Function at 0x14001163b
Capabilities:
Receive data
Receive data on socket
Send data
Send data on socket

Disassembly:
jmp 0x140018e20
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x27b8
call fcn.140011104
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x866
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x27d8]
mov rax, qword [0x14002f040]
xor rax, rbp
mov qword [rbp + 0x2788], rax
lea rcx, [0x140035548]
call fcn.140011677
mov dword [rbp + 4], 1
mov eax, 1
imul rax, rax, 0x2c
mov rcx, qword [rbp + 0x27b8]
add rcx, rax
mov rax, rcx
mov ecx, 1
imul rcx, rcx, 0
lea rcx, [rbp + rcx + 0xc8]
mov r8d, 8
mov rdx, rax
call fcn.140011316
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x24], eax
mov r8d, 4
lea rdx, [0x14002a004]
lea rcx, [rbp + 0x70]
call fcn.140011316
mov r8d, 2
lea rdx, [0x14002a00c]
lea rcx, [rbp + 0x76]
call fcn.140011316
mov r8d, 2
lea rdx, [0x14002a010]
lea rcx, [rbp + 0x74]
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x78]
mov r8d, 2
lea rdx, [0x14002a014]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7a]
mov r8d, 2
lea rdx, [0x14002a014]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7c]
mov r8d, 2
lea rdx, [0x14002a174]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7e]
mov r8d, 2
lea rdx, [0x14002a018]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x80]
mov r8d, 4
lea rdx, [0x14002a01c]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x84]
mov r8d, 4
lea rdx, [0x14002a01c]
mov rcx, rax
call fcn.140011316
mov rax, qword [rbp + 0x27c0]
movsxd rax, dword [rax]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x27c0]
mov eax, dword [rax]
inc eax
mov rcx, qword [rbp + 0x27c0]
mov dword [rcx], eax
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x90]
mov r8d, 4
lea rdx, [rbp + 0x24]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x94]
mov r8d, 4
lea rdx, [0x14002a178]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x98]
mov r8d, 8
lea rdx, [rbp + 0xc8]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0xa0]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [0x14002a038]
mov rcx, rax
call fcn.140011316
mov r8d, 0x38
xor edx, edx
lea rcx, [rbp + 0x108]
call fcn.1400114f6
mov eax, 0x39
mov word [rbp + 0x108], ax
mov byte [rbp + 0x10a], 0
mov byte [rbp + 0x10b], 0xff
mov dword [rbp + 0x10c], 2
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x110]
mov r8d, 8
lea rdx, [0x14002a028]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x118]
mov r8d, 8
lea rdx, [0x14002a028]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x120]
mov r8d, 4
lea rdx, [0x14002a180]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x124]
mov r8d, 4
lea rdx, [0x14002a188]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x128]
mov r8d, 4
lea rdx, [0x14002a178]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x12c]
mov r8d, 4
lea rdx, [0x14002a190]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x130]
mov r8d, 4
lea rdx, [0x14002a198]
mov rcx, rax
call fcn.140011316
mov eax, 0x78
mov word [rbp + 0x134], ax
mov rcx, qword [rbp + 0x27c8]
call qword [sym.imp.ucrtbased.dll_wcslen]
shl rax, 1
mov word [rbp + 0x136], ax
mov dword [rbp + 0x138], 0
mov dword [rbp + 0x13c], 0
mov r8d, 4
xor edx, edx
