Function at 0x1400fea40
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r14
sub rsp, 0x98
mov rax, qword [0x1402b3030]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rax, qword [rcx + 0xd0]
xor ebp, ebp
mov qword [rsp + 0x50], r8
mov r13, r8
mov qword [rsp + 0x30], rdx
mov r12, rdx
mov qword [rsp + 0x40], rcx
mov rbx, rcx
mov qword [rsp + 0x60], rbp
mov byte [rsp + 0x69], bpl
mov byte [rsp + 0x68], bpl
test rax, rax
je 0x1400feaa7
movsxd r14, dword [rax + 0x14c]
mov ecx, dword [rax + 0x150]
jmp 0x1400feaac
mov r14, rbp
mov ecx, ebp
mov byte [r8], bpl
mov qword [rdx], rbp
movsxd rax, ecx
mov qword [rsp + 0x58], rax
cmp qword [rbx + 0x11c0], rbp
jne 0x1400feacd
mov esi, 3
jmp 0x1400ff7b8
mov rcx, rbx
mov qword [rsp + 0xe8], rdi
call fcn.1400fbb30
mov qword [rsp + 0x48], rax
mov rdi, rax
test rax, rax
je 0x1400febff
mov rdx, rax
mov qword [r12], rax
mov rcx, rbx
call fcn.1400fc000
mov esi, eax
test eax, eax
jne 0x1400ff7b0
mov rcx, qword [rbx + 0x950]
test rcx, rcx
je 0x1400feb29
call qword [case.0x1400f50d8.0]
mov qword [rdi + 0x168], rax
test rax, rax
je 0x1400febff
mov rcx, qword [rbx + 0x920]
test rcx, rcx
je 0x1400feb4b
call qword [case.0x1400f50d8.0]
mov qword [rdi + 0x170], rax
test rax, rax
je 0x1400febff
mov rcx, qword [rbx + 0x928]
test rcx, rcx
je 0x1400feb7a
call qword [case.0x1400f50d8.0]
mov qword [rdi + 0x708], rax
test rax, rax
je 0x1400febff
movzx eax, byte [rbx + 0xabb]
mov byte [rdi + 0x323], al
mov rdx, rdi
mov rcx, rbx
call fcn.1400fd530
mov esi, eax
test eax, eax
jne 0x1400ff7b0
mov rax, qword [rdi + 0x330]
test byte [rax + 0x8c], 1
je 0x1400febaf
cmp byte [rdi + 0x308], bpl
je 0x1400febaf
mov byte [rdi + 0x30b], 1
movzx eax, word [rbx + 0x200]
test ax, ax
je 0x1400fec09
cmp byte [rbx + 0x12d4], bpl
je 0x1400fec09
mov r9d, eax
mov dword [rdi + 0x730], eax
lea r8, [0x14028455c]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call sym.CheraxLoader.exe_curl_msnprintf
mov rcx, qword [rbx + 0x1170]
lea r8, [rsp + 0x70]
xor r9d, r9d
lea edx, [r9 + 6]
call sym.CheraxLoader.exe_curl_url_set
test eax, eax
je 0x1400fec09
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400ff7b0
mov rdx, rdi
mov rcx, rbx
call fcn.1400fdc60
mov esi, eax
test eax, eax
jne 0x1400ff7b0
mov rax, qword [rdi + 0x328]
lea rcx, str.anonymous
mov qword [rsp + 0x90], r15
mov esi, ebp
lea r15, str.ftp_example.com
test byte [rax + 0x8c], 0x20
je 0x1400fec4f
cmp qword [rbx + 0x12b0], rsi
je 0x1400fec59
lea rcx, [0x1401f81f9]
mov r15, rcx
cmp qword [rdi + 0x150], rsi
jne 0x1400fec7c
call qword [case.0x1400f50d8.0]
mov qword [rdi + 0x150], rax
test rax, rax
jne 0x1400fec7c
lea esi, [rax + 0x1b]
jmp 0x1400ff7a8
mov ebp, reloc.WLDAP32.dll_Ordinal_27
cmp qword [rdi + 0x158], rsi
jne 0x1400feca0
mov rcx, r15
call qword [case.0x1400f50d8.0]
test rax, rax
mov qword [rdi + 0x158], rax
cmove esi, ebp
test esi, esi
jne 0x1400ff7a8
mov r8, qword [rbx + 0x518]
mov rdx, rdi
mov rcx, rbx
call fcn.1400fe330
mov esi, eax
test eax, eax
jne 0x1400ff7a8
movzx r9d, byte [rdi + 0x308]
test r9b, r9b
je 0x1400fecdf
mov rax, qword [rdi + 0xf8]
mov qword [rdi + 0x100], rax
cmp byte [rdi + 0x309], 0
je 0x1400fecf6
mov rax, qword [rdi + 0xc0]
mov qword [rdi + 0xc8], rax
cmp byte [rdi + 0x311], 0
mov r15, r14
je 0x1400fed6d
mov rdx, qword [rdi + 0xa0]
mov r8, qword [rdi + 0x70]
test rdx, rdx
je 0x1400fed61
test r8, r8
je 0x1400fed6d
cmp byte [rdx], 0
je 0x1400fed44
lea r10, [0x140248570]
movzx eax, byte [r8]
test al, al
je 0x1400fed44
movzx ecx, byte [rdx]
movzx eax, byte [rax + r10]
cmp byte [rcx + r10], al
jne 0x1400fed5b
inc rdx
inc r8
cmp byte [rdx], 0
jne 0x1400fed23
xor eax, eax
cmp byte [rdx], al
mov ecx, eax
sete cl
cmp byte [r8], al
setne al
xor ecx, eax
test ecx, ecx
je 0x1400fed6d
jmp 0x1400fed66
xor eax, eax
mov ecx, eax
jmp 0x1400fed55
test r8, r8
jne 0x1400fed6d
mov byte [rdi + 0x311], 0
movzx ecx, byte [rdi + 0x312]
test cl, cl
je 0x1400fed8f
mov eax, dword [rdi + 0x730]
cmp dword [rdi + 0x734], eax
jne 0x1400fed8f
mov byte [rdi + 0x312], 0
xor cl, cl
cmp byte [rdi + 0x311], 0
jne 0x1400fed9c
test cl, cl
je 0x1400feda8
test r9b, r9b
je 0x1400feda8
mov byte [rdi + 0x30b], 1
mov rax, qword [rdi + 0x328]
mov rcx, rax
mov r8, qword [rax + 8]
test r8, r8
je 0x1400fedd8
mov rdx, rdi
mov rcx, rbx
call r8
mov esi, eax
test eax, eax
jne 0x1400ff7a8
mov rax, qword [rdi + 0x328]
mov rcx, rax
cmp dword [rdi + 0x72c], 0
jge 0x1400feded
mov eax, dword [rax + 0x80]
mov dword [rdi + 0x72c], eax
test byte [rcx + 0x8c], 0x10
je 0x1400ff080
movups xmm0, xmmword [rdi + 0x120]
mov rbp, 0xffffffffffffffff
lea rdx, [rsp + 0x6a]
movups xmmword [rbx + 0x1388], xmm0
movups xmm1, xmmword [rdi + 0x130]
movups xmmword [rbx + 0x1398], xmm1
movsd xmm0, qword [rdi + 0x140]
movsd qword [rbx + 0x13a8], xmm0
mov eax, dword [rdi + 0x148]
mov dword [rbx + 0x13b0], eax
movzx eax, word [rdi + 0x14c]
mov word [rbx + 0x13b4], ax
mov byte [rbx + 0x13c0], 0
mov rax, qword [rdi + 0x328]
mov rcx, qword [rax]
mov qword [rbx + 0x13f8], rcx
mov rax, qword [rdi + 0x328]
mov ecx, dword [rax + 0x84]
and ecx, 0x3ffffff
mov dword [rbx + 0x1400], ecx
mov rcx, rbx
mov eax, dword [rdi + 0x72c]
mov dword [rbx + 0x13b8], eax
mov eax, dword [rdi + 0x730]
mov dword [rbx + 0x13bc], eax
mov dword [rbx + 0x13f0], ebp
mov rax, qword [rdi + 0x328]
call qword [rax + Ordinal_41]
mov esi, eax
test eax, eax
jne 0x1400ff068
mov rdx, rdi
mov rcx, rbx
call fcn.1400ee260
mov rcx, rbx
call fcn.1401024e0
mov esi, eax
test eax, eax
jne 0x1400ff7a8
mov rcx, rbx
call fcn.1400fc9a0
mov esi, eax
test eax, eax
je 0x1400feef4
mov rax, qword [rdi + 0x328]
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x1400ff7a8
mov rcx, qword [rbx + 0x18]
mov edx, ebp
mov r8, qword [rbx + 0x1b0]
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x1400fef22
cmp dword [r8 + 0x200], 1
jne 0x1400fef22
mov al, 1
jmp 0x1400fef24
xor al, al
cmp byte [rcx + 0x31f], 0
jne 0x1400fef3a
cmp byte [rcx + 0x73f], 0x14
jae 0x1400fef3a
test al, al
je 0x1400fef44
test al, al
mov eax, 0
cmovne edx, eax
mov qword [rcx + 0x350], rbp
mov qword [rcx + 0x348], rbp
mov byte [rbx + 0x1c9], 0
mov qword [rbx + 0xe8], rbp
mov byte [rbx + 0x1c1], 0
cmp byte [rbx + 0x1cb], 0
jne 0x1400ff068
cmp edx, ebp
je 0x1400ff068
cmp byte [rbx + 0x12d7], 0
je 0x1400ff061
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x1400ff057
cmp dword [r8 + 0x200], 2
jne 0x1400ff057
cmp byte [0x1402b5b38], 0
mov dword [rbx + 0x170], 1
je 0x1400feffa
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402b5b30]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
jmp 0x1400ff025
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
mov ecx, edx
mov qword [rsp + 0x30], rcx
imul ecx, edx, 0x3e8
sub r8d, ecx
imul eax, r8d, 0x3e8
mov dword [rsp + 0x38], eax
xor r8d, r8d
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rbx
movups xmmword [rbx + 0x160], xmm0
movsxd rdx, dword [rbx + 0xa30]
call fcn.1400f2350
mov rdx, rdi
mov rcx, rbx
call fcn.1400ffac0
jmp 0x1400ff7a8
mov dword [rbx + 0x170], 2
or dword [rbx + 0x15c], 2
mov rdx, rdi
mov rcx, rbx
call fcn.1400ffac0
jmp 0x1400ff7a8
lea rax, [0x1400f7cf0]
lea rcx, [0x1400f7c80]
mov qword [rdi + 0x1b8], rcx
lea rdx, [rdi + 0x228]
mov qword [rdi + 0x1c8], rax
mov qword [rdi + 0x1c0], rcx
lea rcx, [rbx + 0x530]
mov qword [rdi + 0x1d0], rax
movzx eax, byte [rbx + 0xab4]
mov byte [rdi + 0x320], al
mov rax, qword [rbx + 0x7f0]
mov qword [rcx], rax
mov rax, qword [rbx + 0x800]
mov qword [rbx + 0x538], rax
mov rax, qword [rbx + 0x858]
mov qword [rbx + 0x540], rax
mov rax, qword [rbx + 0x9b8]
mov qword [rbx + 0x580], rax
mov rax, qword [rbx + 0x820]
mov qword [rbx + 0x550], rax
mov rax, qword [rbx + 0x830]
mov qword [rbx + 0x558], rax
mov rax, qword [rbx + 0x810]
mov qword [rbx + 0x560], rax
mov rax, qword [rbx + 0x998]
mov qword [rbx + 0x570], rax
mov rax, qword [rbx + 0x9c8]
mov qword [rbx + 0x578], rax
mov rax, qword [rbx + 0x978]
mov qword [rbx + 0x588], rax
mov rax, qword [rbx + 0x7f8]
mov qword [rbx + 0x5e8], rax
mov rax, qword [rbx + 0x808]
mov qword [rbx + 0x5f0], rax
mov rax, qword [rbx + 0x828]
mov qword [rbx + 0x608], rax
mov rax, qword [rbx + 0x838]
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x818]
mov qword [rbx + 0x618], rax
mov rax, qword [rbx + 0x9a0]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x9d0]
mov qword [rbx + 0x630], rax
mov rax, qword [rbx + 0x860]
mov qword [rbx + 0x5f8], rax
mov rax, qword [rbx + 0x9c0]
mov qword [rbx + 0x638], rax
mov rax, qword [rbx + 0x850]
mov qword [rbx + 0x620], rax
mov rax, qword [rbx + 0x738]
mov qword [rbx + 0x670], rax
mov rax, qword [rbx + 0x790]
mov qword [rbx + 0x678], rax
mov rax, qword [rbx + 0x7b0]
mov qword [rbx + 0x688], rax
mov rax, qword [rbx + 0x7a0]
mov qword [rbx + 0x690], rax
mov rax, qword [rbx + 0x728]
mov qword [rbx + 0x600], rax
mov rax, qword [rbx + 0x9b0]
