Function at 0x1003dd10
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1011789c
mov eax, dword fs:[0]
push eax
sub esp, 0x690
mov eax, dword [0x1015bdd0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
cmp dword [eax], 2
mov edi, dword [ebp + 8]
mov dword [ebp - 0x638], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x664], ecx
jne 0x1003e734
mov ecx, edi
call fcn.10039ee0
test eax, eax
je 0x1003e734
xor esi, esi
cmp dword [0x1016af88], esi
je 0x1003dd9c
mov ecx, edi
call fcn.10039ee0
push eax
push str._DealWeChat___AnalyseData_1___size:__d_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x14
lea ecx, [ebp - 0x68c]
call fcn.10039ed0
mov dword [ebp - 4], esi
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 0x658], esi
mov dword [ebp - 0x654], ebx
mov dword [ebp - 0x650], ebx
mov dword [ebp - 0x64c], ebx
call fcn.10039ee0
push 0x206
mov dword [ebp - 0x65c], eax
lea eax, [ebp - 0x62e]
xor edx, edx
push esi
push eax
mov word [ebp - 0x630], dx
call fcn.1007d080
push 0x210
lea ecx, [ebp - 0x428]
push esi
push ecx
call fcn.1007d080
mov edx, dword [0x1013c5e8]
add esp, 0x18
mov dword [ebp - 0x634], edx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x65c], ebx
mov dword [ebp - 0x640], esi
mov dword [ebp - 0x63c], esi
mov dword [ebp - 0x644], esi
mov dword [ebp - 0x648], esi
jle 0x1003e540
cmp dword [0x1016af88], 0
je 0x1003ded2
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x654]
mov edx, dword [ebp - 0x650]
mov ebx, eax
mov eax, dword [ebp - 0x64c]
push eax
mov eax, dword [ebp - 0x658]
push ecx
push edx
push eax
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [eax + 0x218]
push ecx
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [eax + 0x210]
push edx
push esi
mov ecx, edi
call fcn.1003a640
mov eax, dword [eax + 0x214]
push eax
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [eax + 0x20c]
mov edx, dword [ebx]
push ecx
push edx
push str._DealWeChat___AnalyseData_2___FunType:__d___rect:__d__d__d__d___chat:__s___rect2:__d__d__d__d_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
mov ebx, dword [ebp - 0x650]
add esp, 0x38
fld qword [0x101590d8]
push esi
fmul qword [0x1012ddc8]
mov ecx, edi
fstp qword [ebp - 0x66c]
call fcn.1003a640
fild dword [eax + 0x20c]
fcomp qword [ebp - 0x66c]
fnstsw ax
test ah, 5
jp 0x1003e283
cmp dword [0x1016af88], 0
je 0x1003df25
push str._DealWeChat___AnalyseData_3_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x10
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x658]
cmp ecx, dword [eax + 0x20c]
jne 0x1003dfd6
push esi
mov ecx, edi
call fcn.1003a640
cmp ebx, dword [eax + 0x214]
jne 0x1003dfd6
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [ebp - 0x654]
cmp edx, dword [eax + 0x210]
jne 0x1003dfd6
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x64c]
cmp ecx, dword [eax + 0x218]
jne 0x1003dfd6
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
call fcn.10039dd0
add esp, 4
test eax, eax
jne 0x1003dfae
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
lea ecx, [ebp - 0x634]
call fcn.1006b5d0
cmp dword [0x1016af88], 0
mov dword [ebp - 0x63c], 1
je 0x1003e245
mov edx, dword [ebp - 0x634]
push edx
push str._DealWeChat___AnalyseData_4___strTmp:__s_
jmp 0x1003e231
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x658]
cmp ecx, dword [eax + 0x20c]
jne 0x1003e13c
push esi
mov ecx, edi
call fcn.1003a640
cmp ebx, dword [eax + 0x214]
je 0x1003e03b
push esi
mov ecx, edi
call fcn.1003a640
cmp dword [eax + 0x214], ebx
jle 0x1003e13c
push esi
mov ecx, edi
call fcn.1003a640
fild dword [eax + 0x214]
fld qword [0x101590d8]
fmul qword [0x1012ddc8]
fcompp
fnstsw ax
test ah, 0x41
jne 0x1003e13c
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [ebp - 0x64c]
cmp edx, dword [eax + 0x210]
jg 0x1003e13c
fld qword [0x101590d8]
push esi
fmul qword [0x101313a0]
mov ecx, edi
fiadd dword [ebp - 0x64c]
fstp qword [ebp - 0x66c]
call fcn.1003a640
fild dword [eax + 0x210]
fcomp qword [ebp - 0x66c]
fnstsw ax
test ah, 5
jp 0x1003e13c
cmp dword [ebp - 0x63c], 0
jne 0x1003e0b3
mov eax, dword [ebp - 0x634]
push eax
call fcn.10039dd0
add esp, 4
test eax, eax
je 0x1003e0b3
lea ecx, [ebp - 0x634]
call fcn.1006a6f0
push 0x103
push 0
lea ecx, [ebp - 0x634]
call fcn.1006b650
push eax
lea ecx, [ebp - 0x424]
push ecx
call fcn.1007ce61
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x634]
call fcn.1006b720
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
lea ecx, [ebp - 0x634]
call fcn.1006ac00
cmp dword [0x1016af88], 0
mov dword [ebp - 0x640], 1
je 0x1003e245
mov edx, dword [ebp - 0x634]
push edx
lea eax, [ebp - 0x424]
push eax
push str._DealWeChat___AnalyseData_5___chatname:__s___strTmp:__s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x18
jmp 0x1003e245
xor ebx, ebx
cmp dword [ebp - 0x640], ebx
je 0x1003e206
push 0x103
push ebx
lea ecx, [ebp - 0x634]
call fcn.1006b650
push eax
lea ecx, [ebp - 0x630]
push ecx
call fcn.1007ce61
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x634]
call fcn.1006b720
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
lea ecx, [ebp - 0x634]
call fcn.1006ac00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x638]
lea edx, [ebp - 0x630]
push edx
mov dword [ebp - 0x21c], eax
call fcn.1003cf70
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x640], ebx
cmp dword [0x1016af88], ebx
je 0x1003e1ef
mov eax, dword [ebp - 0x634]
push eax
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x424]
push edx
push str._DealWeChat___AnalyseData_6___chatname:__s___chat:__s___strTmp:__s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x1c
push 0x418
lea eax, [ebp - 0x630]
push ebx
push eax
call fcn.1007d080
add esp, 0xc
jmp 0x1003e245
push esi
mov ecx, edi
call fcn.1003a640
add eax, 4
push eax
lea ecx, [ebp - 0x634]
call fcn.1006ac00
cmp dword [0x1016af88], ebx
je 0x1003e245
mov ecx, dword [ebp - 0x634]
push ecx
push str._DealWeChat___AnalyseData_7___strTmp:__s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x14
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [eax + 0x20c]
mov ecx, dword [eax + 0x210]
add eax, 0x20c
mov dword [ebp - 0x658], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x650], edx
mov dword [ebp - 0x64c], eax
mov ebx, edx
jmp 0x1003e47c
push esi
mov ecx, edi
call fcn.1003a640
fild dword [eax + 0x20c]
fcomp qword [ebp - 0x66c]
fnstsw ax
test ah, 0x41
jne 0x1003e47c
cmp dword [0x1016af88], 0
je 0x1003e2c4
push str._DealWeChat___AnalyseData_8_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x10
cmp dword [ebp - 0x640], 0
je 0x1003e385
push 0x103
push 0
lea ecx, [ebp - 0x634]
call fcn.1006b650
push eax
lea ecx, [ebp - 0x630]
push ecx
call fcn.1007ce61
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x634]
call fcn.1006b720
push 0x10120d30
lea ecx, [ebp - 0x634]
call fcn.1006ac00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x638]
lea edx, [ebp - 0x630]
push edx
mov dword [ebp - 0x21c], eax
call fcn.1003cf70
cmp dword [0x1016af88], 0
mov dword [ebp - 0x640], 0
je 0x1003e36f
mov eax, dword [ebp - 0x634]
push eax
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x424]
push edx
push str._DealWeChat___AnalyseData_9___chatname:__s___chat:__s___strTmp:__s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x1c
push 0x418
lea eax, [ebp - 0x630]
push 0
push eax
call fcn.1007d080
add esp, 0xc
push esi
mov ecx, edi
call fcn.1003a640
fild dword [eax + 0x20c]
fld qword [0x101590d8]
fmul qword [0x10131178]
fcompp
fnstsw ax
test ah, 0x41
jne 0x1003e3ff
push esi
mov ecx, edi
call fcn.1003a640
cmp dword [eax], 2
jne 0x1003e3ff
cmp dword [ebp - 0x644], 0
je 0x1003e3d4
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x644]
cmp ecx, dword [eax + 0x20c]
jle 0x1003e3e8
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [eax + 0x20c]
mov dword [ebp - 0x644], edx
cmp dword [0x1016af88], 0
je 0x1003e468
mov eax, dword [ebp - 0x644]
push eax
push str._DealWeChat___AnalyseData_10___left:__d_