lea rcx, [rbp + 0xe4]
call fcn.1400114f6
mov rcx, qword [rbp + 0x27c8]
call qword [sym.imp.ucrtbased.dll_wcslen]
lea rax, [rax + rax + 0x78]
mov word [rbp + 0x44], ax
mov eax, 1
imul rax, rax, 1
mov ecx, 1
imul rcx, rcx, 2
movzx eax, byte [rbp + rax + 0x44]
mov byte [rbp + rcx + 0xe4], al
mov eax, 1
imul rax, rax, 0
mov ecx, 1
imul rcx, rcx, 3
movzx eax, byte [rbp + rax + 0x44]
mov byte [rbp + rcx + 0xe4], al
mov r8d, 4
lea rdx, [0x14002a004]
lea rcx, [rbp + 0x70]
call fcn.140011316
mov r8d, 2
lea rdx, [0x14002a00c]
lea rcx, [rbp + 0x76]
call fcn.140011316
mov r8d, 2
lea rdx, [0x14002a010]
lea rcx, [rbp + 0x74]
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x78]
mov r8d, 2
lea rdx, [0x14002a014]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7a]
mov r8d, 2
lea rdx, [0x14002a014]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7c]
mov r8d, 2
lea rdx, [0x14002a174]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x7e]
mov r8d, 2
lea rdx, [0x14002a018]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x80]
mov r8d, 4
lea rdx, [0x14002a01c]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x84]
mov r8d, 4
lea rdx, [0x14002a01c]
mov rcx, rax
call fcn.140011316
mov rax, qword [rbp + 0x27c0]
movsxd rax, dword [rax]
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x27c0]
mov eax, dword [rax]
inc eax
mov rcx, qword [rbp + 0x27c0]
mov dword [rcx], eax
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x90]
mov r8d, 4
lea rdx, [rbp + 0x24]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x94]
mov r8d, 4
lea rdx, [0x14002a178]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0x98]
mov r8d, 8
lea rdx, [rbp + 0xc8]
mov rcx, rax
call fcn.140011316
mov eax, 1
imul rax, rax, 0
lea rax, [rbp + rax + 0xa0]
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [0x14002a038]
mov rcx, rax
call fcn.140011316
mov r8d, 4
lea rdx, [rbp + 0xe4]
lea rcx, [rbp + 0x160]
call fcn.140011316
lea rax, [rbp + 0x164]
mov r8d, 0x40
lea rdx, [rbp + 0x70]
mov rcx, rax
call fcn.140011316
lea rax, [rbp + 0x1a4]
mov r8d, 0x38
lea rdx, [rbp + 0x108]
mov rcx, rax
call fcn.140011316
mov rcx, qword [rbp + 0x27c8]
call qword [sym.imp.ucrtbased.dll_wcslen]
shl rax, 1
lea rcx, [rbp + 0x1dc]
mov r8, rax
mov rdx, qword [rbp + 0x27c8]
call fcn.140011316
mov rcx, qword [rbp + 0x27c8]
call qword [sym.imp.ucrtbased.dll_wcslen]
lea rax, [rax + rax + 0x7c]
xor r9d, r9d
mov r8d, eax
lea rdx, [rbp + 0x160]
mov rcx, qword [rbp + 0x27b0]
call fcn.1400116b3
xor r9d, r9d
mov r8d, 0x2000
mov rdx, qword [rbp + 0x27b8]
mov rcx, qword [rbp + 0x27b0]
call fcn.1400111fe
mov rax, qword [rbp + 0x27b8]
add rax, 0xc
mov qword [rbp + 0x2178], rax
mov rax, qword [rbp + 0x2178]
cmp dword [rax], 0
je 0x140019541
mov rax, qword [rbp + 0x2178]
mov edx, dword [rax]
lea rcx, str.____SMB_Create_Request_File_failed_with_status_code_0x_x_n
call fcn.1400112ee
mov dword [rbp + 4], 0
jmp 0x140019554
mov rdx, qword [rbp + 0x27c8]
lea rcx, str.___SMB_Create_Request_File:__S_success_n
call fcn.1400112ee
mov eax, dword [rbp + 4]
mov edi, eax
lea rcx, [rbp - 0x20]
lea rdx, [0x1400290a0]
call fcn.14001158c
mov eax, edi
mov rcx, qword [rbp + 0x2788]
xor rcx, rbp
call fcn.14001130c
lea rsp, [rbp + 0x2798]
pop rdi
pop rbp
ret