Function at 0x401560
Capabilities:
Access the windows event log
Clear windows event logs
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x538
mov rax, qword [rdx + 8]
mov qword [rsp + 0x30], rax
mov rax, qword [0x004cc250]
mov qword [rsp + 0x590], r8
cmp dword [rax], 0x84da
jle 0x401d24
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x38], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbc90]
mov rbx, qword [0x004cbe90]
mov dword [rax], 0xbbb76337
mov rax, qword [0x004cbd70]
mov dword [rbx], 0x9ea26b4d
mov ecx, dword [rax]
call fcn.00413350
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rdi, qword [0x004cc160]
xor ecx, ecx
mov qword [rsp + 0x58], r10
mov dword [rdi], eax
call r10
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x004cc420]
mov ecx, dword [rax]
call fcn.00413350
mov rbp, qword [0x004cc080]
mov ecx, 0x662bbd3f
mov dword [rbp], eax
call fcn.00413350
mov rdi, qword [0x004cbd50]
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdi], eax
call r14
mov rax, qword [0x004cc050]
xor edx, edx
xor ecx, ecx
lea r8, str.Tempora_et_commodi_et_voluptas_omnis_magnam_non_est_sunt_nemo_aut_nihil_possimus
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rax], 0x94a319b5
call rdi
mov r12, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call r12
mov r9, qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004cc300]
xor ecx, ecx
mov qword [rsp + 0x50], r9
mov dword [rax], 0x8e1049a7
call r9
mov rax, qword [0x004cbc40]
lea rcx, str.Iste_nesciunt_illum_quia_tempore_consequatur_velit
mov edx, dword [rax]
mov rax, qword [0x004cc330]
mov dword [rax], edx
mov edx, dword [rbx]
mov rax, qword [0x004cc430]
mov rbx, qword [0x004cc380]
mov dword [rax], edx
mov rax, qword [0x004cc2d0]
xor edx, edx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov qword [rsp + 0x28], rax
call rax
mov rax, qword [0x004cc1e0]
mov r13, qword [0x004cbd90]
mov rbx, qword [0x004cc490]
mov dword [rax], 0x8b8a5888
mov rax, qword [0x004cbe60]
mov edx, dword [rax]
mov rax, qword [0x004cc310]
mov dword [rax], edx
mov eax, dword [r13]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x38]
call rax
xor ecx, ecx
call r14
mov rbx, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rbx
mov r15, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.OttoCasper
xor ecx, ecx
call r15
mov ecx, 0xee66dafa
call fcn.00413350
mov rdx, qword [0x004cc110]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x004cc320]
mov dword [rax], 0x52cfc9a1
mov rax, qword [0x004cc1e0]
mov ecx, dword [rax]
call fcn.00413350
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [r13], eax
mov qword [rsp + 0x48], r11
call r11
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
mov rax, qword [0x004cc480]
xor r8d, r8d
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
mov dword [rax], 0x6df6e049
call r13
mov rax, qword [0x004cc3a0]
mov rdx, qword [0x004cbd50]
mov ecx, 0xd28f4dd9
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov dword [rbp], eax
mov rax, qword [0x004cc400]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd00]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r13
xor ecx, ecx
lea rdx, str.Repudiandae_ut_corporis_eos
call r15
xor edx, edx
xor ecx, ecx
call rsi
mov r11, qword [rsp + 0x48]
xor ecx, ecx
call r11
mov ecx, 0x3162bd3f
call fcn.00413350
mov rdx, qword [0x004cc380]
mov rbp, qword [0x004cc460]
lea rcx, str.NelsonPacocha
mov dword [rdx], eax
mov rax, qword [0x004cbe10]
mov dword [rbp], 0xc17c0500
mov edx, dword [rax]
mov rax, qword [0x004cc060]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [0x004cc3c0]
xor edx, edx
xor ecx, ecx
lea r8, str.Fuga_aut_porro_sit_quia_aliquid_quis_harum_qui_est
mov dword [rax], 0x24215590
mov rax, qword [0x004cbcc0]
mov dword [rax], 0x55d8bba2
call rdi
mov rax, qword [0x004cbcc0]
mov ecx, 0xc8745e63
mov edx, dword [rax]
mov rax, qword [0x004cc0f0]
mov dword [rax], edx
call fcn.00413350
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rbp], eax
call r13
mov rax, qword [0x004cc340]
mov rdx, qword [0x004cc450]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbce0]
mov ecx, dword [rax]
call fcn.00413350
mov rbp, qword [0x004cbcf0]
mov rdx, qword [0x004cc4b0]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [rbp]
mov rdx, qword [0x004cbdf0]
mov dword [rdx], eax
mov rax, qword [0x004cbec0]
mov edx, dword [rax]
mov rax, qword [0x004cc370]
mov dword [rax], edx
mov rax, qword [0x004cc130]
mov rdx, qword [0x004cbd00]
mov eax, dword [rax]
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc450]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc4b0]
mov dword [rdx], eax
mov rax, qword [0x004cc300]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd60]
mov ecx, 0xd213e83e
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbbe0]
xor ecx, ecx
mov dword [rdx], eax
mov rdx, qword [0x004cc1e0]
mov dword [rdx], eax
lea rdx, str.ProfOleStrosin
call r15
mov rax, qword [0x004cc0c0]
xor edx, edx
xor ecx, ecx
lea r8, str.Maxime_in_quis_aliquid_animi_ut
mov dword [rax], 0xea5df1be
call rdi
mov rax, qword [0x004cc440]
mov ecx, dword [rax]
call fcn.00413350
mov r14, qword [0x004cbcd0]
mov rdx, qword [0x004cbc10]
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004cc3c0]
mov dword [rax], 0x4e740d59
mov rax, qword [0x004cbc90]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x20]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
call r15
lea r8, str.Veritatis_ratione_tempore_et_deleniti
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call r12
mov edx, dword [r14]
mov rax, qword [0x004cbc50]
mov ecx, 0x6557f81e
mov dword [rax], edx
mov rdx, qword [0x004cc3d0]
mov eax, dword [rbp]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbc80]
lea r8, str.Non_voluptatibus_consectetur_vitae
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbed0]
xor edx, edx
mov dword [rax], 0x79f73ff5
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
mov r10, qword [rsp + 0x58]
xor ecx, ecx
call r10
xor edx, edx
lea rcx, str.JeanieFahey
mov dword [rbp], 0xbb0c1722
mov rax, qword [rsp + 0x28]
call rax
mov r12, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call r12
mov rax, qword [0x004cbe30]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc2b0]
mov dword [rax], edx
call rbx
mov rax, qword [0x004cbd80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3d0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
lea r8, str.Hic_quod_et_suscipit_adipisci_dolorem_reiciendis_reprehenderit_cumque
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0xd4816f22
call fcn.00413350
mov rdx, qword [0x004cbca0]
mov dword [rdx], eax
mov rax, qword [0x004cc3a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc470]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc490]
mov edx, dword [rax]
mov rax, qword [0x004cc090]
mov dword [rax], edx
mov rax, qword [0x004cbd60]
mov edx, dword [rax]
mov rax, qword [0x004cc230]
mov dword [rax], edx
call rbx
mov rax, qword [0x004cc3a0]
mov rdx, qword [0x004cc160]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call r12
xor ecx, ecx
call rbx
mov rax, qword [0x004cc210]
mov rdx, qword [0x004cc450]
mov ecx, 0x13f5f3d2
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbca0]
mov dword [rax], 0xebd519f5
call fcn.00413350
mov rdx, qword [0x004cc480]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x004cc3d0]
lea r8, str.Quo_consectetur_eaque_ut_molestias
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbee0]
mov dword [rax], edx
mov rax, qword [0x004cbbc0]
mov rdx, qword [0x004cc3a0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004cbe00]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc4d0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor edx, edx
lea rcx, str.HazelGusikowski
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov rax, qword [0x004cc2e0]
mov dword [rax], 0x2b07dce4
mov rax, qword [0x004cc3b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc60]
mov dword [rax], 0x934a8c5
call rbx
mov rax, qword [0x004cc340]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cbce0]
xor ecx, ecx
mov dword [rdi], eax
call rbx
xor ecx, ecx
call r12
mov rax, qword [0x004cc180]
mov ecx, dword [rax]
call fcn.00413350
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004cbc10]
mov dword [rax], 0xbc44329e
call rbx
mov r9, qword [rsp + 0x50]
xor ecx, ecx
call r9
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cc100]
xor edx, edx
lea rcx, str.Voluptas_aperiam_consequatur_magni_earum_nostrum
mov dword [rax], 0xc1160992
mov rax, qword [rsp + 0x28]
call rax
lea rdx, str.DashawnLarkin
lea rcx, str.Sunt_a_fugit_ab
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x004cc340]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cbd50]
xor ecx, ecx
mov dword [rdi], eax
call r12
xor ecx, ecx
call r15
mov rax, qword [0x004cc1d0]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov dword [rax], 0xafa5b60f
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x004cc0b0]
xor edx, edx
xor ecx, ecx
mov rdi, qword [0x004cbdf0]
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
mov ecx, 0x422b70f1
call fcn.00413350
lea rdx, str.Et_impedit_adipisci_aut
lea rcx, str.AntoniettaWintheiser
mov dword [rbp], eax
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov r11, qword [rsp + 0x48]
xor ecx, ecx
call r11
mov rax, qword [0x004cc240]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xbb1e32c8
call rsi
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rbx
lea rdx, str.GetThreadContext
lea rcx, [0x004bf276]
mov dword [rsp + 0x90], 0x100002
call fcn.0040fab1
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
call rax
test eax, eax
je 0x403189
mov rax, qword [0x004cc250]
cmp dword [rax], 0x4d40
jle 0x40255b
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r12
mov rax, qword [0x004cc150]
mov r15, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.BlaiseOConner
lea rcx, str.Suscipit_et_saepe_exercitationem_voluptas_sed_recusandae_voluptatem_consectetur
mov dword [rax], 0xc5905926
call r15
mov r10, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Dolores_voluptatem_autem_eos_sed
lea rcx, str.DrEwellLubowitz
mov qword [rsp + 0x58], r10
call r10
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rdi
mov rbp, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rbp
mov r13, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r13
mov rax, qword [0x004cbc40]
mov rsi, qword [0x004cc300]
mov ecx, 0x551db083
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cc400]
mov rsi, qword [0x004cc4b0]
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00413350
mov rsi, qword [0x004cbee0]
xor edx, edx
lea rcx, str.Facilis_voluptatem_nihil_consectetur_facere_doloremque_autem_velit_explicabo_quo_reprehenderit_voluptatem_veniam_ipsa
mov dword [rsi], eax
mov rsi, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
call rsi
mov ecx, 0xaa391bb3
call fcn.00413350
mov rbx, qword [0x004cbdd0]
mov r11, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor ecx, ecx
lea r8, str.Ea_qui_sed_et_sed_nesciunt
mov dword [rbx], eax
mov rax, qword [0x004cc100]
mov rbx, qword [0x004cbd90]
mov qword [rsp + 0x50], r11
mov dword [rax], 0xcbf07bc3
mov rax, qword [0x004cc460]
mov edx, dword [rax]
mov rax, qword [0x004cc440]
mov dword [rax], edx
mov rax, qword [0x004cbd30]
xor edx, edx
mov dword [rax], 0x226bac9f
mov rax, qword [0x004cc1b0]
mov eax, dword [rax]
mov dword [rbx], eax
call r11
mov rax, qword [0x004cbc30]
xor edx, edx
lea rcx, str.Sunt_blanditiis_vel
mov dword [rax], 0xc835d1b4
mov rax, qword [0x004cbd50]
mov dword [rax], 0xe8639375
call rsi
mov rax, qword [0x004cc3e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe60]
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov qword [rsp + 0x20], rax
call rax
mov r14, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call r14
xor ecx, ecx
call rdi
mov ecx, 0x12250d7f
call fcn.00413350
mov rdx, qword [0x004cc1c0]
mov ecx, 0xb9f6d1de
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbc10]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor ecx, ecx
call r13
mov rax, qword [0x004cbdc0]
lea rdx, str.Praesentium_veniam_aut_veniam
lea rcx, str.Voluptatibus_est_accusantium_ea_doloribus_deserunt_aut
mov dword [rax], 0xc0b3e570
call r15
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov qword [rsp + 0x28], rax
call rax
mov r8, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov qword [rsp + 0x48], r8
call r8
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov ecx, 0x1253b957
call fcn.00413350
mov rdx, qword [0x004cbba0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc190]
mov edx, dword [rax]
mov rax, qword [0x004cc2b0]
mov dword [rax], edx
mov rax, qword [0x004cbdb0]
mov rdx, qword [0x004cbd80]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cc3e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc180]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x20]
call rax
mov rax, qword [0x004cc180]
lea rcx, str.DrEphraimErnser
mov dword [rax], 0xb8cb51b0
mov rax, qword [0x004cc3f0]
mov edx, dword [rax]
mov rax, qword [0x004cc3a0]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r12
mov r9, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.Aut_adipisci_ipsum_eligendi_eum
xor ecx, ecx
mov qword [rsp + 0x40], r9
call r9
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc130]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbf0]
mov r12, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Molestias_dolorum_minus_laborum_reiciendis_ex
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
mov rax, qword [0x004cc360]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xec8f724e
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov qword [rsp + 0x38], rax
call rax
mov rax, qword [0x004cc1b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd70]
mov ecx, 0xf47fc446
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbdc0]
mov ecx, 0xf59b5dea
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc390]
mov dword [rdx], eax
mov rax, qword [0x004cc1e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc70]
mov dword [rdx], eax
mov rax, qword [0x004cbba0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc80]
mov edx, dword [rax]
mov rax, qword [0x004cc310]
mov dword [rax], edx
call r13
xor ecx, ecx
call r14
lea rdx, str.Rerum_doloribus_aliquid_et_sit_officia_consequuntur_sint
lea rcx, str.Error_quis_deserunt_iste_labore_blanditiis_beatae_praesentium_molestiae_quia_voluptas_sed_vero_quae
call r15
mov rax, qword [0x004cc160]
mov rdx, qword [str._mf]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbd00]
mov rdx, qword [0x004cc390]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x38]
call rax
mov ecx, 0xaa9e92b6
call fcn.00413350
mov rdx, qword [0x004cbc70]
mov r15, qword [0x004cc0e0]
lea rcx, str.Voluptatem_adipisci_temporibus_ut_et
mov dword [rdx], eax
mov rax, qword [0x004cc070]
mov edx, dword [r15]
mov dword [rax], 0xa1cda181
mov rax, qword [0x004cc2e0]
mov dword [rax], edx
xor edx, edx
call r12
mov ecx, 0xee6d10b0
call fcn.00413350
mov rdx, qword [0x004cc0d0]
mov ecx, 0x29a09fe8
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd20]
lea rcx, str.MrZanderArmstrong
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004cbcb0]
xor edx, edx
lea rcx, str.MissAubreeHauckJr
mov dword [rax], 0x37e0edee
call r12
mov rax, qword [0x004cc330]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc350]
mov ecx, 0xd3a713c
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc300]
mov r14, qword [0x004cc340]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x004cbce0]
mov dword [rax], edx
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cbee0]
mov rcx, qword [0x004cc3f0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbbf0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbca0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x38]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [0x004cc410]
xor ecx, ecx
mov dword [rax], 0x3d8f5bb7
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rax, qword [0x004cc2d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc3b0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_PurgeComm]
mov rax, qword [str._mf]
mov rdx, qword [0x004cbdb0]
lea rcx, str.Qui_sunt_sit_harum_dolores_sint_vero_deserunt_ut_quod_a_et
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov r8, qword [rsp + 0x48]
xor ecx, ecx
mov qword [rsp + 0x38], r8
call r8
mov r8, qword [rsp + 0x38]
xor ecx, ecx
call r8
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004cbdd0]
xor ecx, ecx
mov dword [rax], 0x3ccb7e3c
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov r11, qword [rsp + 0x50]
xor edx, edx
xor ecx, ecx
lea r8, str.GraysonOHara
call r11
mov rax, qword [0x004cc220]
mov r10, qword [rsp + 0x58]
lea rdx, str.NorrisBorer
lea rcx, str.IgnacioOConnell
mov dword [rax], 0x654eb178
call r10
mov rax, qword [0x004cbea0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x77c220aa
call rbp
mov ecx, 0x4be6e01a
call fcn.00413350
mov r13, qword [0x004cbd40]
mov rcx, qword [0x004cc160]
mov dword [r15], eax
mov eax, dword [r13]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov rax, qword [0x004cbc30]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc120]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x004cc320]
mov dword [rax], edx
xor edx, edx
call rbx
xor edx, edx
lea rcx, str.Qui_neque_repellendus_magnam_saepe_autem
call r12
xor ecx, ecx
call rdi
mov rax, qword [0x004cbd60]
mov rdx, qword [0x004cbcb0]
mov rcx, qword [0x004cc0d0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc170]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xd5b57ab3
call fcn.00413350
mov rdx, qword [0x004cc460]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbba0]
mov edx, dword [rax]
mov rax, qword [0x004cbc90]
mov dword [rax], edx
call rdi
mov rax, qword [0x004cc0f0]
mov dword [rax], 0x7a387645
mov rax, qword [0x004cbbe0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cbd70]
mov dword [r13], 0xc54aa1e2
mov dword [rcx], eax
mov rax, qword [0x004cbec0]
xor ecx, ecx
mov dword [rax], 0x5010d2cf
mov rax, qword [rsp + 0x28]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
mov rax, qword [0x004cbed0]
mov rdx, qword [0x004cc400]
xor ecx, ecx
mov dword [rax], 0x3f04868
mov rax, qword [0x004cbcd0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
mov r9, qword [rsp + 0x40]
lea rdx, str.Veritatis_enim_at_veniam_magnam_et_asperiores
xor ecx, ecx
call r9
mov rax, qword [0x004cc1e0]
mov rbx, qword [0x004cbdb0]
mov ecx, 0xdd536b16
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.00413350
mov rdx, qword [0x004cc050]
mov rbx, qword [0x004cbd90]
lea rcx, str.Odio_est_sunt_illum_magni_nemo_ea
mov dword [rdx], eax
mov rax, qword [0x004cc470]
xor edx, edx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cc140]
mov eax, dword [rax]
mov dword [r13], eax
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, 0x69b11ad0
call fcn.00413350
mov rdx, qword [0x004cc450]
mov rbx, qword [0x004cbd80]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc0a0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cc200]
mov rbx, qword [0x004cc4b0]
mov eax, dword [rax]
mov dword [rbx], eax
call rdi
xor edx, edx
lea rcx, str.JoelleFadel
call rsi
mov rax, qword [0x004cc300]
xor edx, edx
xor ecx, ecx
mov rdi, qword [0x004cc070]
mov dword [rax], 0x53858214
mov rax, qword [0x004cbc70]
mov dword [rax], 0x316ffc7c
mov rax, qword [0x004cc220]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbda0]
mov dword [rax], 0x7f2a2d7d
call rbp
mov ecx, 0x269842a7
call fcn.00413350
mov rdx, qword [0x004cc240]
mov dword [rdx], eax
mov rax, qword [0x004cc180]
mov dword [rax], 0xcb5e73c0
mov rax, qword [rsp + 0x590]
lea rdx, str.SetThreadContext
lea rcx, [0x004bf276]
mov qword [rsp + 0xe0], rax
call fcn.0040fab1
mov rcx, qword [rsp + 0x30]
lea rdx, [rsp + 0x60]
call rax
test eax, eax
je 0x403189
mov rax, qword [0x004cc250]
cmp dword [rax], 0x7915
jne 0x402cb7
mov rax, qword [0x004cbec0]
mov r9, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc120]
mov qword [rsp + 0x38], r9
mov dword [rax], edx
call r9
mov rbx, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
call rbx
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc0c0]
xor edx, edx
xor ecx, ecx
lea r8, str.Animi_iusto_tempore_qui_et_suscipit_eveniet_aut_veritatis_rem_et
mov rsi, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rax], 0x639a1adf
call rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rbp, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rbp
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r12
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
call r15
mov ecx, 0x4e99ba6a
call fcn.00413350
mov r13, qword [0x004cbe60]
mov r14, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [r13], eax
call r14
xor ecx, ecx
call r14
mov ecx, 0xb5a3a428
call fcn.00413350
mov rcx, qword [0x004cbe00]
mov dword [rcx], eax
mov ecx, 0x53c2f097
call fcn.00413350
mov rdx, qword [0x004cbd50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc70]
xor edx, edx
mov dword [rax], 0x9f7b9334
call r15
lea r8, str.DevonTorphy
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call rbp
mov rax, qword [0x004cbe40]
xor ecx, ecx
mov dword [rax], 0x6aa49e4d
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x20], rax
call rax
mov edx, dword [r13]
mov rax, qword [0x004cbe20]
mov rcx, qword [0x004cc350]
mov dword [rax], edx
mov rax, qword [0x004cc4b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cc2d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe30]
mov dword [rdx], eax
mov rax, qword [0x004cc0a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc390]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cc100]
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.Dolore_omnis_aliquid_pariatur
mov dword [rax], 0x25f27f3c
call r15
mov rax, qword [0x004cbea0]
xor ecx, ecx
mov dword [rax], 0x7fb53e7a
call r14
mov rax, qword [0x004cbd40]
mov r10, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov rdx, qword [0x004cc450]
mov eax, dword [rax]
mov qword [rsp + 0x28], r10
mov dword [rdx], eax
call r10
xor ecx, ecx
call rbp
mov rax, qword [0x004cc360]
mov r9, qword [rsp + 0x38]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc2e0]
mov dword [rax], edx
call r9
mov rax, qword [0x004cc380]
mov ecx, dword [rax]
call fcn.00413350
mov r10, qword [rsp + 0x28]
xor ecx, ecx
mov dword [r13], eax
mov qword [rsp + 0x38], r10
call r10
mov ecx, 0x3dabd0d3
call fcn.00413350
mov r8, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [r13], eax
mov qword [rsp + 0x28], r8
call r8
mov rax, qword [0x004cbe50]
mov ecx, dword [rax]
call fcn.00413350
mov r13, qword [0x004cbd00]
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [r13], eax
call r14
mov rax, qword [0x004cc480]
mov ecx, 0xda8779aa
mov dword [rax], 0x9706b46
call fcn.00413350
mov rdx, qword [0x004cc330]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call r12
mov rax, qword [0x004cc350]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc170]
mov rcx, qword [0x004cbc30]
mov dword [rdx], eax
mov rax, qword [0x004cbd30]
mov dword [rax], 0x6f659fd
mov eax, dword [r13]
mov dword [rcx], eax
mov rax, qword [0x004cc0b0]
mov ecx, 0x942cbb28
mov dword [rax], 0xb643a865
call fcn.00413350
mov rdx, qword [0x004cc060]
mov dword [rdx], eax
mov rax, qword [0x004cbe10]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc410]
lea rcx, str.Rem_quia_odio_sunt_doloremque
mov dword [rdx], eax
mov rax, qword [0x004cc0d0]
xor edx, edx
mov dword [rax], 0x436e574f
mov rax, qword [0x004cc2c0]
mov dword [rax], 0x9d0cb3b0
call r15
mov rax, qword [0x004cc3e0]
mov rcx, qword [0x004cbee0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cc340]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe90]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
xor edx, edx
xor ecx, ecx
call rdi
mov r15, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Qui_voluptatem_velit_architecto_excepturi
lea rcx, str.Animi_aliquam_voluptate_sit_ea_explicabo_impedit
call r15
mov r13, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.MarjoryDurgan
call r13
mov rax, qword [0x004cc100]
xor ecx, ecx
mov dword [rax], 0x9591769a
call r14
mov rax, qword [0x004cbc70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x73950e22
call rbx
mov rax, qword [0x004cc140]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc080]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc480]
mov edx, dword [rax]
mov rax, qword [0x004cbc90]
mov dword [rax], edx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov rax, qword [0x004cc4a0]
mov dword [rax], 0xca32027d
mov rax, qword [0x004cc2f0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc300]
mov r8, qword [rsp + 0x28]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc050]
mov edx, dword [rax]
mov rax, qword [0x004cbbf0]
mov dword [rax], edx
call r8
mov rax, qword [0x004cbbc0]
lea rcx, str.LaurelAltenwerth
mov edx, dword [rax]
mov rax, qword [0x004cc400]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004cc1a0]
xor ecx, ecx
mov dword [rax], 0xe3937ea5
call rbp
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
lea rcx, str.Nisi_quas_nesciunt_ab_doloribus_qui_hic
call r13
xor edx, edx
lea rcx, str.ProfGilbertoMuellerIII
call r13
mov rax, qword [0x004cc160]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc4d0]
mov dword [rax], edx
call rbp
mov rbp, qword [0x004cc130]
mov rax, qword [0x004cbdd0]
xor ecx, ecx
mov edx, dword [rbp]
mov dword [rax], edx
lea rdx, str.MrCedrickOberbrunnerJr
call qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.LavonHudson
lea rcx, str.Dolorem_dolorem_quia
call r15
lea r8, str.CobyHuels
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbcf0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cbd50]
mov rdx, qword [0x004cc2f0]
mov dword [rcx], eax
mov rax, qword [0x004cc430]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc190]
mov dword [rax], 0x769f2a6d
mov rax, qword [0x004cc1e0]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cbdb0]
mov dword [rcx], eax
mov ecx, 0x2f184980
call fcn.00413350
mov r14, qword [0x004cc3b0]
lea rdx, str.TateGrimes
lea rcx, str.Cumque_blanditiis_atque_optio_aut_quae_voluptas
mov dword [r14], eax
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x004cc140]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd80]
mov ecx, 0xe8fc3144
mov r13, qword [0x004cc2b0]
mov dword [rdx], eax
mov rax, qword [0x004cbe70]
mov rdx, qword [0x004cc3f0]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cbe40]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rcx, qword [0x004cc3f0]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x20]
call rax
mov r10, qword [rsp + 0x38]
xor ecx, ecx
call r10
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbc00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
call r12
mov rax, qword [0x004cbc20]
xor edx, edx
xor ecx, ecx
lea r8, str.JoannyBednar
mov dword [rax], 0xe4daa569
call rsi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cbe40]
lea r8, str.ProfHaleighJacobiII
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbed0]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004cbe00]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc1a0]
lea rdx, str.ProfEmmaGusikowskiII
lea rcx, str.Voluptate_explicabo_praesentium_sequi_error_et_ut
mov dword [rsi], eax
mov rax, qword [0x004cbe90]
mov dword [rax], 0x9daafca7
call r15
mov ecx, 0xe63b9862
call fcn.00413350
mov rdi, qword [0x004cbec0]
mov ecx, 0x50e5fe28
mov dword [rdi], eax
call fcn.00413350
mov rsi, qword [0x004cbc30]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, 0x185e6e11
call fcn.00413350
mov rdx, qword [0x004cc0f0]
mov dword [rdx], eax
mov eax, dword [rbp]
mov dword [r13], eax
mov rax, qword [0x004cbd60]
mov edx, dword [rax]
mov rax, qword [0x004cc310]
mov dword [rax], edx
mov rax, qword [0x004cbbe0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc80]
mov ecx, 0x7362ccb
mov dword [rdx], eax
mov rax, qword [0x004cc450]
mov edx, dword [rax]
mov rax, qword [0x004cbd10]
mov dword [rax], edx
call fcn.00413350
mov rdi, qword [0x004cbdb0]
mov dword [rdi], eax
mov rax, qword [0x004cbcc0]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbee0]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call rbx
mov rax, qword [0x004cc220]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc060]
mov ecx, 0x1a424fa3
mov dword [rdi], eax
call fcn.00413350
mov rsi, qword [0x004cc2c0]
mov dword [rsi], eax
mov rax, qword [0x004cc0a0]
mov edx, dword [rax]
mov rax, qword [0x004cc230]
mov dword [rax], edx
lea rdx, str.ResumeThread
lea rcx, [0x004bf276]
call fcn.0040fab1
mov rcx, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x2bc5
jne 0x403189
mov rax, qword [0x004cc400]
mov r11, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0x2dbd054
mov rax, qword [0x004cbce0]
mov qword [rsp + 0x38], r11
mov dword [rax], 0x9aee3aa2
call r11
mov rax, qword [0x004cbbe0]
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.NadiaOReillyIII
mov dword [rax], 0x60af7451
call r12
mov rbx, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Ducimus_quis_similique_distinctio_aspernatur
lea rcx, str.Vitae_ut_voluptas_sint_qui_tempore_molestiae_sunt
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rbp
xor edx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
call rdi
mov rsi, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rsi
mov rax, qword [0x004cc3d0]
mov ecx, 0x485fe082
mov dword [rax], 0x202e9e51
call fcn.00413350
mov rdx, qword [0x004cc0a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x20], rax
call rax
mov rax, qword [0x004cbd40]
xor r8d, r8d
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [rax], 0x88a31ff0
mov rax, qword [0x004cc320]
mov edx, dword [rax]
mov rax, qword [0x004cc2e0]
mov dword [rax], edx
mov rax, qword [0x004cbc50]
mov rdx, qword [0x004cbea0]
mov dword [rax], 0x7328c082
mov rax, qword [0x004cc330]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cbc20]
xor ecx, ecx
mov dword [rax], 0x47216e48
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov r9, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x30], r9
call r9
xor ecx, ecx
call rsi
mov rax, qword [0x004cbc10]
mov rsi, qword [0x004cc210]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [str._mf]
mov rsi, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rax], 0x1042ae1a
call rsi
mov rax, qword [0x004cbde0]
xor r8d, r8d
xor ecx, ecx
mov r10, qword [0x004cc3c0]
mov r14, qword [0x004cbe00]
mov eax, dword [rax]
mov edx, dword [r10]
mov dword [r14], eax
mov rax, qword [0x004cc480]
mov dword [rax], edx
mov rax, qword [0x004cbc60]
xor edx, edx
mov dword [rax], 0x61cc4f95
call r15
xor ecx, ecx
call rsi
mov rax, qword [0x004cc1e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc110]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov edx, dword [r14]
mov rax, qword [0x004cc0e0]
mov rcx, qword [0x004cc310]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rax], edx
mov rax, qword [0x004cbc00]
mov dword [rax], 0x69618731
mov rax, qword [0x004cbe80]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
mov rax, qword [0x004cbd00]
xor ecx, ecx
mov dword [rax], 0x6eb81998
call r13
mov ecx, 0xf4a9b07
call fcn.00413350
mov r14, qword [0x004cbcb0]
mov r15, qword [0x004cbcc0]
xor edx, edx
mov r10, qword [0x004cc3c0]
lea rcx, str.SandraGulgowski
mov dword [r14], eax
mov rax, qword [0x004cc1f0]
mov dword [r10], 0x3d935f1a
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x004cc3b0]
mov dword [rax], 0x133223cc
call r12
mov rax, qword [0x004cbca0]
mov ecx, dword [rax]
call fcn.00413350
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rdx, qword [0x004cbdc0]
lea rcx, str.ProfHailieBecker
mov dword [r15], eax
mov r15, qword [0x004cbcd0]
mov qword [rsp + 0x28], r10
mov eax, dword [r15]
mov dword [rdx], eax
xor edx, edx
call r10
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x004cbc00]
mov rcx, qword [0x004cbc60]
lea rdx, str.MalcolmFadelDVM
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.Nesciunt_ad_magnam_omnis_ut_ab_nesciunt_qui_odit_quia_nostrum_facilis_aut_vero
call rbx
mov rax, qword [0x004cbbe0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
call rbp
mov rax, qword [0x004cc080]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe20]
xor ecx, ecx
mov dword [rdx], eax
call rsi
lea rdx, str.LourdesTorphy
lea rcx, str.Pariatur_voluptas_omnis_ut_ipsum_sequi
call rbx
mov rax, qword [0x004cc0c0]
mov r9, qword [rsp + 0x30]
xor ecx, ecx
mov dword [rax], 0x4cd91500
call r9
mov r14, qword [0x004cc3e0]
mov rax, qword [0x004cbc80]
lea rcx, str.ProfBernardoAuer
mov edx, dword [r14]
mov dword [rax], edx
xor edx, edx
call r12
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rdi
mov r12, qword [0x004cc060]
mov rax, qword [0x004cc440]
xor ecx, ecx
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov edx, dword [r12]
mov dword [rax], edx
mov rax, qword [0x004cc1a0]
mov dword [rax], 0x99b0262f
call rbp
mov r10, qword [rsp + 0x28]
xor edx, edx
lea rcx, str.Qui_dolores_impedit_maiores
call r10
mov rax, qword [0x004cc420]
mov r9, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
mov dword [rax], 0x332ae4e1
mov rax, qword [0x004cc180]
mov qword [rsp + 0x28], r9
mov edx, dword [rax]
mov rax, qword [0x004cbe50]
mov dword [rax], edx
xor edx, edx
call r9
xor ecx, ecx
call rsi
mov rax, qword [0x004cbde0]
mov r9, qword [rsp + 0x28]
xor edx, edx
xor ecx, ecx
mov dword [r14], 0x161cbdcd
mov dword [rax], 0xbe3b7a39
call r9
mov rax, qword [0x004cbd50]
xor ecx, ecx
mov dword [rax], 0x2d04924e
call rbp
lea rdx, str.BrayanSpinka
lea rcx, str.MrMaximillianVon
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Ab_id_autem_quas_ab
lea rcx, str.ElveraSimonisV
call rbx
mov ecx, 0x958bba6a
call fcn.00413350
xor ecx, ecx
mov dword [r12], eax
mov rax, qword [rsp + 0x20]
call rax
mov rax, qword [0x004cc4b0]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc310]
mov dword [rsi], eax
mov rax, qword [0x004cbeb0]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cbea0]
mov r11, qword [rsp + 0x38]
xor ecx, ecx
mov dword [rsi], eax
call r11
mov rax, qword [0x004cc210]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xeac3c431
call rdi
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
mov rbx, qword [0x004cc450]
mov dword [r15], 0xbdcace1c
mov ecx, dword [rbx]
call fcn.00413350
mov rdx, qword [0x004cc430]
mov ecx, 0x3190784b
mov dword [rdx], eax
mov rax, qword [0x004cc190]
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.00413350
mov rdi, qword [0x004cbdc0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
nop
add rsp, 0x538
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret