Function at 0x6b47f600
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x120
mov esi, dword [esp + 0x148]
mov edi, dword [esp + 0x144]
mov eax, dword [esp + 0x134]
mov dword [esp + 0x14], eax
mov ebp, dword [esi + 0xc]
mov eax, dword [esi + 0x838]
mov dword [esp], eax
lea eax, [esp + 0x20]
push 0x100
push 0x6b732ab8
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [ebp + edi*4 + 0x130]
mov dword [esp + 4], eax
mov ebx, dword [ebp + 0x98]
xor eax, eax
cmp ebx, 5
sete al
mov dword [esp + 0x1c], eax
push dword [esp + 0x13c]
call sub.msvcrt.dll_strlen
add esp, 4
mov dword [esp + 0x18], eax
mov edi, dword [esi + 0x14c]
mov dword [esp + 0x10], 0
mov eax, dword [ebp]
dec eax
cmp eax, 0x10
jb 0x6b47f699
mov ecx, dword [esp + 0x14c]
cmp dword [ecx], 0
je 0x6b47f6ea
cmp eax, 0xf
ja case.0x6b47f6a4.4
xor esi, esi
jmp dword [eax*4 + 0x6b7326bc]
lea eax, [esp + 8]
push eax
push dword [ebp + 4]
push dword [ebp + 8]
push dword [esp + 0x10]
push dword [esp + 0x158]
call fcn.6b476c40
add esp, 0x14
test eax, eax
je 0x6b47f6d6
cmp eax, 0x51
jne 0x6b47f976
mov eax, dword [esp + 8]
mov ecx, dword [ebp + 4]
sub ecx, eax
je case.0x6b47f6a4.2
jmp 0x6b47feb8
mov dword [ebp], 1
test byte [ebp + 0x24c], 1
mov esi, dword [esp + 0x148]
je 0x6b47f71d
push dword [esp + 0x140]
push dword [esp + 0x140]
push str.SOCKS5:_connecting_to_HTTP_proxy__s_port__d
push esi
call fcn.6b4767f0
add esp, 0x10
cmp dword [esp + 0x18], 0x100
jb 0x6b47f746
cmp ebx, 5
je 0x6b47f746
push dword [esp + 0x18]
push str.SOCKS5:_server_resolving_disabled_for_hostnames_of_length___255__actual_len_zu_
push esi
call fcn.6b4767f0
add esp, 0xc
mov dword [esp + 0x1c], 1
test edi, 0xfffffffa
je 0x6b47f75d
push edi
push str.warning:_unsupported_value_passed_to_CURLOPT_SOCKS5_AUTH:__lu
push esi
call fcn.6b4767f0
add esp, 0xc
mov eax, edi
and eax, 1
neg eax
mov ecx, dword [esp + 0x134]
and ecx, eax
mov eax, ecx
and edi, 4
mov ecx, dword [esp]
mov byte [ecx], 5
mov byte [ecx + 2], 0
mov ebx, 3
je 0x6b47f78c
mov byte [ecx + 3], 1
mov ebx, 4
test eax, eax
mov dword [esp + 0x14], eax
je 0x6b47f799
mov byte [ecx + ebx], 2
inc ebx
mov eax, ebx
add al, 0xfe
mov byte [ecx + 1], al
lea eax, [esp + 8]
push eax
push ebx
push ecx
push dword [esp + 0x10]
push esi
call fcn.6b476c40
add esp, 0x14
test eax, eax
je 0x6b47f7bd
cmp eax, 0x51
jne 0x6b47f7ee
mov eax, dword [esp + 8]
cmp eax, ebx
mov ecx, dword [esi + 0xc]
mov edx, dword [ecx]
jne 0x6b47f806
shr edi, 2
cmp edx, 4
je 0x6b47f7d8
mov dword [ecx], 4
mov esi, edi
mov dword [ebp + 4], 2
mov ecx, dword [esp]
mov dword [ebp + 8], ecx
mov eax, 2
jmp 0x6b47f82f
push str.Unable_to_send_initial_SOCKS5_request.
push esi
call fcn.6b476950
add esp, 8
mov eax, 0x1d
jmp 0x6b4800ef
cmp edx, 2
je 0x6b47f815
mov dword [ecx], 2
mov eax, dword [esp + 8]
sub ebx, eax
mov dword [ebp + 4], ebx
mov ecx, dword [esp]
add ecx, eax
mov dword [ebp + 8], ecx
jmp 0x6b4800d8
mov eax, dword [ebp + 4]
mov ecx, dword [ebp + 8]
xor esi, esi
lea edx, [esp + 0xc]
push edx
push eax
push ecx
push dword [esp + 0x10]
call fcn.6b477110
add esp, 0x10
test eax, eax
je 0x6b47f84b
cmp eax, 0x51
jne 0x6b47f890
mov ecx, dword [esp + 0xc]
or eax, ecx
je 0x6b47f929
mov eax, dword [ebp + 4]
sub eax, ecx
jne 0x6b4800d2
mov eax, dword [esp]
cmp byte [eax], 5
jne 0x6b47f93a
mov al, byte [eax + 1]
cmp al, 2
je 0x6b47f987
test al, al
jne 0x6b47fb79
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0xc]
jmp 0x6b47fbd1
push str.Unable_to_receive_initial_SOCKS5_response.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0xf
jmp 0x6b4800ef
mov edi, dword [ebp + 4]
mov eax, dword [ebp + 8]
mov esi, dword [esp + 0x148]
jmp 0x6b47fa70
push dword [esp + 0x140]
mov ebx, dword [esp + 0x140]
push ebx
mov edi, dword [esp + 0x150]
push edi
call fcn.6b458350
add esp, 0xc
mov dword [esp + 0x10], eax
test eax, eax
je 0x6b47f94b
mov esi, eax
mov dword [edi + 0x8f4], eax
or byte [edi + 0x908], 1
push ebx
push str.SOCKS5:_hostname__s_found
push edi
call fcn.6b4767f0
add esp, 0xc
jmp 0x6b47fcab
cmp ebx, 5
mov eax, dword [esp]
mov word [eax], 0x105
mov byte [eax + 2], 0
mov esi, 3
jne 0x6b47fc37
jmp case.0x6b47f6a4.12
push str.Connection_to_proxy_closed
push dword [esp + 0x14c]
jmp 0x6b4800e2
push str.Received_invalid_version_in_initial_SOCKS5_response.
push dword [esp + 0x14c]
jmp 0x6b47ff9c
lea eax, [esp + 0x10]
push eax
push edi
call fcn.6b458c00
add esp, 8
mov esi, dword [esp + 0x10]
test esi, esi
jne 0x6b47fcab
mov ecx, eax
test eax, eax
mov eax, 0x1b
cmove eax, ecx
jmp 0x6b4800ef
push str.Unable_to_send_initial_SOCKS5_request.
push dword [esp + 0x14c]
jmp 0x6b47f7f4
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0xc]
cmp dword [eax], 6
je case.0x6b47f6a4.5
mov dword [eax], 6
mov esi, dword [esp + 0x138]
test esi, esi
mov eax, dword [esp + 0x14]
je 0x6b47f9fe
test eax, eax
je 0x6b47f9fe
push eax
call sub.msvcrt.dll_strlen
add esp, 4
mov edi, eax
push esi
call sub.msvcrt.dll_strlen
mov edx, edi
add esp, 4
mov ebx, eax
mov ecx, dword [esp]
mov byte [ecx], 1
mov byte [ecx + 1], dl
test edi, edi
je 0x6b47fa08
cmp edx, 0xff
jb 0x6b47fb5b
push str.Excessive_user_name_length_for_proxy_auth
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0xb
jmp 0x6b4800ef
mov ecx, dword [esp]
mov word [ecx], 1
xor ebx, ebx
xor eax, eax
lea edi, [eax + 3]
test esi, esi
mov byte [eax + ecx + 2], bl
je 0x6b47fa51
test ebx, ebx
je 0x6b47fa51
cmp ebx, 0x100
jb 0x6b47fa3f
push str.Excessive_password_length_for_proxy_auth
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0xa
jmp 0x6b4800ef
lea eax, [ecx + edi]
push ebx
push esi
push eax
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0xc]
add esp, 0xc
add edi, ebx
mov esi, dword [esp + 0x148]
mov eax, dword [esi + 0xc]
cmp dword [eax], 7
je 0x6b47fa68
mov dword [eax], 7
mov dword [ebp + 4], edi
mov dword [ebp + 8], ecx
mov eax, ecx
lea ecx, [esp + 8]
push ecx
push edi
push eax
push dword [esp + 0x10]
push esi
call fcn.6b476c40
add esp, 0x14
test eax, eax
je 0x6b47fa91
cmp eax, 0x51
jne 0x6b47fb25
mov ecx, dword [ebp + 4]
mov eax, dword [esp + 8]
sub ecx, eax
jne 0x6b47feb8
mov eax, dword [esp]
mov dword [ebp + 8], eax
mov dword [ebp + 4], 2
mov eax, dword [esi + 0xc]
cmp dword [eax], 8
je case.0x6b47f6a4.7
mov dword [eax], 8
lea eax, [esp + 0xc]
push eax
push dword [ebp + 4]
push dword [ebp + 8]
push dword [esp + 0x10]
call fcn.6b477110
add esp, 0x10
test eax, eax
je 0x6b47fadb
cmp eax, 0x51
jne 0x6b47fb3d
mov ecx, dword [esp + 0xc]
or eax, ecx
mov edx, dword [esp + 0x148]
je 0x6b4800dc
mov eax, dword [ebp + 4]
sub eax, ecx
jne 0x6b4800d2
mov ecx, dword [esp]
movzx eax, byte [ecx + 1]
test eax, eax
je 0x6b47fbce
movzx ecx, byte [ecx]
push eax
push ecx
push str.User_was_rejected_by_the_SOCKS5_server___d__d_.
push edx
call fcn.6b476950
add esp, 0x10
mov eax, 0x21
jmp 0x6b4800ef
push str.Failed_to_send_SOCKS5_sub_negotiation_request.
push esi
call fcn.6b476950
add esp, 8
mov eax, 0x1c
jmp 0x6b4800ef
push str.Unable_to_receive_SOCKS5_sub_negotiation_response.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0xe
jmp 0x6b4800ef
lea eax, [ecx + 2]
push edx
push dword [esp + 0x18]
push eax
mov edi, edx
call sub.msvcrt.dll_memcpy
mov eax, edi
mov ecx, dword [esp + 0xc]
add esp, 0xc
jmp 0x6b47fa0a
cmp al, 1
jne 0x6b47ffae
test esi, esi
je 0x6b47ffae
mov esi, dword [esp + 0x148]
mov eax, dword [esi + 0xc]
cmp dword [eax], 5
je 0x6b47fb9e
mov dword [eax], 5
push esi
push dword [esp + 0x148]
call fcn.6b480160
add esp, 8
test eax, eax
je 0x6b480006
push str.Unable_to_negotiate_SOCKS5_GSS_API_context.
push esi
call fcn.6b476950
add esp, 8
mov eax, 4
jmp 0x6b4800ef
mov eax, dword [edx + 0xc]
cmp dword [eax], 9
je case.0x6b47f6a4.8
mov dword [eax], 9
cmp dword [esp + 0x1c], 0
je 0x6b47fc2b
lea eax, [esp + 0x10]
push eax
push 0
push dword [esp + 0x148]
push dword [esp + 0x148]
mov esi, dword [esp + 0x158]
push esi
call fcn.6b4587e0
add esp, 0x14
cmp eax, 0xffffffff
je 0x6b47fc80
cmp eax, 1
jne 0x6b47fc8a
mov ecx, dword [esi + 0xc]
xor eax, eax
cmp dword [ecx], 0xa
je 0x6b4800ef
mov dword [ecx], 0xa
jmp 0x6b4800ef
mov eax, dword [esp]
mov word [eax], 0x105
mov byte [eax + 2], 0
mov eax, dword [esp]
mov byte [eax + 3], 3
mov ebx, dword [esp + 0x18]
mov byte [eax + 4], bl
add eax, 5
push ebx
mov esi, dword [esp + 0x140]
push esi
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
add ebx, 5
push dword [esp + 0x140]
push esi
push str.SOCKS5_connect_to__s:_d__remotely_resolved_
push dword [esp + 0x154]
call fcn.6b4767f0
add esp, 0x10
mov esi, ebx
jmp case.0x6b47f6a4.12
mov eax, 0x1b
jmp 0x6b4800ef
mov eax, dword [esi + 0xc]
cmp dword [eax], 0xb
je case.0x6b47f6a4.10
mov dword [eax], 0xb
mov esi, dword [esp + 0x10]
test esi, esi
mov ebx, dword [esp + 0x13c]
je 0x6b47fd50
mov esi, dword [esi]
test esi, esi
je 0x6b47fd50
push 0x100
lea edi, [esp + 0x24]
push edi
push esi
call fcn.6b458290
add esp, 0xc
push edi
call sub.msvcrt.dll_strlen
add esp, 4
lea ecx, [esp + eax + 0x20]
mov edx, 0x100
sub edx, eax
push dword [esp + 0x140]
push 0x6b732f0a
push edx
push ecx
call sym.libcurl.dll_curl_msnprintf
add esp, 0x10
mov ecx, dword [esp]
mov word [ecx], 0x105
mov byte [ecx + 2], 0
mov eax, dword [esi + 4]
cmp eax, 0x17
je 0x6b47fd6f
cmp eax, 2
jne 0x6b47fdf5
mov byte [ecx + 3], 1
mov eax, dword [esi + 0x18]
mov edx, ecx
mov cl, byte [eax + 4]
mov byte [edx + 4], cl
mov cl, byte [eax + 5]
mov byte [edx + 5], cl
mov cl, byte [eax + 6]
mov byte [edx + 6], cl
mov al, byte [eax + 7]
mov byte [edx + 7], al
push edi
push str.SOCKS5_connect_to_IPv4__s__locally_resolved_
mov edi, dword [esp + 0x150]
push edi
call fcn.6b4767f0
add esp, 0xc
mov esi, 8
jmp 0x6b47fe10
push ebx
push str.Failed_to_resolve___s__for_SOCKS5_connect.
push dword [esp + 0x150]
call fcn.6b476950
add esp, 0xc
mov eax, 0x1b
jmp 0x6b4800ef
mov byte [ecx + 3], 4
mov eax, dword [esi + 0x18]
mov edx, ecx
mov cl, byte [eax + 8]
mov byte [edx + 4], cl
mov cl, byte [eax + 9]
mov byte [edx + 5], cl
mov cl, byte [eax + 0xa]
mov byte [edx + 6], cl
mov cl, byte [eax + 0xb]
mov byte [edx + 7], cl
mov cl, byte [eax + 0xc]
mov byte [edx + 8], cl
mov cl, byte [eax + 0xd]
mov byte [edx + 9], cl
mov cl, byte [eax + 0xe]
mov byte [edx + 0xa], cl
mov cl, byte [eax + 0xf]
mov byte [edx + 0xb], cl
mov cl, byte [eax + 0x10]
mov byte [edx + 0xc], cl
mov cl, byte [eax + 0x11]
mov byte [edx + 0xd], cl
mov cl, byte [eax + 0x12]
mov byte [edx + 0xe], cl
mov cl, byte [eax + 0x13]
mov byte [edx + 0xf], cl
mov cl, byte [eax + 0x14]
mov byte [edx + 0x10], cl
mov cl, byte [eax + 0x15]
mov byte [edx + 0x11], cl
mov cl, byte [eax + 0x16]
mov byte [edx + 0x12], cl
mov al, byte [eax + 0x17]
mov byte [edx + 0x13], al
push edi
push str.SOCKS5_connect_to_IPv6__s__locally_resolved_
mov edi, dword [esp + 0x150]
push edi
call fcn.6b4767f0
add esp, 0xc
mov esi, 0x14
jmp 0x6b47fe10
push edi
push str.SOCKS5_connection_to__s_not_supported
mov edi, dword [esp + 0x150]
push edi
call fcn.6b476950
add esp, 0xc
mov esi, 3
push dword [esp + 0x10]
push edi
call fcn.6b458c60
add esp, 8
mov ecx, dword [esp + 0x140]
rol cx, 8
mov eax, dword [esp]
mov word [eax + esi], cx
cmp dword [ebp + 0x4c8], 0
je 0x6b47fe56
push str.SOCKS5_GSS_API_protection_not_yet_implemented.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 6
jmp 0x6b4800ef
add esi, 2
mov dword [ebp + 8], eax
mov dword [ebp + 4], esi
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0xe
je case.0x6b47f6a4.13
mov dword [eax], 0xe
lea eax, [esp + 8]
push eax
push dword [ebp + 4]
push dword [ebp + 8]
push dword [esp + 0x10]
mov esi, dword [esp + 0x158]
push esi
call fcn.6b476c40
add esp, 0x14
test eax, eax
je 0x6b47fe9c
cmp eax, 0x51
jne 0x6b47fec3
mov ecx, dword [ebp + 4]
mov eax, dword [esp + 8]
sub ecx, eax
jne 0x6b47feb8
cmp dword [ebp + 0x4c8], 0
je 0x6b47fedb
push str.SOCKS5_GSS_API_protection_not_yet_implemented.
push esi
jmp 0x6b47fe44
mov dword [ebp + 4], ecx
add dword [ebp + 8], eax
jmp 0x6b4800d8
push str.Failed_to_send_SOCKS5_connect_request.
push esi
call fcn.6b476950
add esp, 8
mov eax, 0x1e
jmp 0x6b4800ef
mov dword [ebp + 4], 0xa
mov eax, dword [esp]
mov dword [ebp + 8], eax
mov eax, dword [esi + 0xc]
cmp dword [eax], 0xf
je case.0x6b47f6a4.14
mov dword [eax], 0xf
lea eax, [esp + 0xc]
push eax
push dword [ebp + 4]
push dword [ebp + 8]
push dword [esp + 0x10]
call fcn.6b477110
add esp, 0x10
test eax, eax
je 0x6b47ff16
cmp eax, 0x51
jne 0x6b47ff78
mov ecx, dword [esp + 0xc]
or eax, ecx
mov edx, dword [esp + 0x148]
je 0x6b4800dc
mov eax, dword [ebp + 4]
sub eax, ecx
jne 0x6b4800d2
mov eax, dword [esp]
cmp byte [eax], 5
jne 0x6b47ff96
movzx ebx, byte [eax + 1]
test ebx, ebx
je 0x6b47ffd4
push ebx
push dword [esp + 0x140]
push str.Cant_complete_SOCKS5_connection_to__s.___d_
push edx
call fcn.6b476950
add esp, 0x10
mov eax, 0x19
cmp bl, 8
ja 0x6b4800ef
mov eax, dword [ebx*4 + 0x6b7330a0]
jmp 0x6b4800ef
push str.Failed_to_receive_SOCKS5_connect_request_ack.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0x10
jmp 0x6b4800ef
push str.SOCKS5_reply_has_wrong_version__version_should_be_5.
push edx
call fcn.6b476950
add esp, 8
mov eax, 2
jmp 0x6b4800ef
test esi, esi
jne 0x6b47fff7
cmp al, 1
jne 0x6b47fff7
push str.SOCKS5_GSSAPI_per_message_authentication_is_not_supported.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 5
jmp 0x6b4800ef
mov al, byte [eax + 3]
cmp al, 1
je 0x6b48001e
cmp al, 3
je 0x6b48002c
cmp al, 4
jne 0x6b480115
cmp dword [ebp + 0x4c8], 0
jne case.0x6b47f6a4.15
mov eax, 0x16
jmp 0x6b480047
cmp al, 0xff
mov esi, dword [esp + 0x148]
je 0x6b48012a
push str.Undocumented_SOCKS5_mode_attempted_to_be_used_by_server.
push esi
call fcn.6b476950
add esp, 8
mov eax, 0x20
jmp 0x6b4800ef
cmp dword [ebp + 0x4c8], 0
jne case.0x6b47f6a4.15
jmp 0x6b48013f
cmp dword [ebp + 0x4c8], 0
jne case.0x6b47f6a4.15
mov eax, dword [esp]
movzx eax, byte [eax + 4]
cmp al, 4
jb 0x6b48013f
add eax, 7
add eax, 0xfffffff6
mov dword [ebp + 4], eax
mov eax, dword [esp]
add eax, 0xa
mov dword [ebp + 8], eax
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0x10
je case.0x6b47f6a4.15
mov dword [eax], 0x10
lea eax, [esp + 0xc]
push eax
push dword [ebp + 4]
push dword [ebp + 8]
push dword [esp + 0x10]
call fcn.6b477110
add esp, 0x10
test eax, eax
je 0x6b48008b
cmp eax, 0x51
jne 0x6b4800fa
mov ecx, dword [esp + 0xc]
or eax, ecx
mov edx, dword [esp + 0x148]
je 0x6b4800dc
mov eax, dword [ebp + 4]
sub eax, ecx
jne 0x6b4800d2
mov eax, dword [edx + 0xc]
cmp dword [eax], 0x11
je case.0x6b47f6a4.4
mov dword [eax], 0x11
push str.SOCKS5_request_granted.
push dword [esp + 0x14c]
call fcn.6b4767f0
add esp, 8
mov eax, dword [esp + 0x14c]
mov dword [eax], 1
jmp 0x6b4800d8
mov dword [ebp + 4], eax
add dword [ebp + 8], ecx
xor eax, eax
jmp 0x6b4800ef
push str.connection_to_proxy_closed
push edx
call fcn.6b476950
add esp, 8
mov eax, 3
add esp, 0x120
pop esi
pop edi
pop ebx
pop ebp
ret
push str.Failed_to_receive_SOCKS5_connect_request_ack.
push dword [esp + 0x14c]
call fcn.6b476950
add esp, 8
mov eax, 0xd
jmp 0x6b4800ef
push str.SOCKS5_reply_has_wrong_address_type.
push edx
call fcn.6b476950
add esp, 8
mov eax, 1
jmp 0x6b4800ef
push str.No_authentication_method_was_acceptable.
push esi
call fcn.6b476950
add esp, 8
mov eax, 0xc
jmp 0x6b4800ef
mov eax, dword [esp + 0x148]
mov eax, dword [eax + 0xc]
cmp dword [eax], 0x11
jne 0x6b4800a9
jmp case.0x6b47f6a4.4