Function at 0x10040c340
Capabilities:
Write file on windows

Disassembly:
push r15
mov eax, 0xa748
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
call fcn.10041d940
sub rsp, rax
mov r15, qword [rsp + 0xa7c0]
cmp qword [rsp + 0xa7c8], 0
setne r12b
test r15, r15
sete bl
xor ebx, r12d
test rdx, rdx
mov esi, ecx
mov ebp, r8d
setne al
mov rdi, r9
or bl, al
je 0x10040c3a0
xor eax, eax
add rsp, 0xa748
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0xb0], 0
mov byte [rsp + 0xa7], 0
test cl, cl
je 0x10040c710
lea rax, [rsp + 0xa7]
mov r14, qword [0x10042b730]
xor r9d, r9d
mov rdx, r15
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xb0]
mov r8, qword [rsp + 0xa7c8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa7d0]
lea rcx, [r14 + 0x2038]
mov qword [rsp + 0x20], rax
call fcn.100402100
test al, al
je 0x10040c389
cmp byte [rsp + 0xa7], 0
jne 0x10040c389
mov r10, qword [rsp + 0xb0]
mov r13, qword [r10]
test r13, r13
je 0x10040c890
mov edx, dword [r13]
lea rcx, str.using_cached_desync_profile__d_n
call fcn.100410460
cmp byte [rsp + 0xa7], 0
jne 0x10040c389
mov eax, dword [r14 + 0x1008]
mov dword [rsp + 0x7c], eax
test r15, r15
je 0x10040c910
movzx eax, byte [r15 + 8]
mov byte [rsp + 0x9b], al
lea rax, [rsp + 0x150]
mov r9, qword [rsp + 0xa7d0]
xor r8d, r8d
mov rcx, r15
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0xa7c8]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x80], rax
call fcn.100405220
cmp qword [rsp + 0xa7e8], 0
je 0x10040c389
mov eax, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0xa7e8]
mov rcx, qword [rsp + 0xa7e0]
or eax, ebp
mov dword [rsp + 0x7c], eax
call fcn.100413e90
test al, al
jne 0x10040c980
mov rsi, qword [rsp + 0xa8]
test rsi, rsi
je 0x10040c52f
cmp byte [rsi + 0x80], 0
jne 0x10040d08c
cmp qword [rsi + 0x98], 0
jne 0x10040d068
add rsi, 0xa8
mov rcx, rsi
call fcn.1004103b0
test al, al
je 0x10040d240
mov rdx, qword [rsp + 0xa7e8]
mov rcx, qword [rsp + 0xa7e0]
call fcn.1004140a0
test al, al
je 0x10040c930
lea rcx, str.packet_contains_wireguard_handshake_initiation_n
call fcn.100410460
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x10040c573
mov ecx, dword [rax + 0x74]
test ecx, ecx
jne 0x10040c573
mov dword [rax + 0x74], 4
mov r12, qword [r13 + 0x39c0]
lea rbp, [r13 + 0x2e28]
mov r9d, 4
cmp qword [rsp + 0xa7c8], 0
je 0x10040ccde
movzx r10d, byte [r13 + 0x51]
movzx eax, byte [rsp + 0x9b]
test r10b, r10b
cmove r10d, eax
cmp byte [r14 + 0x1004], 0
mov esi, dword [r13 + 0x1c]
jne 0x10040cc60
mov qword [rsp + 0xb8], 0x2464
cmp esi, 3
je 0x10040ce19
ja 0x10040caa0
cmp esi, 2
jne 0x10040c389
xor eax, eax
mov edx, dword [r13 + 0x58]
movzx ecx, r12w
cmp qword [rsp + 0xa7c8], 0
je 0x10040c5ff
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
xor r9d, r9d
test r15, r15
je 0x10040c60c
movzx r9d, byte [r15 + 1]
lea rsi, [rsp + 0xb8]
mov dword [rsp + 0x50], ecx
mov rcx, qword [rsp + 0x80]
movzx r8d, r10b
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x60], rsi
lea rsi, [rsp + 0x2d0]
mov dword [rsp + 0x28], edx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x48], rbp
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], eax
call fcn.100404660
test al, al
je 0x10040c389
lea rcx, str.sending_fake_request_:
xor r14d, r14d
call fcn.100410460
mov rdx, r12
mov rcx, rbp
mov r8d, 0x20
call fcn.10040def0
lea rcx, [0x1004231be]
call fcn.100410460
mov r12d, dword [r13 + 0x28]
mov rbp, qword [rsp + 0xb8]
test r12d, r12d
jle 0x10040cd07
mov qword [rsp + 0x90], r13
mov r13d, dword [rsp + 0x7c]
mov byte [rsp + 0x9c], bl
mov ebx, r14d
mov r14d, r12d
mov r12, qword [rsp + 0x70]
jmp 0x10040c6ec
add ebx, 1
cmp r14d, ebx
je 0x10040ccf7
mov qword [rsp + 0x20], rbp
mov r9, rsi
mov r8, rdi
mov edx, r13d
mov rcx, r12
call fcn.100407630
test al, al
jne 0x10040c6e0
jmp 0x10040c389
mov r14, qword [0x10042b730]
lea r13, [r14 + 0x2038]
mov rcx, r13
call fcn.100402c90
xor r9d, r9d
mov rdx, r15
mov rcx, r13
lea rax, [rsp + 0xa7]
mov r8, qword [rsp + 0xa7c8]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa7e8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa7d0]
mov qword [rsp + 0x20], rax
call fcn.100402260
mov r10, qword [rsp + 0xa8]
test al, al
jne 0x10040c858
test r10, r10
je 0x10040c794
cmp byte [r10 + 8], 0
jne 0x10040c840
mov r10, qword [r10 + 0x78]
mov rdx, qword [rsp + 0xa7d0]
mov rax, qword [rsp + 0xa7d0]
movzx ecx, r12b
mov r9, r10
cmp byte [rsp + 0xa7], 0
movzx eax, word [rax + 2]
cmovne ax, word [rdx]
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xchg ah, al
movzx r8d, ax
call fcn.100407e20
mov r13, rax
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x10040c7fa
mov qword [rax], r13
mov byte [rax + 8], 1
test r13, r13
je 0x10040c840
lea rcx, [r13 + 0x4a38]
call fcn.100411c50
cmp byte [rsp + 0xa7], 0
jne 0x10040c389
mov rdx, qword [rsp + 0xa8]
mov rcx, r13
call fcn.100408650
test al, al
jne 0x10040c458
jmp 0x10040c389
lea rcx, str.matching_desync_profile_not_found_n
call fcn.100410460
jmp 0x10040c389
mov r13, qword [r10]
mov edx, 0x11
mov rcx, r10
mov qword [rsp + 0xb0], r10
call fcn.100407aa0
test r13, r13
je 0x10040c785
mov edx, dword [r13]
lea rcx, str.using_cached_desync_profile__d_n
call fcn.100410460
jmp 0x10040c7ff
cmp byte [r10 + 8], 0
jne 0x10040c840
mov r9, qword [r10 + 0x78]
movzx ecx, r12b
xor edx, edx
mov qword [rsp + 0x70], r10
mov rax, qword [rsp + 0xa7d0]
movzx eax, word [rax + 2]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xchg ah, al
movzx r8d, ax
call fcn.100407e20
mov r10, qword [rsp + 0x70]
mov r13, rax
mov qword [r10], rax
mov rax, qword [rsp + 0xb0]
mov byte [rax + 8], 1
test r13, r13
je 0x10040c840
cmp byte [rsp + 0xa7], 0
je 0x10040c458
jmp 0x10040c389
mov rax, qword [rsp + 0xa7c8]
movzx eax, byte [rax + 7]
mov byte [rsp + 0x9b], al
jmp 0x10040c478
mov rdx, qword [rsp + 0xa7e8]
mov rcx, qword [rsp + 0xa7e0]
call fcn.1004140d0
test al, al
jne 0x10040d162
cmp byte [r13 + 0x26], 0
je 0x10040c389
lea rcx, str.applying_tampering_to_unknown_protocol_n
lea rbp, [r13 + 0x1ce8]
call fcn.100410460
mov r12, qword [r13 + 0x39e0]
xor r9d, r9d
jmp 0x10040c587
lea rcx, str.packet_contains_QUIC_initial_n
call fcn.100410460
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x10040c9a9
mov r8d, dword [rcx + 0x74]
test r8d, r8d
jne 0x10040c9a9
mov dword [rcx + 0x74], 3
test sil, sil
je 0x10040d105
mov rax, qword [rsp + 0xb0]
mov rdx, qword [rax + 0xa0]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xb8], rdx
test rax, rax
je 0x10040d149
test rcx, rcx
je 0x10040c9ec
cmp qword [rcx + 0x98], 0
jne 0x10040d2a4
lea rbp, [rsp + 0x6740]
mov rcx, rax
lea r9, [rsp + 0x2d0]
mov qword [rsp + 0x2d0], 0x4000
mov r8, rbp
call fcn.100413af0
test al, al
je 0x10040d263
mov rdx, qword [rsp + 0x2d0]
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0xc0]
mov rcx, rbp
call fcn.100412db0
test al, al
jne 0x10040d347
lea rcx, str.packet_does_not_contain_TLS_ClientHello_n
call fcn.100410460
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x10040ca6a
cmp qword [rcx + 0x98], 0
jne 0x10040d473
lea rdx, str.QUIC_initial_without_ClientHello
call fcn.100408390
test al, al
je 0x10040c389
mov r12, qword [r13 + 0x39b8]
lea rbp, [r13 + 0x2868]
mov r9d, 3
jmp 0x10040c587
lea eax, [rsi - 0xd]
cmp eax, 2
ja 0x10040d284
cmp esi, 0xd
je 0x10040d295
cmp esi, 0xe
mov ebp, pe_nt_image_headers64
mov eax, 0x40
cmove ebp, eax
sete bl
cmp qword [rsp + 0xa7c8], 0
mov esi, dword [r13 + 0x20]
je 0x10040d57e
test esi, esi
je 0x10040d1a2
cmp esi, 0xc
je 0x10040ce4f
lea eax, [rsi - 0x10]
cmp eax, 1
ja 0x10040d1a2
cmp esi, 0x10
je 0x10040d8c8
mov rdx, qword [rsp + 0xa7e8]
mov rcx, qword [rsp + 0xa7e0]
call fcn.1004140d0
test al, al
je 0x10040d51a
movabs rax, 0x783a3130303a3264
mov qword [rsp + 0xc0], 8
mov qword [rsp + 0x2740], rax
mov rax, qword [rsp + 0xa7e8]
lea r8, [rax - 1]
cmp r8, 0x245c
ja 0x10040d56d
mov rax, qword [rsp + 0xa7e0]
lea rcx, [rsp + 0x2748]
lea rdx, [rax + 1]
call sub.cygwin1.dll_memcpy
mov rax, qword [rsp + 0xa7e8]
mov qword [rsp + 0xb8], 0x2464
lea rdx, [rax + 7]
xor eax, eax
cmp qword [rsp + 0xa7c8], 0
mov qword [rsp + 0xc0], rdx
je 0x10040cba5
mov rax, qword [rsp + 0xa7c8]
mov eax, dword [rax]
xor r9d, r9d
test r15, r15
je 0x10040cbb2
movzx r9d, byte [r15 + 1]
lea rcx, [rsp + 0xb8]
mov dword [rsp + 0x50], edx
lea rbx, [rsp + 0x2d0]
mov rsi, qword [rsp + 0x70]
lea rdx, [rsp + 0x2740]
mov qword [rsp + 0x60], rcx
movzx r8d, byte [rsp + 0x9b]
