Function at 0x1400ef260
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r14
sub rsp, 0x98
mov rax, qword [0x14025d030]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov rax, qword [rcx + 0xd0]
xor ebp, ebp
mov qword [rsp + 0x50], r8
mov r13, r8
mov qword [rsp + 0x30], rdx
mov r12, rdx
mov qword [rsp + 0x40], rcx
mov rbx, rcx
mov qword [rsp + 0x60], rbp
mov byte [rsp + 0x69], bpl
mov byte [rsp + 0x68], bpl
test rax, rax
je 0x1400ef2c7
movsxd r14, dword [rax + 0x14c]
mov ecx, dword [rax + 0x150]
jmp 0x1400ef2cc
mov r14, rbp
mov ecx, ebp
mov byte [r8], bpl
mov qword [rdx], rbp
movsxd rax, ecx
mov qword [rsp + 0x58], rax
cmp qword [rbx + 0x11c0], rbp
jne 0x1400ef2ed
mov esi, 3
jmp 0x1400effdb
mov rcx, rbx
mov qword [rsp + 0xe8], rdi
call fcn.1400ec350
mov qword [rsp + 0x48], rax
mov rdi, rax
test rax, rax
je 0x1400ef41f
mov rdx, rax
mov qword [r12], rax
mov rcx, rbx
call fcn.1400ec820
mov esi, eax
test eax, eax
jne 0x1400effd3
mov rcx, qword [rbx + 0x950]
test rcx, rcx
je 0x1400ef349
call qword [case.0x1400e58f8.0]
mov qword [rdi + 0x168], rax
test rax, rax
je 0x1400ef41f
mov rcx, qword [rbx + 0x920]
test rcx, rcx
je 0x1400ef36b
call qword [case.0x1400e58f8.0]
mov qword [rdi + 0x170], rax
test rax, rax
je 0x1400ef41f
mov rcx, qword [rbx + 0x928]
test rcx, rcx
je 0x1400ef39a
call qword [case.0x1400e58f8.0]
mov qword [rdi + 0x708], rax
test rax, rax
je 0x1400ef41f
movzx eax, byte [rbx + 0xabb]
mov byte [rdi + 0x323], al
mov rdx, rdi
mov rcx, rbx
call fcn.1400edd50
mov esi, eax
test eax, eax
jne 0x1400effd3
mov rax, qword [rdi + 0x330]
test byte [rax + 0x8c], 1
je 0x1400ef3cf
cmp byte [rdi + 0x308], bpl
je 0x1400ef3cf
mov byte [rdi + 0x30b], 1
movzx eax, word [rbx + 0x200]
test ax, ax
je 0x1400ef429
cmp byte [rbx + 0x12d4], bpl
je 0x1400ef429
mov r9d, eax
mov dword [rdi + 0x730], eax
lea r8, [0x1402303cc]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x70]
call sym.CheraxLoader.exe_curl_msnprintf
mov rcx, qword [rbx + 0x1170]
lea r8, [rsp + 0x70]
xor r9d, r9d
lea edx, [r9 + 6]
call sym.CheraxLoader.exe_curl_url_set
test eax, eax
je 0x1400ef429
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400effd3
mov rdx, rdi
mov rcx, rbx
call fcn.1400ee480
mov esi, eax
test eax, eax
jne 0x1400effd3
mov rax, qword [rdi + 0x328]
lea rcx, str.anonymous
mov qword [rsp + 0x90], r15
mov esi, ebp
lea r15, str.ftp_example.com
test byte [rax + 0x8c], 0x20
je 0x1400ef46f
cmp qword [rbx + 0x12b0], rsi
je 0x1400ef479
lea rcx, [0x1401e8131]
mov r15, rcx
cmp qword [rdi + 0x150], rsi
jne 0x1400ef49c
call qword [case.0x1400e58f8.0]
mov qword [rdi + 0x150], rax
test rax, rax
jne 0x1400ef49c
lea esi, [rax + 0x1b]
jmp 0x1400effcb
mov ebp, reloc.WLDAP32.dll_Ordinal_27
cmp qword [rdi + 0x158], rsi
jne 0x1400ef4c0
mov rcx, r15
call qword [case.0x1400e58f8.0]
test rax, rax
mov qword [rdi + 0x158], rax
cmove esi, ebp
test esi, esi
jne 0x1400effcb
mov r8, qword [rbx + 0x518]
mov rdx, rdi
mov rcx, rbx
call fcn.1400eeb50
mov esi, eax
test eax, eax
jne 0x1400effcb
movzx r9d, byte [rdi + 0x308]
test r9b, r9b
je 0x1400ef4ff
mov rax, qword [rdi + 0xf8]
mov qword [rdi + 0x100], rax
cmp byte [rdi + 0x309], 0
je 0x1400ef516
mov rax, qword [rdi + 0xc0]
mov qword [rdi + 0xc8], rax
cmp byte [rdi + 0x311], 0
mov r15, r14
je 0x1400ef58d
mov rdx, qword [rdi + 0xa0]
mov r8, qword [rdi + 0x70]
test rdx, rdx
je 0x1400ef581
test r8, r8
je 0x1400ef58d
cmp byte [rdx], 0
je 0x1400ef564
lea r10, [0x1401f42d0]
movzx eax, byte [r8]
test al, al
je 0x1400ef564
movzx ecx, byte [rdx]
movzx eax, byte [rax + r10]
cmp byte [rcx + r10], al
jne 0x1400ef57b
inc rdx
inc r8
cmp byte [rdx], 0
jne 0x1400ef543
xor eax, eax
cmp byte [rdx], al
mov ecx, eax
sete cl
cmp byte [r8], al
setne al
xor ecx, eax
test ecx, ecx
je 0x1400ef58d
jmp 0x1400ef586
xor eax, eax
mov ecx, eax
jmp 0x1400ef575
test r8, r8
jne 0x1400ef58d
mov byte [rdi + 0x311], 0
movzx ecx, byte [rdi + 0x312]
test cl, cl
je 0x1400ef5af
mov eax, dword [rdi + 0x730]
cmp dword [rdi + 0x734], eax
jne 0x1400ef5af
mov byte [rdi + 0x312], 0
xor cl, cl
cmp byte [rdi + 0x311], 0
jne 0x1400ef5bc
test cl, cl
je 0x1400ef5c8
test r9b, r9b
je 0x1400ef5c8
mov byte [rdi + 0x30b], 1
mov rax, qword [rdi + 0x328]
mov rcx, rax
mov r8, qword [rax + 8]
test r8, r8
je 0x1400ef5f8
mov rdx, rdi
mov rcx, rbx
call r8
mov esi, eax
test eax, eax
jne 0x1400effcb
mov rax, qword [rdi + 0x328]
mov rcx, rax
cmp dword [rdi + 0x72c], 0
jge 0x1400ef60d
mov eax, dword [rax + 0x80]
mov dword [rdi + 0x72c], eax
test byte [rcx + 0x8c], 0x10
je 0x1400ef8a0
movups xmm0, xmmword [rdi + 0x120]
mov rbp, 0xffffffffffffffff
lea rdx, [rsp + 0x6a]
movups xmmword [rbx + 0x1388], xmm0
movups xmm1, xmmword [rdi + 0x130]
movups xmmword [rbx + 0x1398], xmm1
movsd xmm0, qword [rdi + 0x140]
movsd qword [rbx + 0x13a8], xmm0
mov eax, dword [rdi + 0x148]
mov dword [rbx + 0x13b0], eax
movzx eax, word [rdi + 0x14c]
mov word [rbx + 0x13b4], ax
mov byte [rbx + 0x13c0], 0
mov rax, qword [rdi + 0x328]
mov rcx, qword [rax]
mov qword [rbx + 0x13f8], rcx
mov rax, qword [rdi + 0x328]
mov ecx, dword [rax + 0x84]
and ecx, 0x3ffffff
mov dword [rbx + 0x1400], ecx
mov rcx, rbx
mov eax, dword [rdi + 0x72c]
mov dword [rbx + 0x13b8], eax
mov eax, dword [rdi + 0x730]
mov dword [rbx + 0x13bc], eax
mov dword [rbx + 0x13f0], ebp
mov rax, qword [rdi + 0x328]
call qword [rax + Ordinal_41]
mov esi, eax
test eax, eax
jne 0x1400ef888
mov rdx, rdi
mov rcx, rbx
call fcn.1400de8e0
mov rcx, rbx
call fcn.1400f2de0
mov esi, eax
test eax, eax
jne 0x1400effcb
mov rcx, rbx
call fcn.1400ed1c0
mov esi, eax
test eax, eax
je 0x1400ef714
mov rax, qword [rdi + 0x328]
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x1400effcb
mov rcx, qword [rbx + 0x18]
mov edx, ebp
mov r8, qword [rbx + 0x1b0]
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x1400ef742
cmp dword [r8 + 0x200], 1
jne 0x1400ef742
mov al, 1
jmp 0x1400ef744
xor al, al
cmp byte [rcx + 0x31f], 0
jne 0x1400ef75a
cmp byte [rcx + 0x73f], 0x14
jae 0x1400ef75a
test al, al
je 0x1400ef764
test al, al
mov eax, 0
cmovne edx, eax
mov qword [rcx + 0x350], rbp
mov qword [rcx + 0x348], rbp
mov byte [rbx + 0x1c9], 0
mov qword [rbx + 0xe8], rbp
mov byte [rbx + 0x1c1], 0
cmp byte [rbx + 0x1cb], 0
jne 0x1400ef888
cmp edx, ebp
je 0x1400ef888
cmp byte [rbx + 0x12d7], 0
je 0x1400ef881
mov rax, qword [rcx + 0x328]
test dword [rax + 0x84], 0xc0000003
je 0x1400ef877
cmp dword [r8 + 0x200], 2
jne 0x1400ef877
cmp byte [0x14025f3f0], 0
mov dword [rbx + 0x170], 1
je 0x1400ef81a
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x14025f3e8]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
jmp 0x1400ef845
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
mov ecx, edx
mov qword [rsp + 0x30], rcx
imul ecx, edx, 0x3e8
sub r8d, ecx
imul eax, r8d, 0x3e8
mov dword [rsp + 0x38], eax
xor r8d, r8d
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rbx
movups xmmword [rbx + 0x160], xmm0
movsxd rdx, dword [rbx + 0xa30]
call fcn.1400e2b70
mov rdx, rdi
mov rcx, rbx
call fcn.1400f0350
jmp 0x1400effcb
mov dword [rbx + 0x170], 2
or dword [rbx + 0x15c], 2
mov rdx, rdi
mov rcx, rbx
call fcn.1400f0350
jmp 0x1400effcb
lea rax, [0x1400e8510]
lea rcx, [0x1400e84a0]
mov qword [rdi + 0x1b8], rcx
lea rdx, [rdi + 0x228]
mov qword [rdi + 0x1c8], rax
mov qword [rdi + 0x1c0], rcx
lea rcx, [rbx + 0x530]
mov qword [rdi + 0x1d0], rax
movzx eax, byte [rbx + 0xab4]
mov byte [rdi + 0x320], al
mov rax, qword [rbx + 0x7f0]
mov qword [rcx], rax
mov rax, qword [rbx + 0x800]
mov qword [rbx + 0x538], rax
mov rax, qword [rbx + 0x858]
mov qword [rbx + 0x540], rax
mov rax, qword [rbx + 0x9b8]
mov qword [rbx + 0x580], rax
mov rax, qword [rbx + 0x820]
mov qword [rbx + 0x550], rax
mov rax, qword [rbx + 0x830]
mov qword [rbx + 0x558], rax
mov rax, qword [rbx + 0x810]
mov qword [rbx + 0x560], rax
mov rax, qword [rbx + 0x998]
mov qword [rbx + 0x570], rax
mov rax, qword [rbx + 0x9c8]
mov qword [rbx + 0x578], rax
mov rax, qword [rbx + 0x978]
mov qword [rbx + 0x588], rax
mov rax, qword [rbx + 0x7f8]
mov qword [rbx + 0x5e8], rax
mov rax, qword [rbx + 0x808]
mov qword [rbx + 0x5f0], rax
mov rax, qword [rbx + 0x828]
mov qword [rbx + 0x608], rax
mov rax, qword [rbx + 0x838]
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x818]
mov qword [rbx + 0x618], rax
mov rax, qword [rbx + 0x9a0]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x9d0]
mov qword [rbx + 0x630], rax
mov rax, qword [rbx + 0x860]
mov qword [rbx + 0x5f8], rax
mov rax, qword [rbx + 0x9c0]
mov qword [rbx + 0x638], rax
mov rax, qword [rbx + 0x850]
mov qword [rbx + 0x620], rax
mov rax, qword [rbx + 0x738]
mov qword [rbx + 0x670], rax
mov rax, qword [rbx + 0x790]
mov qword [rbx + 0x678], rax
mov rax, qword [rbx + 0x7b0]
mov qword [rbx + 0x688], rax
mov rax, qword [rbx + 0x7a0]
mov qword [rbx + 0x690], rax
mov rax, qword [rbx + 0x728]
mov qword [rbx + 0x600], rax
mov rax, qword [rbx + 0x9b0]
mov qword [rbx + 0x680], rax
