Function at 0x18004b850
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x7a0
mov qword [rsp + 0x118], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x1801aef28]
xor rax, rsp
mov qword [rsp + 0x750], rax
mov dword [rsp + 0xb8], r9d
mov qword [rsp + 0xc8], r8
mov r14, rdx
mov qword [rsp + 0xb0], rcx
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0xc0], rax
cmp dword [r8], 2
jne 0x18004c494
mov rcx, rdx
call fcn.1800471d0
test eax, eax
je 0x18004c494
cmp dword [0x1801df0a0], 0
je 0x18004b910
mov rcx, r14
call fcn.1800471d0
mov dword [rsp + 0x20], eax
lea r9, str._DealWeChat___AnalyseData_1___size:__d_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
lea rcx, [rsp + 0xe8]
call fcn.1800471b0
nop
xor r13d, r13d
mov edi, r13d
mov dword [rsp + 0x90], r13d
xor ebp, ebp
mov qword [rsp + 0xa0], rbp
mov dword [rsp + 0x94], ebp
mov esi, ebp
mov dword [rsp + 0x98], ebp
mov ebx, ebp
mov dword [rsp + 0x9c], ebx
mov rcx, r14
call fcn.1800471d0
mov dword [rsp + 0xa8], eax
mov word [rsp + 0x120], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x122]
call fcn.1800a1250
xor edx, edx
mov r8d, 0x210
lea rcx, [rsp + 0x328]
call fcn.1800a1250
mov r11, qword [0x1801617a0]
mov qword [rsp + 0x78], r11
mov r12d, r13d
mov dword [rsp + 0x70], r13d
mov dword [rsp + 0x84], r13d
mov dword [rsp + 0x88], r13d
mov dword [rsp + 0x80], r13d
lea r15d, [r13 + 1]
cmp dword [rsp + 0xa8], r13d
jle 0x18004c25d
movsd xmm7, qword [0x18014e440]
movsd xmm8, qword [0x180152e48]
movsd xmm9, qword [0x180152e40]
jmp 0x18004b9f5
mov r12d, dword [rsp + 0x70]
cmp dword [0x1801df0a0], 0
je 0x18004baf5
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov r12, rax
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rbp, [rax + 4]
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov rsi, rax
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov rdi, rax
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov rbx, rax
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov ecx, dword [rsp + 0x9c]
mov dword [rsp + 0x68], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x60], ecx
mov ecx, dword [rsp + 0x98]
mov dword [rsp + 0x58], ecx
mov ecx, dword [rsp + 0x90]
mov dword [rsp + 0x50], ecx
mov qword [rsp + 0x48], rbp
mov ecx, dword [rsi + 0x218]
mov dword [rsp + 0x40], ecx
mov ecx, dword [rdi + 0x210]
mov dword [rsp + 0x38], ecx
mov ecx, dword [rbx + 0x214]
mov dword [rsp + 0x30], ecx
mov eax, dword [rax + 0x20c]
mov dword [rsp + 0x28], eax
mov eax, dword [r12]
mov dword [rsp + 0x20], eax
lea r9, str._DealWeChat___AnalyseData_2___FunType:__d___rect:__d__d__d__d___chat:__s___rect2:__d__d__d__d_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
mov ebx, dword [rsp + 0x9c]
mov edi, dword [rsp + 0x90]
mov esi, dword [rsp + 0x98]
mov rbp, qword [rsp + 0xa0]
mov r12d, dword [rsp + 0x70]
movsd xmm6, qword [0x1801ab170]
mulsd xmm6, xmm7
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm0, dword [rax + 0x20c]
cvtdq2pd xmm0, xmm0
comisd xmm6, xmm0
jbe 0x18004bf16
cmp dword [0x1801df0a0], 0
je 0x18004bb48
lea r9, str._DealWeChat___AnalyseData_3_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp edi, dword [rax + 0x20c]
jne 0x18004bc44
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp dword [rax + 0x214], esi
jl 0x18004bc44
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm1, dword [rax + 0x214]
cvtdq2pd xmm1, xmm1
movsd xmm0, qword [0x1801ab170]
mulsd xmm0, xmm7
comisd xmm0, xmm1
jbe 0x18004bc44
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp ebp, dword [rax + 0x210]
jne 0x18004bc44
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp ebx, dword [rax + 0x218]
jne 0x18004bc44
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rcx, [rax + 4]
call fcn.180047030
test eax, eax
jne 0x18004bbfe
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rdx, [rax + 4]
lea rcx, [rsp + 0x78]
call fcn.18007d580
mov dword [rsp + 0x84], r15d
cmp dword [0x1801df0a0], 0
je 0x18004bec0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_4___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
mov r12d, dword [rsp + 0x70]
jmp 0x18004becc
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp edi, dword [rax + 0x20c]
jne 0x18004bda4
