Function at 0x140104ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
mov rax, qword [rcx]
lea r14, [rcx + 0x18]
mov rbp, qword [r14]
mov r12, r9
mov r13, r8
mov rdi, rdx
mov r15, rcx
mov r10d, dword [rax + 8]
and r10d, 0xa
cmp r10b, 0xa
jne 0x140104f30
add rbp, 0x330
jmp 0x140104f37
add rbp, 0x2c0
cmp qword [rdx + 0xc90], 0
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0xa0], 0
mov dword [rsp + 0x88], reloc.WLDAP32.dll_Ordinal_27
je 0x1401052ae
lea rax, [rsp + 0xa8]
lea r9, [rsp + 0x80]
mov qword [rsp + 0x20], rax
call fcn.140104c10
test al, al
jne 0x14010502b
cmp qword [rsp + 0xa8], 0x30
mov rsi, qword [rsp + 0x80]
jne 0x140104fc0
cmp rsi, r12
je 0x1401052ae
mov r8d, 0x30
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1401052ae
mov rdx, qword [rdi + 0x6b0]
xor eax, eax
test rdx, rdx
je 0x14010502b
mov rbx, qword [rdi + 0xc90]
mov rcx, qword [rbx + 0x18]
cmp rcx, rsi
je 0x140104fef
inc rax
add rbx, 0xb0
cmp rax, rdx
jb 0x140104fd5
jmp 0x14010502b
test rcx, rcx
je 0x14010502b
mov rdx, qword [rbx + 0x20]
call qword [rbx + Ordinal_41]
xor esi, esi
lea rcx, [rbx + 0x40]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x28], rsi
mov dword [rbx + 0x30], esi
call fcn.140104ae0
mov rcx, qword [rbx]
call qword [0x1402e1138]
mov rcx, qword [rbx + 8]
mov qword [rbx], rsi
call qword [0x1402e1138]
mov qword [rbx + 8], rsi
mov rbx, qword [rdi + 0xc90]
mov rcx, qword [r13]
mov esi, dword [rbx + 0x30]
call qword [case.0x140115757.0]
mov r13, rax
test rax, rax
je 0x14010520b
mov rcx, qword [r14]
cmp byte [rcx + 0x3a9], 0
je 0x140105075
mov rcx, qword [rcx + 0x80]
call qword [case.0x140115757.0]
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x14010520b
mov rcx, qword [r14]
cmp byte [rcx + 0x3aa], 0
je 0x140105090
mov ecx, dword [rcx + 0x7c0]
mov dword [rsp + 0x80], ecx
jmp 0x14010509b
mov dword [rsp + 0x80], 0xffffffff
mov rax, qword [rdi + 0xe8]
test rax, rax
je 0x1401050b4
test byte [rax + 4], 0x10
lea r14, [rax + 0x108]
jne 0x1401050bb
lea r14, [rdi + 0xc98]
mov r9, qword [rdi + 0x6b0]
mov edx, 1
cmp rdx, r9
jae 0x14010510f
mov rcx, qword [rdi + 0xc90]
add rcx, 0xe0
nop word [rax + rax]
cmp qword [rcx - 0x18], 0
mov r8, rbx
je 0x14010510c
mov eax, dword [rcx]
lea rbx, [rcx - 0x30]
cmp eax, esi
cmovge rbx, r8
inc rdx
add rcx, 0xb0
cmp eax, esi
cmovge eax, esi
mov esi, eax
cmp rdx, r9
jb 0x1401050e0
cmp rdx, r9
jne 0x140105153
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x140105161
mov rdx, qword [rbx + 0x20]
call qword [rbx + Ordinal_41]
xor esi, esi
lea rcx, [rbx + 0x40]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x28], rsi
mov dword [rbx + 0x30], esi
call fcn.140104ae0
mov rcx, qword [rbx]
call qword [0x1402e1138]
mov rcx, qword [rbx + 8]
mov qword [rbx], rsi
call qword [0x1402e1138]
mov qword [rbx + 8], rsi
jmp 0x140105161
imul rbx, rdx, 0xb0
add rbx, qword [rdi + 0xc90]
lea rdx, [rbx + 0x40]
mov rcx, rbp
call fcn.140104880
test al, al
jne 0x140105186
lea rcx, [rbx + 0x40]
call fcn.140104ae0
xor r8d, r8d
mov qword [rbx + 0x18], r8
jmp 0x14010520b
mov rcx, qword [rbx]
lea rax, [fcn.14012f0e0]
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x18], r12
mov qword [rbx + 0x20], 0x30
mov eax, dword [r14]
mov dword [rbx + 0x30], eax
call qword [0x1402e1138]
mov rcx, qword [rbx + 8]
call qword [0x1402e1138]
mov rcx, qword [rsp + 0xa0]
xor r8d, r8d
mov eax, dword [rsp + 0x80]
mov rdx, qword [rsp + 0x90]
mov qword [rbx], r13
mov r13d, r8d
mov qword [rbx + 8], rcx
mov dword [rbx + 0x38], eax
mov eax, dword [rdx + 0x1c]
mov dword [rbx + 0x34], eax
mov rax, qword [r15 + 0x18]
mov qword [rsp + 0xa0], r8
mov dword [rsp + 0x88], r8d
mov rcx, qword [rax + 0x3c8]
mov rax, qword [rcx]
mov qword [rbx + 0x10], rax
mov eax, dword [rdx + 0x20]
mov dword [rbx + 0x3c], eax
mov rcx, r13
call qword [0x1402e1138]
mov rcx, qword [rsp + 0xa0]
call qword [0x1402e1138]
mov rax, qword [r15]
lea r11, str.PROXY
mov esi, dword [rbx + 0x34]
lea rcx, str.server
mov r9, qword [rbx]
mov r8, qword [rbx + 0x10]
mov r10d, dword [rax + 8]
mov ebx, dword [rsp + 0x88]
and r10d, 0xa
test ebx, ebx
je 0x140105281
cmp r10d, 0xa
lea rdx, str.Failed_to_add_Session_ID_to_cache_for__s:___s:_d___s_
cmove rcx, r11
mov qword [rsp + 0x28], rcx
mov rcx, rdi
mov dword [rsp + 0x20], esi
call fcn.140101e00
mov edx, 0x30
mov rcx, r12
call fcn.14012f0e0
mov eax, ebx
jmp 0x1401052bd
cmp r10d, 0xa
mov rdx, r15
cmove rcx, r11
mov qword [rsp + 0x30], rcx
mov rcx, rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r9
mov r9, r8
lea r8, str.Added_Session_ID_to_cache_for__s:___s:_d___s_
call fcn.140102040
jmp 0x1401052bb
mov edx, 0x30
mov rcx, r12
call fcn.14012f0e0
xor eax, eax
mov rsi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x98]
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret