Function at 0x140039de0
Capabilities:
Register network filter via wfp api

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
movaps xmmword [rsp + 0x2f0], xmm6
mov rax, qword [0x1400f0158]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov rsi, r9
mov byte [rsp + 0x38], r8b
mov qword [rsp + 0x50], rdx
mov r15, rcx
mov r14, qword [rbp + 0x260]
mov qword [rsp + 0x58], r14
mov qword [rbp + 0x58], select
mov qword [rbp + 0x50], 0xa
movsd xmm0, qword [str.10.0.0.0_9]
movsd qword [rbp + 0x40], xmm0
movzx eax, word [0x1400bcf98]
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], 0
mov qword [rbp + 0x78], select
mov qword [rbp + 0x70], ntohl
movsd xmm0, qword [str.10.128.0.0_10]
movsd qword [rbp + 0x60], xmm0
mov eax, dword [0x1400bcfa8]
mov dword [rbp + 0x68], eax
movzx eax, byte [0x1400bcfac]
mov byte [rbp + 0x6c], al
mov byte [rbp + 0x6d], 0
mov qword [rbp + 0x98], select
mov qword [rbp + 0x90], ntohl
movsd xmm0, qword [str.10.192.0.0_11]
movsd qword [rbp + 0x80], xmm0
mov eax, dword [0x1400bcfb8]
mov dword [rbp + 0x88], eax
movzx eax, byte [0x1400bcfbc]
mov byte [rbp + 0x8c], al
mov byte [rbp + 0x8d], 0
mov qword [rbp + 0xb8], select
mov qword [rbp + 0xb0], ntohl
movsd xmm0, qword [str.10.224.0.0_12]
movsd qword [rbp + 0xa0], xmm0
mov eax, dword [0x1400bcfc8]
mov dword [rbp + 0xa8], eax
movzx eax, byte [0x1400bcfcc]
mov byte [rbp + 0xac], al
mov byte [rbp + 0xad], 0
mov qword [rbp + 0xd8], select
mov qword [rbp + ntohl0], 0xd
movsd xmm0, qword [str.10.240.0.0_13]
movsd qword [rbp + 0xc0], xmm0
mov eax, dword [0x1400bcfd8]
mov dword [rbp + 0xc8], eax
movzx eax, byte [0x1400bcfdc]
mov byte [rbp + 0xcc], al
mov byte [rbp + 0xcd], 0
mov qword [rbp + select8], 0xf
mov qword [rbp + 0xf0], ntohl
movsd xmm0, qword [str.10.248.0.0_14]
movsd qword [rbp + 0xe0], xmm0
mov eax, dword [0x1400bcfe8]
mov dword [rbp + 0xe8], eax
movzx eax, byte [0x1400bcfec]
mov byte [rbp + 0xec], al
mov byte [rbp + 0xed], 0
mov qword [rbp + 0x118], select
mov qword [rbp + 0x110], ntohl
movsd xmm0, qword [str.10.252.0.0_15]
movsd qword [rbp + 0x100], xmm0
mov eax, dword [0x1400bcff8]
mov dword [rbp + 0x108], eax
movzx eax, byte [0x1400bcffc]
mov byte [rbp + 0x10c], al
mov byte [rbp + 0x10d], 0
mov qword [rbp + 0x138], select
mov qword [rbp + 0x130], ntohl
movsd xmm0, qword [str.10.254.0.0_16]
movsd qword [rbp + 0x120], xmm0
mov eax, dword [0x1400bd008]
mov dword [rbp + 0x128], eax
movzx eax, byte [0x1400bd00c]
mov byte [rbp + 0x12c], al
mov byte [rbp + 0x12d], 0
mov qword [rbp + 0x158], select
mov qword [rbp + 0x150], ntohl
movsd xmm0, qword [str.127.0.0.0_8]
movsd qword [rbp + 0x140], xmm0
movzx eax, word [0x1400bd018]
mov word [rbp + 0x148], ax
movzx eax, byte [0x1400bd01a]
mov byte [rbp + 0x14a], al
mov byte [rbp + 0x14b], 0
mov qword [rbp + 0x178], select
mov qword [rbp + 0x170], reloc.WS2_32.dll_ntohl
movsd xmm0, qword [str.169.254.0.0_16]
movsd qword [rbp + 0x160], xmm0
mov eax, dword [0x1400bd028]
mov dword [rbp + 0x168], eax
movzx eax, word [0x1400bd02c]
mov word [rbp + 0x16c], ax
mov byte [rbp + 0x16e], 0
xor r12d, r12d
mov qword [rbp + 0x180], r12
movdqa xmm0, xmmword [0x1400b68a0]
movdqa xmmword [rbp + 0x190], xmm0
mov byte [rbp + 0x180], r12b
lea r8d, [r12 + 0xd]
lea rdx, str.172.16.0.0_12
lea rcx, [rbp + 0x180]
call fcn.140005580
nop
mov qword [rbp + 0x1a0], r12
movdqa xmm0, xmmword [0x1400b68a0]
movdqa xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], r12b
lea r8d, [r12 + 0xe]
