Function at 0x6bad0f55
Capabilities:
Clear file content
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x68
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x31f7
mov qword [rsp + 0xb0], rcx
mov qword [rsp + 0xb8], rdx
jne 0x6bad1667
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Ratione_labore_error
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb80ac0]
lea rcx, str.ProfUlicesBoyleMD
mov dword [rax], 0x93868b6c
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov ecx, 0xe901f14c
call fcn.6bad9c90
mov rbx, qword [0x6bb80a40]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rbx], eax
call r13
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Nostrum_omnis_nam_optio
call rdi
lea r8, str.Non_qui_in_provident_et_facere_non_nemo_dolor_praesentium
xor edx, edx
xor ecx, ecx
call rdi
mov r12, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call r12
mov rax, qword [0x6bb80760]
mov rsi, qword [0x6bb811f0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80ee0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81100]
mov ecx, 0x1e119497
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80720]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80930]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb811c0]
mov dword [rcx], eax
mov rax, qword [0x6bb81190]
mov edx, dword [rax]
mov rax, qword [0x6bb80de0]
mov dword [rax], edx
mov rax, qword [0x6bb80cd0]
mov dword [rax], 0x25fbb409
mov rax, qword [0x6bb80da0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81140]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x6bb808f0]
mov rbp, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
mov rax, qword [0x6bb80f20]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80730]
mov rcx, qword [0x6bb80a10]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rbx], 0x6b9d4334
call r15
mov rax, qword [0x6bb80970]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [0x6bb808f0]
mov rbp, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
mov rbx, qword [0x6bb80cc0]
xor edx, edx
xor ecx, ecx
mov dword [rbx], 0xc409d27a
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov edx, dword [rbx]
mov ecx, 0x5b5107b5
mov rax, qword [0x6bb80e80]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb805a0]
mov r14, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.OscarHomenick
mov dword [rdx], eax
lea rdx, str.Autem_et_mollitia_quia_debitis_aliquid_omnis_nihil
call r14
mov ecx, 0x8b14cc86
call fcn.6bad9c90
mov rdx, qword [0x6bb81210]
mov ecx, 0x44b0cc57
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80950]
mov rbx, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor ecx, ecx
call rbx
xor ecx, ecx
call rsi
xor ecx, ecx
call r15
mov rax, qword [0x6bb810a0]
xor edx, edx
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rax], 0x12e2d213
call rsi
mov rax, qword [0x6bb80500]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x6bb807b0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb81060]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80920]
mov dword [rax], edx
call r12
mov ecx, 0x59fde8c5
call fcn.6bad9c90
mov rbx, qword [0x6bb80510]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x6bb806a0]
mov rbx, qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rax], 0xdff639c0
call rbx
mov rax, qword [0x6bb811f0]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x6bb808d0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
xor ecx, ecx
call r13
mov rax, qword [0x6bb80ed0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81000]
mov dword [rax], edx
mov rax, qword [0x6bb811e0]
mov edx, dword [rax]
mov rax, qword [0x6bb80b60]
mov dword [rax], edx
xor edx, edx
call rsi
lea r8, str.Veritatis_et_laudantium_ut_deleniti
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80520]
xor edx, edx
xor ecx, ecx
mov rdi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov dword [rax], 0x7a0413b2
call rdi
mov rax, qword [0x6bb80cd0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov r11, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], r11
call r11
mov rax, qword [0x6bb80f30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d40]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb80a10]
mov rcx, qword [0x6bb80510]
mov dword [rax], 0xe959bcf2
mov rax, qword [0x6bb80a80]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0x83a9eac2
call fcn.6bad9c90
mov rdx, qword [0x6bb80c70]
mov dword [rdx], eax
mov rax, qword [0x6bb809f0]
mov dword [rax], 0xc162d911
mov rax, qword [0x6bb808d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ec0]
mov dword [rdx], eax
mov rax, qword [0x6bb80ae0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81170]
mov r10, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80860]
mov qword [rsp + 0x50], r10
mov dword [rax], 0x4c10976a
mov rax, qword [0x6bb80cb0]
mov edx, dword [rax]
mov rax, qword [0x6bb80980]
mov dword [rax], edx
call r10
mov rax, qword [0x6bb808e0]
xor ecx, ecx
mov dword [rax], 0x1f9cdbe5
call r12
mov rax, qword [0x6bb80c80]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80690]
mov dword [rax], edx
call rbx
mov ecx, 0x890b77ef
call fcn.6bad9c90
mov rdx, qword [0x6bb805f0]
lea rcx, str.SheridanHane
mov dword [rdx], eax
lea rdx, str.Nihil_ut_ex_mollitia_voluptates
call r14
mov ecx, 0xdc9c6c2b
call fcn.6bad9c90
mov rdx, qword [0x6bb80820]
mov dword [rdx], eax
mov rax, qword [0x6bb80930]
mov dword [rax], 0x3c6d279f
mov rax, qword [0x6bb81040]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80800]
mov dword [rdx], eax
mov rax, qword [0x6bb807a0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80eb0]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x6bb808a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80850]
mov dword [rax], edx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rbx
mov rax, qword [0x6bb811c0]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x6bb808f0]
mov dword [rax], 0x1cf8eb7f
mov rax, qword [str.:_]
mov edx, dword [rax]
mov rax, qword [0x6bb81130]
mov dword [rax], edx
mov rax, qword [0x6bb80f10]
mov edx, dword [rax]
mov rax, qword [0x6bb80b80]
mov dword [rax], edx
mov rax, qword [0x6bb807c0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
mov rax, qword [0x6bb80d20]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb806e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80df0]
mov edx, dword [rax]
mov rax, qword [0x6bb81200]
mov dword [rax], edx
call r13
xor ecx, ecx
call r12
xor edx, edx
lea rcx, str.Consequatur_officia_architecto_consequatur_excepturi_sunt_expedita_est_ad_doloremque
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor ecx, ecx
call rdi
xor r8d, r8d
mov r11, qword [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call r11
lea rdx, str.Qui_illum_est_molestiae
lea rcx, str.MsRaeganVeumDVM
call r14
mov r10, qword [rsp + 0x50]
xor ecx, ecx
call r10
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbp
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80cb0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80650]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80860]
mov rdx, qword [0x6bb80930]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rax, qword [str.7U5]
mov rcx, qword [0x6bb80ee0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rbx
mov ecx, 0x9751e81e
call fcn.6bad9c90
mov rdx, qword [0x6bb80560]
mov ecx, 0x81e0bff8
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb807b0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
xor ecx, ecx
call rsi
xor ecx, ecx
call r15
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80630]
mov ecx, 0x738a3e65
mov edx, dword [rax]
mov rax, qword [0x6bb80fb0]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80d90]
mov dword [rdx], eax
mov rax, qword [0x6bb805c0]
mov dword [rax], 0x5e6844a1
mov rax, qword [0x6bb80730]
mov dword [rax], 0xdccbf284
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xb0]
call fcn.6bace900
mov qword [rsp + 0x48], rax
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x14b2
jne 0x6bad1b4b
mov rax, qword [0x6bb81040]
mov r12, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rax], 0x51b24d44
call r12
mov ecx, 0x1b03166a
call fcn.6bad9c90
mov rdx, qword [0x6bb81100]
mov dword [rdx], eax
mov rax, qword [0x6bb80ee0]
mov dword [rax], 0xf322a500
mov rax, qword [0x6bb80fe0]
mov edx, dword [rax]
mov rax, qword [0x6bb80d90]
mov dword [rax], edx
mov rax, qword [0x6bb81060]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80940]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x6bb81000]
xor ecx, ecx
mov dword [rax], 0xe933ea85
mov rax, qword [0x6bb80830]
mov edx, dword [rax]
mov rax, qword [0x6bb80e80]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x6bb81090]
mov rbp, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.LynnWuckert
mov dword [rax], 0x4b303fd
mov rax, qword [0x6bb80f20]
mov edx, dword [rax]
mov rax, qword [0x6bb81030]
mov dword [rax], edx
mov rax, qword [0x6bb80c80]
mov dword [rax], 0xe9f6e1b6
mov rax, qword [0x6bb809e0]
mov edx, dword [rax]
mov rax, qword [0x6bb809a0]
mov dword [rax], edx
mov rax, qword [0x6bb81200]
mov dword [rax], 0xeddf01fb
call rbp
mov rax, qword [0x6bb80ab0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov ecx, eax
mov rax, qword [0x6bb80fc0]
mov dword [rax], ecx
call fcn.6bad9c90
mov rdx, qword [0x6bb81010]
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80d20]
mov edx, dword [rax]
mov rax, qword [0x6bb806c0]
mov dword [rax], edx
call r15
mov r13, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call r13
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.LaishaMoen
call rbx
mov r14, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r14
mov rdi, qword [0x6bb806e0]
mov rcx, qword [0x6bb80660]
mov eax, dword [rdi]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80540]
mov rdx, qword [0x6bb80d80]
xor ecx, ecx
mov r11, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov eax, dword [rax]
mov qword [rsp + 0x58], r11
mov dword [rdx], eax
mov rax, qword [0x6bb80fc0]
xor edx, edx
mov dword [rax], 0x6c4f9fe6
call r11
xor edx, edx
xor ecx, ecx
call r13
mov r10, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x6bb811b0]
lea rdx, str.Ut_repellendus_provident_et_et_dolor_ipsum
lea rcx, str.Fuga_eligendi_impedit_officia
mov qword [rsp + 0x50], r10
mov dword [rax], 0x6057c7a3
call r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rsi
mov r13, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
mov rax, qword [0x6bb80560]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80960]
lea rcx, str.Delectus_et_quibusdam_dignissimos_mollitia_natus
mov dword [rdx], eax
call rbp
xor edx, edx
lea rcx, str.AnaisMetz
call rbx
xor ecx, ecx
call r15
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
call r14
xor edx, edx
lea rcx, str.Sint_accusamus_ea_aut_possimus
call rbx
mov ecx, 0x3e7200d4
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb80660]
mov r15, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rcx], eax
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
call r14
xor ecx, ecx
call r12
mov r11, qword [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call r11
xor edx, edx
lea rcx, str.Quia_eius_repellat_doloremque_ut_quo_molestias_sint_excepturi
call rbx
xor ecx, ecx
call r13
mov rax, qword [0x6bb80980]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80b00]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80730]
mov dword [rax], 0xc3681e27
call r13
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call r15
mov r10, qword [rsp + 0x50]
lea rdx, str.ProfLaurianeBoyerMD
lea rcx, str.ProfGladysBodeMD
call r10
mov rax, qword [0x6bb81060]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80a80]
mov dword [rdx], eax
mov rax, qword [0x6bb80d70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81000]
mov r13, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.IsabelHammes
mov dword [rdx], eax
mov rax, qword [0x6bb80e40]
mov dword [rax], 0x8411ea59
mov rax, qword [0x6bb809e0]
mov edx, dword [rax]
mov rax, qword [0x6bb809d0]
mov dword [rax], edx
call r13
xor ecx, ecx
call r12
mov rax, qword [0x6bb80830]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81170]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rcx, str.Incidunt_aut_voluptatem_amet_veritatis_et_eligendi_aut_blanditiis
call rbp
mov rax, qword [0x6bb80f50]
mov ecx, 0x55ee46b3
mov dword [rax], 0x761237c4
call fcn.6bad9c90
mov rdx, qword [0x6bb80a40]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [rdi]
mov rax, qword [0x6bb80ec0]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x6bb80fb0]
lea rcx, str.Natus_ut_officia_maiores
mov edx, dword [rax]
mov rax, qword [0x6bb80de0]
mov dword [rax], edx
xor edx, edx
call rbx
mov ecx, 0x9600846d
call fcn.6bad9c90
mov rdx, qword [0x6bb80790]
mov dword [rdx], eax
mov rax, qword [0x6bb80f60]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80d80]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x6bb81000]
mov dword [rax], 0xf4e71339
mov rax, qword [0x6bb811b0]
mov dword [rax], 0x4e4203c9
mov rax, qword [0x6bb80e00]
mov dword [rax], 0xb3767bc7
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x6bb80cc0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov ecx, 0x63b5ba1
mov dword [rdi], eax
mov rax, qword [0x6bb80670]
mov dword [rax], 0xd83e6dec
call fcn.6bad9c90
mov rdx, qword [0x6bb806d0]
lea rcx, str.MissEmilyMarvinV
mov dword [rdx], eax
call r13
mov rax, qword [rsp + 0x40]
xor ecx, ecx
call rax
mov rax, qword [0x6bb80d50]
mov dword [rax], 0xce2404db
mov rax, qword [rsp + 0x48]
add rsp, 0x68
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret