Function at 0x100408880
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push r15
mov eax, 0x7088
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.10041d940
sub rsp, rax
mov rsi, qword [rsp + 0x7100]
cmp qword [rsp + 0x7108], 0
setne r13b
test rsi, rsi
sete al
mov qword [rsp + 0x70e8], r9
mov ebx, ecx
mov rbp, rdx
mov edi, r8d
cmp al, r13b
je 0x1004088e8
xor r15d, r15d
mov eax, r15d
add rsp, 0x7088
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x108], 0
mov qword [rsp + 0x110], 0
mov byte [rsp + 0x107], 0
test rsi, rsi
je 0x1004094d0
movzx eax, byte [rsi + 8]
mov byte [rsp + 0x9c], al
mov rax, qword [0x10042b730]
mov r14d, dword [rax + 0x1008]
test bl, bl
je 0x1004092d0
lea rax, [rsp + 0x107]
mov r9, qword [rsp + 0x7110]
mov rdx, rsi
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x110]
mov r8, qword [rsp + 0x7108]
mov qword [rsp + 0x28], rax
mov rax, qword [0x10042b730]
lea rcx, [rax + 0x2038]
call fcn.100402100
test al, al
je 0x1004088c9
cmp byte [rsp + 0x107], 0
jne 0x1004088c9
mov r15, qword [rsp + 0x110]
mov r12, qword [r15]
test r12, r12
je 0x1004094f0
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
xor r15d, r15d
call fcn.100410460
mov dword [rsp + 0xa8], 0
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x1004089da
movzx r10d, byte [rax + 0x70]
test r10b, r10b
jne 0x1004089fe
cmp qword [rsp + 0x7108], 0
je 0x100409a80
movzx r10d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
mov rax, qword [rsp + 0x7110]
mov rcx, qword [rsp + 0x7110]
or r14d, edi
mov byte [rsp + 0xa0], r10b
mov dword [rsp + 0xbc], r14d
lea rdi, [rsp + 0x130]
lea r14, [rsp + 0x1b0]
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xf0], al
call fcn.1004036a0
mov rcx, qword [rsp + 0x7110]
mov byte [rsp + 0xb8], al
call fcn.100403620
mov qword [rsp + 0x28], r14
xor r9d, r9d
mov rcx, rsi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsp + 0x7110]
mov rdx, qword [rsp + 0x7108]
mov qword [rsp + 0xb0], rax
call fcn.100405220
test bl, bl
je 0x100409510
mov rax, qword [rsp + 0x7110]
test byte [rax + 0xd], 2
jne 0x1004088cc
cmp qword [rsp + 0x7128], 0
je 0x1004088cc
mov rax, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x108]
mov rdx, qword [rax + 0x88]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0xa0], rax
mov edx, 6
call fcn.100408460
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc0]
call fcn.100411e90
test al, al
je 0x100409b40
lea rcx, str.packet_contains_HTTP_request_n
call fcn.100410460
mov r8, qword [rsp + 0x108]
test r8, r8
je 0x100408b80
mov r9d, dword [r8 + 0x74]
test r9d, r9d
jne 0x100408b2a
mov dword [r8 + 0x74], 1
cmp qword [r8 + 0x98], 0
jne 0x10040a28a
lea rax, [r8 + 0xa8]
mov rcx, rax
mov qword [rsp + 0xc8], rax
call fcn.1004103b0
test al, al
je 0x10040aa0a
mov r8, qword [rsp + 0x108]
test r8, r8
je 0x100408b80
mov rax, qword [r8]
test rax, rax
je 0x100408b80
cmp word [rax + 6], 0
je 0x100408b80
cmp byte [r8 + 0x72], 0
je 0x10040acd7
nop
lea rax, [rsp + 0x230]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc0]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.100412130
test al, al
je 0x10040a5c5
mov rax, qword [rsp + 0x108]
test rax, rax
je 0x100409cc8
cmp byte [rax + 0x63], 0
je 0x100409c81
cmp byte [rax + 0x64], 0
je 0x100409cc8
mov dword [rsp + 0xc8], 1
mov edx, dword [rax + 0x48]
sub edx, 0x1000000
sub edx, dword [rax + 0x6c]
cmp edx, 0x7effffff
ja 0x100408c00
mov byte [rax + 0x65], 1
nop
mov rdx, qword [rsp + 0xd0]
lea rcx, str.hostname:__s_n
mov byte [rsp + 0x4c10], 0
call fcn.100410460
mov r8, qword [rsp + 0x110]
test r8, r8
je 0x10040a623
cmp qword [r8 + 0x78], 0
je 0x10040aeb0
movzx edx, byte [r8 + 0xb]
movzx ecx, byte [r8 + 9]
cmp qword [r12 + 0x3a00], 0
movzx eax, byte [r8 + 0xa]
mov byte [rsp + 0x4c10], dl
je 0x10040ab43
test cl, cl
je 0x10040a632
test al, al
je 0x10040aa3c
cmp byte [r8 + 0x80], 0
jne 0x10040ad0a
cmp dword [rsp + 0xc8], 1
mov edx, dword [r12 + 0x2c]
jne 0x100409be0
lea rax, [r12 + 0x64]
mov ecx, dword [r12 + 0x3c]
mov r9, qword [rsp + 0xa0]
mov qword [rsp + 0xd8], rax
mov r8, qword [rsp + 0xc0]
mov rax, qword [r12 + 0x39a8]
mov qword [rsp + 0xd0], rax
call fcn.100412440
mov rbx, qword [rsp + 0x108]
mov r13, rax
test rbx, rbx
je 0x100409c46
cmp qword [rbx + 0x98], 0
jne 0x100409f38
add rbx, 0xa8
mov rcx, rbx
call fcn.1004103b0
test al, al
je 0x10040a5a2
mov ebx, dword [rsp + 0xc8]
test ebx, ebx
jne 0x100409c46
cmp byte [r12 + 0x26], 0
je 0x1004088cc
lea rcx, str.applying_tampering_to_unknown_protocol_n
call fcn.100410460
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x10040ab5f
mov dword [rsp + 0xc8], 0
movzx r10d, byte [rax + 0x70]
test r10b, r10b
jne 0x100408d82
nop dword [rax + rax]
cmp qword [rsp + 0x7108], 0
je 0x10040a588
movzx r10d, byte [r12 + 0x51]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
cmp dword [rsp + 0xc8], 1
je 0x100409d6f
mov r11d, dword [r12 + 0x1c]
test r11d, r11d
je 0x1004088cc
mov rax, qword [0x10042b730]
cmp byte [rax + 0x1004], 0
jne 0x10040a1ee
mov rbx, qword [rsp + 0xa0]
lea rax, [r13 - 1]
cmp rax, rbx
jb 0x100409ef0
test rbp, rbp
jne 0x10040a1e3
cmp qword [rsp + 0x7128], 1
jbe 0x10040a1e3
mov qword [rsp + 0xa0], 1
mov rdx, qword [rsp + 0xa0]
lea rcx, str.split_pos__zu_n
mov byte [rsp + 0xc0], r10b
call fcn.100410460
movzx r10d, byte [rsp + 0xc0]
mov r13d, dword [r12 + 0x1c]
mov qword [rsp + 0x118], 0x2464
cmp r13d, 5
ja 0x10040a2c6
cmp r13d, 3
ja 0x10040a6b9
cmp r13d, 2
je 0x10040a8c7
cmp r13d, 3
jne 0x1004088cc
test rbp, rbp
je 0x10040ae52
mov r13d, dword [r12 + 0x20]
cmp r13d, 9
jbe 0x10040b36e
lea eax, [r13 - 0xa]
cmp eax, 1
ja 0x1004088cc
xor r9d, r9d
mov dword [rsp + 0xc8], r9d
cmp qword [rsp + 0xa0], 0
je 0x1004088cc
cmp r13d, 0xa
je 0x10040b789
mov r13d, 0xb
mov eax, dword [r12 + 0x30]
test eax, eax
jne 0x10040b67c
mov rbx, qword [rsp + 0x7120]
mov rbp, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rbx
mov ebx, dword [r12 + 0x5c]
mov r11d, dword [r12 + 0x60]
movzx r10d, bp
cmp qword [rsp + 0x7108], 0
mov dword [rsp + 0xc0], ebx
je 0x10040b9b6
mov rbx, qword [rsp + 0x7108]
mov r9d, dword [rbx]
test rsi, rsi
je 0x10040bc32
movzx r8d, byte [rsi + 1]
neg eax
movzx ecx, byte [rsp + 0xb8]
mov dword [rsp + 0xf4], r11d
mov edx, eax
mov dword [rsp + 0xe8], r10d
mov r11, qword [rsp + 0x7110]
mov r10, qword [rsp + 0x7110]
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0xb8], ecx
movzx ebx, byte [rsp + 0x9c]
movzx r11d, word [r11 + 0xe]
mov dword [rsp + 0xfc], r8d
mov r10d, dword [r10 + 8]
mov ecx, dword [rax + 4]
mov dword [rsp + 0xf8], r9d
mov dword [rsp + 0x9c], ebx
lea rbx, [rsp + 0x330]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xd8], r10d
call fcn.100403590
mov r9d, dword [rsp + 0xc0]
mov edx, dword [rsp + 0x9c]
lea r11, [rsp + 0x118]
mov r10d, dword [rsp + 0xe8]
mov qword [rsp + 0xe0], r11
mov dword [rsp + 0x60], r9d
mov r9d, dword [rsp + 0xc8]
mov dword [rsp + 0x40], edx
mov edx, dword [rsp + 0xb8]
mov dword [rsp + 0x78], r10d
mov r10d, dword [rsp + 0xd8]
mov dword [rsp + 0x58], r9d
mov r9d, dword [rsp + 0xf8]
mov dword [rsp + 0x30], edx
mov edx, dword [rsp + 0xd0]
mov qword [rsp + 0x88], r11
mov r11, qword [rsp + 0xa8]
movzx ecx, byte [rsp + 0xf0]
mov r8d, dword [rsp + 0xfc]
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x28], edx
mov r9, qword [rsp + 0xb0]
mov rdx, r14
mov dword [rsp + 0x20], r10d
mov qword [rsp + 0x70], r11
mov r11d, dword [rsp + 0xf4]
mov dword [rsp + 0xf0], ecx
mov dword [rsp + 0x48], r8d
mov r8d, ecx
mov rcx, rdi
mov qword [rsp + 0x38], r9
mov r9d, eax
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x68], r11d
call fcn.100403eb0
test al, al
je 0x1004088cc
mov r8, qword [rsp + 0xa0]
mov r9d, dword [r12 + 0x30]
