Function at 0x6a5cc2f0
Capabilities:
Link many functions at runtime

Disassembly:
push rsi
push rbx
sub rsp, 0x28
lea rcx, [0x6a689e90]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
mov rsi, rax
mov qword [0x6a68e3f0], rax
je 0x6a5cc7a0
lea rdx, str.GetProcessHeap
mov rcx, rax
mov rbx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rbx
test rax, rax
je 0x6a5cc580
mov rdx, qword [0x6a68b990]
mov rsi, qword [0x6a68e3f0]
mov qword [rdx], rax
lea rdx, str.GetCurrentThread
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc780
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f6e8], rax
lea rdx, str.GetThreadContext
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc760
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f440], rax
lea rdx, str.AddVectoredExceptionHandler
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc740
mov rdx, qword [0x6a68b960]
mov rsi, qword [0x6a68e3f0]
mov qword [rdx], rax
lea rdx, str.RaiseException
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc720
mov rdx, qword [0x6a68b980]
mov rsi, qword [0x6a68e3f0]
mov qword [rdx], rax
lea rdx, str.RemoveVectoredExceptionHandler
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc700
mov rdx, qword [0x6a68b970]
mov rsi, qword [0x6a68e3f0]
mov qword [rdx], rax
lea rdx, str.GetTickCount
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc6e0
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f5c0], rax
lea rdx, str.Sleep
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc6c0
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f550], rax
lea rdx, str.HeapCreate
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc6a0
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f898], rax
lea rdx, str.HeapAlloc
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc680
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f430], rax
lea rdx, str.CreateFileA
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc660
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f280], rax
lea rdx, str.GetFileSize
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc640
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f288], rax
lea rdx, str.ReadFile
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc620
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f5f8], rax
lea rdx, str.GetModuleHandleW
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc600
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f790], rax
lea rdx, str.GetProcAddress
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc5e0
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f840], rax
lea rdx, str.VirtualProtect
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc5c0
mov rsi, qword [0x6a68e3f0]
mov qword [0x6a68f740], rax
lea rdx, str.WaitForSingleObject
mov rcx, rsi
call rbx
test rax, rax
je 0x6a5cc5a0
mov qword [0x6a68f5e0], rax
add rsp, 0x28
pop rbx
pop rsi
ret
lea rdx, str.GetProcessHeap
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc332
lea rdx, str.WaitForSingleObject
mov rcx, rsi
call fcn.6a5cbe70
mov qword [0x6a68f5e0], rax
add rsp, 0x28
pop rbx
pop rsi
ret
lea rdx, str.VirtualProtect
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc547
lea rdx, str.GetProcAddress
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc528
lea rdx, str.GetModuleHandleW
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc505
lea rdx, str.ReadFile
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc4e2
lea rdx, str.GetFileSize
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc4bf
lea rdx, str.CreateFileA
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc49c
lea rdx, str.HeapAlloc
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc479
lea rdx, str.HeapCreate
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc456
lea rdx, str.Sleep
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc433
lea rdx, str.GetTickCount
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc410
lea rdx, str.RemoveVectoredExceptionHandler
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc3ea
lea rdx, str.RaiseException
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc3c4
lea rdx, str.AddVectoredExceptionHandler
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc39e
lea rdx, str.GetThreadContext
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc37b
lea rdx, str.GetCurrentThread
mov rcx, rsi
call fcn.6a5cbe70
jmp 0x6a5cc358
lea rcx, [0x6a689e60]
call fcn.6a5cbfd0
nop
nop dword [rax]
mov rax, qword [rcx]
mov rdx, qword [rax + 8]
mov r9, qword [rax + 0x20]
mov r8, qword [rdx + 8]
cmp qword [r8 + 0x20], r9
jne 0x6a5cc7dd
mov qword [rcx], rdx
mov rdx, qword [rdx]
mov qword [rax + 8], rdx
mov rdx, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx]
add qword [rax + 0x20], 1
ret