Function at 0x140103cb0
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r14
sub rsp, 0x98
mov rax, qword [0x1402ba030]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rax, qword [rcx + 0xd0]
xor ebp, ebp
mov qword [rsp + 0x50], r8
mov r13, r8
mov qword [rsp + 0x30], rdx
mov r12, rdx
mov qword [rsp + 0x40], rcx
mov rbx, rcx
mov qword [rsp + 0x60], rbp
mov byte [rsp + 0x69], bpl
mov byte [rsp + 0x68], bpl
test rax, rax
je 0x140103d17
movsxd r14, dword [rax + 0x14c]
mov ecx, dword [rax + 0x150]
jmp 0x140103d1c
mov r14, rbp
mov ecx, ebp
mov byte [r8], bpl
mov qword [rdx], rbp
movsxd rax, ecx
mov qword [rsp + 0x58], rax
cmp qword [rbx + 0x11c0], rbp
jne 0x140103d3d
mov esi, 3
jmp 0x140104a28
mov rcx, rbx
mov qword [rsp + 0xe8], rdi
call fcn.140100da0
mov qword [rsp + 0x48], rax
mov rdi, rax
test rax, rax
je 0x140103e6f
mov rdx, rax
mov qword [r12], rax
mov rcx, rbx
call fcn.140101270
mov esi, eax
test eax, eax
jne 0x140104a20
mov rcx, qword [rbx + 0x950]
test rcx, rcx
je 0x140103d99
call qword [case.0x1400fa348.0]
mov qword [rdi + 0x168], rax
test rax, rax
je 0x140103e6f
mov rcx, qword [rbx + 0x920]
test rcx, rcx
je 0x140103dbb
call qword [case.0x1400fa348.0]
mov qword [rdi + 0x170], rax
test rax, rax
je 0x140103e6f
mov rcx, qword [rbx + 0x928]
test rcx, rcx
je 0x140103dea
call qword [case.0x1400fa348.0]
mov qword [rdi + 0x708], rax
test rax, rax
je 0x140103e6f
movzx eax, byte [rbx + 0xabb]
mov byte [rdi + 0x323], al
mov rdx, rdi
mov rcx, rbx
call fcn.1401027a0
mov esi, eax
test eax, eax
jne 0x140104a20
mov rax, qword [rdi + 0x330]
test byte [rax + 0x8c], 1
je 0x140103e1f
cmp byte [rdi + 0x308], bpl
je 0x140103e1f
mov byte [rdi + 0x30b], 1
movzx eax, word [rbx + 0x200]
test ax, ax
je 0x140103e79
cmp byte [rbx + 0x12d4], bpl
je 0x140103e79
mov r9d, eax
mov dword [rdi + 0x730], eax
lea r8, [0x14028a6b0]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call sym.CheraxLoader.exe_curl_msnprintf
mov rcx, qword [rbx + 0x1170]
lea r8, [rsp + 0x70]
xor r9d, r9d
lea edx, [r9 + 6]
call sym.CheraxLoader.exe_curl_url_set
test eax, eax
je 0x140103e79
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140104a20
mov rdx, rdi
mov rcx, rbx
call fcn.140102ed0
mov esi, eax
test eax, eax
jne 0x140104a20
mov rax, qword [rdi + 0x328]
lea rcx, str.anonymous
mov qword [rsp + 0x90], r15
mov esi, ebp
lea r15, str.ftp_example.com
test byte [rax + 0x8c], 0x20
je 0x140103ebf
cmp qword [rbx + 0x12b0], rsi
je 0x140103ec9
lea rcx, [0x1401fe219]
mov r15, rcx
cmp qword [rdi + 0x150], rsi
jne 0x140103eec
call qword [case.0x1400fa348.0]
mov qword [rdi + 0x150], rax
test rax, rax
jne 0x140103eec
lea esi, [rax + 0x1b]
jmp 0x140104a18
mov ebp, reloc.WLDAP32.dll_Ordinal_27
cmp qword [rdi + 0x158], rsi
jne 0x140103f10
mov rcx, r15
call qword [case.0x1400fa348.0]
test rax, rax
mov qword [rdi + 0x158], rax
cmove esi, ebp
test esi, esi
jne 0x140104a18
mov r8, qword [rbx + 0x518]
mov rdx, rdi
mov rcx, rbx
call fcn.1401035a0
mov esi, eax
test eax, eax
jne 0x140104a18
movzx r9d, byte [rdi + 0x308]
test r9b, r9b
je 0x140103f4f
mov rax, qword [rdi + 0xf8]
mov qword [rdi + 0x100], rax
cmp byte [rdi + 0x309], 0
je 0x140103f66
mov rax, qword [rdi + 0xc0]
mov qword [rdi + 0xc8], rax
cmp byte [rdi + 0x311], 0
mov r15, r14
je 0x140103fdd
mov rdx, qword [rdi + 0xa0]
mov r8, qword [rdi + 0x70]
test rdx, rdx
je 0x140103fd1
test r8, r8
je 0x140103fdd
cmp byte [rdx], 0
je 0x140103fb4
lea r10, [0x14024e630]
movzx eax, byte [r8]
test al, al
je 0x140103fb4
movzx ecx, byte [rdx]
movzx eax, byte [rax + r10]
cmp byte [rcx + r10], al
jne 0x140103fcb
inc rdx
inc r8
cmp byte [rdx], 0
jne 0x140103f93
xor eax, eax
cmp byte [rdx], al
mov ecx, eax
sete cl
cmp byte [r8], al
setne al
xor ecx, eax
test ecx, ecx
je 0x140103fdd
jmp 0x140103fd6
xor eax, eax
mov ecx, eax
jmp 0x140103fc5
test r8, r8
jne 0x140103fdd
mov byte [rdi + 0x311], 0
movzx ecx, byte [rdi + 0x312]
test cl, cl
je 0x140103fff
mov eax, dword [rdi + 0x730]
cmp dword [rdi + 0x734], eax
jne 0x140103fff
mov byte [rdi + 0x312], 0
xor cl, cl
cmp byte [rdi + 0x311], 0
jne 0x14010400c
test cl, cl
je 0x140104018
test r9b, r9b
je 0x140104018
mov byte [rdi + 0x30b], 1
mov rax, qword [rdi + 0x328]
mov rcx, rax
mov r8, qword [rax + 8]
test r8, r8
je 0x140104048
mov rdx, rdi
mov rcx, rbx
call r8
mov esi, eax
test eax, eax
jne 0x140104a18
mov rax, qword [rdi + 0x328]
mov rcx, rax
cmp dword [rdi + 0x72c], 0
jge 0x14010405d
mov eax, dword [rax + 0x80]
mov dword [rdi + 0x72c], eax
test byte [rcx + 0x8c], 0x10
je 0x1401042f0
movups xmm0, xmmword [rdi + 0x120]
mov rbp, 0xffffffffffffffff
lea rdx, [rsp + 0x6a]
movups xmmword [rbx + 0x1388], xmm0
movups xmm1, xmmword [rdi + 0x130]
movups xmmword [rbx + 0x1398], xmm1
movsd xmm0, qword [rdi + 0x140]
movsd qword [rbx + 0x13a8], xmm0
mov eax, dword [rdi + 0x148]
mov dword [rbx + 0x13b0], eax
movzx eax, word [rdi + 0x14c]
mov word [rbx + 0x13b4], ax
mov byte [rbx + 0x13c0], 0
mov rax, qword [rdi + 0x328]
mov rcx, qword [rax]
mov qword [rbx + 0x13f8], rcx
mov rax, qword [rdi + 0x328]
mov ecx, dword [rax + 0x84]
and ecx, 0x3ffffff
mov dword [rbx + 0x1400], ecx
mov rcx, rbx
mov eax, dword [rdi + 0x72c]
mov dword [rbx + 0x13b8], eax
mov eax, dword [rdi + 0x730]
mov dword [rbx + 0x13bc], eax
mov dword [rbx + 0x13f0], ebp
mov rax, qword [rdi + 0x328]
call qword [rax + Ordinal_41]
mov esi, eax
test eax, eax
jne 0x1401042d8
mov rdx, rdi
mov rcx, rbx
call fcn.1400f34d0
mov rcx, rbx
call fcn.140107750
mov esi, eax
test eax, eax
jne 0x140104a18
mov rcx, rbx
call fcn.140101c10
mov esi, eax
test eax, eax
je 0x140104164
mov rax, qword [rdi + 0x328]
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x140104a18
mov rcx, qword [rbx + 0x18]
mov edx, ebp
mov r8, qword [rbx + 0x1b0]
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x140104192
cmp dword [r8 + 0x200], 1
jne 0x140104192
mov al, 1
jmp 0x140104194
xor al, al
cmp byte [rcx + 0x31f], 0
jne 0x1401041aa
cmp byte [rcx + 0x73f], 0x14
jae 0x1401041aa
test al, al
je 0x1401041b4
test al, al
mov eax, 0
cmovne edx, eax
mov qword [rcx + 0x350], rbp
mov qword [rcx + 0x348], rbp
mov byte [rbx + 0x1c9], 0
mov qword [rbx + 0xe8], rbp
mov byte [rbx + 0x1c1], 0
cmp byte [rbx + 0x1cb], 0
jne 0x1401042d8
cmp edx, ebp
je 0x1401042d8
cmp byte [rbx + 0x12d7], 0
je 0x1401042d1
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x1401042c7
cmp dword [r8 + 0x200], 2
jne 0x1401042c7
cmp byte [0x1402bcc60], 0
mov dword [rbx + 0x170], 1
je 0x14010426a
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402bcc58]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
jmp 0x140104295
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
mov ecx, edx
mov qword [rsp + 0x30], rcx
imul ecx, edx, 0x3e8
sub r8d, ecx
imul eax, r8d, 0x3e8
mov dword [rsp + 0x38], eax
xor r8d, r8d
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rbx
movups xmmword [rbx + 0x160], xmm0
movsxd rdx, dword [rbx + 0xa30]
call fcn.1400f75c0
mov rdx, rdi
mov rcx, rbx
call fcn.140104d30
jmp 0x140104a18
mov dword [rbx + 0x170], 2
or dword [rbx + 0x15c], 2
mov rdx, rdi
mov rcx, rbx
call fcn.140104d30
jmp 0x140104a18
lea rax, [0x1400fcf60]
lea rcx, [0x1400fcef0]
mov qword [rdi + 0x1b8], rcx
lea rdx, [rdi + 0x228]
mov qword [rdi + 0x1c8], rax
mov qword [rdi + 0x1c0], rcx
lea rcx, [rbx + 0x530]
mov qword [rdi + 0x1d0], rax
movzx eax, byte [rbx + 0xab4]
mov byte [rdi + 0x320], al
mov rax, qword [rbx + 0x7f0]
mov qword [rcx], rax
mov rax, qword [rbx + 0x800]
mov qword [rbx + 0x538], rax
mov rax, qword [rbx + 0x858]
mov qword [rbx + 0x540], rax
mov rax, qword [rbx + 0x9b8]
mov qword [rbx + 0x580], rax
mov rax, qword [rbx + 0x820]
mov qword [rbx + 0x550], rax
mov rax, qword [rbx + 0x830]
mov qword [rbx + 0x558], rax
mov rax, qword [rbx + 0x810]
mov qword [rbx + 0x560], rax
mov rax, qword [rbx + 0x998]
mov qword [rbx + 0x570], rax
mov rax, qword [rbx + 0x9c8]
mov qword [rbx + 0x578], rax
mov rax, qword [rbx + 0x978]
mov qword [rbx + 0x588], rax
mov rax, qword [rbx + 0x7f8]
mov qword [rbx + 0x5e8], rax
mov rax, qword [rbx + 0x808]
mov qword [rbx + 0x5f0], rax
mov rax, qword [rbx + 0x828]
mov qword [rbx + 0x608], rax
mov rax, qword [rbx + 0x838]
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x818]
mov qword [rbx + 0x618], rax
mov rax, qword [rbx + 0x9a0]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x9d0]
mov qword [rbx + 0x630], rax
mov rax, qword [rbx + 0x860]
mov qword [rbx + 0x5f8], rax
mov rax, qword [rbx + 0x9c0]
mov qword [rbx + 0x638], rax
mov rax, qword [rbx + 0x850]
mov qword [rbx + 0x620], rax
mov rax, qword [rbx + 0x738]
mov qword [rbx + 0x670], rax
mov rax, qword [rbx + 0x790]
mov qword [rbx + 0x678], rax
mov rax, qword [rbx + 0x7b0]
mov qword [rbx + 0x688], rax
mov rax, qword [rbx + 0x7a0]
mov qword [rbx + 0x690], rax
mov rax, qword [rbx + 0x728]
mov qword [rbx + 0x600], rax
mov rax, qword [rbx + 0x9b0]
mov qword [rbx + 0x680], rax
mov rax, qword [rbx + 0x848]
mov qword [rbx + 0x568], rax
mov rax, qword [rbx + 0x730]
mov qword [rbx + 0x5b8], rax
mov rax, qword [rbx + 0x788]
mov qword [rbx + 0x5c0], rax
mov rax, qword [rbx + 0x7a8]
mov qword [rbx + 0x5d0], rax
mov rax, qword [rbx + 0x798]
mov qword [rbx + 0x5d8], rax
mov rax, qword [rbx + 0x720]
mov qword [rbx + 0x548], rax
mov rax, qword [rbx + 0x9a8]
mov qword [rbx + 0x5c8], rax
call fcn.1400effb0
test al, al
je 0x14010451f
lea rdx, [rdi + 0x298]
lea rcx, [rbx + 0x5e8]
call fcn.1400effb0
test al, al
jne 0x140104526
mov esi, ebp
jmp 0x140104a18
mov rcx, rbx
call fcn.1400ffe10
cmp byte [rbx + 0xaaa], 0
je 0x140104544
cmp dword [rbx + 0xd70], 0
je 0x1401047bb
cmp byte [rbx + 0xa89], 0
jne 0x1401047bb
lea rax, [rsp + 0x68]
mov rdx, rdi
lea r9, [rsp + 0x69]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.140100090
test al, al
je 0x1401047bb
cmp qword [rdi + 0x150], 0
mov rsi, qword [rsp + 0x60]
je 0x1401045de
mov rcx, qword [rsi + 0x150]
call qword [0x1402ba0c8]
mov rcx, qword [rsi + 0x158]
xor r15d, r15d
mov qword [rsi + 0x150], r15
call qword [0x1402ba0c8]
mov qword [rsi + 0x158], r15
mov rax, qword [rdi + 0x150]
mov qword [rsi + 0x150], rax
mov rax, qword [rdi + 0x158]
mov qword [rsi + 0x158], rax
mov qword [rdi + 0x150], r15
mov qword [rdi + 0x158], r15
jmp 0x1401045e1
xor r15d, r15d
movzx eax, byte [rdi + 0x30a]
mov byte [rsi + 0x30a], al
test al, al
je 0x14010469a
mov rcx, qword [rsi + 0x110]
call qword [0x1402ba0c8]
mov rcx, qword [rsi + 0xd8]
mov qword [rsi + 0x110], r15
call qword [0x1402ba0c8]
mov rcx, qword [rsi + 0x118]
mov qword [rsi + 0xd8], r15
call qword [0x1402ba0c8]
mov rcx, qword [rsi + 0xe0]
mov qword [rsi + 0x118], r15
call qword [0x1402ba0c8]
mov qword [rsi + 0xe0], r15
mov rax, qword [rdi + 0x110]
mov qword [rsi + 0x110], rax
mov rax, qword [rdi + 0xd8]
mov qword [rsi + 0xd8], rax
mov rax, qword [rdi + 0x118]
mov qword [rsi + 0x118], rax
mov rax, qword [rdi + 0xe0]
mov qword [rsi + 0xe0], rax
mov qword [rdi + 0x110], r15
mov qword [rdi + 0xd8], r15
mov qword [rdi + 0x118], r15
mov qword [rdi + 0xe0], r15
mov rcx, qword [rsi + 0x60]
call qword [0x1402ba0c8]
mov rcx, qword [rsi + 0x90]
mov qword [rsi + 0x60], r15
call qword [0x1402ba0c8]
mov qword [rsi + 0x90], r15
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rdi + 0x70]
movups xmmword [rsi + 0x70], xmm1
mov qword [rdi + 0x60], r15
movups xmm0, xmmword [rdi + 0x90]
mov qword [rdi + 0x68], r15
movups xmmword [rsi + 0x90], xmm0
movups xmm1, xmmword [rdi + 0xa0]
movups xmmword [rsi + 0xa0], xmm1
mov eax, dword [rdi + 0x734]
mov qword [rdi + 0x90], r15
mov rcx, qword [rsi + 0x80]
mov dword [rsi + 0x734], eax
mov eax, dword [rdi + 0x730]
mov dword [rsi + 0x730], eax
call qword [0x1402ba0c8]
mov qword [rsi + 0x80], r15
mov rcx, rdi
mov rax, qword [rdi + 0x80]
mov qword [rsi + 0x80], rax
mov qword [rdi + 0x80], r15
call fcn.1400ff620
mov rdx, rdi
mov byte [rsi + 0x30f], 1
mov rcx, rbx
call fcn.1400ff6a0
mov rdi, qword [rsp + 0x60]
mov qword [r12], rdi
cmp qword [rdi + 0xc0], 0
je 0x14010476e
mov rax, qword [rdi + 0xc8]
jmp 0x140104785
cmp qword [rdi + 0xf8], 0
je 0x140104781
mov rax, qword [rdi + 0x100]
jmp 0x140104785
mov rax, qword [rdi + 0x78]
cmp byte [rdi + 0x30d], 0
lea rcx, str.proxy
mov r8d, dword [rdi + 0x48]
lea r9, str.host
cmovne r9, rcx
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea rdx, str.Re_using_existing_connection__ld_with__s__s
call fcn.140106050
jmp 0x140104b3a
mov rax, qword [rdi + 0x328]
test dword [rax + 0x8c], 0x100
je 0x1401047de
cmp byte [rbx + 0xab5], 0
je 0x1401047de
mov byte [rdi + 0x321], 1
cmp byte [rsp + 0x68], 0
jne 0x1401049ed
mov r8, qword [rbx + 0xc68]
mov rdx, rdi
mov rcx, rbx
call fcn.1401075c0
mov r14, rax
test r15, r15
je 0x140104a4b
test rax, rax
je 0x140104a4b
cmp qword [rax + 8], r15
jb 0x140104a4b
xor eax, eax
mov rbp, 0xffffffffffffffff
cmp byte [0x1402bcc60], al
mov esi, eax
je 0x140104867
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402bcc58]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov r12, rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
mov r13, rax
jmp 0x14010488e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
mov r12d, edx
sub r8d, ecx
imul r13d, r8d, 0x3e8
mov r9, qword [r14 + 0x10]
mov r10, r9
test r9, r9
je 0x140104997
movabs rdx, 0x20c49ba5e353f7
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0xffdf3b645a1cac09
movabs rbx, 0x8000000000000000
nop word [rax + rax]
mov r11, qword [r10]
cmp qword [r11 + 0x3d0], 0
jne 0x140104942
mov r8, r12
sub r8, qword [r11 + 0x198]
cmp r8, rdx
jl 0x1401048f1
mov rcx, rdi
jmp 0x14010492d
cmp r8, rcx
jg 0x1401048fb
mov rcx, rbx
jmp 0x14010492d
mov ecx, r13d
mov eax, 0x10624dd3
sub ecx, dword [r11 + 0x1a0]
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
movabs rdx, 0x20c49ba5e353f7
imul rax, r8, 0x3e8
add rcx, rax
cmp rcx, rbp
jle 0x140104938
mov rbp, rcx
mov rsi, r11
movabs rcx, 0xffdf3b645a1cac09
mov r10, qword [r10 + 0x10]
test r10, r10
jne 0x1401048d0
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
test rsi, rsi
je 0x140104997
nop word [rax + rax]
cmp qword [r9], rsi
je 0x140104970
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x140104960
jmp 0x14010498c
xor r8d, r8d
lea rcx, [r14 + 0x10]
mov rdx, r9
call fcn.1401124d0
dec qword [r14 + 8]
xor eax, eax
mov qword [rsi + 0x700], rax
mov rax, qword [rbx + 0xc68]
dec qword [rax + 0x30]
mov r8, qword [rbx + 0xe0]
test r8, r8
je 0x1401049c1
test byte [r8 + 4], 0x20
je 0x1401049c1
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1401049c1
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rcx, rbx
test rsi, rsi
je 0x1401049de
xor r8d, r8d
mov rdx, rsi
call fcn.1400ff8f0
mov r13, qword [rsp + 0x50]
jmp 0x140104a75
mov r8, r15
lea rdx, str.No_more_connections_allowed_to_host:__zu
call fcn.140106050
lea rdx, str.No_connections_available.
mov rcx, rbx
call fcn.140106050
mov rdx, rdi
mov rcx, rbx
call fcn.1400ff6a0
mov rax, qword [rsp + 0x30]
mov esi, 0x59
mov qword [rax], 0
mov r15, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xe8]
mov eax, esi
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.1401526c0
add rsp, 0x98
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rbx + 0xe0]
test r8, r8
je 0x140104a75
test byte [r8 + 4], 0x20
je 0x140104a75
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x140104a75
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rsi, qword [rsp + 0x58]
test rsi, rsi
je 0x140104aa7
mov rcx, rbx
call fcn.140107540
cmp rax, rsi
jb 0x140104aa7
mov rcx, rbx
call fcn.140107e60
mov rcx, rbx
test rax, rax
je 0x140104af7
xor r8d, r8d
mov rdx, rax
call fcn.1400ff8f0
mov rdx, rdi
mov rcx, rbx
call fcn.1400f34d0
mov rcx, rbx
call fcn.140107750
mov esi, eax
test eax, eax
jne 0x140104a18
test byte [rbx + 0xdd4], 0x28
je 0x140104b08
cmp byte [rbx + 0xddc], al
je 0x140104b08
lea rdx, str.NTLM_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140106050
xor r15d, r15d
mov dword [rbx + 0xdd4], r15d
mov byte [rbx + 0xddc], r15b
jmp 0x140104b0b
lea rdx, str.No_connections_available_in_cache
call fcn.140106050
jmp 0x1401049ed
xor r15d, r15d
test byte [rbx + 0xde4], 0x28
je 0x140104b3a
cmp byte [rbx + 0xdec], 0
je 0x140104b3a
lea rdx, str.NTLM_proxy_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140106050
mov dword [rbx + 0xde4], r15d
mov byte [rbx + 0xdec], 0
mov rdx, rdi
mov rcx, rbx
call fcn.140104d30
mov rcx, rbx
call fcn.140101c10
mov esi, eax
test eax, eax
jne 0x140104a18
mov rax, qword [rbx + 0x218]
mov qword [rdi + 0x3d8], rax
mov rax, qword [rbx + 0x2b0]
mov qword [rdi + 0x3e0], rax
cmp byte [rdi + 0x30f], sil
je 0x140104b82
mov byte [r13], sil
jmp 0x140104b9a
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.140103a30
mov esi, eax
test eax, eax
jne 0x140104a18
mov r14, qword [rbx + 0x18]
lea r12, [fcn.140046ee0]
add r14, 0x1d8
mov rbp, r15
nop
mov rdi, qword [r14]
mov esi, r15d
test rdi, rdi
je 0x140104bf8
nop dword [rax + rax]
mov rax, qword [rdi]
mov r10, qword [rax + 0x50]
cmp r12, r10
je 0x140104be7
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov rcx, rdi
lea r8d, [r9 + 4]
call r10
mov esi, eax
test eax, eax
jne 0x140104bf0
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x140104bc0
test esi, esi
jne 0x140104a18
inc rbp
add r14, 8
cmp rbp, 2
jb 0x140104bb0
jmp 0x140104a18