mov rax, qword [rbx + 0x848]
mov qword [rbx + 0x568], rax
mov rax, qword [rbx + 0x730]
mov qword [rbx + 0x5b8], rax
mov rax, qword [rbx + 0x788]
mov qword [rbx + 0x5c0], rax
mov rax, qword [rbx + 0x7a8]
mov qword [rbx + 0x5d0], rax
mov rax, qword [rbx + 0x798]
mov qword [rbx + 0x5d8], rax
mov rax, qword [rbx + 0x720]
mov qword [rbx + 0x548], rax
mov rax, qword [rbx + 0x9a8]
mov qword [rbx + 0x5c8], rax
call fcn.1400db360
test al, al
je 0x1400efacf
lea rdx, [rdi + 0x298]
lea rcx, [rbx + 0x5e8]
call fcn.1400db360
test al, al
jne 0x1400efad6
mov esi, ebp
jmp 0x1400effcb
mov rcx, rbx
call fcn.1400eb3c0
cmp byte [rbx + 0xaaa], 0
je 0x1400efaf4
cmp dword [rbx + 0xd70], 0
je 0x1400efd6b
cmp byte [rbx + 0xa89], 0
jne 0x1400efd6b
lea rax, [rsp + 0x68]
mov rdx, rdi
lea r9, [rsp + 0x69]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov rcx, rbx
call fcn.1400eb640
test al, al
je 0x1400efd6b
cmp qword [rdi + 0x150], 0
mov rsi, qword [rsp + 0x60]
je 0x1400efb8e
mov rcx, qword [rsi + 0x150]
call qword [0x14025d0c8]
mov rcx, qword [rsi + 0x158]
xor r15d, r15d
mov qword [rsi + 0x150], r15
call qword [0x14025d0c8]
mov qword [rsi + 0x158], r15
mov rax, qword [rdi + 0x150]
mov qword [rsi + 0x150], rax
mov rax, qword [rdi + 0x158]
mov qword [rsi + 0x158], rax
mov qword [rdi + 0x150], r15
mov qword [rdi + 0x158], r15
jmp 0x1400efb91
xor r15d, r15d
movzx eax, byte [rdi + 0x30a]
mov byte [rsi + 0x30a], al
test al, al
je 0x1400efc4a
mov rcx, qword [rsi + 0x110]
call qword [0x14025d0c8]
mov rcx, qword [rsi + 0xd8]
mov qword [rsi + 0x110], r15
call qword [0x14025d0c8]
mov rcx, qword [rsi + 0x118]
mov qword [rsi + 0xd8], r15
call qword [0x14025d0c8]
mov rcx, qword [rsi + 0xe0]
mov qword [rsi + 0x118], r15
call qword [0x14025d0c8]
mov qword [rsi + 0xe0], r15
mov rax, qword [rdi + 0x110]
mov qword [rsi + 0x110], rax
mov rax, qword [rdi + 0xd8]
mov qword [rsi + 0xd8], rax
mov rax, qword [rdi + 0x118]
mov qword [rsi + 0x118], rax
mov rax, qword [rdi + 0xe0]
mov qword [rsi + 0xe0], rax
mov qword [rdi + 0x110], r15
mov qword [rdi + 0xd8], r15
mov qword [rdi + 0x118], r15
mov qword [rdi + 0xe0], r15
mov rcx, qword [rsi + 0x60]
call qword [0x14025d0c8]
mov rcx, qword [rsi + 0x90]
mov qword [rsi + 0x60], r15
call qword [0x14025d0c8]
mov qword [rsi + 0x90], r15
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rdi + 0x70]
movups xmmword [rsi + 0x70], xmm1
mov qword [rdi + 0x60], r15
movups xmm0, xmmword [rdi + 0x90]
mov qword [rdi + 0x68], r15
movups xmmword [rsi + 0x90], xmm0
movups xmm1, xmmword [rdi + 0xa0]
movups xmmword [rsi + 0xa0], xmm1
mov eax, dword [rdi + 0x734]
mov qword [rdi + 0x90], r15
mov rcx, qword [rsi + 0x80]
mov dword [rsi + 0x734], eax
mov eax, dword [rdi + 0x730]
mov dword [rsi + 0x730], eax
call qword [0x14025d0c8]
mov qword [rsi + 0x80], r15
mov rcx, rdi
mov rax, qword [rdi + 0x80]
mov qword [rsi + 0x80], rax
mov qword [rdi + 0x80], r15
call fcn.1400eabd0
mov rdx, rdi
mov byte [rsi + 0x30f], 1