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp dword [rax + 0x214], esi
jl 0x18004bda4
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm1, dword [rax + 0x214]
cvtdq2pd xmm1, xmm1
movsd xmm6, qword [0x1801ab170]
movapd xmm0, xmm6
mulsd xmm0, xmm7
comisd xmm0, xmm1
jbe 0x18004bda4
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp ebx, dword [rax + 0x210]
jg 0x18004bda4
mulsd xmm6, xmm8
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
addsd xmm6, xmm0
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm0, dword [rax + 0x210]
cvtdq2pd xmm0, xmm0
comisd xmm6, xmm0
jbe 0x18004bda4
cmp dword [rsp + 0x84], 0
jne 0x18004bd0e
mov rcx, qword [rsp + 0x78]
call fcn.180047030
test eax, eax
je 0x18004bd0e
lea rcx, [rsp + 0x78]
call fcn.180080e90
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.18007d610
mov rdx, rax
mov r8d, 0x103
lea rcx, [rsp + 0x32c]
call fcn.1800a11c4
or edx, 0xffffffff
lea rcx, [rsp + 0x78]
call fcn.18007d680
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rdx, [rax + 4]
lea rcx, [rsp + 0x78]
call fcn.18007d430
mov r12d, r15d
mov dword [rsp + 0x70], r15d
cmp dword [0x1801df0a0], 0
je 0x18004becc
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_5___chatname:__s___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
jmp 0x18004becc
test r12d, r12d
je 0x18004be70
mov r8d, 0x103
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x120]
call fcn.1800a11c4
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x534], eax
lea rdx, [rsp + 0x120]
mov rcx, qword [rsp + 0xb0]
call fcn.18004a940
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rdx, [rax + 4]
lea rcx, [rsp + 0x78]
call fcn.18007d430
xor eax, eax
mov dword [rsp + 0x84], eax
mov r12d, eax
mov dword [rsp + 0x70], eax
cmp dword [0x1801df0a0], eax
je 0x18004be59
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_6___chatname:__s___chat:__s___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
xor edx, edx
mov r8d, 0x418
lea rcx, [rsp + 0x120]
call fcn.1800a1250
jmp 0x18004becc
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rdx, [rax + 4]
lea rcx, [rsp + 0x78]
call fcn.18007d430
cmp dword [0x1801df0a0], 0
je 0x18004bec7
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_7___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
mov r12d, dword [rsp + 0x70]
jmp 0x18004becc
mov r12d, dword [rsp + 0x70]
jmp 0x18004becc
mov r12d, dword [rsp + 0x70]
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
lea rdx, [rsp + 0x90]
mov ecx, dword [rax + 0x20c]
mov dword [rdx], ecx
mov ecx, dword [rax + 0x210]
mov dword [rdx + 4], ecx
mov ecx, dword [rax + 0x214]
mov dword [rdx + 8], ecx
mov eax, dword [rax + 0x218]
mov dword [rdx + 0xc], eax
mov ebp, dword [rsp + 0x94]
mov qword [rsp + 0xa0], rbp
jmp 0x18004c168
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm0, dword [rax + 0x20c]
cvtdq2pd xmm0, xmm0
comisd xmm0, xmm6
jbe 0x18004c163
cmp dword [0x1801df0a0], 0
je 0x18004bf5d
lea r9, str._DealWeChat___AnalyseData_8_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
test r12d, r12d
je 0x18004c031
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.18007d610
mov rdx, rax
mov r8d, 0x103
lea rcx, [rsp + 0x120]
call fcn.1800a11c4
or edx, 0xffffffff
lea rcx, [rsp + 0x78]
call fcn.18007d680
lea rdx, [0x18013ce7c]
lea rcx, [rsp + 0x78]
call fcn.18007d430
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x534], eax
lea rdx, [rsp + 0x120]
mov rcx, qword [rsp + 0xb0]
call fcn.18004a940
xor r12d, r12d
mov dword [rsp + 0x70], r12d
cmp dword [0x1801df0a0], r12d
je 0x18004c01a
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_9___chatname:__s___chat:__s___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
xor edx, edx
mov r8d, 0x418
lea rcx, [rsp + 0x120]
call fcn.1800a1250
jmp 0x18004c036
mov r12d, dword [rsp + 0x70]
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
movd xmm1, dword [rax + 0x20c]
cvtdq2pd xmm1, xmm1
movsd xmm0, qword [0x1801ab170]
mulsd xmm0, xmm9
comisd xmm0, xmm1
jbe 0x18004c0d6
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp dword [rax], 2
jne 0x18004c0d6
mov ebx, dword [rsp + 0x88]
test ebx, ebx
je 0x18004c08e
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp ebx, dword [rax + 0x20c]
