Function at 0x10053829
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xb4
mov eax, dword [esp + 0xb8]
push ebx
push ebp
mov ebp, dword [esp + 0xc4]
push esi
mov eax, dword [ebp + eax*4 + 0x1a8]
mov dword [esp + 0x68], eax
xor eax, eax
push edi
mov edi, dword [ebp]
mov dword [esp + 0x78], eax
mov dword [esp + 0x70], eax
mov eax, dword [edi + 0xa00]
mov ebx, str.rcmd
test eax, eax
cmovne ebx, eax
mov esi, ebx
mov dword [esp + 0x7c], ebx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x10053872
push 0x2f
push ebx
sub esi, ecx
call fcn.1005bd70
pop ecx
pop ecx
test eax, eax
je 0x1005389e
push ebx
call dword [0x1008d0a4]
mov ebx, eax
pop ecx
test ebx, ebx
jne 0x100538ff
push 0x1b
jmp 0x100542ee
mov ecx, dword [ebp + 0xc4]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100538a7
sub ecx, edx
lea eax, [ecx + 2]
add eax, esi
push eax
call dword [0x1008d098]
mov ebx, eax
pop ecx
test ebx, ebx
je 0x10053897
mov edx, dword [ebp + 0xc4]
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x8c], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100538d5
sub ecx, dword [esp + 0x8c]
push edx
push dword [esp + 0x80]
lea eax, [esi + 2]
push 0x10097a70
add eax, ecx
push eax
push ebx
call fcn.1002f9d1
add esp, 0x14
push 2
lea eax, [esp + 0x30]
mov dword [esp + 0xa8], eax
xor ecx, ecx
xor edx, edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x9c], eax
inc edx
lea eax, [esp + 0x44]
mov dword [esp + 0x8c], eax
mov dword [esp + 0xa4], edx
mov dword [esp + 0x98], edx
pop edx
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x68]
push eax
mov eax, dword [0x1009ad70]
push ecx
push ecx
push ecx
push ecx
push edx
push 0x10097a78
push ecx
mov dword [esp + 0xc0], ecx
mov dword [esp + 0x54], 2
mov dword [esp + 0x50], ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x44], ecx
mov dword [esp + 0xa8], 3
mov dword [esp + 0xa4], ecx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], ecx
call dword [eax + 0xc]
push str.AcquireCredentialsHandle
push eax
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
je 0x100539da
push str.Failed_to_acquire_credentials.
push edi
call fcn.100293e3
push ebx
call dword [0x1008d09c]
add esp, 0xc
lea eax, [esp + 0x64]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x10]
jmp 0x100542ec
mov eax, dword [esp + 0x70]
lea ecx, [esp + 0xa8]
push ecx
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x98]
push ecx
lea ecx, [esp + 0x44]
push ecx
xor edx, edx
push edx
lea ecx, [esp + 0xb0]
push ecx
push 0x10
push edx
push 0x116
push ebx
push eax
lea eax, [esp + 0x90]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x18]
cmp dword [esp + 0x34], 0
mov esi, eax
mov dword [esp + 0x70], esi
je 0x10053a41
push dword [esp + 0x34]
mov ecx, dword [0x1009ad70]
call dword [ecx + 0x40]
xor eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x2c], eax
push str.InitializeSecurityContext
push esi
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
jne 0x100542aa
cmp dword [esp + 0x18], eax
je 0x10053b26
push dword [esp + 0x18]
inc eax
mov byte [esp + 0x14], al
mov byte [esp + 0x15], al
call dword [sym.imp.WS2_32.dll_htons]
mov esi, dword [esp + 0x6c]
mov word [esp + 0x12], ax
lea eax, [esp + 0x24]
push eax
push 4
lea eax, [esp + 0x18]
push eax
push esi
push ebp
call fcn.10029967
add esp, 0x14
test eax, eax
jne 0x10053bfe
cmp dword [esp + 0x24], 4
jne 0x10053bfe
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x28]
push esi
push ebp
call fcn.10029967
add esp, 0x14
test eax, eax
jne 0x10053acc
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x24]
je 0x10053b2a
push str.Failed_to_send_SSPI_authentication_token.
