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180031066
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319f7
call fcn.180148104
movdqa xmm0, xmmword [0x1801bc8b0]
movdqu xmmword [rbp + 0x228], xmm0
mov byte [rbp + 0x218], 0
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x180031922
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003191d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319b5
jmp 0x18003191d
mov eax, dword [rbp + 0xe0]
test bl, bl
je 0x180031816
cmp eax, r15d
mov rbx, qword [rbp - 0x80]
mov rsi, r14
ja 0x180030f40
mov word [r12 + rax*2], si
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], r14
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1a8], 7
mov word [rbp + 0x190], si
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp word [r12 + r8*2], si
jne 0x180031124
mov rdx, r12
lea rcx, [rbp + 0x190]
call fcn.180005390
nop
cmp qword [rbp + 0x1a0], 0
je 0x180031801
mov qword [rbp + 0x208], rsi
mov qword [rbp + 0x210], rsi
mov qword [rbp + 0x208], rsi
mov r15d, 7
mov qword [rbp + 0x210], r15
xor r11d, r11d
mov word [rbp + 0x1f8], r11w
mov qword [rbp + 0x1c8], r11
mov qword [rbp + 0x1d0], r11
mov qword [rbp + 0x1c8], r11
mov qword [rbp + 0x1d0], r15
mov word [rbp + 0x1b8], r11w
lea rdx, [rbp + 0x190]
mov r9, qword [rbp + 0x190]
mov r10, qword [rbp + 0x1a8]
cmp r10, 8
cmovae rdx, r9
mov rcx, qword [rbp + 0x1a0]
test rcx, rcx
je 0x1800311e4
mov rax, rcx
mov rbx, rdx
nop dword [rax]
cmp word [rbx], 0x3d
je 0x180031331
add rbx, 2
sub rax, 1
jne 0x1800311d0
mov rbx, r14
cmp rbx, 0xffffffffffffffff
je 0x180031345
mov qword [rbp + 0x28], r11
mov qword [rbp + 0x30], r11
mov qword [rbp + 0x28], r11
mov qword [rbp + 0x30], 7
mov word [rbp + 0x18], r11w
mov r8, rbx
cmp qword [rbp + 0x1a0], rbx
cmovb r8, qword [rbp + 0x1a0]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
lea rcx, [rbp + 0x18]
call fcn.180005390
mov r14d, dword [rsp + 0x50]
or r14d, 0x10
mov dword [rsp + 0x50], r14d
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x1f8]
call fcn.180005120
and r14d, 0xffffffef
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x18]
call fcn.180005300
inc rbx
mov rcx, qword [rbp + 0x1a0]
cmp rbx, rcx
jae 0x180031310
xor eax, eax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x50], 7
mov word [rbp + 0x38], ax
mov rax, qword [rbp + 0x1a0]
cmp rax, rbx
jb 0x1800319fd
sub rax, rbx
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rax, qword [rbp + 0x190]
lea rdx, [rax + rbx*2]
lea rcx, [rbp + 0x38]
call fcn.180005390
or r14d, 0x20
mov dword [rsp + 0x50], r14d
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x190]
call fcn.180005120
and r14d, 0xffffffdf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp + 0x38]
call fcn.180005300
mov rcx, qword [rbp + 0x1a0]
mov r10, qword [rbp + 0x1a8]
mov r9, qword [rbp + 0x190]
mov r15, qword [rbp + 0x210]
mov rsi, qword [rbp + 0x208]
xor r11d, r11d
jmp 0x18003134a
test rbx, rbx
je 0x1800311e4
sub rbx, rdx
sar rbx, 1
jmp 0x1800311e7
mov r14d, dword [rsp + 0x50]
lea rdx, [rbp + 0x190]
cmp r10, 8
cmovae rdx, r9
test rcx, rcx
je 0x180031379
mov rax, rcx
mov r8, rdx
cmp word [r8], 0x3b
je 0x1800313ff
add r8, 2
sub rax, 1
jne 0x180031364
mov r8, 0xffffffffffffffff
cmp r8, 0xffffffffffffffff
je 0x180031413
mov qword [rbp + 8], r11
mov qword [rbp + 0x10], r11
mov qword [rbp + 8], r11
mov qword [rbp + 0x10], 7
mov word [rbp - 8], r11w
cmp qword [rbp + 0x1a0], r8
cmovb r8, qword [rbp + 0x1a0]
lea rdx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 8
cmovae rdx, qword [rbp + 0x190]
lea rcx, [rbp - 8]
call fcn.180005390
or r14d, 0x40
mov dword [rsp + 0x50], r14d
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x1b8]
call fcn.180005120
and r14d, 0xffffffbf
mov dword [rsp + 0x50], r14d
lea rcx, [rbp - 8]
call fcn.180005300
jmp 0x180031431
test r8, r8
je 0x180031379
sub r8, rdx
sar r8, 1
jmp 0x180031380
lea rdx, [rbp + 0x190]
cmp r10, 8
cmovae rdx, r9
mov r8, rcx
lea rcx, [rbp + 0x1b8]
call fcn.180005390
cmp rsi, 1
jb 0x1800314b2
xor eax, eax
mov ebx, eax
test rsi, rsi
je 0x1800314b2
mov r14, qword [rbp + 0x1f8]
cmp rsi, rax
jbe 0x180031a03
lea rax, [rbp + 0x1f8]
cmp r15, 8
cmovae rax, r14
movzx edx, word [rax + rbx*2]
lea rcx, [0x1801b3248]
call fcn.18014b298
test rax, rax
je 0x18003147c
inc rbx
cmp rsi, rbx
ja 0x180031450
test rbx, rbx
je 0x1800314b2
cmp rsi, rbx
cmovb rbx, rsi
lea rcx, [rbp + 0x1f8]
cmp r15, 8
cmovae rcx, r14
sub rsi, rbx
mov qword [rbp + 0x208], rsi
lea r8, [rsi*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.18014ba10
lea rdx, [0x1801b3248]
lea rcx, [rbp + 0x1f8]
call fcn.18000e240
mov rsi, qword [rbp + 0x1c8]
xor r15d, r15d
cmp rsi, 1
jb 0x18003155d
mov ebx, r15d
test rsi, rsi
je 0x18003155d
mov r14, qword [rbp + 0x1d0]
mov r15, qword [rbp + 0x1b8]
cmp rsi, rbx
jbe 0x180031a09
lea rax, [rbp + 0x1b8]
cmp r14, 8
cmovae rax, r15
movzx edx, word [rax + rbx*2]
lea rcx, [0x1801b3248]
call fcn.18014b298
test rax, rax
je 0x180031524
inc rbx
cmp rsi, rbx
ja 0x1800314f8
test rbx, rbx
je 0x18003155a
cmp rsi, rbx
cmovb rbx, rsi
lea rcx, [rbp + 0x1b8]
cmp r14, 8
cmovae rcx, r15
sub rsi, rbx
mov qword [rbp + 0x1c8], rsi
lea r8, [rsi*2 + 2]
lea rdx, [rcx + rbx*2]
call fcn.18014ba10
xor r15d, r15d
lea rdx, [0x1801b3248]
lea rcx, [rbp + 0x1b8]
call fcn.18000e240
cmp qword [rbp + 0x208], 0
je 0x1800317e1
mov rbx, qword [rbp + 0x1c8]
test rbx, rbx
je 0x1800317e1
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], r15
mov qword [rbp + 0x270], r15
mov qword [rbp + 0x278], 7
mov word [rbp + 0x260], r15w
mov r8d, 0x14
lea rdx, str.http:__www.2345.com_
lea rcx, [rbp + 0x260]
call fcn.180005390
nop
lea rdx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 8
cmovae rdx, qword [rbp + 0x1b8]
mov r8, rbx
lea rcx, [rbp + 0x260]
call fcn.180008b60
xor edx, edx
lea r8d, [rdx + 0x64]
lea rcx, [rbp + 0xf4]
call fcn.18014be70
mov dword [rbp + 0xf0], 0x68
mov esi, dword [rbp + 0x270]
add esi, 0x20
mov ebx, esi
mov eax, 2
mul rbx
mov r14, 0xffffffffffffffff
cmovo rax, r14
mov rcx, rax
call fcn.18014874c
mov qword [rbp + 0x148], rax
lea r8, [rsi + rsi]
xor edx, edx
mov rcx, rax
call fcn.18014be70
lea eax, [rsi - 1]
mov dword [rbp + 0x150], eax
mov qword [rbp + 0x80], rdi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xchg dword [rdi], eax
lea rbx, [rbp + 0x260]
cmp qword [rbp + 0x278], 8
cmovae rbx, qword [rbp + 0x260]
call fcn.180062b80
mov rcx, rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x20], rax
mov r8d, dword [rbp + 0x270]
mov rdx, rbx
call fcn.180063010
nop
xor esi, esi
mov edx, esi
mov rcx, qword [rbp + 0x80]
xchg dword [rcx], edx
test eax, eax
je 0x180031775
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x248], rsi
mov qword [rbp + 0x250], 7
mov word [rbp + 0x238], si
mov rdx, qword [rbp + 0x148]
mov r8, r14
inc r8
cmp word [rdx + r8*2], si
jne 0x1800316e6
lea rcx, [rbp + 0x238]
call fcn.180005390
nop
cmp qword [rbp + 0x248], 0
je 0x180031769
lea r8, [rbp + 0x238]
cmp qword [rbp + 0x250], 8
cmovae r8, qword [rbp + 0x238]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x238]
call fcn.180031b40
movups xmm2, xmmword [rbp + 0x1b8]
movups xmm3, xmmword [rbp + 0x1c8]
movups xmm0, xmmword [rbp + 0x238]
movups xmmword [rbp + 0x1b8], xmm0
movups xmm1, xmmword [rbp + 0x248]
movups xmmword [rbp + 0x1c8], xmm1
movups xmmword [rbp + 0x238], xmm2
movups xmmword [rbp + 0x248], xmm3
lea rcx, [rbp + 0x238]
call fcn.180005300
mov rcx, qword [rbp + 0x148]
call fcn.180148104
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0xa0]
call fcn.1800051e0
nop
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0xc0]
call fcn.1800051e0
nop
lea rdx, [rbp + 0xa0]
mov rcx, r13
call fcn.180031a90
nop
lea rcx, [rbp + 0xc0]
call fcn.180005300
nop
lea rcx, [rbp + 0xa0]
call fcn.180005300
nop
lea rcx, [rbp + 0x260]
call fcn.180005300
jmp 0x1800317e3
xor esi, esi
lea rcx, [rbp + 0x1b8]
call fcn.180005300
nop
lea rcx, [rbp + 0x1f8]
call fcn.180005300
mov r15, qword [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.180005300
mov rbx, qword [rbp - 0x80]
jmp 0x180030f40
mov word [r12], r14w
mov rcx, r12
call fcn.180148104
nop
lea rcx, [rbp + 0x160]
call fcn.180005300
nop
mov rax, qword [rbp + 0x188]
test rax, rax
je 0x180031852
mov rcx, qword [rax]
test rcx, rcx
je 0x18003184b
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x188], r14
mov rax, qword [rbp + 0x180]
test rax, rax
je 0x180031873
mov rcx, qword [rax]
test rcx, rcx
je 0x18003186c
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x180], r14
mov al, 1
jmp 0x18003197f
mov ecx, esi
mov rax, qword [rbp - 0x78]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x180031922
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003191d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319bb
jmp 0x18003191d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r12 + 0x30], eax
mov ecx, esi
mov rax, qword [rbp - 0x78]
xchg dword [rax], ecx
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x180031922
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003191d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800319a9
call fcn.180148104
mov word [rbp + 0x160], si
mov qword [rbp + 0x178], 7
mov qword [rbp + 0x170], rsi
mov rax, qword [rbp + 0x188]
test rax, rax
je 0x18003195c
mov rcx, qword [rax]
test rcx, rcx
je 0x180031955
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x188], rsi
mov rax, qword [rbp + 0x180]
test rax, rax
je 0x18003197d
mov rcx, qword [rax]
test rcx, rcx
je 0x180031976
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [rbp + 0x180], rsi
xor al, al
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.180147bf0
mov rbx, qword [rsp + 0x648]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18014ebe4
nop
call fcn.18014ebe4
int3
call fcn.18014ebe4
int3
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
int3
call fcn.18014ebe4
nop
call fcn.1801485b8
nop
call fcn.18014ebe4
nop
call fcn.18000eca0
nop
call fcn.18000eca0
int3
call fcn.18000eca0
int3