Function at 0x100408b50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
mov eax, 0x7098
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.100420ff0
sub rsp, rax
mov rbx, qword [rsp + 0x7110]
test rbx, rbx
mov rbp, rdx
sete dl
mov qword [rsp + 0x70f8], r9
mov esi, ecx
cmp qword [rsp + 0x7118], 0
mov edi, r8d
setne al
cmp dl, al
je 0x100408bb8
xor r15d, r15d
mov eax, r15d
add rsp, 0x7098
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], 0
mov byte [rsp + 0x10c], 0
test rbx, rbx
je 0x1004098e8
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x9c], al
mov rax, qword [0x10042ee40]
xor r9d, r9d
mov rcx, rbx
lea r13, [rsp + 0x1c0]
mov r8, qword [rsp + 0x7120]
mov rdx, qword [rsp + 0x7118]
mov r14d, dword [rax + 0x1014]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xa0], rax
call fcn.100405310
test sil, sil
je 0x1004096f0
lea rax, [rsp + 0x10c]
mov r9, qword [rsp + 0x7120]
mov rdx, rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x118]
mov r8, qword [rsp + 0x7118]
mov qword [rsp + 0x28], rax
mov rax, qword [0x10042ee40]
lea rcx, [rax + 0x2050]
call fcn.1004021e0
test al, al
je 0x100408b97
cmp byte [rsp + 0x10c], 0
jne 0x100408b97
mov r15, qword [rsp + 0x118]
mov r12, qword [r15 + 8]
test r12, r12
je 0x100409900
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
xor r15d, r15d
call fcn.1004125a0
mov dword [rsp + 0xb0], 0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100408ce9
movzx r8d, byte [rax + 0x79]
test r8b, r8b
jne 0x100408d0d
cmp qword [rsp + 0x7118], 0
je 0x100409ca0
movzx r8d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r8b, r8b
cmove r8d, eax
mov rax, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xa8], r8b
or r14d, edi
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xc4], al
call fcn.100403790
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xc0], al
call fcn.100403710
mov qword [rsp + 0xb8], rax
test sil, sil
je 0x100409920
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 2
jne 0x100408b9a
cmp qword [rsp + 0x7138], 0
je 0x100408b9a
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x110]
mov qword [rsp + 0x130], 0
mov rdi, qword [rax + 0x98]
mov rax, qword [rax + 0xb0]
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa0]
mov edx, 6
call fcn.1004086b0
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
call fcn.100415540
mov edi, eax
test al, al
je 0x100409e00
lea rcx, str.packet_contains_HTTP_request_n
call fcn.1004125a0
mov rdi, qword [rsp + 0x110]
test rdi, rdi
je 0x100408e68
mov r8d, dword [rdi + 0x80]
test r8d, r8d
jne 0x100408e18
mov dword [rdi + 0x80], 1
cmp qword [rdi + 0xa8], 0
jne 0x10040ab08
add rdi, 0xb8
mov rcx, rdi
call fcn.1004124f0
test al, al
je 0x10040b0b3
mov rdi, qword [rsp + 0x110]
test rdi, rdi
je 0x100408e68
mov rax, qword [rdi + 8]
test rax, rax
je 0x100408e68
cmp word [rax + 6], 0
je 0x100408e68
cmp byte [rdi + 0x7b], 0
je 0x10040b3b6
nop dword [rax]
lea rax, [rsp + 0x240]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.1004157e0
test al, al
je 0x10040abef
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x10040a028
cmp byte [rax + 0x6b], 0
je 0x100409fe1
cmp byte [rax + 0x6c], 0
je 0x10040a028
mov dword [rsp + 0xf0], 1
mov edi, dword [rax + 0x50]
lea edx, [rdi - 0x1000000]
sub edx, dword [rax + 0x74]
cmp edx, 0x7effffff
ja 0x100408ee6
mov byte [rax + 0x6d], 1
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.1004125a0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100408f29
cmp byte [rax + 0x84], 0
jne 0x10040a065
mov edx, dword [rax + 0x80]
test edx, edx
je 0x10040c4cf
mov byte [rax + 0x84], 1
lea rcx, str.discovered_l7_protocol_n
call fcn.1004125a0
mov rdx, qword [rsp + 0x118]
test rdx, rdx
je 0x100408f50
cmp qword [rdx + 0x88], 0
jne 0x10040b7e5
lea rcx, str.discovered_hostname_n
call fcn.1004125a0
mov rdx, qword [rsp + 0x118]
test rdx, rdx
mov qword [rsp + 0xd8], rdx
je 0x10040acd5
mov rcx, qword [rsp + 0xd0]
call sub.cygwin1.dll_strdup
mov rdx, qword [rsp + 0xd8]
mov r8, rax
mov qword [rdx + 0x88], rax
test rax, rax
je 0x10040c49a
mov byte [rsp + 0x10d], 0
mov edi, 1
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
mov r9d, dword [rdx + 0x80]
lea rax, [rsp + 0x10f]
mov rdx, r13
mov ecx, 6
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10e]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0x20], rax
call fcn.100407f70
mov r8, rax
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040902a
movzx edx, byte [rsp + 0x10d]
mov dh, byte [rsp + 0x10e]
mov qword [rax + 8], r8
mov byte [rax + 0x10], 1
mov word [rax], dx
movzx edx, byte [rsp + 0x10f]
mov byte [rax + 2], dl
test r8, r8
je 0x10040ab59
cmp r8, r12
je 0x10040909d
lea rcx, str.desync_profile_changed_by_revealed_l7_protocol_or_hostname___n
mov qword [rsp + 0xd0], r8
call fcn.1004125a0
mov r12, qword [rsp + 0x118]
mov r8, qword [rsp + 0xd0]
test r12, r12
je 0x100409094
movzx ecx, byte [r12 + 0x78]
test cl, cl
je 0x100409094
mov rax, qword [r12 + 8]
lea rdx, [rax + 0x55]
add rax, 0x52
cmp qword [rsp + 0x7118], 0
cmove rdx, rax
cmp byte [rdx], 0
jne 0x10040b829
mov byte [r12 + 0x79], 0
test sil, sil
je 0x10040b0d6
mov r12, r8
test dil, dil
jne 0x10040a07d
cmp dword [rsp + 0xf0], 1
mov edi, dword [r12 + 0x2c]
je 0x100409f58
cmp dword [rsp + 0xf0], 2
je 0x10040a0e8
mov r9, qword [rsp + 0x110]
lea rax, [r12 + 0xbcc]
mov rsi, r9
mov qword [rsp + 0xd0], rax
mov rax, qword [r12 + 0x39d0]
mov qword [rsp + 0xd8], rax
test r9, r9
je 0x100409139
mov dword [rsp + 0xf0], 0
cmp qword [rsi + 0xa8], 0
jne 0x10040a5d8
add rsi, 0xb8
mov rcx, rsi
call fcn.1004124f0
test al, al
je 0x10040abcc
mov eax, dword [rsp + 0xf0]
test eax, eax
jne 0x100409fa6
cmp byte [r12 + 0x26], 0
je 0x10040a83e
lea rcx, str.applying_tampering_to_unknown_protocol_n
call fcn.1004125a0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b0a3
mov dword [rsp + 0xf0], 0
movzx r10d, byte [rax + 0x79]
test r10b, r10b
jne 0x1004091a9
cmp qword [rsp + 0x7118], 0
je 0x10040abb2
movzx r10d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
cmp dword [rsp + 0xf0], 1
je 0x10040a180
mov eax, dword [r12 + 0x1c]
test eax, eax
je 0x100408b9a
mov rax, qword [0x10042ee40]
cmp byte [rax + 0x1010], 0
jne 0x10040a78a
mov rsi, qword [rsp + 0xa8]
lea rax, [rdi - 1]
cmp rax, rsi
jb 0x10040a2d8
test rbp, rbp
jne 0x10040a635
cmp qword [rsp + 0x7138], 1
jbe 0x10040a635
mov qword [rsp + 0xa8], 1
mov rdx, qword [rsp + 0xa8]
lea rcx, str.split_pos__zu_n
mov byte [rsp + 0xc8], r10b
call fcn.1004125a0
movzx r10d, byte [rsp + 0xc8]
mov edi, dword [r12 + 0x1c]
mov qword [rsp + 0x120], 0x2464
cmp edi, 5
ja 0x10040a84f
cmp edi, 3
ja 0x10040af18
cmp edi, 2
je 0x10040ad1d
cmp edi, 3
jne 0x100408b9a
test rbp, rbp
je 0x10040b410
mov edi, dword [r12 + 0x20]
cmp edi, 9
jbe 0x10040b8c5
lea eax, [rdi - 0xa]
cmp eax, 1
ja 0x100408b9a
xor ebp, ebp
mov dword [rsp + 0xf0], ebp
cmp qword [rsp + 0xa8], 0
je 0x100408b9a
cmp edi, 0xa
je 0x10040be94
mov ebp, 0xb
mov eax, dword [r12 + 0x30]
test eax, eax
jne 0x10040bde0
mov rsi, qword [rsp + 0x7130]
mov rdi, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rsi
mov esi, dword [r12 + 0x5c]
mov r11d, dword [r12 + 0x60]
movzx r10d, di
cmp qword [rsp + 0x7118], 0
mov dword [rsp + 0xc8], esi
je 0x10040c2fb
mov rsi, qword [rsp + 0x7118]
mov r9d, dword [rsi]
test rbx, rbx
je 0x10040c303
movzx r8d, byte [rbx + 1]
neg eax
movzx ecx, byte [rsp + 0xc0]
mov dword [rsp + 0xf4], r11d
mov edx, eax
mov dword [rsp + 0xe8], r10d
mov r11, qword [rsp + 0x7120]
mov r10, qword [rsp + 0x7120]
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0xc0], ecx
movzx esi, byte [rsp + 0x9c]
movzx r11d, word [r11 + 0xe]
mov dword [rsp + 0xfc], r8d
mov r10d, dword [r10 + 8]
mov ecx, dword [rax + 4]
mov dword [rsp + 0xf8], r9d
mov dword [rsp + 0x9c], esi
lea rsi, [rsp + 0x340]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xd8], r10d
call fcn.100403680
mov r9d, dword [rsp + 0xc8]
mov edx, dword [rsp + 0x9c]
lea r11, [rsp + 0x120]
mov r10d, dword [rsp + 0xe8]
movzx ecx, byte [rsp + 0xc4]
mov qword [rsp + 0xe0], r11
mov dword [rsp + 0x60], r9d
mov r9d, dword [rsp + 0xf0]
mov dword [rsp + 0x40], edx
mov edx, dword [rsp + 0xc0]
mov dword [rsp + 0x78], r10d
mov r10d, dword [rsp + 0xd8]
mov dword [rsp + 0x58], r9d
mov r9d, dword [rsp + 0xf8]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0xd0]
mov r8d, dword [rsp + 0xfc]
mov qword [rsp + 0x88], r11
mov r11, qword [rsp + 0xb0]
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x28], edx
mov r9, qword [rsp + 0xb8]
mov rdx, r13
mov dword [rsp + 0x20], r10d
mov dword [rsp + 0xc4], ecx
mov qword [rsp + 0x70], r11
mov r11d, dword [rsp + 0xf4]
mov dword [rsp + 0x48], r8d
mov r8d, ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], r9
mov r9d, eax
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0x68], r11d
call fcn.100403fa0
test al, al
je 0x100408b9a
mov r8, qword [rsp + 0xa8]
mov r9d, dword [r12 + 0x30]
lea rcx, str.sending_1st_tcp_segment_0__zu_len_zu_seqovl_u_:
lea r10, [r8 - 1]
mov rdx, r10
mov qword [rsp + 0xc8], r10
call fcn.1004125a0
mov rcx, qword [rsp + 0xb0]
mov rdx, rdi
mov r8d, 0x20
lea rdi, [0x100426286]
call fcn.10040ecf0
mov rcx, rdi
call fcn.1004125a0
mov r9, rsi
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b9a
cmp ebp, 0xa
mov r10, qword [rsp + 0xc8]
je 0x10040c3ca
mov rax, qword [rsp + 0xa8]
cmp rax, qword [rsp + 0x7138]
jae 0x1004096e0
mov rax, qword [rsp + 0xa8]
mov r10d, dword [r12 + 0x5c]
mov qword [rsp + 0x120], 0x2464
movzx r8d, word [rsp + 0x7138]
sub r8d, eax
add rax, qword [rsp + 0x7130]
cmp qword [rsp + 0x7118], 0
mov rbp, rax
mov eax, dword [r12 + 0x60]
movzx r8d, r8w
mov dword [rsp + 0xb0], eax
je 0x10040c482
mov rax, qword [rsp + 0x7118]
mov r12d, dword [rax]
test rbx, rbx
je 0x10040c47b
movzx ebx, byte [rbx + 1]
mov rax, qword [rsp + 0x7120]
mov rdx, qword [rsp + 0x7120]
mov dword [rsp + 0xe8], r10d
mov dword [rsp + 0xd8], r8d
movzx r11d, word [rax + 0xe]
mov ecx, dword [rdx + 4]
mov eax, dword [rax + 8]
mov edx, dword [rsp + 0xa8]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xc8], eax
call fcn.100403680
mov dword [rsp + 0x48], ebx
mov rdx, r13
mov ebx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0xe0]
mov r9d, eax
mov r11d, dword [rsp + 0xd0]
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0x40], ebx
mov rbx, qword [rsp + 0xb8]
mov qword [rsp + 0x88], rcx
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x38], rbx
mov eax, dword [rsp + 0xc8]
mov ebx, dword [rsp + 0xc0]
mov r8d, dword [rsp + 0xd8]
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0xf0]
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x30], ebx
mov r10d, dword [rsp + 0xe8]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x78], r8d
mov r8d, dword [rsp + 0xc4]
mov dword [rsp + 0x58], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x60], r10d
mov dword [rsp + 0x50], r12d
call fcn.100403fa0
test al, al
je 0x100408b9a
mov rdx, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x7138]
lea rcx, str.sending_2nd_tcp_segment__zu__zu_len_zu_:
mov rax, qword [rsp + 0x7138]
sub rbx, rdx
mov r9, rbx
lea r8, [rax - 1]
call fcn.1004125a0
mov r8d, 0x20
mov rdx, rbx
mov rcx, rbp
call fcn.10040ecf0
mov rcx, rdi
call fcn.1004125a0
mov rax, qword [rsp + 0x120]
mov r9, rsi
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x70f8]
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
je 0x100408b9a
mov r15d, 2
jmp 0x100408b9a
mov rax, qword [0x10042ee40]
lea r12, [rax + 0x2050]
mov rcx, r12
call fcn.100402d70
lea rax, [rsp + 0x10c]
mov rdx, rbx
mov rcx, r12
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x110]
mov r8, qword [rsp + 0x7118]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0x7120]
mov qword [rsp + 0x28], rax
call fcn.100402340
mov r8, qword [rsp + 0x110]
test al, al
jne 0x1004098b0
test r8, r8
je 0x100409c98
cmp byte [r8 + 0x10], 0
jne 0x10040990b
mov r9d, dword [r8 + 0x80]
mov r8, qword [r8 + 0x88]
mov qword [rsp + 0x30], 0
mov ecx, 6
mov rdx, r13
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call fcn.100407f70
mov rcx, qword [rsp + 0x110]
mov r12, rax
test rcx, rcx
je 0x1004097c3
mov qword [rcx + 8], rax
mov byte [rcx + 0x10], 1
test r12, r12
je 0x10040990b
mov edx, 6
call fcn.100407b90
lea rax, [r12 + 0x3a40]
mov rcx, rax
mov qword [rsp + 0xa8], rax
call fcn.100413dc0
cmp word [r12 + 4], 0
jne 0x100409c50
mov dword [rsp + 0xb0], 0
xor r15d, r15d
cmp byte [rsp + 0x10c], 0
jne 0x100409b10
movzx edx, word [r12 + 6]
test dx, dx
je 0x100408cd2
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x100409fd0
cmp byte [rax + 0x7b], 0
mov r9d, dword [r12 + 0xc]
jne 0x100409cc0
test r9d, r9d
je 0x100409881
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040ad14
cmp dl, 0x73
je 0x10040ad07
xor r8d, r8d
cmp dl, 0x64
jne 0x10040986f
mov r8, qword [rax + 0x38]
lea rcx, str.wssize_cutoff_not_reached__mode__c_:__llu__u_n
call fcn.1004125a0
movzx edx, word [r12 + 6]
movzx r8d, byte [r12 + 9]
mov rcx, qword [rsp + 0x7120]
mov r15d, 1
call fcn.100406110
mov dword [rsp + 0xb0], 1
jmp 0x100408cd2
mov r12, qword [r8 + 8]
mov qword [rsp + 0x118], r8
test r12, r12
je 0x10040976a
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
call fcn.1004125a0
mov rcx, qword [rsp + 0x110]
jmp 0x1004097cc
mov rax, qword [rsp + 0x7118]
movzx eax, byte [rax + 7]
mov byte [rsp + 0x9c], al
jmp 0x100408bec
cmp byte [r15 + 0x10], 0
je 0x100409d90
lea rcx, str.matching_desync_profile_not_found_n
call fcn.1004125a0
jmp 0x100408b97
mov rdx, qword [rsp + 0x110]
mov rcx, r12
call fcn.100408920
test al, al
je 0x100408b9a
mov rcx, qword [rsp + 0x7120]
call fcn.100406030
test al, al
je 0x100409ec0
movzx r8d, byte [rsp + 0xa8]
mov eax, dword [r12 + 0x18]
cmp eax, 6
je 0x10040a63f
cmp eax, 7
jne 0x100408b9a
mov rcx, qword [rsp + 0x7120]
call fcn.100403810
test al, al
jne 0x10040b7a6
cmp qword [rsp + 0x7138], 0
jne 0x10040b878
xor edx, edx
lea rdi, [r12 + 0x1180]
cmp qword [rsp + 0x7118], 0
mov qword [rsp + 0x120], 0x2464
movzx ecx, word [r12 + 0x39d8]
je 0x1004099c5
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x1004099d0
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x120]
lea rsi, [rsp + 0x340]
mov qword [rsp + 0x88], r8
movzx r8d, byte [rsp + 0xc4]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
lea rcx, str.sending_SYN_with_fake_data_:
call fcn.1004125a0
mov rdx, qword [r12 + 0x39d8]
mov rcx, rdi
mov r8d, 0x20
call fcn.10040ecf0
lea rcx, [0x100426286]
call fcn.1004125a0
mov ebp, dword [r12 + 0x28]
mov rdi, qword [rsp + 0x120]
test ebp, ebp
jle 0x1004096e0
mov r12, qword [rsp + 0x70f8]
xor ebx, ebx
jmp 0x100409aeb
add ebx, 1
cmp ebp, ebx
je 0x1004096e0
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x100409ae0
jmp 0x100408b9a
mov rbx, qword [rsp + 0x110]
test rbx, rbx
je 0x100408b9a
movzx eax, byte [rbx + 0x78]
test al, al
je 0x100409cf8
cmp byte [rbx + 0x79], 0
je 0x100409d35
cmp qword [rbx + 0x88], 0
je 0x100408b9a
cmp byte [rbx + 0x90], 0
je 0x100408b9a
mov eax, dword [rbx + 0x54]
sub eax, dword [rbx + 0x60]
cmp eax, 1
jne 0x100408b9a
mov rax, qword [0x10042ee40]
cmp byte [rax + 0x1030], 0
jne 0x10040b39b
mov byte [rsp + 0x4c20], 0
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 4
jne 0x10040b312
cmp qword [rsp + 0x7138], 0
je 0x100408b9a
mov rax, qword [rsp + 0x110]
mov esi, dword [rax + 0x80]
cmp esi, 1
je 0x10040bd15
mov rbx, qword [rax + 0x88]
test rbx, rbx
je 0x100408b9a
mov rcx, qword [r12 + 0x3a40]
mov rdx, rbx
call fcn.100413a60
mov rdx, rax
test rax, rax
je 0x100409c24
mov rcx, qword [rsp + 0xa8]
call fcn.100413b50
mov edx, dword [r12]
mov r8, rbx
lea rcx, str.auto_hostlist__profile__d__:__s_:_fail_counter_reset._website_is_working._n
call fcn.1004125a0
mov ecx, esi
call fcn.100401df0
lea r9, [rsp + 0x4c20]
mov rdx, rbx
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_fail_counter_reset._website_is_working.
mov qword [rsp + 0x20], rax
mov r8d, dword [r12]
call fcn.100412a80
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 4
je 0x100408b9a
mov rcx, qword [rsp + 0x110]
call fcn.100401ec0
jmp 0x100408b9a
mov rcx, qword [rsp + 0x7120]
call fcn.100406020
test al, al
je 0x1004097fb
movzx edx, word [r12 + 4]
movzx r8d, byte [r12 + 8]
mov r15d, 1
mov rcx, qword [rsp + 0x7120]
call fcn.100406110
mov dword [rsp + 0xb0], 1
jmp 0x100409809
xor r9d, r9d
jmp 0x100409783
movzx r8d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r8b, r8b
cmove r8d, eax
jmp 0x100408d0d
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040a62c
cmp dl, 0x73
je 0x10040a61f
xor r8d, r8d
cmp dl, 0x64
jne 0x100409ce4
mov r8, qword [rax + 0x38]
lea rcx, str.wssize_cutoff_reached__mode__c_:__llu__u_._not_changing_wssize._n
call fcn.1004125a0
jmp 0x100408cd2
movzx edx, byte [rsp + 0x9c]
lea rcx, str.incoming_TTL__u_n
mov edi, edx
call fcn.1004125a0
mov rbx, qword [rsp + 0x110]
cmp byte [rbx + 0x79], 0
mov byte [rbx + 0x78], dil
jne 0x100409b37
test dil, dil
je 0x100409b37
movzx eax, byte [rsp + 0x9c]
cmp qword [rsp + 0x7118], 0
mov rdx, qword [rbx + 8]
je 0x10040b129
cmp byte [rdx + 0x55], 0
je 0x100409b37
add rdx, 0x55
movzx ecx, al
call fcn.1004079d0
mov byte [rbx + 0x79], al
test al, al
je 0x10040b85f
movzx edx, al
lea rcx, str.autottl:_guessed__u_n
call fcn.1004125a0
mov rbx, qword [rsp + 0x110]
test rbx, rbx
jne 0x100409b37
jmp 0x100408b9a
mov r9d, dword [r15 + 0x80]
mov r8, qword [r15 + 0x88]
mov rdx, r13
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov ecx, 6
mov qword [rsp + 0x20], 0
call fcn.100407f70
mov qword [r15 + 8], rax
mov r12, rax
mov rax, qword [rsp + 0x118]
mov byte [rax + 0x10], 1
test r12, r12
je 0x10040990b
movzx r15d, byte [rax + 0x79]
test r15b, r15b
jne 0x10040a320
mov dword [rsp + 0xb0], 0
jmp 0x100408ce9
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r8d, 1
call fcn.100415cc0
test al, al
jne 0x10040a372
mov r9, qword [rsp + 0x110]
test r9, r9
je 0x10040a150
cmp byte [r9 + 0x6c], 0
je 0x10040a150
mov eax, dword [r9 + 0x50]
sub eax, 0x1000000
sub eax, dword [r9 + 0x74]
cmp eax, 0x7effffff
jbe 0x10040b7b7
mov rax, qword [rsp + 0x118]
mov dword [rsp + 0xf0], 0
test rax, rax
je 0x10040b807
cmp byte [rax + 0x84], 0
jne 0x100409e91
mov ecx, dword [rax + 0x80]
test ecx, ecx
jne 0x10040a7f6
mov byte [rax + 0x84], 1
movzx edx, byte [rax]
mov byte [rsp + 0x10d], dl
movzx edx, byte [rax + 1]
movzx eax, byte [rax + 2]
mov byte [rsp + 0x10e], dl
mov byte [rsp + 0x10f], al
jmp 0x1004090a0
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 2
jne 0x100408b9a
cmp qword [rsp + 0x7138], 0
je 0x100408b9a
mov rax, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x110]
mov r8d, 6
mov qword [rsp + 0x130], 0
mov r9, qword [rsp + 0x7130]
mov qword [rsp + 0x20], rax
lea rdx, [rcx + 0x98]
call fcn.1004084a0
mov rcx, qword [rsp + 0x110]
test al, al
jne 0x10040a5fc
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x7130]
mov qword [rsp + 0xc8], rax
jmp 0x100408db8
lea rax, [r12 + 0x64]
mov ecx, dword [r12 + 0x3c]
mov rdx, rdi
mov r9, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov r8, qword [rsp + 0xc8]
mov rax, qword [r12 + 0x39a8]
mov qword [rsp + 0xd8], rax
call fcn.100415af0
mov rsi, qword [rsp + 0x110]
mov rdi, rax
test rsi, rsi
jne 0x100409105
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100409177
movzx r10d, byte [rax + 0x79]
test r10b, r10b
jne 0x10040919b
jmp 0x100409177
lea rcx, str.not_changing_wssize._wssize_is_set_but_conntrack_entry_is_missing_n
call fcn.1004125a0
jmp 0x100408cd2
mov edi, dword [rax + 0x48]
mov edx, dword [rax + 0x50]
mov ecx, 0x101
mov word [rax + 0x6b], cx
lea rcx, str.req_retrans_:_tcp_seq_interval__u__u_n
lea r8d, [rdi - 1]
movd xmm0, edx
movd xmm1, r8d
punpckldq xmm0, xmm1
movq qword [rax + 0x70], xmm0
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
test rax, rax
jne 0x100408eb9
nop dword [rax + rax]
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.1004125a0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b093
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 1
je 0x100408f14
cmp qword [rax + 0x88], 0
je 0x100408f50
mov edi, 1
jmp 0x100409e91
lea rcx, [r12 + 0x3a18]
call fcn.100414140
test al, al
jne 0x10040ac4d
cmp byte [rsp + 0x10d], 0
movzx eax, byte [rsp + 0x10e]
je 0x10040b05f
mov rcx, qword [rsp + 0x118]
test al, al
je 0x10040ab2c
test rcx, rcx
je 0x1004090a9
cmp byte [rcx + 0x90], 0
je 0x1004090a9