mov qword [rsp + 0x48], rdx
mov rdx, rsi
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x58], rbx
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], eax
call fcn.100404660
test al, al
je 0x10040d336
lea rcx, str.resending_tampered_DHT_n
call fcn.100410460
mov edx, dword [rsp + 0x7c]
mov r9, rbx
mov r8, rdi
mov rax, qword [rsp + 0xb8]
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.100407630
add eax, eax
jmp 0x10040c38b
mov rcx, qword [rsp + 0x80]
lea r14, [rsp + 0x2740]
mov r8d, 0x30
mov dword [rsp + 0x9c], r9d
mov rdx, r14
mov byte [rsp + 0x90], r10b
call fcn.10040e270
mov rcx, qword [rsp + 0x70]
lea rax, [rsp + 0x6740]
mov r8d, 0x30
mov rdx, rax
mov qword [rsp + 0x88], rax
call fcn.10040e270
mov r8, qword [rsp + 0x88]
mov rdx, r14
lea rcx, str.dpi_desync_src_s_dst_s_n
call fcn.100410460
mov r9d, dword [rsp + 0x9c]
movzx r10d, byte [rsp + 0x90]
jmp 0x10040c5bc
movzx r10d, byte [r13 + 0x50]
movzx eax, byte [rsp + 0x9b]
test r10b, r10b
cmove r10d, eax
jmp 0x10040c5aa
mov r13, qword [rsp + 0x90]
movzx ebx, byte [rsp + 0x9c]
mov eax, dword [r13 + 0x20]
test eax, eax
je 0x10040d0a2
cmp eax, 0xc
je 0x10040d32f
lea edx, [rax - 0x10]
cmp edx, 1
ja 0x10040d0a2
xor ebp, ebp
cmp eax, 0x10
jne 0x10040cb01
xor ebp, ebp
xor r8d, r8d
cmp qword [rsp + 0xa7c8], 0
mov qword [rsp + 0xb8], 0x2464
movzx ecx, word [rsp + 0xa7e8]
mov edx, dword [r13 + 0x39e8]
lea rax, [r13 + 0x22a8]
je 0x10040cd70
mov rbx, qword [rsp + 0xa7c8]
mov r8d, dword [rbx]
xor r9d, r9d
test r15, r15
je 0x10040cd7d
movzx r9d, byte [r15 + 1]
mov rbx, qword [rsp + 0x88]
mov dword [rsp + 0x50], ecx
mov dword [rsp + 0x40], edx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x60], rbx
mov rbx, qword [rsp + 0xa7e0]
mov dword [rsp + 0x20], r8d
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0x58], rsi
movzx r8d, byte [rsp + 0x9b]
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x38], 0x5c0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
call fcn.100404660
test al, al
je 0x10040d336
mov edx, dword [r13 + 0x39e8]
lea rcx, str.resending_original_packet_with_increased_by__d_length_n
call fcn.100410460
mov rax, qword [rsp + 0xb8]
mov r9, rsi
mov qword [rsp + 0x20], rax
mov edx, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x70]
mov r8, rdi
call fcn.100407630
add eax, eax
jmp 0x10040c38b
test r9d, r9d
jne 0x10040c5e0
lea rcx, str.not_applying_fake_because_of_unknown_protocol_n
call fcn.100410460
mov esi, dword [r13 + 0x20]
xor ebp, ebp
cmp esi, 0x10
je 0x10040d7bc
cmp esi, 0x11
je 0x10040cb01
cmp esi, 0xc
jne 0x10040c389
mov rax, qword [rsp + 0xa7c8]
mov r8, qword [rsp + 0xa7d8]
mov r9, r15
xor ecx, ecx
mov rdx, qword [rsp + 0xa7d0]
mov esi, 8
mov qword [rsp + 0x20], rax
call fcn.100407a80
mov eax, dword [r13 + 0x38]
test eax, eax
je 0x10040ce96
mov esi, eax
mov eax, 8
cmp rsi, qword [rsp + 0xa7d8]
cmovae rsi, rax
test r15, r15
je 0x10040d5bd
movzx r12d, word [r15 + 4]
test r12w, r12w
je 0x10040d550
mov rax, qword [rsp + 0xa7b8]
cmp qword [rsp + 0xa7c8], 0
mov qword [rsp + 0xb8], 0x2464
mov qword [rsp + 0xc0], 0x2464
mov rdx, qword [rax]
je 0x10040d322
test bl, bl
je 0x10040d322
cmp ebp, 0x10
mov eax, 0
mov ecx, 0x3c
mov r8, rdx
cmove ecx, eax
lea rax, [rsp + 0xc8]
lea rbx, [rsp + 0x6740]
mov rdx, qword [rsp + 0xa7b0]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov qword [rsp + 0xc8], 0x2464
call fcn.100404780
test al, al
je 0x10040c389
mov qword [rsp + 0xa7b0], rbx
mov rdx, qword [rsp + 0xc8]
lea rax, [rsp + 0xc0]
mov r9d, r12d
mov r8, rsi
mov rcx, qword [rsp + 0xa7b0]
mov qword [rsp + 0x38], rax
lea rbx, [rsp + 0x2740]
lea rax, [rsp + 0xb8]
lea rbp, [rsp + 0x2d0]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbp
call fcn.100404dc0
test al, al
je 0x10040c389
lea rdx, [rsi - 1]
mov r8, rsi
lea rcx, str.sending_1st_ip_fragment_0__zu_ip_payload_len_zu_:
call fcn.100410460
mov rdx, qword [rsp + 0xb8]
mov r8d, 0x50
mov rcx, rbp
lea r12, [0x1004231be]
call fcn.10040def0
mov rcx, r12
call fcn.100410460
mov r15d, dword [rsp + 0x7c]
mov r9, rbp
mov r8, rdi
mov rax, qword [rsp + 0xb8]
mov r14, qword [rsp + 0x70]
mov edx, r15d
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.100407630
test al, al
je 0x10040c389
mov r9, qword [rsp + 0xa7d8]
mov rax, qword [rsp + 0xa7d8]
mov rdx, rsi
lea rcx, str.sending_2nd_ip_fragment__zu__zu_ip_payload_len_zu_:
sub r9, rsi
lea r8, [rax - 1]
call fcn.100410460
mov rdx, qword [rsp + 0xc0]
mov r8d, 0x50
mov rcx, rbx
call fcn.10040def0
mov rcx, r12
call fcn.100410460
mov r9, rbx
mov r8, rdi
mov edx, r15d
mov rax, qword [rsp + 0xc0]
mov rcx, r14
mov qword [rsp + 0x20], rax
call fcn.100407630
add eax, eax
jmp 0x10040c38b
lea rdx, str.reassemble_session_cancelled_n
lea rcx, [0x100422ab0]
call fcn.100410460
lea rcx, [rsi + 0x88]
call fcn.100403270
jmp 0x10040c518
mov byte [rsi + 0x62], 0xff
mov edx, 6
mov rcx, rsi
call fcn.100407aa0
jmp 0x10040c50a
mov rax, qword [rsp + 0xa7b8]
mov r8, qword [rsp + 0xa7e8]
lea rcx, str.reinjecting_original_packet._len_zu_len_payload_zu_n
mov rdx, qword [rax]
call fcn.100410460
mov rax, qword [rsp + 0xa7c8]
mov r9, r15
xor ecx, ecx
mov r8, qword [rsp + 0xa7d8]
mov rdx, qword [rsp + 0xa7d0]
mov qword [rsp + 0x20], rax
call fcn.100407a80
mov rax, qword [rsp + 0xa7b8]
mov r9, qword [rsp + 0xa7b0]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
jmp 0x10040ce01
lea rbp, [rsp + 0x2740]
mov rdx, qword [rsp + 0xa7e8]
mov rcx, qword [rsp + 0xa7e0]
lea r9, [rsp + 0xb8]
mov qword [rsp + 0xb8], 0x4000
mov r8, rbp
call fcn.100413190
test al, al
jne 0x10040d30a
mov rcx, qword [rsp + 0xa8]
lea rdx, str.QUIC_initial_decryption_failed
call fcn.100408390
test al, al
jne 0x10040ca7e
jmp 0x10040c38b
lea rcx, str.packet_contains_DHT_d1...e_n
call fcn.100410460
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x10040d189
mov edx, dword [rax + 0x74]
test edx, edx
jne 0x10040d189
mov dword [rax + 0x74], 5
mov r12, qword [r13 + 0x39c8]
lea rbp, [r13 + 0x33e8]
mov r9d, 5
jmp 0x10040c587
mov rax, qword [rsp + 0xa7c8]
movzx edx, word [rsp + 0xa7e8]
xor r9d, r9d
mov eax, dword [rax]
test r15, r15
je 0x10040d1c1
movzx r9d, byte [r15 + 1]
mov rsi, qword [rsp + 0xa7e0]
lea rcx, [rsp + 0xb8]
mov dword [rsp + 0x50], edx
lea rbx, [rsp + 0x2d0]
mov qword [rsp + 0x60], rcx
movzx r8d, byte [rsp + 0x9b]
mov qword [rsp + 0x48], rsi
mov rsi, qword [rsp + 0x70]
mov qword [rsp + 0x58], rbx
mov rcx, qword [rsp + 0x80]
mov dword [rsp + 0x40], 0
mov rdx, rsi
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], eax
call fcn.100404660
lea rcx, str.resending_original_packet_with_extension_header_n
test al, al
je 0x10040c389
jmp 0x10040cc2c
mov rcx, rsi
call fcn.100410380
lea rcx, str.SENDING__u_delayed_packets_n
mov edx, eax
call fcn.100410460
mov rcx, rsi
call fcn.1004077d0
jmp 0x10040c52f
mov rcx, qword [rsp + 0xa8]
lea rdx, str.QUIC_initial_defrag_CRYPTO_failed
call fcn.100408390
test al, al
jne 0x10040ca7e
jmp 0x10040c389
mov qword [rsp + 0xb8], 0
jmp 0x10040ce32
mov ebx, 1
mov ebp, 0x10
jmp 0x10040cac8
add rcx, 0x88
call fcn.100403380
test al, al
je 0x10040d52b
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xa8]
lea r9, [rsp + 0x2740]
mov r8d, 0x11
mov qword [rsp + 0x20], rax
lea rdx, [rcx + 0x88]
call fcn.100408250
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rdx + 0x88]
mov rdx, qword [rdx + 0xa0]
mov qword [rsp + 0xb8], rdx
jmp 0x10040c9ec
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xa8]
mov rax, rbp
jmp 0x10040c9d9
mov qword [rsp + 0xc8], rdx
jmp 0x10040cf44
xor ebp, ebp
jmp 0x10040ce4f
lea rcx, str.could_not_construct_packet_with_modified_length._too_large___n
call fcn.100410460
jmp 0x10040c389
mov rcx, qword [rsp + 0xc0]
mov rdx, qword [rsp + 0xc8]
add rcx, rbp
call fcn.1004126a0
test al, al
je 0x10040d3fc
lea rcx, str.packet_contains_full_TLS_ClientHello_n
call fcn.100410460
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x10040d38e
cmp qword [rax + 0x98], 0
jne 0x10040d6c0
mov rcx, qword [rsp + 0xc0]
mov dword [rsp + 0x20], 1
lea r8, [rsp + 0x1d0]
mov r9d, 0x100
mov rdx, qword [rsp + 0xc8]
mov qword [rsp + 0x88], r8
add rcx, rbp
call fcn.100412aa0
test al, al
jne 0x10040d5d8
cmp byte [r13 + 0x25], 0
je 0x10040ca7e
mov rcx, qword [rsp + 0xa8]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
lea rcx, str.not_applying_tampering_to_QUIC_ClientHello_without_hostname_in_the_SNI_n
call fcn.100410460
jmp 0x10040c389
lea rcx, str.packet_contains_partial_TLS_ClientHello_n
call fcn.100410460
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x10040d38e
cmp qword [rcx + 0x98], 0
jne 0x10040d473
mov rax, qword [rsp + 0xb8]
lea rdx, [rcx + 0x88]
mov r9d, 0x4000
mov r8d, 0x11
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x2740]
mov qword [rsp + 0x20], rax
call fcn.100407d50
test al, al
je 0x10040d6a7
mov rax, qword [rsp + 0xa8]
cmp qword [rax + 0x98], 0
je 0x10040d38e
mov rax, qword [rsp + 0xa7c8]
mov r8, qword [rsp + 0xa7d8]
xor ecx, ecx
mov r9, r15
mov rdx, qword [rsp + 0xa7d0]
mov qword [rsp + 0x20], rax
call fcn.100407a80
mov rax, qword [rsp + 0xa8]
mov r8d, dword [rsp + 0x7c]
mov r9, rdi
mov rdx, qword [rsp + 0x70]
lea rcx, [rax + 0xa8]
mov rax, qword [rsp + 0xa7e8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa7b8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa7b0]
mov qword [rsp + 0x20], rax
call fcn.100410240
test rax, rax
je 0x10040d687
mov rax, qword [rsp + 0xa8]
lea rcx, [rax + 0xa8]
call fcn.100410380
lea rcx, str.DELAY_desync_until_reasm_is_complete___u__n
mov edx, eax
call fcn.100410460
mov eax, 2
jmp 0x10040c38b
lea rcx, str.payload_is_not_tamperable_n
call fcn.100410460
jmp 0x10040c389
lea rcx, str.QUIC_reasm_is_too_long._cancelling._n
call fcn.100410460
mov rcx, qword [rsp + 0xa8]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
jmp 0x10040c389
call sub.cygwin1.dll_random
mov ecx, 0xffff
cqo
idiv rcx
lea eax, [rdx + 1]
xchg ah, al
movzx r12d, ax
jmp 0x10040ceae
lea rcx, str.packet_is_too_long_to_tamper
call fcn.100410460
jmp 0x10040c389
cmp esi, 0x10
jne 0x10040ce3d
lea rsi, [rsp + 0xb8]
movzx ecx, word [rsp + 0xa7e8]
xor r8d, r8d
mov edx, dword [r13 + 0x39e8]
mov qword [rsp + 0x88], rsi
lea rax, [r13 + 0x22a8]
lea rsi, [rsp + 0x2d0]
jmp 0x10040cd70
call sub.cygwin1.dll_random
mov ecx, 0xffffffff
cqo
idiv rcx
lea r12d, [rdx + 1]
bswap r12d
jmp 0x10040ceae
mov rdx, qword [rsp + 0x88]
lea rcx, str.hostname:__s_n
call fcn.100410460
mov rdx, qword [rsp + 0xb0]
test rdx, rdx
je 0x10040d78a
cmp qword [rdx + 0x78], 0
je 0x10040d7ec
cmp qword [r13 + 0x3a00], 0
movzx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0xa]
je 0x10040d7d9
test cl, cl
je 0x10040d798
test al, al
jne 0x10040ca7e
mov rbx, qword [rsp + 0xb0]
test rbx, rbx
je 0x10040d676
cmp byte [r13 + 0x3a20], 0
je 0x10040d7b0
cmp byte [rsp + 0x6740], 0
jne 0x10040d7b0
cmp qword [rbx + 0x78], 0
mov byte [rbx + 0x80], 1
je 0x10040d95a
mov edx, 0x11
mov rcx, rbx
call fcn.100408460
lea rcx, str.not_applying_tampering_to_this_request_n
call fcn.100410460
jmp 0x10040c389
call sub.cygwin1.dll___getreent
mov r8d, 0x1a
mov edx, 1
lea rcx, str.rawpacket_queue_failed___n
mov r9, qword [rax + 0x18]
call sub.cygwin1.dll_fwrite
mov rcx, qword [rsp + 0xa8]
lea rdx, str.reassemble_session_cancelled_n
call fcn.100408310
jmp 0x10040c389
mov rax, qword [rsp + 0xa7c8]
mov r8, qword [rsp + 0xa7d8]
xor ecx, ecx
mov r9, r15
mov rdx, qword [rsp + 0xa7d0]
mov qword [rsp + 0x20], rax
call fcn.100407a80
mov rax, qword [rsp + 0xa8]
mov r8d, dword [rsp + 0x7c]
mov r9, rdi
mov rdx, qword [rsp + 0x70]
lea rcx, [rax + 0xa8]
mov rax, qword [rsp + 0xa7e8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xa7b8]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xa7b0]
mov qword [rsp + 0x20], rax
call fcn.100410240
test rax, rax
je 0x10040d687
mov rax, qword [rsp + 0xa8]
lea rcx, [rax + 0xa8]
call fcn.100410380
lea rcx, str.DELAY_desync_until_reasm_is_complete___u__n
mov edx, eax
call fcn.100410460
mov rax, qword [rsp + 0xa8]
lea rcx, [rax + 0xa8]
call fcn.10040c240
mov rcx, qword [rsp + 0xa8]
lea rdx, str.reassemble_session_finished_n
call fcn.100408310
jmp 0x10040d510
cmp qword [r13 + 0x3a00], 0
je 0x10040d947
mov rdx, qword [rsp + 0x88]
mov r8, rbp
mov rcx, r13
call fcn.10040f1d0
jmp 0x10040d626
mov byte [rbx + 0x80], 0
jmp 0x10040d676
lea rax, [rsp + 0xb8]
lea rsi, [rsp + 0x2d0]
mov qword [rsp + 0x88], rax
jmp 0x10040cd33
cmp qword [r13 + 0x3a08], 0
jne 0x10040d61e
jmp 0x10040ca7e
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 0x90], rdx
call sub.cygwin1.dll_strdup
mov rdx, qword [rsp + 0x90]
mov qword [rdx + 0x78], rax
test rax, rax
je 0x10040d936
lea rcx, str.we_have_hostname_now._searching_desync_profile_again._n
call fcn.100410460
mov r10, qword [rsp + 0xb0]
cmp byte [rsp + 0xa7], 0
mov rax, qword [rsp + 0xa7d0]
mov r9, qword [r10 + 0x78]
lea r11, [r10 + 0xb]
lea r8, [r10 + 0xa]
lea rdx, [r10 + 9]
je 0x10040d92d
movzx eax, word [rax]
mov qword [rsp + 0x28], r8
movzx ecx, r12b
mov qword [rsp + 0x20], rdx
xor edx, edx
mov qword [rsp + 0x30], r11
xchg ah, al
movzx r8d, ax
mov qword [rsp + 0x90], r10
call fcn.100407e20
mov r10, qword [rsp + 0x90]
mov rdx, qword [rsp + 0xb0]
mov r12, rax
mov qword [r10], rax
mov byte [rdx + 8], 1
test rax, rax
je 0x10040c389
cmp rax, r13
je 0x10040d608
lea rcx, str.desync_profile_changed_by_reavealed_hostname___n
call fcn.100410460
test sil, sil
je 0x10040d907
mov rdx, qword [rsp + 0xb0]
mov r13, r12
jmp 0x10040d608
lea rsi, [rsp + 0xb8]
movzx ecx, word [rsp + 0xa7e8]
mov qword [rsp + 0xb8], 0x2464
lea rax, [r13 + 0x22a8]
mov qword [rsp + 0x88], rsi
mov edx, dword [r13 + 0x39e8]
lea rsi, [rsp + 0x2d0]
jmp 0x10040cd65
mov rcx, qword [rsp + 0xa8]
mov edx, 0x11
call fcn.100407aa0
mov rdx, rcx
mov rcx, r12
call fcn.100408650
test al, al
jne 0x10040d8b8
jmp 0x10040c389
movzx eax, word [rax + 2]
jmp 0x10040d853
lea rcx, str.hostname_dup_:_out_of_memory
call fcn.100410720
jmp 0x10040c389
cmp qword [r13 + 0x3a08], 0
jne 0x10040d798
jmp 0x10040ca7e
mov rcx, qword [rsp + 0x88]
call sub.cygwin1.dll_strdup
mov qword [rbx + 0x78], rax
jmp 0x10040d676