jle 0x18004c0a6
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov ebx, dword [rax + 0x20c]
mov dword [rsp + 0x88], ebx
cmp dword [0x1801df0a0], 0
je 0x18004c146
mov dword [rsp + 0x20], ebx
lea r9, str._DealWeChat___AnalyseData_10___left:__d_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
jmp 0x18004c146
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp dword [rax], 2
jne 0x18004c146
mov ebx, dword [rsp + 0x80]
test ebx, ebx
je 0x18004c104
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
cmp ebx, dword [rax + 0x214]
jge 0x18004c11c
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov ebx, dword [rax + 0x214]
mov dword [rsp + 0x80], ebx
cmp dword [0x1801df0a0], 0
je 0x18004c146
mov dword [rsp + 0x20], ebx
lea r9, str._DealWeChat___AnalyseData_11___right:__d_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
mov edx, r13d
mov rcx, r14
call fcn.180047aa0
mov rdx, rax
lea rcx, [rsp + 0xe8]
call fcn.180049a30
jmp 0x18004c168
mov r12d, dword [rsp + 0x70]
inc r13d
cmp r13d, dword [rsp + 0xa8]
mov ebx, dword [rsp + 0x9c]
mov edi, dword [rsp + 0x90]
mov esi, dword [rsp + 0x98]
jl 0x18004b9f0
test r12d, r12d
je 0x18004c267
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.18007d610
mov rdx, rax
mov r8d, 0x103
lea rcx, [rsp + 0x120]
call fcn.1800a11c4
or edx, 0xffffffff
lea rcx, [rsp + 0x78]
call fcn.18007d680
lea rdx, [0x18013ce7c]
lea rcx, [rsp + 0x78]
call fcn.18007d430
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0x534], eax
lea rdx, [rsp + 0x120]
mov rbp, qword [rsp + 0xb0]
mov rcx, rbp
call fcn.18004a940
cmp dword [0x1801df0a0], 0
je 0x18004c246
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x32c]
mov qword [rsp + 0x20], rax
lea r9, str._DealWeChat___AnalyseData_12___chatname:__s___chat:__s___strTmp:__s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
xor edx, edx
mov r8d, 0x418
lea rcx, [rsp + 0x120]
call fcn.1800a1250
jmp 0x18004c26f
mov rbp, qword [rsp + 0xb0]
jmp 0x18004c26f
mov rbp, qword [rsp + 0xb0]
lea rcx, [rsp + 0x100]
call fcn.180086200
nop
lea rcx, [rsp + 0xd0]
call fcn.18007ec60
nop
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0xe8]
mov rcx, rbp
call fcn.180048f40
mov r12d, dword [rsp + 0xb8]
nop dword [rax]
mov edi, dword [rsp + 0xd8]
test edi, edi
jle 0x18004c460
xor eax, eax
mov word [rsp + 0x540], ax
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x542]
call fcn.1800a1250
cmp r15d, 1
jne 0x18004c312
mov rsi, qword [rsp + 0xc8]
lea rbx, [rsi + 4]
jmp 0x18004c321
lea rbx, [0x18013ce7c]
mov rsi, qword [rsp + 0xc8]
mov r9d, 0x104
mov r8, rbx
lea rdx, [rsp + 0x540]
mov rcx, rbp
call fcn.180048b80
cmp word [rsp + 0x540], 0
jne 0x18004c3b8
mov r8d, 4
lea rdx, [0x180152938]
lea rcx, [rsi + 4]
call fcn.1800a256c
test eax, eax
je 0x18004c379
mov r8d, 5
lea rdx, [0x180152928]
lea rcx, [rsi + 4]
call fcn.1800a256c
test eax, eax
jne 0x18004c3b8
lea eax, [rdi - 1]
movsxd r9, eax
mov rax, qword [rsp + 0xd0]
mov dword [rsp + 0x20], 0x104
mov r9, qword [rax + r9*8]
lea r8, [rsp + 0x540]
lea rdx, [rsp + 0xa0]
mov rcx, rbp
call fcn.180048cd0
lea rcx, [rsp + 0xa0]
call fcn.18007d270
cmp dword [0x1801df0a0], 0
je 0x18004c3f0
lea rax, [rsp + 0x540]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, str._DealWeChat___AnalyseData_13___Chat:_s__Text:_s_
lea r8, str.wechat
or edx, 0xffffffff
lea rcx, [0x1801de7b8]
call fcn.18008da50
lea eax, [rdi - 1]
movsxd rcx, eax
mov rdx, qword [rsp + 0xd0]
mov rdx, qword [rdx + rcx*8]
lea rcx, [rsp + 0x540]
call fcn.180046b90
test eax, eax
je 0x18004c43f
mov rdi, qword [rsp + 0xc0]
mov dword [rdi], r15d
mov dword [rsp + 0x20], eax
lea r9, [rsp + 0x100]
lea r8, [rsp + 0xd0]
mov rdx, rbx
mov rcx, rbp
call fcn.18004abb0
jmp 0x18004c447
mov rdi, qword [rsp + 0xc0]
test r12d, r12d
jne 0x18004c460
cmp dword [rdi], r12d
jne 0x18004c460
mov eax, r15d
inc r15d
cmp eax, 2
jle 0x18004c2d0
lea rcx, [rsp + 0xd0]
call fcn.180081610
nop
lea rcx, [rsp + 0x100]
call fcn.180086210
nop
lea rcx, [rsp + 0x78]
call fcn.18007d270
nop
lea rcx, [rsp + 0xe8]
call fcn.180047ad0
mov rcx, qword [rsp + 0x750]
xor rcx, rsp
call fcn.1800a1220
lea r11, [rsp + 0x7a0]
mov rbx, qword [r11 + 0x58]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret