Function at 0x6bace900
Capabilities:
Clear file content
Set current directory

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x98
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x56e9
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rdx
jle 0x6bacf1cf
mov rax, qword [0x6bb80910]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80fc0]
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x6bb80780]
mov dword [rax], 0x1d8dc68c
call rbx
mov rsi, qword [0x6bb80e00]
mov ecx, dword [rsi]
call fcn.6bad9c90
mov rdi, qword [0x6bb80530]
mov ecx, 0x95b7f5db
mov dword [rdi], eax
mov rax, qword [0x6bb80560]
mov dword [rax], 0x4edfe157
call fcn.6bad9c90
mov rdx, qword [0x6bb809c0]
mov ecx, 0xd663f373
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80580]
mov rdi, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov r15, qword [0x6bb810d0]
mov rax, qword [0x6bb80f40]
xor ecx, ecx
mov edx, dword [r15]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb80dc0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80880]
mov dword [rdx], eax
mov rax, qword [str.:_]
mov dword [rax], 0xdf914ab3
mov rax, qword [0x6bb80b00]
mov dword [rax], 0x6d3d241a
mov rax, qword [0x6bb808d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb809f0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
mov rax, qword [sym.imp.KERNEL32.dll_OpenEventA]
xor edx, edx
xor ecx, ecx
lea r8, str.Facilis_dolore_ab_aliquid_fugiat_aliquid_possimus
mov qword [rsp + 0x40], rax
call rax
mov r11, qword [sym.imp.KERNEL32.dll_SetCommMask]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x80], r11
call r11
mov rbp, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
call rbp
mov r12, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Dolorem_magni_fuga_earum_debitis_beatae_occaecati_id_illo_porro
lea rcx, str.Eaque_tenetur_maxime_repudiandae_error_accusantium
call r12
mov rax, qword [0x6bb80500]
mov rdx, qword [0x6bb805d0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
mov rbx, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
xor ecx, ecx
call rbx
lea rdx, str.BeatriceConnelly
lea rcx, str.Et_qui_placeat_qui_natus_et_dolore_assumenda_mollitia
call r12
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
lea rcx, str.LinneaFeeney
mov qword [rsp + 0x78], r10
call r10
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80890]
mov rdx, qword [0x6bb80850]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80950]
mov rdx, qword [0x6bb80fe0]
mov eax, dword [rax]
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb80cb0]
mov r13, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
call r13
mov rax, qword [0x6bb810f0]
lea rcx, str.MrKeatonHaagIV
mov edx, dword [rax]
mov rax, qword [0x6bb80de0]
mov dword [rax], edx
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov qword [rsp + 0x50], rax
call rax
xor ecx, ecx
call r13
mov rax, qword [0x6bb80710]
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [0x6bb80850]
xor edx, edx
mov r14, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov dword [rax], 0xd81ba23a
mov rax, qword [0x6bb80960]
mov eax, dword [rax]
mov dword [rsi], eax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x6bb809d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80670]
mov rsi, qword [0x6bb80e40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb806e0]
mov eax, dword [rax]
mov dword [rsi], eax
mov rsi, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
call rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x70], rax
call rax
mov rax, qword [0x6bb81030]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb805b0]
mov dword [rax], edx
mov rax, qword [0x6bb80f60]
mov edx, dword [rax]
mov rax, qword [0x6bb80e90]
mov dword [rax], edx
mov rax, qword [0x6bb808f0]
mov dword [rax], 0x316b26c3
call rbp
mov rax, qword [0x6bb80c70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811b0]
xor r8d, r8d
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
mov qword [rsp + 0x58], rax
call rax
mov rax, qword [0x6bb80500]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80550]
mov dword [rdx], eax
mov rax, qword [0x6bb80a90]
mov dword [rax], 0xb9f5898c
mov rax, qword [0x6bb81020]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80900]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb80fc0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80700]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb80ad0]
mov dword [rax], 0xec78c2db
mov rax, qword [0x6bb80e40]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80c90]
xor ecx, ecx
mov dword [rdx], eax
call rbp
mov rax, qword [0x6bb81100]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80520]
mov ecx, 0xa959ee73
mov dword [rdx], eax
mov rax, qword [0x6bb80640]
mov dword [rax], 0x8cc10fd
mov rax, qword [0x6bb80ff0]
mov dword [rax], 0xf1077fec
call fcn.6bad9c90
lea rdx, str.Sit_a_aut_eos_magni_illum_sequi_non_labore_suscipit_ducimus
lea rcx, str.JarrettChristiansenI
mov dword [r15], eax
call r12
mov rax, qword [0x6bb80620]
mov rdx, qword [0x6bb80e10]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call rdi
mov r12, qword [0x6bb80660]
xor edx, edx
xor ecx, ecx
lea r8, str.Inventore_provident_et_qui_rerum_beatae_dicta_harum_aut_repellat_enim
mov rax, qword [rsp + 0x40]
mov dword [r12], 0xad9fca3c
call rax
mov ecx, 0x48b18990
call fcn.6bad9c90
mov rdx, qword [0x6bb810f0]
mov ecx, 0x8f699565
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80d90]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80fe0]
mov rdx, qword [0x6bb80760]
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r15
lea rcx, str.HershelOHaraIV
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80b10]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb811f0]
mov dword [rax], edx
xor edx, edx
call r15
mov rax, qword [0x6bb80b80]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x335149d4
mov rax, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x60], rax
call rax
mov r10, qword [rsp + 0x78]
xor edx, edx
lea rcx, str.Sint_dolorem_omnis_voluptatem_odio_ut
call r10
xor ecx, ecx
call rbx
mov rax, qword [0x6bb805a0]
mov edx, dword [rax]
mov rax, qword [0x6bb80f30]
mov dword [rax], edx
mov rax, qword [0x6bb80c80]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80560]
mov ecx, 0x74e36921
mov dword [rdx], eax
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80ea0]
mov dword [rdx], eax
xor edx, edx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r14
mov rax, qword [0x6bb807d0]
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x6bb80510]
mov r14, qword [0x6bb80f20]
mov edx, dword [rax]
mov dword [r14], 0x88beaa9c
mov dword [rcx], edx
mov rdx, qword [0x6bb80960]
xor ecx, ecx
mov edx, dword [rdx]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x20], 0
call rax
mov rax, qword [0x6bb810e0]
mov dword [rax], 0x1eadef10
mov rax, qword [0x6bb81140]
mov dword [rax], 0x13cb1f53
mov rax, qword [0x6bb80640]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80750]
mov r15, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov rax, qword [0x6bb80630]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80a50]
mov dword [rax], edx
xor edx, edx
call rdi
mov edx, dword [r12]
mov rax, qword [0x6bb81120]
lea rcx, str.BeulahJaskolski
mov r12, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [rax], edx
call r12
mov rax, qword [0x6bb80530]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81150]
mov dword [rax], edx
mov rdx, qword [0x6bb80fd0]
mov eax, dword [r14]
mov dword [rdx], eax
xor edx, edx
call rdi
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 0
xor edx, edx
mov rax, qword [rsp + 0x60]
xor ecx, ecx
call rax
xor ecx, ecx
call r13
lea rcx, str.DrMaxHarveyIII
call r12
mov rax, qword [0x6bb811e0]
mov rcx, qword [0x6bb80ad0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb80820]
xor ecx, ecx
mov dword [rax], 0x82d0edbd
call r15
lea r8, str.JovannyHeller
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
lea rcx, str.FrederickLindgrenJr
call r12
mov rax, qword [0x6bb80520]
mov rdx, qword [0x6bb80750]
mov rcx, qword [0x6bb80d90]
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80d00]
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
call rbp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov rax, qword [0x6bb80ef0]
mov ecx, 0x8b9d2a45
mov dword [rax], 0x3fb27a17
call fcn.6bad9c90
mov rdx, qword [0x6bb80ce0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x70]
call rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80850]
mov rdx, qword [0x6bb80760]
mov ecx, 0x5609e05a
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.6bad9c90
mov rbp, qword [0x6bb80d60]
lea rcx, str.WallaceGreenfelder
mov dword [r14], 0x13e867cc
mov dword [rbp], eax
mov rax, qword [0x6bb810f0]
mov dword [rax], 0x41e8085
call r12
xor ecx, ecx
call rsi
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80980]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80d30]
mov dword [rax], edx
xor edx, edx
call rdi
xor edx, edx
lea r8, str.Exercitationem_debitis_quos_placeat_omnis_minus_dolorem
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov rax, qword [0x6bb80fb0]
mov rdi, qword [0x6bb811a0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb80820]
mov dword [rax], 0xaa91765
call r13
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x58]
call rax
mov rax, qword [0x6bb80640]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
call rbx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80da0]
xor ecx, ecx
mov dword [rax], 0x94d13955
mov rax, qword [0x6bb80e10]
mov edx, dword [rax]
mov rax, qword [0x6bb81000]
mov dword [rax], edx
mov eax, dword [rdi]
mov rdi, qword [0x6bb80fc0]
mov dword [rdi], eax
call r15
mov rdi, qword [0x6bb80600]
xor ecx, ecx
mov dword [rdi], 0xf88d30c5
call rbx
mov rax, qword [0x6bb805d0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80510]
xor ecx, ecx
mov dword [rbx], eax
mov rbx, qword [sym.imp.KERNEL32.dll_SetLastError]
call rbx
mov ecx, 0x330cf3bb
call fcn.6bad9c90
mov rdx, qword [0x6bb80840]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80fd0]
mov dword [rax], 0x33688448
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rbx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb810e0]
xor ecx, ecx
mov dword [rax], 0x9b977e90
mov rax, qword [rsp + 0x48]
call rax
lea rcx, str.Consequatur_facere_unde_et_voluptates_est_molestias_molestiae_ipsam_veritatis
call r12
xor ecx, ecx
call rsi
lea rcx, str.LeaBernier
mov rax, qword [rsp + 0x50]
call rax
mov eax, dword [rdi]
mov rsi, qword [0x6bb80950]
xor edx, edx
mov r11, qword [rsp + 0x80]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x6bb80b70]
mov dword [rax], 0xba27b91d
call r11
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x78cf
jne 0x6bacfad7
mov rax, qword [0x6bb80f40]
mov rsi, qword [0x6bb80c60]
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80a30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb809c0]
mov rdi, qword [0x6bb80af0]
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_OpenEventA]
lea r8, str.RaphaelleGrimes
mov dword [rsi], eax
mov rax, qword [0x6bb80680]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb80730]
mov edx, dword [rax]
mov rax, qword [0x6bb81020]
mov dword [rax], edx
mov rax, qword [0x6bb80570]
xor edx, edx
mov dword [rax], 0xeb8e30e5
call rbp
mov rsi, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80dd0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x2178a8d2
call rsi
mov rbx, qword [0x6bb808a0]
mov rax, qword [0x6bb80e30]
mov ecx, 0x267a5590
mov edx, dword [rbx]
mov dword [rax], edx
call fcn.6bad9c90
mov rdi, qword [0x6bb81070]
mov ecx, 0x324c401
mov dword [rdi], eax
call fcn.6bad9c90
mov rdi, qword [0x6bb808e0]
mov r14, qword [0x6bb806d0]
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [rdi], eax
mov rax, qword [0x6bb81190]
mov eax, dword [rax]
mov dword [r14], eax
call r12
mov rax, qword [0x6bb80650]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r11, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov rdx, qword [0x6bb80eb0]
lea rcx, str.KianaWillms
mov qword [rsp + 0x48], r11
mov dword [rdx], eax
xor edx, edx
call r11
xor r9d, r9d
xor r8d, r8d
mov rdi, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x6bb81030]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xd738bbb9
mov rax, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov qword [rsp + 0x40], rax
call rax
mov r11, qword [rsp + 0x48]
xor edx, edx
lea rcx, str.ProfVincentBotsfordIV
mov qword [rsp + 0x60], r11
call r11
xor ecx, ecx
call r12
mov rax, qword [sym.imp.KERNEL32.dll_SetCommBreak]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov r12, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call r12
mov rax, qword [0x6bb810f0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80a50]
mov dword [rax], edx
call r12
xor edx, edx
mov r15, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
call r15
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x50], rax
call rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb811f0]
mov rcx, qword [0x6bb80ff0]
xor edx, edx
mov eax, dword [rax]
mov dword [rcx], eax
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
mov rax, qword [0x6bb80e10]
mov r10, qword [0x6bb810d0]
xor ecx, ecx
mov rdx, qword [0x6bb806b0]
mov dword [rax], 0x86633381
mov rax, qword [0x6bb80620]
mov dword [rax], 0x30a84369
mov eax, dword [r10]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
mov eax, dword [rbx]
mov rbx, qword [0x6bb81130]
mov dword [rbx], eax
mov rax, qword [0x6bb806f0]
mov rbx, qword [0x6bb80ac0]
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb80670]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80b50]
mov r13, qword [0x6bb80a40]
mov dword [rdx], eax
mov rax, qword [0x6bb81070]
xor edx, edx
mov eax, dword [rax]
mov dword [r13], eax
call rsi
mov rax, qword [0x6bb80dc0]
mov rbx, qword [0x6bb80ad0]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbx], eax
mov rax, qword [0x6bb80610]
mov dword [rax], 0x120401c9
mov rax, qword [0x6bb80a60]
mov dword [rax], 0x985e0b98
mov rax, qword [rsp + 0x50]
call rax
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor r8d, r8d
mov qword [rsp + 0x30], 0
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
mov rax, qword [str.eNl.h_Q]
mov ecx, dword [rax]
call fcn.6bad9c90
mov ecx, 0x672327b4
mov dword [r14], eax
mov rax, qword [0x6bb810a0]
mov dword [rax], 0x46a45142
call fcn.6bad9c90
mov r14, qword [0x6bb80e50]
xor edx, edx
xor ecx, ecx
lea r8, str.AmaniDeckowDDS
mov dword [r14], eax
call rbp
mov rax, qword [0x6bb80fe0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80530]
lea rcx, str.Totam_mollitia_minima_molestias_eos_sit_itaque_mollitia_quo_autem_ea_ut
mov dword [rbx], eax
mov rax, qword [0x6bb80540]
mov edx, dword [rax]
mov rax, qword [0x6bb80ec0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
xor r8d, r8d
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call rdi
mov rbx, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rbx
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80650]
mov dword [r13], 0x1a78cfbe
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb81070]
mov edx, dword [r14]
mov dword [rcx], eax
mov rax, qword [0x6bb81200]
mov ecx, 0xedfd8d83
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb810f0]
mov dword [rdx], eax
mov rax, qword [0x6bb80a30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov dword [r14], eax
mov r14, qword [0x6bb809b0]
mov ecx, dword [r14]
call fcn.6bad9c90
mov rcx, qword [0x6bb80aa0]
mov rdx, qword [0x6bb81210]
mov dword [rcx], eax
mov eax, dword [r13]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov r9, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Sunt_illo_delectus_perferendis_rerum
mov qword [rsp + 0x58], r9
call r9
mov r10, qword [0x6bb810d0]
mov ecx, dword [r10]
call fcn.6bad9c90
mov rcx, qword [0x6bb80ea0]
mov dword [rcx], eax
mov ecx, 0xe45d1ff3
call fcn.6bad9c90
mov rdx, qword [0x6bb80530]
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x6bb80870]
lea r8, str.Ipsam_nisi_voluptates
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80800]
mov dword [rax], edx
xor edx, edx
call rbp
xor ecx, ecx
call rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r15, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
xor ecx, ecx
call r15
mov r13, qword [0x6bb80740]
mov rax, qword [0x6bb80de0]
xor ecx, ecx
mov edx, dword [r13]
mov dword [rax], edx
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80600]
mov rcx, qword [0x6bb81070]
mov r10, qword [0x6bb80920]
mov rdx, qword [0x6bb80f40]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb80d30]
mov rcx, qword [0x6bb80680]
mov dword [rax], 0xf01e605d
mov eax, dword [r10]
mov dword [rdx], eax
mov rax, qword [0x6bb806b0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [str.7U5]
mov edx, dword [rax]
mov rax, qword [0x6bb80d00]
mov dword [rax], edx
mov rax, qword [0x6bb81210]
mov dword [rax], 0x38662db3
mov rax, qword [0x6bb80b20]
mov edx, dword [rax]
mov rax, qword [0x6bb805d0]
mov dword [rax], edx
mov rax, qword [0x6bb80930]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb810f0]
mov r9, qword [rsp + 0x58]
lea rcx, str.Nemo_eaque_dolorem_est_impedit_doloremque_fugit_molestias_id
mov dword [r13], eax
mov rax, qword [0x6bb808e0]
mov eax, dword [rax]
mov dword [rdx], eax
call r9
mov rax, qword [0x6bb80ce0]
mov rcx, qword [0x6bb80f20]
mov edx, dword [rax]
mov rax, qword [0x6bb811c0]
mov dword [rax], edx
mov eax, dword [r13]
mov dword [rcx], eax
mov rax, qword [0x6bb806c0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ad0]
mov rcx, qword [0x6bb81130]
mov dword [rdx], eax
mov rax, qword [0x6bb81110]
lea rdx, str.Unde_eum_et
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb80850]
lea rcx, str.MikaylaSchneider
mov dword [rax], 0xe7465021
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rax, qword [0x6bb80850]
mov r13, qword [0x6bb80900]
mov ecx, dword [rax]
mov dword [r13], 0xd76b7303
call fcn.6bad9c90
mov rdx, qword [0x6bb80f00]
mov ecx, dword [r13]
mov dword [rdx], eax
mov rax, qword [0x6bb80aa0]
mov dword [rax], 0x926ae347
call fcn.6bad9c90
mov rdx, qword [0x6bb80dd0]
lea r8, str.Voluptates_esse_error_ut_eum
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb81090]
xor edx, edx
mov dword [rax], 0x7d6faaac
call rbp
xor ecx, ecx
call r12
mov rax, qword [0x6bb809c0]
xor r9d, r9d
xor r8d, r8d
mov rbp, qword [0x6bb80590]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x6bb81130]
mov edx, dword [rax]
mov rax, qword [0x6bb80ae0]
mov dword [rax], edx
xor edx, edx
mov dword [rsp + 0x20], 0
call rdi
mov ecx, 0xbf13005
call fcn.6bad9c90
mov rdx, qword [0x6bb80a70]
mov r12, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
mov dword [rdx], eax
call r12
mov rax, qword [0x6bb81160]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80ab0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb810a0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xeb9f1ef9
mov dword [rsp + 0x20], 0
call rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80ac0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80750]
mov dword [rax], edx
mov rax, qword [0x6bb80b60]
mov dword [rax], 0xbcdb6c8
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call r15
mov rax, qword [0x6bb80fc0]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x6bb80ff0]
mov r12, qword [0x6bb80c80]
mov dword [rcx], eax
xor ecx, ecx
mov dword [r12], 0x93885726
mov dword [rsp + 0x20], 0
call rdi
mov rax, qword [0x6bb80ff0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80cb0]
mov r11, qword [rsp + 0x60]
lea rcx, str.AlyceBashirian
mov dword [rdx], eax
xor edx, edx
call r11
mov rax, qword [0x6bb80af0]
mov rdi, qword [0x6bb81050]
xor ecx, ecx
mov dword [rax], 0x4d406def
mov rax, qword [rsp + 0x48]
mov dword [rdi], 0x6afcca6b
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor r8d, r8d
mov r13, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call r13
mov rax, qword [0x6bb80d30]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80630]
mov dword [rax], edx
xor edx, edx
call r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80f70]
mov ecx, 0x1c7ef843
mov edx, dword [rax]
mov rax, qword [0x6bb80ed0]
mov dword [rax], edx
call fcn.6bad9c90
mov rsi, qword [0x6bb80f20]
mov edx, dword [rdi]
xor ecx, ecx
mov dword [rsi], eax
mov rax, qword [0x6bb80db0]
mov dword [rax], edx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov rax, qword [0x6bb80890]
xor ecx, ecx
mov dword [rax], 0x853c3f68
call rbx
mov rax, qword [0x6bb811e0]
mov dword [r12], 0x8daa408c
mov dword [rax], 0x7edbe7d2
mov rax, qword [0x6bb80ea0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r10, qword [0x6bb80920]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [r10], eax
call r13
mov rax, qword [0x6bb808d0]
mov ecx, dword [rbp]
mov eax, dword [rax]
mov dword [r14], eax
call fcn.6bad9c90
mov ecx, 0xa728921c
mov dword [r14], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb811b0]
xor ecx, ecx
mov dword [rdx], eax
call rbx
mov rax, qword [0x6bb80540]
mov rsi, qword [0x6bb81190]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rsi], eax
mov rax, qword [0x6bb80720]
mov dword [rax], 0xf8fc7f33
call rbx
mov rax, qword [0x6bb810b0]
mov dword [rax], 0xdd85f90e
mov rax, qword [0x6bb80830]
mov eax, dword [rax]
mov dword [rbp], eax
mov rax, qword [0x6bb80e90]
mov ecx, dword [rax]
call fcn.6bad9c90
xor edx, edx
xor ecx, ecx
mov dword [r14], eax
mov rax, qword [rsp + 0x40]
call rax
xor edx, edx
xor r8d, r8d
xor ecx, ecx
call r13
mov rax, qword [0x6bb811f0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb80c60]
mov dword [rsi], eax
mov rax, qword [0x6bb81070]
mov edx, dword [rax]
mov rax, qword [0x6bb80980]
mov dword [rax], edx
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x40], rax
test rax, rax
jne 0x6bacfafd
mov qword [rsp + 0x58], 0
jmp 0x6bad0f3c
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x10da
jle 0x6bad0045
mov rax, qword [0x6bb80680]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80fb0]
xor r8d, r8d
xor ecx, ecx
mov rbp, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [rdx], eax
mov rax, qword [0x6bb80e20]
mov edx, dword [rax]
mov rax, qword [0x6bb808e0]
mov dword [rax], edx
xor edx, edx
call rbp
mov rdi, qword [0x6bb80b50]
lea rdx, str.Sint_officiis_possimus_sit_et_quia_quaerat_cumque_ad
lea rcx, str.Consectetur_optio
mov dword [rdi], 0x62d8f443
call qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rsi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call rsi
mov r11, qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
mov qword [rsp + 0x60], r11
call r11
mov rax, qword [0x6bb80560]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80b40]
xor ecx, ecx
mov dword [rbx], eax
mov rax, qword [0x6bb81070]
mov dword [rax], 0xa90e9042
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov r10, qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, str.Doloribus_nihil_reiciendis_sed
mov qword [rsp + 0x58], r10
call r10
mov rax, qword [0x6bb80ec0]
mov dword [rax], 0xf49367bc
mov rax, qword [0x6bb80d00]
mov dword [rax], 0x15304369
mov rax, qword [0x6bb80710]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80600]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb80540]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov r12, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor ecx, ecx
mov dword [rax], 0xc57456d9
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
mov rbx, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80ad0]
mov ecx, 0x8f170496
mov edx, dword [rax]
mov rax, qword [0x6bb80ff0]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80b20]
mov dword [rdx], eax
mov rax, qword [0x6bb805b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
xor ecx, ecx
mov dword [rdi], eax
call r15
mov rax, qword [0x6bb80de0]
mov rdi, qword [0x6bb80e30]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdi], eax
call rbx
mov rax, qword [0x6bb80540]
xor edx, edx
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [rax], 0x9ef8614c
call r13
mov rax, qword [0x6bb80da0]
xor r9d, r9d
xor edx, edx
xor r8d, r8d
xor ecx, ecx
mov dword [rax], 0x6328ee01
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call r12
xor ecx, ecx
call rbx
mov r8, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.KristopherUpton
mov qword [rsp + 0x50], r8
call r8
mov rax, qword [0x6bb806b0]
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x56bf6e07
call qword [sym.imp.KERNEL32.dll_FindNextStreamW]
mov r9, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
mov qword [rsp + 0x48], r9
call r9
mov rax, qword [0x6bb80ae0]
mov r14, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov dword [rax], 0x8a46fa15
mov rax, qword [0x6bb80aa0]
mov edx, dword [rax]
mov rax, qword [0x6bb80750]
mov dword [rax], edx
mov rax, qword [0x6bb81010]
mov dword [rax], 0x810679db
call r14
mov rax, qword [0x6bb80720]
mov rdi, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80800]
mov dword [rax], edx
mov rax, qword [0x6bb80d20]
xor edx, edx
mov dword [rax], 0x7e96133d
call rdi
mov rax, qword [0x6bb80630]
mov r11, qword [rsp + 0x60]
xor ecx, ecx
mov dword [rax], 0x9eda9428
call r11
mov ecx, 0xec96a716
call fcn.6bad9c90
mov rdx, qword [0x6bb80ea0]
xor ecx, ecx
mov dword [rdx], eax
call r15
mov r15, qword [0x6bb80c80]
mov rax, qword [0x6bb80920]
xor ecx, ecx
mov edx, dword [r15]
mov dword [rax], edx
mov rax, qword [0x6bb81150]
mov dword [rax], 0x9759d0aa
mov rax, qword [0x6bb80ee0]
mov edx, dword [rax]
mov rax, qword [0x6bb811c0]
mov dword [rax], edx
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0x514f75b8
call fcn.6bad9c90
mov rdx, qword [0x6bb805e0]
mov r10, qword [rsp + 0x58]
lea rcx, str.Corrupti_ut_facere_rerum
mov dword [rdx], eax
mov rax, qword [0x6bb80590]
mov edx, dword [rax]
mov rax, qword [0x6bb80510]
mov dword [rax], edx
call r10
xor edx, edx
mov rbx, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call rbx
mov r8, qword [rsp + 0x50]
lea rcx, str.Natus_totam_odio_temporibus_similique
call r8
mov ecx, 0x800570ba
call fcn.6bad9c90
mov rdx, qword [0x6bb80730]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r13
mov rax, qword [0x6bb80fd0]
xor ecx, ecx
mov dword [rax], 0x16c76840
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov r9, qword [rsp + 0x48]
xor ecx, ecx
call r9
xor ecx, ecx
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call r14
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbp
mov rax, qword [0x6bb80f40]
xor ecx, ecx
mov dword [rax], 0x32fbc09d
mov rax, qword [0x6bb81080]
mov eax, dword [rax]
mov dword [r15], eax
mov rax, qword [0x6bb80520]
mov dword [rax], 0xa83ffe4f
mov rax, qword [0x6bb80d10]
mov edx, dword [rax]
mov rax, qword [0x6bb81210]
mov dword [rax], edx
mov rax, qword [0x6bb81040]
mov edx, dword [rax]
mov rax, qword [0x6bb80fe0]
mov dword [rax], edx
mov rax, qword [0x6bb80e10]
mov edx, dword [rax]
mov rax, qword [0x6bb80af0]
mov dword [rax], edx
xor edx, edx
call r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call r12
mov rax, qword [0x6bb80e30]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80e80]
mov dword [rax], edx
mov rax, qword [0x6bb807b0]
xor edx, edx
mov dword [rax], 0xf0f08c1e
call rbx
mov ecx, 0x5a638739
call fcn.6bad9c90
mov rdx, qword [0x6bb80dd0]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov rax, qword [0x6bb81130]
xor r8d, r8d
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80910]
mov dword [rax], edx
xor edx, edx
call rbp
mov rax, qword [0x6bb807d0]
xor ecx, ecx
mov dword [rax], 0x15161a8c
mov rax, qword [0x6bb811d0]
mov dword [rax], 0x8e878165
mov rax, qword [0x6bb80b40]
mov edx, dword [rax]
mov rax, qword [0x6bb809d0]
mov dword [rax], edx
xor edx, edx
call rdi
mov rax, qword [0x6bb80680]
mov dword [rax], 0xa028ce6e
mov rax, qword [0x6bb80d80]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb81050]
xor ecx, ecx
mov dword [rdx], eax
call rsi
mov rax, qword [0x6bb808c0]
mov ecx, 0xe8b3bdcc
mov edx, dword [rax]
mov rax, qword [0x6bb80830]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb80c90]
mov dword [rdx], eax
mov rax, qword [0x6bb80730]
mov dword [rax], 0xe90ee9de
mov rax, qword [0x6bb80500]
mov dword [rax], 0xdcfc7d1b
mov rax, qword [0x6bb80610]
mov dword [rax], 0x9549514d
mov rax, qword [0x6bb80540]
mov dword [rax], 0x685d711
mov rax, qword [0x6bb80b40]
mov dword [rax], 0xac8ead6f
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x58], rax
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x402b
jle 0x6bad09da
mov rax, qword [0x6bb805d0]
mov r14, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80a30]
mov dword [rax], edx
call r14
xor ecx, ecx
call r14
mov ecx, 0x983d709
call fcn.6bad9c90
mov r11, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
mov rsi, qword [0x6bb80530]
lea rdx, str.AimeeKeelingII
lea rcx, str.ProfLeraThompsonPhD
mov qword [rsp + 0x88], r11
mov dword [rsi], eax
call r11
mov rax, qword [0x6bb80890]
mov dword [rax], 0x7af259e2
mov rax, qword [0x6bb80e00]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80fd0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
xor edx, edx
mov qword [rsp + 0x40], rax
call rax
xor r9d, r9d
mov rsi, qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
mov r12, qword [0x6bb80d70]
xor edx, edx
xor ecx, ecx
lea r8, str.MissKaylinCassinMD
mov rbp, qword [sym.imp.KERNEL32.dll_OpenEventA]
mov dword [r12], 0xa46652fe
call rbp
mov rax, qword [0x6bb80f50]
mov rdi, qword [0x6bb80df0]
xor ecx, ecx
mov r15, qword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [rax]
mov dword [rdi], eax
call r15
mov rax, qword [0x6bb80cd0]
lea rcx, str.Beatae_quae_non_aliquam_nesciunt
mov dword [rax], 0x236fabac
mov rax, qword [sym.imp.KERNEL32.dll_lstrlenA]
mov qword [rsp + 0x70], rax
call rax
mov rbx, qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80d30]
mov rdi, qword [0x6bb80d90]
xor ecx, ecx
mov r13, qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov eax, dword [rax]
mov dword [rdi], eax
call r13
mov rax, qword [0x6bb805f0]
mov rdi, qword [0x6bb807c0]
mov eax, dword [rax]
mov dword [rdi], eax
mov rax, qword [0x6bb811e0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80fe0]
mov rdi, qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call rdi
mov rax, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
mov qword [rsp + 0x48], rax
call rax
mov rax, qword [0x6bb81160]
mov edx, dword [rax]
mov rax, qword [0x6bb80b50]
mov dword [rax], edx
mov rax, qword [0x6bb810b0]
mov ecx, dword [rax]
call fcn.6bad9c90
xor ecx, ecx
mov dword [r12], eax
mov rax, qword [0x6bb805e0]
mov dword [rax], 0x88f4dfb4
call r14
mov rax, qword [0x6bb80600]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80db0]
mov dword [rax], edx
mov rax, qword [0x6bb81040]
mov edx, dword [rax]
mov rax, qword [0x6bb80740]
mov dword [rax], edx
mov rax, qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor edx, edx
mov qword [rsp + 0x50], rax
call rax
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80af0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80520]
mov rdx, qword [0x6bb811d0]
mov dword [rcx], eax
mov rax, qword [0x6bb80e90]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
call rbx
mov rax, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
mov qword [rsp + 0x78], rax
call rax
mov rax, qword [0x6bb80800]
mov rcx, qword [0x6bb80910]
mov r12, qword [0x6bb80ac0]
mov r10, qword [sym.imp.KERNEL32.dll_SetCommMask]
mov eax, dword [rax]
mov qword [rsp + 0x80], r10
mov dword [rcx], eax
mov rax, qword [0x6bb80dc0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb806d0]
mov dword [rax], edx
mov rax, qword [0x6bb80e80]
mov dword [rax], 0xeac5f44b
mov rax, qword [0x6bb81080]
mov edx, dword [rax]
mov rax, qword [0x6bb80e20]
mov dword [rax], edx
mov eax, dword [r12]
mov rdx, qword [0x6bb80fb0]
mov dword [rdx], eax
xor edx, edx
call r10
xor edx, edx
xor ecx, ecx
call rdi
xor edx, edx
xor ecx, ecx
lea r8, str.Non_perspiciatis_ducimus_vitae_occaecati
call rbp
mov rax, qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x60], rax
call rax
mov rax, qword [0x6bb811e0]
mov rcx, qword [0x6bb81140]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
xor ecx, ecx
mov qword [rsp + 0x68], rax
call rax
lea r8, str.Facere_et_iste_ut_sint_eos_architecto_praesentium_mollitia
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call r13
mov rax, qword [0x6bb80af0]
mov ecx, 0xb404d01a
mov edx, dword [rax]
mov rax, qword [0x6bb80c60]
mov dword [rax], edx
call fcn.6bad9c90
mov rdx, qword [0x6bb81060]
mov ecx, 0x100748f9
mov dword [rdx], eax
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [r12], eax
xor ecx, ecx
mov r12, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb80ca0]
xor edx, edx
xor ecx, ecx
mov r10, qword [rsp + 0x80]
mov dword [rax], 0xd855f622
mov rax, qword [0x6bb80c70]
mov dword [rax], 0x81e7d8a9
call r10
mov rax, qword [0x6bb80790]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0xca5b4b16
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor ecx, ecx
call r14
mov rax, qword [0x6bb80b00]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rax], 0x75ac820f
mov dword [rsp + 0x20], 0
call r12
mov rax, qword [0x6bb811c0]
mov rcx, qword [0x6bb80df0]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb81060]
mov ecx, dword [rax]
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80ff0]
mov dword [rdx], eax
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
mov rax, qword [0x6bb80580]
mov ecx, 0xa3fae2c9
mov edx, dword [rax]
mov rax, qword [0x6bb80880]
mov dword [rax], edx
mov rax, qword [0x6bb80e10]
mov rdx, qword [0x6bb80d90]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80f40]
mov dword [rdx], eax
mov rax, qword [0x6bb80d60]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80d30]
mov rdx, qword [0x6bb81140]
mov dword [rcx], eax
mov rax, qword [0x6bb80cb0]
mov ecx, 0x9616a65b
mov dword [rax], 0x171479d0
mov rax, qword [0x6bb80d00]
mov dword [rax], 0xe18bb77c
mov rax, qword [0x6bb811d0]
mov eax, dword [rax]
mov dword [rdx], eax
call fcn.6bad9c90
mov rax, qword [0x6bb80f20]
xor edx, edx
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rax], 0x7393fee9
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x68]
call rax
mov r14, qword [0x6bb80e30]
xor r9d, r9d
xor r8d, r8d
mov rax, qword [0x6bb807d0]
xor ecx, ecx
mov edx, dword [r14]
mov dword [rax], edx
mov rax, qword [0x6bb80ab0]
xor edx, edx
mov dword [rax], 0x99cecbb3
mov dword [rsp + 0x20], 0
call r12
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call rsi
mov rax, qword [0x6bb80660]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811f0]
mov ecx, 0x71c4668
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80b20]
mov ecx, 0x27930bf1
mov dword [rdx], eax
mov rax, qword [0x6bb80fb0]
mov edx, dword [rax]
mov rax, qword [0x6bb80860]
mov dword [rax], edx
call fcn.6bad9c90
mov rcx, qword [str.7U5]
mov r10, qword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [rcx], eax
mov rax, qword [0x6bb807b0]
lea rcx, str.DonavonLueilwitz
mov qword [rsp + 0x80], r10
mov dword [rax], 0x8368140f
mov rax, qword [0x6bb80520]
mov edx, dword [rax]
mov rax, qword [0x6bb805b0]
mov dword [rax], edx
xor edx, edx
call r10
mov ecx, dword [r14]
call fcn.6bad9c90
mov rdx, qword [0x6bb80720]
mov ecx, 0xbaf571bb
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80890]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb808c0]
xor edx, edx
mov r14, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rax], 0xbc24f215
mov rax, qword [0x6bb80510]
mov dword [rax], 0xc61f058d
call r14
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [str.7U5]
xor ecx, ecx
mov dword [rax], 0x3fc830f9
call r15
mov ecx, 0x75cc4c0b
call fcn.6bad9c90
mov rcx, qword [0x6bb80910]
mov dword [rcx], eax
mov ecx, 0x3933bd54
call fcn.6bad9c90
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdx, qword [0x6bb80890]
mov dword [rdx], eax
xor edx, edx
mov dword [rsp + 0x20], 0
call r12
mov r10, qword [rsp + 0x80]
xor edx, edx
lea rcx, str.MsVanessaPacochaIII
call r10
xor ecx, ecx
call rbx
xor edx, edx
xor ecx, ecx
call rdi
mov ecx, 0xc439d96c
call fcn.6bad9c90
mov rcx, qword [0x6bb80e10]
mov dword [rcx], eax
mov rax, qword [0x6bb80a20]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81030]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
mov rax, qword [rsp + 0x78]
call rax
mov rax, qword [0x6bb80a50]
lea r8, str.RockyBlick
xor ecx, ecx
mov dword [rax], 0x1d2fb445
mov rax, qword [0x6bb81160]
mov dword [rax], 0x8354c056
mov rax, qword [0x6bb810d0]
mov edx, dword [rax]
mov rax, qword [0x6bb80fa0]
mov dword [rax], edx
mov rax, qword [0x6bb807a0]
mov edx, dword [rax]
mov rax, qword [0x6bb806e0]
mov dword [rax], edx
xor edx, edx
call rbp
xor ecx, ecx
mov rax, qword [rsp + 0x48]
call rax
xor ecx, ecx
call r15
lea rcx, str.AnneKoepp
mov rax, qword [rsp + 0x70]
call rax
xor ecx, ecx
call r13
mov rax, qword [0x6bb81020]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80d30]
xor ecx, ecx
mov r15, qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
mov dword [rdx], eax
call r15
mov rax, qword [0x6bb80d50]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80ca0]
mov r10, qword [rsp + 0x80]
xor edx, edx
mov dword [rcx], eax
lea rcx, str.Et_numquam_aut_aperiam_ea_et_laboriosam_voluptatem_quis_facilis_animi
call r10
mov r8, qword [0x6bb81190]
mov rax, qword [0x6bb809f0]
xor ecx, ecx
mov rdx, qword [0x6bb80e50]
mov dword [rax], 0x5a89243a
mov eax, dword [r8]
mov dword [rdx], eax
mov rax, qword [0x6bb80ee0]
xor edx, edx
mov dword [rax], 0x3fb9504a
mov rax, qword [rsp + 0x50]
call rax
mov rax, qword [0x6bb80940]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rcx, qword [0x6bb80e50]
mov dword [rcx], eax
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
xor ecx, ecx
call r13
mov r8, qword [0x6bb81190]
mov rdx, qword [0x6bb80530]
lea rcx, str.SincereKuhn
mov r11, qword [rsp + 0x88]
mov eax, dword [r8]
mov dword [rdx], eax
lea rdx, str.Voluptate_cumque_qui_accusamus_magni_earum_ut_quia_sed_autem
call r11
mov r13, qword [sym.imp.KERNEL32.dll_GetFileType]
xor ecx, ecx
call r13
mov ecx, 0x856d12b9
call fcn.6bad9c90
mov rcx, qword [0x6bb80dc0]
xor r9d, r9d
xor r8d, r8d
mov dword [rcx], eax
mov rax, qword [0x6bb805a0]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80b80]
mov dword [rax], edx
xor edx, edx
mov rax, qword [rsp + 0x60]
call rax
lea rcx, str.Error_doloribus_molestiae_eaque_dignissimos_dicta_unde_quo_ut_ab_eos
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x50]
call rax
mov ecx, 0xec0652d5
call fcn.6bad9c90
mov rdx, qword [0x6bb80650]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [rsp + 0x48]
call rax
mov rax, qword [0x6bb81100]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb80950]
mov dword [rax], edx
mov rax, qword [0x6bb80e10]
mov edx, dword [rax]
mov rax, qword [0x6bb80770]
mov dword [rax], edx
xor edx, edx
call rdi
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x40]
call rax
xor ecx, ecx
call rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r12
xor ecx, ecx
call r13
mov rax, qword [0x6bb80800]
xor ecx, ecx
mov edx, dword [rax]
mov rax, qword [0x6bb81210]
mov dword [rax], edx
mov rax, qword [rsp + 0x68]
call rax
lea r8, str.Qui_porro_assumenda_doloribus_deserunt_minus_ut_in_consequuntur_molestiae
xor edx, edx
xor ecx, ecx
call rbp
xor edx, edx
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80c80]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
xor edx, edx
mov dword [rax], 0xd14c49e6
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call rsi
xor edx, edx
xor ecx, ecx
call r14
mov rax, qword [0x6bb80cc0]
mov rsi, qword [0x6bb807c0]
xor ecx, ecx
mov dword [rax], 0xd3c8b30a
mov rax, qword [0x6bb80ad0]
mov eax, dword [rax]
mov dword [rsi], eax
call r13
xor ecx, ecx
call r15
xor ecx, ecx
call rbx
cmp qword [rsp + 0x58], 0
je 0x6bacfaef
mov rax, qword [0x6bb80f80]
cmp dword [rax], 0x561c
jle 0x6bad0f3c
mov rax, qword [0x6bb80fb0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rsi, qword [0x6bb81040]
lea rcx, str.DrAdrienWeber
mov dword [rsi], eax
mov rax, qword [0x6bb80fe0]
mov edx, dword [rax]
mov rax, qword [0x6bb80d40]
mov dword [rax], edx
mov rax, qword [0x6bb80ef0]
mov edx, dword [rax]
mov rax, qword [0x6bb80960]
mov dword [rax], edx
mov rax, qword [0x6bb80ab0]
mov dword [rax], 0x140dd349
mov rax, qword [0x6bb80910]
mov edx, dword [rax]
mov rax, qword [0x6bb811a0]
mov dword [rax], edx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea r8, str.Nisi_consectetur_voluptatum_distinctio_quis_aliquam_et
xor edx, edx
xor ecx, ecx
mov rsi, qword [sym.imp.KERNEL32.dll_OpenEventA]
call rsi
mov rax, qword [0x6bb809f0]
mov rdi, qword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
mov dword [rax], 0xf0241add
call rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EscapeCommFunction]
mov r13, qword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
lea rdx, str.Quia_a_molestiae_asperiores_amet_in_tempore_commodi_reiciendis_autem
lea rcx, str.KeshawnDAmoreDVM
call r13
xor r8d, r8d
mov rbp, qword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
xor ecx, ecx
call rbp
mov ecx, 0xdfca160
call fcn.6bad9c90
mov rdx, qword [0x6bb809c0]
mov ecx, 0x792227f9
mov dword [rdx], eax
call fcn.6bad9c90
mov rdx, qword [0x6bb80d90]
xor ecx, ecx
mov dword [rdx], eax
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov rax, qword [0x6bb80f60]
mov ecx, 0x149ae9da
mov dword [rax], 0x3c07e65
call fcn.6bad9c90
mov rdx, qword [0x6bb806d0]
mov r15, qword [sym.imp.KERNEL32.dll_FindNextStreamW]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov rax, qword [0x6bb80640]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80770]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r15
mov r11, qword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x48], r11
call r11
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov ecx, 0x10412a3f
call fcn.6bad9c90
mov rdx, qword [0x6bb81080]
mov dword [rdx], eax
mov rax, qword [0x6bb807c0]
mov dword [rax], 0xa8770079
mov rax, qword [0x6bb81140]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rbx, qword [0x6bb80d50]
xor edx, edx
xor ecx, ecx
mov r12, qword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [rbx], eax
call r12
mov rbx, qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor ecx, ecx
call rbx
mov r14, qword [sym.imp.KERNEL32.dll_SetEvent]
xor ecx, ecx
call r14
lea rdx, str.Officiis_numquam_quaerat_reprehenderit_sequi_sunt
lea rcx, str.Expedita_nostrum_et
call r13
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEndOfFile]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbp
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
mov rax, qword [0x6bb80600]
mov rdx, qword [0x6bb80670]
xor ecx, ecx
mov eax, dword [rax]
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb81210]
xor ecx, ecx
mov dword [rax], 0x19bcdbcc
mov rax, qword [0x6bb806c0]
mov edx, dword [rax]
mov rax, qword [0x6bb810d0]
mov dword [rax], edx
call r14
xor edx, edx
xor ecx, ecx
call r12
xor ecx, ecx
call rbx
mov r14, qword [sym.imp.KERNEL32.dll_FindClose]
xor ecx, ecx
call r14
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommBreak]
mov rax, qword [0x6bb80da0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80510]
xor ecx, ecx
mov dword [rdx], eax
call r14
xor ecx, ecx
call rbx
mov rax, qword [0x6bb80840]
xor edx, edx
xor ecx, ecx
lea r8, str.AlbinaCartwright
mov dword [rax], 0x6456ef7e
mov rax, qword [0x6bb80670]
mov dword [rax], 0xb2bd8f70
mov rax, qword [0x6bb808e0]
mov dword [rax], 0x32f55a2e
call rsi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
call qword [sym.imp.ADVAPI32.dll_ReadEventLogA]
xor edx, edx
xor ecx, ecx
call r15
lea r8, str.QuintonHackett
xor edx, edx
xor ecx, ecx
call rsi
mov ecx, 0x24bfff7c
call fcn.6bad9c90
mov rdx, qword [0x6bb81030]
mov rcx, qword [0x6bb80a60]
mov dword [rdx], eax
mov rax, qword [0x6bb808f0]
mov rdx, qword [0x6bb80f60]
mov eax, dword [rax]
mov dword [rcx], eax
mov rax, qword [0x6bb80b70]
mov ecx, 0x277706e6
mov eax, dword [rax]
mov dword [rdx], eax
mov rax, qword [0x6bb80ec0]
mov edx, dword [rax]
mov rax, qword [0x6bb80cc0]
mov dword [rax], edx
mov rax, qword [0x6bb80e70]
mov dword [rax], 0x309d019
call fcn.6bad9c90
mov rdx, qword [0x6bb80780]
xor ecx, ecx
mov dword [rdx], eax
call rdi
mov rdx, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea rcx, str.Doloribus_voluptatem_voluptatum_ut_sit_voluptas_nemo_blanditiis_et
mov qword [rsp + 0x40], rdx
call rdx
mov r15, qword [0x6bb80cd0]
mov rcx, qword [0x6bb807e0]
mov eax, dword [r15]
mov dword [rcx], eax
mov ecx, 0xac65dbb2
call fcn.6bad9c90
mov rdx, qword [0x6bb81040]
lea rcx, str.Modi_nulla_et_aspernatur_minima_minima
mov dword [rdx], eax
mov rax, qword [0x6bb81200]
mov rdx, qword [rsp + 0x40]
mov dword [rax], 0x897ca94c
call rdx
mov rax, qword [0x6bb80990]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80820]
mov dword [rdx], eax
mov rax, qword [0x6bb808b0]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb805e0]
xor r9d, r9d
xor r8d, r8d
mov dword [rdx], eax
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_NotifyChangeEventLog]
xor ecx, ecx
call r14
mov rax, qword [0x6bb805b0]
xor r8d, r8d
xor edx, edx
mov r14, qword [0x6bb80e80]
xor ecx, ecx
mov eax, dword [rax]
mov dword [r14], eax
call rbp
mov rax, qword [0x6bb807d0]
mov ecx, dword [r14]
mov dword [rax], 0x10269521
call fcn.6bad9c90
mov rcx, qword [0x6bb80a60]
mov dword [rcx], eax
xor ecx, ecx
call rdi
mov rax, qword [0x6bb80950]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb80600]
xor ecx, ecx
mov dword [rdx], eax
xor edx, edx
call r12
mov rax, qword [0x6bb80e70]
mov edx, dword [rax]
mov rax, qword [0x6bb81050]
mov dword [rax], edx
mov rax, qword [0x6bb80e30]
mov ecx, dword [rax]
call fcn.6bad9c90
mov ecx, 0xe66db0a2
mov dword [r15], eax
call fcn.6bad9c90
mov rdx, qword [str.eNl.h_Q]
mov dword [rdx], eax
mov rax, qword [0x6bb80c70]
mov ecx, dword [rax]
call fcn.6bad9c90
mov rdx, qword [0x6bb811f0]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80ff0]
mov dword [rax], 0xa0c28496
mov rax, qword [0x6bb81120]
mov edx, dword [rax]
mov rax, qword [0x6bb80d80]
mov dword [rax], edx
call rbx
lea rdx, str.Eos_in_non_vitae_aut_quisquam_perferendis_ducimus
lea rcx, str.MissAliceWisoky
call r13
xor ecx, ecx
call rbx
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call rbp
mov ecx, 0x255548dd
call fcn.6bad9c90
mov rdx, qword [0x6bb80b40]
xor ecx, ecx
mov dword [rdx], eax
mov rax, qword [0x6bb80d50]
mov dword [rax], 0x46f5f935
call rdi
mov r11, qword [rsp + 0x48]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call r11
mov rax, qword [0x6bb807e0]
xor ecx, ecx
mov dword [rax], 0x8508928b
call qword [sym.imp.ADVAPI32.dll_ImpersonateAnonymousToken]
lea r8, str.JosieBoyerSr
xor edx, edx
xor ecx, ecx
call rsi
mov rax, qword [0x6bb80860]
mov dword [rax], 0xe3036bdd
mov rax, qword [rsp + 0x58]
add rsp, 0x98
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret