Function at 0x519e10
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x70
mov edi, dword [ebp + 0x18]
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x7aa024]
xor ecx, ebp
mov dword [esp + 0x68], ecx
mov ebx, dword [edi + 0xc]
mov ecx, dword [ebx + 0x98]
mov dword [esp + 0x10], ecx
mov edx, dword [edi + 0x8fc]
mov esi, dword [ebx + eax*4 + 0x148]
xor eax, eax
dec eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], 0
mov eax, dword [ebx]
dec eax
mov ecx, dword [ebp + 0x1c]
cmp eax, 0x10
mov dword [esp + 0xc], edx
jb 0x519e6f
cmp byte [ecx], 0
je 0x519ec1
cmp eax, 0xd
ja case.0x519e78.1
jmp dword [eax*4 + 0x752440]
push dword [ebx + 0xc4]
mov eax, dword [ebp + 0xc]
push eax
push edi
call fcn.004ffa00
add esp, 0xc
mov dword [esp + 0x1c], eax
test eax, eax
je 0x51a282
mov dword [edi + 0x9bc], eax
mov byte [edi + 0x9d0], 1
push dword [ebp + 0xc]
push str.Hostname__s_was_found
push edi
call fcn.00514fc0
add esp, 0xc
jmp 0x519f95
mov dword [ebx], 1
mov dword [esp + 8], esi
mov byte [ebx + 0x100], 1
cmp byte [ebx + 0x258], 0
mov esi, dword [esp + 0x10]
mov edx, dword [ebp + 0xc]
je 0x519f08
cmp esi, 6
mov eax, 0x7461a3
mov ecx, 0x743187
cmove ecx, eax
push dword [ebp + 0x10]
push edx
push ecx
push str.SOCKS4_s:_connecting_to_HTTP_proxy__s_port__d
push edi
call fcn.00514fc0
mov edx, dword [ebp + 0xc]
add esp, 0x14
mov eax, dword [ebp + 0x10]
push eax
push edx
push str.SOCKS4_communication_to__s:_d
push edi
call fcn.00514fc0
add esp, 0x10
mov edx, dword [esp + 0xc]
mov word [edx], 0x104
mov eax, dword [ebp + 0x10]
mov byte [edx + 2], ah
mov byte [edx + 3], al
cmp esi, 6
jne 0x519f4d
mov eax, dword [edi + 0xc]
cmp dword [eax], 9
mov esi, dword [esp + 8]
je case.0x519e78.8
mov dword [eax], 9
jmp case.0x519e78.8
lea eax, [esp + 0x1c]
push eax
push 0
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call fcn.004fff90
add esp, 0x14
cmp eax, 0xffffffff
mov esi, dword [esp + 8]
je 0x519fde
cmp eax, 1
jne 0x519f95
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xa
je 0x519f7f
mov dword [eax], 0xa
push dword [ebp + 0xc]
push str.SOCKS4_non_blocking_resolve_of__s
push edi
call fcn.00514fc0
add esp, 0xc
jmp 0x51a2b4
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xb
je case.0x519e78.10
mov dword [eax], 0xb
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x519fcd
mov dword [esp + 8], esi
mov esi, dword [ecx]
test esi, esi
mov eax, dword [ebp + 0xc]
je 0x519fc5
cmp dword [esi + 4], 2
je 0x519fe8
mov esi, dword [esi + 0x1c]
test esi, esi
jne 0x519fb8
push eax
push str.SOCKS4_connection_to__s_not_supported
jmp 0x519fd5
push dword [ebp + 0xc]
push str.Failed_to_resolve___s__for_SOCKS4_connect.
push edi
call fcn.00515170
add esp, 0xc
mov esi, 0x1b
jmp 0x51a2b6
pcmpeqd xmm0, xmm0
lea edi, [esp + 0x20]
movdqa xmmword [edi + 0x30], xmm0
movdqa xmmword [edi + 0x20], xmm0
movdqa xmmword [edi + 0x10], xmm0
movdqa xmmword [edi], xmm0
push 0x40
push edi
push esi
call fcn.004ff910
add esp, 0xc
mov eax, dword [esi + 0x18]
mov cl, byte [eax + 4]
mov esi, dword [esp + 0xc]
mov byte [esi + 4], cl
mov cl, byte [eax + 5]
mov byte [esi + 5], cl
mov cl, byte [eax + 6]
mov byte [esi + 6], cl
mov al, byte [eax + 7]
mov byte [esi + 7], al
push edi
mov edi, dword [ebp + 0x18]
push str.SOCKS4_connect_to_IPv4__s__locally_resolved_
push edi
call fcn.00514fc0
add esp, 0xc
push dword [esp + 0x1c]
push edi
call fcn.00500440
mov edx, esi
add esp, 8
mov esi, dword [esp + 8]
mov dword [esp + 8], esi
mov edi, dword [ebp + 8]
mov eax, edx
lea esi, [edx + 8]
mov byte [edx + 8], 0
test edi, edi
je 0x51a090
push edi
call fcn.0066b230
add esp, 4
mov edx, dword [ebp + 0x18]
mov ecx, dword [edx + 0x4e8]
add ecx, 0xfffffff8
cmp eax, ecx
jae 0x51a1b6
inc eax
push eax
push edi
push esi
call fcn.00650080
add esp, 0xc
push esi
call fcn.0066b230
add esp, 4
mov esi, eax
add esi, 9
cmp dword [esp + 0x10], 6
jne 0x51a0df
mov eax, dword [esp + 0xc]
mov dword [eax + 4], 0x1000000
mov eax, dword [ebp + 0xc]
push eax
call fcn.0066b230
add esp, 4
mov edi, eax
inc edi
cmp edi, 0xff
ja 0x51a26b
mov eax, dword [esp + 0xc]
add eax, esi
push dword [ebp + 0xc]
push eax
call fcn.0066af10
add esp, 8
add esi, edi
mov edi, dword [ebp + 0x18]
mov eax, dword [esp + 0xc]
mov dword [ebx + 8], eax
mov dword [ebx + 4], esi
mov eax, dword [edi + 0xc]
cmp dword [eax], 0xe
mov esi, dword [esp + 8]
je case.0x519e78.13
mov dword [eax], 0xe
lea eax, [esp + 0x14]
push eax
push dword [ebx + 4]
push dword [ebx + 8]
push esi
push edi
call fcn.00515520
add esp, 0x14
test eax, eax
je 0x51a120
cmp eax, 0x51
jne 0x51a1ce
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 4]
sub ecx, eax
jne 0x51a1e6
mov dword [ebx + 4], 8
mov edx, dword [esp + 0xc]
mov dword [ebx + 8], edx
mov eax, dword [edi + 0xc]
cmp dword [eax], 4
je case.0x519e78.3
mov dword [eax], 4
lea eax, [esp + 0x18]
push eax
push dword [ebx + 4]
push dword [ebx + 8]
push esi
call fcn.005159e0
add esp, 0x10
test eax, eax
je 0x51a16c
cmp eax, 0x51
jne 0x51a1f1
mov ecx, dword [esp + 0x18]
or eax, ecx
je 0x51a213
mov eax, dword [ebx + 4]
sub eax, ecx
jne 0x51a2ae
mov eax, dword [edi + 0xc]
cmp dword [eax], 0x11
mov edx, dword [esp + 0xc]
je case.0x519e78.1
mov dword [eax], 0x11
cmp byte [edx], 0
je 0x51a22b
push str.SOCKS4_reply_has_wrong_version__version_should_be_0.
push edi
call fcn.00515170
add esp, 8
mov esi, 2
jmp 0x51a2b6
push str.Too_long_SOCKS_proxy_user_name__cant_use_
push edx
call fcn.00515170
add esp, 8
mov esi, 0xb
jmp 0x51a2b6
push str.Failed_to_send_SOCKS4_connect_request.
push edi
call fcn.00515170
add esp, 8
mov esi, 0x1d
jmp 0x51a2b6
mov dword [ebx + 4], ecx
add dword [ebx + 8], eax
jmp 0x51a2b4
push eax
call fcn.0051c920
add esp, 4
push eax
push str.SOCKS4:_Failed_receiving_connect_request_ack:__s
push edi
call fcn.00515170
add esp, 0xc
mov esi, 0xf
jmp 0x51a2b6
push str.connection_to_proxy_closed
push edi
call fcn.00515170
add esp, 8
mov esi, 3
jmp 0x51a2b6
movzx eax, byte [edx + 1]
lea ecx, [eax - 0x5a]
cmp ecx, 3
ja case.default.0x51a23b
jmp dword [ecx*4 + 0x752478]
cmp dword [esp + 0x10], 6
mov eax, 0x7461a3
mov ecx, 0x743187
cmove ecx, eax
push ecx
push str.SOCKS4_s_request_granted.
push edi
call fcn.00514fc0
add esp, 0xc
mov eax, dword [ebp + 0x1c]
mov byte [eax], 1
jmp 0x51a2b4
push str.SOCKS4:_too_long_host_name
push dword [ebp + 0x18]
call fcn.00515170
add esp, 8
mov esi, 9
jmp 0x51a2b6
mov dword [esp + 8], esi
lea esi, [esp + 0x1c]
push esi
push edi
call fcn.005003e0
add esp, 8
mov ecx, dword [esi]
mov esi, dword [esp + 8]
test ecx, ecx
jne 0x519fab
test eax, eax
mov esi, 0x1b
cmove esi, eax
jmp 0x51a2b6
mov dword [ebx + 4], eax
add dword [ebx + 8], ecx
xor esi, esi
mov ecx, dword [esp + 0x68]
xor ecx, ebp
call fcn.0064d372
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movzx ecx, word [edx + 2]
rol cx, 8
movzx ecx, cx
mov ebx, edx
movzx edx, byte [edx + 7]
movzx esi, byte [ebx + 6]
movzx edi, byte [ebx + 5]
movzx ebx, byte [ebx + 4]
push eax
push ecx
push edx
push esi
push edi
push ebx
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___Unknown.
push dword [ebp + 0x18]
call fcn.00515170
add esp, 0x20
mov esi, 0x1f
jmp 0x51a2b6
movzx eax, word [edx + 2]
rol ax, 8
movzx eax, ax
movzx ecx, byte [edx + 7]
mov esi, edx
movzx edx, byte [edx + 6]
movzx ebx, byte [esi + 5]
movzx edi, byte [esi + 4]
push 0x5b
push eax
push ecx
push edx
push ebx
push edi
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_or_failed.
push dword [ebp + 0x18]
call fcn.00515170
add esp, 0x20
mov esi, 0x1a
jmp 0x51a2b6
movzx eax, word [edx + 2]
rol ax, 8
movzx eax, ax
movzx ecx, byte [edx + 7]
mov esi, edx
movzx edx, byte [edx + 6]
movzx ebx, byte [esi + 5]
movzx edi, byte [esi + 4]
push 0x5c
push eax
push ecx
push edx
push ebx
push edi
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_because_SOCKS_server_cannot_connect_to_identd_on_the_client.
push dword [ebp + 0x18]
call fcn.00515170
add esp, 0x20
mov esi, 7
jmp 0x51a2b6
movzx eax, word [edx + 2]
rol ax, 8
movzx eax, ax
movzx ecx, byte [edx + 7]
mov esi, edx
movzx edx, byte [edx + 6]
movzx ebx, byte [esi + 5]
movzx edi, byte [esi + 4]
push 0x5d
push eax
push ecx
push edx
push ebx
push edi
push str.Cant_complete_SOCKS4_connection_to__d._d._d._d:_d.___d___request_rejected_because_the_client_program_and_identd_report_different_user_ids.
push dword [ebp + 0x18]
call fcn.00515170
add esp, 0x20
mov esi, 8
jmp 0x51a2b6