mov byte [rcx + 0x6a], 0xff
mov edx, 6
call fcn.100407b90
jmp 0x1004090a9
lea rax, [r12 + 0x618]
mov ecx, dword [r12 + 0x40]
mov rdx, rdi
mov r9, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [r12 + 0x39b0]
mov dword [rsp + 0x20], 0
mov r8, qword [rsp + 0xc8]
mov qword [rsp + 0xd8], rax
call fcn.1004162e0
mov rsi, qword [rsp + 0x110]
mov rdi, rax
test rsi, rsi
jne 0x100409105
jmp 0x100409fa6
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b807
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 0
jne 0x100409e91
jmp 0x100409e7c
test dword [r12 + 0x10], 0xffffff
je 0x1004091a9
mov r8, qword [rsp + 0x7138]
mov rdx, qword [rsp + 0x7130]
lea rcx, [rsp + 0x130]
mov byte [rsp + 0xc8], r10b
call fcn.1004155b0
movzx r10d, byte [rsp + 0xc8]
test al, al
je 0x1004091a9
cmp byte [r12 + 0x10], 0
jne 0x10040b9e5
cmp byte [r12 + 0x12], 0
jne 0x10040b924
cmp byte [r12 + 0x11], 0
je 0x1004091a9
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
mov r9d, 0xe
lea r8, str._r_nUser_Agent:
mov byte [rsp + 0xc8], r10b
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc8]
test rax, rax
je 0x1004091a9
mov rcx, rax
mov rsi, qword [rsp + 0x7138]
sub rcx, qword [rsp + 0x7130]
mov r9d, 2
lea r8, [0x100426551]
lea rdx, [rsi - 1]
sub rdx, rcx
lea rcx, [rax + 1]
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc8]
test rax, rax
mov rsi, rax
je 0x1004091a9
lea rcx, str.removing_space_after_Host:_and_adding_it_to_User_Agent:_n
mov byte [rsp + 0xb0], r10b
call fcn.1004125a0
mov rax, qword [rsp + 0x130]
movzx r10d, byte [rsp + 0xb0]
cmp rax, rsi
jae 0x10040c37c
mov r8, rsi
lea rdx, [rax + 6]
lea rcx, [rax + 5]
sub r8, rax
sub r8, 6
call sub.cygwin1.dll_memmove
mov byte [rsi - 1], 0x20
movzx r10d, byte [rsp + 0xb0]
mov dword [rsp + 0xb0], 1
mov r15d, 1
jmp 0x1004091a9
cmp rbp, rdi
jb 0x10040ac00
mov r9, qword [rsp + 0x7138]
mov r8, rbp
mov rdx, rdi
lea rcx, str.split_pos__zu_is_outside_of_this_packet__zu__zu_n
mov byte [rsp + 0xc8], r10b
add r9, rbp
call fcn.1004125a0
mov qword [rsp + 0xa8], 0
movzx r10d, byte [rsp + 0xc8]
jmp 0x100409228
mov rax, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
or r14d, edi
xor r15d, r15d
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xc4], al
call fcn.100403790
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xc0], al
call fcn.100403710
mov dword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], rax
jmp 0x100408d5d
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
call fcn.100415ca0
lea rcx, str.packet_contains_partial_TLS_ClientHello_n
test al, al
mov byte [rsp + 0xf0], al
lea rax, str.packet_contains_full_TLS_ClientHello_n
cmovne rcx, rax
call fcn.1004125a0
mov dword [rsp + 0x20], 1
lea rax, [rsp + 0x240]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.100416020
mov r9, qword [rsp + 0x110]
mov r11d, eax
test r9, r9
je 0x10040b1a4
movzx r10d, byte [rsp + 0xf0]
mov eax, dword [r9 + 0x80]
test eax, eax
jne 0x10040a410
mov dword [r9 + 0x80], 2
movzx eax, byte [r9 + 0x6c]
test r10b, r10b
jne 0x10040b086
cmp qword [r9 + 0xa8], 0
jne 0x10040b468
cmp byte [r9 + 0x6d], 0
jne 0x10040b086
test al, al
je 0x10040a472
mov edx, dword [r9 + 0x70]
mov ecx, dword [r9 + 0x50]
mov byte [rsp + 0xd8], r11b
mov r8d, dword [r9 + 0x74]
mov byte [rsp + 0xf0], r10b
call fcn.10040f620
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
test al, al
jne 0x10040a4e0
mov rcx, qword [rsp + 0x7130]
mov byte [rsp + 0xd8], r11b
mov byte [rsp + 0xf0], r10b
call fcn.100415c90
mov rcx, qword [rsp + 0x110]
mov r8d, 6
mov r9, rax
mov rax, qword [rsp + 0x7138]
lea rdx, [rcx + 0x98]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7130]
mov qword [rsp + 0x20], rax
call fcn.100407ea0
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
test al, al
je 0x10040b110
mov r9, qword [rsp + 0x110]
cmp byte [r9 + 0x6c], 0
jne 0x10040a549
cmp byte [r9 + 0x6b], 0
je 0x10040b794
mov edx, dword [r9 + 0x70]
mov eax, dword [r9 + 0x48]
lea rcx, str.req_retrans_:_seq_interval__u__u_n
mov byte [rsp + 0xd8], r11b
mov byte [rsp + 0xf0], r10b
lea r8d, [rax - 1]
mov dword [r9 + 0x74], r8d
call fcn.1004125a0
mov r9, qword [rsp + 0x110]
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
or byte [r9 + 0x6c], r10b
test r10b, r10b
jne 0x10040a557
cmp qword [r9 + 0xa8], 0
jne 0x10040b470
mov rax, qword [r9 + 8]
test rax, rax
je 0x10040a572
cmp word [rax + 6], 0
je 0x10040a572
cmp byte [r9 + 0x7b], 0
je 0x10040be48
cmp qword [r9 + 0xa8], 0
mov rax, r9
jne 0x10040b470
cmp byte [r12 + 0x25], 0
jne 0x10040b770
cmp byte [r9 + 0x6c], 0
jne 0x10040ac67
test r11b, r11b
jne 0x10040b1b8
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040ac99
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 2
jne 0x100409e91
jmp 0x100409e7c
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100425b08]
call fcn.1004125a0
lea rcx, [rsi + 0x98]
call fcn.100403360
jmp 0x100409113
mov rax, qword [rcx + 0x98]
mov qword [rsp + 0xc8], rax
mov rax, qword [rcx + 0xb0]
mov qword [rsp + 0xa8], rax
jmp 0x100408db8
mov r8d, dword [rax + 0x50]
sub r8d, dword [rax + 0x5c]
jmp 0x100409ce4
mov r8, qword [rax + 0x28]
jmp 0x100409ce4
mov edi, 1
jmp 0x10040a2e1
xor edx, edx
mov r10d, dword [r12 + 0x60]
mov r9d, dword [r12 + 0x5c]
mov qword [rsp + 0x120], 0x2464
cmp qword [rsp + 0x7118], 0
mov ecx, dword [r12 + 0x58]
je 0x10040a671
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040a67c
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0xb8]
lea r11, [rsp + 0x120]
lea rsi, [rsp + 0x340]
mov dword [rsp + 0x58], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x40], r8d
mov r8d, 0x12
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x68], r10d
mov dword [rsp + 0x60], r9d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
lea rcx, str.sending_fake_SYNACK_n
xor ebx, ebx
call fcn.1004125a0
mov ebp, dword [r12 + 0x28]
mov rdi, qword [rsp + 0x120]
test ebp, ebp
jle 0x100408b9a
mov r12, qword [rsp + 0x70f8]
jmp 0x10040a76b
add ebx, 1
cmp ebp, ebx
je 0x100408b9a
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x10040a760
jmp 0x100408b9a
mov rcx, qword [rsp + 0xa0]
lea rsi, [rsp + 0x27b0]
mov r8d, 0x30
mov byte [rsp + 0xe0], r10b
mov rdx, rsi
call fcn.10040efb0
lea rax, [rsp + 0x4c20]
mov r8d, 0x30
mov rcx, r13
mov rdx, rax
mov qword [rsp + 0xc8], rax
call fcn.10040efb0
mov r8, qword [rsp + 0xc8]
mov rdx, rsi
lea rcx, str.dpi_desync_src_s_dst_s_n
call fcn.1004125a0
movzx r10d, byte [rsp + 0xe0]
jmp 0x1004091ca
mov byte [rax + 0x84], 1
lea rcx, str.discovered_l7_protocol_n
call fcn.1004125a0
mov byte [rsp + 0x10d], 0
mov rdx, qword [rsp + 0x118]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
test rdx, rdx
je 0x10040b1fa
mov r8, qword [rdx + 0x88]
jmp 0x100408fba
lea rcx, str.not_applying_tampering_to_unknown_protocol_n
call fcn.1004125a0
