Function at 0x6dc06173
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
mov ebx, dword [esi + 0x80]
push edi
xor edi, edi
and eax, 0xf0ffffff
mov dword [ebp - 4], 0x25e5
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], edi
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x24], edi
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc061ca
test dword [eax + 0x1c], 0x400
jne 0x6dc1bfeb
lea eax, [esi + 0x40]
mov dword [ebp - 0x2c], eax
mov dword [eax], edi
mov eax, dword [esi + 0x14]
push 0xf0000000
push ebx
mov dword [esi + 0x4c], edi
mov dword [esi + 0x2c], edi
mov dword [ebp - 8], edi
mov dword [esi + 0x38], edi
mov dword [esi + 0x68], edi
mov dword [esi + 0x70], edi
mov dword [esi + 0x6c], edi
mov dword [esi + 0x74], edi
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x60], edi
mov dword [esi + 0x5c], edi
mov dword [esi + 0x54], edi
mov dword [esi + 0x3c], edi
mov dword [ebp - 0x38], eax
call sym.DNSAPI.dll_NetInfo_Clean
push 0xffff0000
push ebx
call fcn.6dc06776
mov eax, dword [esi + 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [0x6dc3a848]
xor edi, edi
cmp dword [ebp - 0x14], edi
jne 0x6dc1c019
cmp dword [ebp - 8], edi
jne 0x6dc0b8ac
cmp dword [ebp - 0x20], 1
je 0x6dc063d6
push esi
call fcn.6dc06675
mov dword [ebp - 0x10], eax
test eax, eax
je 0x6dc15440
mov eax, dword [esi + 0x3c]
test eax, eax
jne 0x6dc1c07d
mov edi, dword [ebp - 0x2c]
mov eax, dword [edi]
test eax, eax
jne 0x6dc1c08c
mov ecx, 0xf0ffffff
and dword [esi + 0x10], ecx
and dword [ebp - 0xc], ecx
mov eax, dword [esi + 0x10]
mov ecx, dword [ebp - 0x38]
xor edi, edi
lea ebx, [esi + 0x44]
mov dword [ebp - 0x30], edi
mov dword [ebx], edi
mov dword [esi + 0x48], edi
mov byte [ebp + 0xb], 0
mov dword [esi + 0x14], ecx
test eax, 0x400
jne 0x6dc06336
test byte [esi + 0x28], 0x10
je 0x6dc062a7
or dword [ebp - 0x24], 1
lea eax, [esi + 0x3c]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x10]
call fcn.6dc06b05
mov dword [ebp - 4], eax
test eax, eax
je 0x6dc062c8
cmp eax, 0x10d8
jne 0x6dc063d1
mov eax, dword [esi + 0x3c]
test eax, eax
jne 0x6dc1c09a
push esi
call fcn.6dc068d0
test eax, eax
jne 0x6dc182d3
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc062fa
test dword [eax + 0x1c], 0x400
jne 0x6dc1c0ca
test edi, edi
jne 0x6dc1c0e6
and dword [ebp - 0x28], 0
xor edx, edx
cmp edi, edx
jne 0x6dc1c0ed
mov ecx, dword [ebp - 0x30]
cmp ecx, edx
jne 0x6dc1c0f8
lea eax, [esi + 0x48]
push eax
push ebx
push dword [esi + 0x3c]
push dword [ebp - 0x28]
call fcn.6dc068f6
mov dword [ebp - 4], eax
test eax, eax
jne 0x6dc1c303
push dword [ebp - 0x28]
push dword [esi + 0x3c]
push dword [ebp - 0x10]
call fcn.6dc0670e
test edi, edi
jne 0x6dc1c138
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x80], eax
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [esi + 8], eax
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc0637d
test dword [eax + 0x1c], 0x4000
jne 0x6dc1c224
mov eax, dword [esi + 0x30]
or eax, dword [ebp - 0xc]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x78]
test eax, eax
jne 0x6dc1c241
cmp dword [esi + 0x20], 0
jne 0x6dc157a1
cmp word [esi + 0xc], 6
je 0x6dc157a1
push esi
call fcn.6dc06460
mov edi, eax
push edi
mov dword [ebp - 4], edi
call fcn.6dc0657e
test eax, eax
jne 0x6dc156cd
test byte [esi + 0x14], 0x20
jne 0x6dc1c26c
test edi, edi
jne 0x6dc0b848
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc063ea
test dword [eax + 0x1c], 0x4000
jne 0x6dc1c375
cmp dword [ebp - 4], 0
jne 0x6dc0ba38
push esi
call fcn.6dc06d3a
mov eax, dword [ebp - 4]
mov dword [esi + 0x4c], eax
test eax, eax
jne 0x6dc0ba4d
mov eax, dword [esi + 0x10]
and eax, 0x8000000
or eax, dword [ebp - 0xc]
mov dword [esi + 0x10], eax
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc0642f
test dword [eax + 0x1c], 0x400
jne 0x6dc1c3d0
mov eax, dword [esi + 0x3c]
test eax, eax
jne 0x6dc1c3f5
cmp dword [ebp - 0x14], 0
jne 0x6dc1c404
mov esi, dword [ebp - 0x2c]
mov eax, dword [esi]
test eax, eax
jne 0x6dc1c41a
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret 4
mov eax, dword [esi + 0x60]
test eax, 0x100
jne 0x6dc063d1
test al, 0x30
jne 0x6dc063d1
cmp dword [esi + 0x2c], 1
jne 0x6dc0b86c
test al, 5
jne 0x6dc063d1
test dword [ebp - 0xc], 0x8000000
mov edi, dword [ebp - 4]
jne 0x6dc1c286
cmp edi, 0x232b
jne 0x6dc0ba7e
cmp dword [ebp - 8], 1
jne 0x6dc0b89a
cmp edi, 0x25e5
jne 0x6dc15503
mov ebx, 0x251d
cmp edi, ebx
jne 0x6dc06221
jmp 0x6dc1c2c2
push 0xfff00000
push dword [esi + 0x80]
call sym.DNSAPI.dll_NetInfo_Clean
mov eax, dword [0x6dc3a848]
jmp 0x6dc0623a
cmp dword [ebp - 0x1c], 0
je 0x6dc063fa
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
jmp 0x6dc063fa
mov edx, dword [esi + 0x98]
test edx, edx
je 0x6dc0ba61
test byte [esi + 0x60], 0xa
jne 0x6dc154a7
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x6dc06408
test dword [eax + 0x1c], 0x10000000
je 0x6dc06408
jmp 0x6dc1c392
cmp edi, 0x251d
je 0x6dc0b888
cmp edi, 0x7b
je 0x6dc0b888
cmp edi, 0x232a
je 0x6dc0b888
cmp edi, 0x2329
je 0x6dc0b888
cmp edi, 0x232d
je 0x6dc0b888
cmp edi, 0x25e5
je 0x6dc0b888
cmp edi, 0x2521
je 0x6dc0b888
test byte [esi + 0x14], 0x10
je 0x6dc063d1
jmp 0x6dc1c29d
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
push 0x7b
pop ecx
cmp eax, ecx
je 0x6dc182dd
cmp dword [ebp - 0x20], 0
jne 0x6dc063d1
cmp dword [0x6dc393c4], 0
je 0x6dc063d1
cmp dword [0x6dc393c8], 0xffffffff
jne 0x6dc063d1
cmp dword [0x6dc3a85c], 2
jbe 0x6dc063d1
mov eax, dword [esi + 0x28]
test al, 0x10
je 0x6dc063d1
test al, 1
jne 0x6dc063d1
mov eax, dword [ebp - 0x34]
test byte [eax + 0x1c], 1
je 0x6dc063d1
jmp 0x6dc1c037
mov eax, dword [esi + 0x68]
mov ebx, dword [esi + 0x58]
movzx edi, word [esi + 0xc]
test eax, eax
je 0x6dc154d2
mov ecx, dword [esi + 0x6c]
test ecx, ecx
je 0x6dc154d2
test dword [esi + 0x10], 0x4000
mov dword [esi + 0x58], ecx
mov dword [esi + 0x4c], eax
jne 0x6dc15524
push esi
call edx
mov word [esi + 0xc], di
mov ecx, dword [esi + 0x70]
test ecx, ecx
jne 0x6dc182b6
mov eax, dword [ebp - 4]
mov dword [esi + 0x4c], eax
mov dword [esi + 0x58], ebx
mov word [esi + 0xc], di
jmp 0x6dc0ba61
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc1551c
test dword [eax + 0x1c], 0x4000
jne 0x6dc1c2a5
mov dword [ebp - 0x1c], edi
jmp 0x6dc06226
xor eax, eax
inc eax
mov word [esi + 0xc], ax
jmp 0x6dc154cb
mov eax, dword [esi + 0x14]
test al, 0x10
jne 0x6dc1c250
mov dword [esi + 0x54], edi
jmp 0x6dc063bf
or dword [esi + 0x14], 4
jmp 0x6dc063a6
mov eax, dword [esi + 0x74]
test eax, eax
je 0x6dc154dd
push esi
mov dword [esi + 0x58], eax
mov dword [esi + 0x4c], ecx
call dword [esi + 0x98]
jmp 0x6dc154dd
mov eax, dword [0x6dc3a848]
jmp 0x6dc06306
mov dword [ebp - 4], ecx
jmp 0x6dc063d1
call fcn.6dc16c80
push eax
movzx eax, word [esi + 0xc]
push eax
push dword [esi + 0x10]
mov eax, dword [0x6dc3a848]
push dword [esi + 4]
push esi
push 0x6dc04010
push 0x37
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc2b53e
jmp 0x6dc061ca
push dword [ebp - 0x14]
call sym.DNSAPI.dll_NetInfo_Free
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x80], eax
mov eax, dword [0x6dc3a848]
mov dword [ebp - 0x14], edi
jmp 0x6dc06231
push 0x6dc3afd8
push dword [esi + 4]
call fcn.6dc32c7a
test eax, eax
je 0x6dc063d1
xor ebx, ebx
push 0x6dc3afd8
lea edi, [esi + 0x174]
inc ebx
push edi
mov dword [ebp - 0x20], ebx
call fcn.6dc07239
test eax, eax
je 0x6dc1c2f7
mov dword [esi + 0x34], ebx
mov dword [esi + 0x30], 0x80000
mov dword [ebp - 0x10], edi
jmp 0x6dc06255
push eax
call fcn.6dc26e6b
and dword [esi + 0x3c], 0
jmp 0x6dc06260
push eax
call sym.DNSAPI.dll_DnsApiFree
and dword [edi], 0
jmp 0x6dc0626d
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
test ecx, ecx
je 0x6dc062d3
cmp dword [ecx + 4], 0
je 0x6dc062d3
mov eax, dword [ebp - 0xc]
and eax, 0xfdffffff
or eax, 0x5000000
mov dword [ebp - 0xc], eax
jmp 0x6dc062d3
push 0x6dc04010
push 0x38
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc23ea9
mov eax, dword [0x6dc3a848]
jmp 0x6dc062fa
xor edi, edi
jmp 0x6dc06302
cmp dword [edi + 0xc], edx
je 0x6dc06310
jmp 0x6dc1c106
cmp dword [ecx + 4], edx
jne 0x6dc1c106
cmp dword [ecx + 8], edx
je 0x6dc0631b
or dword [ebp - 0xc], 0x8000000
cmp eax, 0x6dc3a848
je 0x6dc1c12f
test dword [eax + 0x1c], 0x400
je 0x6dc1c12f
push 0x6dc04010
push 0x39
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc23ea9
or dword [esi + 0x14], 0x10
jmp 0x6dc0631b
cmp dword [edi + 0xc], 0
je 0x6dc0634c
or dword [esi + 0x14], 2
cmp dword [edi + 0x10], 0
je 0x6dc1c1e5
mov ebx, dword [ebp - 0x2c]
and dword [ebx], 0
push ebx
push dword [edi + 0x10]
push esi
call fcn.6dc2a3a9
mov ecx, dword [ebx]
test ecx, ecx
je 0x6dc1c1a0
cmp dword [ecx + 4], 0
je 0x6dc1c1a0
mov ecx, dword [0x6dc3a848]
cmp ecx, 0x6dc3a848
je 0x6dc1c19c
test dword [ecx + 0x1c], 0x400
je 0x6dc1c19c
mov edx, dword [edi + 0xc]
push dword [edx + 4]
push eax
push 0x6dc04010
push 0x3c
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.6dc28ddf
mov edi, dword [ebx]
jmp 0x6dc1c1e8
mov ecx, dword [0x6dc3a848]
cmp ecx, 0x6dc3a848
je 0x6dc1c1ca
test dword [ecx + 0x1c], 0x400
je 0x6dc1c1ca
push eax
push 0x6dc04010
push 0x3b
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.6dc242f2
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [esi + 0x2c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x267c
mov dword [esi + 8], eax
jmp 0x6dc06221
mov edi, dword [edi + 0xc]
test edi, edi
je 0x6dc0634c
cmp dword [edi + 4], 0
je 0x6dc0634c
push dword [ebp - 0x18]
push 1
push 0
push edi
call fcn.6dc117a6
mov dword [ebp - 0x14], eax
test eax, eax
je 0x6dc1c33a
mov dword [esi + 0x80], eax
and dword [eax + 0x1c], 0xeeffffff
jmp 0x6dc06355
push dword [ebp - 0x10]
push dword [ebp - 8]
push 0x6dc04010
push 0x3e
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc28e11
jmp 0x6dc0637d
push eax
call fcn.6dc031d0
and dword [esi + 0x78], 0
jmp 0x6dc06391
mov byte [ebp + 0xb], 1
test al, 0xc
jne 0x6dc063bf
push 0
push edi
push dword [esi + 0x3c]
call fcn.6dc2f629
jmp 0x6dc063bf
movzx eax, byte [ebp + 0xb]
neg eax
sbb eax, eax
push 1
and eax, edi
push eax
push dword [esi + 0x3c]
call fcn.6dc2f629
jmp 0x6dc063c9
cmp edi, 0x232b
je 0x6dc0b888
mov dword [esi + 0x170], edi
jmp 0x6dc0b87c
mov edi, dword [ebp - 4]
jmp 0x6dc0b888
push edi
push 0x6dc04010
push 0x3f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc242f2
mov eax, dword [0x6dc3a848]
jmp 0x6dc1551c
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc1c2ef
test dword [eax + 0x1c], 0x4000
je 0x6dc1c2ef
push ebx
push 0x6dc04010
push 0x40
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc242f2
mov eax, dword [0x6dc3a848]
mov dword [ebp - 0x1c], ebx
jmp 0x6dc06226
mov dword [ebp - 4], 0x7b
jmp 0x6dc063d1
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc063ea
test dword [eax + 0x1c], 0x400
je 0x6dc063d6
push dword [ebp - 4]
push 0x6dc04010
push 0x3a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc242f2
jmp 0x6dc063d1
mov dword [ebp - 4], 0xe
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc0ba38
test dword [eax + 0x1c], 0x400
je 0x6dc063d6
push 0x6dc04010
push 0x3d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc23ea9
jmp 0x6dc063d1
push dword [ebp - 8]
push dword [ebp - 4]
push 0x6dc04010
push 0x41
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc28ddf
jmp 0x6dc063ea
mov eax, dword [0x6dc3a848]
cmp eax, 0x6dc3a848
je 0x6dc1c3bc
test dword [eax + 0x1c], 0x400
je 0x6dc1c3bc
push dword [ebp - 4]
push 0x6dc04010
push 0x42
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc242f2
and dword [esi + 0x58], 0
mov eax, 0x267c
mov dword [ebp - 4], eax
mov dword [esi + 0x4c], eax
jmp 0x6dc06408
call fcn.6dc16c80
push eax
push dword [ebp - 4]
mov eax, dword [0x6dc3a848]
push 0x6dc04010
push 0x43
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.6dc28ddf
jmp 0x6dc0642f
push eax
call fcn.6dc26e6b
and dword [esi + 0x3c], 0
jmp 0x6dc0643a
push dword [ebp - 0x14]
call sym.DNSAPI.dll_NetInfo_Free
mov eax, dword [ebp - 0x18]
mov dword [esi + 0x80], eax
jmp 0x6dc06444
push eax
call sym.DNSAPI.dll_DnsApiFree
and dword [esi], 0
jmp 0x6dc06451