jmp 0x1003e454
push esi
mov ecx, edi
call fcn.1003a640
cmp dword [eax], 2
jne 0x1003e468
cmp dword [ebp - 0x648], 0
je 0x1003e42b
push esi
mov ecx, edi
call fcn.1003a640
mov ecx, dword [ebp - 0x648]
cmp ecx, dword [eax + 0x214]
jge 0x1003e43f
push esi
mov ecx, edi
call fcn.1003a640
mov edx, dword [eax + 0x214]
mov dword [ebp - 0x648], edx
cmp dword [0x1016af88], 0
je 0x1003e468
mov eax, dword [ebp - 0x648]
push eax
push str._DealWeChat___AnalyseData_11___right:__d_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x14
push esi
mov ecx, edi
call fcn.1003a640
push eax
lea ecx, [ebp - 0x68c]
call fcn.1003c0a0
inc esi
cmp esi, dword [ebp - 0x65c]
jl 0x1003de35
cmp dword [ebp - 0x640], 0
je 0x1003e540
push 0x103
push 0
lea ecx, [ebp - 0x634]
call fcn.1006b650
push eax
lea ecx, [ebp - 0x630]
push ecx
call fcn.1007ce61
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x634]
call fcn.1006b720
push 0x10120d30
lea ecx, [ebp - 0x634]
call fcn.1006ac00
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x638]
lea edx, [ebp - 0x630]
push edx
mov dword [ebp - 0x21c], eax
call fcn.1003cf70
cmp dword [0x1016af88], 0
je 0x1003e52a
mov eax, dword [ebp - 0x634]
push eax
lea ecx, [ebp - 0x630]
push ecx
lea edx, [ebp - 0x424]
push edx
push str._DealWeChat___AnalyseData_12___chatname:__s___chat:__s___strTmp:__s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x1c
push 0x418
lea eax, [ebp - 0x630]
push 0
push eax
call fcn.1007d080
add esp, 0xc
lea ecx, [ebp - 0x69c]
call fcn.100765c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x67c]
call fcn.100702a0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x648]
mov edx, dword [ebp - 0x644]
push ecx
push edx
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x69c]
push ecx
mov ecx, dword [ebp - 0x638]
lea edx, [ebp - 0x68c]
push edx
call fcn.1003b7f0
mov esi, 1
mov dword [ebp - 0x63c], esi
mov eax, dword [ebp - 0x678]
mov ebx, eax
test eax, eax
jle 0x1003e6f5
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
push ecx
mov word [ebp - 0x218], ax
call fcn.1007d080
add esp, 0xc
cmp esi, 1
jne 0x1003e5d5
mov edi, dword [ebp - 0x660]
add edi, 4
jmp 0x1003e5da
mov edi, 0x10120d30
mov ecx, dword [ebp - 0x638]
push 0x104
push edi
lea edx, [ebp - 0x218]
push edx
call fcn.1003b480
cmp word [ebp - 0x218], 0
jne 0x1003e667
mov esi, dword [ebp - 0x660]
push 4
add esi, 4
push 0x10131028
push esi
call fcn.1007f260
add esp, 0xc
test eax, eax
je 0x1003e62d
push 5
push 0x1013101c
push esi
call fcn.1007f260
add esp, 0xc
test eax, eax
jne 0x1003e661
mov eax, dword [ebp - 0x67c]
mov eax, dword [eax + ebx*4 - 4]
push 0x104
push eax
lea ecx, [ebp - 0x218]
push ecx
mov ecx, dword [ebp - 0x638]
lea edx, [ebp - 0x65c]
push edx
call fcn.1003b5b0
lea ecx, [ebp - 0x65c]
call fcn.1006a980
mov esi, dword [ebp - 0x63c]
cmp dword [0x1016af88], 0
je 0x1003e691
lea eax, [ebp - 0x218]
push eax
push edi
push str._DealWeChat___AnalyseData_13___Chat:_s__Text:_s_
push str.wechat
push 0xffffffffffffffff
push 0x1016af1c
call fcn.1000b060
add esp, 0x18
mov ecx, dword [ebp - 0x67c]
mov eax, dword [ecx + ebx*4 - 4]
push eax
lea edx, [ebp - 0x218]
push edx
call fcn.100399c0
add esp, 8
test eax, eax
jbe 0x1003e6d2
mov ecx, dword [ebp - 0x664]
push eax
lea edx, [ebp - 0x69c]
push edx
lea eax, [ebp - 0x67c]
push eax
mov dword [ecx], esi
mov ecx, dword [ebp - 0x638]
push edi
call fcn.1003d1e0
cmp dword [ebp + 0x10], 0
jne 0x1003e6f5
mov ecx, dword [ebp - 0x664]
cmp dword [ecx], 0
jne 0x1003e6f5
mov edx, esi
inc esi
cmp edx, 2
mov dword [ebp - 0x63c], esi
jle 0x1003e597
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x67c]
call fcn.100702b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x69c]
call fcn.100765d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x634]
call fcn.1006a980
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68c]
call fcn.1003a670
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1007ceab
mov esp, ebp
pop ebp
ret 0x10