Function at 0x100408b30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
mov eax, 0x7098
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.1004201a0
sub rsp, rax
mov rbx, qword [rsp + 0x7110]
test rbx, rbx
mov rbp, rdx
sete dl
mov qword [rsp + 0x70f8], r9
mov esi, ecx
cmp qword [rsp + 0x7118], 0
mov edi, r8d
setne al
cmp dl, al
je 0x100408b98
xor r15d, r15d
mov eax, r15d
add rsp, 0x7098
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], 0
mov byte [rsp + 0x10c], 0
test rbx, rbx
je 0x1004098c0
movzx eax, byte [rbx + 8]
mov byte [rsp + 0x9c], al
mov rax, qword [0x10042dc00]
xor r9d, r9d
mov rcx, rbx
lea r13, [rsp + 0x1c0]
mov r8, qword [rsp + 0x7120]
mov rdx, qword [rsp + 0x7118]
mov r14d, dword [rax + 0x1008]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
mov qword [rsp + 0xa0], rax
call fcn.100405310
test sil, sil
je 0x1004096c8
lea rax, [rsp + 0x10c]
mov r9, qword [rsp + 0x7120]
mov rdx, rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x118]
mov r8, qword [rsp + 0x7118]
mov qword [rsp + 0x28], rax
mov rax, qword [0x10042dc00]
lea rcx, [rax + 0x2038]
call fcn.1004021e0
test al, al
je 0x100408b77
cmp byte [rsp + 0x10c], 0
jne 0x100408b77
mov r15, qword [rsp + 0x118]
mov r12, qword [r15 + 8]
test r12, r12
je 0x1004098e0
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
xor r15d, r15d
call fcn.100411d70
mov dword [rsp + 0xb0], 0
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100408cc9
movzx r8d, byte [rax + 0x79]
test r8b, r8b
jne 0x100408ced
cmp qword [rsp + 0x7118], 0
je 0x100409c80
movzx r8d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r8b, r8b
cmove r8d, eax
mov rax, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xa8], r8b
or r14d, edi
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xc4], al
call fcn.100403790
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xc0], al
call fcn.100403710
mov qword [rsp + 0xb8], rax
test sil, sil
je 0x100409900
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 2
jne 0x100408b7a
cmp qword [rsp + 0x7138], 0
je 0x100408b7a
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x110]
mov rdi, qword [rax + 0x98]
mov rax, qword [rax + 0xb0]
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0xa8], rax
mov r8, qword [rsp + 0xa0]
mov edx, 6
call fcn.100408690
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
call fcn.1004146f0
mov edi, eax
test al, al
je 0x100409de0
lea rcx, str.packet_contains_HTTP_request_n
call fcn.100411d70
mov rdi, qword [rsp + 0x110]
test rdi, rdi
je 0x100408e40
mov r8d, dword [rdi + 0x80]
test r8d, r8d
jne 0x100408dec
mov dword [rdi + 0x80], 1
cmp qword [rdi + 0xa8], 0
jne 0x10040a878
add rdi, 0xb8
mov rcx, rdi
call fcn.100411cc0
test al, al
je 0x10040b01b
mov rdi, qword [rsp + 0x110]
test rdi, rdi
je 0x100408e40
mov rax, qword [rdi + 8]
test rax, rax
je 0x100408e40
cmp word [rax + 6], 0
je 0x100408e40
cmp byte [rdi + 0x7b], 0
je 0x10040b351
nop dword [rax + rax]
lea rax, [rsp + 0x240]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.100414990
test al, al
je 0x10040ab82
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x100409ff8
cmp byte [rax + 0x6b], 0
je 0x100409fb1
cmp byte [rax + 0x6c], 0
je 0x100409ff8
mov dword [rsp + 0xf0], 1
mov edi, dword [rax + 0x50]
lea edx, [rdi - 0x1000000]
sub edx, dword [rax + 0x74]
cmp edx, 0x7effffff
ja 0x100408ebe
mov byte [rax + 0x6d], 1
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.100411d70
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100408f01
cmp byte [rax + 0x84], 0
jne 0x10040a035
mov ecx, dword [rax + 0x80]
test ecx, ecx
je 0x10040c312
mov byte [rax + 0x84], 1
lea rcx, str.discovered_l7_protocol_n
call fcn.100411d70
mov rdx, qword [rsp + 0x118]
test rdx, rdx
je 0x10040a048
cmp qword [rdx + 0x88], 0
je 0x10040a048
mov byte [rsp + 0x10d], 0
mov edi, 1
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
mov r8, qword [rdx + 0x88]
mov r9d, dword [rdx + 0x80]
lea rax, [rsp + 0x10f]
mov rdx, r13
mov ecx, 6
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x10e]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x10d]
mov qword [rsp + 0x20], rax
call fcn.100407f50
mov r8, rax
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x100408fc0
movzx edx, byte [rsp + 0x10d]
mov dh, byte [rsp + 0x10e]
mov qword [rax + 8], r8
mov byte [rax + 0x10], 1
mov word [rax], dx
movzx edx, byte [rsp + 0x10f]
mov byte [rax + 2], dl
test r8, r8
je 0x10040a5f0
cmp r8, r12
je 0x10040902d
lea rcx, str.desync_profile_changed_by_revealed_l7_protocol_or_hostname___n
mov qword [rsp + 0xd0], r8
call fcn.100411d70
mov r12, qword [rsp + 0x118]
mov r8, qword [rsp + 0xd0]
test r12, r12
je 0x100409024
movzx ecx, byte [r12 + 0x78]
test cl, cl
je 0x100409024
mov rax, qword [r12 + 8]
lea rdx, [rax + 0x55]
add rax, 0x52
cmp qword [rsp + 0x7118], 0
cmove rdx, rax
cmp byte [rdx], 0
jne 0x10040b7b3
test sil, sil
je 0x10040b04e
mov r12, r8
test dil, dil
je 0x100409080
cmp qword [r12 + 0x3a30], 0
je 0x10040a864
cmp byte [rsp + 0x10d], 0
je 0x10040a840
movzx eax, byte [rsp + 0x10e]
mov rcx, qword [rsp + 0x118]
test al, al
je 0x10040a5c3
test rcx, rcx
je 0x100409080
cmp byte [rcx + 0x90], 0
jne 0x10040b141
nop dword [rax]
cmp dword [rsp + 0xf0], 1
mov edi, dword [r12 + 0x2c]
je 0x100409f28
cmp dword [rsp + 0xf0], 2
je 0x10040a0c0
mov r9, qword [rsp + 0x110]
lea rax, [r12 + 0xbcc]
mov rsi, r9
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39d0]
mov qword [rsp + 0xd0], rax
test r9, r9
je 0x100409110
mov dword [rsp + 0xf0], 0
cmp qword [rsi + 0xa8], 0
jne 0x10040a65f
add rsi, 0xb8
mov rcx, rsi
call fcn.100411cc0
test al, al
je 0x10040ab93
mov eax, dword [rsp + 0xf0]
test eax, eax
jne 0x100409f76
cmp byte [r12 + 0x26], 0
je 0x10040a89c
lea rcx, str.applying_tampering_to_unknown_protocol_n
call fcn.100411d70
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b03e
mov dword [rsp + 0xf0], 0
movzx r10d, byte [rax + 0x79]
test r10b, r10b
jne 0x100409180
cmp qword [rsp + 0x7118], 0
je 0x10040ab68
movzx r10d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
cmp dword [rsp + 0xf0], 1
je 0x10040a14e
mov eax, dword [r12 + 0x1c]
test eax, eax
je 0x100408b7a
mov rax, qword [0x10042dc00]
cmp byte [rax + 0x1004], 0
jne 0x10040a7d4
mov rsi, qword [rsp + 0xa8]
lea rax, [rdi - 1]
cmp rax, rsi
jb 0x10040a2a0
test rbp, rbp
jne 0x10040a7ca
cmp qword [rsp + 0x7138], 1
jbe 0x10040a7ca
mov qword [rsp + 0xa8], 1
mov rdx, qword [rsp + 0xa8]
lea rcx, str.split_pos__zu_n
mov byte [rsp + 0xc8], r10b
call fcn.100411d70
movzx r10d, byte [rsp + 0xc8]
mov edi, dword [r12 + 0x1c]
mov qword [rsp + 0x120], 0x2464
cmp edi, 5
ja 0x10040a8ad
cmp edi, 3
ja 0x10040aee0
cmp edi, 2
je 0x10040acef
cmp edi, 3
jne 0x100408b7a
test rbp, rbp
je 0x10040b4c1
mov edi, dword [r12 + 0x20]
cmp edi, 9
jbe 0x10040b7e5
lea eax, [rdi - 0xa]
cmp eax, 1
ja 0x100408b7a
xor ebp, ebp
mov dword [rsp + 0xf0], ebp
cmp qword [rsp + 0xa8], 0
je 0x100408b7a
cmp edi, 0xa
je 0x10040bd8c
mov ebp, 0xb
mov eax, dword [r12 + 0x30]
test eax, eax
jne 0x10040bd24
mov rdi, qword [rsp + 0x7130]
mov rsi, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rdi
mov edi, dword [r12 + 0x5c]
mov r11d, dword [r12 + 0x60]
movzx r10d, si
cmp qword [rsp + 0x7118], 0
mov dword [rsp + 0xc8], edi
je 0x10040bfb7
mov rdi, qword [rsp + 0x7118]
mov r9d, dword [rdi]
test rbx, rbx
je 0x10040bfaf
movzx r8d, byte [rbx + 1]
neg eax
movzx ecx, byte [rsp + 0xc0]
mov dword [rsp + 0xf4], r11d
mov edx, eax
mov dword [rsp + 0xe8], r10d
mov r11, qword [rsp + 0x7120]
mov r10, qword [rsp + 0x7120]
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0xc0], ecx
movzx edi, byte [rsp + 0x9c]
movzx r11d, word [r11 + 0xe]
mov dword [rsp + 0xfc], r8d
mov r10d, dword [r10 + 8]
mov ecx, dword [rax + 4]
mov dword [rsp + 0xf8], r9d
mov dword [rsp + 0x9c], edi
lea rdi, [rsp + 0x340]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xd8], r10d
call fcn.100403680
mov r9d, dword [rsp + 0xc8]
mov edx, dword [rsp + 0x9c]
lea r11, [rsp + 0x120]
mov r10d, dword [rsp + 0xe8]
movzx ecx, byte [rsp + 0xc4]
mov qword [rsp + 0xe0], r11
mov dword [rsp + 0x60], r9d
mov r9d, dword [rsp + 0xf0]
mov dword [rsp + 0x40], edx
mov edx, dword [rsp + 0xc0]
mov dword [rsp + 0x78], r10d
mov r10d, dword [rsp + 0xd8]
mov dword [rsp + 0x58], r9d
mov r9d, dword [rsp + 0xf8]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0xd0]
mov r8d, dword [rsp + 0xfc]
mov qword [rsp + 0x88], r11
mov r11, qword [rsp + 0xb0]
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x28], edx
mov r9, qword [rsp + 0xb8]
mov rdx, r13
mov dword [rsp + 0x20], r10d
mov dword [rsp + 0xc4], ecx
mov qword [rsp + 0x70], r11
mov r11d, dword [rsp + 0xf4]
mov dword [rsp + 0x48], r8d
mov r8d, ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], r9
mov r9d, eax
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x68], r11d
call fcn.100403fa0
test al, al
je 0x100408b7a
mov r8, qword [rsp + 0xa8]
mov r9d, dword [r12 + 0x30]
lea rcx, str.sending_1st_tcp_segment_0__zu_len_zu_seqovl_u_:
lea r10, [r8 - 1]
mov rdx, r10
mov qword [rsp + 0xc8], r10
call fcn.100411d70
mov rcx, qword [rsp + 0xb0]
mov rdx, rsi
mov r8d, 0x20
lea rsi, [0x100425286]
call fcn.10040eb60
mov rcx, rsi
call fcn.100411d70
mov r9, rdi
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b7a
cmp ebp, 0xa
mov r10, qword [rsp + 0xc8]
je 0x10040c31e
mov rax, qword [rsp + 0xa8]
cmp rax, qword [rsp + 0x7138]
jae 0x1004096b7
mov rax, qword [rsp + 0xa8]
mov r10d, dword [r12 + 0x5c]
mov qword [rsp + 0x120], 0x2464
movzx r8d, word [rsp + 0x7138]
sub r8d, eax
add rax, qword [rsp + 0x7130]
cmp qword [rsp + 0x7118], 0
mov rbp, rax
mov eax, dword [r12 + 0x60]
movzx r8d, r8w
mov dword [rsp + 0xb0], eax
je 0x10040c3fb
mov rax, qword [rsp + 0x7118]
mov r12d, dword [rax]
test rbx, rbx
je 0x10040c3f4
movzx ebx, byte [rbx + 1]
mov rax, qword [rsp + 0x7120]
mov rdx, qword [rsp + 0x7120]
mov dword [rsp + 0xe8], r10d
mov dword [rsp + 0xd8], r8d
movzx r11d, word [rax + 0xe]
mov ecx, dword [rdx + 4]
mov eax, dword [rax + 8]
mov edx, dword [rsp + 0xa8]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xc8], eax
call fcn.100403680
mov dword [rsp + 0x48], ebx
mov rdx, r13
mov ebx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0xe0]
mov r9d, eax
mov r11d, dword [rsp + 0xd0]
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x40], ebx
mov rbx, qword [rsp + 0xb8]
mov qword [rsp + 0x88], rcx
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x38], rbx
mov eax, dword [rsp + 0xc8]
mov ebx, dword [rsp + 0xc0]
mov r8d, dword [rsp + 0xd8]
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0xf0]
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x30], ebx
mov r10d, dword [rsp + 0xe8]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x78], r8d
mov r8d, dword [rsp + 0xc4]
mov dword [rsp + 0x58], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x60], r10d
mov dword [rsp + 0x50], r12d
call fcn.100403fa0
test al, al
je 0x100408b7a
mov rdx, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0x7138]
lea rcx, str.sending_2nd_tcp_segment__zu__zu_len_zu_:
mov rax, qword [rsp + 0x7138]
sub rbx, rdx
mov r9, rbx
lea r8, [rax - 1]
call fcn.100411d70
mov r8d, 0x20
mov rdx, rbx
mov rcx, rbp
call fcn.10040eb60
mov rcx, rsi
call fcn.100411d70
mov rax, qword [rsp + 0x120]
mov r9, rdi
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x70f8]
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
je 0x100408b7a
mov r15d, 2
jmp 0x100408b7a
mov rax, qword [0x10042dc00]
lea r12, [rax + 0x2038]
mov rcx, r12
call fcn.100402d70
lea rax, [rsp + 0x10c]
mov rdx, rbx
mov rcx, r12
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x110]
mov r8, qword [rsp + 0x7118]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0x20], 0
mov r9, qword [rsp + 0x7120]
mov qword [rsp + 0x28], rax
call fcn.100402340
mov r8, qword [rsp + 0x110]
test al, al
jne 0x100409888
test r8, r8
je 0x100409c78
cmp byte [r8 + 0x10], 0
jne 0x1004098eb
mov r9d, dword [r8 + 0x80]
mov r8, qword [r8 + 0x88]
mov qword [rsp + 0x30], 0
mov ecx, 6
mov rdx, r13
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call fcn.100407f50
mov rcx, qword [rsp + 0x110]
mov r12, rax
test rcx, rcx
je 0x10040979b
mov qword [rcx + 8], rax
mov byte [rcx + 0x10], 1
test r12, r12
je 0x1004098eb
mov edx, 6
call fcn.100407b90
lea rax, [r12 + 0x4a68]
mov rcx, rax
mov qword [rsp + 0xa8], rax
call fcn.1004135a0
cmp word [r12 + 4], 0
jne 0x100409c30
mov dword [rsp + 0xb0], 0
xor r15d, r15d
cmp byte [rsp + 0x10c], 0
jne 0x100409af0
movzx edx, word [r12 + 6]
test dx, dx
je 0x100408cb2
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x100409fa0
cmp byte [rax + 0x7b], 0
mov r9d, dword [r12 + 0xc]
jne 0x100409ca0
test r9d, r9d
je 0x100409859
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040ac97
cmp dl, 0x73
je 0x10040ac8a
xor r8d, r8d
cmp dl, 0x64
jne 0x100409847
mov r8, qword [rax + 0x38]
lea rcx, str.wssize_cutoff_not_reached__mode__c_:__llu__u_n
call fcn.100411d70
movzx edx, word [r12 + 6]
movzx r8d, byte [r12 + 9]
mov rcx, qword [rsp + 0x7120]
mov r15d, 1
call fcn.100406110
mov dword [rsp + 0xb0], 1
jmp 0x100408cb2
mov r12, qword [r8 + 8]
mov qword [rsp + 0x118], r8
test r12, r12
je 0x100409742
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
call fcn.100411d70
mov rcx, qword [rsp + 0x110]
jmp 0x1004097a4
mov rax, qword [rsp + 0x7118]
movzx eax, byte [rax + 7]
mov byte [rsp + 0x9c], al
jmp 0x100408bcc
cmp byte [r15 + 0x10], 0
je 0x100409d70
lea rcx, str.matching_desync_profile_not_found_n
call fcn.100411d70
jmp 0x100408b77
mov rdx, qword [rsp + 0x110]
mov rcx, r12
call fcn.100408900
test al, al
je 0x100408b7a
mov rcx, qword [rsp + 0x7120]
call fcn.100406030
test al, al
je 0x100409ea0
movzx r8d, byte [rsp + 0xa8]
mov eax, dword [r12 + 0x18]
cmp eax, 6
je 0x10040a683
cmp eax, 7
jne 0x100408b7a
mov rcx, qword [rsp + 0x7120]
call fcn.100403810
test al, al
jne 0x10040b74c
cmp qword [rsp + 0x7138], 0
jne 0x10040b7a2
xor edx, edx
lea rsi, [r12 + 0x1180]
cmp qword [rsp + 0x7118], 0
mov qword [rsp + 0x120], 0x2464
movzx ecx, word [r12 + 0x39d8]
je 0x1004099a5
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x1004099b0
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x120]
lea rdi, [rsp + 0x340]
mov qword [rsp + 0x88], r8
movzx r8d, byte [rsp + 0xc4]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
lea rcx, str.sending_SYN_with_fake_data_:
call fcn.100411d70
mov rdx, qword [r12 + 0x39d8]
mov rcx, rsi
mov r8d, 0x20
call fcn.10040eb60
lea rcx, [0x100425286]
call fcn.100411d70
mov ebp, dword [r12 + 0x28]
mov rsi, qword [rsp + 0x120]
test ebp, ebp
jle 0x1004096b7
mov r12, qword [rsp + 0x70f8]
xor ebx, ebx
jmp 0x100409acb
add ebx, 1
cmp ebp, ebx
je 0x1004096b7
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x100409ac0
jmp 0x100408b7a
mov rbx, qword [rsp + 0x110]
test rbx, rbx
je 0x100408b7a
movzx eax, byte [rbx + 0x78]
test al, al
je 0x100409cd8
cmp byte [rbx + 0x79], 0
je 0x100409d15
cmp qword [rbx + 0x88], 0
je 0x100408b7a
cmp byte [rbx + 0x90], 0
je 0x100408b7a
mov eax, dword [rbx + 0x54]
sub eax, dword [rbx + 0x60]
cmp eax, 1
jne 0x100408b7a
mov rax, qword [0x10042dc00]
cmp byte [rax + 0x1028], 0
jne 0x10040b233
mov byte [rsp + 0x4c20], 0
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 4
jne 0x10040b1aa
cmp qword [rsp + 0x7138], 0
je 0x100408b7a
mov rax, qword [rsp + 0x110]
mov esi, dword [rax + 0x80]
cmp esi, 1
je 0x10040b9ae
mov rbx, qword [rax + 0x88]
test rbx, rbx
je 0x100408b7a
mov rcx, qword [r12 + 0x4a68]
mov rdx, rbx
call fcn.100413240
mov rdx, rax
test rax, rax
je 0x100409c04
mov rcx, qword [rsp + 0xa8]
call fcn.100413330
mov edx, dword [r12]
mov r8, rbx
lea rcx, str.auto_hostlist__profile__d__:__s_:_fail_counter_reset._website_is_working._n
call fcn.100411d70
mov ecx, esi
call fcn.100401df0
lea r9, [rsp + 0x4c20]
mov rdx, rbx
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_fail_counter_reset._website_is_working.
mov qword [rsp + 0x20], rax
mov r8d, dword [r12]
call fcn.100412250
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 4
je 0x100408b7a
mov rcx, qword [rsp + 0x110]
call fcn.100401ec0
jmp 0x100408b7a
mov rcx, qword [rsp + 0x7120]
call fcn.100406020
test al, al
je 0x1004097d3
movzx edx, word [r12 + 4]
movzx r8d, byte [r12 + 8]
mov r15d, 1
mov rcx, qword [rsp + 0x7120]
call fcn.100406110
mov dword [rsp + 0xb0], 1
jmp 0x1004097e1
xor r9d, r9d
jmp 0x10040975b
movzx r8d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r8b, r8b
cmove r8d, eax
jmp 0x100408ced
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040a656
cmp dl, 0x73
je 0x10040a649
xor r8d, r8d
cmp dl, 0x64
jne 0x100409cc4
mov r8, qword [rax + 0x38]
lea rcx, str.wssize_cutoff_reached__mode__c_:__llu__u_._not_changing_wssize._n
call fcn.100411d70
jmp 0x100408cb2
movzx edx, byte [rsp + 0x9c]
lea rcx, str.incoming_TTL__u_n
mov edi, edx
call fcn.100411d70
mov rbx, qword [rsp + 0x110]
cmp byte [rbx + 0x79], 0
mov byte [rbx + 0x78], dil
jne 0x100409b17
test dil, dil
je 0x100409b17
movzx eax, byte [rsp + 0x9c]
mov rdx, qword [rbx + 8]
lea rcx, [rdx + 0x55]
add rdx, 0x52
cmp qword [rsp + 0x7118], 0
cmovne rdx, rcx
cmp byte [rdx], 0
je 0x100409b17
movzx ecx, al
call fcn.1004079d0
mov byte [rbx + 0x79], al
test al, al
je 0x10040b791
movzx edx, al
lea rcx, str.autottl:_guessed__u_n
call fcn.100411d70
mov rbx, qword [rsp + 0x110]
test rbx, rbx
jne 0x100409b17
jmp 0x100408b7a
mov r9d, dword [r15 + 0x80]
mov r8, qword [r15 + 0x88]
mov rdx, r13
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov ecx, 6
mov qword [rsp + 0x20], 0
call fcn.100407f50
mov qword [r15 + 8], rax
mov r12, rax
mov rax, qword [rsp + 0x118]
mov byte [rax + 0x10], 1
test r12, r12
je 0x1004098eb
movzx r15d, byte [rax + 0x79]
test r15b, r15b
jne 0x10040a2e8
mov dword [rsp + 0xb0], 0
jmp 0x100408cc9
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r8d, 1
call fcn.100414e70
test al, al
jne 0x10040a33a
mov r9, qword [rsp + 0x110]
test r9, r9
je 0x10040a120
cmp byte [r9 + 0x6c], 0
je 0x10040a120
mov eax, dword [r9 + 0x50]
sub eax, 0x1000000
sub eax, dword [r9 + 0x74]
cmp eax, 0x7effffff
ja 0x100409e38
mov byte [r9 + 0x6d], 1
mov rax, qword [rsp + 0x118]
mov dword [rsp + 0xf0], 0
test rax, rax
je 0x10040b76f
cmp byte [rax + 0x84], 0
jne 0x100409e72
mov edx, dword [rax + 0x80]
test edx, edx
jne 0x10040b109
mov byte [rax + 0x84], 1
movzx edx, byte [rax]
mov byte [rsp + 0x10d], dl
movzx edx, byte [rax + 1]
movzx eax, byte [rax + 2]
mov byte [rsp + 0x10e], dl
mov byte [rsp + 0x10f], al
jmp 0x100409030
mov rax, qword [rsp + 0x7120]
test byte [rax + 0xd], 2
jne 0x100408b7a
cmp qword [rsp + 0x7138], 0
je 0x100408b7a
mov rax, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x110]
mov r8d, 6
mov r9, qword [rsp + 0x7130]
mov qword [rsp + 0x20], rax
lea rdx, [rcx + 0x98]
call fcn.100408480
mov rcx, qword [rsp + 0x110]
test al, al
jne 0x10040a5a0
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x7130]
mov qword [rsp + 0xc8], rax
jmp 0x100408d8c
lea rax, [r12 + 0x64]
mov ecx, dword [r12 + 0x3c]
mov rdx, rdi
mov r9, qword [rsp + 0xa8]
mov qword [rsp + 0xd8], rax
mov r8, qword [rsp + 0xc8]
mov rax, qword [r12 + 0x39a8]
mov qword [rsp + 0xd0], rax
call fcn.100414ca0
mov rsi, qword [rsp + 0x110]
mov rdi, rax
test rsi, rsi
jne 0x1004090dc
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040914e
movzx r10d, byte [rax + 0x79]
test r10b, r10b
jne 0x100409172
jmp 0x10040914e
lea rcx, str.not_changing_wssize._wssize_is_set_but_conntrack_entry_is_missing_n
call fcn.100411d70
jmp 0x100408cb2
mov edi, dword [rax + 0x48]
mov edx, dword [rax + 0x50]
mov ecx, 0x101
mov word [rax + 0x6b], cx
lea rcx, str.req_retrans_:_tcp_seq_interval__u__u_n
lea r8d, [rdi - 1]
movd xmm0, edx
movd xmm1, r8d
punpckldq xmm0, xmm1
movq qword [rax + 0x70], xmm0
call fcn.100411d70
mov rax, qword [rsp + 0x110]
test rax, rax
jne 0x100408e91
nop dword [rax + rax]
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.100411d70
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040acdf
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 1
je 0x100408eec
cmp qword [rax + 0x88], 0
mov edi, 1
jne 0x100409e72
lea rcx, str.discovered_hostname_n
call fcn.100411d70
mov rdx, qword [rsp + 0x118]
test rdx, rdx
mov qword [rsp + 0xd8], rdx
je 0x10040aca0
mov rcx, qword [rsp + 0xd0]
call sub.cygwin1.dll_strdup
mov rdx, qword [rsp + 0xd8]
mov r8, rax
mov qword [rdx + 0x88], rax
test rax, rax
je 0x10040c3cf
mov byte [rsp + 0x10d], 0
mov edi, 1
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
jmp 0x100408f50
lea rax, [r12 + 0x618]
mov ecx, dword [r12 + 0x40]
mov rdx, rdi
mov r9, qword [rsp + 0xa8]
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39b0]
mov dword [rsp + 0x20], 0
mov r8, qword [rsp + 0xc8]
mov qword [rsp + 0xd0], rax
call fcn.100415490
mov rsi, qword [rsp + 0x110]
mov rdi, rax
test rsi, rsi
jne 0x1004090dc
jmp 0x100409f76
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b76f
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 0
jne 0x100409e72
jmp 0x100409e5d
test dword [r12 + 0x10], 0xffffff
je 0x100409180
mov r8, qword [rsp + 0x7138]
mov rdx, qword [rsp + 0x7130]
lea rcx, [rsp + 0x130]
mov byte [rsp + 0xc8], r10b
call fcn.100414760
movzx r10d, byte [rsp + 0xc8]
test al, al
je 0x100409180
cmp byte [r12 + 0x10], 0
jne 0x10040b948
cmp byte [r12 + 0x12], 0
jne 0x10040b887
cmp byte [r12 + 0x11], 0
je 0x100409180
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
mov r9d, 0xe
lea r8, str._r_nUser_Agent:
mov byte [rsp + 0xc8], r10b
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc8]
test rax, rax
je 0x100409180
mov rcx, rax
mov rsi, qword [rsp + 0x7138]
sub rcx, qword [rsp + 0x7130]
mov r9d, 2
lea r8, [0x100425551]
lea rdx, [rsi - 1]
sub rdx, rcx
lea rcx, [rax + 1]
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc8]
test rax, rax
mov rsi, rax
je 0x100409180
lea rcx, str.removing_space_after_Host:_and_adding_it_to_User_Agent:_n
mov byte [rsp + 0xb0], r10b
call fcn.100411d70
mov rax, qword [rsp + 0x130]
movzx r10d, byte [rsp + 0xb0]
cmp rax, rsi
jae 0x10040c2e6
mov r8, rsi
lea rdx, [rax + 6]
lea rcx, [rax + 5]
sub r8, rax
sub r8, 6
call sub.cygwin1.dll_memmove
mov byte [rsi - 1], 0x20
movzx r10d, byte [rsp + 0xb0]
mov dword [rsp + 0xb0], 1
mov r15d, 1
jmp 0x100409180
cmp rbp, rdi
jb 0x10040abb6
mov r9, qword [rsp + 0x7138]
mov r8, rbp
mov rdx, rdi
lea rcx, str.split_pos__zu_is_outside_of_this_packet__zu__zu_n
mov byte [rsp + 0xc8], r10b
add r9, rbp
call fcn.100411d70
mov qword [rsp + 0xa8], 0
movzx r10d, byte [rsp + 0xc8]
jmp 0x1004091ff
mov rax, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
or r14d, edi
xor r15d, r15d
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xc4], al
call fcn.100403790
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xc0], al
call fcn.100403710
mov dword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], rax
jmp 0x100408d3d
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
call fcn.100414e50
lea rcx, str.packet_contains_partial_TLS_ClientHello_n
test al, al
mov byte [rsp + 0xf0], al
lea rax, str.packet_contains_full_TLS_ClientHello_n
cmovne rcx, rax
call fcn.100411d70
mov dword [rsp + 0x20], 1
lea rax, [rsp + 0x240]
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xc8]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.1004151d0
mov r9, qword [rsp + 0x110]
mov r11d, eax
test r9, r9
je 0x10040b154
movzx r10d, byte [rsp + 0xf0]
mov eax, dword [r9 + 0x80]
test eax, eax
jne 0x10040a3d8
mov dword [r9 + 0x80], 2
movzx eax, byte [r9 + 0x6c]
test r10b, r10b
jne 0x10040acd2
cmp qword [r9 + 0xa8], 0
jne 0x10040b3a8
cmp byte [r9 + 0x6d], 0
jne 0x10040acd2
test al, al
je 0x10040a43a
mov edx, dword [r9 + 0x70]
mov ecx, dword [r9 + 0x50]
mov byte [rsp + 0xd8], r11b
mov r8d, dword [r9 + 0x74]
mov byte [rsp + 0xf0], r10b
call fcn.10040f550
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
test al, al
jne 0x10040a4a8
mov rcx, qword [rsp + 0x7130]
mov byte [rsp + 0xd8], r11b
mov byte [rsp + 0xf0], r10b
call fcn.100414e40
mov rcx, qword [rsp + 0x110]
mov r8d, 6
mov r9, rax
mov rax, qword [rsp + 0x7138]
lea rdx, [rcx + 0x98]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7130]
mov qword [rsp + 0x20], rax
call fcn.100407e80
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
test al, al
je 0x10040b088
mov r9, qword [rsp + 0x110]
cmp byte [r9 + 0x6c], 0
jne 0x10040a511
cmp byte [r9 + 0x6b], 0
je 0x10040b75d
mov edx, dword [r9 + 0x70]
mov eax, dword [r9 + 0x48]
lea rcx, str.req_retrans_:_seq_interval__u__u_n
mov byte [rsp + 0xd8], r11b
mov byte [rsp + 0xf0], r10b
lea r8d, [rax - 1]
mov dword [r9 + 0x74], r8d
call fcn.100411d70
mov r9, qword [rsp + 0x110]
movzx r10d, byte [rsp + 0xf0]
movzx r11d, byte [rsp + 0xd8]
or byte [r9 + 0x6c], r10b
test r10b, r10b
jne 0x10040a51f
cmp qword [r9 + 0xa8], 0
jne 0x10040b3b0
mov rax, qword [r9 + 8]
test rax, rax
je 0x10040a53a
cmp word [rax + 6], 0
je 0x10040a53a
cmp byte [r9 + 0x7b], 0
je 0x10040bf20
cmp qword [r9 + 0xa8], 0
mov rax, r9
jne 0x10040b3b0
cmp byte [r12 + 0x25], 0
jne 0x10040b728
cmp byte [r9 + 0x6c], 0
jne 0x10040ac03
test r11b, r11b
jne 0x10040b168
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040ac35
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 2
jne 0x100409e72
jmp 0x100409e5d
mov rax, qword [rcx + 0x98]
mov qword [rsp + 0xc8], rax
mov rax, qword [rcx + 0xb0]
mov qword [rsp + 0xa8], rax
jmp 0x100408d8c
test rcx, rcx
je 0x10040a5e4
cmp byte [r12 + 0x3a50], 0
je 0x10040a5de
movzx eax, byte [rsp + 0x10f]
xor eax, 1
mov byte [rcx + 0x90], al
lea rcx, str.not_applying_tampering_to_this_request_n
call fcn.100411d70
mov rbx, qword [rsp + 0x110]
test rbx, rbx
je 0x100408b7a
cmp qword [rbx + 0xa8], 0
jne 0x10040b49d
add rbx, 0xb8
mov rcx, rbx
call fcn.100411cc0
test al, al
jne 0x100408b7a
mov rcx, rbx
call fcn.100411c90
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100411d70
mov rcx, rbx
call fcn.1004078c0
jmp 0x100408b7a
mov r8d, dword [rax + 0x50]
sub r8d, dword [rax + 0x5c]
jmp 0x100409cc4
mov r8, qword [rax + 0x28]
jmp 0x100409cc4
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100424b08]
call fcn.100411d70
lea rcx, [rsi + 0x98]
call fcn.100403360
jmp 0x1004090ea
xor edx, edx
mov r10d, dword [r12 + 0x60]
mov r9d, dword [r12 + 0x5c]
mov qword [rsp + 0x120], 0x2464
cmp qword [rsp + 0x7118], 0
mov ecx, dword [r12 + 0x58]
je 0x10040a6b5
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040a6c0
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0xb8]
lea r11, [rsp + 0x120]
lea rdi, [rsp + 0x340]
mov dword [rsp + 0x58], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x40], r8d
mov r8d, 0x12
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x68], r10d
mov dword [rsp + 0x60], r9d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
lea rcx, str.sending_fake_SYNACK_n
xor ebx, ebx
call fcn.100411d70
mov ebp, dword [r12 + 0x28]
mov rsi, qword [rsp + 0x120]
test ebp, ebp
jle 0x100408b7a
mov r12, qword [rsp + 0x70f8]
jmp 0x10040a7ab
add ebx, 1
cmp ebp, ebx
je 0x100408b7a
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x10040a7a0
jmp 0x100408b7a
mov edi, 1
jmp 0x10040a2a9
mov rcx, qword [rsp + 0xa0]
lea rsi, [rsp + 0x27b0]
mov r8d, 0x30
mov byte [rsp + 0xe0], r10b
mov rdx, rsi
call fcn.10040eee0
lea rax, [rsp + 0x4c20]
mov r8d, 0x30
mov rcx, r13
mov rdx, rax
mov qword [rsp + 0xc8], rax
call fcn.10040eee0
mov r8, qword [rsp + 0xc8]
mov rdx, rsi
lea rcx, str.dpi_desync_src_s_dst_s_n
call fcn.100411d70
movzx r10d, byte [rsp + 0xe0]
jmp 0x1004091a1
lea rdx, [rsp + 0x240]
lea r8, [rsp + 0x10f]
mov rcx, r12
call fcn.100410350
mov byte [rsp + 0x10e], al
jmp 0x10040905a
cmp qword [r12 + 0x3a38], 0
jne 0x100409044
jmp 0x100409080
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100424b08]
call fcn.100411d70
lea rcx, [rdi + 0x98]
call fcn.100403360
jmp 0x100408dfa
lea rcx, str.not_applying_tampering_to_unknown_protocol_n
call fcn.100411d70
jmp 0x100408b7a
lea eax, [rdi - 0xd]
cmp eax, 2
ja 0x10040b373
mov dword [rsp + 0xf0], 0x10
cmp edi, 0xd
je 0x10040a8e0
cmp edi, 0xe
mov edx, pe_nt_image_headers64
mov eax, 0x40
cmovne eax, edx
mov dword [rsp + 0xf0], eax
cmp qword [rsp + 0x7118], 0
mov edi, dword [r12 + 0x20]
je 0x10040b37e
test edi, edi
je 0x10040b24e
cmp edi, 8
jne 0x10040b81f
cmp qword [rsp + 0xa8], 0
je 0x10040b24e
mov edx, dword [r12 + 0x30]
mov rsi, qword [rsp + 0xa8]
mov rax, rdx
cmp rdx, rsi
jae 0x10040bfbf
mov rsi, qword [rsp + 0xa8]
cmp rsi, qword [rsp + 0x7138]
jb 0x10040ba6b
movzx eax, byte [rsp + 0xc4]
movzx esi, byte [rsp + 0xc0]
mov dword [rsp + 0xc4], eax
movzx ecx, word [rsp + 0xa8]
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov dword [rsp + 0xb0], ecx
cmp edi, 8
je 0x10040bfd0
mov qword [rsp + 0x120], 0x2464
xor r8d, r8d
cmp qword [rsp + 0x7118], 0
je 0x10040a9a1
mov rcx, qword [rsp + 0x7118]
mov r8d, dword [rcx]
test rbx, rbx
je 0x10040c2df
movzx ecx, byte [rbx + 1]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0xf0]
lea r9, [rsp + 0x120]
lea rbx, [rsp + 0x340]
mov r11d, dword [rsp + 0xb0]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x9c]
mov dword [rsp + 0x78], r11d
mov r11, qword [rsp + 0x7130]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xc4]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x48], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x70], r11
mov dword [rsp + 0x30], esi
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
mov rsi, qword [rsp + 0xa8]
lea rcx, str.sending_1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rbp, [rsi - 1]
mov r8, rsi
mov rdx, rbp
call fcn.100411d70
mov rcx, qword [rsp + 0x7130]
mov rdx, rsi
mov r8d, 0x20
lea rsi, [0x100425286]
call fcn.10040eb60
mov rcx, rsi
call fcn.100411d70
mov r9, rbx
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b7a
cmp edi, 8
jne 0x1004096b7
mov rdi, qword [rsp + 0xa8]
mov rdx, rbp
lea rcx, str.sending_fake_2__1st_out_of_order_tcp_segment_0__zu_len_zu_:
xor ebx, ebx
mov r8, rdi
call fcn.100411d70
mov rdx, rdi
mov r8d, 0x20
lea rcx, [0x10043f080]
call fcn.10040eb60
mov rcx, rsi
lea rsi, [rsp + 0x4c20]
call fcn.100411d70
mov rbp, qword [rsp + 0x27b0]
mov edi, dword [r12 + 0x28]
jmp 0x10040ab36
add ebx, 1
cmp edi, ebx
jle 0x1004096b7
mov qword [rsp + 0x20], rbp
mov r9, rsi
mov edx, r14d
mov rcx, r13
mov r8, qword [rsp + 0x70f8]
call fcn.100407720
test al, al
jne 0x10040ab33
jmp 0x100408b7a
movzx r10d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
jmp 0x100409172
lea rcx, str.not_applying_tampering_to_HTTP_without_Host:_n
call fcn.100411d70
jmp 0x100408b7a
mov rcx, rsi
call fcn.100411c90
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100411d70
mov rcx, rsi
call fcn.1004078c0
jmp 0x100409101
mov rax, rdi
sub rax, rbp
mov qword [rsp + 0xa8], rax
cmp rax, qword [rsp + 0x7138]
jae 0x10040a2a9
cmp rax, rdi
je 0x1004091da
mov r8, rax
mov rdx, rdi
lea rcx, str.split_pos_was_normalized_to_packet_data_offset_:__zu_____zu_n
mov byte [rsp + 0xc8], r10b
call fcn.100411d70
movzx r10d, byte [rsp + 0xc8]
jmp 0x1004091ff
mov eax, dword [r9 + 0x50]
sub eax, 0x1000000
sub eax, dword [r9 + 0x74]
cmp eax, 0x7effffff
jbe 0x10040c413
test r11b, r11b
jne 0x10040c403
mov rax, qword [rsp + 0x118]
test rax, rax
jne 0x10040c41d
lea rcx, str.discovered_l7_protocol_n
call fcn.100411d70
mov byte [rsp + 0x10d], 0
mov rdx, qword [rsp + 0x118]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
mov dword [rsp + 0xf0], 2
test rdx, rdx
jne 0x100408f49
mov r9d, dword [rsp + 0xf0]
lea r8, [rsp + 0x240]
jmp 0x100408f57
mov r8d, dword [rax + 0x50]
sub r8d, dword [rax + 0x5c]
jmp 0x100409847
mov r8, qword [rax + 0x28]
jmp 0x100409847
mov byte [rsp + 0x10d], 0
mov r9d, dword [rsp + 0xf0]
mov edi, 1
mov byte [rsp + 0x10e], 0
mov r8, qword [rsp + 0xd0]
mov byte [rsp + 0x10f], 0
jmp 0x100408f57
test al, al
jne 0x10040a51f
jmp 0x10040a4b7
mov dword [rsp + 0xf0], 1
jmp 0x100408f01
test rbp, rbp
jne 0x100408b7a
xor edx, edx
mov r8d, dword [r12 + 0x60]
mov ecx, dword [r12 + 0x5c]
cmp qword [rsp + 0x7118], 0
mov esi, dword [r12 + 0x58]
movzx r9d, word [rsp + 0xd0]
je 0x10040ad27
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040ad32
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, r10b
mov rbp, qword [rsp + 0xd8]
lea r11, [rsp + 0x120]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
lea rdi, [rsp + 0x340]
mov dword [rsp + 0x58], esi
movzx esi, byte [rsp + 0xc0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x68], r8d
movzx r8d, byte [rsp + 0xc4]
mov dword [rsp + 0x60], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x50], edx
mov rdx, r13
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x78], r9d
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x30], esi
movzx eax, word [rax + 0xe]
mov byte [rsp + 0xf0], r10b
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
lea rcx, str.sending_fake_request_:
call fcn.100411d70
mov rdx, qword [rsp + 0xd0]
mov r8d, 0x20
mov rcx, rbp
call fcn.10040eb60
lea rcx, [0x100425286]
call fcn.100411d70
movzx r10d, byte [rsp + 0xf0]
mov edx, dword [r12 + 0x28]
mov rsi, qword [rsp + 0x120]
xor ebp, ebp
test edx, edx
jle 0x10040ae9f
mov qword [rsp + 0xc8], r12
mov r12, qword [rsp + 0x70f8]
mov qword [rsp + 0x7110], rbx
mov ebx, ebp
mov ebp, edx
mov byte [rsp + 0xf0], r10b
jmp 0x10040ae67
add ebx, 1
cmp ebp, ebx
je 0x10040ae86
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, r12
mov edx, r14d
mov rcx, r13
call fcn.100407720
test al, al
jne 0x10040ae60
jmp 0x100408b7a
mov r12, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x7110]
movzx r10d, byte [rsp + 0xf0]
mov edi, dword [r12 + 0x20]
test edi, edi
je 0x10040b0a1
cmp edi, 8
jne 0x10040b518
mov qword [rsp + 0x120], 0x2464
xor r11d, r11d
mov dword [rsp + 0xf0], r11d
cmp qword [rsp + 0xa8], 0
je 0x100408b7a
jmp 0x10040a914
test rbp, rbp
jne 0x100408b7a
xor edx, edx
mov ecx, dword [r12 + 0x60]
mov r11d, dword [r12 + 0x5c]
cmp qword [rsp + 0x7118], 0
mov ebp, dword [r12 + 0x58]
je 0x10040af0f
mov rax, qword [rsp + 0x7118]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040af1a
movzx eax, byte [rbx + 1]
mov r9, qword [rsp + 0x7120]
mov r8, qword [rsp + 0x7120]
cmp edi, 5
lea rdi, [rsp + 0x340]
movzx esi, byte [rsp + 0xc0]
mov byte [rsp + 0xd0], r10b
movzx r9d, word [r9 + 0xe]
mov r8d, dword [r8 + 8]
mov dword [rsp + 0x48], eax
movzx eax, r10b
mov dword [rsp + 0x40], eax
mov dword [rsp + 0xf0], r9d
mov r9d, 0x14
mov dword [rsp + 0xc8], r8d
mov r8d, 4
mov eax, dword [rsp + 0xc8]
cmove r8d, r9d
lea r9, [rsp + 0x120]
mov dword [rsp + 0x50], edx
mov rdx, qword [rsp + 0xb8]
mov qword [rsp + 0x88], r9
mov r9d, dword [rsp + 0xf0]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov qword [rsp + 0x38], rdx
mov rdx, r13
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x68], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rdi
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x60], r11d
mov dword [rsp + 0x58], ebp
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
lea rcx, str.sending_fake_RST_RSTACK_n
call fcn.100411d70
movzx r10d, byte [rsp + 0xd0]
jmp 0x10040ae25
mov rcx, rdi
call fcn.100411c90
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100411d70
mov rcx, rdi
call fcn.1004078c0
jmp 0x100408e11
mov dword [rsp + 0xf0], 0
jmp 0x10040914e
mov rcx, qword [rsp + 0x110]
mov edx, 6
mov qword [rsp + 0xd0], r8
call fcn.100407b90
mov rdx, rcx
mov rcx, qword [rsp + 0xd0]
call fcn.100408900
mov r8, qword [rsp + 0xd0]
test al, al
jne 0x10040902d
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408540
jmp 0x100408b7a
mov rax, qword [rsp + 0x7108]
mov r8, qword [rsp + 0x7138]
lea rcx, str.reinjecting_original_packet._len_zu_len_payload_zu_n
mov rdx, qword [rax]
call fcn.100411d70
mov rax, qword [rsp + 0x7118]
mov r9, rbx
mov r8, qword [rsp + 0x7128]
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov rax, qword [rsp + 0x7108]
mov r9, qword [rsp + 0x7100]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
jmp 0x10040969c
mov byte [rax + 0x84], 1
lea rcx, str.discovered_l7_protocol_n
call fcn.100411d70
mov byte [rsp + 0x10d], 0
mov rdx, qword [rsp + 0x118]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
jmp 0x10040ac6c
mov byte [rcx + 0x6a], 0xff
mov edx, 6
call fcn.100407b90
jmp 0x100409080
cmp byte [r12 + 0x25], 0
je 0x10040a562
test al, al
je 0x10040b851
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
call fcn.100411d70
mov rax, qword [rsp + 0x118]
test rax, rax
je 0x10040b99e
cmp byte [rax + 0x84], 0
mov dword [rsp + 0xf0], 2
jne 0x10040a035
jmp 0x100408eec
mov rax, qword [rsp + 0x110]
lea rcx, str.incoming_RST_detected_for_hostname__s_n
lea rbp, [rsp + 0x4c20]
mov rdx, qword [rax + 0x88]
call fcn.100411d70
mov rax, qword [rsp + 0x110]
mov ecx, dword [rax + 0x80]
call fcn.100401df0
mov r9, rbp
mov rcx, rax
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 8]
mov r8d, dword [rdx]
mov rdx, qword [rax + 0x88]
mov qword [rsp + 0x20], rcx
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_incoming_RST
call fcn.100412250
mov rax, qword [rsp + 0x110]
mov r8, rbp
mov rcx, r12
mov rdx, qword [rax + 0x88]
mov r9d, dword [rax + 0x80]
call fcn.100407c40
jmp 0x100409c04
lea rdx, [rsp + 0x4c20]
mov r8d, 0x30
mov rcx, r13
call fcn.10040eee0
jmp 0x100409b5d
mov rax, qword [rsp + 0x7118]
movzx ecx, word [rsp + 0x7138]
mov edx, dword [rax]
xor eax, eax
test rbx, rbx
je 0x10040b26b
movzx eax, byte [rbx + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x120]
lea rbx, [rsp + 0x340]
mov rsi, qword [rsp + 0x7130]
mov qword [rsp + 0x88], r8
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x70], rsi
mov esi, dword [rsp + 0xf0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x50], edx
mov rdx, r13
movzx r8d, byte [rsp + 0xc4]
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], esi
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
lea rcx, str.resending_original_packet_with_extension_header_n
call fcn.100411d70
mov rax, qword [rsp + 0x120]
mov r9, rbx
mov qword [rsp + 0x20], rax
jmp 0x10040969c
lea rcx, str.forced_wssize_cutoff_n
call fcn.100411d70
mov byte [rdi + 0x7b], 1
mov edx, 6
mov rcx, rdi
call fcn.100407b90
jmp 0x100408e40
mov dword [rsp + 0xf0], 0
cmp edi, 0xb
ja 0x10040bf12
cmp edi, 9
ja 0x100409260
lea eax, [rdi - 8]
cmp eax, 1
jbe 0x10040aecc
jmp 0x100408b7a
test al, al
je 0x10040a4b7
mov rax, qword [rsp + 0x7118]
mov r8, qword [rsp + 0x7128]
mov r9, rbx
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov rax, qword [rsp + 0x110]
mov r8d, r14d
mov rdx, r13
mov r9, qword [rsp + 0x70f8]
lea rcx, [rax + 0xb8]
mov rax, qword [rsp + 0x7138]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x7108]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7100]
mov qword [rsp + 0x20], rax
call fcn.100411b50
test rax, rax
je 0x10040b876
mov rax, qword [rsp + 0x110]
lea rcx, [rax + 0xb8]
call fcn.100411c90
lea rcx, str.DELAY_desync_until_reasm_is_complete___u__n
mov edx, eax
call fcn.100411d70
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 0xa8]
test rdx, rdx
je 0x1004096b7
cmp rdx, qword [rax + 0xb0]
jne 0x1004096b7
lea rcx, [rax + 0xb8]
call fcn.10040c850
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_finished_n
call fcn.100408540
jmp 0x1004096b7
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100424b08]
call fcn.100411d70
lea rcx, [rbx + 0x98]
call fcn.100403360
jmp 0x10040a60f
mov esi, dword [rsp + 0xf0]
test esi, esi
jne 0x10040acf8
lea rcx, str.not_applying_fake_because_of_unknown_protocol_n
mov byte [rsp + 0xc8], r10b
call fcn.100411d70
mov edi, dword [r12 + 0x20]
mov qword [rsp + 0x120], 0x2464
cmp edi, 0xb
ja 0x10040c220
movzx r10d, byte [rsp + 0xc8]
cmp edi, 9
ja 0x100409260
jmp 0x10040b390
lea eax, [rdi - 9]
cmp eax, 3
ja 0x10040b0a1
mov qword [rsp + 0x120], 0x2464
xor r9d, r9d
mov dword [rsp + 0xf0], r9d
cmp edi, 0xc
jne 0x10040b387
mov rax, qword [rsp + 0x7118]
mov r9, rbx
mov esi, 0x18
mov r8, qword [rsp + 0x7128]
mov rdx, qword [rsp + 0x7120]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x20], rax
call fcn.100407b50
mov eax, dword [r12 + 0x34]
test eax, eax
je 0x10040b58f
mov esi, eax
cmp rsi, qword [rsp + 0x7128]
jb 0x10040b58f
mov esi, 0x18
test rbx, rbx
je 0x10040c2a6
movzx ebx, word [rbx + 4]
test bx, bx
je 0x10040c1d5
mov rax, qword [rsp + 0x7108]
cmp qword [rsp + 0x7118], 0
mov qword [rsp + 0x120], 0x2464
mov qword [rsp + 0x128], 0x2464
mov r8, qword [rax]
je 0x10040b5ec
mov eax, dword [rsp + 0xf0]
cmp eax, 0x10
je 0x10040c17a
cmp eax, 0x40
je 0x10040c17a
mov qword [rsp + 0x138], r8
lea rax, [rsp + 0x128]
lea rdi, [rsp + 0x27b0]
mov rdx, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x7100]
mov qword [rsp + 0x38], rax
lea rbp, [rsp + 0x340]
mov r9d, ebx
mov r8, rsi
lea rax, [rsp + 0x120]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
call fcn.100404eb0
test al, al
je 0x100408b7a
lea rdx, [rsi - 1]
mov r8, rsi
lea rcx, str.sending_1st_ip_fragment_0__zu_ip_payload_len_zu_:
call fcn.100411d70
mov rdx, qword [rsp + 0x120]
mov r8d, 0x50
mov rcx, rbp
lea rbx, [0x100425286]
call fcn.10040eb60
mov rcx, rbx
call fcn.100411d70
mov r9, rbp
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
je 0x100408b7a
mov r9, qword [rsp + 0x7128]
mov rax, qword [rsp + 0x7128]
mov rdx, rsi
lea rcx, str.sending_2nd_ip_fragment__zu__zu_ip_payload_len_zu_:
sub r9, rsi
lea r8, [rax - 1]
call fcn.100411d70
mov rdx, qword [rsp + 0x128]
mov r8d, 0x50
mov rcx, rdi
call fcn.10040eb60
mov rcx, rbx
call fcn.100411d70
mov r9, rdi
mov edx, r14d
mov rcx, r13
mov rax, qword [rsp + 0x128]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
test al, al
mov eax, 2
cmovne r15d, eax
jmp 0x100408b7a
test r11b, r11b
je 0x10040b851
cmp byte [r9 + 0x6c], 0
je 0x10040b168
mov dword [rsp + 0xf0], 2
jmp 0x100408ea6
lea rcx, str.received_SYN_with_TCP_fast_open_option._syndata_desync_is_not_applied._n
call fcn.100411d70
jmp 0x100408b7a
mov edx, dword [r9 + 0x50]
mov byte [r9 + 0x6b], 1
mov dword [r9 + 0x70], edx
jmp 0x10040a4c6
mov byte [rsp + 0x10d], 0
mov edi, dword [r12 + 0x2c]
mov byte [rsp + 0x10e], 0
mov byte [rsp + 0x10f], 0
jmp 0x1004090a9
lea rcx, str.autottl:_could_not_guess_n
call fcn.100411d70
jmp 0x100409d59
lea rcx, str.received_SYN_with_data_payload._syndata_desync_is_not_applied._n
call fcn.100411d70
jmp 0x100408b7a
call fcn.1004079d0
mov r8, qword [rsp + 0xd0]
test al, al
mov byte [r12 + 0x79], al
je 0x10040b7fe
movzx edx, al
lea rcx, str.autottl:_guessed__u_n
call fcn.100411d70
mov r8, qword [rsp + 0xd0]
jmp 0x100409024
cmp edi, 7
jbe 0x100408b7a
xor r8d, r8d
mov dword [rsp + 0xf0], r8d
jmp 0x10040aecc
lea rcx, str.autottl:_could_not_guess_n
mov qword [rsp + 0xd0], r8
call fcn.100411d70
mov r8, qword [rsp + 0xd0]
jmp 0x100409024
lea eax, [rdi - 9]
cmp eax, 3
ja 0x10040b24e
cmp qword [rsp + 0xa8], 0
jne 0x10040bf6c
cmp edi, 0xc
jne 0x10040b24e
test rbp, rbp
jne 0x100408b7a
jmp 0x10040b544
lea rcx, str.not_applying_tampering_to_TLS_ClientHello_without_hostname_in_the_SNI_n
call fcn.100411d70
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408540
jmp 0x100408b7a
lea rcx, str.rawpacket_queue_failed___n
call fcn.100412030
jmp 0x10040b088
lea rcx, str.mixing_domain_case_n
mov byte [rsp + 0xb0], r10b
call fcn.100411d70
mov rax, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x7130]
add rsi, qword [rsp + 0x7138]
movzx r10d, byte [rsp + 0xb0]
lea r15, [rax + 5]
cmp r15, rsi
jae 0x10040b917
mov byte [rsp + 0xb0], r10b
mov qword [rsp + 0x7110], rbx
mov rbx, rsi
movzx eax, byte [r15]
cmp al, 0xd
je 0x10040b906
cmp al, 0xa
je 0x10040b906
movzx esi, al
test r15b, 1
je 0x10040b92d
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, esi
add r15, 1
call sub.cygwin1.dll_tolower
mov byte [r15 - 1], al
cmp rbx, r15
jne 0x10040b8d8
movzx r10d, byte [rsp + 0xb0]
mov rbx, qword [rsp + 0x7110]
mov dword [rsp + 0xb0], 1
mov r15d, 1
jmp 0x10040a1ab
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, esi
add r15, 1
call sub.cygwin1.dll_toupper
mov byte [r15 - 1], al
cmp r15, rbx
jne 0x10040b8d8
jmp 0x10040b906
movsx eax, byte [r12 + 0x16]
movsx edx, byte [r12 + 0x13]
lea rcx, str.modifying_Host:____c_c_c_c:_n
mov r15d, 1
movsx r9d, byte [r12 + 0x15]
movsx r8d, byte [r12 + 0x14]
mov dword [rsp + 0x20], eax
call fcn.100411d70
mov edx, dword [r12 + 0x13]
mov rax, qword [rsp + 0x130]
mov dword [rsp + 0xb0], 1
movzx r10d, byte [rsp + 0xc8]
mov dword [rax], edx
jmp 0x10040a19f
mov dword [rsp + 0xf0], 2
jmp 0x100408f01
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
call fcn.1004147e0
test al, al
mov rax, qword [rsp + 0x110]
mov rdx, qword [rax + 0x88]
je 0x10040c1f1
lea rcx, str.incoming_HTTP_reply_detected_for_hostname__s_n
call fcn.100411d70
mov rax, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x7138]
mov rcx, qword [rsp + 0x7130]
mov r8, qword [rax + 0x88]
call fcn.100414a40
test al, al
je 0x10040c273
lea rcx, str.redirect_to_another_domain_detected._possibly_DPI_redirect._n
lea rbp, [rsp + 0x4c20]
call fcn.100411d70
mov rax, qword [rsp + 0x110]
mov ecx, dword [rax + 0x80]
call fcn.100401df0
mov r9, rbp
mov r8, rax
mov rax, qword [rsp + 0x110]
mov rcx, qword [rax + 8]
mov rdx, qword [rax + 0x88]
mov qword [rsp + 0x20], r8
mov r8d, dword [rcx]
lea rcx, str._s_:_profile__d_:_client__s_:_proto__s_:_redirect_to_another_domain
call fcn.100412250
jmp 0x10040b20d
mov rbp, qword [rsp + 0x7138]
mov rsi, qword [rsp + 0xa8]
sub rbp, rsi
test edx, edx
je 0x10040c22e
lea rax, [rdx + rbp]
mov qword [rsp + 0x27b0], rax
cmp rax, 0x2464
ja 0x10040c253
lea rsi, [rsp + 0x4c20]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov byte [rsp + 0xc8], r10b
mov rcx, rsi
call fcn.10040f640
mov ecx, dword [r12 + 0x30]
mov rdx, qword [rsp + 0xa8]
mov r8, rbp
add rdx, qword [rsp + 0x7130]
add rcx, rsi
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xb0], rsi
mov eax, dword [r12 + 0x30]
movzx r10d, byte [rsp + 0xc8]
movzx esi, word [rsp + 0x27b0]
mov r11d, dword [r12 + 0x60]
cmp qword [rsp + 0x7118], 0
mov dword [rsp + 0xc8], esi
mov esi, dword [r12 + 0x5c]
mov dword [rsp + 0xd0], esi
je 0x10040c26b
mov rsi, qword [rsp + 0x7118]
mov r8d, dword [rsi]
test rbx, rbx
je 0x10040c264
movzx esi, byte [rbx + 1]
mov rdx, qword [rsp + 0x7120]
mov rcx, qword [rsp + 0x7120]
neg eax
mov byte [rsp + 0xf4], r10b
mov r10, qword [rsp + 0x7120]
mov dword [rsp + 0xfc], r8d
movzx edx, word [rdx + 0xe]
mov ecx, dword [rcx + 8]
mov dword [rsp + 0xf8], r11d
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xd8], edx
mov edx, dword [rsp + 0xa8]
mov dword [rsp + 0xe0], ecx
mov ecx, dword [r10 + 4]
call fcn.100403680
mov edx, dword [rsp + 0xe8]
mov ecx, eax
call fcn.100403680
mov dword [rsp + 0x48], esi
mov r8d, dword [rsp + 0xc8]
mov r11d, dword [rsp + 0xf8]
mov rsi, qword [rsp + 0xb8]
mov r9d, eax
lea rax, [rsp + 0x120]
mov dword [rsp + 0x78], r8d
mov edx, dword [rsp + 0xd8]
mov r8d, dword [rsp + 0xd0]
mov dword [rsp + 0x68], r11d
mov qword [rsp + 0x38], rsi
mov r11d, dword [rsp + 0xe0]
mov dword [rsp + 0x60], r8d
movzx esi, byte [rsp + 0xc0]
mov r8d, dword [rsp + 0xf0]
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x340]
movzx r10d, byte [rsp + 0xc4]
mov dword [rsp + 0x28], edx
mov rdx, r13
mov dword [rsp + 0x58], r8d
mov r8d, dword [rsp + 0xfc]
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x20], r11d
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x80], rax
movzx eax, byte [rsp + 0x9c]
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0xa0]
mov dword [rsp + 0x50], r8d
mov r8d, r10d
mov dword [rsp + 0xc4], r10d
mov dword [rsp + 0x40], eax
call fcn.100403fa0
test al, al
je 0x100408b7a
mov eax, dword [r12 + 0x30]
mov r11, qword [rsp + 0x7138]
mov r9, rbp
lea rcx, str.sending_2nd_out_of_order_tcp_segment__zu__zu_len_zu_seqovl_u_:
mov rdx, qword [rsp + 0xa8]
mov dword [rsp + 0x20], eax
lea r8, [r11 - 1]
call fcn.100411d70
mov rdx, qword [rsp + 0x27b0]
mov rcx, qword [rsp + 0xb0]
mov r8d, 0x20
call fcn.10040eb60
lea rcx, [0x100425286]
call fcn.100411d70
mov rax, qword [rsp + 0x120]
mov edx, r14d
mov rcx, r13
mov r9, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x70f8]
mov qword [rsp + 0x20], rax
call fcn.100407720
movzx r10d, byte [rsp + 0xf4]
test al, al
jne 0x10040a95a
jmp 0x100408b7a
mov edx, eax
mov rax, qword [rsp + 0xa8]
lea rsi, [rdx + rax]
cmp rsi, 0x2464
ja 0x10040c2ce
lea rdi, [rsp + 0x4c20]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov rcx, rdi
call fcn.10040f640
mov ecx, dword [r12 + 0x30]
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x7130]
add rcx, rdi
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xb0], rdi
mov eax, dword [r12 + 0x30]
jmp 0x1004092a2
cmp qword [rsp + 0x7118], 0
movzx ecx, word [rsp + 0xa8]
mov qword [rsp + 0x138], 0x2464
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov esi, dword [r12 + 0x58]
je 0x10040c29e
mov rdi, qword [rsp + 0x7118]
mov r9d, dword [rdi]
test rbx, rbx
je 0x10040c296
movzx r8d, byte [rbx + 1]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xb8]
lea r11, [rsp + 0x138]
lea rdi, [rsp + 0x27b0]
lea rbp, [0x10043f080]
mov dword [rsp + 0x78], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xc0]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x48], r8d
movzx r8d, byte [rsp + 0xc4]
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x40], r10d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
mov rsi, qword [rsp + 0xa8]
lea rcx, str.sending_fake_1__1st_tcp_segment_0__zu_len_zu_:
lea rdx, [rsi - 1]
mov r8, rsi
call fcn.100411d70
mov rdx, rsi
mov rcx, rbp
xor esi, esi
mov r8d, 0x20
call fcn.10040eb60
lea rcx, [0x100425286]
call fcn.100411d70
mov ebp, dword [r12 + 0x28]
mov r10, qword [rsp + 0x138]
test ebp, ebp
jle 0x10040c28c
mov qword [rsp + 0x7110], rbx
mov rbx, r10
jmp 0x10040beee
add esi, 1
cmp ebp, esi
je 0x10040c284
mov qword [rsp + 0x20], rbx
mov r9, rdi
mov edx, r14d
mov rcx, r13
mov r8, qword [rsp + 0x70f8]
call fcn.100407720
test al, al
jne 0x10040bee3
jmp 0x100408b7a
cmp edi, 0xc
je 0x10040b843
jmp 0x100408b7a
lea rcx, str.forced_wssize_cutoff_n
mov qword [rsp + 0xd8], r9
mov byte [rsp + 0xf0], r11b
call fcn.100411d70
mov r9, qword [rsp + 0xd8]
mov edx, 6
mov byte [r9 + 0x7b], 1
mov rcx, r9
call fcn.100407b90
mov r9, qword [rsp + 0x110]
movzx r11d, byte [rsp + 0xf0]
jmp 0x10040a53a
cmp edi, 0xc
je 0x10040b843
cmp edi, 9
je 0x10040a914
cmp edi, 0xa
jne 0x100409278
movzx ecx, word [rsp + 0xa8]
mov edx, dword [r12 + 0x60]
mov qword [rsp + 0x138], 0x2464
mov eax, dword [r12 + 0x5c]
mov esi, dword [r12 + 0x58]
jmp 0x10040bdbe
xor r8d, r8d
jmp 0x1004092df
xor r9d, r9d
jmp 0x1004092d1
lea rcx, str.seqovl_split_pos._desync_is_not_possible._n
call fcn.100411d70
jmp 0x100408b7a
cmp qword [rsp + 0x7118], 0
mov r11d, dword [r12 + 0x58]
mov qword [rsp + 0x27b0], 0x2464
je 0x10040c2c6
mov rcx, qword [rsp + 0x7118]
mov r8d, dword [rcx]
test rbx, rbx
je 0x10040c2bf
movzx ecx, byte [rbx + 1]
mov dword [rsp + 0x60], eax
lea r9, [rsp + 0x27b0]
mov rax, qword [rsp + 0xb8]
lea rbp, [rsp + 0x4c20]
mov qword [rsp + 0x88], r9
mov r9d, dword [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7120]
mov dword [rsp + 0x78], r9d
lea r9, [0x10043f080]
mov dword [rsp + 0x68], edx
mov rdx, r13
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xc4]
mov dword [rsp + 0x48], ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x70], r9
mov dword [rsp + 0x58], r11d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x30], esi
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7120]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7120]
mov r9d, dword [rax + 4]
call fcn.100403fa0
test al, al
je 0x100408b7a
mov rax, qword [rsp + 0xa8]
lea rcx, str.sending_fake_1__1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rdx, [rax - 1]
mov r8, rax
call fcn.100411d70
mov rdx, qword [rsp + 0xa8]
mov r8d, 0x20
lea rcx, [0x10043f080]
call fcn.10040eb60
lea rcx, [0x100425286]
call fcn.100411d70
mov eax, dword [r12 + 0x28]
xor r10d, r10d
mov r9, rbp
mov r11, qword [rsp + 0x27b0]
mov dword [rsp + 0xc8], esi
mov rbp, rbx
mov ebx, r10d
mov dword [rsp + 0xc0], eax
mov rsi, r11
jmp 0x10040c158
mov qword [rsp + 0x20], rsi
mov r8, qword [rsp + 0x70f8]
mov edx, r14d
mov rcx, r13
mov qword [rsp + 0xd0], r9
call fcn.100407720
test al, al
je 0x100408b7a
mov r9, qword [rsp + 0xd0]
add ebx, 1
cmp dword [rsp + 0xc0], ebx
jg 0x10040c125
mov esi, dword [rsp + 0xc8]
mov edx, dword [r12 + 0x60]
mov rbx, rbp
mov eax, dword [r12 + 0x5c]
jmp 0x10040a97c
cmp dword [rsp + 0xf0], 0x10
mov eax, 0
mov ecx, 0x3c
mov rdx, qword [rsp + 0x7100]
cmove ecx, eax
lea rax, [rsp + 0x138]
lea rdi, [rsp + 0x4c20]
mov qword [rsp + 0x138], 0x2464
mov qword [rsp + 0x20], rax
mov r9, rdi
call fcn.100404870
mov qword [rsp + 0x7100], rdi
test al, al
jne 0x10040b5f4
jmp 0x100408b7a
call sub.cygwin1.dll_random
mov ecx, 0xffff
cqo
idiv rcx
lea ebx, [rdx + 1]
xchg bh, bl
movzx ebx, bx
jmp 0x10040b5a5
lea rcx, str.incoming_unknown_HTTP_data_detected_for_hostname__s_n
call fcn.100411d70
mov rax, qword [rsp + 0x110]
mov rbx, qword [rax + 0x88]
mov esi, dword [rax + 0x80]
test rbx, rbx
jne 0x100409ba5
jmp 0x100409c04
cmp edi, 0xc
je 0x10040b544
jmp 0x100408b7a
mov rsi, qword [rsp + 0xa8]
add rsi, qword [rsp + 0x7130]
mov qword [rsp + 0x27b0], rbp
mov qword [rsp + 0xb0], rsi
jmp 0x10040bafa
lea rcx, str.seqovl_is_too_large_n
call fcn.100411d70
jmp 0x100408b7a
xor esi, esi
jmp 0x10040bb41
xor r8d, r8d
jmp 0x10040bb34
lea rcx, str.local_or_in_domain_redirect_detected._its_not_a_DPI_redirect._n
call fcn.100411d70
jmp 0x10040c1fd
mov rbx, qword [rsp + 0x7110]
mov ebp, 0xa
jmp 0x10040927d
xor r8d, r8d
jmp 0x10040bdd7
xor r9d, r9d
jmp 0x10040bdc9
call sub.cygwin1.dll_random
mov ecx, 0xffffffff
cqo
idiv rcx
lea ebx, [rdx + 1]
bswap ebx
jmp 0x10040b5a5
xor ecx, ecx
jmp 0x10040c008
xor r8d, r8d
jmp 0x10040bffb
lea rcx, str.seqovl_is_too_large
call fcn.100411d70
jmp 0x100408b7a
xor ecx, ecx
jmp 0x10040a9ae
sub rax, rsi
lea rcx, [rsi + 1]
mov rdx, rsi
mov byte [rsp + 0xb0], r10b
lea r8, [rax + 5]
call sub.cygwin1.dll_memmove
mov byte [rsi], 0x20
movzx r10d, byte [rsp + 0xb0]
jmp 0x10040a28a
mov byte [rax + 0x84], 1
jmp 0x10040a035
mov rbp, qword [rsp + 0xa8]
mov rdx, r10
lea rcx, str.sending_fake_2__1st_tcp_segment_0__zu_len_zu_:
mov r8, rbp
call fcn.100411d70
mov rdx, rbp
xor ebp, ebp
mov r8d, 0x20
lea rcx, [0x10043f080]
call fcn.10040eb60
mov rcx, rsi
call fcn.100411d70
mov r11, qword [rsp + 0x138]
mov eax, dword [r12 + 0x28]
mov qword [rsp + 0xc8], rdi
lea r9, [rsp + 0x27b0]
mov rdi, rbx
mov dword [rsp + 0xb0], eax
mov rbx, r11
jmp 0x10040c3b6
mov qword [rsp + 0x20], rbx
mov r8, qword [rsp + 0x70f8]
mov edx, r14d
mov rcx, r13
mov qword [rsp + 0xd0], r9
call fcn.100407720
test al, al
je 0x100408b7a
mov r9, qword [rsp + 0xd0]
add ebp, 1
cmp dword [rsp + 0xb0], ebp
jg 0x10040c383
mov rbx, rdi
mov rdi, qword [rsp + 0xc8]
jmp 0x1004094ce
lea rcx, str.hostname_dup_:_out_of_memory
call fcn.100412030
mov rcx, qword [rsp + 0x110]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408540
jmp 0x100408b7a
xor ebx, ebx
jmp 0x10040954b
xor r12d, r12d
jmp 0x10040953e
mov dword [rsp + 0xf0], 2
jmp 0x100408ebe
mov byte [r9 + 0x6d], 1
jmp 0x10040ac1b
mov dword [rsp + 0xf0], 2
jmp 0x100409e54