Function at 0x6a5d8eb0
Capabilities:
Link many functions at runtime

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
movdqa xmm0, xmmword [0x6a68b210]
lea rax, [0x6a68f690]
mov r8d, 0x331
mov qword [0x6a68f3e8], rax
lea rax, [0x6a68f3d0]
movaps xmmword [0x6a68f3d0], xmm0
movdqa xmm0, xmmword [0x6a68b220]
mov word [0x6a68f3e0], r8w
movaps xmmword [0x6a68f200], xmm0
mov qword [0x6a68f218], rax
mov byte [0x6a68f210], 0x16
call fcn.6a5cb770
lea rcx, [0x6a68b0b0]
mov rbx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rbx
test rax, rax
mov rsi, rax
mov qword [0x6a68e3f8], rax
je 0x6a5d9250
lea rdx, str.RtlAllocateHeap
mov rcx, rax
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rdi
test rax, rax
je 0x6a5d9200
mov qword [0x6a68f600], rax
call fcn.6a5cc2f0
lea rcx, [0x6a68b0f0]
call rbx
test rax, rax
mov rsi, rax
mov qword [0x6a68e400], rax
je 0x6a5d9260
lea rdx, str.ShowWindow
mov rcx, rax
call rdi
test rax, rax
je 0x6a5d91e0
mov rdx, qword [0x6a68b9a0]
lea rcx, [0x6a68b130]
mov qword [rdx], rax
call rbx
test rax, rax
mov rsi, rax
mov qword [0x6a68e408], rax
je 0x6a5d9290
lea rdx, str.GetConsoleWindow
mov rcx, rax
call rdi
test rax, rax
je 0x6a5d9220
mov rdx, qword [0x6a68b9b0]
mov ecx, 0x110
mov byte [0x6a68e450], 1
movdqa xmm0, xmmword [0x6a68b1f0]
mov word [0x6a68f760], cx
lea rcx, [0x6a68f750]
mov qword [0x6a68e458], 0
mov byte [0x6a68e480], 1
mov qword [rdx], rax
mov rax, qword [0x6a68ba40]
mov edx, 0x112
mov qword [0x6a68e488], 0x3c0
mov qword [0x6a68e440], 2
mov byte [0x6a68e420], 2
mov word [rax + 0x10], dx
lea rdx, [0x6a68f510]
movups xmmword [rax], xmm0
movdqa xmm0, xmmword [0x6a68b200]
mov qword [0x6a68f768], rdx
lea rdx, str.skey
movq xmm1, rdx
movaps xmmword [0x6a68f750], xmm0
movq xmm0, rcx
lea rdx, [0x6a68e480]
punpcklqdq xmm0, xmm1
movaps xmmword [0x6a68e460], xmm0
lea rcx, [rdx - 0x30]
movq xmm2, rdx
mov qword [rax + 0x18], 0
lea rdx, [0x6a689830]
movq xmm0, rcx
lea rcx, [0x6a68f240]
movq xmm3, rdx
punpcklqdq xmm0, xmm2
movaps xmmword [0x6a68e4b0], xmm0
lea rdx, [0x6a68e4b0]
movq xmm0, rcx
mov qword [0x6a68e448], rdx
lea rdx, [0x6a68e420]
punpcklqdq xmm0, xmm3
mov qword [rax + 0x20], rdx
lea rcx, [0x6a68b170]
movaps xmmword [0x6a68e490], xmm0
call rbx
test rax, rax
mov rsi, rax
mov qword [0x6a68e4c0], rax
je 0x6a5d9240
lea rdx, str.GetSystemTimeAsFileTime
mov rcx, rax
call rdi
test rax, rax
je 0x6a5d9270
mov qword [0x6a68f5c8], rax
lea rcx, [0x6a68b1b0]
call rbx
test rax, rax
mov rsi, rax
mov qword [0x6a68e4c8], rax
je 0x6a5d92c0
lea rdx, str.BCryptGenRandom
mov rcx, rax
call rdi
test rax, rax
je 0x6a5d92a0
mov qword [0x6a68f410], rax
call fcn.6a5db770
xor ecx, ecx
mov r12, qword [fcn.6a5dd780]
call r12
mov rbp, qword [sym.imp.msvcrt.dll__fileno]
mov rcx, rax
call rbp
mov edx, 0x8000
mov rsi, qword [sym.imp.msvcrt.dll__setmode]
mov ecx, eax
call rsi
mov ecx, 1
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rsi
mov ecx, 2
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rsi
lea rcx, [0x6a68b1d0]
call rbx
test rax, rax
mov qword [0x6a68f1f0], rax
je 0x6a5d91c1
lea rdx, str.inet_ntop
mov rcx, rax
call rdi
mov qword [0x6a68e048], rax
movdqa xmm0, xmmword [0x6a68b1e0]
movaps xmmword [0x6a68f2d0], xmm0
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
lea rdx, str.ShowWindow
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5d8f8a
lea rdx, str.RtlAllocateHeap
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5d8f4d
lea rdx, str.GetConsoleWindow
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5d8fc5
lea rcx, [0x6a68b140]
call fcn.6a5cbfd0
nop dword [rax]
lea rcx, [0x6a68b080]
call fcn.6a5cbfd0
nop dword [rax]
lea rcx, [0x6a68b0c0]
call fcn.6a5cbfd0
nop dword [rax]
lea rdx, str.GetSystemTimeAsFileTime
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5d9101
lea rcx, [0x6a68b100]
call fcn.6a5cbfd0
nop dword [rax]
lea rdx, str.BCryptGenRandom
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5d9139
lea rcx, [0x6a68b180]
call fcn.6a5cbfd0
nop
nop dword [rax]