mov qword [rbx + 0x680], rax
mov rax, qword [rbx + 0x848]
mov qword [rbx + 0x568], rax
mov rax, qword [rbx + 0x730]
mov qword [rbx + 0x5b8], rax
mov rax, qword [rbx + 0x788]
mov qword [rbx + 0x5c0], rax
mov rax, qword [rbx + 0x7a8]
mov qword [rbx + 0x5d0], rax
mov rax, qword [rbx + 0x798]
mov qword [rbx + 0x5d8], rax
mov rax, qword [rbx + 0x720]
mov qword [rbx + 0x548], rax
mov rax, qword [rbx + 0x9a8]
mov qword [rbx + 0x5c8], rax
call fcn.1400ead40
test al, al
je 0x1400ff2af
lea rdx, [rdi + 0x298]
lea rcx, [rbx + 0x5e8]
call fcn.1400ead40
test al, al
jne 0x1400ff2b6
mov esi, ebp
jmp 0x1400ff7a8
mov rcx, rbx
call fcn.1400faba0
cmp byte [rbx + 0xaaa], 0
je 0x1400ff2d4
cmp dword [rbx + 0xd70], 0
je 0x1400ff54b
cmp byte [rbx + 0xa89], 0
jne 0x1400ff54b
lea rax, [rsp + 0x68]
mov rdx, rdi
lea r9, [rsp + 0x69]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.1400fae20
test al, al
je 0x1400ff54b
cmp qword [rdi + 0x150], 0
mov rsi, qword [rsp + 0x60]
je 0x1400ff36e
mov rcx, qword [rsi + 0x150]
call qword [0x1402b30c8]
mov rcx, qword [rsi + 0x158]
xor r15d, r15d
mov qword [rsi + 0x150], r15
call qword [0x1402b30c8]
mov qword [rsi + 0x158], r15
mov rax, qword [rdi + 0x150]
mov qword [rsi + 0x150], rax
mov rax, qword [rdi + 0x158]
mov qword [rsi + 0x158], rax
mov qword [rdi + 0x150], r15
mov qword [rdi + 0x158], r15
jmp 0x1400ff371
xor r15d, r15d
movzx eax, byte [rdi + 0x30a]
mov byte [rsi + 0x30a], al
test al, al
je 0x1400ff42a
mov rcx, qword [rsi + 0x110]
call qword [0x1402b30c8]
mov rcx, qword [rsi + 0xd8]
mov qword [rsi + 0x110], r15
call qword [0x1402b30c8]
mov rcx, qword [rsi + 0x118]
mov qword [rsi + 0xd8], r15
call qword [0x1402b30c8]
mov rcx, qword [rsi + 0xe0]
mov qword [rsi + 0x118], r15
call qword [0x1402b30c8]
mov qword [rsi + 0xe0], r15
mov rax, qword [rdi + 0x110]
mov qword [rsi + 0x110], rax
mov rax, qword [rdi + 0xd8]
mov qword [rsi + 0xd8], rax
mov rax, qword [rdi + 0x118]
mov qword [rsi + 0x118], rax
mov rax, qword [rdi + 0xe0]
mov qword [rsi + 0xe0], rax
mov qword [rdi + 0x110], r15
mov qword [rdi + 0xd8], r15
mov qword [rdi + 0x118], r15
mov qword [rdi + 0xe0], r15
mov rcx, qword [rsi + 0x60]
call qword [0x1402b30c8]
mov rcx, qword [rsi + 0x90]
mov qword [rsi + 0x60], r15
call qword [0x1402b30c8]
mov qword [rsi + 0x90], r15
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rdi + 0x70]
movups xmmword [rsi + 0x70], xmm1
mov qword [rdi + 0x60], r15
movups xmm0, xmmword [rdi + 0x90]
mov qword [rdi + 0x68], r15
movups xmmword [rsi + 0x90], xmm0
movups xmm1, xmmword [rdi + 0xa0]
movups xmmword [rsi + 0xa0], xmm1
mov eax, dword [rdi + 0x734]
mov qword [rdi + 0x90], r15
mov rcx, qword [rsi + 0x80]
mov dword [rsi + 0x734], eax
mov eax, dword [rdi + 0x730]
mov dword [rsi + 0x730], eax
call qword [0x1402b30c8]
mov qword [rsi + 0x80], r15
mov rcx, rdi
mov rax, qword [rdi + 0x80]
mov qword [rsi + 0x80], rax
mov qword [rdi + 0x80], r15
call fcn.1400fa3b0
mov rdx, rdi
mov byte [rsi + 0x30f], 1
mov rcx, rbx
call fcn.1400fa430
mov rdi, qword [rsp + 0x60]
mov qword [r12], rdi
cmp qword [rdi + 0xc0], 0
je 0x1400ff4fe
mov rax, qword [rdi + 0xc8]
jmp 0x1400ff515
cmp qword [rdi + 0xf8], 0
je 0x1400ff511
mov rax, qword [rdi + 0x100]
jmp 0x1400ff515
mov rax, qword [rdi + 0x78]
cmp byte [rdi + 0x30d], 0
lea rcx, str.proxy
mov r8d, dword [rdi + 0x48]
lea r9, str.host
cmovne r9, rcx
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea rdx, str.Re_using_existing_connection__ld_with__s__s
call fcn.140100de0
jmp 0x1400ff8ca
mov rax, qword [rdi + 0x328]
test dword [rax + 0x8c], 0x100
je 0x1400ff56e
cmp byte [rbx + 0xab5], 0
je 0x1400ff56e
mov byte [rdi + 0x321], 1
cmp byte [rsp + 0x68], 0
jne 0x1400ff77d
mov r8, qword [rbx + 0xc68]
mov rdx, rdi
mov rcx, rbx
call fcn.140102350
mov r14, rax
test r15, r15
je 0x1400ff7db
test rax, rax
je 0x1400ff7db
cmp qword [rax + 8], r15
jb 0x1400ff7db
xor eax, eax
mov rbp, 0xffffffffffffffff
cmp byte [0x1402b5b38], al
mov esi, eax
je 0x1400ff5f7
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402b5b30]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov r12, rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
mov r13, rax
jmp 0x1400ff61e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
mov r12d, edx
sub r8d, ecx
imul r13d, r8d, 0x3e8
mov r9, qword [r14 + 0x10]
mov r10, r9
test r9, r9
je 0x1400ff727
movabs rdx, 0x20c49ba5e353f7
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0xffdf3b645a1cac09
movabs rbx, 0x8000000000000000
nop word [rax + rax]
mov r11, qword [r10]
cmp qword [r11 + 0x3d0], 0
jne 0x1400ff6d2
mov r8, r12
sub r8, qword [r11 + 0x198]
cmp r8, rdx
jl 0x1400ff681
mov rcx, rdi
jmp 0x1400ff6bd
cmp r8, rcx
jg 0x1400ff68b
mov rcx, rbx
jmp 0x1400ff6bd
mov ecx, r13d
mov eax, 0x10624dd3
sub ecx, dword [r11 + 0x1a0]
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
movabs rdx, 0x20c49ba5e353f7
imul rax, r8, 0x3e8
add rcx, rax
cmp rcx, rbp
jle 0x1400ff6c8
mov rbp, rcx
mov rsi, r11
movabs rcx, 0xffdf3b645a1cac09
mov r10, qword [r10 + 0x10]
test r10, r10
jne 0x1400ff660
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
test rsi, rsi
je 0x1400ff727
nop word [rax + rax]
cmp qword [r9], rsi
je 0x1400ff700
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x1400ff6f0
jmp 0x1400ff71c
xor r8d, r8d
lea rcx, [r14 + 0x10]
mov rdx, r9
call fcn.14010d260
dec qword [r14 + 8]
xor eax, eax
mov qword [rsi + 0x700], rax
mov rax, qword [rbx + 0xc68]
dec qword [rax + 0x30]
mov r8, qword [rbx + 0xe0]
test r8, r8
je 0x1400ff751
test byte [r8 + 4], 0x20
je 0x1400ff751
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1400ff751
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rcx, rbx
test rsi, rsi
je 0x1400ff76e
xor r8d, r8d
mov rdx, rsi
call fcn.1400fa680
mov r13, qword [rsp + 0x50]
jmp 0x1400ff805
mov r8, r15
lea rdx, str.No_more_connections_allowed_to_host:__zu
call fcn.140100de0
lea rdx, str.No_connections_available.
mov rcx, rbx
call fcn.140100de0
mov rdx, rdi
mov rcx, rbx
call fcn.1400fa430
mov rax, qword [rsp + 0x30]
mov esi, 0x59
mov qword [rax], 0
mov r15, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xe8]
mov eax, esi
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.14014d450
add rsp, 0x98
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rbx + 0xe0]
test r8, r8
je 0x1400ff805
test byte [r8 + 4], 0x20
je 0x1400ff805
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1400ff805
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rsi, qword [rsp + 0x58]
test rsi, rsi
je 0x1400ff837
mov rcx, rbx
call fcn.1401022d0
cmp rax, rsi
jb 0x1400ff837
mov rcx, rbx
call fcn.140102bf0
mov rcx, rbx
test rax, rax
je 0x1400ff887
xor r8d, r8d
mov rdx, rax
call fcn.1400fa680
mov rdx, rdi
mov rcx, rbx
call fcn.1400ee260
mov rcx, rbx
call fcn.1401024e0
mov esi, eax
test eax, eax
jne 0x1400ff7a8
test byte [rbx + 0xdd4], 0x28
je 0x1400ff898
cmp byte [rbx + 0xddc], al
je 0x1400ff898
lea rdx, str.NTLM_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140100de0
xor r15d, r15d
mov dword [rbx + 0xdd4], r15d
mov byte [rbx + 0xddc], r15b
jmp 0x1400ff89b
lea rdx, str.No_connections_available_in_cache
call fcn.140100de0
jmp 0x1400ff77d
xor r15d, r15d
test byte [rbx + 0xde4], 0x28
je 0x1400ff8ca
cmp byte [rbx + 0xdec], 0
je 0x1400ff8ca
lea rdx, str.NTLM_proxy_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140100de0
mov dword [rbx + 0xde4], r15d
mov byte [rbx + 0xdec], 0
mov rdx, rdi
mov rcx, rbx
call fcn.1400ffac0
mov rcx, rbx
call fcn.1400fc9a0
mov esi, eax
test eax, eax
jne 0x1400ff7a8
mov rax, qword [rbx + 0x218]
mov qword [rdi + 0x3d8], rax
mov rax, qword [rbx + 0x2b0]
mov qword [rdi + 0x3e0], rax
cmp byte [rdi + 0x30f], sil
je 0x1400ff912
mov byte [r13], sil
jmp 0x1400ff92a
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.1400fe7c0
mov esi, eax
test eax, eax
jne 0x1400ff7a8
mov r14, qword [rbx + 0x18]
lea r12, [fcn.140046e50]
add r14, 0x1d8
mov rbp, r15
nop
mov rdi, qword [r14]
mov esi, r15d
test rdi, rdi
je 0x1400ff988
nop dword [rax + rax]
mov rax, qword [rdi]
mov r10, qword [rax + 0x50]
cmp r12, r10
je 0x1400ff977
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov rcx, rdi
lea r8d, [r9 + 4]
call r10
mov esi, eax
test eax, eax
jne 0x1400ff980
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x1400ff950
test esi, esi
jne 0x1400ff7a8
inc rbp
add r14, 8
cmp rbp, 2
jb 0x1400ff940
jmp 0x1400ff7a8