Function at 0x1401136b0
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter

Disassembly:
push rbx
push rbp
push rsi
push r12
push r13
push r15
sub rsp, 0x88
mov rax, qword [0x1402d9040]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [rcx + 0xd8]
xor ebp, ebp
mov qword [rsp + 0x60], r8
mov r13, r8
mov qword [rsp + 0x30], rdx
mov r12, rdx
mov qword [rsp + 0x50], rbp
mov rbx, rcx
mov byte [rsp + 0x59], bpl
mov byte [rsp + 0x58], bpl
test rax, rax
je 0x14011370f
movsxd r15, dword [rax + 0x190]
mov ecx, dword [rax + 0x194]
jmp 0x140113714
mov r15, rbp
mov ecx, ebp
mov byte [r8], bpl
mov qword [rdx], rbp
movsxd rax, ecx
mov qword [rsp + 0x48], rax
cmp qword [rbx + 0x1198], rbp
jne 0x140113735
mov esi, 3
jmp 0x140114345
mov rcx, rbx
mov qword [rsp + 0xd8], rdi
call fcn.140110820
mov qword [rsp + 0x40], rax
mov rdi, rax
test rax, rax
je 0x140113867
mov rdx, rax
mov qword [r12], rax
mov rcx, rbx
call fcn.140110c30
mov esi, eax
test eax, eax
jne 0x14011433d
mov rcx, qword [rbx + 0x960]
test rcx, rcx
je 0x140113791
call qword [case.0x14010f187.0]
mov qword [rdi + 0x1e0], rax
test rax, rax
je 0x140113867
mov rcx, qword [rbx + 0x930]
test rcx, rcx
je 0x1401137b3
call qword [case.0x14010f187.0]
mov qword [rdi + 0x1e8], rax
test rax, rax
je 0x140113867
mov rcx, qword [rbx + 0x938]
test rcx, rcx
je 0x1401137e2
call qword [case.0x14010f187.0]
mov qword [rdi + 0x748], rax
test rax, rax
je 0x140113867
movzx eax, byte [rbx + 0xacb]
mov byte [rdi + 0x35a], al
mov rdx, rdi
mov rcx, rbx
call fcn.140112370
mov esi, eax
test eax, eax
jne 0x14011433d
mov rax, qword [rdi + 0x368]
test byte [rax + 0x8c], 1
je 0x140113817
cmp byte [rdi + 0x340], bpl
je 0x140113817
mov byte [rdi + 0x343], 1
movzx eax, word [rbx + 0x228]
test ax, ax
je 0x140113871
cmp byte [rbx + 0x1300], bpl
je 0x140113871
mov r9d, eax
mov dword [rdi + 0x764], eax
lea r8, [0x1402a6314]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x68]
call sym.CheraxLoader.exe_curl_msnprintf
mov rcx, qword [rbx + 0x1150]
lea r8, [rsp + 0x68]
xor r9d, r9d
lea edx, [r9 + 6]
call sym.CheraxLoader.exe_curl_url_set
test eax, eax
je 0x140113871
mov esi, reloc.WLDAP32.dll_Ordinal_27
jmp 0x14011433d
mov rdx, rdi
mov rcx, rbx
call fcn.1401128e0
mov esi, eax
test eax, eax
jne 0x14011433d
mov rax, qword [rdi + 0x360]
lea rcx, str.anonymous
mov qword [rsp + 0x80], r14
mov esi, ebp
lea r14, str.ftp_example.com
test byte [rax + 0x8c], 0x20
je 0x1401138b7
cmp qword [rbx + 0x12d8], rsi
je 0x1401138c1
lea rcx, [0x1402192d9]
mov r14, rcx
cmp qword [rdi + 0x1c8], rsi
jne 0x1401138e4
call qword [case.0x14010f187.0]
mov qword [rdi + 0x1c8], rax
test rax, rax
jne 0x1401138e4
lea esi, [rax + 0x1b]
jmp 0x140114335
mov ebp, reloc.WLDAP32.dll_Ordinal_27
cmp qword [rdi + 0x1d0], rsi
jne 0x140113908
mov rcx, r14
call qword [case.0x14010f187.0]
test rax, rax
mov qword [rdi + 0x1d0], rax
cmove esi, ebp
test esi, esi
jne 0x140114335
mov r8, qword [rbx + 0x530]
mov rdx, rdi
mov rcx, rbx
call fcn.140112fb0
mov esi, eax
test eax, eax
jne 0x140114335
cmp byte [rdi + 0x340], al
je 0x140113942
mov rax, qword [rdi + 0xd8]
mov qword [rdi + 0xe0], rax
cmp byte [rdi + 0x341], 0
je 0x140113959
mov rax, qword [rdi + 0xa0]
mov qword [rdi + 0xa8], rax
cmp byte [rdi + 0x349], 0
je 0x1401139ec
mov rax, qword [rdi + 0x80]
mov qword [rdi + 0x88], rax
mov rdx, rax
mov r8, qword [rdi + 0x50]
test rax, rax
je 0x1401139db
test r8, r8
je 0x1401139ec
cmp byte [rax], 0
je 0x1401139b2
lea r9, [0x140269d90]
movzx eax, byte [r8]
test al, al
je 0x1401139b2
movzx ecx, byte [rdx]
movzx eax, byte [rax + r9]
cmp byte [rcx + r9], al
jne 0x1401139d3
inc rdx
inc r8
cmp byte [rdx], 0
jne 0x140113991
xor eax, eax
cmp byte [rdx], al
mov ecx, eax
sete cl
cmp byte [r8], al
setne al
xor ecx, eax
xor r14d, r14d
test ecx, ecx
je 0x1401139ef
mov byte [rdi + 0x349], 0
jmp 0x1401139ef
xor r14d, r14d
mov ecx, r14d
jmp 0x1401139c6
test r8, r8
jne 0x1401139ec
xor r14d, r14d
mov byte [rdi + 0x349], r14b
jmp 0x1401139ef
xor r14d, r14d
movzx ecx, byte [rdi + 0x34a]
test cl, cl
je 0x140113a11
mov eax, dword [rdi + 0x764]
cmp dword [rdi + 0x768], eax
jne 0x140113a11
mov byte [rdi + 0x34a], 0
xor cl, cl
cmp byte [rdi + 0x349], 0
jne 0x140113a1e
test cl, cl
je 0x140113a2e
cmp byte [rdi + 0x340], 0
je 0x140113a2e
mov byte [rdi + 0x343], 1
mov rax, qword [rdi + 0x360]
mov rcx, rax
mov r8, qword [rax + 8]
test r8, r8
je 0x140113a5e
mov rdx, rdi
mov rcx, rbx
call r8
mov esi, eax
test eax, eax
jne 0x140114335
mov rax, qword [rdi + 0x360]
mov rcx, rax
cmp dword [rdi + 0x15c], 0
jge 0x140113a73
mov eax, dword [rax + 0x80]
mov dword [rdi + 0x15c], eax
test byte [rcx + 0x8c], 0x10
je 0x140113c70
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.140107650
mov r8, qword [rdi + 0x360]
lea rdx, [rsp + 0x5a]
mov rcx, rbx
call qword [r8 + Ordinal_41]
mov esi, eax
test eax, eax
jne 0x140113c57
mov rdx, rdi
mov rcx, rbx
call fcn.140101b60
mov rcx, rbx
call fcn.140119a50
mov esi, eax
test eax, eax
jne 0x140114335
mov rcx, rbx
call fcn.140111570
mov esi, eax
test eax, eax
je 0x140113aed
mov rax, qword [rdi + 0x360]
xor r8d, r8d
mov edx, esi
mov rcx, rbx
call qword [rax + Ordinal_26]
jmp 0x140114335
cmp byte [rbx + 0x1f2], 0
mov r14, 0xffffffffffffffff
mov rcx, qword [rbx + 0x20]
mov edx, r14d
je 0x140113b1e
mov r8, qword [rbx + 0x168]
test r8, r8
je 0x140113b1e
mov rax, qword [r8 + 0x18]
cmp qword [r8 + 0x10], rax
jae 0x140113b1e
mov al, 1
jmp 0x140113b20
xor al, al
cmp byte [rcx + 0x356], 0
jne 0x140113b36
cmp byte [rcx + 0x774], 0x14
jae 0x140113b36
test al, al
je 0x140113b40
test al, al
mov eax, 0
cmovne edx, eax
mov qword [rcx + 0x388], r14
mov qword [rcx + 0x380], r14
mov byte [rbx + 0x1ef], 0
mov qword [rbx + 0xf0], r14
mov byte [rbx + 0x1e1], 0
cmp byte [rbx + 0x1f0], 0
jne 0x140113c57
cmp edx, r14d
je 0x140113c57
cmp byte [rbx + 0x1303], 0
je 0x140113c50
mov rax, qword [rcx + 0x360]
test dword [rax + 0x84], 0xc0000003
je 0x140113c46
cmp byte [0x1402dbf21], 0
mov dword [rbx + 0x150], 1
je 0x140113be9
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402dbf18]
mov rax, qword [rsp + 0x60]
cqo
idiv r8
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x60]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
jmp 0x140113c14
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
mov ecx, edx
mov qword [rsp + 0x30], rcx
imul ecx, edx, 0x3e8
sub r8d, ecx
imul eax, r8d, 0x3e8
mov dword [rsp + 0x38], eax
xor r8d, r8d
movups xmm0, xmmword [rsp + 0x30]
mov rcx, rbx
movups xmmword [rbx + 0x140], xmm0
movsxd rdx, dword [rbx + 0xa3c]
call fcn.140105a50
mov rdx, rdi
mov rcx, rbx
call fcn.140114680
jmp 0x140114335
mov dword [rbx + 0x150], 2
or dword [rbx + 0x13c], 2
mov rdx, rdi
mov rcx, rbx
call fcn.140114680
jmp 0x140114335
lea rax, [0x1401064d0]
lea rcx, [0x140106460]
mov qword [rdi + 0x230], rcx
mov qword [rdi + 0x240], rax
mov qword [rdi + 0x238], rcx
mov rcx, rbx
mov qword [rdi + 0x248], rax
movzx eax, byte [rbx + 0xac4]
mov byte [rdi + 0x357], al
mov rax, qword [rbx + 0x800]
mov qword [rbx + 0x548], rax
mov rax, qword [rbx + 0x810]
mov qword [rbx + 0x550], rax
mov rax, qword [rbx + 0x858]
mov qword [rbx + 0x580], rax
mov rax, qword [rbx + 0x868]
mov qword [rbx + 0x558], rax
mov rax, qword [rbx + 0x9d0]
mov qword [rbx + 0x598], rax
mov rax, qword [rbx + 0x830]
mov qword [rbx + 0x568], rax
mov rax, qword [rbx + 0x840]
mov qword [rbx + 0x570], rax
mov rax, qword [rbx + 0x820]
mov qword [rbx + 0x578], rax
mov rax, qword [rbx + 0x9b0]
mov qword [rbx + 0x588], rax
mov rax, qword [rbx + 0x9e0]
mov qword [rbx + 0x590], rax
mov rax, qword [rbx + 0x988]
mov qword [rbx + 0x5a0], rax
mov rax, qword [rbx + 0x740]
mov qword [rbx + 0x5d0], rax
mov rax, qword [rbx + 0x798]
mov qword [rbx + 0x5d8], rax
mov rax, qword [rbx + 0x7b8]
mov qword [rbx + 0x5e8], rax
mov rax, qword [rbx + 0x7a8]
mov qword [rbx + 0x5f0], rax
mov rax, qword [rbx + 0x730]
mov qword [rbx + 0x560], rax
mov rax, qword [rbx + 0x9c0]
mov qword [rbx + 0x5e0], rax
mov rax, qword [rbx + 0x808]
mov qword [rbx + 0x600], rax
mov rax, qword [rbx + 0x818]
mov qword [rbx + 0x608], rax
mov rax, qword [rbx + 0x838]
mov qword [rbx + 0x620], rax
mov rax, qword [rbx + 0x848]
mov qword [rbx + 0x628], rax
mov rax, qword [rbx + 0x828]
mov qword [rbx + 0x630], rax
mov rax, qword [rbx + 0x9b8]
mov qword [rbx + 0x640], rax
mov rax, qword [rbx + 0x9e8]
mov qword [rbx + 0x648], rax
mov rax, qword [rbx + 0x870]
mov qword [rbx + 0x610], rax
mov rax, qword [rbx + 0x9d8]
mov qword [rbx + 0x650], rax
mov rax, qword [rbx + 0x860]
mov qword [rbx + 0x638], rax
mov rax, qword [rbx + 0x748]
mov qword [rbx + 0x688], rax
mov rax, qword [rbx + 0x7a0]
mov qword [rbx + 0x690], rax
mov rax, qword [rbx + 0x7c0]
mov qword [rbx + 0x6a0], rax
mov rax, qword [rbx + 0x7b0]
mov qword [rbx + 0x6a8], rax
mov rax, qword [rbx + 0x738]
mov qword [rbx + 0x618], rax
mov rax, qword [rbx + 0x9c8]
mov qword [rbx + 0x698], rax
call fcn.14010f6f0
cmp byte [rbx + 0xaba], 0
je 0x140113e93
cmp dword [rbx + 0xd08], 0
je 0x1401140db
cmp byte [rbx + 0xa99], 0
jne 0x1401140db
lea rax, [rsp + 0x58]
mov rdx, rdi
lea r9, [rsp + 0x59]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x50]
mov rcx, rbx
call fcn.14010f970
test al, al
je 0x1401140db
cmp qword [rdi + 0x1c8], 0
mov rsi, qword [rsp + 0x50]
je 0x140113f2d
mov rcx, qword [rsi + 0x1c8]
call qword [fcn.14016c458]
mov rcx, qword [rsi + 0x1d0]
xor r15d, r15d
mov qword [rsi + 0x1c8], r15
call qword [fcn.14016c458]
mov qword [rsi + 0x1d0], r15
mov rax, qword [rdi + 0x1c8]
mov qword [rsi + 0x1c8], rax
mov rax, qword [rdi + 0x1d0]
mov qword [rsi + 0x1d0], rax
mov qword [rdi + 0x1c8], r15
mov qword [rdi + 0x1d0], r15
jmp 0x140113f30
xor r15d, r15d
movzx eax, byte [rdi + 0x342]
mov byte [rsi + 0x342], al
test al, al
je 0x140113fe9
mov rcx, qword [rsi + 0xf0]
call qword [fcn.14016c458]
mov rcx, qword [rsi + 0xb8]
mov qword [rsi + 0xf0], r15
call qword [fcn.14016c458]
mov rcx, qword [rsi + 0xf8]
mov qword [rsi + 0xb8], r15
call qword [fcn.14016c458]
mov rcx, qword [rsi + 0xc0]
mov qword [rsi + 0xf8], r15
call qword [fcn.14016c458]
mov qword [rsi + 0xc0], r15
mov rax, qword [rdi + 0xf0]
mov qword [rsi + 0xf0], rax
mov rax, qword [rdi + 0xb8]
mov qword [rsi + 0xb8], rax
mov rax, qword [rdi + 0xf8]
mov qword [rsi + 0xf8], rax
mov rax, qword [rdi + 0xc0]
mov qword [rsi + 0xc0], rax
mov qword [rdi + 0xf0], r15
mov qword [rdi + 0xb8], r15
mov qword [rdi + 0xf8], r15
mov qword [rdi + 0xc0], r15
mov rcx, qword [rsi + 0x40]
call qword [fcn.14016c458]
mov rcx, qword [rsi + 0x70]
mov qword [rsi + 0x40], r15
call qword [fcn.14016c458]
mov qword [rsi + 0x70], r15
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rdi + 0x50]
movups xmmword [rsi + 0x50], xmm1
mov qword [rdi + 0x40], r15
movups xmm0, xmmword [rdi + 0x70]
mov qword [rdi + 0x48], r15
movups xmmword [rsi + 0x70], xmm0
movups xmm1, xmmword [rdi + 0x80]
movups xmmword [rsi + 0x80], xmm1
mov eax, dword [rdi + 0x768]
mov qword [rdi + 0x70], r15
mov rcx, qword [rsi + 0x60]
mov dword [rsi + 0x768], eax
mov eax, dword [rdi + 0x764]
mov dword [rsi + 0x764], eax
call qword [fcn.14016c458]
mov qword [rsi + 0x60], r15
mov rdx, rdi
mov rax, qword [rdi + 0x60]
mov rcx, rbx
mov qword [rsi + 0x60], rax
mov qword [rdi + 0x60], r15
mov byte [rsi + 0x347], 1
call fcn.14010efe0
mov rdi, qword [rsp + 0x50]
mov qword [r12], rdi
cmp qword [rdi + 0xa0], 0
je 0x140114097
mov r9, qword [rdi + 0xa8]
jmp 0x1401140ae
cmp qword [rdi + 0xd8], 0
je 0x1401140aa
mov r9, qword [rdi + 0xe0]
jmp 0x1401140ae
mov r9, qword [rdi + 0x58]
cmp byte [rdi + 0x345], 0
lea rax, str.proxy
lea r8, str.host
mov rcx, rbx
cmovne r8, rax
lea rdx, str.Re_using_existing_connection_with__s__s
call fcn.140115960
jmp 0x14011448e
mov rax, qword [rdi + 0x360]
test dword [rax + 0x8c], 0x100
je 0x1401140fe
cmp byte [rbx + 0xac5], 0
je 0x1401140fe
mov byte [rdi + 0x358], 1
cmp byte [rsp + 0x58], 0
jne 0x14011430e
mov r8, qword [rbx + 0xc80]
mov rdx, rdi
mov rcx, rbx
call fcn.1401198c0
mov r13, rax
test r15, r15
je 0x140114365
test rax, rax
je 0x140114365
cmp qword [rax + 8], r15
jb 0x140114365
xor eax, eax
cmp byte [0x1402dbf21], al
mov esi, eax
lea r14, [rax - 1]
je 0x140114184
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r8, qword [0x1402dbf18]
mov rax, qword [rsp + 0x68]
cqo
idiv r8
mov r11, rax
mov rax, qword [rsp + 0x68]
cqo
idiv r8
imul rax, rdx, 0xf4240
cqo
idiv r8
mov r12, rax
jmp 0x1401141ab
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0x10624dd3
mul r8d
shr edx, 6
imul ecx, edx, 0x3e8
mov r11d, edx
sub r8d, ecx
imul r12d, r8d, 0x3e8
mov r9, qword [r13 + 0x10]
test r9, r9
je 0x1401142b7
movabs rdx, 0x20c49ba5e353f7
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0xffdf3b645a1cac09
movabs rbp, 0x8000000000000000
mov r10, qword [r9]
cmp qword [r10 + 0x408], 0
jne 0x14011425f
movups xmm0, xmmword [r10 + 0x210]
mov r8, r11
movq rax, xmm0
sub r8, rax
cmp r8, rdx
jl 0x14011420a
mov rcx, rdi
jmp 0x14011424a
cmp r8, rcx
jg 0x140114214
mov rcx, rbp
jmp 0x14011424a
mov ecx, r12d
psrldq xmm0, 8
movd eax, xmm0
sub ecx, eax
mov eax, 0x10624dd3
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsxd rcx, edx
movabs rdx, 0x20c49ba5e353f7
imul rax, r8, 0x3e8
add rcx, rax
cmp rcx, r14
jle 0x140114255
mov r14, rcx
mov rsi, r10
movabs rcx, 0xffdf3b645a1cac09
mov r9, qword [r9 + 0x10]
test r9, r9
jne 0x1401141e0
mov rdi, qword [rsp + 0x40]
lea ebp, [r9 + 0x1b]
test rsi, rsi
je 0x1401142b7
mov rdx, qword [r13 + 0x10]
test rdx, rdx
je 0x1401142ac
cmp qword [rdx], rsi
je 0x140114293
mov rdx, qword [rdx + 0x10]
test rdx, rdx
jne 0x140114283
jmp 0x1401142ac
lea rcx, [r13 + 0x10]
xor r8d, r8d
call fcn.140122d70
dec qword [r13 + 8]
xor eax, eax
mov qword [rsi + 0x740], rax
mov rax, qword [rbx + 0xc80]
dec qword [rax + 0x30]
mov r8, qword [rbx + 0xe8]
test r8, r8
je 0x1401142e1
test byte [r8 + 4], 0x20
je 0x1401142e1
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x1401142e1
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rcx, rbx
test rsi, rsi
je 0x1401142fc
xor r8d, r8d
mov rdx, rsi
call fcn.14010f190
xor r14d, r14d
jmp 0x14011438f
mov r8, r15
lea rdx, str.No_more_connections_allowed_to_host:__zu
call fcn.140115960
xor r14d, r14d
lea rdx, str.No_connections_available.
mov rcx, rbx
call fcn.140115960
mov rdx, rdi
mov rcx, rbx
call fcn.14010efe0
mov rax, qword [rsp + 0x30]
mov esi, 0x59
mov qword [rax], r14
mov r14, qword [rsp + 0x80]
mov rdi, qword [rsp + 0xd8]
mov eax, esi
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14016b380
add rsp, 0x88
pop r15
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rbx + 0xe8]
test r8, r8
je 0x14011438f
test byte [r8 + 4], 0x20
je 0x14011438f
mov rax, qword [r8 + 0x18]
test rax, rax
je 0x14011438f
mov r8, qword [r8 + 0x20]
mov edx, 5
mov rcx, rbx
call rax
mov rsi, qword [rsp + 0x48]
test rsi, rsi
je 0x1401143c1
mov rcx, rbx
call fcn.140119840
cmp rax, rsi
jb 0x1401143c1
mov rcx, rbx
call fcn.14011a150
mov rcx, rbx
test rax, rax
je 0x1401143f6
xor r8d, r8d
mov rdx, rax
call fcn.14010f190
lea rdx, [rdi + 0x260]
lea rcx, [rbx + 0x548]
call fcn.1400fe660
test al, al
je 0x1401143ef
lea rdx, [rdi + 0x2d0]
lea rcx, [rbx + 0x600]
call fcn.1400fe660
test al, al
jne 0x140114407
mov esi, ebp
jmp 0x140114335
lea rdx, str.No_connections_available_in_cache
call fcn.140115960
jmp 0x14011430e
mov rdx, rdi
mov rcx, rbx
call fcn.140101b60
mov rcx, rbx
call fcn.140119a50
mov esi, eax
test eax, eax
jne 0x140114335
test byte [rbx + 0xd6c], 0x28
je 0x140114457
cmp byte [rbx + 0xd74], al
je 0x140114457
lea rdx, str.NTLM_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140115960
xor r15d, r15d
mov dword [rbx + 0xd6c], r15d
mov byte [rbx + 0xd74], r15b
jmp 0x14011445a
xor r15d, r15d
test byte [rbx + 0xd7c], 0x28
je 0x140114489
cmp byte [rbx + 0xd84], 0
je 0x140114489
lea rdx, str.NTLM_proxy_picked_AND_auth_done_set__clear_picked
mov rcx, rbx
call fcn.140115960
mov dword [rbx + 0xd7c], r15d
mov byte [rbx + 0xd84], 0
mov r13, qword [rsp + 0x60]
mov rdx, rdi
mov rcx, rbx
call fcn.140114680
mov rcx, rbx
call fcn.140111570
mov esi, eax
test eax, eax
jne 0x140114335
cmp byte [rdi + 0x347], al
je 0x1401144b9
mov byte [r13], al
jmp 0x1401144d1
mov r8, r13
mov rdx, rdi
mov rcx, rbx
call fcn.140113440
mov esi, eax
test eax, eax
jne 0x140114335
mov r14, qword [rbx + 0x20]
lea r12, [fcn.140047070]
add r14, 0x250
mov rbp, r15
nop word [rax + rax]
mov rdi, qword [r14]
mov esi, r15d
test rdi, rdi
je 0x140114538
nop dword [rax + rax]
mov rax, qword [rdi]
mov r10, qword [rax + 0x50]
cmp r12, r10
je 0x140114527
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov rdx, rbx
mov rcx, rdi
lea r8d, [r9 + 4]
call r10
mov esi, eax
test eax, eax
jne 0x140114530
mov rdi, qword [rdi + 8]
test rdi, rdi
jne 0x140114500
test esi, esi
jne 0x140114335
inc rbp
add r14, 8
cmp rbp, 2
jb 0x1401144f0
jmp 0x140114335