mov rcx, rbx
call fcn.1400eac50
mov rdi, qword [rsp + 0x60]
mov qword [r12], rdi
cmp qword [rdi + 0xc0], 0
je 0x1400efd1e
mov rax, qword [rdi + 0xc8]
jmp 0x1400efd35
cmp qword [rdi + 0xf8], 0
je 0x1400efd31
mov rax, qword [rdi + 0x100]
jmp 0x1400efd35
mov rax, qword [rdi + 0x78]
cmp byte [rdi + 0x30d], 0
lea rcx, str.proxy
mov r8d, dword [rdi + 0x48]
lea r9, str.host
cmovne r9, rcx
mov qword [rsp + 0x20], rax
mov rcx, rbx
lea rdx, str.Re_using_existing_connection__ld_with__s__s
call fcn.1400f1670
jmp 0x1400f015c
mov rax, qword [rdi + 0x328]
test dword [rax + 0x8c], 0x100
je 0x1400efd8e
cmp byte [rbx + 0xab5], 0
je 0x1400efd8e
mov byte [rdi + 0x321], 1
cmp byte [rsp + 0x68], 0
jne 0x1400effa0
mov r8, qword [rbx + 0xc68]
mov rdx, rdi
mov rcx, rbx
call fcn.1400f2c50
mov r14, rax
test r15, r15
je 0x1400efffe
test rax, rax
je 0x1400efffe
cmp qword [rax + 8], r15
jb 0x1400efffe
xor eax, eax
mov rbp, 0xffffffffffffffff
cmp byte [0x14025f3f0], al
mov esi, eax
je 0x1400efe17
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x14025f3e8]
mov rax, qword [rsp + 0x70]
cqo
idiv r8
mov r12, rax
mov rax, qword [rsp + 0x70]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
mov r13, rax
jmp 0x1400efe3e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
mov r12d, edx
sub r8d, ecx
imul r13d, r8d, 0x3e8
mov r9, qword [r14 + 0x10]
mov r10, r9
test r9, r9
je 0x1400eff47
movabs rdx, 0x20c49ba5e353f7
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0xffdf3b645a1cac09
movabs rbx, 0x8000000000000000
nop word [rax + rax]
mov r11, qword [r10]
cmp qword [r11 + 0x3d0], 0
jne 0x1400efef2
mov r8, r12
sub r8, qword [r11 + 0x198]
cmp r8, rdx
jl 0x1400efea1
mov rcx, rdi
jmp 0x1400efedd
cmp r8, rcx
jg 0x1400efeab
mov rcx, rbx
jmp 0x1400efedd
mov ecx, r13d
mov eax, 0x10624dd3
sub ecx, dword [r11 + 0x1a0]
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
movabs rdx, 0x20c49ba5e353f7
imul rax, r8, 0x3e8
add rcx, rax
cmp rcx, rbp
jle 0x1400efee8
mov rbp, rcx
mov rsi, r11
movabs rcx, 0xffdf3b645a1cac09
mov r10, qword [r10 + 0x10]
test r10, r10
jne 0x1400efe80
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
test rsi, rsi
je 0x1400eff47
nop word [rax + rax]
cmp qword [r9], rsi
je 0x1400eff20
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x1400eff10
jmp 0x1400eff3c
xor r8d, r8d
lea rcx, [r14 + 0x10]
mov rdx, r9
call fcn.1400fdb20
dec qword [r14 + 8]
xor eax, eax
mov qword [rsi + 0x700], rax
mov rax, qword [rbx + 0xc68]
dec qword [rax + 0x30]
lea r14, [rbx + 0xe0]
mov r8, qword [r14]
test r8, r8
je 0x1400eff74
test byte [r8 + 4], 0x20
je 0x1400eff74
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1400eff74
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rcx, rbx
test rsi, rsi
je 0x1400eff91
xor r8d, r8d
mov rdx, rsi
call fcn.1400eaea0
mov r13, qword [rsp + 0x50]
jmp 0x1400f0044
mov r8, r15
lea rdx, str.No_more_connections_allowed_to_host:__zu
call fcn.1400f1670
lea rdx, str.No_connections_available.
mov rcx, rbx
call fcn.1400f1670
mov rdx, rdi
mov rcx, rbx
call fcn.1400eac50
mov rax, qword [rsp + 0x30]
mov esi, 0x59
mov qword [rax], 0
mov r15, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xe8]
mov eax, esi
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.14013ea20
add rsp, 0x98
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rbx + 0xe0]
lea r14, [rbx + 0xe0]
test r8, r8
je 0x1400f0044
test byte [r8 + 4], 0x20
lea r14, [rbx + 0xe0]
je 0x1400f0044
mov rax, qword [r8 + 0x18]
lea r14, [rbx + 0xe0]
test rax, rax
je 0x1400f0044
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
lea r14, [rbx + 0xe0]
mov rbp, qword [rsp + 0x58]
test rbp, rbp
je 0x1400f00c9
mov r9, qword [r14]
test r9, r9
je 0x1400f0078
test byte [r9 + 4], 0x20
je 0x1400f0078
mov rax, qword [r9 + 0x10]
test rax, rax
je 0x1400f0078
mov r9, qword [r9 + 0x20]
mov edx, 5
mov rcx, rbx
lea r8d, [rdx - 3]
call rax
mov rax, qword [rbx + 0xc68]
mov r8, qword [r14]
mov rsi, qword [rax + 0x30]
test r8, r8
je 0x1400f00a9
test byte [r8 + 4], 0x20
je 0x1400f00a9
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1400f00a9
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
cmp rsi, rbp
jb 0x1400f00c9
mov rcx, rbx
call fcn.1400f34f0
mov rcx, rbx
test rax, rax
je 0x1400f0119
xor r8d, r8d
mov rdx, rax
call fcn.1400eaea0
mov rdx, rdi
mov rcx, rbx
call fcn.1400de8e0
mov rcx, rbx
call fcn.1400f2de0
mov esi, eax
test eax, eax
jne 0x1400effcb
test byte [rbx + 0xdd4], 0x28
je 0x1400f012a
cmp byte [rbx + 0xddc], al
je 0x1400f012a
lea rdx, str.NTLM_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.1400f1670
xor r15d, r15d
mov dword [rbx + 0xdd4], r15d
mov byte [rbx + 0xddc], r15b
jmp 0x1400f012d
lea rdx, str.No_connections_available_in_cache
call fcn.1400f1670
jmp 0x1400effa0
xor r15d, r15d
test byte [rbx + 0xde4], 0x28
je 0x1400f015c
cmp byte [rbx + 0xdec], 0
je 0x1400f015c
lea rdx, str.NTLM_proxy_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.1400f1670
mov dword [rbx + 0xde4], r15d
mov byte [rbx + 0xdec], 0
mov rdx, rdi
mov rcx, rbx
call fcn.1400f0350
mov rcx, rbx
call fcn.1400ed1c0
mov esi, eax
test eax, eax
jne 0x1400effcb
mov rax, qword [rbx + 0x218]
mov qword [rdi + 0x3d8], rax
mov rax, qword [rbx + 0x2b0]
mov qword [rdi + 0x3e0], rax
cmp byte [rdi + 0x30f], sil
je 0x1400f01a4
mov byte [r13], sil
jmp 0x1400f01bc
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.1400eefe0
mov esi, eax
test eax, eax
jne 0x1400effcb
mov r14, qword [rbx + 0x18]
lea r12, [fcn.140046b10]
add r14, 0x1d8
mov rbp, r15
mov rdi, qword [r14]
mov esi, r15d
test rdi, rdi
je 0x1400f0218
nop dword [rax]
mov rax, qword [rdi]
mov r10, qword [rax + 0x50]
cmp r12, r10
je 0x1400f0207
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov rcx, rdi
lea r8d, [r9 + 4]
call r10
mov esi, eax
test eax, eax
jne 0x1400f0210
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x1400f01e0
test esi, esi
jne 0x1400effcb
inc rbp
add r14, 8
cmp rbp, 2
jb 0x1400f01d1
jmp 0x1400effcb