push edi
call fcn.100293e3
push ebx
call dword [0x1008d09c]
add esp, 0xc
cmp dword [esp + 0x20], 0
je 0x10053af4
mov eax, dword [0x1009ad70]
push dword [esp + 0x20]
call dword [eax + 0x40]
cmp dword [esp + 0x34], 0
je 0x10053b07
push dword [esp + 0x34]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
lea eax, [esp + 0x64]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x10]
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
jmp 0x100542ec
mov esi, dword [esp + 0x6c]
cmp dword [esp + 0x20], 0
je 0x10053b42
push dword [esp + 0x20]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
and dword [esp + 0x20], 0
and dword [esp + 0x18], 0
cmp dword [esp + 0x34], 0
je 0x10053b5f
push dword [esp + 0x34]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
and dword [esp + 0x34], 0
and dword [esp + 0x2c], 0
cmp dword [esp + 0x70], 0x90312
jne 0x10053cad
lea eax, [esp + 0x28]
push eax
push 4
lea eax, [esp + 0x18]
push eax
push esi
push ebp
call fcn.1004904e
add esp, 0x14
test eax, eax
jne 0x10053c93
cmp dword [esp + 0x28], 4
jne 0x10053c93
mov al, byte [esp + 0x11]
cmp al, 0xff
je 0x10053c6e
xor ecx, ecx
inc ecx
cmp al, cl
jne 0x10053c39
push dword [esp + 0x12]
call dword [sym.imp.WS2_32.dll_ntohs]
movzx esi, ax
push esi
mov dword [esp + 0x30], esi
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x34], eax
test eax, eax
je 0x10053c35
lea ecx, [esp + 0x28]
push ecx
push dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x78]
push eax
push ebp
call fcn.1004904e
add esp, 0x14
test eax, eax
jne 0x10053c08
cmp dword [esp + 0x28], esi
jne 0x10053c08
lea eax, [esp + 0x38]
jmp 0x100539de
push str.Failed_to_send_SSPI_authentication_request.
jmp 0x10053ad1
push str.Failed_to_receive_SSPI_authentication_token.
push edi
call fcn.100293e3
push ebx
call dword [0x1008d09c]
add esp, 0xc
cmp dword [esp + 0x34], 0
je 0x10053c30
push dword [esp + 0x34]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push 7
pop esi
jmp 0x10053c5c
push 0x1b
jmp 0x10053c53
movzx eax, al
push eax
movzx eax, byte [esp + 0x14]
push eax
push str.Invalid_SSPI_authentication_response_type___u__u_.
push edi
call fcn.100293e3
add esp, 0x10
push 7
pop esi
push ebx
call dword [0x1008d09c]
pop ecx
lea eax, [esp + 0x64]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x10]
jmp 0x10054298
movzx eax, byte [esp + 0x10]
push 0xff
push eax
push str.User_was_rejected_by_the_SOCKS5_server___u__u_.
push edi
call fcn.100293e3
push ebx
call dword [0x1008d09c]
add esp, 0x14
jmp 0x10053b07
push str.Failed_to_receive_SSPI_authentication_response.
push edi
call fcn.100293e3
push ebx
call dword [0x1008d09c]
add esp, 0xc
jmp 0x10053b07
push ebx
call dword [0x1008d09c]
pop ecx
lea eax, [esp + 0x74]
push eax
xor eax, eax
inc eax
push eax
lea eax, [esp + 0x6c]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 8]
mov ecx, dword [0x1009ad70]
mov esi, eax
lea eax, [esp + 0x64]
push eax
call dword [ecx + 0x10]
push str.QueryCredentialAttributes
push esi
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
je 0x10053d11
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
push dword [esp + 0x74]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push str.Failed_to_determine_user_name.
jmp 0x100542e4
push dword [esp + 0x74]
push str.SOCKS5_server_authencticated_user__s_with_GSS_API._n
push edi
call fcn.10029490
mov eax, dword [0x1009ad70]
add esp, 0xc
push dword [esp + 0x74]
call dword [eax + 0x40]
xor eax, eax
inc eax
test byte [esp + 0x78], 0x10
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 2
je 0x10053d48
mov dl, 2
xor ebx, ebx
jmp 0x10053d59
test dword [esp + 0x78], 0x10000
push 0
pop ebx
movzx edx, bl
cmovne edx, eax
cmp dl, 1
mov eax, str.confidentiality
mov ecx, str.integrity
cmovne ecx, eax
test dl, dl
mov eax, 0x10097c90
cmovne eax, ecx
push eax
push str.SOCKS5_server_supports_GSS_API__s_data_protection._n
push edi
call fcn.10029490
add esp, 0xc
test dword [edi + 0xa90], 0x400
je 0x10053d97
xor eax, eax
inc eax
push eax
jmp 0x10053f88
lea eax, [esp + 0xb4]
push eax
push ebx
lea eax, [esp + 0x40]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x2c]
push str.QueryContextAttributes
push eax
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
je 0x10053dd7
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
push str.Failed_to_query_security_context_attributes.
jmp 0x100542e4
mov eax, dword [esp + 0xc0]
push eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 2
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x48], eax
test eax, eax
jne 0x10053e01
push 0x1b
jmp 0x10054297
xor eax, eax
inc eax
push eax
mov dword [esp + 0x50], eax
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x54], eax
test eax, eax
jne 0x10053e26
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
jmp 0x10053dfa
mov byte [eax], bl
mov eax, dword [esp + 0xbc]
push eax
mov dword [esp + 0x60], 9
mov dword [esp + 0x5c], eax
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x60], eax
test eax, eax
jne 0x10053e5d
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x54]
jmp 0x10053e1c
push ebx
lea eax, [esp + 0x84]
push eax
push reloc.WS2_32.dll_accept
lea eax, [esp + 0x44]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x64]
push str.EncryptMessage
push eax
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
je 0x10053ec6
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x54]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x60]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
push 0x100977e0
jmp 0x100542e4
mov eax, dword [esp + 0x58]
add eax, dword [esp + 0x4c]
add eax, dword [esp + 0x40]
push eax
mov dword [esp + 0x1c], eax
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x20], eax
test eax, eax
jne 0x10053f07
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x54]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x60]
jmp 0x10053e1c
push dword [esp + 0x40]
push dword [esp + 0x4c]
push eax
call fcn.1005b1c0
push dword [esp + 0x58]
mov eax, dword [esp + 0x50]
push dword [esp + 0x64]
add eax, dword [esp + 0x34]
push eax
call fcn.1005b1c0
mov eax, dword [esp + 0x64]
push dword [esp + 0x70]
add eax, dword [esp + 0x5c]
push dword [esp + 0x7c]
add eax, dword [esp + 0x40]
push eax
call fcn.1005b1c0
mov eax, dword [0x1009ad70]
add esp, 0x24
push dword [esp + 0x48]
call dword [eax + 0x40]
push dword [esp + 0x54]
mov eax, dword [0x1009ad70]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x44], ebx
call dword [eax + 0x40]
push dword [esp + 0x60]
mov eax, dword [0x1009ad70]
mov dword [esp + 0x58], ebx
mov dword [esp + 0x50], ebx
call dword [eax + 0x40]
push dword [esp + 0x18]
mov dword [esp + 0x64], ebx
mov dword [esp + 0x5c], ebx
call dword [sym.imp.WS2_32.dll_htons]
mov ebx, dword [esp + 0x6c]
mov word [esp + 0x12], ax
lea eax, [esp + 0x24]
push eax
push 4
pop esi
push esi
lea eax, [esp + 0x18]
push eax
push ebx
push ebp
call fcn.10029967
add esp, 0x14
test eax, eax
jne 0x10054275
cmp dword [esp + 0x24], esi
jne 0x10054275
test dword [edi + 0xa90], 0x400
je 0x10054006
mov byte [esp + 0x10], al
lea eax, [esp + 0x24]
push eax
xor eax, eax
inc eax
push eax
lea eax, [esp + 0x18]
push eax
push ebx
push ebp
call fcn.10029967
add esp, 0x14
test eax, eax
jne 0x10053ff4
inc eax
cmp dword [esp + 0x24], eax
je 0x10054046
push 0x10097838
push edi
call fcn.100293e3
pop ecx
pop ecx
jmp 0x10054295
lea eax, [esp + 0x24]
push eax
push dword [esp + 0x1c]
push dword [esp + 0x28]
push ebx
push ebp
call fcn.10029967
add esp, 0x14
test eax, eax
jne 0x1005426e
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x24]
jne 0x1005426e
cmp dword [esp + 0x20], 0
je 0x10054046
push dword [esp + 0x20]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
lea eax, [esp + 0x28]
push eax
push esi
lea eax, [esp + 0x18]
push eax
push ebx
push ebp
call fcn.1004904e
add esp, 0x14
test eax, eax
jne 0x10054264
cmp dword [esp + 0x28], esi
jne 0x10054264
mov al, byte [esp + 0x11]
cmp al, 0xff
jne 0x10054093
movzx eax, byte [esp + 0x10]
push 0xff
push eax
push 0x100978b4
push edi
call fcn.100293e3
add esp, 0x10
jmp 0x10054295
cmp al, 2
je 0x100540a8
movzx eax, al
push eax
movzx eax, byte [esp + 0x14]
push eax
push str.Invalid_SSPI_encryption_response_type___u__u_.
jmp 0x10054085
push dword [esp + 0x12]
call dword [sym.imp.WS2_32.dll_ntohs]
movzx esi, ax
push esi
mov dword [esp + 0x44], esi
call dword [0x1008d098]
pop ecx
mov dword [esp + 0x48], eax
test eax, eax
je 0x10053dfa
lea ecx, [esp + 0x28]
push ecx
push dword [esp + 0x44]
push eax
push ebx
push ebp
call fcn.1004904e
add esp, 0x14
test eax, eax
jne 0x10054255
cmp dword [esp + 0x28], esi
jne 0x10054255
xor ebx, ebx
inc ebx
test dword [edi + 0xa90], 0x400
jne 0x100541f0
xor ecx, ecx
lea eax, [esp + 0xb0]
push eax
push ecx
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x44]
push eax
mov eax, dword [0x1009ad70]
mov dword [esp + 0x94], 2
mov dword [esp + 0x54], 0xa
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x64], ecx
call dword [eax + 0x68]
push str.DecryptMessage
push eax
push ebp
call fcn.100542fa
add esp, 0xc
test eax, eax
je 0x10054195
cmp dword [esp + 0x48], 0
je 0x1005416b
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
cmp dword [esp + 0x54], 0
je 0x1005417e
push dword [esp + 0x54]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
push 0x1009794c
jmp 0x100542e4
cmp dword [esp + 0x4c], ebx
je 0x100541d4
push dword [esp + 0x4c]
push 0x1009797c
push edi
call fcn.100293e3
add esp, 0xc
cmp dword [esp + 0x48], 0
je 0x100541c0
push dword [esp + 0x48]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
cmp dword [esp + 0x54], 0
je 0x10054295
push dword [esp + 0x54]
jmp 0x1005428d
mov eax, dword [esp + 0x54]
push dword [esp + 0x48]
mov al, byte [eax]
mov byte [esp + 0x14], al
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push dword [esp + 0x54]
jmp 0x10054219
cmp dword [esp + 0x40], ebx
je 0x1005420e
push dword [esp + 0x40]
push str.Invalid_SSPI_encryption_response_length___lu_.
push edi
call fcn.100293e3
add esp, 0xc
push dword [esp + 0x48]
jmp 0x1005428d
mov ecx, dword [esp + 0x48]
push ecx
mov al, byte [ecx]
mov byte [esp + 0x14], al
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
mov al, byte [esp + 0x10]
test al, al
jne 0x10054230
mov ecx, str.out_GSS_API_data
jmp 0x1005423f
mov ecx, str._GSS_API_integrity
mov edx, str._GSS_API_confidentiality
cmp al, bl
cmovne ecx, edx
push ecx
push str.SOCKS5_access_with_s_protection_granted._n
push edi
call fcn.10029490
add esp, 0xc
xor eax, eax
jmp 0x100542ef
push str.Failed_to_receive_SSPI_encryption_type.
push edi
call fcn.100293e3
pop ecx
pop ecx
jmp 0x10054208
push str.Failed_to_receive_SSPI_encryption_response.
jmp 0x10053ff9
push str.Failed_to_send_SSPI_encryption_type.
jmp 0x1005427a
push str.Failed_to_send_SSPI_encryption_request.
push edi
call fcn.100293e3
cmp dword [esp + 0x28], 0
pop ecx
pop ecx
je 0x10054295
push dword [esp + 0x20]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push 7
pop esi
mov ecx, dword [0x1009ad70]
lea eax, [esp + 0x38]
push eax
call dword [ecx + 0x24]
mov eax, esi
jmp 0x100542ef
push ebx
call dword [0x1008d09c]
pop ecx
lea eax, [esp + 0x64]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x10]
lea eax, [esp + 0x38]
push eax
mov eax, dword [0x1009ad70]
call dword [eax + 0x24]
cmp dword [esp + 0x34], 0
je 0x100542df
push dword [esp + 0x34]
mov eax, dword [0x1009ad70]
call dword [eax + 0x40]
push str.Failed_to_initialise_security_context.
push edi
call fcn.100293e3
pop ecx
pop ecx
push 7
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb4
ret