Function at 0x6dc0ee40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc0]
cmp eax, dword [ecx + 8]
jbe 0x6dc0fdf2
sub esp, 0x140
mov eax, dword [esp + 0x144]
mov ecx, dword [eax + 0x10]
mov edx, dword [eax + 0x14]
lea ebx, [0x6dc76547]
mov dword [esp], ebx
mov dword [esp + 4], 3
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.6db9d810
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x6dc0fdc1
lea ecx, [0x6dc76547]
mov dword [esp], ecx
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
call fcn.6db9dd60
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x6dc0fda4
mov dword [esp + 0xac], eax
test byte [eax], al
mov dword [esp], eax
mov dword [esp + 4], 0x200000
call fcn.6db98740
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov dword [esp + 4], 0x200000
call fcn.6db988a0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
mov eax, dword [0x6dc14370]
mov dword [esp], eax
call fcn.6dac9f20
mov eax, dword [esp + 4]
lea ecx, [0x6dc52c40]
mov dword [esp + 0xd0], ecx
mov dword [esp + 0xd4], eax
lea eax, [0x6dc76331]
mov dword [esp], eax
mov dword [esp + 4], 2
lea edx, [esp + 0xd0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.6db6d460
mov eax, dword [esp + 0x14]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x44], ecx
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov edx, dword [0x6dc1436c]
mov dword [esp], edx
call fcn.6dac9f20
mov eax, dword [esp + 4]
lea ecx, [0x6dc52c40]
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xcc], eax
lea eax, [0x6dc76331]
mov dword [esp], eax
mov dword [esp + 4], 2
lea ecx, [esp + 0xc8]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.6db6d460
mov eax, dword [esp + 0x14]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x40], ecx
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
mov edx, dword [esp + 0x144]
mov ebx, dword [edx + 0x18]
mov ebp, dword [edx + 0x1c]
mov dword [esp], ebx
mov dword [esp + 4], ebp
call fcn.6daca030
mov eax, dword [esp + 8]
lea ecx, [0x6dc533c0]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], eax
lea eax, [0x6dc76331]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.6db6d460
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], 0
mov edx, dword [esp + 0xbc]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 8], edx
lea edx, [0x6dcb2f3c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], 1
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x40]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
call fcn.6db0ed50
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x144]
mov dword [edx + 0x24], ecx
mov ebx, dword [0x6ddaa8e0]
test ebx, ebx
jne 0x6dc0f114
mov dword [edx + 0x20], eax
jmp 0x6dc0f11c
lea edi, [edx + 0x20]
call fcn.6db235b0
lea edi, [esp + 0x100]
xor eax, eax
call fcn.6db237c0
lea ecx, [0x6dc76523]
mov dword [esp + 0x100], ecx
mov dword [esp + 0x104], 3
mov ecx, dword [0x6dd84e78]
mov ebx, dword [0x6dd84e7c]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x10c], ebx
lea ecx, [0x6dc7781b]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], 0xa
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], ebx
lea ecx, [0x6dc769f2]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], 6
mov ecx, dword [edx + 0x18]
mov ebx, dword [edx + 0x1c]
mov dword [esp + 0x128], ecx
mov dword [esp + 0x12c], ebx
lea ecx, [0x6dc77455]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], 9
mov ecx, dword [edx + 0x18]
mov ebx, dword [edx + 0x1c]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x13c], ebx
mov dword [esp], 0
lea ecx, [esp + 0x100]
mov dword [esp + 4], ecx
mov dword [esp + 8], 8
mov dword [esp + 0xc], 8
call fcn.6db0e960
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x144]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.6dc10590
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
test ebx, ebx
jne 0x6dc0fd5c
mov eax, dword [esp + 0x144]
mov ebx, dword [eax + 0x18]
mov ebp, dword [eax + 0x1c]
mov dword [esp], 0
lea esi, [0x6dc786fb]
mov dword [esp + 4], esi
mov dword [esp + 8], 0xc
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebp
lea ebx, [0x6dc767b6]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 5
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edx
lea ecx, [0x6dc76317]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], 1
call fcn.6db0ed50
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x78]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6db0efd0
mov eax, dword [0x6dd8406c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call fcn.6db43810
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
lea eax, [0x6dc76317]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 1
call fcn.6db0eb60
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
call fcn.6db5a560
lea edi, [esp + 0xec]
lea esi, [esp]
call fcn.6db23cae
lea edi, [esp]
lea esi, [esp + 0xec]
call fcn.6db23cae
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0xb2d05e00
call fcn.6db59b20
lea edi, [esp + 0xd8]
lea esi, [esp + 0x1c]
call fcn.6db23cae
mov eax, dword [esp + 0xac]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0xd8]
call fcn.6db23cae
call fcn.6db985c0
mov dword [esp], 0
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.6db0efd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xac]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.6db97f60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
test eax, eax
jne 0x6dc0fd14
lea eax, [0x6dc53580]
mov dword [esp], eax
mov dword [esp + 4], 0x5dc
mov dword [esp + 8], 0x5dc
call fcn.6db0b110
mov eax, dword [esp + 0xc]
mov dword [esp + 0xb4], eax
call fcn.6db5a560
lea edi, [esp + 0xd8]
lea esi, [esp]
call fcn.6db23cae
lea edi, [esp]
lea esi, [esp + 0xd8]
call fcn.6db23cae
mov dword [esp + 0x18], 1
mov dword [esp + 0x14], 0x2a05f200
call fcn.6db59b20
lea edi, [esp + 0xec]
lea esi, [esp + 0x1c]
call fcn.6db23cae
mov eax, dword [esp + 0xac]
mov dword [esp], eax
lea edi, [esp + 4]
lea esi, [esp + 0xec]
call fcn.6db23cae
call fcn.6db98440
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov ecx, dword [esp + 0xb4]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x5dc
mov dword [esp + 0xc], 0x5dc
call fcn.6db97d70
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x18]
test eax, eax
jne 0x6dc0fccc
cmp ecx, 0x5dc
ja 0x6dc0fde7
mov dword [esp], 0
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6db0ee10
mov eax, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], ecx
nop
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x6dc76317]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0xffffffff
call fcn.6dba74b0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
test eax, eax
je 0x6dc0fc79
mov dword [esp + 0x34], eax
mov dword [esp + 0x98], ecx
mov dword [esp], 0
lea eax, [0x6dc798c1]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x10
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
call fcn.6db0eb60
mov eax, dword [0x6dd847a4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6dc026c0
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp], 0
lea ebx, [0x6dc798d1]
mov dword [esp + 4], ebx
mov dword [esp + 8], 0x10
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.6db0eb60
mov eax, dword [0x6dd847a4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6dc026c0
mov eax, dword [esp + 0x98]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov ebx, dword [esp + 0x144]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov ecx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ebp
mov dword [esp + 0x14], esi
call fcn.6dc10a90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
test edx, edx
jne 0x6dc0fc31
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.6dc102c0
mov eax, dword [esp + 8]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0x144]
mov edx, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
lea ebp, [esp + 0x58]
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.6db0efd0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6dbd7e70
lea edi, [esp + 0x48]
lea esi, [esp + 0xc]
call fcn.6db23cb8
mov dword [esp + 0xc0], 0
mov dword [esp + 0xc4], 0
lea eax, [0x6dc50100]
mov dword [esp], eax
lea ecx, [esp + 0x48]
mov dword [esp + 4], ecx
call fcn.6dac9eb0
mov eax, dword [esp + 8]
lea ecx, [0x6dc50100]
mov dword [esp + 0xc0], ecx
mov dword [esp + 0xc4], eax
lea eax, [0x6dc76333]
mov dword [esp], eax
mov dword [esp + 4], 2
lea eax, [esp + 0xc0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.6db6d460
mov eax, dword [esp + 0x14]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x38], ecx
lea edx, [0x6dc54640]
mov dword [esp], edx
mov ebx, dword [esp + 0xa0]
mov dword [esp + 4], ebx
lea ebp, [0x6dc763b5]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 2
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [0x6dd84e78]
cmp dword [0x6dd84e7c], ecx
je 0x6dc0f785
mov eax, 1
jmp 0x6dc0f79d
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.6dac2c10
movzx eax, byte [esp + 0xc]
xor eax, 1
test al, al
je 0x6dc0f7af
mov edx, dword [esp + 0x144]
mov eax, 1
jmp 0x6dc0f818
lea eax, [0x6dc54640]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
lea edx, [0x6dc76ef0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 7
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0x144]
mov ebx, dword [edx + 0x18]
cmp dword [edx + 0x1c], ecx
je 0x6dc0f7f9
mov eax, 1
jmp 0x6dc0f818
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.6dac2c10
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0x144]
test al, al
jne 0x6dc0f882
lea eax, [0x6dc54640]
mov dword [esp], eax
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
lea ecx, [0x6dc7692d]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 5
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0x38]
cmp edx, ecx
je 0x6dc0f85f
mov eax, 1
jmp 0x6dc0f87e
mov dword [esp], eax
mov eax, dword [esp + 0xa8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.6dac2c10
movzx eax, byte [esp + 0xc]
xor eax, 1
test al, al
je 0x6dc0f8d5
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
lea eax, [0x6dc57880]
mov dword [esp], eax
call fcn.6dacc6f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x11
lea ecx, [0x6dc79ed3]
mov dword [eax], ecx
mov byte [esp + 0x148], 0
lea ecx, [0x6dcb3fd0]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov ecx, dword [esp + 0x34]
cmp ecx, 1
jle 0x6dc0fbbb
mov ecx, dword [esp + 0x98]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ecx + 8]
cmp edx, 1
jle 0x6dc0fbbb
mov eax, dword [esp + 0x144]
mov ebx, dword [eax + 0x20]
mov ebp, dword [eax + 0x24]
mov esi, dword [eax + 0x18]
mov edi, dword [eax + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
call fcn.6dc10a90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
test edx, edx
jne 0x6dc0fb73
mov dword [esp + 0xa8], eax
mov dword [esp + 0x38], ecx
mov dword [esp], 0
lea edx, str.Recv_from_proxy_paired:_SA_Eastern_Standard_TimeSA_Pacific_Standard_TimeSA_Western_Standard_TimeSetConsoleCursorPositionSetDefaultDllDirectoriesUS_Eastern_Standard_Timebad_defer_entry_in_panicbypassed_recovery_failedcant_scan_our_own_stackconnection_reset_by_peercreate_kcp_connect_fail:double_traceGCSweepStartfunction_not_implementedgcDrainN_phase_incorrecthash_of_unhashable_type_kcp_Accept_Stream_Fail:_level_2_not_synchronizedlink_number_out_of_rangemulticast_listener_querynot_supported_by_windowsout_of_streams_resourcespageAlloc:_out_of_memoryqueuefinalizer_during_GCrange_partially_overlapsreflect.Value.SetComplexresource_length_too_longrunqsteal:_runq_overflowruntime:_C_malloc_failedruntime:_VirtualFree_of_runtime:_found_obj_at__runtime:_markroot_index_runtime:_p.searchAddr__shard_sizes_do_not_matchspan_has_no_free_objectsstack_trace_unavailable_nstructure_needs_cleaningunpacking_Question.Classupdate_during_transition_bytes_failed_with_errno_to_unused_region_of_span2006_01_02T15:04:05Z07:002910383045673370361328125AUS_Central_Standard_TimeAUS_Eastern_Standard_TimeAfghanistan_Standard_TimeExpandEnvironmentStringsWFindNextVolumeMountPointWFindVolumeMountPointCloseGODEBUG:_can_not_enable__GetFinalPathNameByHandleWGetQueuedCompletionStatusGetSecurityDescriptorDaclGetSecurityDescriptorSaclGetSidIdentifierAuthorityInitiateSystemShutdownExWIsValidSecurityDescriptorKaliningrad_Standard_TimeMiddle_East_Standard_TimeNew_Zealand_Standard_TimeNorth_Korea_Standard_TimeNtQueryInformationProcessQueryInformationJobObjectSend_Message_To_Server_:_SetSecurityDescriptorDaclSetSecurityDescriptorSaclSouth_Sudan_Standard_TimeTransbaikal_Standard_TimeUS_Mountain_Standard_TimeUlaanbaatar_Standard_TimeUpdateProcThreadAttributeVladivostok_Standard_TimeW._Mongolia_Standard_Time_cgo_thread_start_missingallgadd:_bad_status_Gidlearena_already_initializedbad_status_in_shrinkstackbad_system_huge_page_sizechansend:_spurious_wakeupcheckdead:_no_m_for_timercheckdead:_no_p_for_timercontext_deadline_exceededduplicate_address_requestinconsistent_poll.fdMutexinvalid_cross_device_linkinvalid_network_interfacematrix_sizes_do_not_matchmissing_stack_in_newstackmissing_traceGCSweepStartmulticast_listener_reportno_answer_from_DNS_serverno_buffer_space_availableno_such_device_or_addressno_such_network_interfaceno_suitable_address_foundoperation_now_in_progressproxy_wait_already_pairedproxy_wait_direct_finish_releasep:_invalid_p_stateremaining_pointer_buffersresource_deadlock_avoidedruntime:_VirtualAlloc_of_runtime:_program_exceeds_runtimelock:_lock_countslice_bounds_out_of_rangesocket_type_not_supportedstartm:_p_has_runnable_gsstoplockedm:_not_runnableunexpected___in_addressunexpected___in_addressunexpected_fault_address_unexpected_key_value_type_using_unaddressable_value1455191522836685180664062572759576141834259033203125AcceptTCP_from_vnc_Fail_:_Bougainville_Standard_TimeCentral_Asia_Standard_TimeCertFindCertificateInStoreCertFreeCertificateContextE._Australia_Standard_TimeEkaterinburg_Standard_TimeFindFirstVolumeMountPointWFindNextChangeNotificationGetConsoleScreenBufferInfoGetFileInformationByHandleGetProcessWorkingSetSizeExGetSecurityDescriptorGroupGetSecurityDescriptorOwnerGetSystemWindowsDirectoryWKcpServer_recv_new_sessionLine_Islands_Standard_TimeNewfoundland_Standard_TimeNotifyServiceStatusChangeWPostQueuedCompletionStatusQueryFullProcessImageNameWQueryPerformanceFrequency
mov dword [esp + 4], edx
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.6db0eb60
mov eax, dword [0x6dd847a4]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.6dc026c0
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.6dc102c0
mov eax, dword [esp + 8]
mov dword [esp + 0x9c], eax
lea ecx, [0x6dc54640]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea edx, [0x6dc763b5]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 2
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [0x6dd84e78]
cmp dword [0x6dd84e7c], ecx
je 0x6dc0f9f6
mov eax, 1
jmp 0x6dc0fa0e
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
call fcn.6dac2c10
movzx eax, byte [esp + 0xc]
xor eax, 1
test al, al
je 0x6dc0fa20
mov edx, dword [esp + 0x144]
mov eax, 1
jmp 0x6dc0fa89
lea eax, [0x6dc54640]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
lea edx, [0x6dc76ef0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 7
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
mov edx, dword [esp + 0x144]
mov ebx, dword [edx + 0x18]
cmp dword [edx + 0x1c], ecx
je 0x6dc0fa6a
mov eax, 1
jmp 0x6dc0fa89
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.6dac2c10
movzx eax, byte [esp + 0xc]
xor eax, 1
mov edx, dword [esp + 0x144]
test al, al
jne 0x6dc0fb13
lea eax, [0x6dc54640]
mov dword [esp], eax
mov ecx, dword [esp + 0x9c]
mov dword [esp + 4], ecx
lea edx, [0x6dc766fb]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call fcn.6dad0800
mov eax, dword [esp + 0x10]
cmp dword [eax + 4], 1
je 0x6dc0facd
mov ecx, 1
jmp 0x6dc0fb0f
lea eax, [0x6dc54640]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
lea eax, [0x6dc766fb]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
call fcn.6dad0800
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 4]
mov eax, dword [eax]
test ecx, ecx
jbe 0x6dc0fdde
cmp byte [eax], 0x31
setne cl
test cl, cl
je 0x6dc0fb66
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
lea eax, [0x6dc57880]
mov dword [esp], eax
call fcn.6dacc6f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x12
lea ecx, [0x6dc7a6f5]
mov dword [eax], ecx
mov byte [esp + 0x148], 0
lea ecx, [0x6dcb3fd0]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov ecx, dword [esp + 0x144]
mov byte [ecx + 0x29], 1
jmp 0x6dc0fbbb
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
mov byte [esp + 0x148], 0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov ecx, dword [esp + 0xac]
mov dword [esp], ecx
lea edi, [esp + 4]
xor eax, eax
call fcn.6db237cb
call fcn.6db982c0
mov ecx, dword [0x6ddaa8e0]
test ecx, ecx
jne 0x6dc0fbf2
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x144]
mov dword [ecx + 0x2c], eax
jmp 0x6dc0fc08
mov ecx, dword [esp + 0x144]
lea edi, [ecx + 0x2c]
mov eax, dword [esp + 0xac]
call fcn.6db235b0
mov byte [ecx + 0x28], 1
mov byte [esp + 0x148], 1
mov dword [esp + 0x14c], 0
mov dword [esp + 0x150], 0
add esp, 0x140
ret
mov dword [esp + 0xbc], ebx
mov dword [esp + 0xa4], ebp
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
mov byte [esp + 0x148], 0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
lea eax, [0x6dc57880]
mov dword [esp], eax
call fcn.6dacc6f0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x1f
lea ecx, [0x6dc7f8b5]
mov dword [eax], ecx
mov byte [esp + 0x148], 0
lea ecx, [0x6dcb3fd0]
mov dword [esp + 0x14c], ecx
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xbc], edx
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
mov byte [esp + 0x148], 0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov dword [esp + 0xa4], edx
mov dword [esp + 0xbc], ecx
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
mov byte [esp + 0x148], 0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov dword [esp + 0xbc], ebp
mov dword [esp + 0xa4], esi
mov eax, dword [esp + 0xac]
mov dword [esp], eax
call fcn.6db98100
mov byte [esp + 0x148], 0
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x150], eax
add esp, 0x140
ret
mov byte [esp + 0x148], 0
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], ebx
add esp, 0x140
ret
mov byte [esp + 0x148], 0
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], ebx
add esp, 0x140
ret
xor eax, eax
mov ecx, eax
call fcn.6db23630
mov edx, 0x5dc
call fcn.6db23670
nop
call fcn.6db22180
jmp fcn.6dc0ee40