jmp 0x100408b9a
lea eax, [rdi - 0xd]
cmp eax, 2
ja 0x10040b3d8
mov dword [rsp + 0xf0], 0x10
cmp edi, 0xd
je 0x10040a882
cmp edi, 0xe
mov edx, pe_nt_image_headers64
mov eax, 0x40
cmovne eax, edx
mov dword [rsp + 0xf0], eax
cmp qword [rsp + 0x7118], 0
mov edi, dword [r12 + 0x20]
je 0x10040b3e3
test edi, edi
je 0x10040b20f
cmp edi, 8
jne 0x10040b889
cmp qword [rsp + 0xa8], 0
je 0x10040b20f
mov edx, dword [r12 + 0x30]
mov rsi, qword [rsp + 0xa8]
mov rax, rdx
cmp rdx, rsi
jae 0x10040c083
mov rsi, qword [rsp + 0xa8]
cmp rsi, qword [rsp + 0x7138]
jb 0x10040ba5c
movzx eax, byte [rsp + 0xc4]
movzx ebp, byte [rsp + 0xc0]
mov dword [rsp + 0xc4], eax
movzx esi, word [rsp + 0xa8]
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov dword [rsp + 0xb0], esi
cmp edi, 8
je 0x10040c0e8
mov qword [rsp + 0x120], 0x2464
xor r8d, r8d
cmp qword [rsp + 0x7118], 0
je 0x10040a943
mov rsi, qword [rsp + 0x7118]
mov r8d, dword [rsi]
test rbx, rbx
je 0x10040c30b
movzx ecx, byte [rbx + 1]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0xf0]
lea r9, [rsp + 0x120]
lea rbx, [rsp + 0x340]
mov esi, dword [rsp + 0xb0]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x9c]
mov dword [rsp + 0x78], esi
mov rsi, qword [rsp + 0x7130]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xc4]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x48], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
mov rsi, qword [rsp + 0xa8]
lea rcx, str.sending_1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rbp, [rsi - 1]
mov r8, rsi
mov rdx, rbp
call fcn.1004125a0
mov rcx, qword [rsp + 0x7130]
mov rdx, rsi
mov r8d, 0x20
lea rsi, [0x100426286]
call fcn.10040ecf0
mov rcx, rsi
call fcn.1004125a0
mov r9, rbx
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b9a
cmp edi, 8
jne 0x1004096e0
mov rdi, qword [rsp + 0xa8]
mov rdx, rbp
lea rcx, str.sending_fake_2__1st_out_of_order_tcp_segment_0__zu_len_zu_:
xor ebx, ebx
mov r8, rdi
call fcn.1004125a0
mov rdx, rdi
mov r8d, 0x20
lea rcx, [0x100440080]
call fcn.10040ecf0
mov rcx, rsi
lea rsi, [rsp + 0x4c20]
call fcn.1004125a0
mov rbp, qword [rsp + 0x27b0]
mov edi, dword [r12 + 0x28]
jmp 0x10040aad6
add ebx, 1
cmp edi, ebx
jle 0x1004096e0
mov qword [rsp + 0x20], rbp
mov r9, rsi
mov edx, r14d
mov rcx, r13
mov r8, qword [rsp + 0x70f8]
call fcn.100407720
test al, al
jne 0x10040aad3
jmp 0x100408b9a
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100425b08]
call fcn.1004125a0
lea rcx, [rdi + 0x98]
call fcn.100403360
jmp 0x100408e26
test rcx, rcx
je 0x10040ab4d
cmp qword [r12 + 0x3a28], 0
je 0x10040ab47
movzx eax, byte [rsp + 0x10f]
xor eax, 1
mov byte [rcx + 0x90], al
lea rcx, str.not_applying_tampering_to_this_request_n
call fcn.1004125a0
mov rbx, qword [rsp + 0x110]
test rbx, rbx
je 0x100408b9a
cmp qword [rbx + 0xa8], 0
jne 0x10040b7c1
add rbx, 0xb8
mov rcx, rbx
call fcn.1004124f0
test al, al
jne 0x100408b9a
mov rcx, rbx
call fcn.1004124c0
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.1004125a0
mov rcx, rbx
call fcn.1004078c0
jmp 0x100408b9a
movzx r10d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
jmp 0x10040919b
mov rcx, rsi
call fcn.1004124c0
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.1004125a0
mov rcx, rsi
call fcn.1004078c0
jmp 0x10040912a
lea rcx, str.not_applying_tampering_to_HTTP_without_Host:_n
call fcn.1004125a0
jmp 0x100408b9a
mov rax, rdi
sub rax, rbp
mov qword [rsp + 0xa8], rax
cmp rax, qword [rsp + 0x7138]
jae 0x10040a2e1
cmp rax, rdi
je 0x100409203
mov r8, rax
mov rdx, rdi
lea rcx, str.split_pos_was_normalized_to_packet_data_offset_:__zu_____zu_n
mov byte [rsp + 0xc8], r10b
call fcn.1004125a0
movzx r10d, byte [rsp + 0xc8]
jmp 0x100409228
lea rcx, [r12 + 0x3a20]
call fcn.100414140
test al, al
jne 0x1004090a9
jmp 0x10040a092
mov eax, dword [r9 + 0x50]
sub eax, 0x1000000
sub eax, dword [r9 + 0x74]
cmp eax, 0x7effffff
jbe 0x10040b8bb
test r11b, r11b
jne 0x10040c48a
mov rax, qword [rsp + 0x118]
test rax, rax
jne 0x10040c4bf
lea rcx, str.discovered_l7_protocol_n
call fcn.1004125a0
mov byte [rsp + 0x10d], 0
mov rdx, qword [rsp + 0x118]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
mov dword [rsp + 0xf0], 2
jmp 0x10040a829
mov byte [rsp + 0x10d], 0
mov r9d, dword [rsp + 0xf0]
mov edi, 1
mov byte [rsp + 0x10e], 0
mov r8, qword [rsp + 0xd0]
mov byte [rsp + 0x10f], 0
jmp 0x100408fc1
mov r8d, dword [rax + 0x50]
sub r8d, dword [rax + 0x5c]
jmp 0x10040986f
mov r8, qword [rax + 0x28]
jmp 0x10040986f
test rbp, rbp
jne 0x100408b9a
xor edx, edx
mov r8d, dword [r12 + 0x60]
mov ecx, dword [r12 + 0x5c]
cmp qword [rsp + 0x7118], 0
mov edi, dword [r12 + 0x58]
movzx r9d, word [rsp + 0xd8]
je 0x10040ad55
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040ad60
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, r10b
lea r11, [rsp + 0x120]
movzx ebp, byte [rsp + 0xc0]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
lea rsi, [rsp + 0x340]
mov qword [rsp + 0x88], r11
mov r11, qword [rsp + 0xd0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x68], r8d
movzx r8d, byte [rsp + 0xc4]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0x78], r9d
mov qword [rsp + 0x70], r11
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov byte [rsp + 0xf0], r10b
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
lea rcx, str.sending_fake_request_:
call fcn.1004125a0
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0xd0]
mov r8d, 0x20
call fcn.10040ecf0
lea rcx, [0x100426286]
call fcn.1004125a0
movzx r10d, byte [rsp + 0xf0]
mov edx, dword [r12 + 0x28]
mov rbp, qword [rsp + 0x120]
xor edi, edi
test edx, edx
jle 0x10040aed7
mov qword [rsp + 0xc8], r12
mov r12, qword [rsp + 0x70f8]
mov qword [rsp + 0x7110], rbx
mov ebx, edi
mov edi, edx
mov byte [rsp + 0xf0], r10b
jmp 0x10040ae9f
add ebx, 1
cmp edi, ebx
je 0x10040aebe
mov qword [rsp + 0x20], rbp
mov r9, rsi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x10040ae98
jmp 0x100408b9a
mov r12, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x7110]
movzx r10d, byte [rsp + 0xf0]
mov edi, dword [r12 + 0x20]
test edi, edi
je 0x10040b13c
cmp edi, 8
jne 0x10040b55d
mov qword [rsp + 0x120], 0x2464
xor r11d, r11d
mov dword [rsp + 0xf0], r11d
cmp qword [rsp + 0xa8], 0
je 0x100408b9a
jmp 0x10040a8b6
test rbp, rbp
jne 0x100408b9a
mov eax, dword [r12 + 0x58]
xor edx, edx
mov ecx, dword [r12 + 0x60]
cmp qword [rsp + 0x7118], 0
mov r11d, dword [r12 + 0x5c]
mov dword [rsp + 0xf0], eax
je 0x10040af4e
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040af59
movzx eax, byte [rbx + 1]
mov r9, qword [rsp + 0x7120]
cmp edi, 5
mov rsi, qword [rsp + 0x7120]
mov r8d, 4
mov edi, dword [rsp + 0xf0]
movzx ebp, byte [rsp + 0xc0]
mov byte [rsp + 0xf0], r10b
mov r9d, dword [r9 + 8]
movzx esi, word [rsi + 0xe]
mov dword [rsp + 0x48], eax
movzx eax, r10b
mov dword [rsp + 0x40], eax
mov dword [rsp + 0xd0], r9d
mov r9d, 0x14
mov dword [rsp + 0xc8], esi
cmove r8d, r9d
mov eax, dword [rsp + 0xc8]
lea r9, [rsp + 0x120]
mov qword [rsp + 0x88], r9
mov r9d, dword [rsp + 0xd0]
lea rsi, [rsp + 0x340]
mov dword [rsp + 0x58], edi
mov rdi, qword [rsp + 0xb8]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x68], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x60], r11d
mov qword [rsp + 0x38], rdi
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
lea rcx, str.sending_fake_RST_RSTACK_n
call fcn.1004125a0
movzx r10d, byte [rsp + 0xf0]
jmp 0x10040ae58
lea rdx, [rsp + 0x240]
xor r9d, r9d
lea r8, [rsp + 0x10f]
mov rcx, r12
call fcn.1004106d0
mov byte [rsp + 0x10e], al
jmp 0x10040a0a8
test al, al
jne 0x10040a557
jmp 0x10040a4ef
mov dword [rsp + 0xf0], 1
jmp 0x100408f29
mov dword [rsp + 0xf0], 0
jmp 0x100409177
mov rcx, rdi
call fcn.1004124c0
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.1004125a0
mov rcx, rdi
call fcn.1004078c0
jmp 0x100408e3d
mov rcx, qword [rsp + 0x110]
mov edx, 6
mov qword [rsp + 0xd0], r8
call fcn.100407b90
mov rdx, rcx
mov rcx, qword [rsp + 0xd0]
call fcn.100408920
mov r8, qword [rsp + 0xd0]
test al, al
jne 0x10040909d
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408560
jmp 0x100408b9a
cmp byte [rdx + 0x52], 0
je 0x100409b37
add rdx, 0x52
jmp 0x100409d56
mov rax, qword [rsp + 0x7108]
mov r8, qword [rsp + 0x7138]
lea rcx, str.reinjecting_original_packet._len_zu_len_payload_zu_n
mov rdx, qword [rax]
call fcn.1004125a0
mov rax, qword [rsp + 0x7118]
mov r9, rbx
mov r8, qword [rsp + 0x7128]
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov rax, qword [rsp + 0x7108]
mov r9, qword [rsp + 0x7100]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
jmp 0x1004096c5
cmp byte [r12 + 0x25], 0
je 0x10040a59a
test al, al
je 0x10040b8ff
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.1004125a0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040ba4c
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 2
jne 0x10040a065
jmp 0x100408f14
mov r9d, dword [rsp + 0xf0]
lea r8, [rsp + 0x240]
jmp 0x100408fc1
mov rax, qword [rsp + 0x7118]
movzx ecx, word [rsp + 0x7138]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040b22c
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x120]
lea rbx, [rsp + 0x340]
mov rsi, qword [rsp + 0x7130]
mov qword [rsp + 0x88], r8
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x70], rsi
mov esi, dword [rsp + 0xf0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x50], edx
mov rdx, r13
movzx r8d, byte [rsp + 0xc4]
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], esi
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
lea rcx, str.resending_original_packet_with_extension_header_n
call fcn.1004125a0
mov rax, qword [rsp + 0x120]
mov r9, rbx
mov qword [rsp + 0x20], rax
jmp 0x1004096c5
mov rax, qword [rsp + 0x110]
lea rcx, str.incoming_RST_detected_for_hostname__s_n
lea rsi, [rsp + 0x4c20]
mov rdx, qword [rax + 0x88]
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
mov ecx, dword [rax + 0x80]
call fcn.100401df0
mov r9, rsi
mov rcx, rax
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 8]
mov r8d, dword [rdx]
mov rdx, qword [rax + 0x88]
mov qword [rsp + 0x20], rcx
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_incoming_RST
call fcn.100412a80
mov rax, qword [rsp + 0x110]
mov r8, rsi
mov rcx, r12
mov rdx, qword [rax + 0x88]
mov r9d, dword [rax + 0x80]
call fcn.100407c40
jmp 0x100409c24
lea rdx, [rsp + 0x4c20]
mov r8d, 0x30
mov rcx, r13
call fcn.10040efb0
jmp 0x100409b7d
lea rcx, str.forced_wssize_cutoff_n
call fcn.1004125a0
mov byte [rdi + 0x7b], 1
mov edx, 6
mov rcx, rdi
call fcn.100407b90
jmp 0x100408e68
mov dword [rsp + 0xf0], 0
cmp edi, 0xb
ja 0x10040bdd2
cmp edi, 9
ja 0x100409289
lea eax, [rdi - 8]
cmp eax, 1
jbe 0x10040af04
jmp 0x100408b9a
mov esi, dword [rsp + 0xf0]
test esi, esi
jne 0x10040ad26
lea rcx, str.not_applying_fake_because_of_unknown_protocol_n
mov byte [rsp + 0xc8], r10b
call fcn.1004125a0
mov edi, dword [r12 + 0x20]
mov qword [rsp + 0x120], 0x2464
cmp edi, 0xb
ja 0x10040c01a
movzx r10d, byte [rsp + 0xc8]
cmp edi, 9
ja 0x100409289
jmp 0x10040b3f5
test al, al
je 0x10040a4ef
mov rax, qword [rsp + 0x7118]
mov r8, qword [rsp + 0x7128]
mov r9, rbx
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov rax, qword [rsp + 0x110]
mov r8d, r14d
mov rdx, r13
mov r9, qword [rsp + 0x70f8]
lea rcx, [rax + 0xb8]
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x7108]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7100]
mov qword [rsp + 0x20], rax
call fcn.100412380
test rax, rax
je 0x10040ba3b
mov rax, qword [rsp + 0x110]
lea rcx, [rax + 0xb8]
call fcn.1004124c0
lea rcx, str.DELAY_desync_until_reasm_is_complete___u__n
mov edx, eax
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 0xa8]
test rdx, rdx
je 0x1004096e0
cmp rdx, qword [rax + 0xb0]
jne 0x1004096e0
lea rcx, [rax + 0xb8]
call fcn.10040c900
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_finished_n
call fcn.100408560
jmp 0x1004096e0
lea eax, [rdi - 9]
cmp eax, 3
ja 0x10040b13c
mov qword [rsp + 0x120], 0x2464
xor r9d, r9d
mov dword [rsp + 0xf0], r9d
cmp edi, 0xc
jne 0x10040b3ec
mov rax, qword [rsp + 0x7118]
mov r9, rbx
mov esi, 0x18
mov r8, qword [rsp + 0x7128]
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov eax, dword [r12 + 0x34]
test eax, eax
je 0x10040b5d4
mov esi, eax
cmp rsi, qword [rsp + 0x7128]
jb 0x10040b5d4
mov esi, 0x18
test rbx, rbx
je 0x10040c312
movzx ebx, word [rbx + 4]
test bx, bx
je 0x10040c29c
mov rax, qword [rsp + 0x7108]
cmp qword [rsp + 0x7118], 0
mov qword [rsp + 0x120], 0x2464
mov qword [rsp + 0x128], 0x2464
mov r8, qword [rax]
je 0x10040b631
mov eax, dword [rsp + 0xf0]
cmp eax, 0x10
je 0x10040c028
cmp eax, 0x40
je 0x10040c028
mov qword [rsp + 0x138], r8
lea rax, [rsp + 0x128]
lea rdi, [rsp + 0x27b0]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x7100]
mov qword [rsp + 0x38], rax
lea rbp, [rsp + 0x340]
mov r9d, ebx
mov r8, rsi
lea rax, [rsp + 0x120]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
call fcn.100404eb0
test al, al
je 0x100408b9a
lea rdx, [rsi - 1]
mov r8, rsi
lea rcx, str.sending_1st_ip_fragment_0__zu_ip_payload_len_zu_:
call fcn.1004125a0
mov rdx, qword [rsp + 0x120]
mov r8d, 0x50
mov rcx, rbp
lea rbx, [0x100426286]
call fcn.10040ecf0
mov rcx, rbx
call fcn.1004125a0
mov r9, rbp
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b9a
mov r9, qword [rsp + 0x7128]
mov rax, qword [rsp + 0x7128]
mov rdx, rsi
lea rcx, str.sending_2nd_ip_fragment__zu__zu_ip_payload_len_zu_:
sub r9, rsi
lea r8, [rax - 1]
call fcn.1004125a0
mov rdx, qword [rsp + 0x128]
mov r8d, 0x50
mov rcx, rdi
call fcn.10040ecf0
mov rcx, rbx
call fcn.1004125a0
mov r9, rdi
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x128]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
mov eax, 2
cmovne r15d, eax
jmp 0x100408b9a
test r11b, r11b
je 0x10040b8ff
cmp byte [r9 + 0x6c], 0
je 0x10040b1b8
mov dword [rsp + 0xf0], 2
jmp 0x100408ece
mov edx, dword [r9 + 0x50]
mov byte [r9 + 0x6b], 1
mov dword [r9 + 0x70], edx
jmp 0x10040a4fe
lea rcx, str.received_SYN_with_TCP_fast_open_option._syndata_desync_is_not_applied._n
call fcn.1004125a0
jmp 0x100408b9a
mov byte [r9 + 0x6d], 1
jmp 0x100409e57
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100425b08]
call fcn.1004125a0
lea rcx, [rbx + 0x98]
call fcn.100403360
jmp 0x10040ab78
mov byte [rsp + 0x10d], 0
mov edi, 1
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
jmp 0x10040a832
mov byte [rsp + 0x10d], 0
mov edi, dword [r12 + 0x2c]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
jmp 0x1004090d2
call fcn.1004079d0
mov r8, qword [rsp + 0xd0]
test al, al
mov byte [r12 + 0x79], al
je 0x10040b8de
movzx edx, al
lea rcx, str.autottl:_guessed__u_n
call fcn.1004125a0
mov r8, qword [rsp + 0xd0]
jmp 0x100409094
lea rcx, str.autottl:_could_not_guess_n
call fcn.1004125a0
mov rbx, qword [rsp + 0x110]
jmp 0x100409d80
lea rcx, str.received_SYN_with_data_payload._syndata_desync_is_not_applied._n
call fcn.1004125a0
jmp 0x100408b9a
lea eax, [rdi - 9]
cmp eax, 3
ja 0x10040b20f
cmp qword [rsp + 0xa8], 0
jne 0x10040c2b8
cmp edi, 0xc
jne 0x10040b20f
test rbp, rbp
jne 0x100408b9a
jmp 0x10040b589
mov byte [r9 + 0x6d], 1
jmp 0x10040ac7f
cmp edi, 7
jbe 0x100408b9a
xor r8d, r8d
mov dword [rsp + 0xf0], r8d
jmp 0x10040af04
lea rcx, str.autottl:_could_not_guess_n
mov qword [rsp + 0xd0], r8
call fcn.1004125a0
mov r8, qword [rsp + 0xd0]
jmp 0x100409094
lea rcx, str.not_applying_tampering_to_TLS_ClientHello_without_hostname_in_the_SNI_n
call fcn.1004125a0
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408560
jmp 0x100408b9a
lea rcx, str.mixing_domain_case_n
mov byte [rsp + 0xb0], r10b
call fcn.1004125a0
mov rax, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x7130]
add rsi, qword [rsp + 0x7138]
movzx r10d, byte [rsp + 0xb0]
lea r15, [rax + 5]
cmp r15, rsi
jae 0x10040b9b4
mov byte [rsp + 0xb0], r10b
mov qword [rsp + 0x7110], rbx
mov rbx, rsi
movzx eax, byte [r15]
cmp al, 0xd
je 0x10040b9a3
cmp al, 0xa
je 0x10040b9a3
movzx esi, al
test r15b, 1
je 0x10040b9ca
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, esi
add r15, 1
call sub.cygwin1.dll_tolower
mov byte [r15 - 1], al
cmp rbx, r15
jne 0x10040b975
movzx r10d, byte [rsp + 0xb0]
mov rbx, qword [rsp + 0x7110]
mov dword [rsp + 0xb0], 1
mov r15d, 1
jmp 0x10040a1dd
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, esi
add r15, 1
call sub.cygwin1.dll_toupper
mov byte [r15 - 1], al
cmp r15, rbx
jne 0x10040b975
jmp 0x10040b9a3
movsx eax, byte [r12 + 0x16]
movsx edx, byte [r12 + 0x13]
lea rcx, str.modifying_Host:____c_c_c_c:_n
mov r15d, 1
movsx r9d, byte [r12 + 0x15]
movsx r8d, byte [r12 + 0x14]
mov dword [rsp + 0x20], eax
call fcn.1004125a0
mov edx, dword [r12 + 0x13]
mov rax, qword [rsp + 0x130]
mov dword [rsp + 0xb0], 1
movzx r10d, byte [rsp + 0xc8]
mov dword [rax], edx
jmp 0x10040a1d1
lea rcx, str.rawpacket_queue_failed___n
call fcn.100412860
jmp 0x10040b110
mov dword [rsp + 0xf0], 2
jmp 0x100408f29
mov rsi, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0xa8]
sub rsi, rcx
test edx, edx
je 0x10040c094
lea rax, [rdx + rsi]
mov qword [rsp + 0x27b0], rax
cmp rax, 0x2464
ja 0x10040c34b
lea rbp, [rsp + 0x4c20]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov byte [rsp + 0xc8], r10b
mov rcx, rbp
call fcn.10040f710
mov ecx, dword [r12 + 0x30]
mov rdx, qword [rsp + 0xa8]
mov r8, rsi
add rdx, qword [rsp + 0x7130]
add rcx, rbp
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xb0], rbp
mov eax, dword [r12 + 0x30]
movzx r10d, byte [rsp + 0xc8]
movzx edx, word [rsp + 0x27b0]
mov r11d, dword [r12 + 0x60]
cmp qword [rsp + 0x7118], 0
mov dword [rsp + 0xc8], edx
mov edx, dword [r12 + 0x5c]
mov dword [rsp + 0xd0], edx
je 0x10040c374
mov rdx, qword [rsp + 0x7118]
mov r8d, dword [rdx]
test rbx, rbx
je 0x10040c36d
movzx ebp, byte [rbx + 1]
mov rdx, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
neg eax
mov byte [rsp + 0xf4], r10b
mov r10, qword [rsp + 0x7120]
mov dword [rsp + 0xfc], r8d
movzx edx, word [rdx + 0xe]
mov ecx, dword [rcx + 8]
mov dword [rsp + 0xf8], r11d
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xd8], edx
mov edx, dword [rsp + 0xa8]
mov dword [rsp + 0xe0], ecx
mov ecx, dword [r10 + 4]
call fcn.100403680
mov edx, dword [rsp + 0xe8]
mov ecx, eax
call fcn.100403680
mov edx, dword [rsp + 0xd8]
mov dword [rsp + 0x48], ebp
mov r8d, dword [rsp + 0xc8]
mov r11d, dword [rsp + 0xf8]
mov r9d, eax
lea rax, [rsp + 0x120]
movzx ebp, byte [rsp + 0xc0]
mov rcx, qword [rsp + 0xb0]
mov dword [rsp + 0x28], edx
mov rdx, r13
movzx r10d, byte [rsp + 0xc4]
mov dword [rsp + 0x78], r8d
mov r8d, dword [rsp + 0xd0]
mov dword [rsp + 0x68], r11d
mov r11d, dword [rsp + 0xe0]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x340]
mov dword [rsp + 0x60], r8d
mov r8d, dword [rsp + 0xf0]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x58], r8d
mov r8d, dword [rsp + 0xfc]
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x50], r8d
mov r8, qword [rsp + 0xb8]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x80], rax
movzx eax, byte [rsp + 0x9c]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], r8
mov r8d, r10d
mov dword [rsp + 0xc4], r10d
mov dword [rsp + 0x40], eax
call fcn.100403fa0
test al, al
je 0x100408b9a
mov eax, dword [r12 + 0x30]
mov r9, rsi
mov rsi, qword [rsp + 0x7138]
lea rcx, str.sending_2nd_out_of_order_tcp_segment__zu__zu_len_zu_seqovl_u_:
mov rdx, qword [rsp + 0xa8]
mov dword [rsp + 0x20], eax
lea r8, [rsi - 1]
call fcn.1004125a0
mov rdx, qword [rsp + 0x27b0]
mov rcx, qword [rsp + 0xb0]
mov r8d, 0x20
call fcn.10040ecf0
lea rcx, [0x100426286]
call fcn.1004125a0
mov rax, qword [rsp + 0x120]
mov edx, r14d
mov rcx, r13
mov r9, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
movzx r10d, byte [rsp + 0xf4]
test al, al
jne 0x10040a8fc
jmp 0x100408b9a
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
call fcn.100415630
test al, al
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 0x88]
je 0x10040c0b9
lea rcx, str.incoming_HTTP_reply_detected_for_hostname__s_n
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
mov r8, qword [rax + 0x88]
call fcn.100415890
test al, al
je 0x10040c35c
lea rcx, str.redirect_to_another_domain_detected._possibly_DPI_redirect._n
lea rsi, [rsp + 0x4c20]
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
mov ecx, dword [rax + 0x80]
call fcn.100401df0
mov r9, rsi
mov r8, rax
mov rax, qword [rsp + 0x110]
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0x88]