lea rcx, str.sending_1st_tcp_segment_0__zu_len_zu_seqovl_u_:
lea r10, [r8 - 1]
mov rdx, r10
mov qword [rsp + 0xc0], r10
call fcn.100410460
mov rcx, qword [rsp + 0xa8]
mov rdx, rbp
mov r8d, 0x20
lea rbp, [0x1004231be]
call fcn.10040def0
mov rcx, rbp
call fcn.100410460
mov rax, qword [rsp + 0x118]
mov r9, rbx
mov rcx, r14
mov r8, qword [rsp + 0x70e8]
mov edx, dword [rsp + 0xbc]
mov qword [rsp + 0x20], rax
call fcn.100407630
test al, al
je 0x1004088cc
cmp r13d, 0xa
mov r10, qword [rsp + 0xc0]
je 0x10040bd5f
mov rax, qword [rsp + 0xa0]
cmp rax, qword [rsp + 0x7128]
jae 0x1004092c3
mov rax, qword [rsp + 0xa0]
mov r10d, dword [r12 + 0x5c]
mov qword [rsp + 0x118], 0x2464
movzx r8d, word [rsp + 0x7128]
sub r8d, eax
add rax, qword [rsp + 0x7120]
cmp qword [rsp + 0x7108], 0
mov r13, rax
mov eax, dword [r12 + 0x60]
movzx r8d, r8w
mov dword [rsp + 0xa8], eax
je 0x10040bd57
mov rax, qword [rsp + 0x7108]
mov r12d, dword [rax]
test rsi, rsi
je 0x10040bd50
movzx esi, byte [rsi + 1]
mov rax, qword [rsp + 0x7110]
mov rdx, qword [rsp + 0x7110]
mov dword [rsp + 0xe8], r10d
mov dword [rsp + 0xd8], r8d
movzx r11d, word [rax + 0xe]
mov ecx, dword [rdx + 4]
mov eax, dword [rax + 8]
mov edx, dword [rsp + 0xa0]
mov dword [rsp + 0xd0], r11d
mov dword [rsp + 0xc0], eax
call fcn.100403590
mov dword [rsp + 0x48], esi
mov rdx, r14
mov esi, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0xe0]
mov r9d, eax
mov r11d, dword [rsp + 0xd0]
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x40], esi
mov rsi, qword [rsp + 0xb0]
mov qword [rsp + 0x88], rcx
mov eax, dword [rsp + 0xc0]
mov ecx, dword [rsp + 0xa8]
mov qword [rsp + 0x38], rsi
mov esi, dword [rsp + 0xb8]
mov r8d, dword [rsp + 0xd8]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0xc8]
mov dword [rsp + 0x30], esi
mov r10d, dword [rsp + 0xe8]
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x78], r8d
mov r8d, dword [rsp + 0xf0]
mov dword [rsp + 0x58], ecx
mov rcx, rdi
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x60], r10d
call fcn.100403eb0
test al, al
je 0x1004088cc
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x7128]
lea rcx, str.sending_2nd_tcp_segment__zu__zu_len_zu_:
mov rax, qword [rsp + 0x7128]
sub rsi, rdx
mov r9, rsi
lea r8, [rax - 1]
call fcn.100410460
mov rcx, r13
mov r8d, 0x20
mov rdx, rsi
call fcn.10040def0
mov rcx, rbp
call fcn.100410460
mov rax, qword [rsp + 0x118]
mov r9, rbx
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x70e8]
mov edx, dword [rsp + 0xbc]
mov rcx, r14
call fcn.100407630
test al, al
je 0x1004088cc
mov r15d, 2
jmp 0x1004088cc
lea r12, [rax + 0x2038]
mov rcx, r12
call fcn.100402c90
lea rax, [rsp + 0x107]
mov rdx, rsi
mov rcx, r12
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x108]
mov r9, qword [rsp + 0x7110]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x7128]
mov qword [rsp + 0x20], 0
mov r8, qword [rsp + 0x7108]
mov qword [rsp + 0x28], rax
call fcn.100402260
mov r10, qword [rsp + 0x108]
test al, al
jne 0x100409490
test r10, r10
je 0x10040934e
cmp byte [r10 + 8], 0
jne 0x1004094fb
mov r10, qword [r10 + 0x78]
mov rax, qword [rsp + 0x7110]
cmp byte [rsp + 0x107], 0
movzx ecx, r13b
mov r9, r10
movzx edx, word [rax + 2]
cmovne dx, word [rax]
xor r8d, r8d
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xchg dh, dl
movzx edx, dx
call fcn.100407e20
mov r12, rax
mov rax, qword [rsp + 0x108]
test rax, rax
je 0x1004093ac
mov qword [rax], r12
mov byte [rax + 8], 1
test r12, r12
je 0x1004094fb
lea rax, [r12 + 0x4a38]
mov rcx, rax
mov qword [rsp + 0xa0], rax
call fcn.100411c50
cmp word [r12 + 4], 0
jne 0x100409828
mov dword [rsp + 0xa8], 0
xor r15d, r15d
cmp byte [rsp + 0x107], 0
jne 0x1004096e8
movzx edx, word [r12 + 6]
test dx, dx
je 0x1004089c3
mov rax, qword [rsp + 0x108]
test rax, rax
je 0x100409c70
cmp byte [rax + 0x72], 0
mov r9d, dword [r12 + 0xc]
jne 0x100409870
test r9d, r9d
je 0x100409460
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040a675
cmp dl, 0x73
je 0x10040a668
xor r8d, r8d
cmp dl, 0x64
jne 0x10040944e
mov r8, qword [rax + 0x30]
lea rcx, str.wssize_cutoff_not_reached__mode__c_:__llu__u_n
call fcn.100410460
movzx edx, word [r12 + 6]
movzx r8d, byte [r12 + 9]
mov rcx, qword [rsp + 0x7110]
mov r15d, 1
call fcn.100406020
mov dword [rsp + 0xa8], 1
jmp 0x1004089c3
mov r12, qword [r10]
mov edx, 6
mov rcx, r10
mov qword [rsp + 0x110], r10
call fcn.100407aa0
test r12, r12
je 0x10040933f
mov edx, dword [r12]
lea rcx, str.using_cached_desync_profile__d_n
call fcn.100410460
jmp 0x1004093b5
mov rax, qword [rsp + 0x7108]
movzx eax, byte [rax + 7]
mov byte [rsp + 0x9c], al
jmp 0x10040891c
cmp byte [r15 + 8], 0
je 0x1004098a8
lea rcx, str.matching_desync_profile_not_found_n
call fcn.100410460
jmp 0x1004088c9
mov rcx, qword [rsp + 0x7110]
call fcn.100405f40
test al, al
je 0x100409aa0
movzx r10d, byte [rsp + 0xa0]
mov eax, dword [r12 + 0x18]
cmp eax, 6
je 0x100409930
cmp eax, 7
jne 0x1004088cc
mov rcx, qword [rsp + 0x7110]
call fcn.100403720
test al, al
jne 0x10040a67e
cmp qword [rsp + 0x7128], 0
jne 0x10040aac0
xor edx, edx
lea rbp, [r12 + 0x1180]
cmp qword [rsp + 0x7108], 0
mov qword [rsp + 0x118], 0x2464
movzx ecx, word [r12 + 0x39d8]
je 0x10040959d
mov rax, qword [rsp + 0x7108]
mov edx, dword [rax]
xor eax, eax
test rsi, rsi
je 0x1004095a8
movzx eax, byte [rsi + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x118]
lea rbx, [rsp + 0x330]
mov qword [rsp + 0x88], r8
movzx r8d, byte [rsp + 0xf0]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb0]
mov dword [rsp + 0x78], ecx
mov rcx, rdi
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xb8]
mov dword [rsp + 0x50], edx
mov rdx, r14
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7110]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x70], rbp
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], 0
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
lea rcx, str.sending_SYN_with_fake_data_:
xor esi, esi
call fcn.100410460
mov rdx, qword [r12 + 0x39d8]
mov rcx, rbp
mov r8d, 0x20
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
mov ebp, dword [r12 + 0x28]
mov rdi, qword [rsp + 0x118]
test ebp, ebp
jle 0x1004092c3
mov r12d, dword [rsp + 0xbc]
mov r13, qword [rsp + 0x70e8]
jmp 0x1004096c3
add esi, 1
cmp ebp, esi
je 0x1004092c3
mov qword [rsp + 0x20], rdi
mov r9, rbx
mov r8, r13
mov edx, r12d
mov rcx, r14
call fcn.100407630
test al, al
jne 0x1004096b8
jmp 0x1004088cc
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x1004088cc
cmp byte [rbx + 0x70], 0
jne 0x100409760
cmp qword [rbx + 0x28], 1
jne 0x100409760
test rsi, rsi
lea rax, [r12 + 0x52]
lea rdx, [r12 + 0x55]
cmovne rdx, rax
cmp byte [rdx], 0
je 0x100409760
movzx ecx, byte [rsp + 0x9c]
call fcn.1004078e0
mov byte [rbx + 0x70], al
mov rax, qword [rsp + 0x108]
movzx eax, byte [rax + 0x70]
test al, al
je 0x10040b1cb
movzx edx, al
lea rcx, str.autottl:_guessed__u_n
call fcn.100410460
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x1004088cc
mov rsi, qword [rbx + 0x78]
test rsi, rsi
je 0x1004088cc
cmp byte [rbx + 0x80], 0
je 0x1004088cc
mov eax, dword [rbx + 0x4c]
sub eax, dword [rbx + 0x58]
cmp eax, 1
jne 0x1004088cc
mov rax, qword [rsp + 0x7110]
test byte [rax + 0xd], 4
jne 0x10040aba8
cmp qword [rsp + 0x7128], 0
je 0x1004088cc
cmp dword [rbx + 0x74], 1
je 0x10040b6e4
mov rcx, qword [r12 + 0x4a38]
mov rdx, rsi
call fcn.1004118f0
mov rdx, rax
test rax, rax
je 0x1004097ff
mov rcx, qword [rsp + 0xa0]
call fcn.1004119e0
mov edx, dword [r12]
mov r8, rsi
lea rcx, str.auto_hostlist__profile__d__:__s_:_fail_counter_reset._website_is_working._n
call fcn.100410460
mov r8d, dword [r12]
mov rdx, rsi
lea rcx, str._s_:_profile__d_:_fail_counter_reset._website_is_working.
call fcn.100410940
mov rax, qword [rsp + 0x7110]
test byte [rax + 0xd], 4
je 0x1004088cc
mov rcx, qword [rsp + 0x108]
call fcn.100401df0
jmp 0x1004088cc
mov rcx, qword [rsp + 0x7110]
call fcn.100405f30
test al, al
je 0x1004093da
movzx edx, word [r12 + 4]
movzx r8d, byte [r12 + 8]
mov r15d, 1
mov rcx, qword [rsp + 0x7110]
call fcn.100406020
mov dword [rsp + 0xa8], 1
jmp 0x1004093e8
movsx edx, byte [r12 + 0xa]
cmp dl, 0x6e
je 0x10040a1b7
cmp dl, 0x73
je 0x10040a1aa
xor r8d, r8d
cmp dl, 0x64
jne 0x100409894
mov r8, qword [rax + 0x30]
lea rcx, str.wssize_cutoff_reached__mode__c_:__llu__u_._not_changing_wssize._n
call fcn.100410460
jmp 0x1004089c3
mov rax, qword [rsp + 0x7110]
mov r9, qword [r15 + 0x78]
movzx ecx, r13b
xor r8d, r8d
movzx eax, word [rax + 2]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov edx, eax
xchg dh, dl
movzx edx, dx
mov word [rsp + 0xa0], ax
call fcn.100407e20
mov qword [r15], rax
mov r12, rax
mov rax, qword [rsp + 0x110]
mov byte [rax + 8], 1
test r12, r12
je 0x1004094fb
movzx r15d, byte [rax + 0x70]
test r15b, r15b
jne 0x100409ce0
mov dword [rsp + 0xa8], 0
jmp 0x1004089da
xor edx, edx
mov r9d, dword [r12 + 0x60]
mov r8d, dword [r12 + 0x5c]
mov qword [rsp + 0x118], 0x2464
cmp qword [rsp + 0x7108], 0
mov ecx, dword [r12 + 0x58]
je 0x100409962
mov rax, qword [rsp + 0x7108]
mov edx, dword [rax]
xor eax, eax
test rsi, rsi
je 0x10040996d
movzx eax, byte [rsi + 1]
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0xb0]
lea r11, [rsp + 0x118]
lea rbx, [rsp + 0x330]
mov dword [rsp + 0x60], r8d
mov r8d, 0x12
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xb8]
mov dword [rsp + 0x58], ecx
mov rcx, rdi
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x50], edx
mov rdx, r14
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x68], r9d
mov dword [rsp + 0x40], r10d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
lea rcx, str.sending_fake_SYNACK_n
call fcn.100410460
mov edi, dword [r12 + 0x28]
mov rbp, qword [rsp + 0x118]
test edi, edi
jle 0x1004088cc
mov r12d, dword [rsp + 0xbc]
mov r13, qword [rsp + 0x70e8]
xor esi, esi
jmp 0x100409a5b
add esi, 1
cmp edi, esi
je 0x1004088cc
mov qword [rsp + 0x20], rbp
mov r9, rbx
mov r8, r13
mov edx, r12d
mov rcx, r14
call fcn.100407630
test al, al
jne 0x100409a50
jmp 0x1004088cc
movzx r10d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
jmp 0x1004089fe
mov rdx, qword [rsp + 0x108]
mov rcx, r12
call fcn.100408650
test al, al
je 0x1004088cc
mov rax, qword [rsp + 0x7110]
test byte [rax + 0xd], 2
jne 0x1004088cc
cmp qword [rsp + 0x7128], 0
je 0x1004088cc
mov rax, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0x108]
mov r8d, 6
mov r9, qword [rsp + 0x7120]
mov qword [rsp + 0x20], rax
lea rdx, [rcx + 0x88]
call fcn.100408250
mov rcx, qword [rsp + 0x108]
test al, al
jne 0x10040a1c0
mov rax, qword [rsp + 0x7128]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x7120]
mov qword [rsp + 0xc0], rax
jmp 0x100408ad9
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc0]
mov r8d, 1
call fcn.100412610
test al, al
jne 0x100409f5c
mov rbx, qword [rsp + 0x108]
mov r9, rbx
test rbx, rbx
je 0x10040a68f
cmp byte [rbx + 0x64], 0
je 0x10040a255
mov eax, dword [rbx + 0x48]
sub eax, 0x1000000
sub eax, dword [rbx + 0x6c]
cmp eax, 0x7effffff
ja 0x10040ab39
mov byte [r9 + 0x65], 1
mov r13d, dword [r12 + 0x2c]
lea rax, [r12 + 0xbcc]
mov rbx, r9
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39d0]
mov qword [rsp + 0xd0], rax
test r9, r9
je 0x100408d0d
mov dword [rsp + 0xc8], 0
jmp 0x100408cd9
lea rax, [r12 + 0x618]
mov edx, dword [r12 + 0x2c]
mov ecx, dword [r12 + 0x40]
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39b0]
mov dword [rsp + 0x20], 0
mov r9, qword [rsp + 0xa0]
mov r8, qword [rsp + 0xc0]
mov qword [rsp + 0xd0], rax
call fcn.100412c30
mov rbx, qword [rsp + 0x108]
mov dword [rsp + 0xc8], 2
mov r13, rax
test rbx, rbx
jne 0x100408cd9
mov rax, qword [rsp + 0x110]
test rax, rax
je 0x100408d50
movzx r10d, byte [rax + 0x70]
test r10b, r10b
jne 0x100408d74
jmp 0x100408d50
lea rcx, str.not_changing_wssize._wssize_is_set_but_conntrack_entry_is_missing_n
call fcn.100410460
jmp 0x1004089c3
mov ecx, dword [rax + 0x40]
mov edx, dword [rax + 0x48]
lea r8d, [rcx - 1]
mov ecx, 0x101
movd xmm0, edx
mov word [rax + 0x63], cx
movd xmm1, r8d
lea rcx, str.req_retrans_:_tcp_seq_interval__u__u_n
punpckldq xmm0, xmm1
movq qword [rax + 0x68], xmm0
call fcn.100410460
mov rax, qword [rsp + 0x108]
test rax, rax
jne 0x100408bd1
nop dword [rax + rax]
mov dword [rsp + 0xc8], 1
jmp 0x100408c00
mov rax, qword [rsp + 0x7110]
mov rcx, qword [rsp + 0x7110]
or r14d, edi
xor r15d, r15d
mov dword [rsp + 0xbc], r14d
lea rdi, [rsp + 0x130]
lea r14, [rsp + 0x1b0]
movzx eax, byte [rax + 0xd]
mov byte [rsp + 0xf0], al
call fcn.1004036a0
mov rcx, qword [rsp + 0x7110]
mov byte [rsp + 0xb8], al
call fcn.100403620
mov qword [rsp + 0x28], r14
xor r9d, r9d
mov rcx, rsi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsp + 0x7110]
mov rdx, qword [rsp + 0x7108]
mov qword [rsp + 0xb0], rax
call fcn.100405220
mov dword [rsp + 0xa8], 0
jmp 0x100408a8a
test dword [r12 + 0x10], 0xffffff
je 0x100408d82
mov rdx, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0x7120]
mov r9d, 8
lea r8, str._r_nHost:
mov byte [rsp + 0xc0], r10b
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc0]
test rax, rax
mov rbx, rax
je 0x100408d82
cmp byte [r12 + 0x10], 0
jne 0x10040b31f
cmp byte [r12 + 0x12], 0
jne 0x10040b25f
cmp byte [r12 + 0x11], 0
je 0x100408d82
mov rdx, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0x7120]
mov r9d, 0xe
lea r8, str._r_nUser_Agent:
mov byte [rsp + 0xc0], r10b
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xc0]
test rax, rax
je 0x100408d82
mov rcx, rax
mov rdx, qword [rsp + 0x7128]
sub rcx, qword [rsp + 0x7120]
mov r9d, 2
lea r8, [0x10042345a]
mov byte [rsp + 0xe0], r10b
sub rdx, 1
sub rdx, rcx
lea rcx, [rax + 1]
call sub.cygwin1.dll_memmem
movzx r10d, byte [rsp + 0xe0]
test rax, rax
mov qword [rsp + 0xc0], rax
je 0x100408d82
lea rcx, str.removing_space_after_Host:_and_adding_it_to_User_Agent:_n
mov byte [rsp + 0xa8], r10b
call fcn.100410460
mov r9, qword [rsp + 0xc0]
movzx r10d, byte [rsp + 0xa8]
cmp rbx, r9
mov byte [rsp + 0xc0], r10b
jae 0x10040bc90
mov rax, r9
lea rdx, [rbx + 8]
lea rcx, [rbx + 7]
mov qword [rsp + 0xa8], r9
sub rax, rbx
lea r8, [rax - 8]
call sub.cygwin1.dll_memmove
mov r9, qword [rsp + 0xa8]
movzx r10d, byte [rsp + 0xc0]
mov byte [r9 - 1], 0x20
mov dword [rsp + 0xa8], 1
mov r15d, 1
jmp 0x100408d82
cmp rbp, r13
jb 0x10040a5d6
mov r9, qword [rsp + 0x7128]
mov r8, rbp
mov rdx, r13
lea rcx, str.split_pos__zu_is_outside_of_this_packet__zu__zu_n
mov byte [rsp + 0xc0], r10b
add r9, rbp
call fcn.100410460
mov qword [rsp + 0xa0], 0
movzx r10d, byte [rsp + 0xc0]
jmp 0x100408e02
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100422ab0]
call fcn.100410460
lea rcx, [rbx + 0x88]
call fcn.100403270
jmp 0x100408ce7
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc0]
call fcn.1004125f0
lea rcx, str.packet_contains_partial_TLS_ClientHello_n
test al, al
mov byte [rsp + 0xc8], al
lea rax, str.packet_contains_full_TLS_ClientHello_n
cmovne rcx, rax
call fcn.100410460
mov dword [rsp + 0x20], 1
lea rax, [rsp + 0x230]
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xc0]
mov r9d, 0x100
mov r8, rax
mov qword [rsp + 0xd0], rax
call fcn.100412970
mov r9, qword [rsp + 0x108]
mov r10d, eax
test r9, r9
je 0x10040ab6f
movzx r11d, byte [rsp + 0xc8]
mov eax, dword [r9 + 0x74]
test eax, eax
jne 0x100409ff4
mov dword [r9 + 0x74], 2
movzx eax, byte [r9 + 0x64]
test r11b, r11b
jne 0x10040a9fd
cmp qword [r9 + 0x98], 0
jne 0x10040ad58
cmp byte [r9 + 0x65], 0
jne 0x10040a9fd
test al, al
je 0x10040a056
mov edx, dword [r9 + 0x68]
mov ecx, dword [r9 + 0x48]
mov byte [rsp + 0xd8], r10b
mov r8d, dword [r9 + 0x6c]
mov byte [rsp + 0xc8], r11b
call fcn.10040e8c0
movzx r11d, byte [rsp + 0xc8]
movzx r10d, byte [rsp + 0xd8]
test al, al
jne 0x10040a0c4
mov rcx, qword [rsp + 0x7120]
mov byte [rsp + 0xd8], r10b
mov byte [rsp + 0xc8], r11b
call fcn.1004125e0
mov rcx, qword [rsp + 0x108]
mov r8d, 6
mov r9, rax
mov rax, qword [rsp + 0x7128]
lea rdx, [rcx + 0x88]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x7120]
mov qword [rsp + 0x20], rax
call fcn.100407d50
movzx r11d, byte [rsp + 0xc8]
movzx r10d, byte [rsp + 0xd8]
test al, al
je 0x10040b246
mov r9, qword [rsp + 0x108]
cmp byte [r9 + 0x64], 0
jne 0x10040a12d
cmp byte [r9 + 0x63], 0
je 0x10040b1dc
mov edx, dword [r9 + 0x68]
mov eax, dword [r9 + 0x40]
lea rcx, str.req_retrans_:_seq_interval__u__u_n
mov byte [rsp + 0xd8], r10b
mov byte [rsp + 0xc8], r11b
lea r8d, [rax - 1]
mov dword [r9 + 0x6c], r8d
call fcn.100410460
mov r9, qword [rsp + 0x108]
movzx r11d, byte [rsp + 0xc8]
movzx r10d, byte [rsp + 0xd8]
or byte [r9 + 0x64], r11b
test r11b, r11b
jne 0x10040a13b
cmp qword [r9 + 0x98], 0
jne 0x10040ad60
mov rax, qword [r9]
test rax, rax
je 0x10040a155
cmp word [rax + 6], 0
je 0x10040a155
cmp byte [r9 + 0x72], 0
je 0x10040b913
cmp qword [r9 + 0x98], 0
mov rax, r9
jne 0x10040ad60
cmp byte [r12 + 0x25], 0
jne 0x10040b1a8
cmp byte [r9 + 0x64], 0
je 0x10040a191
mov eax, dword [r9 + 0x48]
sub eax, 0x1000000
sub eax, dword [r9 + 0x6c]
cmp eax, 0x7effffff
jbe 0x10040b3ba
test r10b, r10b
je 0x100409be0
mov dword [rsp + 0xc8], 2
jmp 0x100408c00
mov r8d, dword [rax + 0x48]
sub r8d, dword [rax + 0x54]
jmp 0x100409894
mov r8, qword [rax + 0x20]
jmp 0x100409894
mov rax, qword [rcx + 0x88]
mov qword [rsp + 0xc0], rax
mov rax, qword [rcx + 0xa0]
mov qword [rsp + 0xa0], rax
jmp 0x100408ad9
mov r13d, 1
jmp 0x100409ef9
lea rbx, [rsp + 0x27a0]
mov r8d, 0x30
mov rcx, rdi
mov byte [rsp + 0xe0], r10b
mov rdx, rbx
call fcn.10040e270
lea rax, [rsp + 0x4c10]
mov r8d, 0x30
mov rcx, r14
mov rdx, rax
mov qword [rsp + 0xc0], rax
call fcn.10040e270
mov r8, qword [rsp + 0xc0]
mov rdx, rbx
lea rcx, str.dpi_desync_src_s_dst_s_n
call fcn.100410460
movzx r10d, byte [rsp + 0xe0]
jmp 0x100408da4
lea rax, [r12 + 0xbcc]
mov r13d, dword [r12 + 0x2c]
mov dword [rsp + 0xc8], 0
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39d0]
mov qword [rsp + 0xd0], rax
jmp 0x100408cd9
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100422ab0]
mov qword [rsp + 0xc8], r8
call fcn.100410460
mov r8, qword [rsp + 0xc8]
lea rcx, [r8 + 0x88]
call fcn.100403270
mov r8, qword [rsp + 0xc8]
jmp 0x100408b38
lea eax, [r13 - 0xd]
cmp eax, 2
ja 0x10040ad21
mov dword [rsp + 0xc8], 0x10
cmp r13d, 0xd
je 0x10040a2fc
cmp r13d, 0xe
mov edx, pe_nt_image_headers64
mov eax, 0x40
cmovne eax, edx
mov dword [rsp + 0xc8], eax
cmp qword [rsp + 0x7108], 0
mov r13d, dword [r12 + 0x20]
je 0x10040ad2c
test r13d, r13d
je 0x10040abee
cmp r13d, 8
jne 0x10040b386
cmp qword [rsp + 0xa0], 0
je 0x10040abee
mov edx, dword [r12 + 0x30]
mov rbx, qword [rsp + 0xa0]
mov rax, rdx
cmp rdx, rbx
jae 0x10040b9a5
mov rbx, qword [rsp + 0xa0]
cmp rbx, qword [rsp + 0x7128]
jb 0x10040b3c4
movzx eax, byte [rsp + 0xf0]
movzx ebp, byte [rsp + 0xb8]
mov dword [rsp + 0xf0], eax
movzx ebx, word [rsp + 0xa0]
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov dword [rsp + 0xa8], ebx
cmp r13d, 8
je 0x10040b9cd
mov qword [rsp + 0x118], 0x2464
xor r8d, r8d
cmp qword [rsp + 0x7108], 0
je 0x10040a3c0
mov rbx, qword [rsp + 0x7108]
mov r8d, dword [rbx]
test rsi, rsi
je 0x10040bcc5
movzx ecx, byte [rsi + 1]
mov dword [rsp + 0x60], eax
mov eax, dword [rsp + 0xc8]
lea r9, [rsp + 0x118]
lea rbx, [rsp + 0x330]
mov esi, dword [rsp + 0xa8]
mov dword [rsp + 0x68], edx
mov rdx, r14
mov dword [rsp + 0x58], eax
movzx eax, byte [rsp + 0x9c]
mov dword [rsp + 0x78], esi
mov rsi, qword [rsp + 0x7120]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb0]
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xf0]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x48], ecx
mov rcx, rdi
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x70], rsi
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
mov rsi, qword [rsp + 0xa0]
lea rcx, str.sending_1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rdi, [rsi - 1]
mov r8, rsi
mov rdx, rdi
call fcn.100410460
mov rcx, qword [rsp + 0x7120]
mov rdx, rsi
mov r8d, 0x20
lea rsi, [0x1004231be]
call fcn.10040def0
mov rcx, rsi
call fcn.100410460
mov rax, qword [rsp + 0x118]
mov r9, rbx
mov rcx, r14
mov r8, qword [rsp + 0x70e8]
mov edx, dword [rsp + 0xbc]
mov qword [rsp + 0x20], rax
call fcn.100407630
test al, al
je 0x1004088cc
cmp r13d, 8
jne 0x1004092c3
mov rbx, qword [rsp + 0xa0]
mov rdx, rdi
lea rcx, str.sending_fake_2__1st_out_of_order_tcp_segment_0__zu_len_zu_:
mov r8, rbx
call fcn.100410460
mov rdx, rbx
xor ebx, ebx
mov r8d, 0x20
lea rcx, [0x10043b080]
call fcn.10040def0
mov rcx, rsi
lea rsi, [rsp + 0x4c10]
call fcn.100410460
mov rbp, qword [rsp + 0x27a0]
mov edi, dword [r12 + 0x28]
jmp 0x10040a553
add ebx, 1
cmp edi, ebx
jle 0x1004092c3
mov qword [rsp + 0x20], rbp
mov edx, dword [rsp + 0xbc]
mov r9, rsi
mov rcx, r14
mov r8, qword [rsp + 0x70e8]
call fcn.100407630
test al, al
jne 0x10040a550
jmp 0x1004088cc
movzx r10d, byte [r12 + 0x50]
movzx eax, byte [rsp + 0x9c]
test r10b, r10b
cmove r10d, eax
jmp 0x100408d74
mov rcx, rbx
call fcn.100410380
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100410460
mov rcx, rbx
call fcn.1004077d0
jmp 0x100408cfe
lea rcx, str.not_applying_tampering_to_HTTP_without_Host:_n
call fcn.100410460
jmp 0x1004088cc
mov rax, r13
sub rax, rbp
mov qword [rsp + 0xa0], rax
cmp rax, qword [rsp + 0x7128]
jae 0x100409ef9
cmp rax, r13
je 0x100408ddd
mov r8, rax
mov rdx, r13
lea rcx, str.split_pos_was_normalized_to_packet_data_offset_:__zu_____zu_n
mov byte [rsp + 0xc0], r10b
call fcn.100410460
movzx r10d, byte [rsp + 0xc0]
jmp 0x100408e02
cmp qword [r12 + 0x3a00], 0
je 0x10040b1ee
mov rdx, qword [rsp + 0xd0]
lea r8, [rsp + 0x4c10]
mov rcx, r12
call fcn.10040f1d0
mov r8, qword [rsp + 0x110]
test al, al
je 0x10040aa37
test r8, r8
je 0x100408c7b
jmp 0x100408c6d
mov r8d, dword [rax + 0x48]
sub r8d, dword [rax + 0x54]
jmp 0x10040944e
mov r8, qword [rax + 0x20]
jmp 0x10040944e
lea rcx, str.received_SYN_with_TCP_fast_open_option._syndata_desync_is_not_applied._n
call fcn.100410460
jmp 0x1004088cc
lea rax, [r12 + 0xbcc]
mov r13d, dword [r12 + 0x2c]
mov qword [rsp + 0xd8], rax
mov rax, qword [r12 + 0x39d0]
mov qword [rsp + 0xd0], rax
jmp 0x100408d0d
test rbp, rbp
jne 0x1004088cc
mov eax, dword [r12 + 0x58]
xor edx, edx
mov ecx, dword [r12 + 0x60]
cmp qword [rsp + 0x7108], 0
mov r11d, dword [r12 + 0x5c]
mov dword [rsp + 0xc0], eax
je 0x10040a6ef
mov rax, qword [rsp + 0x7108]
mov edx, dword [rax]
xor eax, eax
test rsi, rsi
je 0x10040a6fa
movzx eax, byte [rsi + 1]
mov r9, qword [rsp + 0x7110]
cmp r13d, 5
mov rbx, qword [rsp + 0x7110]
mov r8d, 4
movzx ebp, byte [rsp + 0xb8]
mov r9d, dword [r9 + 8]
movzx ebx, word [rbx + 0xe]
mov dword [rsp + 0x48], eax
movzx eax, r10b
mov dword [rsp + 0x40], eax
mov dword [rsp + 0xd0], r9d
mov r9d, 0x14
mov dword [rsp + 0xc8], ebx
cmove r8d, r9d
mov eax, dword [rsp + 0xc8]
lea r9, [rsp + 0x118]
mov qword [rsp + 0x88], r9
mov r9d, dword [rsp + 0xd0]
lea rbx, [rsp + 0x330]
mov dword [rsp + 0x50], edx
mov rdx, qword [rsp + 0xb0]
mov dword [rsp + 0x68], ecx
mov ecx, dword [rsp + 0xc0]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov qword [rsp + 0x38], rdx
mov rdx, r14
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x58], ecx
mov rcx, rdi
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x78], 0
mov qword [rsp + 0x70], 0
mov dword [rsp + 0x60], r11d
mov r9d, dword [rax + 4]
mov byte [rsp + 0xc0], r10b
call fcn.100403eb0
test al, al
je 0x1004088cc
lea rcx, str.sending_fake_RST_RSTACK_n
call fcn.100410460
movzx r10d, byte [rsp + 0xc0]
mov edx, dword [r12 + 0x28]
mov r13, qword [rsp + 0x118]
xor ebp, ebp
test edx, edx
jle 0x10040a886
mov qword [rsp + 0xc0], r12
mov r12, qword [rsp + 0x70e8]
mov qword [rsp + 0x7100], rsi
mov esi, dword [rsp + 0xbc]
mov qword [rsp + 0xd0], rdi
mov edi, ebp
mov ebp, edx
mov byte [rsp + 0xc8], r10b
jmp 0x10040a847
add edi, 1
cmp ebp, edi
je 0x10040a865
mov qword [rsp + 0x20], r13
mov r9, rbx
mov r8, r12
mov edx, esi
mov rcx, r14
call fcn.100407630
test al, al
jne 0x10040a840
jmp 0x1004088cc
mov r12, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0x7100]
movzx r10d, byte [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov r13d, dword [r12 + 0x20]
test r13d, r13d
je 0x10040aad1
cmp r13d, 8
jne 0x10040af90
mov qword [rsp + 0x118], 0x2464
xor ecx, ecx
mov dword [rsp + 0xc8], ecx
cmp qword [rsp + 0xa0], 0
je 0x1004088cc
jmp 0x10040a332
test rbp, rbp
jne 0x1004088cc
xor edx, edx
mov r8d, dword [r12 + 0x60]
mov ecx, dword [r12 + 0x5c]
cmp qword [rsp + 0x7108], 0
mov ebp, dword [r12 + 0x58]
movzx r9d, word [rsp + 0xd0]
je 0x10040a8ff
mov rax, qword [rsp + 0x7108]
mov edx, dword [rax]
xor eax, eax
test rsi, rsi
je 0x10040a90a
movzx eax, byte [rsi + 1]
mov dword [rsp + 0x48], eax
movzx eax, r10b
mov r13, qword [rsp + 0xd8]
lea r11, [rsp + 0x118]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb0]
lea rbx, [rsp + 0x330]
mov dword [rsp + 0x58], ebp
movzx ebp, byte [rsp + 0xb8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x68], r8d
movzx r8d, byte [rsp + 0xf0]
mov dword [rsp + 0x60], ecx
mov rcx, rdi
mov dword [rsp + 0x50], edx
mov rdx, r14
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x78], r9d
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov byte [rsp + 0xc0], r10b
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
lea rcx, str.sending_fake_request_:
call fcn.100410460
mov rdx, qword [rsp + 0xd0]
mov r8d, 0x20
mov rcx, r13
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
movzx r10d, byte [rsp + 0xc0]
jmp 0x10040a7f7
test al, al
jne 0x10040a13b
jmp 0x10040a0d3
mov rcx, qword [rsp + 0xc8]
call fcn.100410380
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100410460
mov rcx, qword [rsp + 0xc8]
call fcn.1004077d0
jmp 0x100408b57
test r8, r8
je 0x10040aa5b
xor eax, eax
cmp byte [r12 + 0x3a20], 0
je 0x10040aa54
movzx eax, byte [rsp + 0x4c10]
xor eax, 1
mov byte [r8 + 0x80], al
lea rcx, str.not_applying_tampering_to_this_request_n
call fcn.100410460
mov rbx, qword [rsp + 0x108]
test rbx, rbx
je 0x1004088cc
cmp qword [rbx + 0x98], 0
jne 0x10040b202
add rbx, 0xa8
mov rcx, rbx
call fcn.1004103b0
test al, al
jne 0x1004088cc
mov rcx, rbx
call fcn.100410380
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100410460
mov rcx, rbx
call fcn.1004077d0
jmp 0x1004088cc
lea rcx, str.received_SYN_with_data_payload._syndata_desync_is_not_applied._n
call fcn.100410460
jmp 0x1004088cc
mov rax, qword [rsp + 0x70f8]
mov r8, qword [rsp + 0x7128]
lea rcx, str.reinjecting_original_packet._len_zu_len_payload_zu_n
mov rdx, qword [rax]
call fcn.100410460
mov rax, qword [rsp + 0x7108]
mov r9, rsi
mov r8, qword [rsp + 0x7118]
mov rdx, qword [rsp + 0x7110]
mov ecx, dword [rsp + 0xa8]
mov qword [rsp + 0x20], rax
call fcn.100407a60
mov rax, qword [rsp + 0x70f8]
mov r9, qword [rsp + 0x70f0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
jmp 0x1004092a4
mov r13d, dword [r12 + 0x2c]
jmp 0x100409ba1
cmp qword [r12 + 0x3a08], 0
je 0x100408c7b
test cl, cl
jne 0x10040a652
jmp 0x10040a632
mov dword [rsp + 0xc8], 0
jmp 0x100408d50
cmp byte [r12 + 0x25], 0
je 0x10040a191
test al, al
jne 0x10040a19a
lea rcx, str.not_applying_tampering_to_TLS_ClientHello_without_hostname_in_the_SNI_n
call fcn.100410460
mov rcx, qword [rsp + 0x108]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
jmp 0x1004088cc
mov rdx, rsi
lea rcx, str.incoming_RST_detected_for_hostname__s_n
call fcn.100410460
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax]
mov rdx, qword [rax + 0x78]
mov r8d, dword [rcx]
lea rcx, str._s_:_profile__d_:_incoming_RST
call fcn.100410940
mov rax, qword [rsp + 0x108]
mov rcx, r12
mov rdx, qword [rax + 0x78]
call fcn.100407b50
jmp 0x1004097ff
mov rax, qword [rsp + 0x7108]
movzx ecx, word [rsp + 0x7128]
mov edx, dword [rax]
xor eax, eax
test rsi, rsi
je 0x10040ac0b
movzx eax, byte [rsi + 1]
mov dword [rsp + 0x48], eax
movzx eax, byte [rsp + 0x9c]
lea r8, [rsp + 0x118]
lea rbx, [rsp + 0x330]
mov rsi, qword [rsp + 0x7120]
mov qword [rsp + 0x88], r8
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0x70], rsi
mov esi, dword [rsp + 0xc8]
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xb8]
mov dword [rsp + 0x78], ecx
mov rcx, rdi
movzx r8d, byte [rsp + 0xf0]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x50], edx
mov rdx, r14
mov qword [rsp + 0x80], rbx
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x60], 0
mov dword [rsp + 0x58], esi
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
lea rcx, str.resending_original_packet_with_extension_header_n
test al, al
je 0x1004088cc
jmp 0x10040928f
lea rcx, str.forced_wssize_cutoff_n
mov qword [rsp + 0xc8], r8
call fcn.100410460
mov r8, qword [rsp + 0xc8]
mov edx, 6
mov byte [r8 + 0x72], 1
mov rcx, r8
call fcn.100407aa0
jmp 0x100408b80
mov byte [r8 + 0x62], 0xff
mov edx, 6
mov rcx, r8
call fcn.100407aa0
jmp 0x100408c7b
mov dword [rsp + 0xc8], 0
cmp r13d, 0xb
ja 0x10040b77a
cmp r13d, 9
ja 0x100408e6b
lea eax, [r13 - 8]
cmp eax, 1
jbe 0x10040a8b3
jmp 0x1004088cc
test al, al
je 0x10040a0d3
mov rax, qword [rsp + 0x7108]
mov r8, qword [rsp + 0x7118]
mov r9, rsi
mov rdx, qword [rsp + 0x7110]
mov ecx, dword [rsp + 0xa8]
mov qword [rsp + 0x20], rax
call fcn.100407a60
mov rax, qword [rsp + 0x108]
mov r9, qword [rsp + 0x70e8]
mov rdx, r14
mov r8d, dword [rsp + 0xbc]
lea rcx, [rax + 0xa8]
mov rax, qword [rsp + 0x7128]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70f8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x70f0]
mov qword [rsp + 0x20], rax
call fcn.100410240
test rax, rax
je 0x10040b226
mov rax, qword [rsp + 0x108]
lea rcx, [rax + 0xa8]
call fcn.100410380
lea rcx, str.DELAY_desync_until_reasm_is_complete___u__n
mov edx, eax
call fcn.100410460
mov rax, qword [rsp + 0x108]
mov rdx, qword [rax + 0x98]
test rdx, rdx
je 0x1004092c3
cmp rdx, qword [rax + 0xa0]
jne 0x1004092c3
lea rcx, [rax + 0xa8]
call fcn.10040c240
mov rcx, qword [rsp + 0x108]
lea rdx, str.reassemble_session_finished_n
call fcn.100408310
jmp 0x1004092c3
mov r8d, dword [rsp + 0xc8]
test r8d, r8d
jne 0x10040a8d0
lea rcx, str.not_applying_fake_because_of_unknown_protocol_n
mov byte [rsp + 0xc0], r10b
call fcn.100410460
mov r13d, dword [r12 + 0x20]
mov qword [rsp + 0x118], 0x2464
cmp r13d, 0xb
ja 0x10040b9be
movzx r10d, byte [rsp + 0xc0]
cmp r13d, 9
ja 0x100408e6b
jmp 0x10040ad40
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0xd8], r8
call sub.cygwin1.dll_strdup
mov r8, qword [rsp + 0xd8]
mov qword [r8 + 0x78], rax
test rax, rax
je 0x10040bd2b
lea rcx, str.we_have_hostname_now._searching_desync_profile_again._n
call fcn.100410460
mov r10, qword [rsp + 0x110]
cmp byte [rsp + 0x107], 0
mov rdx, qword [rsp + 0x7110]
mov r9, qword [r10 + 0x78]
lea r11, [r10 + 0xb]
lea r8, [r10 + 0xa]
lea rax, [r10 + 9]
je 0x10040b771
movzx edx, word [rdx]
mov qword [rsp + 0x28], r8
movzx ecx, r13b
xor r8d, r8d
mov qword [rsp + 0x30], r11
mov qword [rsp + 0x20], rax
xchg dh, dl
movzx edx, dx
mov qword [rsp + 0xd8], r10
call fcn.100407e20
mov r10, qword [rsp + 0xd8]
mov r8, qword [rsp + 0x110]
mov r13, rax
mov qword [r10], rax
mov byte [r8 + 8], 1
test rax, rax
je 0x10040b246
cmp r12, rax
je 0x100408c38
lea rcx, str.desync_profile_changed_by_revealed_hostname___n
call fcn.100410460
test bl, bl
je 0x10040b95f
mov r8, qword [rsp + 0x110]
mov r12, r13
jmp 0x100408c38
lea eax, [r13 - 9]
cmp eax, 3
ja 0x10040aad1
mov qword [rsp + 0x118], 0x2464
xor edx, edx
mov dword [rsp + 0xc8], edx
cmp r13d, 0xc
jne 0x10040ad36
mov rax, qword [rsp + 0x7108]
mov r9, rsi
mov ebx, 0x18
mov r8, qword [rsp + 0x7118]
mov rdx, qword [rsp + 0x7110]
mov ecx, dword [rsp + 0xa8]
mov qword [rsp + 0x20], rax
call fcn.100407a60
mov eax, dword [r12 + 0x34]
test eax, eax
je 0x10040b007
mov ebx, eax
cmp rbx, qword [rsp + 0x7118]
jb 0x10040b007
mov ebx, 0x18
test rsi, rsi
je 0x10040bcdb
movzx esi, word [rsi + 4]
test si, si
je 0x10040b989
mov rax, qword [rsp + 0x70f8]
cmp qword [rsp + 0x7108], 0
mov qword [rsp + 0x118], 0x2464
mov qword [rsp + 0x120], 0x2464
mov r8, qword [rax]
je 0x10040b064
mov eax, dword [rsp + 0xc8]
cmp eax, 0x10
je 0x10040bbd7
cmp eax, 0x40
je 0x10040bbd7
mov qword [rsp + 0x128], r8
lea rax, [rsp + 0x120]
lea rdi, [rsp + 0x27a0]
mov rdx, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x70f0]
mov qword [rsp + 0x38], rax
lea rbp, [rsp + 0x330]
mov r9d, esi
mov r8, rbx
lea rax, [rsp + 0x118]
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
call fcn.100404dc0
test al, al
je 0x1004088cc
lea rdx, [rbx - 1]
mov r8, rbx
lea rcx, str.sending_1st_ip_fragment_0__zu_ip_payload_len_zu_:
call fcn.100410460
mov rdx, qword [rsp + 0x118]
mov r8d, 0x50
mov rcx, rbp
lea rsi, [0x1004231be]
call fcn.10040def0
mov rcx, rsi
call fcn.100410460
mov rax, qword [rsp + 0x118]
mov r9, rbp
mov rcx, r14
mov ebp, dword [rsp + 0xbc]
mov r8, qword [rsp + 0x70e8]
mov qword [rsp + 0x20], rax
mov edx, ebp
call fcn.100407630
test al, al
je 0x1004088cc
mov r9, qword [rsp + 0x7118]
mov rax, qword [rsp + 0x7118]
mov rdx, rbx
lea rcx, str.sending_2nd_ip_fragment__zu__zu_ip_payload_len_zu_:
sub r9, rbx
lea r8, [rax - 1]
call fcn.100410460
mov rdx, qword [rsp + 0x120]
mov r8d, 0x50
mov rcx, rdi
call fcn.10040def0
mov rcx, rsi
call fcn.100410460
mov r9, rdi
mov edx, ebp
mov rcx, r14
mov rax, qword [rsp + 0x120]
mov r8, qword [rsp + 0x70e8]
mov qword [rsp + 0x20], rax
call fcn.100407630
test al, al
mov eax, 2
cmovne r15d, eax
jmp 0x1004088cc
test r10b, r10b
je 0x10040ab83
cmp byte [rax + 0x64], 0
je 0x10040a19a
mov dword [rsp + 0xc8], 2
jmp 0x100408be6
lea rcx, str.autottl:_could_not_guess_n
call fcn.100410460
jmp 0x10040974f
mov edx, dword [r9 + 0x48]
mov byte [r9 + 0x63], 1
mov dword [r9 + 0x68], edx
jmp 0x10040a0e2
cmp qword [r12 + 0x3a08], 0
jne 0x10040a632
jmp 0x100408c7b
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100422ab0]
call fcn.100410460
lea rcx, [rbx + 0x88]
call fcn.100403270
jmp 0x10040aa86
call sub.cygwin1.dll___getreent
mov r8d, 0x1a
mov edx, 1
lea rcx, str.rawpacket_queue_failed___n
mov r9, qword [rax + 0x18]
call sub.cygwin1.dll_fwrite
mov rcx, qword [rsp + 0x108]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
jmp 0x1004088cc
lea rcx, str.mixing_domain_case_n
mov byte [rsp + 0xc0], r10b
lea r15, [rbx + 7]
call fcn.100410460
mov rax, qword [rsp + 0x7120]
add rax, qword [rsp + 0x7128]
cmp r15, rax
mov qword [rsp + 0xa8], rax
movzx r10d, byte [rsp + 0xc0]
jae 0x10040b309
mov qword [rsp + 0xc0], rbx
mov rbx, r15
mov r15d, r10d
jmp 0x10040b2d1
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, dword [rsp + 0xe0]
call sub.cygwin1.dll_tolower
mov byte [rbx], al
mov rax, qword [rsp + 0xa8]
add rbx, 1
cmp rbx, rax
je 0x10040b2fe
movzx eax, byte [rbx]
cmp al, 0xd
je 0x10040b2fe
cmp al, 0xa
je 0x10040b2fe
movzx ecx, al
mov dword [rsp + 0xe0], ecx
test bl, 1
jne 0x10040b2ad
call sub.cygwin1.dll___locale_ctype_ptr
mov ecx, dword [rsp + 0xe0]
call sub.cygwin1.dll_toupper
jmp 0x10040b2be
mov rbx, qword [rsp + 0xc0]
mov r10d, r15d
mov dword [rsp + 0xa8], 1
mov r15d, 1
jmp 0x100409dd5
movsx eax, byte [r12 + 0x16]
movsx r9d, byte [r12 + 0x15]
lea rcx, str.modifying_Host:____c_c_c_c:_n
mov r15d, 1
movsx r8d, byte [r12 + 0x14]
movsx edx, byte [r12 + 0x13]
mov dword [rsp + 0x20], eax
call fcn.100410460
mov eax, dword [r12 + 0x13]
mov dword [rsp + 0xa8], 1
movzx r10d, byte [rsp + 0xc0]
mov dword [rbx + 2], eax
jmp 0x100409dc9
cmp r13d, 7
jbe 0x1004088cc
xor eax, eax
mov dword [rsp + 0xc8], eax
jmp 0x10040a8b3
lea eax, [r13 - 9]
cmp eax, 3
ja 0x10040abee
cmp qword [rsp + 0xa0], 0
jne 0x10040bb6b
cmp r13d, 0xc
jne 0x10040abee
test rbp, rbp
jne 0x1004088cc
jmp 0x10040afbc
mov byte [r9 + 0x65], 1
jmp 0x10040a191
mov rbx, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0xa0]
sub rbx, rcx
test edx, edx
je 0x10040bc3a
lea rax, [rdx + rbx]
mov qword [rsp + 0x27a0], rax
cmp rax, 0x2464
ja 0x10040bc5f
lea rbp, [rsp + 0x4c10]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov byte [rsp + 0xc0], r10b
mov rcx, rbp
call fcn.10040e9b0
mov ecx, dword [r12 + 0x30]
mov rdx, qword [rsp + 0xa0]
mov r8, rbx
add rdx, qword [rsp + 0x7120]
add rcx, rbp
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xa8], rbp
mov eax, dword [r12 + 0x30]
movzx r10d, byte [rsp + 0xc0]
movzx edx, word [rsp + 0x27a0]
mov r11d, dword [r12 + 0x60]
cmp qword [rsp + 0x7108], 0
mov dword [rsp + 0xc0], edx
mov edx, dword [r12 + 0x5c]
mov dword [rsp + 0xd0], edx
je 0x10040bc77
mov rdx, qword [rsp + 0x7108]
mov r8d, dword [rdx]
test rsi, rsi
je 0x10040bc70
movzx ebp, byte [rsi + 1]
mov rdx, qword [rsp + 0x7110]
mov rcx, qword [rsp + 0x7110]
neg eax
mov byte [rsp + 0xf8], r10b
mov r10, qword [rsp + 0x7110]
mov dword [rsp + 0xfc], r8d
movzx edx, word [rdx + 0xe]
mov ecx, dword [rcx + 8]
mov dword [rsp + 0xf4], r11d
mov dword [rsp + 0xe8], eax
mov dword [rsp + 0xd8], edx
mov edx, dword [rsp + 0xa0]
mov dword [rsp + 0xe0], ecx
mov ecx, dword [r10 + 4]
call fcn.100403590
mov edx, dword [rsp + 0xe8]
mov ecx, eax
call fcn.100403590
mov edx, dword [rsp + 0xd8]
mov dword [rsp + 0x48], ebp
mov r8d, dword [rsp + 0xc0]
mov r11d, dword [rsp + 0xf4]
mov r9d, eax
lea rax, [rsp + 0x118]
movzx ebp, byte [rsp + 0xb8]
mov rcx, qword [rsp + 0xa8]
mov dword [rsp + 0x28], edx
mov rdx, r14
movzx r10d, byte [rsp + 0xf0]
mov dword [rsp + 0x78], r8d
mov r8d, dword [rsp + 0xd0]
mov dword [rsp + 0x68], r11d
mov r11d, dword [rsp + 0xe0]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x330]
mov dword [rsp + 0x60], r8d
mov r8d, dword [rsp + 0xc8]
mov dword [rsp + 0x30], ebp
mov dword [rsp + 0x58], r8d
mov r8d, dword [rsp + 0xfc]
mov dword [rsp + 0x20], r11d
mov dword [rsp + 0x50], r8d
mov r8, qword [rsp + 0xb0]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x38], r8
mov r8d, r10d
mov qword [rsp + 0x80], rax
movzx eax, byte [rsp + 0x9c]
mov qword [rsp + 0x70], rcx
mov rcx, rdi
mov dword [rsp + 0xf0], r10d
mov dword [rsp + 0x40], eax
call fcn.100403eb0
test al, al
je 0x1004088cc
mov eax, dword [r12 + 0x30]
mov r9, rbx
mov rbx, qword [rsp + 0x7128]
lea rcx, str.sending_2nd_out_of_order_tcp_segment__zu__zu_len_zu_seqovl_u_:
mov rdx, qword [rsp + 0xa0]
mov dword [rsp + 0x20], eax
lea r8, [rbx - 1]
call fcn.100410460
mov rdx, qword [rsp + 0x27a0]
mov rcx, qword [rsp + 0xa8]
mov r8d, 0x20
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
mov rax, qword [rsp + 0x118]
mov rcx, r14
mov r9, qword [rsp + 0xe8]
mov r8, qword [rsp + 0x70e8]
mov edx, dword [rsp + 0xbc]
mov qword [rsp + 0x20], rax
call fcn.100407630
movzx r10d, byte [rsp + 0xf8]
test al, al
jne 0x10040a378
jmp 0x1004088cc
mov edx, eax
mov rax, qword [rsp + 0xa0]
lea rbp, [rdx + rax]
cmp rbp, 0x2464
ja 0x10040bc7f
lea rbx, [rsp + 0x4c10]
mov r9d, 0x5b4
lea r8, [r12 + 0x1734]
mov rcx, rbx
call fcn.10040e9b0
mov ecx, dword [r12 + 0x30]
mov r8, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x7120]
add rcx, rbx
call sub.cygwin1.dll_memcpy
mov qword [rsp + 0xa8], rbx
mov eax, dword [r12 + 0x30]
jmp 0x100408eaf
mov rdx, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0x7120]
call fcn.100411f80
test al, al
mov rax, qword [rsp + 0x108]
mov rdx, qword [rax + 0x78]
je 0x10040bbb1
lea rcx, str.incoming_HTTP_reply_detected_for_hostname__s_n
call fcn.100410460
mov rax, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x7128]
mov rcx, qword [rsp + 0x7120]
mov r8, qword [rax + 0x78]
call fcn.1004121e0
test al, al
je 0x10040bcf4
lea rcx, str.redirect_to_another_domain_detected._possibly_DPI_redirect._n
call fcn.100410460
mov rax, qword [rsp + 0x108]
mov rcx, qword [rax]
mov rdx, qword [rax + 0x78]
mov r8d, dword [rcx]
lea rcx, str._s_:_profile__d_:_redirect_to_another_domain
call fcn.100410940
jmp 0x10040abd5
movzx edx, word [rdx + 2]
jmp 0x10040af17
cmp r13d, 0xc
je 0x10040b3ac
jmp 0x1004088cc
cmp qword [rsp + 0x7108], 0
movzx ecx, word [rsp + 0xa0]
mov qword [rsp + 0x128], 0x2464
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov ebx, dword [r12 + 0x58]
je 0x10040bd23
mov r11, qword [rsp + 0x7108]
mov r9d, dword [r11]
test rsi, rsi
je 0x10040bd1b
movzx r8d, byte [rsi + 1]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0xb0]
lea r11, [rsp + 0x128]
lea rbp, [rsp + 0x27a0]
lea r13, [0x10043b080]
mov dword [rsp + 0x78], ecx
mov rcx, rdi
mov qword [rsp + 0x38], rax
movzx eax, byte [rsp + 0xb8]
mov dword [rsp + 0x68], edx
mov rdx, r14
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x48], r8d
movzx r8d, byte [rsp + 0xf0]
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x40], r10d
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
mov rbx, qword [rsp + 0xa0]
lea rcx, str.sending_fake_1__1st_tcp_segment_0__zu_len_zu_:
lea rdx, [rbx - 1]
mov r8, rbx
call fcn.100410460
mov rdx, rbx
mov rcx, r13
xor ebx, ebx
mov r8d, 0x20
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
mov r13d, dword [r12 + 0x28]
mov r10, qword [rsp + 0x128]
test r13d, r13d
jle 0x10040bd10
mov qword [rsp + 0xa8], rdi
mov rdi, rsi
mov rsi, r10
jmp 0x10040b8eb
add ebx, 1
cmp r13d, ebx
je 0x10040bd05
mov qword [rsp + 0x20], rsi
mov edx, dword [rsp + 0xbc]
mov r9, rbp
mov rcx, r14
mov r8, qword [rsp + 0x70e8]
call fcn.100407630
test al, al
jne 0x10040b8df
jmp 0x1004088cc
lea rcx, str.forced_wssize_cutoff_n
mov qword [rsp + 0xd8], r9
mov byte [rsp + 0xc8], r10b
call fcn.100410460
mov r9, qword [rsp + 0xd8]
mov edx, 6
mov byte [r9 + 0x72], 1
mov rcx, r9
call fcn.100407aa0
mov r9, qword [rsp + 0x108]
movzx r10d, byte [rsp + 0xc8]
jmp 0x10040a155
mov rcx, qword [rsp + 0x108]
mov edx, 6
call fcn.100407aa0
mov rdx, rcx
mov rcx, r13
call fcn.100408650
test al, al
jne 0x10040af80
jmp 0x10040b246
call sub.cygwin1.dll_random
mov ecx, 0xffff
cqo
idiv rcx
lea eax, [rdx + 1]
xchg ah, al
movzx esi, ax
jmp 0x10040b01d
lea rcx, str.seqovl_split_pos._desync_is_not_possible._n
call fcn.100410460
jmp 0x1004088cc
xor r9d, r9d
jmp 0x100408ede
cmp r13d, 0xc
je 0x10040afbc
jmp 0x1004088cc
cmp qword [rsp + 0x7108], 0
mov r11d, dword [r12 + 0x58]
mov qword [rsp + 0x27a0], 0x2464
je 0x10040bcd3
mov rbx, qword [rsp + 0x7108]
mov r8d, dword [rbx]
test rsi, rsi
je 0x10040bccc
movzx ecx, byte [rsi + 1]
mov dword [rsp + 0x60], eax
lea rbx, [rsp + 0x4c10]
mov rax, qword [rsp + 0xb0]
lea r9, [rsp + 0x27a0]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xc0], rbx
mov ebx, dword [rsp + 0xa8]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x7110]
mov dword [rsp + 0x78], ebx
lea rbx, [0x10043b080]
mov dword [rsp + 0x68], edx
mov rdx, r14
mov dword [rsp + 0x50], r8d
mov r8d, dword [rsp + 0xf0]
mov dword [rsp + 0x48], ecx
mov rcx, rdi
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x70], rbx
mov dword [rsp + 0x58], r11d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x30], ebp
movzx eax, word [rax + 0xe]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x7110]
mov eax, dword [rax + 8]
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x7110]
mov r9d, dword [rax + 4]
call fcn.100403eb0
test al, al
je 0x1004088cc
mov rax, qword [rsp + 0xa0]
lea rcx, str.sending_fake_1__1st_out_of_order_tcp_segment_0__zu_len_zu_:
lea rdx, [rax - 1]
mov r8, rax
call fcn.100410460
mov rdx, qword [rsp + 0xa0]
mov rcx, rbx
xor ebx, ebx
mov r8d, 0x20
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
mov r10, qword [rsp + 0x27a0]
mov eax, dword [r12 + 0x28]
mov qword [rsp + 0xd0], rdi
mov rdi, rsi
mov dword [rsp + 0xb8], eax
mov rsi, r10
jmp 0x10040bb48
mov qword [rsp + 0x20], rsi
mov r9, qword [rsp + 0xc0]
mov rcx, r14
mov r8, qword [rsp + 0x70e8]
mov edx, dword [rsp + 0xbc]
call fcn.100407630
test al, al
je 0x1004088cc
add ebx, 1
cmp dword [rsp + 0xb8], ebx
jg 0x10040bb19
mov rsi, rdi
mov edx, dword [r12 + 0x60]
mov eax, dword [r12 + 0x5c]
mov rdi, qword [rsp + 0xd0]
jmp 0x10040a39b
cmp r13d, 0xc
je 0x10040b3ac
cmp r13d, 9
je 0x10040a332
cmp r13d, 0xa
jne 0x100408e84
movzx ecx, word [rsp + 0xa0]
mov edx, dword [r12 + 0x60]
mov qword [rsp + 0x128], 0x2464
mov eax, dword [r12 + 0x5c]
mov ebx, dword [r12 + 0x58]
jmp 0x10040b7bb
lea rcx, str.incoming_unknown_HTTP_data_detected_for_hostname__s_n
call fcn.100410460
mov rax, qword [rsp + 0x108]
mov rsi, qword [rax + 0x78]
test rsi, rsi
je 0x1004097ff
jmp 0x1004097b4
cmp dword [rsp + 0xc8], 0x10
mov eax, 0
mov ecx, 0x3c
mov rdx, qword [rsp + 0x70f0]
cmove ecx, eax
lea rax, [rsp + 0x128]
lea rdi, [rsp + 0x4c10]
mov qword [rsp + 0x128], 0x2464
mov qword [rsp + 0x20], rax
mov r9, rdi
call fcn.100404780
mov qword [rsp + 0x70f0], rdi
test al, al
jne 0x10040b06c
jmp 0x1004088cc
xor r8d, r8d
jmp 0x100408eec
mov rdx, qword [rsp + 0xa0]
add rdx, qword [rsp + 0x7120]
mov qword [rsp + 0x27a0], rbx
mov qword [rsp + 0xa8], rdx
jmp 0x10040b453
lea rcx, str.seqovl_is_too_large_n
call fcn.100410460
jmp 0x1004088cc
xor ebp, ebp
jmp 0x10040b49a
xor r8d, r8d
jmp 0x10040b48d
lea rcx, str.seqovl_is_too_large
call fcn.100410460
jmp 0x1004088cc
sub rbx, r9
lea rcx, [r9 + 1]
mov rdx, r9
mov qword [rsp + 0xa8], r9
lea r8, [rbx + 7]
call sub.cygwin1.dll_memmove
mov r9, qword [rsp + 0xa8]
movzx r10d, byte [rsp + 0xc0]
mov byte [r9], 0x20
jmp 0x100409eda
xor ecx, ecx
jmp 0x10040a3cd
xor ecx, ecx
jmp 0x10040ba05
xor r8d, r8d
jmp 0x10040b9f8
call sub.cygwin1.dll_random
mov ecx, 0xffffffff
cqo
idiv rcx
lea esi, [rdx + 1]
bswap esi
jmp 0x10040b01d
lea rcx, str.local_or_in_domain_redirect_detected._its_not_a_DPI_redirect._n
call fcn.100410460
jmp 0x10040bbbd
mov rsi, rdi
mov rdi, qword [rsp + 0xa8]
mov r13d, 0xa
jmp 0x100408e8a
xor r8d, r8d
jmp 0x10040b7d4
xor r9d, r9d
jmp 0x10040b7c6
lea rcx, str.hostname_dup_:_out_of_memory
call fcn.100410720
mov rcx, qword [rsp + 0x108]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
jmp 0x1004088cc
xor esi, esi
jmp 0x100409158
xor r12d, r12d
jmp 0x10040914b
mov r13, qword [rsp + 0xa0]
mov rdx, r10
lea rcx, str.sending_fake_2__1st_tcp_segment_0__zu_len_zu_:
mov r8, r13
call fcn.100410460
mov rdx, r13
xor r13d, r13d
mov r8d, 0x20
lea rcx, [0x10043b080]
call fcn.10040def0
mov rcx, rbp
call fcn.100410460
mov r11, qword [rsp + 0x128]
mov eax, dword [r12 + 0x28]
mov qword [rsp + 0xc0], rbx
lea r9, [rsp + 0x27a0]
mov dword [rsp + 0xa8], eax
mov rbx, r11
jmp 0x10040bdfa
mov qword [rsp + 0x20], rbx
mov r8, qword [rsp + 0x70e8]
mov rcx, r14
mov edx, dword [rsp + 0xbc]
mov qword [rsp + 0xd0], r9
call fcn.100407630
test al, al
je 0x1004088cc
mov r9, qword [rsp + 0xd0]
add r13d, 1
cmp dword [rsp + 0xa8], r13d
jg 0x10040bdc2
mov rbx, qword [rsp + 0xc0]
jmp 0x1004090db