Function at 0x6b47f0a0
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x50
mov esi, dword [esp + 0x78]
mov edi, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
mov ebx, dword [edi + 0xc]
mov ecx, dword [ebx + 0x98]
mov dword [esp + 4], ecx
mov ebp, dword [edi + 0x838]
mov eax, dword [ebx + eax*4 + 0x130]
mov dword [esp + 8], eax
mov dword [esp], 0
mov eax, dword [ebx]
dec eax
cmp eax, 0x10
jb 0x6b47f0e5
cmp dword [esi], 0
je 0x6b47f135
cmp eax, 0xd
ja case.0x6b47f0ee.1
jmp dword [eax*4 + 0x6b732674]
push dword [ebx + 0xc4]
mov esi, dword [esp + 0x6c]
push esi
push edi
call fcn.6b458350
add esp, 0xc
mov dword [esp], eax
test eax, eax
je 0x6b47f4d7
mov dword [edi + 0x8f4], eax
or byte [edi + 0x908], 1
push esi
push str.Hostname__s_was_found
push edi
call fcn.6b4767f0
add esp, 0xc
jmp 0x6b47f1ff
mov dword [ebx], 1
mov byte [ebx + 0x100], 1
test byte [ebx + 0x24c], 1
mov esi, dword [esp + 0x68]
je 0x6b47f175
cmp dword [esp + 4], 6
mov eax, 0x6b73272a
mov ecx, 0x6b73272c
cmove ecx, eax
push dword [esp + 0x6c]
push esi
push ecx
push 0x6b7326fc
push edi
call fcn.6b4767f0
add esp, 0x14
mov eax, dword [esp + 0x6c]
push eax
push esi
push str.SOCKS4_communication_to__s:_d
push edi
call fcn.6b4767f0
add esp, 0x10
cmp dword [esp + 4], 6
mov word [ebp], 0x104
mov eax, dword [esp + 0x6c]
mov byte [ebp + 2], ah
mov byte [ebp + 3], al
jne 0x6b47f1b7
mov eax, dword [edi + 0xc]
cmp dword [eax], 9
je case.0x6b47f0ee.8
mov dword [eax], 9
jmp case.0x6b47f0ee.8
mov eax, esp
push eax
push 0
push dword [esp + 0x74]
push esi
push edi
call fcn.6b4587e0
add esp, 0x14
cmp eax, 0xffffffff
je 0x6b47f4cd
cmp eax, 1
jne 0x6b47f1ff
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xa
je 0x6b47f1e6
mov dword [eax], 0xa
push dword [esp + 0x68]
push str.SOCKS4_non_blocking_resolve_of__s
push edi
call fcn.6b4767f0
add esp, 0xc
xor eax, eax
jmp 0x6b47f5f5
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xb
je case.0x6b47f0ee.10
mov dword [eax], 0xb
mov eax, dword [esp]
test eax, eax
je 0x6b47f238
mov esi, dword [eax]
test esi, esi
je 0x6b47f22d
nop
nop
nop
nop
nop
nop
cmp dword [esi + 4], 2
je 0x6b47f254
mov esi, dword [esi + 0x1c]
test esi, esi
jne 0x6b47f220
push dword [esp + 0x68]
push str.SOCKS4_connection_to__s_not_supported
jmp 0x6b47f241
push dword [esp + 0x68]
push str.Failed_to_resolve___s__for_SOCKS4_connect.
push edi
call fcn.6b476950
add esp, 0xc
mov eax, 0x1b
jmp 0x6b47f5f5
lea edi, [esp + 0x10]
push 0x40
push edi
push esi
call fcn.6b458290
add esp, 0xc
mov eax, dword [esi + 0x18]
mov cl, byte [eax + 4]
mov byte [ebp + 4], cl
mov cl, byte [eax + 5]
mov byte [ebp + 5], cl
mov cl, byte [eax + 6]
mov byte [ebp + 6], cl
mov al, byte [eax + 7]
mov byte [ebp + 7], al
push edi
mov esi, dword [esp + 0x78]
push str.SOCKS4_connect_to_IPv4__s__locally_resolved_
push esi
call fcn.6b4767f0
add esp, 0xc
push dword [esp]
push esi
call fcn.6b458c60
add esp, 8
mov edi, dword [esp + 0x64]
lea esi, [ebp + 8]
mov byte [ebp + 8], 0
test edi, edi
je 0x6b47f2d7
push edi
call sub.msvcrt.dll_strlen
add esp, 4
mov edx, dword [esp + 0x74]
mov ecx, dword [edx + 0x4c0]
add ecx, 0xfffffff8
cmp eax, ecx
jae 0x6b47f3f1
inc eax
push eax
push edi
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
push esi
call sub.msvcrt.dll_strlen
add esp, 4
mov esi, eax
add esi, 9
cmp dword [esp + 4], 6
jne 0x6b47f322
mov dword [ebp + 4], 0x1000000
mov eax, dword [esp + 0x68]
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov edi, eax
inc edi
cmp edi, 0xff
ja 0x6b47f49a
lea eax, [ebp + esi]
push dword [esp + 0x68]
push eax
call sub.msvcrt.dll_strcpy
add esp, 8
add esi, edi
mov edi, dword [esp + 0x74]
mov dword [ebx + 8], ebp
mov dword [ebx + 4], esi
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xe
mov esi, dword [esp + 0x78]
je case.0x6b47f0ee.13
mov dword [eax], 0xe
lea eax, [esp + 0xc]
push eax
push dword [ebx + 4]
push dword [ebx + 8]
push dword [esp + 0x14]
push edi
call fcn.6b476c40
add esp, 0x14
test eax, eax
je 0x6b47f363
cmp eax, 0x51
jne 0x6b47f409
mov eax, dword [esp + 0xc]
mov ecx, dword [ebx + 4]
sub ecx, eax
jne 0x6b47f421
mov dword [ebx + 4], 8
mov dword [ebx + 8], ebp
mov eax, dword [edi + 0xc]
cmp dword [eax], 4
je case.0x6b47f0ee.3
mov dword [eax], 4
lea eax, [esp + 0x10]
push eax
push dword [ebx + 4]
push dword [ebx + 8]
push dword [esp + 0x14]
call fcn.6b477110
add esp, 0x10
test eax, eax
je 0x6b47f3ae
cmp eax, 0x51
jne 0x6b47f42e
mov ecx, dword [esp + 0x10]
or eax, ecx
je 0x6b47f4b5
mov eax, dword [ebx + 4]
sub eax, ecx
jne 0x6b47f4ff
mov eax, dword [edi + 0xc]
cmp dword [eax], 0x11
je case.0x6b47f0ee.1
mov dword [eax], 0x11
cmp byte [ebp], 0
je 0x6b47f450
push str.SOCKS4_reply_has_wrong_version__version_should_be_0.
push edi
call fcn.6b476950
add esp, 8
mov eax, 2
jmp 0x6b47f5f5
push str.Too_long_SOCKS_proxy_user_name__cant_use_
push edx
call fcn.6b476950
add esp, 8
mov eax, 0xb
jmp 0x6b47f5f5
push str.Failed_to_send_SOCKS4_connect_request.
push edi
call fcn.6b476950
add esp, 8
mov eax, 0x1d
jmp 0x6b47f5f5
mov dword [ebx + 4], ecx
add dword [ebx + 8], eax
xor eax, eax
jmp 0x6b47f5f5
push eax
call sym.libcurl.dll_curl_easy_strerror
add esp, 4
push eax
push str.SOCKS4:_Failed_receiving_connect_request_ack:__s
push edi
call fcn.6b476950
add esp, 0xc
mov eax, 0xf
jmp 0x6b47f5f5
movzx eax, byte [ebp + 1]
mov ecx, eax
add cl, 0xa6
cmp cl, 3
ja case.default.0x6b47f465
movzx ecx, cl
jmp dword [ecx*4 + 0x6b7326ac]
cmp dword [esp + 4], 6
mov eax, 0x6b73272a
mov ecx, 0x6b73272c
cmove ecx, eax
push ecx
push str.SOCKS4_s_request_granted.
push edi
call fcn.6b4767f0
add esp, 0xc
mov dword [esi], 1
xor eax, eax
jmp 0x6b47f5f5
push str.SOCKS4:_too_long_host_name
push dword [esp + 0x78]
call fcn.6b476950
add esp, 8
mov eax, 9
jmp 0x6b47f5f5
push str.connection_to_proxy_closed
push edi
call fcn.6b476950
add esp, 8
mov eax, 3
jmp 0x6b47f5f5
mov eax, 0x1b
jmp 0x6b47f5f5
mov eax, esp
push eax
push edi
call fcn.6b458c00
add esp, 8
mov ecx, eax
mov eax, dword [esp]
test eax, eax
jne 0x6b47f214
test ecx, ecx
mov eax, 0x1b
cmove eax, ecx
jmp 0x6b47f5f5
mov dword [ebx + 4], eax
add dword [ebx + 8], ecx
xor eax, eax
jmp 0x6b47f5f5
movzx ecx, byte [ebp + 4]
movzx edx, byte [ebp + 5]
movzx esi, byte [ebp + 6]
movzx edi, byte [ebp + 7]
movzx ebx, word [ebp + 2]
shl ebx, 0x10
bswap ebx
push eax
push ebx
push edi
push esi
push edx
push ecx
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_or_failed.
push dword [esp + 0x90]
call fcn.6b476950
add esp, 0x20
mov eax, 0x1a
jmp 0x6b47f5f5
movzx ecx, byte [ebp + 4]
movzx edx, byte [ebp + 5]
movzx esi, byte [ebp + 6]
movzx edi, byte [ebp + 7]
movzx ebx, word [ebp + 2]
shl ebx, 0x10
bswap ebx
push eax
push ebx
push edi
push esi
push edx
push ecx
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_because_SOCKS_server_cannot_connect_to_identd_on_the_client.
push dword [esp + 0x90]
call fcn.6b476950
add esp, 0x20
mov eax, 7
jmp 0x6b47f5f5
movzx ecx, byte [ebp + 4]
movzx edx, byte [ebp + 5]
movzx esi, byte [ebp + 6]
movzx edi, byte [ebp + 7]
movzx ebx, word [ebp + 2]
shl ebx, 0x10
bswap ebx
push eax
push ebx
push edi
push esi
push edx
push ecx
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_because_the_client_program_and_identd_report_different_user_ids.
push dword [esp + 0x90]
call fcn.6b476950
add esp, 0x20
mov eax, 8
jmp 0x6b47f5f5
movzx ecx, byte [ebp + 4]
movzx edx, byte [ebp + 5]
movzx esi, byte [ebp + 6]
movzx edi, byte [ebp + 7]
movzx ebx, word [ebp + 2]
shl ebx, 0x10
bswap ebx
push eax
push ebx
push edi
push esi
push edx
push ecx
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___Unknown.
push dword [esp + 0x90]
call fcn.6b476950
add esp, 0x20
mov eax, 0x1f
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret