Function at 0x40bf1d
Capabilities:
Clear file content

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov rax, qword [0x004c3330]
cmp dword [rax], 0
mov qword [rsp + 0xa0], rcx
mov qword [rsp + 0xa8], rdx
mov dword [rsp + 0xb0], r8d
mov qword [rsp + 0xb8], r9
je 0x40c8cb
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov rax, qword [0x004c3150]
xor r9d, r9d
xor r8d, r8d
mov rbx, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004c3280]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [str.TR2j]
mov ecx, dword [rax]
call fcn.0040c910
mov rdi, qword [0x004c2bc0]
mov ecx, 0x91b339f4
mov rsi, qword [0x004c3670]
mov dword [rdi], eax
mov rax, qword [0x004c3660]
mov dword [rsi], 0x9fa786
mov edx, dword [rax]
mov rax, qword [0x004c2d90]
mov dword [rax], edx
call fcn.0040c910
mov rdx, qword [0x004c2b60]
mov dword [rdx], eax
mov rax, qword [0x004c3260]
mov ecx, dword [rax]
call fcn.0040c910
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdi, qword [0x004c2dd0]
mov dword [rdi], eax
mov rax, qword [0x004c3520]
mov edx, dword [rax]
mov rax, qword [0x004c3220]
mov dword [rax], edx
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004c2c00]
mov ecx, dword [rax]
call fcn.0040c910
mov rdx, qword [0x004c35a0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov ecx, 0xe69c57cf
call fcn.0040c910
mov rdx, qword [0x004c3460]
xor r9d, r9d
mov r13, qword [sym.imp.KERNEL32.dll_ReplaceFileA]
lea r8, str.Neque_sunt_est_blanditiis_et_assumenda_expedita_saepe
lea rcx, str.Autem_illum_voluptatem
mov dword [rdx], eax
mov rax, qword [0x004c31b0]
lea rdx, str.FaeReynolds
mov eax, dword [rax]
mov dword [rsi], eax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r13
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov rax, qword [0x004c2dc0]
mov ecx, dword [rax]
call fcn.0040c910
mov rsi, qword [0x004c2a00]
xor edx, edx
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x004c3550]
mov rsi, qword [sym.imp.KERNEL32.dll_PurgeComm]
mov dword [rax], 0xa057a901
call rsi
mov rdi, qword [0x004c3470]
mov rcx, qword [0x004c2c60]
xor r9d, r9d
mov r14, qword [sym.imp.KERNEL32.dll_ReadConsoleW]
xor r8d, r8d
xor edx, edx
mov eax, dword [rdi]
mov dword [rcx], eax
xor ecx, ecx
mov qword [rsp + 0x20], 0
call r14
mov rbp, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call rbp
xor r9d, r9d
lea r8, str.Laborum_molestiae_sed_ipsum_quibusdam_porro_et_veritatis_perferendis
lea rdx, str.Enim_deleniti_soluta_vel_laboriosam_quia_perspiciatis_ea_molestias
mov qword [rsp + 0x28], 0
lea rcx, str.Nulla_beatae_consequatur_aut_voluptatem_voluptas
mov qword [rsp + 0x20], 0
call r13
mov rax, qword [0x004c36e0]
xor ecx, ecx
mov dword [rax], 0x91965b4a
mov rax, qword [0x004c2c60]
mov dword [rax], 0x92f0417e
mov rax, qword [0x004c35f0]
mov edx, dword [rax]
mov rax, qword [0x004c3540]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004c2d20]
mov ecx, dword [rax]
call fcn.0040c910
mov r15, qword [0x004c2c90]
mov r11, qword [0x004c36c0]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [r15], eax
mov rax, qword [0x004c2990]
mov edx, dword [r11]
mov dword [rax], 0xd11d363d
mov rax, qword [0x004c3570]
mov dword [rax], edx
call r12
mov rax, qword [0x004c2b80]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x14f72307
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004c3610]
mov r11, qword [0x004c36c0]
xor ecx, ecx
mov dword [rax], 0x94c6f19a
mov rax, qword [0x004c31c0]
mov dword [r11], 0x25673928
mov edx, dword [rax]
mov rax, qword [str.__ow4]
mov dword [rax], edx
xor edx, edx
call rsi
mov rax, qword [0x004c3700]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x54534b47
