Function at 0x401800
Capabilities:
Create thread
Get socket status
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x1c4
mov eax, dword [0x406004]
xor eax, esp
mov dword [esp + 0x1c0], eax
push ebx
mov ebx, dword [ebp + 0xc]
lea eax, [esp + 0x30]
push esi
push edi
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
test eax, eax
je 0x401844
push str.____Windows_WSAStartup_failed
call esi
add esp, 4
mov eax, 0x406444
nop dword [eax]
mov dword [eax - 4], 0xffffffff
mov dword [eax], 0xffffffff
mov dword [eax + 4], 0
add eax, 0x10
cmp eax, 0x40a2c4
jl 0x401850
push str.______________________n
mov dword [0x40601c], 1
call fcn.00401040
add esp, 4
push str.______________n
call fcn.00401040
add esp, 4
push str._______________n
call fcn.00401040
add esp, 4
push str._________________n
call fcn.00401040
add esp, 4
push 0x40424c
call fcn.00401040
add esp, 4
push str._____________________n
call fcn.00401040
add esp, 4
push str._________________________Error_Report_github_P001
call fcn.00401040
add esp, 4
push 0x4042b0
call fcn.00401040
mov ecx, dword [ebp + 8]
sub esp, 0xc
mov edx, ebx
call fcn.00401430
add esp, 0x10
mov dword [0x40a360], eax
cmp eax, 0xffffffff
je 0x401b0f
mov edi, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atol]
add eax, 0xffffff9c
cmp eax, 0x12
ja case.0x40191a.108
movzx eax, byte [eax + 0x401e34]
mov esi, dword [0x40a344]
jmp dword [eax*4 + 0x401e10]
push str.yuze.0.1.0
push str._nVERSION_:__s__n_n
call fcn.00401040
add esp, 8
jmp 0x401aeb
mov ecx, esi
mov eax, str.s_server
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401960
test dl, dl
je 0x40195c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401960
add eax, 2
add ecx, 2
test dl, dl
jne 0x401940
xor eax, eax
jmp 0x401965
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401978
mov dword [0x40a34c], 1
jmp 0x401aeb
mov ecx, esi
mov eax, str.r_server
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4019a0
test dl, dl
je 0x40199c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4019a0
add eax, 2
add ecx, 2
test dl, dl
jne 0x401980
xor eax, eax
jmp 0x4019a5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4019b8
mov dword [0x40a34c], 2
jmp 0x401aeb
mov ecx, esi
mov eax, str.yuze_listen
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x4019e0
test dl, dl
je 0x4019dc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x4019e0
add eax, 2
add ecx, 2
test dl, dl
jne 0x4019c0
xor eax, eax
jmp 0x4019e5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x4019f8
mov dword [0x40a34c], 3
jmp 0x401aeb
mov ecx, esi
mov eax, str.yuze_tran
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401a20
test dl, dl
je 0x401a1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401a20
add eax, 2
add ecx, 2
test dl, dl
jne 0x401a00
xor eax, eax
jmp 0x401a25
sbb eax, eax
or eax, 1
test eax, eax
jne 0x401a38
mov dword [0x40a34c], 4
jmp 0x401aeb
mov ecx, esi
mov eax, str.yuze_slave
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x401a60
test dl, dl
je 0x401a5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x401a60
add eax, 2
add ecx, 2
test dl, dl
jne 0x401a40
xor eax, eax
jmp 0x401a65
sbb eax, eax
or eax, 1
test eax, eax
jne case.0x40191a.103
mov dword [0x40a34c], 5
jmp 0x401aeb
push 0xa
push 0
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
add esp, 0xc
mov dword [0x40a348], eax
jmp 0x401aeb
mov ecx, dword [0x40a344]
mov edx, 0x40a2e0
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x401a97
mov byte [0x40a343], al
jmp 0x401aeb
push dword [0x40a344]
call edi
mov dword [0x40a350], eax
jmp 0x401ae8
mov ecx, dword [0x40a344]
mov edx, 0x40a380
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x401ac7
mov byte [0x40a3e3], al
jmp 0x401aeb
push dword [0x40a344]
call edi
mov dword [0x40a364], eax
add esp, 4
mov ecx, dword [ebp + 8]
sub esp, 0x10
mov edx, ebx
call fcn.00401430
add esp, 0x10
mov dword [0x40a360], eax
cmp eax, 0xffffffff
jne 0x401901
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
mov eax, dword [0x40a34c]
dec eax
cmp eax, 4
ja case.default.0x401b1e
jmp dword [eax*4 + 0x401e48]
mov eax, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
push str.___no_time_to_help
call eax
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov eax, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
push str.____No_input_Check_action
call eax
add esp, 4
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov edi, dword [0x40a348]
mov ecx, edi
call fcn.00402710
mov esi, eax
push edi
test esi, esi
jns 0x401b7c
push str.____Error_____Unable_to_start_server_on_port__d._n
call fcn.00401040
add esp, 8
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push str.___Create_socketListenServer_Success_0.0.0.0:_d_____yuze_____socksV5_server_n
call fcn.00401040
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
add esp, 8
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
nop word [eax + eax]
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x10
push eax
lea eax, [esp + 0x1c]
push eax
push esi
call dword [sym.imp.WS2_32.dll_accept]
cmp eax, 0xffffffff
jne 0x401bdc
call edi
cmp dword [eax], 4
je 0x401ba0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.00402fa7
mov esp, ebp
pop ebp
ret
push 0
push 0
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push eax
push 0x4026b0
push 0
push 0
call ebx
jmp 0x401ba0
mov edx, dword [0x40a350]
call fcn.00402960
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.00402fa7
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x40a364]
mov eax, dword [0x40a350]
push ecx
push eax
push str.___Port_Forwarding_0.0.0.0:_d_____yuze_____0.0.0.0:_d_n
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], eax
call fcn.00401040
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x1c]
add esp, 0xc
push 0
push 0
push eax
push 0x4020e0
push 0
push 0
call esi
test eax, eax
jns 0x401c80
push dword [esp + 0x10]
push str.Error:______d_start_server_n
call fcn.00401040
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.00402fa7
mov esp, ebp
pop ebp
ret
push 0
push 0
lea eax, [esp + 0x1c]
push eax
push 0x4021d0
push 0
push 0
call esi
test eax, eax
jns 0x401c9e
push dword [esp + 0x14]
jmp 0x401c5c
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x2710
call esi
jmp 0x401ca4
mov eax, dword [0x40a364]
mov esi, dword [0x40a350]
push eax
push 0x40a380
push esi
push str.___Proxy_forwart_to_RemoteHost_0.0.0.0:_d_____yuze______s:_d_n
mov dword [esp + 0x20], eax
call fcn.00401040
add esp, 0x10
mov ecx, esi
call fcn.00402710
mov edi, eax
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
lea ecx, [edi + 1]
mov ebx, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x3c
push eax
push 0
push 0
lea eax, [esp + 0x44]
mov dword [esp + 0x28], 0
push eax
push ecx
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], 1
call dword [sym.imp.WS2_32.dll_select]
test eax, eax
js 0x401dc5
jne 0x401d32
push str.____yuze_tran__
call esi
add esp, 4
lea ecx, [edi + 1]
jmp 0x401ce8
lea eax, [esp + 0x38]
push eax
push edi
call dword [sym.imp.WS2_32.dll___WSAFDIsSet]
lea ecx, [edi + 1]
test eax, eax
je 0x401ce8
nop word [eax + eax]
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x10
push eax
lea eax, [esp + 0x2c]
push eax
push edi
call dword [sym.imp.WS2_32.dll_accept]
mov esi, eax
cmp esi, 0xffffffff
jne 0x401d79
call ebx
cmp dword [eax], 4
je 0x401d50
or esi, esi
mov edx, dword [esp + 0x10]
mov ecx, 0x40a380
call fcn.004027c0
mov ebx, eax
cmp ebx, 0xffffffff
je 0x401db5
mov ecx, esi
call fcn.00402c80
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
lea ecx, [edi + 1]
cmp eax, 0xffffffff
je 0x401ce2
mov edx, ebx
mov ecx, eax
call fcn.00402d10
jmp 0x401cd9
or ecx, 0xffffffff
call fcn.00402940
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x404470
call esi
mov ecx, dword [esp + 0x1d0]
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00402fa7
mov esp, ebp
pop ebp
ret
push dword [0x40a364]
mov edx, dword [0x40a350]
push ecx
call fcn.00401e60
jmp 0x401c66
push str.____No_input__Learn_more_to_use
call esi
add esp, 4
push 1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov edx, 0xdb00401a
sbb al, byte [eax]
and eax, 0x7500401b
sbb al, byte [eax]
cmp byte [ecx], bl
inc eax
add byte [edx - 0x54ffbfe6], cl
sbb al, byte [eax]
and dword [ecx], ebx
inc eax
add byte [ebx + ebx], bh
inc eax
add byte [eax], al
add dword [eax], ecx
or byte [edx], al
or byte [eax], cl
or byte [ebx], al
add al, 8
or byte [eax], cl
or byte [0x7080806], al
nop
push ebx
sbb eax, dword [eax]
neg byte [ebx]
inc eax
add byte [eax], bl
sbb al, 0x40
add byte [ebp - 0x19ffbfe4], ch
sbb eax, 0xcccc0040
int3