Function at 0x140119270
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r15
sub rsp, 0x88
mov rax, qword [0x1402dc040]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [rcx + 0xd8]
xor ebp, ebp
mov qword [rsp + 0x60], r8
mov r13, r8
mov qword [rsp + 0x30], rdx
mov r12, rdx
mov qword [rsp + 0x50], rbp
mov rbx, rcx
mov byte [rsp + 0x59], bpl
mov byte [rsp + 0x58], bpl
test rax, rax
je 0x1401192cf
movsxd r15, dword [rax + 0x190]
mov ecx, dword [rax + 0x194]
jmp 0x1401192d4
mov r15, rbp
mov ecx, ebp
mov byte [r8], bpl
mov qword [rdx], rbp
movsxd rax, ecx
mov qword [rsp + 0x48], rax
cmp qword [rbx + 0x1198], rbp
jne 0x1401192f5
mov esi, 3
jmp 0x140119f06
mov rcx, rbx
mov qword [rsp + 0xd8], rdi
call fcn.140116360
mov qword [rsp + 0x40], rax
mov rdi, rax
test rax, rax
je 0x140119428
mov rdx, rax
mov qword [r12], rax
mov rcx, rbx
call fcn.140116770
mov esi, eax
test eax, eax
jne 0x140119efe
mov rcx, qword [rbx + 0x960]
test rcx, rcx
je 0x140119351
call qword [case.0x140114cc7.0]
mov qword [rdi + 0x1e0], rax
test rax, rax
je 0x140119428
mov rcx, qword [rbx + 0x930]
test rcx, rcx
je 0x140119373
call qword [case.0x140114cc7.0]
mov qword [rdi + 0x1e8], rax
test rax, rax
je 0x140119428
mov rcx, qword [rbx + 0x938]
test rcx, rcx
je 0x1401193a2
call qword [case.0x140114cc7.0]
mov qword [rdi + 0x748], rax
test rax, rax
je 0x140119428
movzx eax, byte [rbx + 0xacb]
mov byte [rdi + 0x35a], al
mov rdx, rdi
mov rcx, rbx
call fcn.140117f20
mov esi, eax
test eax, eax
jne 0x140119efe
mov rax, qword [rdi + 0x368]
test byte [rax + 0x8c], 1
je 0x1401193d7
cmp byte [rdi + 0x340], bpl
je 0x1401193d7
mov byte [rdi + 0x343], 1
movzx eax, word [rbx + 0x228]
test ax, ax
je 0x140119432
cmp byte [rbx + 0x1300], bpl
je 0x140119432
mov r9d, eax
mov dword [rdi + 0x764], eax
lea r8, [0x1402a8780]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x68]
call sym.CheraxLoader.exe_curl_msnprintf
mov rcx, qword [rbx + 0x1150]
lea r8, [rsp + 0x68]
xor r9d, r9d
mov edx, 6
call sym.CheraxLoader.exe_curl_url_set
test eax, eax
je 0x140119432
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140119efe
mov rdx, rdi
mov rcx, rbx
call fcn.140118490
mov esi, eax
test eax, eax
jne 0x140119efe
mov rax, qword [rdi + 0x360]
lea rcx, str.anonymous
mov qword [rsp + 0x80], r14
mov esi, ebp
lea r14, str.ftp_example.com
test byte [rax + 0x8c], 0x20
je 0x140119478
cmp qword [rbx + 0x12d8], rsi
je 0x140119482
lea rcx, [0x14021fbe9]
mov r14, rcx
cmp qword [rdi + 0x1c8], rsi
jne 0x1401194a7
call qword [case.0x140114cc7.0]
mov qword [rdi + 0x1c8], rax
test rax, rax
jne 0x1401194a7
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140119ef6
mov ebp, reloc.WLDAP32.dll_Ordinal_27
cmp qword [rdi + 0x1d0], rsi
jne 0x1401194cb
mov rcx, r14
call qword [case.0x140114cc7.0]
test rax, rax
mov qword [rdi + 0x1d0], rax
cmove esi, ebp
test esi, esi
jne 0x140119ef6
mov r8, qword [rbx + 0x530]
mov rdx, rdi
mov rcx, rbx
call fcn.140118b60
mov esi, eax
test eax, eax
jne 0x140119ef6
cmp byte [rdi + 0x340], al
je 0x140119505
mov rax, qword [rdi + 0xd8]
mov qword [rdi + 0xe0], rax
cmp byte [rdi + 0x341], 0
je 0x14011951c
mov rax, qword [rdi + 0xa0]
mov qword [rdi + 0xa8], rax
cmp byte [rdi + 0x349], 0
je 0x1401195af
mov rax, qword [rdi + 0x80]
mov qword [rdi + 0x88], rax
mov rdx, rax
mov r8, qword [rdi + 0x50]
test rax, rax
je 0x14011959e
test r8, r8
je 0x1401195af
cmp byte [rax], 0
je 0x140119575
lea r9, [0x14026b9b0]
movzx eax, byte [r8]
test al, al
je 0x140119575
movzx ecx, byte [rdx]
movzx eax, byte [rax + r9]
cmp byte [rcx + r9], al
jne 0x140119596
inc rdx
inc r8
cmp byte [rdx], 0
jne 0x140119554
xor eax, eax
cmp byte [rdx], al
mov ecx, eax
sete cl
cmp byte [r8], al
setne al
xor ecx, eax
xor r14d, r14d
test ecx, ecx
je 0x1401195b2
mov byte [rdi + 0x349], 0
jmp 0x1401195b2
xor r14d, r14d
mov ecx, r14d
jmp 0x140119589
test r8, r8
jne 0x1401195af
xor r14d, r14d
mov byte [rdi + 0x349], r14b
jmp 0x1401195b2
xor r14d, r14d
movzx ecx, byte [rdi + 0x34a]
test cl, cl
je 0x1401195d4
mov eax, dword [rdi + 0x764]
cmp dword [rdi + 0x768], eax
jne 0x1401195d4
mov byte [rdi + 0x34a], 0
xor cl, cl
cmp byte [rdi + 0x349], 0
jne 0x1401195e1
test cl, cl
je 0x1401195f1
cmp byte [rdi + 0x340], 0
je 0x1401195f1
mov byte [rdi + 0x343], 1
mov rax, qword [rdi + 0x360]
mov r8, qword [rax + 8]
test r8, r8
je 0x14011961b
mov rdx, rdi
mov rcx, rbx
call r8
mov esi, eax
test eax, eax
jne 0x140119ef6
mov rax, qword [rdi + 0x360]
cmp dword [rdi + 0x15c], 0
jge 0x140119630
mov eax, dword [rax + 0x80]
mov dword [rdi + 0x15c], eax
mov rax, qword [rdi + 0x360]
test byte [rax + 0x8c], 0x10
je 0x14011982b
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14010d300
mov r8, qword [rdi + 0x360]
lea rdx, [rsp + 0x5a]
mov rcx, rbx
call qword [r8 + Ordinal_41]
mov esi, eax
test eax, eax
jne 0x14011981b
mov rdx, rdi
mov rcx, rbx
call fcn.140107aa0
mov rcx, rbx
call fcn.14011dbb0
mov esi, eax
test eax, eax
jne 0x140119ef6
mov rcx, rbx
call fcn.1401170d0
mov esi, eax
test eax, eax
je 0x1401196b1
mov rax, qword [rdi + 0x360]
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x140119ef6
cmp byte [rbx + 0x1f2], 0
mov r14, 0xffffffffffffffff
mov rcx, qword [rbx + 0x20]
mov edx, r14d
je 0x1401196e2
mov r8, qword [rbx + 0x168]
test r8, r8
je 0x1401196e2
mov rax, qword [r8 + 0x18]
cmp qword [r8 + 0x10], rax
jae 0x1401196e2
mov al, 1
jmp 0x1401196e4
xor al, al
cmp byte [rcx + 0x356], 0
jne 0x1401196fa
cmp byte [rcx + 0x774], 0x14
jae 0x1401196fa
test al, al
je 0x140119704
test al, al
mov eax, 0
cmovne edx, eax
mov qword [rcx + 0x388], r14
mov qword [rcx + 0x380], r14
mov byte [rbx + 0x1ef], 0
mov qword [rbx + 0xf0], r14
mov byte [rbx + 0x1e1], 0
cmp byte [rbx + 0x1f0], 0
jne 0x14011981b
cmp edx, r14d
je 0x14011981b
cmp byte [rbx + 0x1303], 0
je 0x140119814
mov rax, qword [rcx + 0x360]
test dword [rax + 0x84], 0xc0000003
je 0x14011980a
cmp byte [0x1402df141], 0
mov dword [rbx + 0x150], 1
je 0x1401197ad
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402df138]
mov rax, qword [rsp + 0x60]
cqo
idiv r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x60]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
jmp 0x1401197d8
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
mov ecx, edx
mov qword [rsp + 0x30], rcx
imul ecx, edx, 0x3e8
sub r8d, ecx
imul eax, r8d, 0x3e8
mov dword [rsp + 0x38], eax
xor r8d, r8d
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rbx
movups xmmword [rbx + 0x140], xmm0
movsxd rdx, dword [rbx + 0xa3c]
call fcn.14010b990
mov rdx, rdi
mov rcx, rbx
call fcn.14011a240
jmp 0x140119ef6
mov dword [rbx + 0x150], 2
or dword [rbx + 0x13c], 2
mov rdx, rdi
mov rcx, rbx
call fcn.14011a240
jmp 0x140119ef6
lea rax, [0x14010c410]
lea rcx, [0x14010c3a0]
mov qword [rdi + 0x230], rcx
mov qword [rdi + 0x240], rax
mov qword [rdi + 0x238], rcx
mov rcx, rbx
mov qword [rdi + 0x248], rax
movzx eax, byte [rbx + 0xac4]
mov byte [rdi + 0x357], al
mov rax, qword [rbx + 0x800]
mov qword [rbx + 0x548], rax
mov rax, qword [rbx + 0x810]
mov qword [rbx + 0x550], rax
mov rax, qword [rbx + 0x858]
mov qword [rbx + 0x580], rax
mov rax, qword [rbx + 0x868]
mov qword [rbx + 0x558], rax
mov rax, qword [rbx + 0x9d0]
mov qword [rbx + 0x598], rax
mov rax, qword [rbx + 0x830]
mov qword [rbx + 0x568], rax
mov rax, qword [rbx + 0x840]
mov qword [rbx + 0x570], rax
mov rax, qword [rbx + 0x820]
mov qword [rbx + 0x578], rax
mov rax, qword [rbx + 0x9b0]
mov qword [rbx + 0x588], rax
mov rax, qword [rbx + 0x9e0]
mov qword [rbx + 0x590], rax
mov rax, qword [rbx + 0x988]
mov qword [rbx + 0x5a0], rax
mov rax, qword [rbx + 0x740]
mov qword [rbx + 0x5d0], rax
mov rax, qword [rbx + 0x798]
mov qword [rbx + 0x5d8], rax
mov rax, qword [rbx + 0x7b8]
mov qword [rbx + 0x5e8], rax
mov rax, qword [rbx + 0x7a8]
mov qword [rbx + 0x5f0], rax
mov rax, qword [rbx + 0x730]
mov qword [rbx + 0x560], rax
mov rax, qword [rbx + 0x9c0]
mov qword [rbx + 0x5e0], rax
mov rax, qword [rbx + 0x808]
mov qword [rbx + 0x600], rax
mov rax, qword [rbx + 0x818]
mov qword [rbx + 0x608], rax
mov rax, qword [rbx + 0x838]
mov qword [rbx + 0x620], rax
mov rax, qword [rbx + 0x848]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x828]
mov qword [rbx + 0x630], rax
mov rax, qword [rbx + 0x9b8]
mov qword [rbx + 0x640], rax
mov rax, qword [rbx + 0x9e8]
mov qword [rbx + 0x648], rax
mov rax, qword [rbx + 0x870]
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x9d8]
mov qword [rbx + 0x650], rax
mov rax, qword [rbx + 0x860]
mov qword [rbx + 0x638], rax
mov rax, qword [rbx + 0x748]
mov qword [rbx + 0x688], rax
mov rax, qword [rbx + 0x7a0]
mov qword [rbx + 0x690], rax
mov rax, qword [rbx + 0x7c0]
mov qword [rbx + 0x6a0], rax
mov rax, qword [rbx + 0x7b0]
mov qword [rbx + 0x6a8], rax
mov rax, qword [rbx + 0x738]
mov qword [rbx + 0x618], rax
mov rax, qword [rbx + 0x9c8]
mov qword [rbx + 0x698], rax
call fcn.140115230
cmp byte [rbx + 0xaba], 0
je 0x140119a4e
cmp dword [rbx + 0xd08], 0
je 0x140119c96
cmp byte [rbx + 0xa99], 0
jne 0x140119c96
lea rax, [rsp + 0x58]
mov rdx, rdi
lea r9, [rsp + 0x59]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.1401154b0
test al, al
je 0x140119c96
cmp qword [rdi + 0x1c8], 0
mov rsi, qword [rsp + 0x50]
je 0x140119ae8
mov rcx, qword [rsi + 0x1c8]
call qword [fcn.14016f1de]
mov rcx, qword [rsi + 0x1d0]
xor r15d, r15d
mov qword [rsi + 0x1c8], r15
call qword [fcn.14016f1de]
mov qword [rsi + 0x1d0], r15
mov rax, qword [rdi + 0x1c8]
mov qword [rsi + 0x1c8], rax
mov rax, qword [rdi + 0x1d0]
mov qword [rsi + 0x1d0], rax
mov qword [rdi + 0x1c8], r15
mov qword [rdi + 0x1d0], r15
jmp 0x140119aeb
xor r15d, r15d
movzx eax, byte [rdi + 0x342]
mov byte [rsi + 0x342], al
test al, al
je 0x140119ba4
mov rcx, qword [rsi + 0xf0]
call qword [fcn.14016f1de]
mov rcx, qword [rsi + 0xb8]
mov qword [rsi + 0xf0], r15
call qword [fcn.14016f1de]
mov rcx, qword [rsi + 0xf8]
mov qword [rsi + 0xb8], r15
call qword [fcn.14016f1de]
mov rcx, qword [rsi + 0xc0]
mov qword [rsi + 0xf8], r15
call qword [fcn.14016f1de]
mov qword [rsi + 0xc0], r15
mov rax, qword [rdi + 0xf0]
mov qword [rsi + 0xf0], rax
mov rax, qword [rdi + 0xb8]
mov qword [rsi + 0xb8], rax
mov rax, qword [rdi + 0xf8]
mov qword [rsi + 0xf8], rax
mov rax, qword [rdi + 0xc0]
mov qword [rsi + 0xc0], rax
mov qword [rdi + 0xf0], r15
mov qword [rdi + 0xb8], r15
mov qword [rdi + 0xf8], r15
mov qword [rdi + 0xc0], r15
mov rcx, qword [rsi + 0x40]
call qword [fcn.14016f1de]
mov rcx, qword [rsi + 0x70]
mov qword [rsi + 0x40], r15
call qword [fcn.14016f1de]
mov qword [rsi + 0x70], r15
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rdi + 0x50]
movups xmmword [rsi + 0x50], xmm1
mov qword [rdi + 0x40], r15
movups xmm0, xmmword [rdi + 0x70]
mov qword [rdi + 0x48], r15
movups xmmword [rsi + 0x70], xmm0
movups xmm1, xmmword [rdi + 0x80]
movups xmmword [rsi + 0x80], xmm1
mov eax, dword [rdi + 0x768]
mov qword [rdi + 0x70], r15
mov rcx, qword [rsi + 0x60]
mov dword [rsi + 0x768], eax
mov eax, dword [rdi + 0x764]
mov dword [rsi + 0x764], eax
call qword [fcn.14016f1de]
mov qword [rsi + 0x60], r15
mov rdx, rdi
mov rax, qword [rdi + 0x60]
mov rcx, rbx
mov qword [rsi + 0x60], rax
mov qword [rdi + 0x60], r15
mov byte [rsi + 0x347], 1
call fcn.140114b20
mov rdi, qword [rsp + 0x50]
mov qword [r12], rdi
cmp qword [rdi + 0xa0], 0
je 0x140119c52
mov r9, qword [rdi + 0xa8]
jmp 0x140119c69
cmp qword [rdi + 0xd8], 0
je 0x140119c65
mov r9, qword [rdi + 0xe0]
jmp 0x140119c69
mov r9, qword [rdi + 0x58]
cmp byte [rdi + 0x345], 0
lea rax, str.proxy
lea r8, str.host
mov rcx, rbx
cmovne r8, rax
lea rdx, str.Re_using_existing_connection_with__s__s
call fcn.140102070
jmp 0x14011a04f
mov rax, qword [rdi + 0x360]
test dword [rax + 0x8c], 0x100
je 0x140119cb9
cmp byte [rbx + 0xac5], 0
je 0x140119cb9
mov byte [rdi + 0x358], 1
cmp byte [rsp + 0x58], 0
jne 0x140119ecf
mov r8, qword [rbx + 0xc80]
mov rdx, rdi
mov rcx, rbx
call fcn.14011da20
mov r13, rax
test r15, r15
je 0x140119f26
test rax, rax
je 0x140119f26
cmp qword [rax + 8], r15
jb 0x140119f26
xor eax, eax
mov r14, 0xffffffffffffffff
cmp byte [0x1402df141], al
mov esi, eax
je 0x140119d42
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402df138]
mov rax, qword [rsp + 0x68]
cqo
idiv r8
mov r11, rax
mov rax, qword [rsp + 0x68]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
mov r12, rax
jmp 0x140119d69
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
mov r11d, edx
sub r8d, ecx
imul r12d, r8d, 0x3e8
mov r9, qword [r13 + 0x10]
test r9, r9
je 0x140119e78
movabs rdx, 0x20c49ba5e353f7
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0xffdf3b645a1cac09
movabs rbp, 0x8000000000000000
nop
mov r10, qword [r9]
cmp qword [r10 + 0x408], 0
jne 0x140119e1f
movups xmm0, xmmword [r10 + 0x210]
mov r8, r11
movq rax, xmm0
sub r8, rax
cmp r8, rdx
jl 0x140119dca
mov rcx, rdi
jmp 0x140119e0a
cmp r8, rcx
jg 0x140119dd4
mov rcx, rbp
jmp 0x140119e0a
mov ecx, r12d
psrldq xmm0, 8
movd eax, xmm0
sub ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
movabs rdx, 0x20c49ba5e353f7
imul rax, r8, 0x3e8
add rcx, rax
cmp rcx, r14
jle 0x140119e15
mov r14, rcx
mov rsi, r10
movabs rcx, 0xffdf3b645a1cac09
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x140119da0
mov rdi, qword [rsp + 0x40]
mov ebp, reloc.WLDAP32.dll_Ordinal_27
test rsi, rsi
je 0x140119e78
mov rdx, qword [r13 + 0x10]
test rdx, rdx
je 0x140119e6d
cmp qword [rdx], rsi
je 0x140119e54
mov rdx, qword [rdx + 0x10]
test rdx, rdx
jne 0x140119e44
jmp 0x140119e6d
lea rcx, [r13 + 0x10]
xor r8d, r8d
call fcn.1401305e0
dec qword [r13 + 8]
xor eax, eax
mov qword [rsi + 0x740], rax
mov rax, qword [rbx + 0xc80]
dec qword [rax + 0x30]
mov r8, qword [rbx + 0xe8]
test r8, r8
je 0x140119ea2
test byte [r8 + 4], 0x20
je 0x140119ea2
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x140119ea2
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rcx, rbx
test rsi, rsi
je 0x140119ebd
xor r8d, r8d
mov rdx, rsi
call fcn.140114cd0
xor r14d, r14d
jmp 0x140119f50
mov r8, r15
lea rdx, str.No_more_connections_allowed_to_host:__zu
call fcn.140102070
xor r14d, r14d
lea rdx, str.No_connections_available.
mov rcx, rbx
call fcn.140102070
mov rdx, rdi
mov rcx, rbx
call fcn.140114b20
mov rax, qword [rsp + 0x30]
mov esi, 0x59
mov qword [rax], r14
mov r14, qword [rsp + 0x80]
mov rdi, qword [rsp + 0xd8]
mov eax, esi
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14016dfe0
add rsp, 0x88
pop r15
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rbx + 0xe8]
test r8, r8
je 0x140119f50
test byte [r8 + 4], 0x20
je 0x140119f50
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x140119f50
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x140119f82
mov rcx, rbx
call fcn.14011d9a0
cmp rax, rsi
jb 0x140119f82
mov rcx, rbx
call fcn.14011e2f0
mov rcx, rbx
test rax, rax
je 0x140119fb7
xor r8d, r8d
mov rdx, rax
call fcn.140114cd0
lea rdx, [rdi + 0x260]
lea rcx, [rbx + 0x548]
call fcn.140104630
test al, al
je 0x140119fb0
lea rdx, [rdi + 0x2d0]
lea rcx, [rbx + 0x600]
call fcn.140104630
test al, al
jne 0x140119fc8
mov esi, ebp
jmp 0x140119ef6
lea rdx, str.No_connections_available_in_cache
call fcn.140102070
jmp 0x140119ecf
mov rdx, rdi
mov rcx, rbx
call fcn.140107aa0
mov rcx, rbx
call fcn.14011dbb0
mov esi, eax
test eax, eax
jne 0x140119ef6
test byte [rbx + 0xd6c], 0x28
je 0x14011a018
cmp byte [rbx + 0xd74], al
je 0x14011a018
lea rdx, str.NTLM_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140102070
xor r15d, r15d
mov dword [rbx + 0xd6c], r15d
mov byte [rbx + 0xd74], r15b
jmp 0x14011a01b
xor r15d, r15d
test byte [rbx + 0xd7c], 0x28
je 0x14011a04a
cmp byte [rbx + 0xd84], 0
je 0x14011a04a
lea rdx, str.NTLM_proxy_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140102070
mov dword [rbx + 0xd7c], r15d
mov byte [rbx + 0xd84], 0
mov r13, qword [rsp + 0x60]
mov rdx, rdi
mov rcx, rbx
call fcn.14011a240
mov rcx, rbx
call fcn.1401170d0
mov esi, eax
test eax, eax
jne 0x140119ef6
cmp byte [rdi + 0x347], al
je 0x14011a07a
mov byte [r13], al
jmp 0x14011a092
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.140118ff0
mov esi, eax
test eax, eax
jne 0x140119ef6
mov r14, qword [rbx + 0x20]
lea r12, [fcn.140046f00]
add r14, 0x250
mov rbp, r15
nop word [rax + rax]
mov rdi, qword [r14]
mov esi, r15d
test rdi, rdi
je 0x14011a0fa
nop dword [rax + rax]
mov rax, qword [rdi]
mov r10, qword [rax + 0x50]
cmp r12, r10
je 0x14011a0e9
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8d, 4
mov rdx, rbx
mov rcx, rdi
call r10
mov esi, eax
test eax, eax
jne 0x14011a0f2
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x14011a0c0
test esi, esi
jne 0x140119ef6
inc rbp
add r14, 8
cmp rbp, 2
jb 0x14011a0b0
jmp 0x140119ef6