mov qword [rsp + 0x20], r8
mov r8d, dword [rcx]
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_redirect_to_another_domain
call fcn.100412a80
jmp 0x10040b375
cmp edi, 0xc
je 0x10040b8ad
jmp 0x100408b9a
mov edx, eax
mov rax, qword [rsp + 0xa8]
lea rdi, [rdx + rax]
cmp rdi, 0x2464
ja 0x10040c33a
lea rsi, [rsp + 0x4c20]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov rcx, rsi
call fcn.10040f710
mov ecx, dword [r12 + 0x30]
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x7130]
add rcx, rsi
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xb0], rsi
mov eax, dword [r12 + 0x30]
jmp 0x1004092cb
lea rcx, str.forced_wssize_cutoff_n
mov qword [rsp + 0xd8], r9
mov byte [rsp + 0xf0], r11b
call fcn.1004125a0
mov r9, qword [rsp + 0xd8]
mov edx, 6
mov byte [r9 + 0x7b], 1
mov rcx, r9
call fcn.100407b90
mov r9, qword [rsp + 0x110]
movzx r11d, byte [rsp + 0xf0]
jmp 0x10040a572
cmp qword [rsp + 0x7118], 0
movzx ecx, word [rsp + 0xa8]
mov qword [rsp + 0x138], 0x2464
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov esi, dword [r12 + 0x58]
je 0x10040c3c2
mov rdi, qword [rsp + 0x7118]
mov r9d, dword [rdi]
test rbx, rbx
je 0x10040c3ba
movzx r8d, byte [rbx + 1]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xb8]
lea r11, [rsp + 0x138]
lea rdi, [rsp + 0x27b0]
lea rbp, [0x100440080]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x48], r8d
movzx r8d, byte [rsp + 0xc4]
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x40], r10d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
mov rsi, qword [rsp + 0xa8]
lea rcx, str.sending_fake_1__1st_tcp_segment_0__zu_len_zu_:
lea rdx, [rsi - 1]
mov r8, rsi
call fcn.1004125a0
mov rdx, rsi
mov rcx, rbp
xor esi, esi
mov r8d, 0x20
call fcn.10040ecf0
lea rcx, [0x100426286]
call fcn.1004125a0
mov ebp, dword [r12 + 0x28]
mov r10, qword [rsp + 0x138]
test ebp, ebp
jle 0x10040c3b0
mov qword [rsp + 0x7110], rbx
mov rbx, r10
jmp 0x10040bff6
add esi, 1
cmp ebp, esi
je 0x10040c3a8
mov qword [rsp + 0x20], rbx
mov r9, rdi
mov edx, r14d
mov rcx, r13
mov r8, qword [rsp + 0x70f8]
call fcn.100407720
test al, al
jne 0x10040bfeb
jmp 0x100408b9a
cmp edi, 0xc
je 0x10040b589
jmp 0x100408b9a
cmp dword [rsp + 0xf0], 0x10
mov eax, 0
mov ecx, 0x3c
mov rdx, qword [rsp + 0x7100]
cmove ecx, eax
lea rax, [rsp + 0x138]
lea rdi, [rsp + 0x4c20]
mov qword [rsp + 0x138], 0x2464
mov qword [rsp + 0x20], rax
mov r9, rdi
call fcn.100404870
mov qword [rsp + 0x7100], rdi
test al, al
jne 0x10040b639
jmp 0x100408b9a
lea rcx, str.seqovl_split_pos._desync_is_not_possible._n
call fcn.1004125a0
jmp 0x100408b9a
mov rdx, qword [rsp + 0xa8]
add rdx, qword [rsp + 0x7130]
mov qword [rsp + 0x27b0], rsi
mov qword [rsp + 0xb0], rdx
jmp 0x10040baeb
lea rcx, str.incoming_unknown_HTTP_data_detected_for_hostname__s_n
call fcn.1004125a0
mov rax, qword [rsp + 0x110]
mov rbx, qword [rax + 0x88]
mov esi, dword [rax + 0x80]
test rbx, rbx
jne 0x100409bc5
jmp 0x100409c24
cmp qword [rsp + 0x7118], 0
mov r11d, dword [r12 + 0x58]
mov qword [rsp + 0x27b0], 0x2464
je 0x10040c332
mov rsi, qword [rsp + 0x7118]
mov r8d, dword [rsi]
test rbx, rbx
je 0x10040c32b
movzx ecx, byte [rbx + 1]
mov dword [rsp + 0x60], eax
lea r9, [rsp + 0x27b0]
mov rax, qword [rsp + 0xb8]
lea rsi, [rsp + 0x4c20]
mov qword [rsp + 0x88], r9
mov r9d, dword [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x78], r9d
lea r9, [0x100440080]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xc4]
mov dword [rsp + 0x48], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x58], r11d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b9a
mov rax, qword [rsp + 0xa8]
lea rcx, str.sending_fake_1__1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rdx, [rax - 1]
mov r8, rax
call fcn.1004125a0
mov rdx, qword [rsp + 0xa8]
mov r8d, 0x20
lea rcx, [0x100440080]
call fcn.10040ecf0
lea rcx, [0x100426286]
call fcn.1004125a0
mov eax, dword [r12 + 0x28]
xor r10d, r10d
mov rcx, r13
mov r11, qword [rsp + 0x27b0]
mov dword [rsp + 0xc8], ebp
mov r13, rbx
mov ebp, edi
mov dword [rsp + 0xc0], eax
mov rdi, rsi
mov ebx, r10d
mov rsi, r11
jmp 0x10040c275
mov qword [rsp + 0x20], rsi
mov r8, qword [rsp + 0x70f8]
mov r9, rdi
mov edx, r14d
mov qword [rsp + 0xd0], rcx
call fcn.100407720
test al, al
je 0x100408b9a
mov rcx, qword [rsp + 0xd0]
add ebx, 1
cmp dword [rsp + 0xc0], ebx
jg 0x10040c242
mov edi, ebp
mov rbx, r13
mov ebp, dword [rsp + 0xc8]
mov r13, rcx
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
jmp 0x10040a91e
call sub.cygwin1.dll_random
mov ecx, 0xffff
cqo
idiv rcx
lea ebx, [rdx + 1]
xchg bh, bl
movzx ebx, bx
jmp 0x10040b5ea
cmp edi, 0xc
je 0x10040b8ad
cmp edi, 9
je 0x10040a8b6
cmp edi, 0xa
jne 0x1004092a1
movzx ecx, word [rsp + 0xa8]
mov edx, dword [r12 + 0x60]
mov qword [rsp + 0x138], 0x2464
mov eax, dword [r12 + 0x5c]
mov esi, dword [r12 + 0x58]
jmp 0x10040bec6
xor r9d, r9d
jmp 0x1004092fa
xor r8d, r8d
jmp 0x100409308
xor ecx, ecx
jmp 0x10040a950
call sub.cygwin1.dll_random
mov ecx, 0xffffffff
cqo
idiv rcx
lea ebx, [rdx + 1]
bswap ebx
jmp 0x10040b5ea
xor ecx, ecx
jmp 0x10040c120
xor r8d, r8d
jmp 0x10040c113
lea rcx, str.seqovl_is_too_large
call fcn.1004125a0
jmp 0x100408b9a
lea rcx, str.seqovl_is_too_large_n
call fcn.1004125a0
jmp 0x100408b9a
lea rcx, str.local_or_in_domain_redirect_detected._its_not_a_DPI_redirect._n
call fcn.1004125a0
jmp 0x10040c0c5
xor ebp, ebp
jmp 0x10040bb32
xor r8d, r8d
jmp 0x10040bb25
sub rax, rsi
lea rcx, [rsi + 1]
mov rdx, rsi
mov byte [rsp + 0xb0], r10b
lea r8, [rax + 5]
call sub.cygwin1.dll_memmove
mov byte [rsi], 0x20
movzx r10d, byte [rsp + 0xb0]
jmp 0x10040a2bc
mov rbx, qword [rsp + 0x7110]
mov ebp, 0xa
jmp 0x1004092a6
xor r8d, r8d
jmp 0x10040bedf
xor r9d, r9d
jmp 0x10040bed1
mov rbp, qword [rsp + 0xa8]
mov rdx, r10
lea rcx, str.sending_fake_2__1st_tcp_segment_0__zu_len_zu_:
mov r8, rbp
call fcn.1004125a0
mov rdx, rbp
xor ebp, ebp
mov r8d, 0x20
lea rcx, [0x100440080]
call fcn.10040ecf0
mov rcx, rdi
call fcn.1004125a0
mov r11, qword [rsp + 0x138]
mov eax, dword [r12 + 0x28]
mov qword [rsp + 0xc8], rsi
lea r9, [rsp + 0x27b0]
mov rsi, rbx
mov dword [rsp + 0xb0], eax
mov rbx, r11
jmp 0x10040c462
mov qword [rsp + 0x20], rbx
mov r8, qword [rsp + 0x70f8]
mov edx, r14d
mov rcx, r13
mov qword [rsp + 0xd0], r9
call fcn.100407720
test al, al
je 0x100408b9a
mov r9, qword [rsp + 0xd0]
add ebp, 1
cmp dword [rsp + 0xb0], ebp
jg 0x10040c42f
mov rbx, rsi
mov rsi, qword [rsp + 0xc8]
jmp 0x1004094f7
xor ebx, ebx
jmp 0x100409574
xor r12d, r12d
jmp 0x100409567
mov dword [rsp + 0xf0], 2
jmp 0x100408ee6
lea rcx, str.hostname_dup_:_out_of_memory
call fcn.100412860
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408560
jmp 0x100408b9a
mov dword [rsp + 0xf0], 2
jmp 0x100409e73
mov byte [rax + 0x84], 1
jmp 0x10040a065