Function at 0x140011668
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
jmp 0x14001b9f0
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0xc818
call fcn.140011159
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x307a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0xc838]
mov rax, qword [0x140030058]
xor rax, rbp
mov qword [rbp + 0xc7d8], rax
lea rcx, reloc.WS2_32.dll_accept
call fcn.140011861
mov dword [rbp + 4], 0
mov dword [rbp + 0x24], 0
mov dword [rbp + 0x44], 0x2000
mov dword [rbp + 0x64], 0x2000
mov dword [rbp + 0x8104], 0
mov dword [rbp + 0xa144], 0
mov dword [rbp + 0xc184], 0
mov rcx, qword [rbp + 0xc810]
call fcn.14001183e
mov qword [rbp + 0xc1a8], rax
mov rdx, qword [rbp + 0xc808]
mov rcx, qword [rbp + 0xc800]
call fcn.1400114ba
mov qword [rbp + 0xc1c8], rax
xor r9d, r9d
mov r8d, dword [rbp + 0x44]
lea rdx, [rbp + 0x20b0]
mov rcx, qword [rbp + 0xc1a8]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20b0]
call fcn.14001169f
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0
jle 0x14001bcbd
movsxd rax, dword [rbp + 4]
mov r8, rax
lea rdx, [rbp + 0x20b0]
lea rcx, [rbp + 0xa170]
call fcn.1400113de
mov eax, dword [rbp + 4]
mov dword [rbp + 0xc184], eax
mov eax, dword [rbp + 0x24]
mov ecx, dword [rbp + 4]
sub ecx, eax
mov eax, ecx
cdqe
movsxd rcx, dword [rbp + 0x24]
lea rcx, [rbp + rcx + 0x20b0]
mov r8, rax
mov rdx, rcx
lea rcx, [rbp + 0x40d0]
call fcn.1400113de
mov eax, dword [rbp + 0x24]
mov ecx, dword [rbp + 4]
sub ecx, eax
mov eax, ecx
lea r9, [rbp + 0x8104]
lea r8, [rbp + 0x60f0]
mov edx, eax
lea rcx, [rbp + 0x40d0]
call fcn.140011848
lea rax, [rbp + 0x6110]
mov r8d, 8
xor edx, edx
mov rcx, rax
call fcn.14001164a
xor r9d, r9d
mov r8d, dword [rbp + 0xc184]
lea rdx, [rbp + 0xa170]
mov rcx, qword [rbp + 0xc1c8]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x14001bba8
lea rcx, str.____Couldnt_communicate_with_the_fake_RPC_Server_n
call fcn.1400113ac
jmp 0x14001bcc7
xor r9d, r9d
mov r8d, dword [rbp + 0x44]
lea rdx, [rbp + 0x20b0]
mov rcx, qword [rbp + 0xc1c8]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x14001bbdd
lea rcx, str.____Couldnt_receive_the_type2_message_from_the_fake_RPC_Server_n
call fcn.1400113ac
jmp 0x14001bcc7
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20b0]
call fcn.14001169f
mov dword [rbp + 0x24], eax
lea rax, [rbp + 0x90]
mov qword [rsp + 0x28], rax
mov eax, dword [rbp + 0x8104]
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x60f0]
mov r8d, dword [rbp + 0x24]
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20b0]
call fcn.1400115c8
mov eax, dword [rbp + 0x8104]
mov ecx, dword [rbp + 0x24]
add ecx, eax
mov eax, ecx
xor r9d, r9d
mov r8d, eax
lea rdx, [rbp + 0x90]
mov rcx, qword [rbp + 0xc1a8]
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
jne 0x14001bc59
lea rcx, str.____Couldnt_send_the_altered_type2_to_the_rpc_client__the_privileged_auth__n
call fcn.1400113ac
jmp 0x14001bcc7
xor r9d, r9d
mov r8d, dword [rbp + 0x44]
lea rdx, [rbp + 0x20b0]
mov rcx, qword [rbp + 0xc1a8]
call qword [sym.imp.WS2_32.dll_recv]
mov dword [rbp + 4], eax
cmp dword [rbp + 4], 0xffffffff
jne 0x14001bc8b
lea rcx, str.____Couldnt_receive_the_type3_auth_from_the_rpc_client_n
call fcn.1400113ac
jmp 0x14001bcc7
lea r9, [rbp + 0xa144]
lea r8, [rbp + 0x8130]
mov edx, dword [rbp + 4]
lea rcx, [rbp + 0x20b0]
call fcn.1400114e2
lea rdx, [rbp + 0x8130]
lea rcx, [rbp + 0x60f0]
call fcn.1400111cc
jmp 0x14001bcc7
cmp dword [rbp + 4], 0
jg 0x14001bab0
mov rcx, qword [rbp + 0xc1a8]
call qword [sym.imp.WS2_32.dll_closesocket]
mov rcx, qword [rbp + 0xc1c8]
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea rcx, [rbp - 0x30]
lea rdx, [0x14002b1a0]
call fcn.1400116f9
mov rcx, qword [rbp + 0xc7d8]
xor rcx, rbp
call fcn.1400113d4
lea rsp, [rbp + 0xc7e8]
pop rdi
pop rbp
ret