Function at 0x6a56b0c0
Capabilities:
Link many functions at runtime

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x20
movdqa xmm0, xmmword [0x6a59dd90]
lea rax, [0x6a5a26b0]
mov r8d, 0x331
mov qword [0x6a5a23f8], rax
lea rax, [0x6a5a23e0]
movaps xmmword [0x6a5a23e0], xmm0
movdqa xmm0, xmmword [0x6a59dda0]
mov word [0x6a5a23f0], r8w
movaps xmmword [0x6a5a2210], xmm0
mov qword [0x6a5a2228], rax
mov byte [0x6a5a2220], 0x16
call fcn.6a55c9c0
lea rcx, [0x6a59dbf0]
mov rbx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a13f8], rax
je 0x6a56b4e0
lea rdx, str.RtlAllocateHeap
mov rcx, rax
mov rsi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rsi
test rax, rax
je 0x6a56b490
mov rdi, qword [0x6a5a13f8]
mov qword [0x6a5a2620], rax
lea rdx, str.RtlInitUnicodeString
mov rcx, rdi
call rsi
test rax, rax
je 0x6a56b470
mov qword [0x6a5a2200], rax
lea rcx, [0x6a59dc30]
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a1400], rax
je 0x6a56b4f0
lea rdx, str.MultiByteToWideChar
mov rcx, rax
call rsi
test rax, rax
je 0x6a56b450
mov qword [0x6a5a2568], rax
call fcn.6a55d600
lea rcx, [0x6a59dc70]
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a1408], rax
je 0x6a56b520
lea rdx, str.ShowWindow
mov rcx, rax
call rsi
test rax, rax
je 0x6a56b4b0
mov rdx, qword [0x6a59e580]
lea rcx, [0x6a59dcb0]
mov qword [rdx], rax
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a1410], rax
je 0x6a56b4d0
lea rdx, str.GetConsoleWindow
mov rcx, rax
call rsi
test rax, rax
je 0x6a56b500
mov rdx, qword [0x6a59e590]
mov ecx, 0x110
mov byte [0x6a5a1450], 1
movdqa xmm0, xmmword [0x6a59dd70]
mov word [0x6a5a2780], cx
mov qword [0x6a5a1458], 0
mov byte [0x6a5a1480], 1
mov qword [rdx], rax
mov rax, qword [0x6a59e640]
mov edx, 0x112
mov qword [0x6a5a1488], 0x3c0
mov qword [0x6a5a1440], 2
mov byte [0x6a5a1420], 2
movups xmmword [rax], xmm0
movdqa xmm0, xmmword [0x6a59dd80]
mov word [rax + 0x10], dx
lea rdx, [0x6a5a2520]
mov qword [0x6a5a2788], rdx
lea rdx, [0x6a5a2770]
movaps xmmword [0x6a5a2770], xmm0
movq xmm0, rdx
lea rdx, str.skey
mov qword [rax + 0x18], 0
movq xmm1, rdx
lea rdx, [0x6a5a1480]
punpcklqdq xmm0, xmm1
movaps xmmword [0x6a5a1460], xmm0
lea rcx, [rdx - 0x30]
movq xmm2, rdx
lea rdx, [0x6a59c250]
movq xmm0, rcx
lea rcx, [0x6a5a2250]
movq xmm3, rdx
punpcklqdq xmm0, xmm2
movaps xmmword [0x6a5a14b0], xmm0
lea rdx, [0x6a5a14b0]
movq xmm0, rcx
mov qword [0x6a5a1448], rdx
lea rdx, [0x6a5a1420]
punpcklqdq xmm0, xmm3
mov qword [rax + 0x20], rdx
lea rcx, [0x6a59dcf0]
movaps xmmword [0x6a5a1490], xmm0
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a14c0], rax
je 0x6a56b570
lea rdx, str.GetSystemTimeAsFileTime
mov rcx, rax
call rsi
test rax, rax
je 0x6a56b530
mov qword [0x6a5a25e8], rax
lea rcx, [0x6a59dd30]
call rbx
test rax, rax
mov rdi, rax
mov qword [0x6a5a14c8], rax
je 0x6a56b580
lea rdx, str.BCryptGenRandom
mov rcx, rax
call rsi
test rax, rax
je 0x6a56b550
mov qword [0x6a5a2420], rax
call fcn.6a56da30
xor ecx, ecx
mov r12, qword [fcn.6a56fb60]
call r12
mov rbp, qword [sym.imp.msvcrt.dll__fileno]
mov rcx, rax
call rbp
mov edx, 0x8000
mov rdi, qword [sym.imp.msvcrt.dll__setmode]
mov ecx, eax
call rdi
mov ecx, 1
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rdi
mov ecx, 2
call r12
mov rcx, rax
call rbp
mov edx, 0x8000
mov ecx, eax
call rdi
lea rcx, [0x6a59dd50]
call rbx
test rax, rax
mov qword [0x6a5a2208], rax
je 0x6a56b42c
lea rdx, str.inet_ntop
mov rcx, rax
call rsi
mov qword [0x6a5a1058], rax
movdqa xmm0, xmmword [0x6a59dd60]
movaps xmmword [0x6a5a22e0], xmm0
add rsp, 0x20
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
lea rdx, str.MultiByteToWideChar
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b1b8
lea rdx, str.RtlInitUnicodeString
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b180
lea rdx, str.RtlAllocateHeap
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b15d
lea rdx, str.ShowWindow
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b1f5
lea rcx, [0x6a59dc80]
call fcn.6a55d220
nop dword [rax]
lea rcx, [0x6a59dbc0]
call fcn.6a55d220
nop dword [rax]
lea rcx, [0x6a59dc00]
call fcn.6a55d220
nop dword [rax]
lea rdx, str.GetConsoleWindow
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b230
lea rcx, [0x6a59dc40]
call fcn.6a55d220
nop dword [rax]
lea rdx, str.GetSystemTimeAsFileTime
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b36c
lea rdx, str.BCryptGenRandom
mov rcx, rdi
call fcn.6a55d0c0
jmp 0x6a56b3a4
lea rcx, [0x6a59dcc0]
call fcn.6a55d220
nop dword [rax]
lea rcx, [0x6a59dd00]
call fcn.6a55d220
nop
nop dword [rax]