lea rdx, str.192.168.0.0_16
lea rcx, [rbp + 0x1a0]
call fcn.140005580
nop
mov qword [rbp + 0x1c0], r12
movdqa xmm0, xmmword [0x1400b68a0]
movdqa xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], r12b
lea r8d, [r12 + 0xb]
lea rdx, str.224.0.0.0_4
lea rcx, [rbp + 0x1c0]
call fcn.140005580
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov ecx, 0x1a0
call fcn.140002b30
mov rbx, rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + 0x1a0]
mov qword [rsp + 0x70], rcx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rdi, [rbp + 0x40]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea rax, [rsp + 0x60]
mov qword [rbp], rax
nop
mov rdx, rdi
mov rcx, rbx
call fcn.140008340
add rbx, 0x20
mov qword [rbp - 8], rbx
add rdi, 0x20
lea rax, [rbp + 0x1e0]
cmp rdi, rax
jne 0x14003a1c0
mov qword [rsp + 0x68], rbx
lea r9, [fcn.140005340]
mov edx, 0x20
lea r8d, [rdx - 0x13]
lea rcx, [rbp + 0x40]
call fcn.1400720f8
mov rbx, qword [rsp + 0x68]
sub rbx, qword [rsp + 0x60]
sar rbx, 5
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov rax, r12
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x70], rax
test rbx, rbx
je 0x14003a273
movabs rax, 0x1fffffffffffffff
cmp rbx, rax
ja 0x14003afd0
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.1400162d0
mov qword [rbp - 0x80], rax
lea rdi, [rax + rbx*8]
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x70], rdi
lea r8, [rbx*8]
xor edx, edx
mov rcx, rax
call fcn.140079be0
mov r13, rdi
mov qword [rbp - 0x78], rdi
jmp 0x14003a277
mov r13, qword [rbp - 0x78]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x18], r12
movabs rdi, 0x6666666666666667
movabs rbx, 0x666666666666666
cmp byte [r15 + 0x80], 0
jne 0x14003a59a
mov rcx, rsi
call fcn.140006020
xor r15d, r15d
test rax, rax
je 0x14003a589
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov rcx, rsi
call fcn.140006020
mov r8, rax
mov rcx, qword [rsp + 0x30]
sub rcx, qword [rsp + 0x20]
mov rax, rdi
imul rcx
sar rdx, 4
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
cmp r8, rdx
jbe 0x14003a30f
cmp r8, rbx
ja 0x14003afd6
mov rdx, r8
lea rcx, [rsp + 0x20]
call fcn.140039d50
mov rbx, r15
mov rcx, rsi
call fcn.140006020
test rax, rax
je 0x14003a38c
nop
movups xmm6, xmmword [0x1400c05d0]
movups xmmword [rbp - 0x10], xmm6
mov dword [rbp], r15d
mov dword [rbp + 8], ntohl
mov rdx, rbx
mov rcx, rsi
call fcn.1400060b0
mov qword [rbp + 0x10], rax
mov rdx, qword [rsp + 0x28]
cmp rdx, qword [rsp + 0x30]
je 0x14003a36e
movups xmmword [rdx], xmm6
movups xmm0, xmmword [rbp]
movups xmmword [rdx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x10]
movsd qword [rdx + 0x20], xmm1
add qword [rsp + 0x28], 0x28
jmp 0x14003a37c
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140039940
inc rbx
mov rcx, rsi
call fcn.140006020
cmp rbx, rax
jb 0x14003a320
movups xmm0, xmmword [0x1400c05a0]
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp], 0xa
mov dword [rbp + 8], 1
mov byte [rbp + 0x10], select
mov rdx, qword [rsp + 0x28]
cmp rdx, qword [rsp + 0x30]
je 0x14003a3da
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rbp]
movups xmmword [rdx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x10]
movsd qword [rdx + 0x20], xmm1
mov rbx, qword [rsp + 0x28]
add rbx, 0x28
mov qword [rsp + 0x28], rbx
jmp 0x14003a3ed
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140039940
mov rbx, qword [rsp + 0x28]
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x40]
call fcn.140079be0
movups xmm0, xmmword [0x1400bca28]
movaps xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x1400c0570]
movaps xmmword [rbp + 0x80], xmm1
lea rax, str.Windscribe_main_executable_bind_filter_for_callout_driver
mov qword [rbp + 0x50], rax
mov dword [rbp + 0xa0], 1
mov byte [rbp + 0xa8], 1
movups xmm0, xmmword [0x1400bca18]
movups xmmword [rbp + 0xd8], xmm0
or dword [rbp + 0x60], 4
mov rcx, qword [rsp + 0x20]
sub rbx, rcx
mov rax, rdi
imul rbx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [rbp + 0xb0], edx
mov qword [rbp + 0xb8], rcx
mov dword [rbp + 0xc0], 0x4005
movups xmm0, xmmword [0x1400bc9f8]
movups xmmword [rbp + 0xc4], xmm0
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, [rbp + 0x40]
mov rdi, qword [rsp + 0x50]
mov rcx, rdi
call sub.fwpuclnt.dll_FwpmFilterAdd0
mov ebx, eax
test eax, eax
sete sil
test eax, eax
je 0x14003a52d
call fcn.140005b40
mov r8d, ebx
lea rdx, str.CalloutFilter::addFilter____bind_filter_for_Windscribe_main_executable_failed:__u
mov rcx, rax
call fcn.14001ed30
nop
mov r8, qword [rsp + 0x20]
test r8, r8
je 0x14003aef3
mov rcx, qword [rsp + 0x30]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x14003a7b7
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afca
jmp 0x14003a7b7
mov r9, qword [rsp + 0x20]
movabs rsi, 0x6666666666666667
test r9, r9
je 0x14003a56a
mov rcx, qword [rsp + 0x30]
sub rcx, r9
mov rax, rsi
imul rcx
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, r9
lea rcx, [rsp + 0x20]
call fcn.14003b080
movabs rbx, 0x666666666666666
mov rcx, r14
call fcn.140006020
test rax, rax
jne 0x14003a5ae
mov sil, 1
jmp 0x14003aef3
mov rdi, qword [rsp + 0x50]
movabs rsi, 0x6666666666666667
jmp 0x14003a574
mov rdi, qword [rsp + 0x50]
xor r15d, r15d
movabs rsi, 0x6666666666666667
jmp 0x14003a574
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r15
mov rcx, r14
call fcn.140006020
mov r8, rax
mov rcx, qword [rsp + 0x30]
sub rcx, qword [rsp + 0x20]
mov rax, rsi
imul rcx
sar rdx, 4
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
cmp r8, rdx
jbe 0x14003a600
cmp r8, rbx
ja 0x14003afdc
mov rdx, r8
lea rcx, [rsp + 0x20]
call fcn.140039d50
mov rbx, r15
mov rcx, r14
call fcn.140006020
test rax, rax
je 0x14003a67c
movups xmm6, xmmword [0x1400c05d0]
movups xmmword [rbp - 0x10], xmm6
mov dword [rbp], r15d
mov dword [rbp + 8], ntohl
mov rdx, rbx
mov rcx, r14
call fcn.1400060b0
mov qword [rbp + 0x10], rax
mov rdx, qword [rsp + 0x28]
cmp rdx, qword [rsp + 0x30]
je 0x14003a65e
movups xmmword [rdx], xmm6
movups xmm0, xmmword [rbp]
movups xmmword [rdx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x10]
movsd qword [rdx + 0x20], xmm1
add qword [rsp + 0x28], 0x28
jmp 0x14003a66c
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140039940
inc rbx
mov rcx, r14
call fcn.140006020
cmp rbx, rax
jb 0x14003a610
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x40]
call fcn.140079be0
movups xmm0, xmmword [0x1400bca28]
movaps xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x1400c0570]
movaps xmmword [rbp + 0x80], xmm1
lea rax, str.Windscribe_bind_filter_for_callout_driver
mov qword [rbp + 0x50], rax
mov dword [rbp + 0xa0], 1
mov byte [rbp + 0xa8], 0
movups xmm0, xmmword [0x1400bca18]
movups xmmword [rbp + 0xd8], xmm0
or dword [rbp + 0x60], 4
mov rcx, qword [rsp + 0x28]
mov r8, qword [rsp + 0x20]
sub rcx, r8
mov rax, rsi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [rbp + 0xb0], edx
mov qword [rbp + 0xb8], r8
mov dword [rbp + 0xc0], 0x4005
movups xmm0, xmmword [0x1400bc9f8]
movups xmmword [rbp + 0xc4], xmm0
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, [rbp + 0x40]
mov rcx, rdi
call sub.fwpuclnt.dll_FwpmFilterAdd0
mov ebx, eax
test eax, eax
sete sil
test eax, eax
je 0x14003a7c4
call fcn.140005b40
mov r8d, ebx
lea rdx, str.CalloutFilter::addFilter____bind_filter_failed:__u
mov rcx, rax
call fcn.14001ed30
nop
mov r8, qword [rsp + 0x20]
test r8, r8
je 0x14003aef3
mov rcx, qword [rsp + 0x30]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x14003a7b7
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afe2
mov rcx, r8
call fcn.140071a3c
jmp 0x14003aef3
mov r8, qword [rsp + 0x20]
test r8, r8
je 0x14003a826
mov rcx, qword [rsp + 0x30]
sub rcx, r8
movabs rax, 0x6666666666666667
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*4]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x14003a81e
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afe2
mov rcx, r8
call fcn.140071a3c
cmp byte [rsp + 0x38], 0
je 0x14003aef3
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], r15
lea rcx, [rsp + 0x20]
call fcn.140005250
nop
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x20]
call fcn.1400058b0
nop
xor esi, esi
mov dword [rsp + 0x48], esi
mov rax, qword [rbp - 0x60]
mov r8, qword [rbp - 0x68]
sub rax, r8
sar rax, 2
test rax, rax
je 0x14003ac3a
xor r13d, r13d
mov rdi, qword [rbp - 0x20]
mov rbx, qword [rbp - 0x40]
mov r8d, dword [r8 + r13]
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x20]
call fcn.140005720
nop
xor r14d, r14d
mov rax, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x14003a990
xor esi, esi
movups xmm6, xmmword [0x1400c0580]
movups xmmword [rbp + 0x18], xmm6
mov dword [rbp + 0x28], 0
mov dword [rbp + 0x30], 0x100
add rdx, rsi
cmp qword [rdx + 0x18], 0x10
jb 0x14003a8d6
mov rdx, qword [rdx]
lea rcx, [rsp + 0x40]
call fcn.14001a0b0
lea rcx, [rsp + 0x40]
call fcn.14001b780
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x4c], 0xffffffff
cmp rdi, r12
je 0x14003a90a
mov rax, qword [rbp - 0x50]
mov qword [rdi], rax
add rdi, 8
mov qword [rbp - 0x20], rdi
jmp 0x14003a922
lea r8, [rbp - 0x50]
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.140039a90
mov r12, qword [rbp - 0x18]
mov rdi, qword [rbp - 0x20]
lea rax, [rdi - 8]
mov qword [rbp + 0x38], rax
cmp rbx, r15
je 0x14003a94e
movups xmmword [rbx], xmm6
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x38]
movsd qword [rbx + 0x20], xmm1
add rbx, 0x28
mov qword [rbp - 0x40], rbx
jmp 0x14003a966
lea r8, [rbp + 0x18]
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.140039940
mov r15, qword [rbp - 0x38]
mov rbx, qword [rbp - 0x40]
inc r14d
add rsi, 0x20
mov rcx, qword [rbp - 8]
mov rdx, qword [rbp - 0x10]
sub rcx, rdx
sar rcx, 5
movsxd rax, r14d
cmp rax, rcx
jb 0x14003a8b0
mov qword [rbp - 0x30], r12
mov esi, dword [rsp + 0x48]
lea rcx, [rbp - 0x10]
call fcn.1400053b0
inc esi
mov dword [rsp + 0x48], esi
add r13, 4
mov rcx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x68]
sub rcx, r8
sar rcx, 2
movsxd rax, esi
cmp rax, rcx
jb 0x14003a880
mov rdi, qword [rbp - 0x48]
cmp rdi, rbx
mov r13, qword [rbp - 0x78]
je 0x14003ab24
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x40]
call fcn.140079be0
movups xmm0, xmmword [0x1400bca28]
movaps xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x1400c0560]
movaps xmmword [rbp + 0x80], xmm1
lea rax, str.Windscribe_TCP_exception_filter_for_callout_driver
mov qword [rbp + 0x50], rax
mov dword [rbp + 0xa0], 1
mov byte [rbp + 0xa8], 1
sub rbx, rdi
movabs r14, 0x6666666666666667
mov rax, r14
imul rbx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [rbp + 0xb0], edx
mov qword [rbp + 0xb8], rdi
mov dword [rbp + 0xc0], 0x1002
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, [rbp + 0x40]
mov rcx, qword [rsp + 0x50]
call sub.fwpuclnt.dll_FwpmFilterAdd0
mov ebx, eax
test eax, eax
sete sil
test eax, eax
je 0x14003ab20
call fcn.140005b40
mov r8d, ebx
lea rdx, str.CalloutFilter::addFilter____TCP_exception_filter_failed:__u
mov rcx, rax
call fcn.14001ed30
nop
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14003aae4
mov rax, qword [rbp - 0x58]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003aacf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afe8
call fcn.140071a3c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], 0
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003aaf4
call fcn.140071a3c
nop
test rdi, rdi
je 0x14003aef3
sub r15, rdi
mov rax, r14
imul r15
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rdi
lea rcx, [rbp - 0x48]
jmp 0x14003aeed
mov r8, qword [rbp - 0x68]
mov r14, qword [rsp + 0x58]
test r8, r8
je 0x14003ab7e
mov rax, qword [rbp - 0x58]
sub rax, r8
sar rax, 2
lea rdx, [rax*4]
mov rax, r8
cmp rdx, 0x1000
jb 0x14003ab66
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afee
mov rcx, r8
call fcn.140071a3c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], 0
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14003ab8e
call fcn.140071a3c
nop
test rdi, rdi
je 0x14003abbd
sub r15, rdi
movabs rax, 0x6666666666666667
imul r15
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
mov rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.14003b080
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
xor r15d, r15d
mov edi, r15d
mov qword [rsp + 0x30], r15
mov esi, r15d
mov rcx, r14
call fcn.140006020
mov rbx, qword [rsp + 0x28]
test rax, rax
je 0x14003ac6e
nop word [rax + rax]
movups xmm6, xmmword [0x1400c05d0]
movups xmmword [rbp + 0x18], xmm6
mov dword [rbp + 0x28], r15d
mov dword [rbp + 0x30], ntohl
mov rdx, rsi
mov rcx, r14
call fcn.1400060b0
mov qword [rbp + 0x38], rax
cmp rbx, rdi
je 0x14003ac43
movups xmmword [rbx], xmm6
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x38]
movsd qword [rbx + 0x20], xmm1
add rbx, 0x28
mov qword [rsp + 0x28], rbx
jmp 0x14003ac5e
mov rdi, qword [rbp - 0x48]
jmp 0x14003ab29
lea r8, [rbp + 0x18]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140039940
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
inc rsi
mov rcx, r14
call fcn.140006020
cmp rsi, rax
jb 0x14003abf0
movups xmm0, xmmword [0x1400c05a0]
movups xmmword [rbp + 0x18], xmm0
mov dword [rbp + 0x28], 0
mov dword [rbp + 0x30], 1
mov byte [rbp + 0x38], 6
cmp rbx, rdi
je 0x14003acb0
movups xmmword [rbx], xmm0
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x38]
movsd qword [rbx + 0x20], xmm1
add rbx, 0x28
mov qword [rsp + 0x28], rbx
jmp 0x14003accb
lea r8, [rbp + 0x18]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140039940
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
xor r15d, r15d
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14003ade9
xor edx, edx
xor r12d, r12d
xor r14d, r14d
movups xmm6, xmmword [0x1400c0580]
movups xmmword [rbp + 0x18], xmm6
mov dword [rbp + 0x28], 0
mov dword [rbp + 0x30], 0x100
mov rsi, qword [rbp - 0x80]
lea rax, [rsi + rdx*8]
mov qword [rbp + 0x38], rax
lea rdx, [rcx + r14]
cmp qword [rdx + 0x18], 0x10
jb 0x14003ad23
mov rdx, qword [rdx]
lea rcx, [rsp + 0x58]
call fcn.14001a0b0
lea rcx, [rsp + 0x58]
call fcn.14001b780
add rsi, r12
mov dword [rsi], eax
lea rcx, [rsp + 0x58]
call fcn.14001b7a0
mov dword [rsi + 4], eax
cmp r13, qword [rsp + 0x78]
je 0x14003ad61
mov rax, qword [rsi]
mov qword [r13], rax
add r13, 8
mov qword [rbp - 0x78], r13
jmp 0x14003ad7d
mov r8, rsi
mov rdx, r13
lea rcx, [rbp - 0x80]
call fcn.140039a90
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x78], rax
mov r13, qword [rbp - 0x78]
cmp rbx, rdi
je 0x14003ada2
movups xmmword [rbx], xmm6
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rbx + 0x10], xmm0
movsd xmm1, qword [rbp + 0x38]
movsd qword [rbx + 0x20], xmm1
add rbx, 0x28
mov qword [rsp + 0x28], rbx
jmp 0x14003adbd
lea r8, [rbp + 0x18]
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.140039940
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
inc r15d
add r14, 0x20
add r12, 8
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
sub rax, rcx
sar rax, 5
movsxd rdx, r15d
cmp rdx, rax
jb 0x14003acf0
mov r12, qword [rbp - 0x30]
xor edx, edx
mov r8d, 0xc8
lea rcx, [rbp + 0x40]
call fcn.140079be0
movups xmm0, xmmword [0x1400bca28]
movaps xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [0x1400c0560]
movaps xmmword [rbp + 0x80], xmm1
lea rax, str.Windscribe_TCP_filter_for_callout_driver
mov qword [rbp + 0x50], rax
mov dword [rbp + 0xa0], 1
mov byte [rbp + 0xa8], 0
movups xmm0, xmmword [0x1400bca18]
movups xmmword [rbp + 0xd8], xmm0
or dword [rbp + 0x60], 4
mov r14, qword [rsp + 0x20]
sub rbx, r14
movabs r15, 0x6666666666666667
mov rax, r15
imul rbx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov dword [rbp + 0xb0], edx
mov qword [rbp + 0xb8], r14
mov dword [rbp + 0xc0], 0x4005
movups xmm0, xmmword [0x1400bca08]
movups xmmword [rbp + 0xc4], xmm0
lea r9, [rsp + 0x40]
xor r8d, r8d
lea rdx, [rbp + 0x40]
mov rcx, qword [rsp + 0x50]
call sub.fwpuclnt.dll_FwpmFilterAdd0
mov ebx, eax
test eax, eax
sete sil
test eax, eax
je 0x14003aec9
call fcn.140005b40
mov r8d, ebx
lea rdx, str.CalloutFilter::addFilter____TCP_filter_failed:__u
mov rcx, rax
call fcn.14001ed30
nop
test r14, r14
je 0x14003aef3
mov rax, r15
sub rdi, r14
imul rdi
sar rdx, 4
mov r8, rdx
shr r8, 0x3f
add r8, rdx
lea rcx, [rsp + 0x20]
mov rdx, r14
call fcn.14003b080
nop
mov rdx, qword [rbp - 0x28]
test rdx, rdx
je 0x14003af10
sub r12, rdx
sar r12, 3
mov r8, r12
lea rcx, [rbp - 0x28]
call fcn.140012140
nop
mov rdx, qword [rbp - 0x80]
test rdx, rdx
je 0x14003af2f
mov r8, qword [rsp + 0x78]
sub r8, rdx
sar r8, 3
lea rcx, [rbp - 0x80]
call fcn.140012140
nop
mov rbx, qword [rsp + 0x60]
test rbx, rbx
je 0x14003af8e
mov rdi, qword [rsp + 0x68]
cmp rbx, rdi
je 0x14003af59
mov rcx, rbx
call fcn.140005340
add rbx, 0x20
cmp rbx, rdi
jne 0x14003af43
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x70]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003af86
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003afc4
mov rcx, rbx
call fcn.140071a3c
movzx eax, sil
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.140071b40
mov rbx, qword [rsp + 0x340]
movaps xmm6, xmmword [rsp + 0x2f0]
add rsp, 0x300
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140085c7c
nop
call fcn.140085c7c
nop
call fcn.140003e80
nop
call fcn.140003e80
nop
call fcn.140003e80
nop
call fcn.140085c7c
nop
call fcn.140085c7c
int3
call fcn.140085c7c
int3