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004c2da0]
xor ecx, ecx
mov dword [r15], 0x59455940
mov edx, dword [rax]
mov rax, qword [0x004c3240]
mov dword [rax], edx
call r12
xor edx, edx
xor ecx, ecx
call rsi
xor ecx, ecx
mov dword [rdi], 0x25cdd729
call rbp
mov rax, qword [0x004c3290]
mov rdi, qword [0x004c36b0]
mov ecx, 0x67806693
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.0040c910
mov rdx, qword [0x004c2cd0]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov r10, qword [sym.imp.KERNEL32.dll_SetConsoleMode]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], r10
call r10
mov rax, qword [0x004c31e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004c31a0]
mov dword [rax], edx
mov rax, qword [0x004c3610]
mov dword [rax], 0xdb9e8938
mov rax, qword [rsp + 0x40]
call rax
mov rdi, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rdi
mov rax, qword [0x004c2c40]
mov ecx, dword [rax]
call fcn.0040c910
mov rcx, qword [0x004c35b0]
mov dword [rcx], eax
xor ecx, ecx
call rbp
mov rax, qword [0x004c2dd0]
xor ecx, ecx
mov dword [rax], 0xe74963c
call rdi
mov rax, qword [0x004c2d40]
mov ecx, 0x6f024ac7
mov edx, dword [rax]
mov rax, qword [0x004c2e60]
mov dword [rax], edx
call fcn.0040c910
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004c2cf0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x20], 0
call r14
mov rax, qword [0x004c29e0]
mov r11, qword [0x004c2cc0]
mov rcx, qword [0x004c31b0]
mov edx, dword [rax]
mov rax, qword [0x004c2aa0]
mov dword [rax], edx
mov rax, qword [0x004c2b70]
mov edx, dword [rax]
mov rax, qword [0x004c2e00]
mov dword [rax], edx
mov eax, dword [r11]
mov dword [rcx], eax
mov rax, qword [0x004c2a20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004c30e0]
mov dword [rax], edx
call r12
xor r9d, r9d
lea r8, str.Assumenda_sunt_deserunt_consequatur_eligendi
lea rdx, str.HoytJohnston
mov qword [rsp + 0x28], 0
lea rcx, str.Enim_unde_tenetur_et_labore_et_quis_tenetur_nihil_nulla
mov qword [rsp + 0x20], 0
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
mov ecx, 0x76a98b62
call fcn.0040c910
xor ecx, ecx
mov dword [r15], eax
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004c3160]
mov ecx, 0xf189b11d
mov dword [rax], 0xf5ecb58f
call fcn.0040c910
mov rdx, qword [0x004c2d00]
mov r10, qword [rsp + 0x48]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r10
mov ecx, 0x9fc2b952
call fcn.0040c910
mov rcx, qword [0x004c3640]
mov dword [rcx], eax
mov ecx, 0x401a0796
call fcn.0040c910
mov rcx, qword [0x004c2a00]
mov dword [rcx], eax
mov ecx, 0x31c125f8
call fcn.0040c910
mov rcx, qword [0x004c3150]
mov dword [rcx], eax
mov rax, qword [0x004c2e10]
xor ecx, ecx
mov dword [rax], 0x1041e0f
call r12
mov ecx, 0x12d893ee
call fcn.0040c910
mov rdx, qword [0x004c3190]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004c2ef0]
mov dword [rax], 0x692894d7
mov rax, qword [0x004c2f20]
mov ecx, dword [rax]
call fcn.0040c910
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov r10, qword [0x004c35c0]
mov rdx, qword [0x004c29c0]
mov r15, qword [0x004c29d0]
mov dword [rdx], eax
mov eax, dword [r10]
xor edx, edx
mov dword [r15], eax
mov rax, qword [0x004c3110]
mov dword [rax], 0xe6d8d873
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [r15], 0x8f19a6e1
xor ecx, ecx
mov qword [rsp + 0x20], 0
call r14
mov r15, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r15
xor r9d, r9d
lea r8, str.EldridgeJohnson
lea rdx, str.Aut_deserunt_aut_magnam_at_illum_qui_ab
mov qword [rsp + 0x28], 0
lea rcx, str.Officiis_aut_eaque_voluptatum_cumque_nihil_consequatur
mov qword [rsp + 0x20], 0
call r13
xor r9d, r9d
lea r8, str.JuvenalGutkowski
lea rdx, str.Odit_quidem_ad_doloremque_velit_quisquam
mov qword [rsp + 0x28], 0
lea rcx, str.VernonHodkiewicz
mov qword [rsp + 0x20], 0
call r13
mov ecx, 0x430d61c0
call fcn.0040c910
mov rdx, qword [0x004c32a0]
mov dword [rdx], eax
mov rax, qword [0x004c33c0]
mov ecx, dword [rax]
call fcn.0040c910
mov rdx, qword [0x004c2c80]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rsi
mov rax, qword [0x004c2bc0]
mov ecx, 0xd672d5b6
mov edx, dword [rax]
mov rax, qword [0x004c3510]
mov dword [rax], edx
mov rax, qword [0x004c2f20]
mov rdx, qword [0x004c3160]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.0040c910
mov rdx, qword [0x004c2ba0]
mov rcx, qword [0x004c3550]
mov dword [rdx], eax
mov rdx, qword [0x004c2b00]
mov eax, dword [rdx]
mov dword [rcx], eax
mov rax, qword [0x004c2b20]
xor ecx, ecx
mov dword [rax], 0xf990fc65
call rbp
xor ecx, ecx
call rdi
mov rax, qword [0x004c2e50]
mov r10, qword [0x004c35c0]
xor ecx, ecx
mov r11, qword [0x004c2cc0]
mov rdx, qword [0x004c31f0]
mov eax, dword [rax]
mov dword [r10], 0x10e7240c
mov dword [r11], 0x15071ee2
mov dword [rdx], eax
call rdi
xor ecx, ecx
call r15
mov rax, qword [0x004c36a0]
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [0x004c2b00]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x20], 0
call r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], 0
xor ecx, ecx
call r14
mov r15, qword [0x004c33f0]
mov rax, qword [0x004c33d0]
mov rcx, qword [0x004c3640]
mov edx, dword [r15]
mov dword [rax], edx
mov rax, qword [0x004c35b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004c3130]
mov ecx, dword [rax]
call fcn.0040c910
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004c36b0]
mov dword [rdx], eax
mov rax, qword [0x004c3650]
xor edx, edx
mov dword [rax], 0xf3ef0543
mov qword [rsp + 0x20], 0
call r14
mov rax, qword [0x004c3450]
xor ecx, ecx
mov dword [rax], 0xb328454b
mov rax, qword [0x004c2d20]
mov dword [rax], 0xb1b48d0f
call r12
mov rax, qword [0x004c29b0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r15], eax
call rbp
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
xor edx, edx
xor ecx, ecx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rbx
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004c32b0]
mov rcx, qword [0x004c2c60]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004c2d70]
mov edx, dword [rax]
mov rax, qword [0x004c2cb0]
mov dword [rax], edx
mov rax, qword [0x004c2a60]
mov ecx, dword [rax]
call fcn.0040c910
mov rdx, qword [0x004c3480]
xor r9d, r9d
lea r8, str.Reprehenderit_sint_tempore_eaque_sit
lea rcx, str.LottieYundt
mov dword [rdx], eax
mov rax, qword [0x004c2da0]
mov rdx, qword [0x004c3160]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004c2a50]
mov dword [rax], 0xd95734b6
mov rax, qword [0x004c31f0]
mov edx, dword [rax]
mov rax, qword [0x004c3560]
mov dword [rax], edx
lea rdx, str.GarrisonKuvalisII
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call r13
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004c2d60]
mov ecx, dword [rax]
call fcn.0040c910
mov rsi, qword [0x004c31b0]
xor ecx, ecx
mov dword [rsi], eax
call r12
mov rax, qword [0x004c2b50]
mov ecx, dword [rax]
call fcn.0040c910
mov rdx, qword [0x004c2c10]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rbx
mov rax, qword [0x004c2b90]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004c3690]
mov dword [rax], edx
call rdi
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, dword [rsp + 0xb0]
mov r8, qword [rsp + 0xa8]
mov rcx, rax
mov rax, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
call fcn.0040b6ec
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret