Function at 0x140003350
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4818]
mov eax, 0x4918
call fcn.14001cf10
sub rsp, rax
mov rax, qword [0x14002b008]
xor rax, rsp
mov qword [rbp + 0x4800], rax
mov r12, qword [rbp + 0x4880]
xor r10d, r10d
mov r15, qword [rbp + 0x4888]
mov r14, rdx
mov qword [rsp + 0x60], r8
mov r13, rcx
movsxd rbx, r9d
mov r8d, r10d
mov dword [rbp - 0x10], 0x4d4c544e
mov word [rbp - 0xc], 0x5353
mov byte [rbp - 0xa], 0x50
test r9d, r9d
jle 0x1400033e9
mov edx, r10d
mov eax, r10d
movzx ecx, byte [rbp + rax - 0x10]
cmp byte [rdx + r14], cl
jne 0x1400033db
inc rax
cmp rax, 7
jne 0x1400033de
add r8d, 0xfffffffa
jmp 0x1400033ef
mov rax, r10
inc r8d
inc rdx
cmp rdx, rbx
jl 0x1400033c1
mov r8d, 0xffffffff
sub ebx, r8d
movsxd rsi, r8d
movsxd rdi, ebx
lea rcx, [rbp + 0x400]
add rsi, r14
mov r8, rdi
mov rdx, rsi
call fcn.1400078c0
cmp byte [rbp + 0x408], 2
jne 0x14000366e
mov rax, qword [rbp + 0x420]
mov edx, 0xffffffff
mov rcx, qword [0x14002cea0]
mov qword [0x14002ce98], rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [0x14002ce90]
lea rdx, [rbp + 0x400]
mov r8, rdi
mov qword [rbp + 0x420], rax
mov rcx, rsi
call fcn.1400078c0
lea rcx, str.___SMB_Client_Auth_Context_swapped_with_SYSTEM__n
call fcn.140001010
xor edi, edi
mov dword [rbp - 0x40], 0x2000
mov ecx, 1
mov dword [rbp - 0x50], edi
lea rax, [rbp - 0x40]
mov dword [rbp - 0x4c], ecx
mov qword [rbp - 0x48], rax
lea r8, str.cifs_127.0.0.1
lea rax, [rbp + 0x2800]
mov dword [rbp - 0x1c], ecx
mov qword [rbp - 0x38], rax
mov r9d, 0x10000
lea rax, [rbp - 0x30]
mov dword [rbp - 0x3c], 2
mov qword [rbp - 0x18], rax
mov rdx, r15
lea rax, [rbp + 0x400]
mov dword [rbp - 0x20], edi
mov qword [rbp - 0x28], rax
mov rcx, r12
lea rax, [rbp - 8]
mov dword [rbp - 0x30], ebx
mov qword [rsp + 0x58], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], reloc.WS2_32.dll_recv
mov dword [rsp + 0x20], edi
mov dword [rbp - 0x2c], 2
call qword [sym.imp.Secur32.dll_InitializeSecurityContextW]
test eax, eax
jns 0x140003519
lea rcx, str.____InitializeSecurityContext_failed_with_error_code_0x_x_n
jmp 0x1400036a6
add eax, 0xfff6fced
cmp eax, 1
ja 0x140003538
lea rdx, [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.Secur32.dll_CompleteAuthToken]
test eax, eax
js 0x14000369f
mov rcx, qword [0x14002ce80]
mov esi, dword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rcx, qword [0x14002ce88]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdx, qword [rsp + 0x60]
mov r12d, 1
mov rbx, qword [r14 + 0x2c]
mov dword [rsp + 0x70], 0x424d53fe
mov qword [rsp + 0x74], 0x10040
movsxd rcx, dword [rdx]
mov dword [rsp + 0x7c], 0x1f0001
mov qword [rbp - 0x80], reloc.WS2_32.dll_recv
mov qword [rbp - 0x78], rcx
lea eax, [rcx + 1]
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
movaps xmm0, xmmword [rsp + 0x70]
lea rdx, [rbp + 0x2800]
movups xmm2, xmmword [0x140027460]
lea rcx, [rbp + 0x58]
mov dword [rbp - 0x70], eax
movaps xmm1, xmmword [rbp - 0x80]
mov eax, 0x58
movaps xmmword [rbp], xmm0
xor r15d, r15d
mov dword [rbp - 0x6c], edi
mov r8d, esi
mov qword [rbp - 0x68], rbx
lea edi, [rsi + 0x58]
movaps xmm0, xmmword [rbp - 0x70]
movaps xmmword [rbp + 0x20], xmm0
mov word [rbp - 0x10], di
movaps xmmword [rbp + 0x10], xmm1
movaps xmmword [rbp + 0x30], xmm2
mov dword [rbp + 0x40], 0x1000019
mov qword [rbp + 0x44], 7
mov word [rbp + 0x4c], ax
mov word [rbp + 0x4e], si
mov qword [rbp + 0x50], r15
call fcn.1400078c0
movzx eax, dil
mov dword [rsp + 0x60], r15d
mov byte [rsp + 0x63], al
lea ebx, [rsi + 0x58]
shr di, 8
lea rdx, [rbp]
mov byte [rsp + 0x62], dil
lea rcx, [rbp + 0x804]
mov eax, dword [rsp + 0x60]
movsxd r8, ebx
mov dword [rbp + 0x800], eax
call fcn.1400078c0
lea r8d, [rbx + 4]
xor r9d, r9d
lea rdx, [rbp + 0x800]
mov rcx, r13
call qword [sym.imp.WS2_32.dll_send]
xor r9d, r9d
mov r8d, 0x2000
mov rdx, r14
mov rcx, r13
call qword [sym.imp.WS2_32.dll_recv]
mov eax, r12d
jmp 0x14000367c
lea rcx, str.____Authentication_over_SMB_is_not_using_NTLM._Exiting..._n
call fcn.140001010
xor eax, eax
mov rcx, qword [rbp + 0x4800]
xor rcx, rsp
call fcn.140004020
add rsp, 0x4918
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.____CompleteAuthToken_failed_with_error_code_0x_x_n
mov edx, eax
call fcn.140001010
mov ecx, 0xffffffff
call fcn.14000d508
int3